KnownIncidentClassification enum
The reason the incident was closed
Fields
| BenignPositive | Incident was benign positive |
| FalsePositive | Incident was false positive |
| TruePositive | Incident was true positive |
| Undetermined | Incident classification was undetermined |