Edit

emailAction resource type

Namespace: microsoft.graph.security

Represents an automatedAction that targets an email message returned by a detectionRule hunting query. The action uses message and recipient columns from the query output to identify the email message.

Inherits from automatedAction.

Properties

Property Type Description
networkMessageIdColumn String Name of the hunting-query result column that contains the network message ID of the targeted email message.
recipientColumn String Name of the hunting-query result column that contains the recipient of the targeted email message.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.emailAction",
  "networkMessageIdColumn": "String",
  "recipientColumn": "String"
}