There is a command group 'az_sentinel_threat indicator'. This group of commands could 'manage threat intelligence indicator with sentinel'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_sentinel_threat indicator_create'.The syntax is: az sentinel threat-indicator create --resource-group
                                    --workspace-name
                                    [--confidence]
                                    [--created]
                                    [--created-by-ref]
                                    [--defanged {0, 1, f, false, n, no, t, true, y, yes}]
                                    [--description]
                                    [--display-name]
                                    [--etag]
                                    [--external-id]
                                    [--external-references]
                                    [--external-updated-time]
                                    [--granular-markings]
                                    [--indicator-types]
                                    [--kill-chain-phases]
                                    [--labels]
                                    [--language]
                                    [--last-updated-time]
                                    [--modified]
                                    [--object-marking-refs]
                                    [--parsed-pattern]
                                    [--pattern]
                                    [--pattern-type]
                                    [--pattern-version]
                                    [--revoked {0, 1, f, false, n, no, t, true, y, yes}]
                                    [--source]
                                    [--threat-tags]
                                    [--threat-types]
                                    [--valid-from]
                                    [--valid-until]. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--workspace-name -w' is required. It is used to the name of the workspace.. The parameter '--confidence' is optional. confidence of threat intelligence entity.. The parameter '--created' is optional. created by.. The parameter '--created-by-ref' is optional. created by reference of threat intelligence entity.. The parameter '--defanged' is optional. is threat intelligence entity defanged.. The parameter '--description' is optional. description of a threat intelligence entity.. The parameter '--display-name' is optional. display name of a threat intelligence entity.. The parameter '--etag' is optional. etag of the azure resource.. The parameter '--external-id' is optional. external id of threat intelligence entity.. The parameter '--external-references' is optional. external references  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--external-updated-time' is optional. external last updated time in utc.. The parameter '--granular-markings' is optional. granular markings  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--indicator-types' is optional. indicator types of threat intelligence entities  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--kill-chain-phases' is optional. kill chain phases  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--labels' is optional. labels  of threat intelligence entity  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--language' is optional. language of threat intelligence entity.. The parameter '--last-updated-time' is optional. last updated time in utc.. The parameter '--modified' is optional. modified by.. The parameter '--object-marking-refs' is optional. threat intelligence entity object marking references  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--parsed-pattern' is optional. parsed patterns  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--pattern' is optional. pattern of a threat intelligence entity.. The parameter '--pattern-type' is optional. pattern type of a threat intelligence entity.. The parameter '--pattern-version' is optional. pattern version of a threat intelligence entity.. The parameter '--revoked' is optional. is threat intelligence entity revoked.. The parameter '--source' is optional. source of a threat intelligence entity.. The parameter '--threat-tags' is optional. list of tags  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--threat-types' is optional. threat types  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--valid-from' is optional. valid from.. The parameter '--valid-until' is optional. valid until.. 