Edit

articleIndicator resource type

  • Article

Namespace: microsoft.graph.security

Note

The Microsoft Graph API for Microsoft Defender Threat Intelligence requires an active Defender Threat Intelligence Portal license and API add-on license for the tenant.

Represents a resource that communicates indicators of threat or compromise related to the contents of an article.

The relationship from an articleIndicator to an artifact provides the means for threat intelligence API users to further evaluate details about reported indicator.

Inherits from indicator.

Methods

Method Return type Description
Get articleIndicator microsoft.graph.security.articleIndicator Read the properties and relationships of a articleIndicator object.

Properties

Property Type Description
id String The system-generated ID for the articleIndicator. Inherited from microsoft.graph.security.indicator.
source microsoft.graph.security.indicatorSource Communicates where this articleIndicator originated. The possible values are: microsoft, osint, public, unknownFutureValue. Inherited from microsoft.graph.security.indicator.

Relationships

Relationship Type Description
artifact microsoft.graph.security.artifact The artifact that is reported in this articleIndicator. Inherited from microsoft.graph.security.indicator.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.articleIndicator",
  "id": "String (identifier)",
  "source": "String"
}