Documentation ¶
Index ¶
- func PossibleValuesForAlertRuleKind() []string
- func PossibleValuesForAlertSeverity() []string
- func PossibleValuesForAttackTactic() []string
- func ValidateAlertRuleTemplateID(input interface{}, key string) (warnings []string, errors []error)
- func ValidateWorkspaceID(input interface{}, key string) (warnings []string, errors []error)
- type AlertRuleKind
- type AlertRuleTemplate
- type AlertRuleTemplateId
- type AlertRuleTemplateOperationPredicate
- type AlertRuleTemplatesClient
- func (c AlertRuleTemplatesClient) AlertRuleTemplatesGet(ctx context.Context, id AlertRuleTemplateId) (result AlertRuleTemplatesGetOperationResponse, err error)
- func (c AlertRuleTemplatesClient) AlertRuleTemplatesList(ctx context.Context, id WorkspaceId) (resp AlertRuleTemplatesListOperationResponse, err error)
- func (c AlertRuleTemplatesClient) AlertRuleTemplatesListComplete(ctx context.Context, id WorkspaceId) (AlertRuleTemplatesListCompleteResult, error)
- func (c AlertRuleTemplatesClient) AlertRuleTemplatesListCompleteMatchingPredicate(ctx context.Context, id WorkspaceId, ...) (resp AlertRuleTemplatesListCompleteResult, err error)
- type AlertRuleTemplatesGetOperationResponse
- type AlertRuleTemplatesListCompleteResult
- type AlertRuleTemplatesListOperationResponse
- type AlertSeverity
- type AttackTactic
- type FusionAlertRuleTemplate
- type FusionAlertRuleTemplateProperties
- type MLBehaviorAnalyticsAlertRuleTemplate
- type MLBehaviorAnalyticsAlertRuleTemplateProperties
- type MicrosoftSecurityIncidentCreationAlertRuleTemplate
- type NrtAlertRuleTemplate
- type ScheduledAlertRuleTemplate
- type ScheduledAlertRuleTemplateProperties
- type ThreatIntelligenceAlertRuleTemplate
- type ThreatIntelligenceAlertRuleTemplateProperties
- type WorkspaceId
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func PossibleValuesForAlertRuleKind ¶
func PossibleValuesForAlertRuleKind() []string
func PossibleValuesForAlertSeverity ¶
func PossibleValuesForAlertSeverity() []string
func PossibleValuesForAttackTactic ¶
func PossibleValuesForAttackTactic() []string
func ValidateAlertRuleTemplateID ¶
ValidateAlertRuleTemplateID checks that 'input' can be parsed as a Alert Rule Template ID
func ValidateWorkspaceID ¶
ValidateWorkspaceID checks that 'input' can be parsed as a Workspace ID
Types ¶
type AlertRuleKind ¶
type AlertRuleKind string
const ( AlertRuleKindFusion AlertRuleKind = "Fusion" AlertRuleKindMLBehaviorAnalytics AlertRuleKind = "MLBehaviorAnalytics" AlertRuleKindMicrosoftSecurityIncidentCreation AlertRuleKind = "MicrosoftSecurityIncidentCreation" AlertRuleKindNRT AlertRuleKind = "NRT" AlertRuleKindScheduled AlertRuleKind = "Scheduled" AlertRuleKindThreatIntelligence AlertRuleKind = "ThreatIntelligence" )
type AlertRuleTemplate ¶
type AlertRuleTemplate interface { }
type AlertRuleTemplateId ¶
type AlertRuleTemplateId struct { SubscriptionId string ResourceGroupName string WorkspaceName string AlertRuleTemplateId string }
AlertRuleTemplateId is a struct representing the Resource ID for a Alert Rule Template
func NewAlertRuleTemplateID ¶
func NewAlertRuleTemplateID(subscriptionId string, resourceGroupName string, workspaceName string, alertRuleTemplateId string) AlertRuleTemplateId
NewAlertRuleTemplateID returns a new AlertRuleTemplateId struct
func ParseAlertRuleTemplateID ¶
