Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5vcGVyYXRpb25hbGluc2lnaHRzL3dvcmtzcGFjZXMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5zZWN1cml0eWluc2lnaHRzL3RocmVhdGludGVsbGlnZW5jZS9tYWluL2luZGljYXRvcnM=/2022-06-01-preview.xml (190 lines of code) (raw):
<?xml version='1.0' encoding='utf-8'?>
<CodeGen plane="mgmt-plane">
<resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/threatintelligence/main/indicators" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvdGhyZWF0SW50ZWxsaWdlbmNlL21haW4vaW5kaWNhdG9ycw==/V/MjAyMi0wNi0wMS1wcmV2aWV3"/>
<commandGroup name="sentinel threat-indicator">
<command name="list" version="2022-06-01-preview">
<resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/threatintelligence/main/indicators" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvdGhyZWF0SW50ZWxsaWdlbmNlL21haW4vaW5kaWNhdG9ycw==/V/MjAyMi0wNi0wMS1wcmV2aWV3"/>
<argGroup name="">
<arg type="ResourceGroupName" var="$Path.resourceGroupName" options="resource-group g" required="True"/>
<arg type="SubscriptionId" var="$Path.subscriptionId" options="subscription" required="True"/>
<arg type="string" var="$Path.workspaceName" options="workspace-name w" required="True" stage="Experimental">
<help short="The name of the workspace."/>
<format maxLength="90" minLength="1"/>
</arg>
<arg type="string" var="$Query.filter" options="filter">
<help short="Filters the results, based on a Boolean condition. Optional."/>
</arg>
<arg type="string" var="$Query.orderby" options="orderby">
<help short="Sorts the results. Optional."/>
</arg>
<arg type="string" var="$Query.skipToken" options="skip-token">
<help short="Skiptoken is only used if a previous operation returned a partial result. If a previous response contains a nextLink element, the value of the nextLink element will include a skiptoken parameter that specifies a starting point to use for subsequent calls. Optional."/>
</arg>
<arg type="integer32" var="$Query.top" options="top">
<help short="Returns only the first n results. Optional."/>
</arg>
</argGroup>
<operation operationId="ThreatIntelligenceIndicators_List">
<http path="/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators">
<request method="get">
<path>
<param type="string" name="resourceGroupName" arg="$Path.resourceGroupName" required="True">
<format maxLength="90" minLength="1"/>
</param>
<param type="string" name="subscriptionId" arg="$Path.subscriptionId" required="True">
<format minLength="1"/>
</param>
<param type="string" name="workspaceName" arg="$Path.workspaceName" required="True">
<format maxLength="90" minLength="1"/>
</param>
</path>
<query>
<param type="string" name="$filter" arg="$Query.filter"/>
<param type="string" name="$orderby" arg="$Query.orderby"/>
<param type="string" name="$skipToken" arg="$Query.skipToken"/>
<param type="integer32" name="$top" arg="$Query.top"/>
<const readOnly="True" const="True" type="string" name="api-version" required="True">
<default value=""2022-06-01-preview""/>
<format minLength="1"/>
</const>
</query>
</request>
<response statusCode="200">
<body>
<json var="$Instance">
<schema type="object">
<prop readOnly="True" type="string" name="nextLink"/>
<prop type="array<object>" name="value" required="True">
<item type="object">
<prop type="string" name="etag"/>
<prop readOnly="True" type="ResourceId" name="id">
<format template="/subscriptions/{}/resourceGroups/{}/providers/Microsoft.OperationalInsights/workspaces/{}/providers/Microsoft.SecurityInsights/threatIntelligence/main/indicators/{}"/>
</prop>
<prop type="string" name="kind" required="True">
<enum>
<item value=""indicator""/>
</enum>
</prop>
<prop readOnly="True" type="string" name="name"/>
<prop readOnly="True" type="object" name="systemData">
<prop readOnly="True" type="dateTime" name="createdAt"/>
<prop readOnly="True" type="string" name="createdBy"/>
<prop readOnly="True" type="string" name="createdByType">
<enum>
<item value=""Application""/>
<item value=""Key""/>
<item value=""ManagedIdentity""/>
<item value=""User""/>
</enum>
</prop>
<prop readOnly="True" type="dateTime" name="lastModifiedAt"/>
<prop readOnly="True" type="string" name="lastModifiedBy"/>
<prop readOnly="True" type="string" name="lastModifiedByType">
<enum>
<item value=""Application""/>
<item value=""Key""/>
<item value=""ManagedIdentity""/>
<item value=""User""/>
</enum>
</prop>
</prop>
<prop readOnly="True" type="string" name="type"/>
<discriminator property="kind" value="indicator">
<prop type="object" name="properties" clientFlatten="True">
<prop readOnly="True" type="object" name="additionalData">
<additionalProp readOnly="True"/>
</prop>
<prop type="integer32" name="confidence"/>
<prop type="string" name="created"/>
<prop type="string" name="createdByRef"/>
<prop type="boolean" name="defanged"/>
<prop type="string" name="description"/>
<prop type="string" name="displayName"/>
<prop type="string" name="externalId"/>
<prop type="string" name="externalLastUpdatedTimeUtc"/>
<prop type="array<object>" name="externalReferences">
<item type="object">
<prop type="string" name="description"/>
<prop type="string" name="externalId"/>
<prop type="object" name="hashes">
<additionalProp>
<item type="string"/>
</additionalProp>
</prop>
<prop type="string" name="sourceName"/>
<prop type="string" name="url"/>
</item>
</prop>
<prop readOnly="True" type="string" name="friendlyName"/>
<prop type="array<object>" name="granularMarkings">
<item type="object">
<prop type="string" name="language"/>
<prop type="integer32" name="markingRef"/>
<prop type="array<string>" name="selectors">
<item type="string"/>
</prop>
</item>
</prop>
<prop type="array<string>" name="indicatorTypes">
<item type="string"/>
</prop>
<prop type="array<object>" name="killChainPhases">
<item type="object">
<prop type="string" name="killChainName"/>
<prop type="string" name="phaseName"/>
</item>
</prop>
<prop type="array<string>" name="labels">
<item type="string"/>
</prop>
<prop type="string" name="language"/>
<prop type="string" name="lastUpdatedTimeUtc"/>
<prop type="string" name="modified"/>
<prop type="array<string>" name="objectMarkingRefs">
<item type="string"/>
</prop>
<prop type="array<object>" name="parsedPattern">
<item type="object">
<prop type="string" name="patternTypeKey"/>
<prop type="array<object>" name="patternTypeValues">
<item type="object">
<prop type="string" name="value"/>
<prop type="string" name="valueType"/>
</item>
</prop>
</item>
</prop>
<prop type="string" name="pattern"/>
<prop type="string" name="patternType"/>
<prop type="string" name="patternVersion"/>
<prop type="boolean" name="revoked"/>
<prop type="string" name="source"/>
<prop type="array<string>" name="threatIntelligenceTags">
<item type="string"/>
</prop>
<prop type="array<string>" name="threatTypes">
<item type="string"/>
</prop>
<prop type="string" name="validFrom"/>
<prop type="string" name="validUntil"/>
</prop>
</discriminator>
</item>
</prop>
</schema>
</json>
</body>
</response>
<response isError="True">
<body>
<json>
<schema type="@ODataV4Format"/>
</json>
</body>
</response>
</http>
</operation>
<output type="array" ref="$Instance.value" clientFlatten="True" nextLink="$Instance.nextLink"/>
</command>
</commandGroup>
</CodeGen>