Azure.ResourceManager.SecurityCenter.Models Namespace

Represents an AAD identity protection solution which sends logs to an OMS workspace.

The external security solution properties for AAD solutions.

Configuration payload for PR Annotations.

Number of active connections is not in allowed range.

Represents a summary of the alerts of the machine group.

The AdaptiveNetworkHardeningEnforceContent.

Properties of the additional workspaces.

A custom alert rule that checks if a value (depends on the custom alert type) is allowed. Please note AllowlistCustomAlertRule is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include ConnectionFromIPNotAllowed, ConnectionToIPNotAllowed, LocalUserNotAllowed and ProcessNotAllowed.

Number of cloud to device messages (AMQP protocol) is not in allowed range.

Number of rejected cloud to device messages (AMQP protocol) is not in allowed range.

Number of device to cloud messages (AMQP protocol) is not in allowed range.

Model factory for models.

Represents an ATA security solution which sends logs to an OMS workspace.

The external security solution properties for ATA solutions.

Settings for cloud authentication management Please note AuthenticationDetailsProperties is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AwsAssumeRoleAuthenticationDetailsProperties, AwsCredsAuthenticationDetailsProperties and GcpCredentialsDetailsProperties.

AWS cloud account connector based assume role, the role enables delegating access to your AWS resources. The role is composed of role Amazon Resource Name (ARN) and external ID. For more details, refer to <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html">Creating a Role to Delegate Permissions to an IAM User (write only)</a>.

AWS cloud account connector based credentials, the credentials is composed of access key ID and secret key, for more details, refer to <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html">Creating an IAM User in Your AWS Account (write only)</a>.

The AWS connector environment data.

The AWS organization data for the master account.

The AWS organization data for the member account.

The AWS organization data Please note AwsOrganizationalInfo is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AwsOrganizationalDataMember and AwsOrganizationalDataMaster.

The AzureDevOps scope connector's environment data.

Details of the Azure resource that was assessed.

Azure resource identifier.

A vulnerability assessments setting on Azure servers in the defined scope.

The rule result adjusted with baseline.

The benchmark references.

Pre-configured sensitive information type.

Severity level per category configuration for PR Annotations.

Represents a security solution which sends CEF logs to an OMS workspace.

The external security solution properties for CEF solutions.

A segment of a compliance assessment.

Describes the allowed inbound and outbound traffic of an Azure resource.

Describes properties of a connected resource.

Inbound connection from an ip that isn't allowed. Allow list consists of ipv4 or ipv6 range in CIDR notation.

Outbound connection to an ip that isn't allowed. Allow list consists of ipv4 or ipv6 range in CIDR notation.

Additional context fields for container registry Vulnerability assessment.

The CSPM monitoring for AWS offering.

The CSPM monitoring for AzureDevOps offering.

The CSPM monitoring for GCP offering.

The native cloud connection configuration.

The CSPM monitoring for github offering.

The CSPM (Cloud security posture management) monitoring for gitlab offering.

A custom alert rule. Please note CustomAlertRule is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AllowlistCustomAlertRule, AmqpC2DMessagesNotInAllowedRange, AmqpC2DRejectedMessagesNotInAllowedRange, AmqpD2CMessagesNotInAllowedRange, ConnectionFromIPNotAllowed, ConnectionToIPNotAllowed, DenylistCustomAlertRule, DirectMethodInvokesNotInAllowedRange, FailedLocalLoginsNotInAllowedRange, FileUploadsNotInAllowedRange, HttpC2DMessagesNotInAllowedRange, HttpC2DRejectedMessagesNotInAllowedRange, HttpD2CMessagesNotInAllowedRange, ListCustomAlertRule, LocalUserNotAllowed, MqttC2DMessagesNotInAllowedRange, MqttC2DRejectedMessagesNotInAllowedRange, MqttD2CMessagesNotInAllowedRange, ProcessNotAllowed, QueuePurgesNotInAllowedRange, TwinUpdatesNotInAllowedRange, UnauthorizedOperationsNotInAllowedRange, ActiveConnectionsNotInAllowedRange, TimeWindowCustomAlertRule and ThresholdCustomAlertRule.

