Alert.Intent Property
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Gets the kill chain related intent behind the alert. For list of supported values, and explanations of Azure Security Center's supported kill chain intents. Possible values include: 'Unknown', 'PreAttack', 'InitialAccess', 'Persistence', 'PrivilegeEscalation', 'DefenseEvasion', 'CredentialAccess', 'Discovery', 'LateralMovement', 'Execution', 'Collection', 'Exfiltration', 'CommandAndControl', 'Impact', 'Probing', 'Exploitation'
[Newtonsoft.Json.JsonProperty(PropertyName="properties.intent")]
public string Intent { get; }
[<Newtonsoft.Json.JsonProperty(PropertyName="properties.intent")>]
member this.Intent : string
Public ReadOnly Property Intent As String
Property Value
- Attributes
-
Newtonsoft.Json.JsonPropertyAttribute