Edit

mailMessageEntityMapping resource type

Namespace: microsoft.graph.security

Represents a mapping from columns in a custom detection rule query result to a mail message entity that is attached to the resulting alert.

Base type: entityMapping.

Properties

Property Type Description
networkMessageIdColumn String Name of the detection query column that maps to the network message ID of the alert entity.
recipientColumn String Name of the detection query column that maps to the recipient of the alert entity.
senderColumn String Name of the detection query column that maps to the sender of the alert entity.
subjectColumn String Name of the detection query column that maps to the subject of the alert entity.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.mailMessageEntityMapping",
  "networkMessageIdColumn": "String",
  "recipientColumn": "String",
  "senderColumn": "String",
  "subjectColumn": "String"
}