az sentinel threat-indicator query

Query threat intelligence indicators as per filtering criteria. Azure CLI extensions reference

Options

14 in the Azure CLI extensions reference

--idsIds of threat intelligence indicators

--include-disabledParameter to include/exclude disabled indicators.

--keywordsKeywords for searching threat intelligence indicators

--max-confidenceMaximum confidence.

--max-valid-untilEnd time for ValidUntil filter.

--min-confidenceMinimum confidence.

--min-valid-untilStart time for ValidUntil filter.

--page-sizePage size

--pattern-typesPattern types

--skip-tokenSkip token.

--sort-byColumns to sort by and sorting order

--sourcesSources of threat intelligence indicators

--threat-typesThreat types of threat intelligence indicators

--workspace-name, -wThe name of the workspace.