Skip to main content

AnomalyEvidenceTimestamp

Properties

NameTypeDescriptionNotes
AtSystem.DateTimePoint-in-time the evidence was captured.[optional]
VarFromSystem.DateTimeStart of the aggregation window for time-window detections (SIEM); null for point-in-time detections (SENTINEL).[optional]

Examples

  • Prepare the resource
$AnomalyEvidenceTimestamp = Initialize-AnomalyEvidenceTimestamp -At 2026-07-13T10:14Z `
-VarFrom 2026-07-13T09:00Z
  • Convert the resource to JSON
$AnomalyEvidenceTimestamp | ConvertTo-JSON

[Back to top]