MailClusterEntity interface

Package:
@azure/arm-securityinsight

Represents a mail cluster entity.

Extends
Entity

Properties

additionalData

A bag of custom fields that should be part of the entity and will be presented to the user.
clusterGroup

The cluster group
clusterQueryEndTime

The cluster query end time
clusterQueryStartTime

The cluster query start time
clusterSourceIdentifier

The id of the cluster source
clusterSourceType

The type of the cluster source
countByDeliveryStatus

Count of mail messages by DeliveryStatus string representation
countByProtectionStatus

Count of mail messages by ProtectionStatus string representation
countByThreatType

Count of mail messages by ThreatType string representation
friendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.
isVolumeAnomaly

Is this a volume anomaly mail cluster
kind

The kind of the entity.
mailCount

The number of mail messages that are part of the mail cluster
networkMessageIds

The mail message IDs that are part of the mail cluster
query

The query that was used to identify the messages of the mail cluster
queryTime

The query time
source

The source of the mail cluster (default is 'O365 ATP')
threats

The threats of mail messages that are part of the mail cluster

Inherited Properties

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
name

The name of the resource
systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.
type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Property Details

additionalData

A bag of custom fields that should be part of the entity and will be presented to the user.

additionalData?: Record<string, any>

Property Value

Record<string, any>

clusterGroup

The cluster group

clusterGroup?: string

Property Value

string

clusterQueryEndTime

The cluster query end time

clusterQueryEndTime?: Date

Property Value

Date

clusterQueryStartTime

The cluster query start time

clusterQueryStartTime?: Date

Property Value

Date

clusterSourceIdentifier

The id of the cluster source

clusterSourceIdentifier?: string

Property Value

string

clusterSourceType

The type of the cluster source

clusterSourceType?: string

Property Value

string

countByDeliveryStatus

Count of mail messages by DeliveryStatus string representation

countByDeliveryStatus?: any

Property Value

any

countByProtectionStatus

Count of mail messages by ProtectionStatus string representation

countByProtectionStatus?: any

Property Value

any

countByThreatType

Count of mail messages by ThreatType string representation

countByThreatType?: any

Property Value

any

friendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.

friendlyName?: string

Property Value

string

isVolumeAnomaly

Is this a volume anomaly mail cluster

isVolumeAnomaly?: boolean

Property Value

boolean

kind

The kind of the entity.

kind: "MailCluster"

Property Value

"MailCluster"

mailCount

The number of mail messages that are part of the mail cluster

mailCount?: number

Property Value

number

networkMessageIds

The mail message IDs that are part of the mail cluster

networkMessageIds?: string[]

Property Value

string[]

query

The query that was used to identify the messages of the mail cluster

query?: string

Property Value

string

queryTime

The query time

queryTime?: Date

Property Value

Date

source

The source of the mail cluster (default is 'O365 ATP')

source?: string

Property Value

string

threats

The threats of mail messages that are part of the mail cluster

threats?: string[]

Property Value

string[]

Inherited Property Details

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

id?: string

Property Value

string

Inherited From Entity.id

name

The name of the resource

name?: string

Property Value

string

Inherited From Entity.name

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

systemData?: SystemData

Property Value

SystemData

Inherited From Entity.systemData

type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

type?: string

Property Value

string

Inherited From Entity.type