Custom Assessment Automation request.

describes the custom entity store assignment request.

Represents a data export setting.

The CSPM P1 for AWS offering.

Defenders CSPM Cloud infrastructure entitlement management (CIEM) offering configurations.

Defender CSPM CIEM AWS OIDC (open id connect) configuration.

The databases DSPM configuration.

The Microsoft Defender Data Sensitivity discovery configuration.

The Microsoft Defender container agentless discovery K8s configuration.

The Microsoft Defender container image assessment configuration.

The Microsoft Defender for Server VM scanning configuration.

configuration for Microsoft Defender for Server VM scanning.

The CSPM P1 for GCP offering.

GCP Defenders CSPM Cloud infrastructure entitlement management (CIEM) discovery offering configurations.

The Microsoft Defender Data Sensitivity discovery configuration.

The Microsoft Defender Container agentless discovery configuration.

The Microsoft Defender Container image assessment configuration.

The Microsoft Defender for Server VM scanning configuration.

configuration for Microsoft Defender for Server VM scanning.

Configuration for servers Arc auto provisioning.

The databases data security posture management (DSPM) configuration.

The Defender for Containers AWS offering.

The Microsoft Defender container agentless discovery K8s configuration.

The Microsoft Defender container image assessment configuration.

The containers GCP offering.

The native cloud connection configuration.

The Microsoft Defender Container agentless discovery configuration.

The Microsoft Defender Container image assessment configuration.

The native cloud connection configuration.

The Defender for Databases AWS offering.

The ARC autoprovisioning configuration.

The RDS configuration.

The Defender for Databases GCP offering configurations.

The ARC autoprovisioning configuration.

Configuration for servers Arc auto provisioning.

The Defender for DevOps for Azure DevOps offering.

The Defender for DevOps for Github offering.

The Defender for DevOps for Gitlab offering.

The Defender for Servers AWS offering.

The ARC autoprovisioning configuration.

Configuration for servers Arc auto provisioning.

The Microsoft Defender for Endpoint autoprovisioning configuration.

The Microsoft Defender for Server VM scanning configuration.

configuration for Microsoft Defender for Server VM scanning.

The Vulnerability Assessment autoprovisioning configuration.

The Defender for Servers GCP offering configurations.

The ARC autoprovisioning configuration.

Configuration for servers Arc auto provisioning.

The Microsoft Defender for Endpoint autoprovisioning configuration.

The Microsoft Defender for Server VM scanning configuration.

configuration for Microsoft Defender for Server VM scanning.

The Vulnerability Assessment autoprovisioning configuration.

A custom alert rule that checks if a value (depends on the custom alert type) is denied.

DevOps Configuration properties.

Azure DevOps Organization properties.

Azure DevOps Project properties.

Azure DevOps Repository properties.

Number of direct method invokes is not in allowed range.

The DiscoveredSecuritySolution.

Describes the Network Security Groups effective on a network interface.

The environment details of the resource.

Governance rule execution parameters.

Execute status of Security GovernanceRule over a given scope Serialized Name: ExecuteRuleStatus

A status describing the success/failure of the enablement/disablement operation.

Represents a security solution external to Microsoft Defender for Cloud which sends information to an OMS workspace and whose data is displayed by Microsoft Defender for Cloud. Please note ExternalSecuritySolution is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AadExternalSecuritySolution, AtaExternalSecuritySolution and CefExternalSecuritySolution.

The solution properties (correspond to the solution kind).

Number of failed local logins is not in allowed range.

Number of file uploads is not in allowed range.

GCP cloud account connector based service to service credentials, the credentials are composed of the organization ID and a JSON API key (write only).