func ParseAlertRuleTemplateID(input string) (*AlertRuleTemplateId, error)
ParseAlertRuleTemplateID parses 'input' into a AlertRuleTemplateId
func ParseAlertRuleTemplateIDInsensitively ¶
func ParseAlertRuleTemplateIDInsensitively(input string) (*AlertRuleTemplateId, error)
ParseAlertRuleTemplateIDInsensitively parses 'input' case-insensitively into a AlertRuleTemplateId note: this method should only be used for API response data and not user input
func (AlertRuleTemplateId) ID ¶
func (id AlertRuleTemplateId) ID() string
ID returns the formatted Alert Rule Template ID
func (AlertRuleTemplateId) Segments ¶
func (id AlertRuleTemplateId) Segments() []resourceids.Segment
Segments returns a slice of Resource ID Segments which comprise this Alert Rule Template ID
func (AlertRuleTemplateId) String ¶
func (id AlertRuleTemplateId) String() string
String returns a human-readable description of this Alert Rule Template ID
type AlertRuleTemplateOperationPredicate ¶
type AlertRuleTemplateOperationPredicate struct { }
func (AlertRuleTemplateOperationPredicate) Matches ¶
func (p AlertRuleTemplateOperationPredicate) Matches(input AlertRuleTemplate) bool
type AlertRuleTemplatesClient ¶
type AlertRuleTemplatesClient struct { Client autorest.Client // contains filtered or unexported fields }
func NewAlertRuleTemplatesClientWithBaseURI ¶
func NewAlertRuleTemplatesClientWithBaseURI(endpoint string) AlertRuleTemplatesClient
func (AlertRuleTemplatesClient) AlertRuleTemplatesGet ¶
func (c AlertRuleTemplatesClient) AlertRuleTemplatesGet(ctx context.Context, id AlertRuleTemplateId) (result AlertRuleTemplatesGetOperationResponse, err error)
AlertRuleTemplatesGet ...
func (AlertRuleTemplatesClient) AlertRuleTemplatesList ¶
func (c AlertRuleTemplatesClient) AlertRuleTemplatesList(ctx context.Context, id WorkspaceId) (resp AlertRuleTemplatesListOperationResponse, err error)
AlertRuleTemplatesList ...
func (AlertRuleTemplatesClient) AlertRuleTemplatesListComplete ¶
func (c AlertRuleTemplatesClient) AlertRuleTemplatesListComplete(ctx context.Context, id WorkspaceId) (AlertRuleTemplatesListCompleteResult, error)
AlertRuleTemplatesListComplete retrieves all of the results into a single object
func (AlertRuleTemplatesClient) AlertRuleTemplatesListCompleteMatchingPredicate ¶
func (c AlertRuleTemplatesClient) AlertRuleTemplatesListCompleteMatchingPredicate(ctx context.Context, id WorkspaceId, predicate AlertRuleTemplateOperationPredicate) (resp AlertRuleTemplatesListCompleteResult, err error)
AlertRuleTemplatesListCompleteMatchingPredicate retrieves all of the results and then applied the predicate
type AlertRuleTemplatesGetOperationResponse ¶
type AlertRuleTemplatesGetOperationResponse struct { HttpResponse *http.Response Model *AlertRuleTemplate }
type AlertRuleTemplatesListCompleteResult ¶
type AlertRuleTemplatesListCompleteResult struct {
Items []AlertRuleTemplate
}
type AlertRuleTemplatesListOperationResponse ¶
type AlertRuleTemplatesListOperationResponse struct { HttpResponse *http.Response Model *[]AlertRuleTemplate // contains filtered or unexported fields }
func (AlertRuleTemplatesListOperationResponse) HasMore ¶
func (r AlertRuleTemplatesListOperationResponse) HasMore() bool
func (AlertRuleTemplatesListOperationResponse) LoadMore ¶
func (r AlertRuleTemplatesListOperationResponse) LoadMore(ctx context.Context) (resp AlertRuleTemplatesListOperationResponse, err error)
