MailClusterEntityProperties interface

Package:

@azure/arm-securityinsight

Mail cluster entity property bag.

Extends

EntityCommonProperties

Properties

clusterGroup	The cluster group NOTE: This property will not be serialized. It can only be populated by the server.
clusterQueryEndTime	The cluster query end time NOTE: This property will not be serialized. It can only be populated by the server.
clusterQueryStartTime	The cluster query start time NOTE: This property will not be serialized. It can only be populated by the server.
clusterSourceIdentifier	The id of the cluster source NOTE: This property will not be serialized. It can only be populated by the server.
clusterSourceType	The type of the cluster source NOTE: This property will not be serialized. It can only be populated by the server.
countByDeliveryStatus	Count of mail messages by DeliveryStatus string representation NOTE: This property will not be serialized. It can only be populated by the server.
countByProtectionStatus	Count of mail messages by ProtectionStatus string representation NOTE: This property will not be serialized. It can only be populated by the server.
countByThreatType	Count of mail messages by ThreatType string representation NOTE: This property will not be serialized. It can only be populated by the server.
isVolumeAnomaly	Is this a volume anomaly mail cluster NOTE: This property will not be serialized. It can only be populated by the server.
mailCount	The number of mail messages that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.
networkMessageIds	The mail message IDs that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.
query	The query that was used to identify the messages of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.
queryTime	The query time NOTE: This property will not be serialized. It can only be populated by the server.
source	The source of the mail cluster (default is 'O365 ATP') NOTE: This property will not be serialized. It can only be populated by the server.
threats	The threats of mail messages that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

Inherited Properties

additionalData	A bag of custom fields that should be part of the entity and will be presented to the user. NOTE: This property will not be serialized. It can only be populated by the server.
friendlyName	The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. NOTE: This property will not be serialized. It can only be populated by the server.

Property Details

clusterGroup

The cluster group NOTE: This property will not be serialized. It can only be populated by the server.

clusterGroup?: string

Property Value

string

clusterQueryEndTime

The cluster query end time NOTE: This property will not be serialized. It can only be populated by the server.

clusterQueryEndTime?: Date

Property Value

Date

clusterQueryStartTime

The cluster query start time NOTE: This property will not be serialized. It can only be populated by the server.

clusterQueryStartTime?: Date

Property Value

Date

clusterSourceIdentifier

The id of the cluster source NOTE: This property will not be serialized. It can only be populated by the server.

clusterSourceIdentifier?: string

Property Value

string

clusterSourceType

The type of the cluster source NOTE: This property will not be serialized. It can only be populated by the server.

clusterSourceType?: string

Property Value

string

countByDeliveryStatus

Count of mail messages by DeliveryStatus string representation NOTE: This property will not be serialized. It can only be populated by the server.

countByDeliveryStatus?: Record<string, unknown>

Property Value

Record<string, unknown>

countByProtectionStatus

Count of mail messages by ProtectionStatus string representation NOTE: This property will not be serialized. It can only be populated by the server.

countByProtectionStatus?: Record<string, unknown>

Property Value

Record<string, unknown>

countByThreatType

Count of mail messages by ThreatType string representation NOTE: This property will not be serialized. It can only be populated by the server.

countByThreatType?: Record<string, unknown>

Property Value

Record<string, unknown>

isVolumeAnomaly

Is this a volume anomaly mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

isVolumeAnomaly?: boolean

Property Value

boolean

mailCount

The number of mail messages that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

mailCount?: number

Property Value

number

networkMessageIds

The mail message IDs that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

networkMessageIds?: string[]

Property Value

string[]

query

The query that was used to identify the messages of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

query?: string

Property Value

string

queryTime

The query time NOTE: This property will not be serialized. It can only be populated by the server.

queryTime?: Date

Property Value

Date

source

The source of the mail cluster (default is 'O365 ATP') NOTE: This property will not be serialized. It can only be populated by the server.

source?: string

Property Value

string

threats

The threats of mail messages that are part of the mail cluster NOTE: This property will not be serialized. It can only be populated by the server.

threats?: string[]

Property Value

string[]

Inherited Property Details

additionalData

A bag of custom fields that should be part of the entity and will be presented to the user. NOTE: This property will not be serialized. It can only be populated by the server.

additionalData?: {[propertyName: string]: Record<string, unknown>}

Property Value

{[propertyName: string]: Record<string, unknown>}

Inherited From EntityCommonProperties.additionalData

friendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated. NOTE: This property will not be serialized. It can only be populated by the server.

friendlyName?: string

Property Value

string

Inherited From EntityCommonProperties.friendlyName