The native cloud connection configuration.

The Defender for servers connection configuration.

The gcpOrganization data for the member account.

The gcpOrganization data Please note GcpOrganizationalInfo is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include GcpMemberOrganizationalInfo and GcpParentOrganizationalInfo.

The gcpOrganization data for the parent account.

The details about the project represented by the security connector.

The GCP project connector environment data.

Microsoft information protection built-in and custom information types, labels, and integration status.

The github scope connector's environment data.

The GitLab scope connector's environment data.

Describe the additional data of governance assignment - optional.

The governance email weekly notification configuration.

The governance email weekly notification configuration.

The governance rule metadata.

Describe the owner source of governance rule.

The classification of the health report.

The resource details of the health report.

The status of the health report.

Number of cloud to device messages (HTTP protocol) is not in allowed range.

Number of rejected cloud to device messages (HTTP protocol) is not in allowed range.

Number of device to cloud messages (HTTP protocol) is not in allowed range.

Settings for hybrid compute management.

The information protection for AWS offering.

The information type keyword.

Information protection policy.

Connection string for ingesting security data and logs.

Configures how to correlate scan data and logs with resources associated with the subscription.

The IotSecurityAggregatedAlertTopDevice.

Statistical information about the number of alerts per device during last set number of days.

Statistical information about the number of alerts per alert type during last set number of days.

Statistical information about the number of recommendations per device, per recommendation type.

The IotSecuritySolutionAnalyticsModelDevicesMetrics.

The IotSecuritySolutionPatch.

IoT Security solution analytics severity metrics.

The JitNetworkAccessPolicyInitiateContent.

The JitNetworkAccessPolicyInitiatePort.

The JitNetworkAccessPolicyInitiateVirtualMachine.

The JitNetworkAccessPolicyVirtualMachine.

The JitNetworkAccessPortRule.

The JitNetworkAccessRequestInfo.

The JitNetworkAccessRequestPort.

The JitNetworkAccessRequestVirtualMachine.

A List custom alert rule. Please note ListCustomAlertRule is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AllowlistCustomAlertRule, ConnectionFromIPNotAllowed, ConnectionToIPNotAllowed, DenylistCustomAlertRule, LocalUserNotAllowed and ProcessNotAllowed.

Login by a local user that isn't allowed. Allow list consists of login names to allow.

Represents a Log Analytics workspace scope identifier.

The resource of the configuration or data needed to onboard the machine to MDE.

Microsoft information protection sensitivity label.

Number of cloud to device messages (MQTT protocol) is not in allowed range.

Number of rejected cloud to device messages (MQTT protocol) is not in allowed range.

Number of device to cloud messages (MQTT protocol) is not in allowed range.

Details of the On Premise resource that was assessed Please note OnPremiseResourceDetails is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include OnPremiseSqlResourceDetails.

Details of the On Premise Sql resource that was assessed.

A status describing the success/failure of the extension's enablement/disablement operation.

Represents a path that is recommended to be allowed and its properties.

A plan's extension properties.

Execution of a process that isn't allowed. Allow list consists of process names to allow.

For a non-Azure machine that is not connected directly to the internet, specify a proxy server that the non-Azure machine can use.

Number of device queue purges is not in allowed range.

The type of IoT Security recommendation.

Describes remote addresses that is recommended to communicate with the Azure resource on some (Protocol, Port, Direction). All other remote addresses are recommended to be blocked.

The ETA (estimated time of arrival) for remediation.

Rules results input.

Information about the security control.

Details of the security control, its score, and the health status of the relevant resources.

Changing set of properties depending on the entity type.

A resource identifier for an alert which can be used to direct the alert to the right product exposure group (tenant, workspace, subscription etc.). Please note SecurityAlertResourceIdentifier is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AzureResourceIdentifier and LogAnalyticsIdentifier.

Simulate alerts according to this bundles.

Alert Simulator request body.

