az sentinel threat-indicator create

Create a new threat intelligence indicator. Azure CLI extensions reference

Options

29 in the Azure CLI extensions reference

Show its 29 options

--confidenceConfidence of threat intelligence entity

--created-by-refCreated by reference of threat intelligence entity

--createdCreated by

--defangedIs threat intelligence entity defanged

--descriptionDescription of a threat intelligence entity

--display-nameDisplay name of a threat intelligence entity

--etagEtag of the azure resource

--external-idExternal ID of threat intelligence entity

--external-referencesExternal References

--external-updated-timeExternal last updated time in UTC

--granular-markingsGranular Markings

--indicator-typesIndicator types of threat intelligence entities

--kill-chain-phasesKill chain phases

--labelsLabels of threat intelligence entity

--languageLanguage of threat intelligence entity

--last-updated-timeLast updated time in UTC

--modifiedModified by

--object-marking-refsThreat intelligence entity object marking references

--parsed-patternParsed patterns

--pattern-typePattern type of a threat intelligence entity

--pattern-versionPattern version of a threat intelligence entity

--patternPattern of a threat intelligence entity

--revokedIs threat intelligence entity revoked

--sourceSource of a threat intelligence entity

--threat-tagsList of tags

--threat-typesThreat types

--valid-fromValid from

--valid-untilValid until

--workspace-name, -wThe name of the workspace.