Public/generated/Get-KriticalUtcmSentinelThreatIntelligenceIndicator.ps1
|
# Kritical.PS.UTCM | Microsoft Graph UTCM REST API toolkit # (c) 2026 Kritical Pty Ltd | https://kritical.net # Kritical brand banner is rendered at module load via Write-KriticalUtcmBanner. function Get-KriticalUtcmSentinelThreatIntelligenceIndicator { <# .SYNOPSIS Kritical.UTCM shim for M365DSC resource SentinelThreatIntelligenceIndicator. .DESCRIPTION Search-replace safe: callers that today invoke Get-M365DSCSentinelThreatIntelligenceIndicator -Credential $cred -TenantId $tid can rename to Get-KriticalUtcmSentinelThreatIntelligenceIndicator -Credential $cred -TenantId $tid with ZERO other edits. Parameter shape matches the M365DSC .schema.mof exactly. By default -PreferM365DscBehavior is true. Actual Graph dispatch is delegated to Invoke-KriticalUtcmM365DscSchemaBridge. Bridge maps resource → Graph endpoint per per-resource wave; where mapping is not yet shipped, bridge returns an object with Verdict='UNMAPPED'. .NOTES Workload: Other Param count: 21 #> [CmdletBinding()] param( # The display name of the indicator [Parameter(Mandatory)] [string]$DisplayName, # The name of the resource group. The name is case insensitive. [string]$SubscriptionId, # The name of the resource group. The name is case insensitive. [string]$ResourceGroupName, # The name of the workspace. [string]$WorkspaceName, # The unique id of the indicator. [string]$Id, # The name of the workspace. [string]$Description, # Pattern type of a threat intelligence entity [string]$PatternType, # Pattern of a threat intelligence entity [string]$Pattern, # Is threat intelligence entity revoked [string]$Revoked, # Valid from [string]$ValidFrom, # Valid until [string]$ValidUntil, # Source type. [string]$Source, # Confidence of threat intelligence entity [int]$Confidence, # Present ensures the instance exists, absent ensures it is removed. [ValidateSet('Absent','Present')] [string]$Ensure, # Credentials of the workload's Admin [string]$Credential, # Id of the Azure Active Directory application to authenticate with. [string]$ApplicationId, # Id of the Azure Active Directory tenant used for authentication. [string]$TenantId, # Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication. [string]$CertificateThumbprint, # Username can be made up to anything but password will be used for CertificatePassword [string]$CertificatePassword, # Path to certificate used in service principal usually a PFX file. [string]$CertificatePath, # Managed ID being used for authentication. [bool]$ManagedIdentity ) Invoke-KriticalUtcmM365DscSchemaBridge -ResourceName 'SentinelThreatIntelligenceIndicator' -Workload 'Other' -Verb 'Get' -CallerParams $PSBoundParameters } |