Valeurs d’énumération de sécurité

Espace de noms : microsoft.graph.security

Valeurs appInfoCsaStarLevel

Member
selfAssessment
certification
attestation
cStarAssessment
continuousMonitoring
unknown
unknownFutureValue

Valeurs appInfoDataAtRestEncryptionMethod

Member
Aes
Bitlocker
Blowfish
des3
des
rc4
Rsa
notSupported
unknown
unknownFutureValue

Valeurs appInfoDataRetentionPolicy

Member
dataRetained
deletedImmediately
deletedWithinTwoWeeks
deletedWithinOneMonth
deletedWithinThreeMonths
deletedWithinMoreThanThreeMonths
unknown
unknownFutureValue

Valeurs appInfoFedRampLevel

Member
Haute
Modérée
Faible
liSaaS
unknown
unknownFutureValue
notSupported

Valeurs appInfoHolding

Member
Privé
public
unknown
unknownFutureValue

Valeurs appInfoPciDssVersion

Member
v1
v2
v3
v3_1
v3_2
v3_2_1
notSupported
unknown
unknownFutureValue
v3, v4

Valeurs appInfoEncryptionProtocol

Member
tls1_0
tls1_1
tls1_2
tls1_3
notApplicable
notSupported
unknown
unknownFutureValue
ssl3

Valeurs appInfoUploadedDataTypes

Member
Documents
mediaFiles
codingFiles
creditCards
databaseFiles
none
unknown
unknownFutureValue

Valeurs cloudAppInfoState

Member
true
false
unknown
unknownFutureValue

Valeurs entityType

Member
userName
ipAddress
Machinename
Autres
unknown
unknownFutureValue

Valeurs mailboxConfigurationType

Member
mailForwardingRule
owaSettings
ewsSettings
mailDelegation
userInboxRule
unknownFutureValue

Valeurs logDataProvider

Member
Barracuda
Bluecoat
Checkpoint
ciscoAsa
ciscoIronportProxy
Fortigate
paloAlto
Calmar
zscaler
mcafeeSwg
ciscoScanSafe
juniperSrx
sophosSg
websenseV75
websenseSiemCef
machineZoneMeraki
squidNative
ciscoFwsm
microsoftIsaW3C
Sonicwall
sophosCyberoam
clavister
customParser
juniperSsg
zscalerQradar
juniperSrxSd
juniperSrxWelf
microsoftConditionalAppAccess
ciscoAsaFirepower
genericCef
genericLeef
genericW3C
Ifilter
checkpointXml
checkpointSmartViewTracker
barracudaNextGenFw
barracudaNextGenFwWeblog
microsoftDefenderForEndpoint
zscalerCef
sophosXg
iboss
point de force
fortios
ciscoIronportWsaIi
paloAltoLeef
forcepointLeef
Stormshield
contentkeeper
ciscoIronportWsaIi
checkpointCef
corrata
ciscoFirepowerV6
menloSecurityCef
watchguardXtm
openSystemsSecureWebGateway
wandera
unknownFutureValue

Valeurs receiverProtocol

Member
Ftp
Ftps
syslogUdp
syslogTcp
syslogTls
unknownFutureValue

Valeurs trafficType

Member
downloadedBytes
uploadBytes
unknown
unknownFutureValue

Valeurs auditLogQueryStatus

Member
notStarted
Exécution
Réussi
Échoué
Annulé
unknownFutureValue

Valeurs auditLogUserType

Member
Régulier
Réservés au
Admin
dcAdmin
system
application
servicePrincipal
customPolicy
systemPolicy
partnerTechnician
Invités
unknownFutureValue

Valeurs actionAfterRetentionPeriod

Member
none
delete
startDispositionReview
unknownFutureValue

valeurs behaviorDuringRetentionPeriod

Member
doNotRetain
Conserver
retainAsRecord
retainAsRegulatoryRecord
unknownFutureValue

valeurs contentFormat

Member
text
html
Markdown
unknownFutureValue

valeurs defaultRecordBehavior

Member
startLocked
startUnlocked
unknownFutureValue

Valeurs detectionStatus

Member
Détecté
Bloqué
Empêché
unknownFutureValue

Valeurs eventPropagationStatus

Member
none
inProcessing
Échoué
success
unknownFutureValue

Valeurs eventStatusType

Member
Attente
error
success
notAvaliable
unknownFutureValue

Valeurs hostPortProtocol

Member
tcp
Udp
unknownFutureValue

Valeurs hostPortStatus

Member
Ouvert
Filtrée
Fermé
unknownFutureValue

Valeurs hostReputationClassification

Member
unknown
Neutre
Suspect
Malveillants
unknownFutureValue

Valeurs hostReputationRuleSeverity

Member
unknown
Faible
medium
Haute
unknownFutureValue

valeurs indicatorSource

Member
Microsoft
osint
public
unknownFutureValue

valeurs intelligenceProfileKind

Member
acteur
Outil
unknownFutureValue

Valeurs queryType

Member
fichiers
messages
unknownFutureValue

valeurs retentionTrigger

Member
dateLabeled
dateCreated
dateModified
dateOfEvent
unknownFutureValue

valeurs vulnerabilitySeverity

Member
none
Faible
medium
Haute
Critique
unknownFutureValue

Valeurs deviceAssetIdentifier

Member
deviceId
deviceName
remoteDeviceName
targetDeviceName
destinationDeviceName
unknownFutureValue

Valeurs deviceIdEntityIdentifier

Member
deviceId
unknownFutureValue

valeurs disableUserEntityIdentifier

Member
accountSid
initiatingProcessAccountSid
requestAccountSid
onPremSid
unknownFutureValue

