AutomationRulePropertyValuesCondition Class

AutomationRulePropertyValuesCondition.

Inheritance
AutomationRulePropertyValuesCondition

Constructor

AutomationRulePropertyValuesCondition(*, property_name: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.AutomationRulePropertyConditionSupportedProperty]] = None, operator: Optional[Union[str, azure.mgmt.securityinsight.models._security_insights_enums.AutomationRulePropertyConditionSupportedOperator]] = None, property_values: Optional[List[str]] = None, **kwargs)

Variables

property_name
str or AutomationRulePropertyConditionSupportedProperty

The property to evaluate in an automation rule property condition. Possible values include: "IncidentTitle", "IncidentDescription", "IncidentSeverity", "IncidentStatus", "IncidentRelatedAnalyticRuleIds", "IncidentTactics", "IncidentLabel", "IncidentProviderName", "AccountAadTenantId", "AccountAadUserId", "AccountName", "AccountNTDomain", "AccountPUID", "AccountSid", "AccountObjectGuid", "AccountUPNSuffix", "AlertProductNames", "AzureResourceResourceId", "AzureResourceSubscriptionId", "CloudApplicationAppId", "CloudApplicationAppName", "DNSDomainName", "FileDirectory", "FileName", "FileHashValue", "HostAzureID", "HostName", "HostNetBiosName", "HostNTDomain", "HostOSVersion", "IoTDeviceId", "IoTDeviceName", "IoTDeviceType", "IoTDeviceVendor", "IoTDeviceModel", "IoTDeviceOperatingSystem", "IPAddress", "MailboxDisplayName", "MailboxPrimaryAddress", "MailboxUPN", "MailMessageDeliveryAction", "MailMessageDeliveryLocation", "MailMessageRecipient", "MailMessageSenderIP", "MailMessageSubject", "MailMessageP1Sender", "MailMessageP2Sender", "MalwareCategory", "MalwareName", "ProcessCommandLine", "ProcessId", "RegistryKey", "RegistryValueData", "Url".

operator
str or AutomationRulePropertyConditionSupportedOperator

Possible values include: "Equals", "NotEquals", "Contains", "NotContains", "StartsWith", "NotStartsWith", "EndsWith", "NotEndsWith".

property_values
list[str]