CmdID

CmdID / PowerShell / Cmdlets / Update

Update-MgSecurityIncident

Update the properties of an incident object. Microsoft Graph PowerShell reference

From the Microsoft Graph PowerShell reference 35 parameters Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

35 in the Microsoft Graph PowerShell reference
Show its 35 parameters
-AdditionalPropertiesAdditional Parameters
-AlertsThe list of related alerts.
-AssignedToOwner of the incident, or null if no owner is assigned.
-BodyParameterincident To construct, see NOTES section for BODYPARAMETER properties and create a hash table.
-BreakWait for .NET debugger to attach
-ClassificationalertClassification
-CommentsArray of comments created by the Security Operations (SecOps) team when the incident is managed.
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-CreatedDateTimeTime when the incident was first created.
-CustomTagsArray of custom tags associated with an incident.
-DescriptionDescription of the incident.
-DeterminationalertDetermination
-DisplayNameThe incident name.
-HeadersOptional headers that will be added to the request.
-HttpPipelineAppendSendAsync Pipeline Steps to be appended to the front of the pipeline
-HttpPipelinePrependSendAsync Pipeline Steps to be prepended to the front of the pipeline
-IdThe unique identifier for an entity.
-IncidentIdThe unique identifier of incident
-IncidentWebUrlThe URL for the incident page in the Microsoft 365 Defender portal.
-InputObjectIdentity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.
-LastModifiedByThe identity that last modified the incident.
-LastUpdateDateTimeTime when the incident was last updated.
-PriorityScoreA priority score for the incident from 0 to 100, with > 85 being the top priority, 15 - 85 medium priority, and < 15 low priority.
-ProxyThe URI for the proxy server to use
-ProxyCredentialCredentials for a proxy server to use for the remote call
-ProxyUseDefaultCredentialsUse the default credentials for the proxy
-RedirectIncidentIdOnly populated in case an incident is grouped with another incident, as part of the logic that processes incidents.
-ResolvingCommentUser input that explains the resolution of the incident and the classification choice.
-ResponseHeadersVariable, -RHVOptional Response Headers Variable.
-SeverityalertSeverity
-StatusincidentStatus
-SummaryThe overview of an attack.
-SystemTagsThe system tags associated with the incident.
-TenantIdThe Microsoft Entra tenant in which the alert was created.
-WhatIf, -wiRuns the command in a mode that only reports what would happen without performing the actions.