MailClusterEntityProperties interface

Package:
@azure/arm-securityinsight

Mail cluster entity property bag.

Extends
EntityCommonProperties

Properties

clusterGroup

The cluster group
clusterQueryEndTime

The cluster query end time
clusterQueryStartTime

The cluster query start time
clusterSourceIdentifier

The id of the cluster source
clusterSourceType

The type of the cluster source
countByDeliveryStatus

Count of mail messages by DeliveryStatus string representation
countByProtectionStatus

Count of mail messages by ProtectionStatus string representation
countByThreatType

Count of mail messages by ThreatType string representation
isVolumeAnomaly

Is this a volume anomaly mail cluster
mailCount

The number of mail messages that are part of the mail cluster
networkMessageIds

The mail message IDs that are part of the mail cluster
query

The query that was used to identify the messages of the mail cluster
queryTime

The query time
source

The source of the mail cluster (default is 'O365 ATP')
threats

The threats of mail messages that are part of the mail cluster

Inherited Properties

additionalData

A bag of custom fields that should be part of the entity and will be presented to the user.
friendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.

Property Details

clusterGroup

The cluster group

clusterGroup?: string

Property Value

string

clusterQueryEndTime

The cluster query end time

clusterQueryEndTime?: Date

Property Value

Date

clusterQueryStartTime

The cluster query start time

clusterQueryStartTime?: Date

Property Value

Date

clusterSourceIdentifier

The id of the cluster source

clusterSourceIdentifier?: string

Property Value

string

clusterSourceType

The type of the cluster source

clusterSourceType?: string

Property Value

string

countByDeliveryStatus

Count of mail messages by DeliveryStatus string representation

countByDeliveryStatus?: any

Property Value

any

countByProtectionStatus

Count of mail messages by ProtectionStatus string representation

countByProtectionStatus?: any

Property Value

any

countByThreatType

Count of mail messages by ThreatType string representation

countByThreatType?: any

Property Value

any

isVolumeAnomaly

Is this a volume anomaly mail cluster

isVolumeAnomaly?: boolean

Property Value

boolean

mailCount

The number of mail messages that are part of the mail cluster

mailCount?: number

Property Value

number

networkMessageIds

The mail message IDs that are part of the mail cluster

networkMessageIds?: string[]

Property Value

string[]

query

The query that was used to identify the messages of the mail cluster

query?: string

Property Value

string

queryTime

The query time

queryTime?: Date

Property Value

Date

source

The source of the mail cluster (default is 'O365 ATP')

source?: string

Property Value

string

threats

The threats of mail messages that are part of the mail cluster

threats?: string[]

Property Value

string[]

Inherited Property Details

additionalData

A bag of custom fields that should be part of the entity and will be presented to the user.

additionalData?: Record<string, any>

Property Value

Record<string, any>

Inherited From EntityCommonProperties.additionalData

friendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.

friendlyName?: string

Property Value

string

Inherited From EntityCommonProperties.friendlyName