AutomationRulePropertyValuesCondition Class
AutomationRulePropertyValuesCondition.
- Inheritance
-
AutomationRulePropertyValuesCondition
Constructor
AutomationRulePropertyValuesCondition(*, property_name: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.AutomationRulePropertyConditionSupportedProperty]] = None, operator: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.AutomationRulePropertyConditionSupportedOperator]] = None, property_values: Optional[List[str]] = None, **kwargs)
Variables
- property_name
- str or AutomationRulePropertyConditionSupportedProperty
The property to evaluate in an automation rule property condition. Possible values include: "IncidentTitle", "IncidentDescription", "IncidentSeverity", "IncidentStatus", "IncidentRelatedAnalyticRuleIds", "IncidentTactics", "IncidentLabel", "IncidentProviderName", "AccountAadTenantId", "AccountAadUserId", "AccountName", "AccountNTDomain", "AccountPUID", "AccountSid", "AccountObjectGuid", "AccountUPNSuffix", "AlertProductNames", "AzureResourceResourceId", "AzureResourceSubscriptionId", "CloudApplicationAppId", "CloudApplicationAppName", "DNSDomainName", "FileDirectory", "FileName", "FileHashValue", "HostAzureID", "HostName", "HostNetBiosName", "HostNTDomain", "HostOSVersion", "IoTDeviceId", "IoTDeviceName", "IoTDeviceType", "IoTDeviceVendor", "IoTDeviceModel", "IoTDeviceOperatingSystem", "IPAddress", "MailboxDisplayName", "MailboxPrimaryAddress", "MailboxUPN", "MailMessageDeliveryAction", "MailMessageDeliveryLocation", "MailMessageRecipient", "MailMessageSenderIP", "MailMessageSubject", "MailMessageP1Sender", "MailMessageP2Sender", "MalwareCategory", "MalwareName", "ProcessCommandLine", "ProcessId", "RegistryKey", "RegistryValueData", "Url".
- operator
- str or AutomationRulePropertyConditionSupportedOperator
Possible values include: "Equals", "NotEquals", "Contains", "NotContains", "StartsWith", "NotStartsWith", "EndsWith", "NotEndsWith".
Feedback
Submit and view feedback for