IncidentAdditionalData | @azure/arm-securityinsight

Incident additional data property bag.

Hierarchy

IncidentAdditionalData

Index

Properties

Optional alertProductNames

alertProductNames: string[]

List of product names of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

Optional alertsCount

alertsCount: undefined | number

The number of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

Optional bookmarksCount

bookmarksCount: undefined | number

The number of bookmarks in the incident NOTE: This property will not be serialized. It can only be populated by the server.

Optional commentsCount

commentsCount: undefined | number

The number of comments in the incident NOTE: This property will not be serialized. It can only be populated by the server.

Optional providerIncidentUrl

providerIncidentUrl: undefined | string

The provider incident url to the incident in Microsoft 365 Defender portal NOTE: This property will not be serialized. It can only be populated by the server.

Optional tactics

tactics: AttackTactic[]

The tactics associated with incident NOTE: This property will not be serialized. It can only be populated by the server.

Optional techniques

techniques: string[]

The techniques associated with incident's tactics' NOTE: This property will not be serialized. It can only be populated by the server.