← Browse all tablesLoading table information…
Contribute structured examples for this table using the PowerShell tool. Submit a synthetic example.
CampaignInfo Schema
Table description
| TableSection |
TableType |
TableSectionName |
Description |
Source |
| Emails |
Regular |
|
This table shows information about campaigns identified by Microsoft Defender for Office 365 |
Defender |
Table retention
| ColdDays |
HotDays |
TotalInteractiveDays |
| 0 |
30 |
30 |
Schema
| Name |
Description |
Type |
| CampaignId |
Unique identifier for the campaign, generated by Office 365 |
String |
| CampaignName |
Name of the email campaign |
String |
| CampaignSubType |
Contains more details about the campaign, like the brand being phished or related malware campaigns, if available |
String |
| CampaignType |
Category of the campaign |
String |
| NetworkMessageId |
Unique identifier for the email, generated by Microsoft 365 |
String |
| RecipientEmailAddress |
Email address of the recipient, or email address of the recipient after distribution list expansion |
String |
| ReportId |
Unique identifier for the event |
String |
| SourceSystem |
|
String |
| TenantId |
|
String |
| TimeGenerated |
|
DateTime |
| Timestamp |
Date and time when the record was generated |
DateTime |
| Type |
|
String |
Schema changes
| Date |
Action |
| 2026-10-07 |
Column TenantId added |
| 2026-10-07 |
Column Type added |
| 2026-10-07 |
Column SourceSystem added |
| 2026-10-07 |
Column TimeGenerated added |
| 2026-02-27 |
Column TenantId removed |
| 2026-02-27 |
Column Type removed |
| 2026-02-27 |
Column SourceSystem removed |
| 2026-02-27 |
Column TimeGenerated removed |
| 2026-01-02 |
Table added to tracking |