OperationalInsightsWorkspaceSecurityInsightsResource.QueryThreatIntelligencesAsync Method

Definition

Gets all TI objects for the workspace.

  • Request Path: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/{tiType}/query
  • Operation Id: ThreatIntelligence_Query
  • Default Api Version: 2024-01-01-preview
public virtual Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject> QueryThreatIntelligencesAsync (Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceType tiType, Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceQuery query = default, System.Threading.CancellationToken cancellationToken = default);
abstract member QueryThreatIntelligencesAsync : Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceType * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceQuery * System.Threading.CancellationToken -> Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject>
override this.QueryThreatIntelligencesAsync : Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceType * Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceQuery * System.Threading.CancellationToken -> Azure.AsyncPageable<Azure.ResourceManager.SecurityInsights.Models.ThreatIntelligenceObject>
Public Overridable Function QueryThreatIntelligencesAsync (tiType As ThreatIntelligenceType, Optional query As ThreatIntelligenceQuery = Nothing, Optional cancellationToken As CancellationToken = Nothing) As AsyncPageable(Of ThreatIntelligenceObject)

Parameters

tiType
ThreatIntelligenceType

TI type.

query
ThreatIntelligenceQuery

The query to run on the TI objects in the workspace.

cancellationToken
CancellationToken

The cancellation token to use.

Returns

An async collection of ThreatIntelligenceObject that may take multiple service requests to iterate over.

Applies to