{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "#/components/schemas/microsoft.graph.security.hostPair", "title": "microsoft.graph.security.hostPair", "allOf": [ { "$ref": "#/components/schemas/microsoft.graph.entity" }, { "title": "hostPair", "required": [ "@odata.type" ], "type": "object", "properties": { "firstSeenDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time when Microsoft Defender Threat Intelligence first observed the hostPair. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.", "format": "date-time", "nullable": true }, "lastSeenDateTime": { "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$", "type": "string", "description": "The date and time when Microsoft Defender Threat Intelligence last observed the hostPair. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.", "format": "date-time", "nullable": true }, "linkKind": { "type": "string", "description": "The reason that two hosts are identified as hostPair.", "nullable": true }, "childHost": { "$ref": "#/components/schemas/microsoft.graph.security.host" }, "parentHost": { "$ref": "#/components/schemas/microsoft.graph.security.host" }, "@odata.type": { "type": "string" } } } ], "x-ms-discriminator-value": "#microsoft.graph.security.hostPair" }