Valeurs emailEntityIdentifier

Member
networkMessageId
recipientEmailAddress
unknownFutureValue

Valeurs fileEntityIdentifier

Member
sha1
initiatingProcessSHA1
sha256
initiatingProcessSHA256
unknownFutureValue

valeurs forceUserPasswordResetEntityIdentifier

Member
accountSid
initiatingProcessAccountSid
requestAccountSid
onPremSid
unknownFutureValue

valeurs huntingRuleErrorCode

Member
queryExecutionFailed
queryExecutionThrottling
queryExceededResultSize
queryLimitsExceeded
queryTimeout
alertCreationFailed
alertReportNotFound
partialRowsFailed
unknownFutureValue
noImpactedEntity

valeurs huntingRuleRunStatus

Member
Exécution
Terminé
Échoué
partiellement échoué
unknownFutureValue

Valeurs isolationType

Member
Plein
Sélective
unknownFutureValue

Valeurs mailboxAssetIdentifier

Member
accountUpn
fileOwnerUpn
initiatingProcessAccountUpn
lastModifyingAccountUpn
targetAccountUpn
senderFromAddress
senderDisplayName
recipientEmailAddress
senderMailFromAddress
unknownFutureValue

Valeurs markUserAsCompromisedEntityIdentifier

Member
accountObjectId
initiatingProcessAccountObjectId
servicePrincipalId
recipientObjectId
unknownFutureValue

Valeurs scopeType

Member
deviceGroup
unknownFutureValue

Valeurs stopAndQuarantineFileEntityIdentifier

Member
deviceId
sha1
initiatingProcessSHA1
unknownFutureValue

Valeurs userAssetIdentifier

Member
accountObjectId
accountSid
accountUpn
accountName
accountDomain
accountId
requestAccountSid
requestAccountName
requestAccountDomain
recipientObjectId
processAccountObjectId
initiatingAccountSid
initiatingProcessAccountUpn
initiatingAccountName
initiatingAccountDomain
servicePrincipalId
servicePrincipalName
targetAccountUpn
unknownFutureValue

Valeurs de submissionResultCategory

Member
notJunk
courrier indésirable
hameçonnage
programme malveillant
allowedByPolicy
blockedByPolicy
Parodie
unknown
noResultAvailable
unknownFutureValue
beingAnalyzed
notSubmittedToMicrosoft
hameçonnageSimulation
allowedDueToOrganizationOverride
blockedDueToOrganizationOverride
allowedDueToUserOverride
blockedDueToUserOverride
itemNotfound
menacesFound
noThreatsFound
domainImpersonation
userImpersonation
brandImpersonation
authenticationFailure
spoofedBlocked
spoofedAllowed
reasonLostInTransit
Vrac

valeurs antispamTeamsDirection

Member
unknown
Entrants
Sortants
intraorg
unknownFutureValue

Valeurs teamsDeliveryLocation

Member
unknown
Teams
quarantaine
Échoué
unknownFutureValue

Valeurs recipientType

Member
user
roleGroup
unknownFutureValue

valeurs teamsMessageDeliveryAction

Member
unknown
deliveredAsSpam
Livré
Bloqué
Remplacé
unknownFutureValue

Valeurs cloudAttachmentVersion

Member
Dernière
recent10
recent100
tout
unknownFutureValue

Valeurs documentVersion

Member
Dernière
recent10
recent100
tout
unknownFutureValue

Valeurs contentProcessingErrorType

Member
Transitoire
Permanent
unknownFutureValue

Valeurs dlpAction

Member
notifyUser
blockAccess
deviceRestriction
browserRestriction
unknownFutureValue
restrictAccess
generateAlert
generateIncidentReportAction
sPBlockAnonymousAccess
sPRuntimeAccessControl
sPSharingNotifyUser
sPSharingGenerateIncidentReport
restrictWebGrounding

Valeurs executionMode

Member
evaluateInline
evaluateOffline
unknownFutureValue

valeurs policyPivotProperty

Member
none
activité
emplacement
unknownFutureValue

valeurs protectionScopeState

Member
notModified
modifié
unknownFutureValue

Valeurs userActivityTypes

Member
none
uploadText
uploadFile
downloadText
downloadFile
unknownFutureValue

Valeurs userActivityType

Member
uploadText
uploadFile
downloadText
downloadFile
unknownFutureValue

Valeurs labelActionSource

Member
Manuelle
Automatique
recommandé
none
unknownFutureValue

valeurs sensitivityLabelTarget

Member
email
site
unifiedGroup
Travail d’équipe
unknownFutureValue

Valeurs applicationMode

Member
Manuelle
Automatique
recommandé

Valeurs restrictionAction

Member
Avertir
Audit
Bloc

Valeurs sensorCandidateActivationMode

Member
Manuelle
Automatisé
unknownFutureValue

valeurs d’action

Member
disable
Activer
forcePasswordReset
revokeAllSessions
requireUserToSignInAgain
markUserAsCompromised
unknownFutureValue

Valeurs alertStatus

Member
unknown
Nouveau
inProgress
résolu
unknownFutureValue

valeurs identityProvider

Member
entraID
activeDirectory
okta
unknownFutureValue

valeurs serviceSource

Member
unknown
microsoftDefenderForEndpoint
microsoftDefenderForIdentity
microsoftDefenderForCloudApps
microsoftDefenderForOffice365
microsoft365Defender
azureAdIdentityProtection
microsoftAppGovernance
dataLossPrevention
unknownFutureValue
microsoftDefenderForCloud
microsoftSentinel
microsoftThreatIntelligence

Valeurs serviceStatus

Member
Arrêté
démarrage
Exécution
désactivé
intégration
unknown
unknownFutureValue