Refer to the sample response for an incident query.
{
"generalDetails":{
"incidentID":"4",
"occurred_UTC":"September 19, 2022 7:08:00 AM",
"occurred_Endpoint":"September 19, 2022 12:38:00 PM India Standard Time",
"incidentType":"Web Protection",
"actualAction":"Block",
"failureReason":"No Failure",
"expectedAction":"Block",
"severity":"Warning",
"status":"New",
"resolution":"None",
"reviewer":"Unassigned",
"labels":[
]
},
"endpointDetails":{
"computerName":"",
"computerIP":"",
"connectivityState":"",
"sourceApplication":"chrome.exe"
},
"eventUserDetails":{
"userPrincipalName":"user1@std.dom",
"userAccount":"",
"userEmail":"",
"userOU":"",
"userGroups":"Administrators"
},
"lastUpdatedUserDetails":{
"userPrincipalName":"user1@std.dom",
"userAccount":"",
"userEmail":"",
"userOU":"",
"userGroups":"Administrators",
"userName":"user",
"userTitle":"",
"userDepartment":"",
"userManager":"",
"userId":"4"
},
"reportingProduct":{
"reportingProduct":"DLP for Windows",
"productVersion":"11.6.600.2",
"policyName":"My Default DLP Policy (4)",
"applianceIP":"null",
"applianceHostName":"null"
},
"totalMatchCount":"2",
"totalContentSize_KB":"0.05",
"additionalInformation":{
"WebPostUrl":"http://dlptest.com/http-post/",
"WebPostAddressBarUrl":"Not Available",
"MatchedURL":"http://dlptest.com/http-post/",
"SourceIPAddress":"null",
"SourcePort":"null",
"DestinationIPAddress":"null",
"DestinationPort":"null",
"VlanID":"null"
},
"accessControlList":[
],
"customAttributes":{
},
"evidences":[
{
"evidenceName":"leaked_file.txt",
"evidenceLocation":"37\\C9\\{7037C9FD-8B04-FD1F-56B0-34AD7F109264}.txt.dlpenc",
"hitHighlightLocation":"B7\\9F\\{F8B79FDB-C6E0-4EA2-27AC-9B1322DB0D83}.xml.dlpenc.hh",
"evidencePrefix":"\\\\10.213.67.173\\cifsshare\\",
"itemType":"File",
"fileSize_KB":"1",
"matchCount":"2",
"uniqueMatchCount":"2",
"shortMatchString":"I am a {confidential} document having {classified} content",
"uniqueMatchStrings":"classified | confidential",
"classifications":"Classified (2), Confidential (1)",
"path":"",
"sHA1":"997fd34104eceb38126b442748c80f4f1a1f970f",
"matchedFingerprints":[
]
}
],
"rules":[
{
"ruleSetName":"DLP Getting Started rule set",
"ruleName":"more-web-rule",
"configuredAction":"Block",
"severity":"Warning",
"actionTriggered":"Yes",
"modificationDate":"September 19, 2022 12:16:32 PM"
},
{
"ruleSetName":"DLP Getting Started rule set",
"ruleName":"web-rule",
"configuredAction":"Block",
"severity":"Warning",
"actionTriggered":"No",
"modificationDate":"September 19, 2022 12:04:28 PM"
}
],
"classifications":[
{
"classificationName":"Classified",
"matchCount":"2",
"uniqueMatchCount":"2",
"uniqueMatchStrings":"classified | confidential"
},
{
"classificationName":"Confidential",
"matchCount":"1",
"uniqueMatchCount":"1",
"uniqueMatchStrings":"confidential"
}
],
"stakeholders":[
],
"auditLogs":[
],
"comments":[
],
"cases":[
]
}