IncidentAdditionalData Class

Incident additional data property bag.

Variables are only populated by the server, and will be ignored when sending a request.

Inheritance

azure.mgmt.securityinsight._serialization.Model

IncidentAdditionalData

Constructor

IncidentAdditionalData(**kwargs)

Variables

Name	Description
alerts_count	int The number of alerts in the incident.
bookmarks_count	int The number of bookmarks in the incident.
comments_count	int The number of comments in the incident.
alert_product_names	list[str] List of product names of alerts in the incident.
tactics	list[str or AttackTactic] The tactics associated with incident.
techniques	list[str] The techniques associated with incident's tactics.
provider_incident_url	str The provider incident url to the incident in Microsoft 365 Defender portal.