Describes properties of an alert simulation request Please note SecurityAlertSimulatorRequestProperties is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include SecurityAlertSimulatorBundlesRequestProperties.

Changing set of properties depending on the supportingEvidence type.

Represents an alert sync setting.

Security assessment on a resource.

Describes the partner that created the assessment.

Describes properties of an assessment metadata.

Data regarding 3rd party partner integration.

The SecurityAssessmentPublishDates.

The result of the assessment.

The result of the assessment.

The action that should be triggered. Please note SecurityAutomationAction is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include SecurityAutomationActionEventHub, SecurityAutomationActionLogicApp and SecurityAutomationActionWorkspace.

The target Event Hub to which event data will be exported. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore.

The logic app action that should be triggered. To learn more about Microsoft Defender for Cloud's Workflow Automation capabilities, visit https://aka.ms/ASCWorkflowAutomationLearnMore.

The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore.

A rule set which evaluates all its rules upon an event interception. Only when all the included rules in the rule set will be evaluated as 'true', will the event trigger the defined actions.

A single automation scope.

The source event types which evaluate the security automation set of rules. For example - security alerts and security assessments. To learn more about the supported security events data models schemas - please visit https://aka.ms/ASCAutomationSchemas.

A rule which is evaluated upon event interception. The rule is configured by comparing a specific value from the event model to an expected value. This comparison is done by using one of the supported operators set.

The security automation model state property bag.

The resource whose properties describes the allowed traffic between Azure resources.

The security offering details Please note SecurityCenterCloudOffering is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include CspmMonitorAwsOffering, CspmMonitorAzureDevOpsOffering, CspmMonitorGcpOffering, CspmMonitorGitLabOffering, CspmMonitorGithubOffering, DefenderCspmAwsOffering, DefenderCspmGcpOffering, DefenderForContainersAwsOffering, DefenderForContainersGcpOffering, DefenderForDatabasesAwsOffering, DefenderForDatabasesGcpOffering, DefenderForDevOpsAzureDevOpsOffering, DefenderForDevOpsGitLabOffering, DefenderForDevOpsGithubOffering, DefenderForServersAwsOffering, DefenderForServersGcpOffering and InformationProtectionAwsOffering.

The protection mode of the collection/file types. Exe/Msi/Script are used for Windows, Executable is used for Linux.

Represents the publisher information of a process/rule.

Details of the resource that was assessed Please note SecurityCenterResourceDetails is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AzureResourceDetails, OnPremiseResourceDetails and OnPremiseSqlResourceDetails.

A container holding only the Tags for a resource, allowing the user to update the tags.

The security connector environment data. Please note SecurityConnectorEnvironment is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include AwsEnvironment, AzureDevOpsScopeEnvironment, GcpProjectEnvironment, GithubScopeEnvironment and GitlabScopeEnvironment.

GitHub Owner properties.

GitHub Repository properties.

GitLab Group properties.

GitLab Project properties.

Defines whether to send email notifications about new security alerts.

Defines whether to send email notifications from Microsoft Defender for Cloud to persons with specific RBAC roles on the subscription.

CVE details.

CVSS details.

The issue that caused the resource to by unhealthy.

The information type.

The SecuritySolution.

The SecuritySolutionsReferenceData.

Details of the sub-assessment Please note SecuritySubAssessmentAdditionalInfo is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include ContainerRegistryVulnerabilityProperties, ServerVulnerabilityProperties and SqlServerVulnerabilityProperties.

Changing set of properties, depending on the task type that is derived from the name field.

The SecurityTopologyResource.

The sensitivity label.

Request to update data sensitivity settings for sensitive data discovery.

The sensitivity settings properties.

Additional context fields for server vulnerability assessment.

Details of the service principal.

Details of the resource that was assessed.

Baseline details.

Rule results input.

Remediation details.

A vulnerability assessment scan record properties.

A vulnerability assessment scan result for a single rule.

