Edit

Share via

registryKeyEvidence resource type

  • Article

Namespace: microsoft.graph.security

A registry key that is reported in the alert as evidence.

Inherits from alertEvidence.

Properties

Property Type Description
registryHive String Registry hive of the key that the recorded action was applied to.
registryKey String Registry key that the recorded action was applied to.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.registryKeyEvidence",
  "createdDateTime": "String (timestamp)",
  "verdict": "String",
  "remediationStatus": "String",
  "remediationStatusDetails": "String",
  "roles": [
    "String"
  ],
  "tags": [
    "String"
  ],
  "registryKey": "String",
  "registryHive": "String"
}