你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站,请访问 https://docs.azure.cn

Incident Class

Definition

Represents an incident in Azure Security Insights.

[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IncidentTypeConverter))]
public class Incident : Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IIncident, Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Runtime.IValidates
[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IncidentTypeConverter))>]
type Incident = class
    interface IIncident
    interface IJsonSerializable
    interface IResourceWithEtag
    interface IResource
    interface IValidates
Public Class Incident
Implements IIncident, IValidates
Inheritance
Incident
Attributes
Implements

Constructors

Incident()

Creates an new Incident instance.

Properties

AdditionalDataAlertProductName

List of product names of alerts in the incident

AdditionalDataAlertsCount

The number of alerts in the incident

AdditionalDataBookmarksCount

The number of bookmarks in the incident

AdditionalDataCommentsCount

The number of comments in the incident

AdditionalDataTactic

The tactics associated with incident

Classification

The reason the incident was closed

ClassificationComment

Describes the reason the incident was closed

ClassificationReason

The classification reason the incident was closed with

CreatedTimeUtc

The time the incident was created

Description

The description of the incident

Etag

Etag of the azure resource

FirstActivityTimeUtc

The time of the first activity in the incident

Id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

Label

List of labels relevant to this incident

LastActivityTimeUtc

The time of the last activity in the incident

LastModifiedTimeUtc

The last time the incident was updated

Name

The name of the resource

Number

A sequential number

OwnerAssignedTo

The name of the user the incident is assigned to.

OwnerEmail

The email of the user the incident is assigned to.

OwnerObjectId

The object id of the user the incident is assigned to.

OwnerType

The type of the owner the incident is assigned to.

OwnerUserPrincipalName

The user principal name of the user the incident is assigned to.

ProviderIncidentId

The incident ID assigned by the incident provider

ProviderName

The name of the source provider that generated the incident

RelatedAnalyticRuleId

List of resource ids of Analytic rules related to the incident

Severity

The severity of the incident

Status

The status of the incident

SystemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

SystemDataCreatedAt

The timestamp of resource creation (UTC).

SystemDataCreatedBy

The identity that created the resource.

SystemDataCreatedByType

The type of identity that created the resource.

SystemDataLastModifiedAt

The timestamp of resource last modification (UTC)

SystemDataLastModifiedBy

The identity that last modified the resource.

SystemDataLastModifiedByType

The type of identity that last modified the resource.

TeamInformationDescription

The description of the team

TeamInformationName

The name of the team

TeamInformationPrimaryChannelUrl

The primary channel URL of the team

TeamInformationTeamCreationTimeUtc

The time the team was created

TeamInformationTeamId

Team ID

Title

The title of the incident

Type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Url

The deep-link url to the incident in Azure portal

Methods

DeserializeFromDictionary(IDictionary)

Deserializes a IDictionary into an instance of Incident.

DeserializeFromPSObject(PSObject)

Deserializes a PSObject into an instance of Incident.

FromJson(JsonNode)

Deserializes a JsonNode into an instance of Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IIncident.

FromJsonString(String)

Creates a new instance of Incident, deserializing the content from a json string.

ToJson(JsonObject, SerializationMode)

Serializes this instance of Incident into a JsonNode.

ToJsonString()

Serializes this instance to a json string.

Validate(IEventListener)

Validates that this object meets the validation criteria.

Applies to