| Name | Description | |
|---|---|---|
 | CIDR | the CIDR of the IP address (Classless Inter-Domain Routing) |
| Context | Gets or sets the context. |
| Description | A optional custom provided description of the incident |
| Expires | The UTC date the violation will expire |
| FWSession | Gets the firewall session. |
| GuardAction | Gets the guard action on the incident. |
| GuardResponse | Gets the guard response. |
| IndecentId | Gets the indecent identifier. |
| InterceptLocation | Gets or sets the intercept location for the incident. |
| IPAddress | The IP address of the user that caused the incident |
| LastTriggered | Gets or sets the last UTC triggered date. |
| LatLong | The geographical map location to use for the incident, will contain either the country capital or the city |
| Location | The location known at the time the incident was raised |
| MachineName | Gets the name of the machine that recorded the incident. |
| Method | The method used when requesting the resource |
| PageGroupId | Gets the page group identifier as assigned by the firewall. |
| PageRequestTrace | Gets the page group identifier as assigned by the framework. |
| Path | The path portion of the URL's that this user triggered this incident on |
| PayloadInfo | Gets the payload information if a offensive response. |
| Reason | Gets or sets the reason. |
| Reported | Gets or sets the reported date (UTC). |
| SessionId | Gets the session identifier that the active when the incident was reported. |
| Status | firewall Workflow status |
| Triggered | Gets or sets the count of how ofter the user triggered the violation before expired. |
| UnblockReported | The date that unblocking was reported |
| User | Gets or sets the user. |
| UserIncidentNr | the how many'eth incident is it that this user created |
| WasRedirected | Indicated that the incident caused a redirect |
| WhoIsRangeId | The ISP range ID |