Class SecurityAgentInvestigationListItemAttributes

Attributes of an investigation in a list. To get an investigation's full content, use the get investigation endpoint.

Hierarchy

  • SecurityAgentInvestigationListItemAttributes

Constructors

constructor

Properties

additionalProperties? createdAt? isLatest ruleId signal? signalId state updatedAt? verdict?

Constructors

constructor

Properties

Optional additionalProperties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

Optional createdAt

createdAt?: Date

When the investigation started.

isLatest

isLatest: boolean

Whether this is the latest investigation of the signal. Always true when filter[signal_id] isn't set.

ruleId

ruleId: string

ID of the detection rule that generated the signal. It can be empty while the investigation runs.

Optional signal

signal?: SecurityAgentInvestigationSignal

Summary of the signal the investigation is about.

signalId

signalId: string

ID of the signal, in its V1 form.

state

state: SecurityAgentInvestigationState

State of the investigation: investigating while it runs, completed after it has a result, or failed when it produced no result before its timeout.

Optional updatedAt

updatedAt?: Date

When the investigation last changed.

Optional verdict

verdict?: SecurityAgentInvestigationVerdict

Verdict of the investigation. Only completed investigations have one.

Settings

Member Visibility

Theme

Generated using TypeDoc