type AlertSeverity ¶
type AlertSeverity string
const ( AlertSeverityHigh AlertSeverity = "High" AlertSeverityInformational AlertSeverity = "Informational" AlertSeverityLow AlertSeverity = "Low" AlertSeverityMedium AlertSeverity = "Medium" )
type AttackTactic ¶
type AttackTactic string
const ( AttackTacticCollection AttackTactic = "Collection" AttackTacticCommandAndControl AttackTactic = "CommandAndControl" AttackTacticCredentialAccess AttackTactic = "CredentialAccess" AttackTacticDefenseEvasion AttackTactic = "DefenseEvasion" AttackTacticDiscovery AttackTactic = "Discovery" AttackTacticExecution AttackTactic = "Execution" AttackTacticExfiltration AttackTactic = "Exfiltration" AttackTacticImpact AttackTactic = "Impact" AttackTacticInitialAccess AttackTactic = "InitialAccess" AttackTacticLateralMovement AttackTactic = "LateralMovement" AttackTacticPersistence AttackTactic = "Persistence" AttackTacticPreAttack AttackTactic = "PreAttack" AttackTacticPrivilegeEscalation AttackTactic = "PrivilegeEscalation" )
type FusionAlertRuleTemplate ¶
type FusionAlertRuleTemplate struct { Properties *FusionAlertRuleTemplateProperties `json:"properties,omitempty"` // Fields inherited from AlertRuleTemplate Id *string `json:"id,omitempty"` Name *string `json:"name,omitempty"` SystemData *systemdata.SystemData `json:"systemData,omitempty"` Type *string `json:"type,omitempty"` }
func (FusionAlertRuleTemplate) MarshalJSON ¶
func (s FusionAlertRuleTemplate) MarshalJSON() ([]byte, error)
type FusionAlertRuleTemplateProperties ¶
type FusionAlertRuleTemplateProperties struct { Severity AlertSeverity `json:"severity"` Tactics *[]AttackTactic `json:"tactics,omitempty"` }
type MLBehaviorAnalyticsAlertRuleTemplate ¶
type MLBehaviorAnalyticsAlertRuleTemplate struct { Properties *MLBehaviorAnalyticsAlertRuleTemplateProperties `json:"properties,omitempty"` // Fields inherited from AlertRuleTemplate Id *string `json:"id,omitempty"` Name *string `json:"name,omitempty"` SystemData *systemdata.SystemData `json:"systemData,omitempty"` Type *string `json:"type,omitempty"` }
func (MLBehaviorAnalyticsAlertRuleTemplate) MarshalJSON ¶
func (s MLBehaviorAnalyticsAlertRuleTemplate) MarshalJSON() ([]byte, error)
type MLBehaviorAnalyticsAlertRuleTemplateProperties ¶
type MLBehaviorAnalyticsAlertRuleTemplateProperties struct { Severity AlertSeverity `json:"severity"` Tactics *[]AttackTactic `json:"tactics,omitempty"` }
type MicrosoftSecurityIncidentCreationAlertRuleTemplate ¶
type MicrosoftSecurityIncidentCreationAlertRuleTemplate struct { Properties AlertRuleTemplate `json:"properties"` // Fields inherited from AlertRuleTemplate Id *string `json:"id,omitempty"` Name *string `json:"name,omitempty"` SystemData *systemdata.SystemData `json:"systemData,omitempty"` Type *string `json:"type,omitempty"` }
func (MicrosoftSecurityIncidentCreationAlertRuleTemplate) MarshalJSON ¶
func (s MicrosoftSecurityIncidentCreationAlertRuleTemplate) MarshalJSON() ([]byte, error)
func (*MicrosoftSecurityIncidentCreationAlertRuleTemplate) UnmarshalJSON ¶
func (s *MicrosoftSecurityIncidentCreationAlertRuleTemplate) UnmarshalJSON(bytes []byte) error
type NrtAlertRuleTemplate ¶
type NrtAlertRuleTemplate struct { Properties AlertRuleTemplate `json:"properties"` // Fields inherited from AlertRuleTemplate Id *string `json:"id,omitempty"` Name *string `json:"name,omitempty"` SystemData *systemdata.SystemData `json:"systemData,omitempty"` Type *string `json:"type,omitempty"` }
