MailClusterEntityProperties | @azure/arm-securityinsight

Mail cluster entity property bag.

Hierarchy

EntityCommonProperties
- MailClusterEntityProperties

Index

Properties

Optional additionalData

additionalData: undefined | {}

A bag of custom fields that should be part of the entity and will be presented to the user. NOTE: This property will not be serialized. It can only be populated by the server.

Optional clusterGroup

clusterGroup: undefined | string

The cluster group NOTE: This property will not be serialized. It can only be populated by the server.

Optional clusterQueryEndTime

clusterQueryEndTime: Date

The cluster query end time NOTE: This property will not be serialized. It can only be populated by the server.

Optional clusterQueryStartTime

clusterQueryStartTime: Date

The cluster query start time NOTE: This property will not be serialized. It can only be populated by the server.

Optional clusterSourceIdentifier

clusterSourceIdentifier: undefined | string

The id of the cluster source NOTE: This property will not be serialized. It can only be populated by the server.

Optional clusterSourceType

clusterSourceType: undefined | string

The type of the cluster source NOTE: This property will not be serialized. It can only be populated by the server.

Optional countByDeliveryStatus

countByDeliveryStatus: Record<string, unknown>

Count of mail messages by DeliveryStatus string representation NOTE: This property will not be serialized. It can only be populated by the server.

Optional countByProtectionStatus

countByProtectionStatus: Record<string, unknown>

Count of mail messages by ProtectionStatus string representation NOTE: This property will not be serialized. It can only be populated by the server.

Optional countByThreatType

countByThreatType: Record<string, unknown>

Count of mail messages by ThreatType string representation NOTE: This property will not be serialized. It can only be populated by the server.

Optional friendlyName

friendlyName: undefined | string

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. NOTE: This property will not be serialized. It can only be populated by the server.

Optional isVolumeAnomaly

isVolumeAnomaly: undefined | false | true

Is this a volume anomaly mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

Optional mailCount

mailCount: undefined | number

The number of mail messages that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

Optional networkMessageIds

networkMessageIds: string[]

The mail message IDs that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

Optional query

query: undefined | string

The query that was used to identify the messages of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

Optional queryTime

queryTime: Date

The query time NOTE: This property will not be serialized. It can only be populated by the server.

Optional source

source: undefined | string

The source of the mail cluster (default is 'O365 ATP') NOTE: This property will not be serialized. It can only be populated by the server.

Optional threats

threats: string[]

The threats of mail messages that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.