TiTaxiiDataConnector Class

Data connector to pull Threat intelligence data from TAXII 2.0/2.1 server.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Inheritance

azure.mgmt.securityinsight.models._models_py3.DataConnector

TiTaxiiDataConnector

Constructor

TiTaxiiDataConnector(*, etag: Optional[str] = None, tenant_id: Optional[str] = None, workspace_id: Optional[str] = None, friendly_name: Optional[str] = None, taxii_server: Optional[str] = None, collection_id: Optional[str] = None, user_name: Optional[str] = None, password: Optional[str] = None, taxii_lookback_period: Optional[datetime.datetime] = None, polling_frequency: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.PollingFrequency]] = None, data_types: Optional[azure.mgmt.securityinsight.models._models_py3.TiTaxiiDataConnectorDataTypes] = None, **kwargs)

Variables

id

str

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.

name

str

The name of the resource.

type

str

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

system_data

SystemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

etag

str

Etag of the azure resource.

kind

str or DataConnectorKind

Required. The data connector kind.Constant filled by server. Possible values include: "AzureActiveDirectory", "AzureSecurityCenter", "MicrosoftCloudAppSecurity", "ThreatIntelligence", "ThreatIntelligenceTaxii", "Office365", "OfficeATP", "OfficeIRM", "Office365Project", "OfficePowerBI", "AmazonWebServicesCloudTrail", "AmazonWebServicesS3", "AzureAdvancedThreatProtection", "MicrosoftDefenderAdvancedThreatProtection", "Dynamics365", "MicrosoftThreatProtection", "MicrosoftThreatIntelligence", "GenericUI", "APIPolling", "IOT".

tenant_id

str

The tenant id to connect to, and get the data from.

workspace_id

str

The workspace id.

friendly_name

str

The friendly name for the TAXII server.

taxii_server

str

The API root for the TAXII server.

collection_id

str

The collection id of the TAXII server.

user_name

str

The userName for the TAXII server.

password

str

The password for the TAXII server.

taxii_lookback_period

datetime

The lookback period for the TAXII server.

polling_frequency

str or PollingFrequency

The polling frequency for the TAXII server. Possible values include: "OnceAMinute", "OnceAnHour", "OnceADay".

data_types

TiTaxiiDataConnectorDataTypes

The available data types for Threat Intelligence TAXII data connector.