ActiveViolation

Information about an active Device Defender security profile behavior violation.
{
    "violationId": "string",
    "thingName": "string",
    "securityProfileName": "string",
    "behavior": {
        "name": "string",
        "metric": "string",
        "metricDimension": {
            "dimensionName": "string",
            "operator": "IN"
        },
        "criteria": {
            "comparisonOperator": "less-than",
            "value": {
                "count": 0,
                "cidrs": [],
                "ports": [],
                "number": 0,
                "numbers": [],
                "strings": []
            },
            "durationSeconds": 0,
            "consecutiveDatapointsToAlarm": 0,
            "consecutiveDatapointsToClear": 0,
            "statisticalThreshold": {
                "statistic": "string"
            },
            "mlDetectionConfig": {
                "confidenceLevel": "LOW"
            }
        },
        "suppressAlerts": true
    },
    "lastViolationValue": {},
    "violationEventAdditionalInfo": {
        "confidenceLevel": "LOW"
    },
    "lastViolationTime": "string",
    "violationStartTime": "string"
}