userEvidence resource type

Namespace: microsoft.graph.security

A user that is reported in the alert as evidence.

Inherits from alertEvidence.

Properties

Property Type Description
userAccount microsoft.graph.security.userAccount The user account details.

Relationships

None.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.security.userEvidence",
  "createdDateTime": "String (timestamp)",
  "verdict": "String",
  "remediationStatus": "String",
  "remediationStatusDetails": "String",
  "roles": [
    "String"
  ],
  "tags": [
    "String"
  ],
  "userAccount": {
    "@odata.type": "microsoft.graph.security.userAccount"
  }
}