Class SecurityAgentInvestigationAttributes

Attributes of an investigation. When fields[investigations] is set, only listed attributes are returned. Attributes the investigation doesn't have yet are absent.

Hierarchy

  • SecurityAgentInvestigationAttributes

Constructors

constructor

Properties

additionalProperties? conclusion? createdAt? keyEntities? keyEvidence? responseSuggestions? ruleId? signal? signalId? state? steps? updatedAt? verdict?

Constructors

constructor

Properties

Optional additionalProperties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

Optional conclusion

conclusion?: string

Summary of the investigation's findings.

Optional createdAt

createdAt?: Date

When the investigation started.

Optional keyEntities

keyEntities?: SecurityAgentInvestigationKeyEntities

The entities the investigation found, by role.

Optional keyEvidence

keyEvidence?: SecurityAgentInvestigationKeyEvidence[]

The evidence the verdict rests on.

Optional responseSuggestions

responseSuggestions?: SecurityAgentInvestigationResponseSuggestions

Suggested responses to the signal.

Optional ruleId

ruleId?: string

ID of the detection rule that generated the signal.

Optional signal

signal?: SecurityAgentInvestigationSignal

Summary of the signal the investigation is about.

Optional signalId

signalId?: string

ID of the signal, in its V1 form.

Optional state

state?: SecurityAgentInvestigationState

State of the investigation: investigating while it runs, completed after it has a result, or failed when it produced no result before its timeout.

Optional steps

steps?: SecurityAgentInvestigationStep[]

The steps of the investigation, in order.

Optional updatedAt

updatedAt?: Date

When the investigation last changed.

Optional verdict

verdict?: SecurityAgentInvestigationVerdict

Verdict of the investigation. Only completed investigations have one.

Settings

Member Visibility

Theme

Generated using TypeDoc