Freigeben über


IncidentAdditionalData interface

Incident additional data property bag.

Properties

alertProductNames

List of product names of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

alertsCount

The number of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

bookmarksCount

The number of bookmarks in the incident NOTE: This property will not be serialized. It can only be populated by the server.

commentsCount

The number of comments in the incident NOTE: This property will not be serialized. It can only be populated by the server.

providerIncidentUrl

The provider incident url to the incident in Microsoft 365 Defender portal NOTE: This property will not be serialized. It can only be populated by the server.

tactics

The tactics associated with incident NOTE: This property will not be serialized. It can only be populated by the server.

techniques

The techniques associated with incident's tactics' NOTE: This property will not be serialized. It can only be populated by the server.

Property Details

alertProductNames

List of product names of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

alertProductNames?: string[]

Property Value

string[]

alertsCount

The number of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

alertsCount?: number

Property Value

number

bookmarksCount

The number of bookmarks in the incident NOTE: This property will not be serialized. It can only be populated by the server.

bookmarksCount?: number

Property Value

number

commentsCount

The number of comments in the incident NOTE: This property will not be serialized. It can only be populated by the server.

commentsCount?: number

Property Value

number

providerIncidentUrl

The provider incident url to the incident in Microsoft 365 Defender portal NOTE: This property will not be serialized. It can only be populated by the server.

providerIncidentUrl?: string

Property Value

string

tactics

The tactics associated with incident NOTE: This property will not be serialized. It can only be populated by the server.

tactics?: string[]

Property Value

string[]

techniques

The techniques associated with incident's tactics' NOTE: This property will not be serialized. It can only be populated by the server.

techniques?: string[]

Property Value

string[]