CmdID

CmdID / PowerShell / Cmdlets / New

New-MgSecurityIncident

Create new navigation property to incidents for security Microsoft Graph PowerShell reference

From the Microsoft Graph PowerShell reference 33 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

33 in the Microsoft Graph PowerShell reference
Show its 33 parameters
-AdditionalPropertiesAdditional Parameters
-AlertsThe list of related alerts.
-AssignedToOwner of the incident, or null if no owner is assigned.
-BodyParameterincident To construct, see NOTES section for BODYPARAMETER properties and create a hash table.
-BreakWait for .NET debugger to attach
-ClassificationalertClassification
-CommentsArray of comments created by the Security Operations (SecOps) team when the incident is managed.
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-CreatedDateTimeTime when the incident was first created.
-CustomTagsArray of custom tags associated with an incident.
-DescriptionDescription of the incident.
-DeterminationalertDetermination
-DisplayNameThe incident name.
-HeadersOptional headers that will be added to the request.
-HttpPipelineAppendSendAsync Pipeline Steps to be appended to the front of the pipeline
-HttpPipelinePrependSendAsync Pipeline Steps to be prepended to the front of the pipeline
-IdThe unique identifier for an entity.
-IncidentWebUrlThe URL for the incident page in the Microsoft 365 Defender portal.
-LastModifiedByThe identity that last modified the incident.
-LastUpdateDateTimeTime when the incident was last updated.
-PriorityScoreA priority score for the incident from 0 to 100, with > 85 being the top priority, 15 - 85 medium priority, and < 15 low priority.
-ProxyThe URI for the proxy server to use
-ProxyCredentialCredentials for a proxy server to use for the remote call
-ProxyUseDefaultCredentialsUse the default credentials for the proxy
-RedirectIncidentIdOnly populated in case an incident is grouped with another incident, as part of the logic that processes incidents.
-ResolvingCommentUser input that explains the resolution of the incident and the classification choice.
-ResponseHeadersVariable, -RHVOptional Response Headers Variable.
-SeverityalertSeverity
-StatusincidentStatus
-SummaryThe overview of an attack.
-SystemTagsThe system tags associated with the incident.
-TenantIdThe Microsoft Entra tenant in which the alert was created.
-WhatIf, -wiRuns the command in a mode that only reports what would happen without performing the actions.