| DetectionMethods |
Methods used to detect malware, phishing, or other threats found in the email |
String |
| FileExtension |
File extension of the attachment. |
String |
| FileName |
Name of the file that the recorded action was applied to |
String |
| FileSize |
Size of the file in bytes |
Int64 |
| FileType |
File extension type |
String |
| NetworkMessageId |
Unique identifier for the email, generated by Microsoft 365 |
String |
| RecipientEmailAddress |
Email address of the recipient, or email address of the recipient after distribution list expansion |
String |
| RecipientObjectId |
Unique identifier for the email recipient in Microsoft Entra ID |
String |
| ReportId |
Unique identifier for the event |
String |
| SenderDisplayName |
Name of the sender displayed in the address book, typically a combination of a given or first name, a middle initial, and a last name or surname |
String |
| SenderFromAddress |
Sender email address in the FROM header, which is visible to email recipients on their email clients |
String |
| SenderObjectId |
Unique identifier for the sender’s account in Microsoft Entra ID |
String |
| SHA256 |
SHA-256 of the file that the recorded action was applied to |
String |
| SourceSystem |
|
String |
| TenantId |
|
String |
| ThreatNames |
Detection name for malware or other threats found |
String |
| ThreatTypes |
Verdict from the email filtering stack on whether the email contains malware, phishing, or other threats |
String |
| TimeGenerated |
|
DateTime |
| Timestamp |
Date and time when the record was generated |
DateTime |
| Type |
|
String |