Class MailClusterEntity


  • public final class MailClusterEntity
    extends EntityInner
    Represents a mail cluster entity.
    • Constructor Detail

      • MailClusterEntity

        public MailClusterEntity()
    • Method Detail

      • networkMessageIds

        public List<String> networkMessageIds()
        Get the networkMessageIds property: The mail message IDs that are part of the mail cluster.
        Returns:
        the networkMessageIds value.
      • countByDeliveryStatus

        public Object countByDeliveryStatus()
        Get the countByDeliveryStatus property: Count of mail messages by DeliveryStatus string representation.
        Returns:
        the countByDeliveryStatus value.
      • countByThreatType

        public Object countByThreatType()
        Get the countByThreatType property: Count of mail messages by ThreatType string representation.
        Returns:
        the countByThreatType value.
      • countByProtectionStatus

        public Object countByProtectionStatus()
        Get the countByProtectionStatus property: Count of mail messages by ProtectionStatus string representation.
        Returns:
        the countByProtectionStatus value.
      • threats

        public List<String> threats()
        Get the threats property: The threats of mail messages that are part of the mail cluster.
        Returns:
        the threats value.
      • query

        public String query()
        Get the query property: The query that was used to identify the messages of the mail cluster.
        Returns:
        the query value.
      • queryTime

        public OffsetDateTime queryTime()
        Get the queryTime property: The query time.
        Returns:
        the queryTime value.
      • mailCount

        public Integer mailCount()
        Get the mailCount property: The number of mail messages that are part of the mail cluster.
        Returns:
        the mailCount value.
      • isVolumeAnomaly

        public Boolean isVolumeAnomaly()
        Get the isVolumeAnomaly property: Is this a volume anomaly mail cluster.
        Returns:
        the isVolumeAnomaly value.
      • source

        public String source()
        Get the source property: The source of the mail cluster (default is 'O365 ATP').
        Returns:
        the source value.
      • clusterSourceIdentifier

        public String clusterSourceIdentifier()
        Get the clusterSourceIdentifier property: The id of the cluster source.
        Returns:
        the clusterSourceIdentifier value.
      • clusterSourceType

        public String clusterSourceType()
        Get the clusterSourceType property: The type of the cluster source.
        Returns:
        the clusterSourceType value.
      • clusterQueryStartTime

        public OffsetDateTime clusterQueryStartTime()
        Get the clusterQueryStartTime property: The cluster query start time.
        Returns:
        the clusterQueryStartTime value.
      • clusterQueryEndTime

        public OffsetDateTime clusterQueryEndTime()
        Get the clusterQueryEndTime property: The cluster query end time.
        Returns:
        the clusterQueryEndTime value.
      • clusterGroup

        public String clusterGroup()
        Get the clusterGroup property: The cluster group.
        Returns:
        the clusterGroup value.
      • additionalData

        public Map<String,​Object> additionalData()
        Get the additionalData property: A bag of custom fields that should be part of the entity and will be presented to the user.
        Returns:
        the additionalData value.
      • friendlyName

        public String friendlyName()
        Get the friendlyName property: The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.
        Returns:
        the friendlyName value.