ArmSecurityInsightsModelFactory.SecurityInsightsAlert Method

Definition

Namespace:

Azure.ResourceManager.SecurityInsights.Models

Assembly:

Azure.ResourceManager.SecurityInsights.dll

Package:

Azure.ResourceManager.SecurityInsights v1.1.0

Source:

ArmSecurityInsightsModelFactory.cs

Initializes a new instance of SecurityInsightsAlert.

public static Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlert SecurityInsightsAlert (Azure.Core.ResourceIdentifier id = default, string name = default, Azure.Core.ResourceType resourceType = default, Azure.ResourceManager.Models.SystemData systemData = default, System.Collections.Generic.IReadOnlyDictionary<string,BinaryData> additionalData = default, string friendlyName = default, string alertDisplayName = default, string alertType = default, string compromisedEntity = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertConfidenceLevel? confidenceLevel = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertConfidenceReason> confidenceReasons = default, double? confidenceScore = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertConfidenceScoreStatus? confidenceScoreStatus = default, string description = default, DateTimeOffset? endOn = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsKillChainIntent? intent = default, string providerAlertId = default, DateTimeOffset? processingEndOn = default, string productComponentName = default, string productName = default, string productVersion = default, System.Collections.Generic.IEnumerable<string> remediationSteps = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertSeverity? severity = default, DateTimeOffset? startOn = default, Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertStatus? status = default, string systemAlertId = default, System.Collections.Generic.IEnumerable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAttackTactic> tactics = default, DateTimeOffset? alertGeneratedOn = default, string vendorName = default, string alertLink = default, System.Collections.Generic.IEnumerable<BinaryData> resourceIdentifiers = default);

static member SecurityInsightsAlert : Azure.Core.ResourceIdentifier * string * Azure.Core.ResourceType * Azure.ResourceManager.Models.SystemData * System.Collections.Generic.IReadOnlyDictionary<string, BinaryData> * string * string * string * string * Nullable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertConfidenceLevel> * seq<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertConfidenceReason> * Nullable<double> * Nullable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertConfidenceScoreStatus> * string * Nullable<DateTimeOffset> * Nullable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsKillChainIntent> * string * Nullable<DateTimeOffset> * string * string * string * seq<string> * Nullable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertSeverity> * Nullable<DateTimeOffset> * Nullable<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlertStatus> * string * seq<Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAttackTactic> * Nullable<DateTimeOffset> * string * string * seq<BinaryData> -> Azure.ResourceManager.SecurityInsights.Models.SecurityInsightsAlert

Public Shared Function SecurityInsightsAlert (Optional id As ResourceIdentifier = Nothing, Optional name As String = Nothing, Optional resourceType As ResourceType = Nothing, Optional systemData As SystemData = Nothing, Optional additionalData As IReadOnlyDictionary(Of String, BinaryData) = Nothing, Optional friendlyName As String = Nothing, Optional alertDisplayName As String = Nothing, Optional alertType As String = Nothing, Optional compromisedEntity As String = Nothing, Optional confidenceLevel As Nullable(Of SecurityInsightsAlertConfidenceLevel) = Nothing, Optional confidenceReasons As IEnumerable(Of SecurityInsightsAlertConfidenceReason) = Nothing, Optional confidenceScore As Nullable(Of Double) = Nothing, Optional confidenceScoreStatus As Nullable(Of SecurityInsightsAlertConfidenceScoreStatus) = Nothing, Optional description As String = Nothing, Optional endOn As Nullable(Of DateTimeOffset) = Nothing, Optional intent As Nullable(Of SecurityInsightsKillChainIntent) = Nothing, Optional providerAlertId As String = Nothing, Optional processingEndOn As Nullable(Of DateTimeOffset) = Nothing, Optional productComponentName As String = Nothing, Optional productName As String = Nothing, Optional productVersion As String = Nothing, Optional remediationSteps As IEnumerable(Of String) = Nothing, Optional severity As Nullable(Of SecurityInsightsAlertSeverity) = Nothing, Optional startOn As Nullable(Of DateTimeOffset) = Nothing, Optional status As Nullable(Of SecurityInsightsAlertStatus) = Nothing, Optional systemAlertId As String = Nothing, Optional tactics As IEnumerable(Of SecurityInsightsAttackTactic) = Nothing, Optional alertGeneratedOn As Nullable(Of DateTimeOffset) = Nothing, Optional vendorName As String = Nothing, Optional alertLink As String = Nothing, Optional resourceIdentifiers As IEnumerable(Of BinaryData) = Nothing) As SecurityInsightsAlert

Parameters

id

ResourceIdentifier

The id.

name

String

The name.

resourceType

ResourceType

The resourceType.

systemData

SystemData

The systemData.

additionalData

IReadOnlyDictionary<String,BinaryData>

A bag of custom fields that should be part of the entity and will be presented to the user.

friendlyName

String

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.

alertDisplayName

String

The display name of the alert.

alertType

String

The type name of the alert.

compromisedEntity

String

Display name of the main entity being reported on.

confidenceLevel

Nullable<SecurityInsightsAlertConfidenceLevel>

The confidence level of this alert.

confidenceReasons

IEnumerable<SecurityInsightsAlertConfidenceReason>

The confidence reasons.

confidenceScore

Nullable<Double>

The confidence score of the alert.

confidenceScoreStatus

Nullable<SecurityInsightsAlertConfidenceScoreStatus>

The confidence score calculation status, i.e. indicating if score calculation is pending for this alert, not applicable or final.

description

String

Alert description.

endOn

Nullable<DateTimeOffset>

The impact end time of the alert (the time of the last event contributing to the alert).

intent

Nullable<SecurityInsightsKillChainIntent>

Holds the alert intent stage(s) mapping for this alert.

providerAlertId

String

The identifier of the alert inside the product which generated the alert.

processingEndOn

Nullable<DateTimeOffset>

The time the alert was made available for consumption.

productComponentName

String

The name of a component inside the product which generated the alert.

productName

String

The name of the product which published this alert.

productVersion

String

The version of the product generating the alert.

remediationSteps

IEnumerable<String>

Manual action items to take to remediate the alert.

severity

Nullable<SecurityInsightsAlertSeverity>

The severity of the alert.

startOn

Nullable<DateTimeOffset>

The impact start time of the alert (the time of the first event contributing to the alert).

status

Nullable<SecurityInsightsAlertStatus>

The lifecycle status of the alert.

systemAlertId

String

Holds the product identifier of the alert for the product.

tactics

IEnumerable<SecurityInsightsAttackTactic>

The tactics of the alert.

alertGeneratedOn

Nullable<DateTimeOffset>

The time the alert was generated.

vendorName

String

The name of the vendor that raise the alert.

alertLink

String

The uri link of the alert.

resourceIdentifiers

IEnumerable<BinaryData>

The list of resource identifiers of the alert.

Returns

SecurityInsightsAlert

A new SecurityInsightsAlert instance for mocking.