Edit

securityGroupEntityMapping resource type

Namespace: microsoft.graph.security

Represents a mapping from columns in a custom detection rule query result to a security group entity that is attached to the resulting alert.

Base type: entityMapping.

Properties

Property Type Description
distinguishedNameColumn String Name of the detection query column that maps to the distinguished name of the alert entity.
objectIdColumn String Name of the detection query column that maps to the object ID of the alert entity.
sidColumn String Name of the detection query column that maps to the security identifier (SID) of the alert entity.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.securityGroupEntityMapping",
  "distinguishedNameColumn": "String",
  "objectIdColumn": "String",
  "sidColumn": "String"
}