Interface ThreatIntelligenceIndicatorModel

A bag of custom fields that should be part of the entity and will be presented to the user. NOTE: This property will not be serialized. It can only be populated by the server.

Confidence of threat intelligence entity

Created by

Created by reference of threat intelligence entity

Is threat intelligence entity defanged

Description of a threat intelligence entity

Display name of a threat intelligence entity

Extensions map

External ID of threat intelligence entity

External last updated time in UTC

External References

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. NOTE: This property will not be serialized. It can only be populated by the server.

Granular Markings

Indicator types of threat intelligence entities

Kill chain phases

Labels of threat intelligence entity

Language of threat intelligence entity

Last updated time in UTC

Modified by

Threat intelligence entity object marking references

Parsed patterns

Pattern of a threat intelligence entity

Pattern type of a threat intelligence entity

Pattern version of a threat intelligence entity

Is threat intelligence entity revoked

Source of a threat intelligence entity

List of tags

Threat types

Valid from

Valid until