A vulnerability assessment scan result properties for a single rule.

Status of the sub-assessment.

A more specific scope used to identify the alerts to suppress.

Repository branch configuration for PR Annotations.

A custom alert rule that checks if a value (depends on the custom alert type) is within the given range. Please note ThresholdCustomAlertRule is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include ActiveConnectionsNotInAllowedRange, AmqpC2DMessagesNotInAllowedRange, AmqpC2DRejectedMessagesNotInAllowedRange, AmqpD2CMessagesNotInAllowedRange, DirectMethodInvokesNotInAllowedRange, FailedLocalLoginsNotInAllowedRange, FileUploadsNotInAllowedRange, HttpC2DMessagesNotInAllowedRange, HttpC2DRejectedMessagesNotInAllowedRange, HttpD2CMessagesNotInAllowedRange, MqttC2DMessagesNotInAllowedRange, MqttC2DRejectedMessagesNotInAllowedRange, MqttD2CMessagesNotInAllowedRange, QueuePurgesNotInAllowedRange, TimeWindowCustomAlertRule, TwinUpdatesNotInAllowedRange and UnauthorizedOperationsNotInAllowedRange.

A custom alert rule that checks if the number of activities (depends on the custom alert type) in a time window is within the given range. Please note TimeWindowCustomAlertRule is the base class. According to the scenario, a derived class of the base class might need to be assigned here, or this property needs to be casted to one of the possible derived classes. The available derived classes include ActiveConnectionsNotInAllowedRange, AmqpC2DMessagesNotInAllowedRange, AmqpC2DRejectedMessagesNotInAllowedRange, AmqpD2CMessagesNotInAllowedRange, DirectMethodInvokesNotInAllowedRange, FailedLocalLoginsNotInAllowedRange, FileUploadsNotInAllowedRange, HttpC2DMessagesNotInAllowedRange, HttpC2DRejectedMessagesNotInAllowedRange, HttpD2CMessagesNotInAllowedRange, MqttC2DMessagesNotInAllowedRange, MqttC2DRejectedMessagesNotInAllowedRange, MqttD2CMessagesNotInAllowedRange, QueuePurgesNotInAllowedRange, TwinUpdatesNotInAllowedRange and UnauthorizedOperationsNotInAllowedRange.

The TopologySingleResource.

The TopologySingleResourceChild.

The TopologySingleResourceParent.

Number of twin updates is not in allowed range.

Number of unauthorized operations is not in allowed range.

Custom user-defined information type.

Properties of the IoT Security solution's user defined resources.

Represents a user that is recommended to be allowed for a certain rule.

Vendor reference.

Represents a machine that is part of a machine group.

vulnerability assessment rule metadata details.

The rule query details.

The connectivity state of the external AAD solution.

ActionableRemediation Setting. None - the setting was never set. Enabled - ActionableRemediation is enabled. Disabled - ActionableRemediation is disabled.

The application control policy enforcement/protection mode of the machine group.

The source type of the machine group.

An alert that machines within a group can have.

Data types sent to workspace.

Workspace type.

Configuration of PR Annotations on default branch.

Enabled - PR Annotations are enabled on the resource's default branch. Disabled - PR Annotations are disabled on the resource's default branch.

The application source, what it affects, e.g. Assessments.

State of the multi-cloud connector.

A valid comparer operator to use. A case-insensitive comparison will be applied for String PropertyType.

The data type of the compared operands (string, integer, floating point number or a boolean [true/false]].

Describes what kind of security agent provisioning action to take.

The available sub plans.

Relevant cloud for the custom assessment automation.

The severity to relate to the assessments generated by this assessment automation.

The scanning mode for the VM scan.

The DefenderForStorageSettingName.

AutoDiscovery states.

The provisioning state of the resource.

Pending - Provisioning pending. Failed - Provisioning failed. Succeeded - Successful provisioning. Canceled - Provisioning canceled. PendingDeletion - Deletion pending. DeletionSuccess - Deletion successful. DeletionFailure - Deletion failure.

