你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站,请访问 https://docs.azure.cn。
Get-AzIotSecurityAnalytics
获取 IoT 安全分析
语法
Get-AzIotSecurityAnalytics
-ResourceGroupName <String>
-SolutionName <String>
[-Default]
[-DefaultProfile <IAzureContextContainer>]
[<CommonParameters>]
说明
Get-AzIotSecurityAnalytics cmdlet 返回特定 iot 安全解决方案的一组安全分析
示例
示例 1
Get-AzIotSecurityAnalytics -ResourceGroupName "MyResourceGroup" -SolutionName "MySolution" -Default
Id: "/subscriptions/XXXXXXXX-XXXX-XXXXX-XXXX-XXXXXXXXXXXX/resourceGroups/MyResourceGroup/providers/Microsoft.Security/iotSecuritySolutions/MySolution/analyticsModels/default"
Name: "default"
Type: "Microsoft.Security/IoTSecuritySolutionAnalyticsModel"
Metrics: {
High": 5
Medium: 200
Low: 102
}
UnhealthyDeviceCount: 1200
DevicesMetrics: [
{
Date: "2019-02-01T00:00:00Z"
DevicesMetrics: {
High: 3
Medium: 15
Low: 70
}
}
{
Date: "2019-02-02T00:00:00Z"
DevicesMetrics: {
High: 3
Medium: 45
Low: 65
}
}
]
TopAlertedDevices: [
{
DeviceId: "id1"
AlertsCount: 200
}
{
DeviceId": "id2"
AlertsCount": 170
}
{
DeviceId": "id3"
AlertsCount": 150
}
]
MostPrevalentDeviceAlerts: [
{
AlertDisplayName: "Custom Alert - number of device to cloud messages in AMQP protocol is not in the allowed range"
ReportedSeverity: "Low"
AlertsCount: 200
}
{
AlertDisplayName: "Custom Alert - execution of a process that is not allowed"
ReportedSeverity: "Medium"
AlertsCount: 170
}
{
AlertDisplayName": "Successful Bruteforce"
ReportedSeverity": "Low"
AlertsCount": 150
}
]
MostPrevalentDeviceRecommendations: [
{
RecommendationDisplayName: "Install the Azure Security of Things Agent"
ReportedSeverity: "Low"
DevicesCount: 200
}
{
RecommendationDisplayName: "High level permissions configured in Edge model twin for Edge module"
ReportedSeverity: "Low"
DevicesCount: 170
}
{
RrecommendationDisplayName: "Same Authentication Credentials used by multiple devices"
ReportedSeverity: "Medium"
DevicesCount: 150
}
]
}
}
获取存储库组“MyResourceGroup”中安全解决方案“MySolution”的聋人 IoT 安全分析
参数
-Default
如果存在,请获取默认分析集,否则获取所有分析集的列表。
类型: | SwitchParameter |
Position: | Named |
默认值: | None |
必需: | False |
接受管道输入: | False |
接受通配符: | False |
-DefaultProfile
用于与 Azure 通信的凭据、帐户、租户和订阅。
类型: | IAzureContextContainer |
别名: | AzContext, AzureRmContext, AzureCredential |
Position: | Named |
默认值: | None |
必需: | False |
接受管道输入: | False |
接受通配符: | False |
-ResourceGroupName
资源组名称。
类型: | String |
Position: | Named |
默认值: | None |
必需: | True |
接受管道输入: | False |
接受通配符: | False |
-SolutionName
解决方案名称
类型: | String |
Position: | Named |
默认值: | None |
必需: | True |
接受管道输入: | False |
接受通配符: | False |
输入
None