func (NrtAlertRuleTemplate) MarshalJSON ¶
func (s NrtAlertRuleTemplate) MarshalJSON() ([]byte, error)
func (*NrtAlertRuleTemplate) UnmarshalJSON ¶
func (s *NrtAlertRuleTemplate) UnmarshalJSON(bytes []byte) error
type ScheduledAlertRuleTemplate ¶
type ScheduledAlertRuleTemplate struct { Properties *ScheduledAlertRuleTemplateProperties `json:"properties,omitempty"` // Fields inherited from AlertRuleTemplate Id *string `json:"id,omitempty"` Name *string `json:"name,omitempty"` SystemData *systemdata.SystemData `json:"systemData,omitempty"` Type *string `json:"type,omitempty"` }
func (ScheduledAlertRuleTemplate) MarshalJSON ¶
func (s ScheduledAlertRuleTemplate) MarshalJSON() ([]byte, error)
type ScheduledAlertRuleTemplateProperties ¶
type ScheduledAlertRuleTemplateProperties struct {
Tactics *[]AttackTactic `json:"tactics,omitempty"`
}
type ThreatIntelligenceAlertRuleTemplate ¶
type ThreatIntelligenceAlertRuleTemplate struct { Properties *ThreatIntelligenceAlertRuleTemplateProperties `json:"properties,omitempty"` // Fields inherited from AlertRuleTemplate Id *string `json:"id,omitempty"` Name *string `json:"name,omitempty"` SystemData *systemdata.SystemData `json:"systemData,omitempty"` Type *string `json:"type,omitempty"` }
func (ThreatIntelligenceAlertRuleTemplate) MarshalJSON ¶
func (s ThreatIntelligenceAlertRuleTemplate) MarshalJSON() ([]byte, error)
type ThreatIntelligenceAlertRuleTemplateProperties ¶
type ThreatIntelligenceAlertRuleTemplateProperties struct { Severity AlertSeverity `json:"severity"` Tactics *[]AttackTactic `json:"tactics,omitempty"` }
type WorkspaceId ¶
WorkspaceId is a struct representing the Resource ID for a Workspace
func NewWorkspaceID ¶
func NewWorkspaceID(subscriptionId string, resourceGroupName string, workspaceName string) WorkspaceId
NewWorkspaceID returns a new WorkspaceId struct
func ParseWorkspaceID ¶
func ParseWorkspaceID(input string) (*WorkspaceId, error)
ParseWorkspaceID parses 'input' into a WorkspaceId
func ParseWorkspaceIDInsensitively ¶
func ParseWorkspaceIDInsensitively(input string) (*WorkspaceId, error)
ParseWorkspaceIDInsensitively parses 'input' case-insensitively into a WorkspaceId note: this method should only be used for API response data and not user input
func (WorkspaceId) Segments ¶
func (id WorkspaceId) Segments() []resourceids.Segment
Segments returns a slice of Resource ID Segments which comprise this Workspace ID
func (WorkspaceId) String ¶
func (id WorkspaceId) String() string
String returns a human-readable description of this Workspace ID
Source Files ¶
- client.go
- constants.go
- id_alertruletemplate.go
- id_workspace.go
- method_alertruletemplatesget_autorest.go
- method_alertruletemplateslist_autorest.go
- model_alertruletemplate.go
- model_fusionalertruletemplate.go
- model_fusionalertruletemplateproperties.go
- model_microsoftsecurityincidentcreationalertruletemplate.go
- model_mlbehavioranalyticsalertruletemplate.go
- model_mlbehavioranalyticsalertruletemplateproperties.go
- model_nrtalertruletemplate.go
- model_scheduledalertruletemplate.go
- model_scheduledalertruletemplateproperties.go
- model_threatintelligencealertruletemplate.go
- model_threatintelligencealertruletemplateproperties.go
- predicates.go
- version.go