ArmSecurityInsightsModelFactory.ThreatIntelligenceIndicator Method

Definition

Initializes a new instance of ThreatIntelligenceIndicator.

public static Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceIndicator ThreatIntelligenceIndicator (Azure.Core.ResourceIdentifier id = default, string name = default, Azure.Core.ResourceType resourceType = default, Azure.ResourceManager.Models.SystemData systemData = default, System.Collections.Generic.IReadOnlyDictionary<string,BinaryData> data = default, Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceUserInfo createdBy = default, string source = default, DateTimeOffset? firstIngestedOn = default, DateTimeOffset? lastIngestedOn = default, Guid? ingestionRulesVersion = default, string lastUpdateMethod = default, Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceUserInfo lastModifiedBy = default, DateTimeOffset? lastUpdatedOn = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.RelationshipHint> relationshipHints = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.IndicatorObservablesItem> observables = default);
static member ThreatIntelligenceIndicator : Azure.Core.ResourceIdentifier * string * Azure.Core.ResourceType * Azure.ResourceManager.Models.SystemData * System.Collections.Generic.IReadOnlyDictionary<string, BinaryData> * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceUserInfo * string * Nullable<DateTimeOffset> * Nullable<DateTimeOffset> * Nullable<Guid> * string * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceUserInfo * Nullable<DateTimeOffset> * seq<Azure.ResourceManager.SecurityInsights.Models.RelationshipHint> * seq<Azure.ResourceManager.SecurityInsights.Models.IndicatorObservablesItem> -> Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceIndicator
Public Shared Function ThreatIntelligenceIndicator (Optional id As ResourceIdentifier = Nothing, Optional name As String = Nothing, Optional resourceType As ResourceType = Nothing, Optional systemData As SystemData = Nothing, Optional data As IReadOnlyDictionary(Of String, BinaryData) = Nothing, Optional createdBy As ThreatIntelligenceUserInfo = Nothing, Optional source As String = Nothing, Optional firstIngestedOn As Nullable(Of DateTimeOffset) = Nothing, Optional lastIngestedOn As Nullable(Of DateTimeOffset) = Nothing, Optional ingestionRulesVersion As Nullable(Of Guid) = Nothing, Optional lastUpdateMethod As String = Nothing, Optional lastModifiedBy As ThreatIntelligenceUserInfo = Nothing, Optional lastUpdatedOn As Nullable(Of DateTimeOffset) = Nothing, Optional relationshipHints As IEnumerable(Of RelationshipHint) = Nothing, Optional observables As IEnumerable(Of IndicatorObservablesItem) = Nothing) As ThreatIntelligenceIndicator

Parameters

id
ResourceIdentifier

The id.

name
String

The name.

resourceType
ResourceType

The resourceType.

systemData
SystemData

The systemData.

data
IReadOnlyDictionary<String,BinaryData>

The core STIX object that this TI object represents.

createdBy
ThreatIntelligenceUserInfo

The UserInfo of the user/entity which originally created this TI object.

source
String

The source name for this TI object.

firstIngestedOn
Nullable<DateTimeOffset>

The timestamp for the first time this object was ingested.

lastIngestedOn
Nullable<DateTimeOffset>

The timestamp for the last time this object was ingested.

ingestionRulesVersion
Nullable<Guid>

The ID of the rules version that was active when this TI object was last ingested.

lastUpdateMethod
String

The name of the method/application that initiated the last write to this TI object.

lastModifiedBy
ThreatIntelligenceUserInfo

The UserInfo of the user/entity which last modified this TI object.

lastUpdatedOn
Nullable<DateTimeOffset>

The timestamp for the last time this TI object was updated.

relationshipHints
IEnumerable<RelationshipHint>

A dictionary used to help follow relationships from this object to other STIX objects. The keys are field names from the STIX object (in the 'data' field), and the values are lists of sources that can be prepended to the object ID in order to efficiently locate the target TI object.

observables
IEnumerable<IndicatorObservablesItem>

The observables of this indicator.

Returns

A new ThreatIntelligenceIndicator instance for mocking.

Applies to