| _BilledSize |
|
Double |
| _IsBillable |
|
String |
| DetectionMethods |
Sender email address in the from header, which is visible to email recipients on their email clients. |
String |
| FileName |
Name of the file that the recorded action was applied to. |
String |
| FileSize |
Size of the file in bytes. |
Int64 |
| FileType |
File extension type. |
String |
| NetworkMessageId |
Unique identifier for the email, generated by Office 365. |
String |
| RecipientEmailAddress |
Email address of the recipient, or email address of the recipient after distribution list expansion. |
String |
| RecipientObjectId |
Email recipient unique identifier in Azure AD. |
String |
| ReportId |
Unique identifier for the event. |
String |
| SenderDisplayName |
Sender email address in the from header, which is visible to email recipients on their email clients. |
String |
| SenderFromAddress |
Sender domain in the from header, which is visible to email recipients on their email clients. |
String |
| SenderObjectId |
Sender email address in the from header, which is visible to email recipients on their email clients. |
String |
| SHA256 |
SHA-256 of the file that the recorded action was applied to. |
String |
| SourceSystem |
|
String |
| TenantId |
|
String |
| ThreatNames |
Sender email address in the from header, which is visible to email recipients on their email clients. |
String |
| ThreatTypes |
Verdict from the email filtering stack on whether the email contains malware, phishing, or other threats. |
String |
| TimeGenerated |
Date and time (UTC) when the record was generated. |
DateTime |
| Timestamp |
Date and time when the record was generated |
DateTime |
| Type |
The name of the table |
String |