Incidents
Link to resource definition: Microsoft.SecurityInsights/incidents
| Default Path | Alias |
|---|---|
properties.additionalData |
Microsoft.SecurityInsights/incidents/additionalData |
properties.additionalData.alertProductNames |
Microsoft.SecurityInsights/incidents/additionalData.alertProductNames |
properties.additionalData.alertProductNames[*] |
Microsoft.SecurityInsights/incidents/additionalData.alertProductNames[*] |
properties.additionalData.alertsCount |
Microsoft.SecurityInsights/incidents/additionalData.alertsCount |
properties.additionalData.bookmarksCount |
Microsoft.SecurityInsights/incidents/additionalData.bookmarksCount |
properties.additionalData.commentsCount |
Microsoft.SecurityInsights/incidents/additionalData.commentsCount |
properties.additionalData.tactics |
Microsoft.SecurityInsights/incidents/additionalData.tactics |
properties.additionalData.tactics[*] |
Microsoft.SecurityInsights/incidents/additionalData.tactics[*] |
properties.classification |
Microsoft.SecurityInsights/incidents/classification |
properties.classificationComment |
Microsoft.SecurityInsights/incidents/classificationComment |
properties.classificationReason |
Microsoft.SecurityInsights/incidents/classificationReason |
properties.createdTimeUtc |
Microsoft.SecurityInsights/incidents/createdTimeUtc |
properties.description |
Microsoft.SecurityInsights/incidents/description |
properties.firstActivityTimeUtc |
Microsoft.SecurityInsights/incidents/firstActivityTimeUtc |
properties.incidentNumber |
Microsoft.SecurityInsights/incidents/incidentNumber |
properties.incidentUrl |
Microsoft.SecurityInsights/incidents/incidentUrl |
properties.labels |
Microsoft.SecurityInsights/incidents/labels |
properties.labels[*] |
Microsoft.SecurityInsights/incidents/labels[*] |
properties.labels[*].labelName |
Microsoft.SecurityInsights/incidents/labels[*].labelName |
properties.labels[*].labelType |
Microsoft.SecurityInsights/incidents/labels[*].labelType |
properties.lastActivityTimeUtc |
Microsoft.SecurityInsights/incidents/lastActivityTimeUtc |
properties.lastModifiedTimeUtc |
Microsoft.SecurityInsights/incidents/lastModifiedTimeUtc |
properties.owner |
Microsoft.SecurityInsights/incidents/owner |
properties.owner.assignedTo |
Microsoft.SecurityInsights/incidents/owner.assignedTo |
properties.owner.email |
Microsoft.SecurityInsights/incidents/owner.email |
properties.owner.objectId |
Microsoft.SecurityInsights/incidents/owner.objectId |
properties.owner.userPrincipalName |
Microsoft.SecurityInsights/incidents/owner.userPrincipalName |
properties.providerIncidentId |
Microsoft.SecurityInsights/incidents/providerIncidentId |
properties.providerName |
Microsoft.SecurityInsights/incidents/providerName |
properties.relatedAnalyticRuleIds |
Microsoft.SecurityInsights/incidents/relatedAnalyticRuleIds |
properties.relatedAnalyticRuleIds[*] |
Microsoft.SecurityInsights/incidents/relatedAnalyticRuleIds[*] |
properties.severity |
Microsoft.SecurityInsights/incidents/severity |
properties.status |
Microsoft.SecurityInsights/incidents/status |
properties.title |
Microsoft.SecurityInsights/incidents/title |