Share via


Alert.Intent Property

Definition

Gets the kill chain related intent behind the alert. For list of supported values, and explanations of Azure Security Center's supported kill chain intents. Possible values include: 'Unknown', 'PreAttack', 'InitialAccess', 'Persistence', 'PrivilegeEscalation', 'DefenseEvasion', 'CredentialAccess', 'Discovery', 'LateralMovement', 'Execution', 'Collection', 'Exfiltration', 'CommandAndControl', 'Impact', 'Probing', 'Exploitation'

[Newtonsoft.Json.JsonProperty(PropertyName="properties.intent")]
public string Intent { get; }
[<Newtonsoft.Json.JsonProperty(PropertyName="properties.intent")>]
member this.Intent : string
Public ReadOnly Property Intent As String

Property Value

Attributes
Newtonsoft.Json.JsonPropertyAttribute

Applies to