Link to resource definition: Microsoft.SecurityInsights/incidents
| Default Path | Alias |
|---|---|
properties.additionalData | Microsoft.SecurityInsights/incidents/additionalData |
properties.additionalData.alertProductNames | Microsoft.SecurityInsights/incidents/additionalData.alertProductNames |
properties.additionalData.alertProductNames[*] | Microsoft.SecurityInsights/incidents/additionalData.alertProductNames[*] |
properties.additionalData.alertsCount | Microsoft.SecurityInsights/incidents/additionalData.alertsCount |
properties.additionalData.bookmarksCount | Microsoft.SecurityInsights/incidents/additionalData.bookmarksCount |
properties.additionalData.commentsCount | Microsoft.SecurityInsights/incidents/additionalData.commentsCount |
properties.additionalData.tactics | Microsoft.SecurityInsights/incidents/additionalData.tactics |
properties.additionalData.tactics[*] | Microsoft.SecurityInsights/incidents/additionalData.tactics[*] |
properties.classification | Microsoft.SecurityInsights/incidents/classification |
properties.classificationComment | Microsoft.SecurityInsights/incidents/classificationComment |
properties.classificationReason | Microsoft.SecurityInsights/incidents/classificationReason |
properties.createdTimeUtc | Microsoft.SecurityInsights/incidents/createdTimeUtc |
properties.description | Microsoft.SecurityInsights/incidents/description |
properties.firstActivityTimeUtc | Microsoft.SecurityInsights/incidents/firstActivityTimeUtc |
properties.incidentNumber | Microsoft.SecurityInsights/incidents/incidentNumber |
properties.incidentUrl | Microsoft.SecurityInsights/incidents/incidentUrl |
properties.labels | Microsoft.SecurityInsights/incidents/labels |
properties.labels[*] | Microsoft.SecurityInsights/incidents/labels[*] |
properties.labels[*].labelName | Microsoft.SecurityInsights/incidents/labels[*].labelName |
properties.labels[*].labelType | Microsoft.SecurityInsights/incidents/labels[*].labelType |
properties.lastActivityTimeUtc | Microsoft.SecurityInsights/incidents/lastActivityTimeUtc |
properties.lastModifiedTimeUtc | Microsoft.SecurityInsights/incidents/lastModifiedTimeUtc |
properties.owner | Microsoft.SecurityInsights/incidents/owner |
properties.owner.assignedTo | Microsoft.SecurityInsights/incidents/owner.assignedTo |
properties.owner.email | Microsoft.SecurityInsights/incidents/owner.email |
properties.owner.objectId | Microsoft.SecurityInsights/incidents/owner.objectId |
properties.owner.userPrincipalName | Microsoft.SecurityInsights/incidents/owner.userPrincipalName |
properties.providerIncidentId | Microsoft.SecurityInsights/incidents/providerIncidentId |
properties.providerName | Microsoft.SecurityInsights/incidents/providerName |
properties.relatedAnalyticRuleIds | Microsoft.SecurityInsights/incidents/relatedAnalyticRuleIds |
properties.relatedAnalyticRuleIds[*] | Microsoft.SecurityInsights/incidents/relatedAnalyticRuleIds[*] |
properties.severity | Microsoft.SecurityInsights/incidents/severity |
properties.status | Microsoft.SecurityInsights/incidents/status |
properties.title | Microsoft.SecurityInsights/incidents/title |