End of support status.

The operation status code.

The kind of the external solution.

The owner type for the governance rule owner source.

The governance rule source, what the rule affects, e.g. Assessments.

The rule type of the governance rule, defines the source of the rule e.g. Integrated.

The platform where the assessed resource resides.

The status of the health report.

State of the service principal and its secret.

The implementation effort required to remediate this assessment.

The InformationProtectionPolicyName.

Update Settings.

Enabled - Resource should inherit configurations from parent. Disabled - Resource should not inherit configurations from parent.

The type of IoT Security recommendation.

The IotSecuritySolutionDataSource.

The IotSecuritySolutionExportOption.

Indicates whether the extension is enabled.

The JitNetworkAccessPortProtocol.

The status of the port.

A description of why the status has its value.

The kill chain related intent behind the alert. For list of supported values, and explanations of Azure Security Center's supported kill chain intents.

Microsoft information protection integration status.

The type of the file (for Linux files - Executable is used).

The recommendation action of the machine or rule.

Recommendation status. When the recommendation status is disabled recommendations are not generated.

The initial recommendation status of the machine group or machine.

Aggregative state based on the standard's supported controls states.

Assessed alert severity.

Details about resource onboarding status across all connectors.

OnboardedByOtherConnector - this resource has already been onboarded to another connector. This is only applicable to top-level resources. Onboarded - this resource has already been onboarded by the specified connector. NotOnboarded - this resource has not been onboarded to any connector. NotApplicable - the onboarding state is not applicable to the current endpoint.

Rule categories. Code - code scanning results. Artifact scanning results. Dependencies scanning results. IaC results. Secrets scanning results. Container scanning results.

The rule severity.

Defines the minimal alert severity which will be sent as email notifications.

Defines whether to send email notifications from AMicrosoft Defender for Cloud to persons with specific RBAC roles on the subscription.

Defines if email notifications will be sent about new security alerts.

A possible role to configure sending security notification alerts to.

The risk level of the threat that was detected. Learn more: https://docs.microsoft.com/en-us/azure/security-center/security-center-alerts-overview#how-are-alerts-classified.

Alert Simulator supported bundles.

The life cycle status of the alert.

The SecurityAssessmentODataExpand.

The categories of resource that is at risk when the assessment is unhealthy.

The status of the resource regarding a single assessment.

The sub-assessment severity level.

Programmatic code for the status of the assessment.

Tactic of the assessment.

Techniques of the assessment.

BuiltIn if the assessment based on built-in Azure Policy definition, Custom if the assessment based on custom Azure Policy definition.

The user impact of the assessment.

The multi cloud resource's cloud name.

A permission detected in the cloud account.

The configuration status of the machines group or machine or rule.

The SecurityCenterConnectionType.

The pricing tier value. Microsoft Defender for Cloud is provided in two pricing tiers: free and standard. The standard tier offers advanced security capabilities, while the free tier offers basic security features.

The machine supportability of Enforce feature.

The type of security control (for example, BuiltIn).

A valid event source type.

The security family of the discovered solution.

The security family provisioning State.

The SecurityScoreODataExpand.

The SecuritySettingName.

Status of the IoT Security solution.

Threats impact of the assessment.

The rule's direction.

The SecurityTransportProtocol.

The value type of the items in the list.

The provisioningState of the vulnerability assessment capability on the VM.

The selected vulnerability assessments provider on Azure servers in the defined scope.

The ServerVulnerabilityAssessmentsSettingKindName.

The rule result status.

The scan status.

The scan trigger type.

Programmatic code for the status of the assessment.

Unmasked IP address logging status.

The Vulnerability Assessment solution to be provisioned. Can be either 'TVM' or 'Qualys'.

The rule type.

Possible states of the rule.

The rank of the sensitivity label.