Skip to content

Commit b1d5a2b

Browse files
committed
updates
1 parent 7406f89 commit b1d5a2b

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/sentinel/work-with-stix-objects-indicators.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ titleSuffix: Microsoft Sentinel
44
description: This article provides examples of how to incorporate STIX objects into queries to enhance threat hunting.
55
author: guywi-ms
66
ms.topic: how-to
7-
ms.date: 03/31/2025
7+
ms.date: 08/07/2025
88
ms.author: guywild
99
ms.reviewer: alsheheb
1010
appliesto:
@@ -106,9 +106,9 @@ SourceRelationships
106106
| project ActorName, PlusStixTypes, ObservableValue, importantfield, Tags, feedSource
107107
```
108108

109-
## Migrate existing queries to the new ThreatIntelObjects schema
109+
## Migrate existing queries to the new ThreatIntelIndicators schema
110110

111-
This example shows how to migrate existing queries from the legacy `ThreatIntelligenceIndicator` table to the new `ThreatIntelObjects` schema. The query uses the `extend` operator to recreate legacy columns based on the `ObservableKey` and `ObservableValue` columns in the new table.
111+
This example shows how to migrate existing queries from the legacy `ThreatIntelligenceIndicator` table to the new `ThreatIntelIndicators` schema. The query uses the `extend` operator to recreate legacy columns based on the `ObservableKey` and `ObservableValue` columns in the new table.
112112

113113
```Kusto
114114
ThreatIntelIndicators

0 commit comments

Comments
 (0)