GetAllIncidentBookmarks.json

{
  "parameters": {
    "api-version": "2022-01-01-preview",
    "subscriptionId": "d0cfe6b2-9ac0-4464-9919-dccaee2e48c0",
    "resourceGroupName": "myRg",
    "workspaceName": "myWorkspace",
    "incidentId": "afbd324f-6c48-459c-8710-8d1e1cd03812"
  },
  "responses": {
    "200": {
      "body": {
        "value": [
          {
            "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/bookmarks/afbd324f-6c48-459c-8710-8d1e1cd03812",
            "name": "afbd324f-6c48-459c-8710-8d1e1cd03812",
            "type": "Microsoft.SecurityInsights/Entities",
            "kind": "Bookmark",
            "properties": {
              "displayName": "SecurityEvent - 868f40f4698d",
              "created": "2020-06-17T15:34:01.4265524+00:00",
              "updated": "2020-06-17T15:34:01.4265524+00:00",
              "createdBy": {
                "objectId": "b03ca914-5eb6-45e5-9417-fe0797c372fd",
                "email": "user@microsoft.com",
                "name": "user"
              },
              "updatedBy": {
                "objectId": "b03ca914-5eb6-45e5-9417-fe0797c372fd",
                "email": "user@microsoft.com",
                "name": "user"
              },
              "eventTime": "2020-06-17T15:34:01.4265524+00:00",
              "labels": [],
              "query": "SecurityEvent\r\n| take 1\n",
              "queryResult": "{\"TimeGenerated\":\"2020-05-24T01:24:25.67Z\",\"Account\":\"\\\\ADMINISTRATOR\",\"AccountType\":\"User\",\"Computer\":\"SecurityEvents\",\"EventSourceName\":\"Microsoft-Windows-Security-Auditing\",\"Channel\":\"Security\",\"Task\":12544,\"Level\":\"16\",\"EventID\":4625,\"Activity\":\"4625 - An account failed to log on.\",\"AuthenticationPackageName\":\"NTLM\",\"FailureReason\":\"%%2313\",\"IpAddress\":\"176.113.115.73\",\"IpPort\":\"0\",\"LmPackageName\":\"-\",\"LogonProcessName\":\"NtLmSsp \",\"LogonType\":3,\"LogonTypeName\":\"3 - Network\",\"Process\":\"-\",\"ProcessId\":\"0x0\",\"__entityMapping\":{\"\\\\ADMINISTRATOR\":\"Account\",\"SecurityEvents\":\"Host\"}}",
              "additionalData": {
                "ETag": "\"3b00acab-0000-0d00-0000-5f15e4ed0000\"",
                "EntityId": "afbd324f-6c48-459c-8710-8d1e1cd03812"
              },
              "friendlyName": "SecurityEvent - 868f40f4698d"
            }
          },
          {
            "id": "/subscriptions/d0cfe6b2-9ac0-4464-9919-dccaee2e48c0/resourceGroups/myRg/providers/Microsoft.OperationalIinsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/bookmarks/bbbd324f-6c48-459c-8710-8d1e1cd03812",
            "name": "bbbd324f-6c48-459c-8710-8d1e1cd03812",
            "type": "Microsoft.SecurityInsights/Entities",
            "kind": "Bookmark",
            "properties": {
              "displayName": "SecurityEvent - 868f40f4698d",
              "created": "2020-06-17T15:34:01.4265524+00:00",
              "updated": "2020-06-17T15:34:01.4265524+00:00",
              "createdBy": {
                "objectId": "303ca914-5eb6-45e5-9417-fe0797c372fd",
                "email": "user@microsoft.com",
                "name": "user"
              },
              "updatedBy": {
                "objectId": "b03ca914-5eb6-45e5-9417-fe0797c372fd",
                "email": "user@microsoft.com",
                "name": "user"
              },
              "eventTime": "2020-06-17T15:34:01.4265524+00:00",
              "labels": [],
              "query": "SecurityEvent\r\n| take 1\n",
              "queryResult": "{\"TimeGenerated\":\"2020-05-24T01:24:25.67Z\",\"Account\":\"\\\\ADMINISTRATOR\",\"AccountType\":\"User\",\"Computer\":\"SecurityEvents\",\"EventSourceName\":\"Microsoft-Windows-Security-Auditing\",\"Channel\":\"Security\",\"Task\":12544,\"Level\":\"16\",\"EventID\":4625,\"Activity\":\"4625 - An account failed to log on.\",\"AuthenticationPackageName\":\"NTLM\",\"FailureReason\":\"%%2313\",\"IpAddress\":\"176.113.115.73\",\"IpPort\":\"0\",\"LmPackageName\":\"-\",\"LogonProcessName\":\"NtLmSsp \",\"LogonType\":3,\"LogonTypeName\":\"3 - Network\",\"Process\":\"-\",\"ProcessId\":\"0x0\",\"__entityMapping\":{\"\\\\ADMINISTRATOR\":\"Account\",\"SecurityEvents\":\"Host\"}}",
              "additionalData": {
                "ETag": "\"3b00acab-0000-0d00-0000-5f15e4ed0000\"",
                "EntityId": "afbd324f-6c48-459c-8710-8d1e1cd03812"
              },
              "friendlyName": "SecurityEvent - 868f40f4698d"
            }
          }
        ]
      }
    }
  }
}