{
    "$schema": "http://adaptivecards.io/schemas/adaptive-card.json",
    "type": "AdaptiveCard",
    "version": "1.0",
    "msTeams": {
        "width": "full"
    },
    "fallbackText": "@{triggerBody()?['AlertDisplayName']} - @{triggerBody()?['Description']}",
    "body": [
        {
            "type": "TextBlock",
            "text": "Azure Security Center Alert",
            "weight": "bolder",
            "size": "large",
            "id": "acTitle"
        },
        {
            "type": "TextBlock",
            "text": "@{triggerBody()?['AlertDisplayName']}",
            "weight": "Bolder",
            "wrap": true,
            "id": "acSubHeader"
        },
        {
            "type": "TextBlock",
            "text": "@{triggerBody()?['Description']}",
            "wrap": true,
            "id": "acDescriptionArea"
        },
        {
            "type": "FactSet",
            "facts": [
                {
                    "title": "Severity:",
                    "value": "@{triggerBody()?['Severity']}"
                },
                {
                    "title": "Attacked resource:",
                    "value": "@{triggerBody()?['CompromisedEntity']}"
                },
                {
                    "title": "Detected by:",
                    "value": "@{triggerBody()?['VendorName']} - @{triggerBody()?['ProductName']}"
                },
                {
                    "title": "Detection time:",
                    "value": "@{triggerBody()?['TimeGenerated']}"
                },
                {
                    "title": "Alert Id:",
                    "value": "@{triggerBody()?['SystemAlertId']}"
                }
            ],
            "id": "acFactSet"
        }
    ],
    "actions": [
      {
        "type": "Action.OpenUrl",
        "title": "See details in Securtity Center",
        "url": "@{triggerBody()?['AlertUri']}"
      }
    ]
}