TriageSignalAssessment interface

Package:

azure-devops-extension-api

Raw provider assessment for one alert and Git ref.

Properties

alertId	Alert evaluated by the provider.
assessmentId	Provider-defined identifier for this assessment.
attackPath	Provider assessment of whether the alert participates in an attack path.
classification	Provider classification of the alert.
decisionEvidence	Evidence references and reason codes supporting the provider's decisions.
disposition	Provider-recommended disposition for the alert.
evaluatedAt	UTC timestamp at which the provider evaluated the alert.
gitRef	Canonical branch ref on which the alert was evaluated.
missingEvidence	Provider-defined JSON descriptions of evidence that was unavailable and may limit assessment confidence.
processingState	Provider state indicating whether assessment processing is complete.
providerExtensions	Provider-specific JSON that is preserved without interpretation.
severity	Provider severity assessment.
urgency	Provider-assessed urgency of acting on the alert.

Property Details

alertId

Alert evaluated by the provider.

alertId: number

Property Value

number

assessmentId

Provider-defined identifier for this assessment.

assessmentId: string

Property Value

string

attackPath

Provider assessment of whether the alert participates in an attack path.

attackPath: string

Property Value

string

classification

Provider classification of the alert.

classification: string

Property Value

string

decisionEvidence

Evidence references and reason codes supporting the provider's decisions.

decisionEvidence: TriageSignalDecisionEvidence[]

Property Value

TriageSignalDecisionEvidence[]

disposition

Provider-recommended disposition for the alert.

disposition: string

Property Value

string

evaluatedAt

UTC timestamp at which the provider evaluated the alert.

evaluatedAt: Date

Property Value

Date

gitRef

Canonical branch ref on which the alert was evaluated.

gitRef: string

Property Value

string

missingEvidence

Provider-defined JSON descriptions of evidence that was unavailable and may limit assessment confidence.

missingEvidence: any[]

Property Value

any[]

processingState

Provider state indicating whether assessment processing is complete.

processingState: string

Property Value

string

providerExtensions

Provider-specific JSON that is preserved without interpretation.

providerExtensions: any

Property Value

any

severity

Provider severity assessment.

severity: TriageSignalSeverity

Property Value

TriageSignalSeverity

urgency

Provider-assessed urgency of acting on the alert.

urgency: string

Property Value

string