你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站,请访问 https://docs.azure.cn。
Incident Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Represents an incident in Azure Security Insights.
[System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IncidentTypeConverter))]
public class Incident : Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IIncident, Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Runtime.IValidates
[<System.ComponentModel.TypeConverter(typeof(Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IncidentTypeConverter))>]
type Incident = class
interface IIncident
interface IJsonSerializable
interface IResourceWithEtag
interface IResource
interface IValidates
Public Class Incident
Implements IIncident, IValidates
- Inheritance
-
Incident
- Attributes
- Implements
Constructors
Incident() |
Creates an new Incident instance. |
Properties
AdditionalDataAlertProductName |
List of product names of alerts in the incident |
AdditionalDataAlertsCount |
The number of alerts in the incident |
AdditionalDataBookmarksCount |
The number of bookmarks in the incident |
AdditionalDataCommentsCount |
The number of comments in the incident |
AdditionalDataTactic |
The tactics associated with incident |
Classification |
The reason the incident was closed |
ClassificationComment |
Describes the reason the incident was closed |
ClassificationReason |
The classification reason the incident was closed with |
CreatedTimeUtc |
The time the incident was created |
Description |
The description of the incident |
Etag |
Etag of the azure resource |
FirstActivityTimeUtc |
The time of the first activity in the incident |
Id |
Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName} |
Label |
List of labels relevant to this incident |
LastActivityTimeUtc |
The time of the last activity in the incident |
LastModifiedTimeUtc |
The last time the incident was updated |
Name |
The name of the resource |
Number |
A sequential number |
OwnerAssignedTo |
The name of the user the incident is assigned to. |
OwnerEmail |
The email of the user the incident is assigned to. |
OwnerObjectId |
The object id of the user the incident is assigned to. |
OwnerType |
The type of the owner the incident is assigned to. |
OwnerUserPrincipalName |
The user principal name of the user the incident is assigned to. |
ProviderIncidentId |
The incident ID assigned by the incident provider |
ProviderName |
The name of the source provider that generated the incident |
RelatedAnalyticRuleId |
List of resource ids of Analytic rules related to the incident |
Severity |
The severity of the incident |
Status |
The status of the incident |
SystemData |
Azure Resource Manager metadata containing createdBy and modifiedBy information. |
SystemDataCreatedAt |
The timestamp of resource creation (UTC). |
SystemDataCreatedBy |
The identity that created the resource. |
SystemDataCreatedByType |
The type of identity that created the resource. |
SystemDataLastModifiedAt |
The timestamp of resource last modification (UTC) |
SystemDataLastModifiedBy |
The identity that last modified the resource. |
SystemDataLastModifiedByType |
The type of identity that last modified the resource. |
TeamInformationDescription |
The description of the team |
TeamInformationName |
The name of the team |
TeamInformationPrimaryChannelUrl |
The primary channel URL of the team |
TeamInformationTeamCreationTimeUtc |
The time the team was created |
TeamInformationTeamId |
Team ID |
Title |
The title of the incident |
Type |
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts" |
Url |
The deep-link url to the incident in Azure portal |
Methods
DeserializeFromDictionary(IDictionary) |
Deserializes a IDictionary into an instance of Incident. |
DeserializeFromPSObject(PSObject) | |
FromJson(JsonNode) |
Deserializes a JsonNode into an instance of Microsoft.Azure.PowerShell.Cmdlets.SecurityInsights.Models.Api20210901Preview.IIncident. |
FromJsonString(String) |
Creates a new instance of Incident, deserializing the content from a json string. |
ToJson(JsonObject, SerializationMode) | |
ToJsonString() |
Serializes this instance to a json string. |
Validate(IEventListener) |
Validates that this object meets the validation criteria. |