Hunt interface

Represents a Hunt in Azure Security Insights.

Extends

Properties

attackTactics

A list of mitre attack tactics the hunt is associated with

attackTechniques

A list of a mitre attack techniques the hunt is associated with

description

The description of the hunt

displayName

The display name of the hunt

etag

Etag of the azure resource

hypothesisStatus

The hypothesis status of the hunt.

labels

List of labels relevant to this hunt

owner

Describes a user that the hunt is assigned to

status

The status of the hunt.

Inherited Properties

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

name

The name of the resource

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Property Details

attackTactics

A list of mitre attack tactics the hunt is associated with

attackTactics?: string[]

Property Value

string[]

attackTechniques

A list of a mitre attack techniques the hunt is associated with

attackTechniques?: string[]

Property Value

string[]

description

The description of the hunt

description?: string

Property Value

string

displayName

The display name of the hunt

displayName?: string

Property Value

string

etag

Etag of the azure resource

etag?: string

Property Value

string

hypothesisStatus

The hypothesis status of the hunt.

hypothesisStatus?: string

Property Value

string

labels

List of labels relevant to this hunt

labels?: string[]

Property Value

string[]

owner

Describes a user that the hunt is assigned to

owner?: HuntOwner

Property Value

status

The status of the hunt.

status?: string

Property Value

string

Inherited Property Details

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

id?: string

Property Value

string

Inherited From ProxyResource.id

name

The name of the resource

name?: string

Property Value

string

Inherited From ProxyResource.name

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

systemData?: SystemData

Property Value

Inherited From ProxyResource.systemData

type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

type?: string

Property Value

string

Inherited From ProxyResource.type