Skip to content

Commit 497b600

Browse files
Merge pull request #2136 from Ronen-Refaeli/patch-5
Update api-alerts.md
2 parents 4838fa2 + f7ff4b6 commit 497b600

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

CloudAppSecurityDocs/api-alerts.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,6 @@ The response object defines the following properties.
5353
| intent | list | A field that specifies the kill chain related intent behind the alert. Multiple values can be reported in this field. The **intent** enumeration values follow the [MITRE att@ck enterprise matrix model](https://attack.mitre.org/matrices/enterprise/). Further guidance on the different techniques that make up each intent can be found in MITRE's documentation.<br> Possible values include:<br/><br>**0**: UNKNOWN<br />**1**: PREATTACK<br />**2**: INITIAL_ACCESS<br />**3**: PERSISTENCE<br />**4**: PRIVILEGE_ESCALATION<br />**5**: DEFENSE_EVASION<br />**6**: CREDENTIAL_ACCESS<br />**7**: DISCOVERY<br />**8**: LATERAL_MOVEMENT<br />**9**: EXECUTION<br />**10**: COLLECTION<br />**11**: EXFILTRATION<br />**12**: COMMAND_AND_CONTROL<br />**13**: IMPACT |
5454
| isPreview | bool | Alerts that have been recently released as GA |
5555
| audits *(optional)* | list | List of event IDs that are related to the alert |
56-
| threatScore | int | User investigation priority |
5756

5857
## Filters
5958

0 commit comments

Comments
 (0)