Get Threat Intelligence Indicators List

description retrieve threat intelligence indicators from the microsoft graph security api for enhanced analysis and threat detection endpoint url /beta/security/tiindicators method get inputs parameters (object) url query parameters filter (string) use the filter query parameter to retrieve just a subset of a collection for guidance on using filter , see https //learn microsoft com/en us/graph/filter query parameter https //learn microsoft com/en us/graph/filter query parameter orderby (string) use the orderby query parameter to specify the sort order of the items returned from microsoft graph top (number) sets the page size of results output output parameters status code (number) reason (string) json body (object) @odata context (string) value (array) id (string) azuretenantid (string) action (string) additionalinformation (object) activitygroupnames (array) file name (string) – required file (string) – required confidence (object) description (string) diamondmodel (object) emailencoding (object) emaillanguage (object) emailrecipient (object) emailsenderaddress (object) emailsendername (object) emailsourcedomain (object) emailsourceipaddress (object) emailsubject (object) emailxmailer (object) expirationdatetime (string) externalid (object) filecompiledatetime (object) filecreateddatetime (object) filehashtype (string) filehashvalue (object) filemutexname (object) filename (object) filepacker (object) filepath (object) filesize (object) filetype (object) domainname (object) ingesteddatetime (string) isactive (boolean) killchain (array) file name (string) – required file (string) – required knownfalsepositives (object) lastreporteddatetime (object) malwarefamilynames (array) file name (string) – required file (string) – required networkcidrblock (object) networkdestinationasn (object) networkdestinationcidrblock (object) networkdestinationipv4 (object) networkdestinationipv6 (object) networkdestinationport (object) networkipv4 (string) networkipv6 (object) networkport (object) networkprotocol (object) networksourceasn (object) networksourcecidrblock (object) networksourceipv4 (object) networksourceipv6 (object) networksourceport (object) passiveonly (object) severity (number) tags (array) file name (string) – required file (string) – required targetproduct (string) threattype (object) tlplevel (object) url (object) useragent (object) vendorinformation (object) response headers header type cache control string transfer encoding string content type string content encoding string vary string strict transport security string request id string client request id string x ms ags diagnostic string odata version string date string