IoTSecurityAggregatedAlert interface

Security Solution Aggregated Alert information

Extends

Properties

actionTaken

IoT Security solution alert response. NOTE: This property will not be serialized. It can only be populated by the server.

aggregatedDateUtc

Date of detection. NOTE: This property will not be serialized. It can only be populated by the server.

alertDisplayName

Display name of the alert type. NOTE: This property will not be serialized. It can only be populated by the server.

alertType

Name of the alert type. NOTE: This property will not be serialized. It can only be populated by the server.

count

Number of alerts occurrences within the aggregated time window. NOTE: This property will not be serialized. It can only be populated by the server.

description

Description of the suspected vulnerability and meaning. NOTE: This property will not be serialized. It can only be populated by the server.

effectedResourceType

Azure resource ID of the resource that received the alerts. NOTE: This property will not be serialized. It can only be populated by the server.

logAnalyticsQuery

Log analytics query for getting the list of affected devices/alerts. NOTE: This property will not be serialized. It can only be populated by the server.

remediationSteps

Recommended steps for remediation. NOTE: This property will not be serialized. It can only be populated by the server.

reportedSeverity

Assessed alert severity. NOTE: This property will not be serialized. It can only be populated by the server.

systemSource

The type of the alerted resource (Azure, Non-Azure). NOTE: This property will not be serialized. It can only be populated by the server.

topDevicesList

10 devices with the highest number of occurrences of this alert type, on this day. NOTE: This property will not be serialized. It can only be populated by the server.

vendorName

Name of the organization that raised the alert. NOTE: This property will not be serialized. It can only be populated by the server.

Inherited Properties

id

Resource Id NOTE: This property will not be serialized. It can only be populated by the server.

name

Resource name NOTE: This property will not be serialized. It can only be populated by the server.

tags

Resource tags

type

Resource type NOTE: This property will not be serialized. It can only be populated by the server.

Property Details

actionTaken

IoT Security solution alert response. NOTE: This property will not be serialized. It can only be populated by the server.

actionTaken?: string

Property Value

string

aggregatedDateUtc

Date of detection. NOTE: This property will not be serialized. It can only be populated by the server.

aggregatedDateUtc?: Date

Property Value

Date

alertDisplayName

Display name of the alert type. NOTE: This property will not be serialized. It can only be populated by the server.

alertDisplayName?: string

Property Value

string

alertType

Name of the alert type. NOTE: This property will not be serialized. It can only be populated by the server.

alertType?: string

Property Value

string

count

Number of alerts occurrences within the aggregated time window. NOTE: This property will not be serialized. It can only be populated by the server.

count?: number

Property Value

number

description

Description of the suspected vulnerability and meaning. NOTE: This property will not be serialized. It can only be populated by the server.

description?: string

Property Value

string

effectedResourceType

Azure resource ID of the resource that received the alerts. NOTE: This property will not be serialized. It can only be populated by the server.

effectedResourceType?: string

Property Value

string

logAnalyticsQuery

Log analytics query for getting the list of affected devices/alerts. NOTE: This property will not be serialized. It can only be populated by the server.

logAnalyticsQuery?: string

Property Value

string

remediationSteps

Recommended steps for remediation. NOTE: This property will not be serialized. It can only be populated by the server.

remediationSteps?: string

Property Value

string

reportedSeverity

Assessed alert severity. NOTE: This property will not be serialized. It can only be populated by the server.

reportedSeverity?: string

Property Value

string

systemSource

The type of the alerted resource (Azure, Non-Azure). NOTE: This property will not be serialized. It can only be populated by the server.

systemSource?: string

Property Value

string

topDevicesList

10 devices with the highest number of occurrences of this alert type, on this day. NOTE: This property will not be serialized. It can only be populated by the server.

topDevicesList?: IoTSecurityAggregatedAlertPropertiesTopDevicesListItem[]

Property Value

vendorName

Name of the organization that raised the alert. NOTE: This property will not be serialized. It can only be populated by the server.

vendorName?: string

Property Value

string

Inherited Property Details

id

Resource Id NOTE: This property will not be serialized. It can only be populated by the server.

id?: string

Property Value

string

Inherited From Resource.id

name

Resource name NOTE: This property will not be serialized. It can only be populated by the server.

name?: string

Property Value

string

Inherited From Resource.name

tags

Resource tags

tags?: {[propertyName: string]: string}

Property Value

{[propertyName: string]: string}

Inherited From TagsResource.tags

type

Resource type NOTE: This property will not be serialized. It can only be populated by the server.

type?: string

Property Value

string

Inherited From Resource.type