IncidentAdditionalData interface

Package:

@azure/arm-securityinsight

Incident additional data property bag.

Properties

alertProductNames	List of product names of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.
alertsCount	The number of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.
bookmarksCount	The number of bookmarks in the incident NOTE: This property will not be serialized. It can only be populated by the server.
commentsCount	The number of comments in the incident NOTE: This property will not be serialized. It can only be populated by the server.
providerIncidentUrl	The provider incident url to the incident in Microsoft 365 Defender portal NOTE: This property will not be serialized. It can only be populated by the server.
tactics	The tactics associated with incident NOTE: This property will not be serialized. It can only be populated by the server.
techniques	The techniques associated with incident's tactics' NOTE: This property will not be serialized. It can only be populated by the server.

Property Details

alertProductNames

List of product names of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

alertProductNames?: string[]

Property Value

string[]

alertsCount

The number of alerts in the incident NOTE: This property will not be serialized. It can only be populated by the server.

alertsCount?: number

Property Value

number

bookmarksCount

The number of bookmarks in the incident NOTE: This property will not be serialized. It can only be populated by the server.

bookmarksCount?: number

Property Value

number

commentsCount

The number of comments in the incident NOTE: This property will not be serialized. It can only be populated by the server.

commentsCount?: number

Property Value

number

providerIncidentUrl

The provider incident url to the incident in Microsoft 365 Defender portal NOTE: This property will not be serialized. It can only be populated by the server.

providerIncidentUrl?: string

Property Value

string

tactics

The tactics associated with incident NOTE: This property will not be serialized. It can only be populated by the server.

tactics?: string[]

Property Value

string[]

techniques

The techniques associated with incident's tactics' NOTE: This property will not be serialized. It can only be populated by the server.

techniques?: string[]

Property Value

string[]