detonationDetails resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents detonation details specific to email attachments and URLs. These details include the detonation chain, detonation summary, and observed behavior details to help customers understand the reason the attachment or URL is deemed malicious and detonated.

Properties

Property	Type	Description
analysisDateTime	DateTimeOffset	The time of detonation.
compromiseIndicators	microsoft.graph.security.compromiseIndicator collection	Represents indicators and its associated verdict that suggests whether an email is compromised.
detonationChain	microsoft.graph.security.detonationChain	The chain of detonation.
detonationObservables	microsoft.graph.security.detonationObservables	All observables in the detonation tree.
detonationVerdict	String	The verdict of the detonation.
detonationVerdictReason	String	The reason for the verdict of the detonation.
detonationBehaviourDetails	microsoft.graph.security.detonationBehaviourDetails	Shows the exact events that took place during detonation, and problematic or benign observations that contain URLs, IPs, domains, and files that were found during detonation
detonationScreenshotUri	String	Show any screenshots that were captured during detonation. No screenshots are captured if the URL opens into a link that directly downloads a file. However, you see the downloaded file in the detonation chain.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.detonationDetails",
  "analysisDateTime": "String (timestamp)",
  "detonationVerdict": "String",
  "detonationVerdictReason": "String",
  "detonationChain": {
    "@odata.type": "microsoft.graph.security.detonationChain"
  },
  "detonationObservables": {
    "@odata.type": "microsoft.graph.security.detonationObservables"
  },
  "detonationBehaviourDetails": {
    "@odata.type": "microsoft.graph.security.detonationBehaviourDetails"
  },
  "detonationScreenshotUri": "String",
  "compromiseIndicators": [
    {
      "@odata.type": "microsoft.graph.security.compromiseIndicator"
    }
  ]
}