def pattern_type_mapping(self, indicator_threat_type):
        """To map threat type with patternType for microsoft sentinel indicator data."""
        threat_type = ""
        indicator_threat_type = indicator_threat_type.lower()
        if indicator_threat_type == "url":
            threat_type = "url"
        elif indicator_threat_type == "hostname":
            threat_type = "domain-name"
        elif indicator_threat_type == "sha256" or indicator_threat_type == "md5":
            threat_type = "file"
        return threat_type
To map threat type with patternType for microsoft sentinel indicator data.
Solutions/CofenseTriage/Data Connectors/CofenseTriageDataConnector/CofenseBasedIndicatorCreator/cofense_to_sentinel_mapping.py