IncidentAdditionalData Class

Incident additional data property bag.

Variables are only populated by the server, and will be ignored when sending a request.

Inheritance

Model

IncidentAdditionalData

Constructor

IncidentAdditionalData(**kwargs)

Variables

alerts_count

int

The number of alerts in the incident.

bookmarks_count

int

The number of bookmarks in the incident.

comments_count

int

The number of comments in the incident.

alert_product_names

list[str]

List of product names of alerts in the incident.

provider_incident_url

str

The provider incident url to the incident in Microsoft 365 Defender portal.

tactics

list[str or AttackTactic]

The tactics associated with incident.

techniques

list[str]

The techniques associated with incident's tactics'.