Skip to main content

AnomalyEvidenceTimestamp

Properties

NameTypeDescriptionNotes
at(optional) stringPoint-in-time the evidence was captured.[default to undefined]
from(optional) stringStart of the aggregation window for time-window detections (SIEM); null for point-in-time detections (SENTINEL).[default to undefined]