def get_defender_indicator_type(self, indicator):
        """To convert sentinel indicator type to defender accepted indicator type."""
        # getting indicator type.
        __method_name = inspect.currentframe().f_code.co_name
        try:
            sentinel_indicator_pattern_type = indicator.get("properties", {}).get(
                "patternType", None
            )
            defender_indicator_pattern_type = None
            # if indicator type is url in sentinel then Url in defender.
            if sentinel_indicator_pattern_type == "url":
                defender_indicator_pattern_type = "Url"

            # if indicator type is domain-name in sentinel then DomainName in defender.
            elif sentinel_indicator_pattern_type == "domain-name":
                defender_indicator_pattern_type = "DomainName"

            elif (
                sentinel_indicator_pattern_type == "ipv4-addr"
                or sentinel_indicator_pattern_type == "ipv6-addr"
            ):
                defender_indicator_pattern_type = "IpAddress"

            # if indicator type is file in sentinel then FileMD5 or FileSha256 in defender.
            elif sentinel_indicator_pattern_type == "file":
                sentinel_indicator_pattern = indicator.get("properties", {}).get(
                    "pattern", None
                )
                if sentinel_indicator_pattern:
                    sentinel_file_pattern = sentinel_indicator_pattern.split("'")[1]
                    if sentinel_file_pattern == "MD5":
                        defender_indicator_pattern_type = "FileMd5"
                    elif sentinel_file_pattern == "SHA-256":
                        defender_indicator_pattern_type = "FileSha256"
                    else:
                        raise CofenseException()
                else:
                    raise CofenseException()
            else:
                raise CofenseException()
            return defender_indicator_pattern_type
        except CofenseException as error:
            applogger.error(
                "{}(method={}) : {} : Unknown indicator type from sentinel. "
                "Sentinel Indicator name : {}. Error : {}".format(
                    consts.LOGS_STARTS_WITH,
                    __method_name,
                    consts.SENTINEL_TO_DEFENDER,
                    indicator.get("properties", {}).get("displayName", None),
                    error,
                )
            )
            raise CofenseException()
To convert sentinel indicator type to defender accepted indicator type.
Solutions/CofenseTriage/Data Connectors/CofenseTriageDataConnector/IndicatorCreatorToDefender/sentinel_to_defender_mapping.py