命名空间：microsoft.graph.security
antispamDirectionality 值
| Member |
| unknown |
| 入境 |
| 出境 |
| intraOrg |
| unknownFutureValue |
threatType 值
| Member |
| unknown |
| 垃圾邮件 |
| 恶意软件 |
| 网络钓鱼 |
| 无 |
| unknownFutureValue |
| Member |
| 低 |
| 中等 |
| 高 |
| unknownFutureValue |
| Member |
| moveToJunk |
| moveToInbox |
| hardDelete |
| softDelete |
| moveToDeletedItems |
| unknownFutureValue |
| moveToQuarantine |
appInfoCsaStarLevel 值
| Member |
| selfAssessment |
| 认证 |
| 认证 |
| cStarAssessment |
| continuousMonitoring |
| unknown |
| unknownFutureValue |
appInfoDataAtRestEncryptionMethod 值
| Member |
| Aes |
| bitLocker |
| 河豚 |
| des3 |
| Des |
| rc4 |
| Rsa |
| notSupported |
| unknown |
| unknownFutureValue |
appInfoDataRetentionPolicy 值
| Member |
| dataRetained |
| deletedImmediately |
| deletedWithinTwoWeeks |
| deletedWithinOneMonth |
| deletedWithinThreeMonths |
| deletedWithinMoreThanThreeMonths |
| unknown |
| unknownFutureValue |
appInfoFedRampLevel 值
| Member |
| 高 |
| 温和 |
| 低 |
| liSaaS |
| unknown |
| unknownFutureValue |
| notSupported |
appInfoHolding 值
| Member |
| 私人 |
| 公开 |
| unknown |
| unknownFutureValue |
appInfoPciDssVersion 值
| Member |
| v1 |
| v2 |
| v3 |
| v3_1 |
| v3_2 |
| v3_2_1 |
| notSupported |
| unknown |
| unknownFutureValue |
| v4 |
appInfoEncryptionProtocol 值
| Member |
| tls1_0 |
| tls1_1 |
| tls1_2 |
| tls1_3 |
| notApplicable |
| notSupported |
| unknown |
| unknownFutureValue |
| ssl3 |
appInfoUploadedDataTypes 值
| Member |
| 文档 |
| mediaFiles |
| codingFiles |
| 信用卡 |
| databaseFiles |
| 无 |
| unknown |
| unknownFutureValue |
cloudAppInfoState 值
| Member |
| true |
| false |
| unknown |
| unknownFutureValue |
entityType 值
| Member |
| userName |
| ipAddress |
| machineName |
| 其他 |
| unknown |
| unknownFutureValue |
mailboxConfigurationType 值
| Member |
| mailForwardingRule |
| owaSettings |
| ewsSettings |
| mailDelegation |
| userInboxRule |
| unknownFutureValue |
logDataProvider 值
| Member |
| 梭鱼 |
| bluecoat |
| 检查站 |
| ciscoAsa |
| ciscoIronportProxy |
| fortigate |
| paloAlto |
| 鱿鱼 |
| zscaler |
| mcafeeSwg |
| ciscoScanSafe |
| juniperSrx |
| sophosSg |
| websenseV75 |
| websenseSiemCef |
| machineZoneMeraki |
| squidNative |
| ciscoFwsm |
| microsoftIsaW3C |
| sonicwall |
| sophosCyberoam |
| clavister |
| customParser |
| juniperSsg |
| zscalerQradar |
| juniperSrxSd |
| juniperSrxWelf |
| microsoftConditionalAppAccess |
| ciscoAsaFirepower |
| genericCef |
| genericLeef |
| genericW3C |
| iFilter |
| checkpointXml |
| checkpointSmartViewTracker |
| barracudaNextGenFw |
| barracudaNextGenFwWeblog |
| microsoftDefenderForEndpoint |
| zscalerCef |
| sophosXg |
| iboss |
| forcepoint |
| fortios |
| ciscoIronportWsaIi |
| paloAltoLeef |
| forcepointLeef |
| stormshield |
| contentkeeper |
| ciscoIronportWsa Iii |
| checkpointCef |
| corrata |
| ciscoFirepowerV6 |
| menloSecurityCef |
| watchguardXtm |
| openSystemsSecureWebGateway |
| wandera |
| unknownFutureValue |
receiverProtocol 值
| Member |
| Ftp |
| ftps |
| syslogUdp |
| syslogTcp |
| syslogTls |
| unknownFutureValue |
trafficType 值
| Member |
| downloadedBytes |
| uploadedBytes |
| unknown |
| unknownFutureValue |
auditLogQueryStatus 值
| Member |
| notStarted |
| 运行 |
| 成功 |
| 失败 |
| 取消 |
| unknownFutureValue |
auditLogUserType 值
| Member |
| 定期 |
| 保留 |
| 管理 |
| dcAdmin |
| system |
| 应用程序 |
| servicePrincipal |
| customPolicy |
| systemPolicy |
| partnerTechnician |
| 客人 |
| unknownFutureValue |
actionAfterRetentionPeriod 值
| Member |
| 无 |
| delete |
| startDispositionReview |
| unknownFutureValue |
behaviorDuringRetentionPeriod 值
| Member |
| doNotRetain |
| 保留 |
| retainAsRecord |
| retainAsRegulatoryRecord |
| unknownFutureValue |
contentFormat 值
| Member |
| text |
| html |
| markdown |
| unknownFutureValue |
defaultRecordBehavior 值
| Member |
| startLocked |
| startUnlocked |
| unknownFutureValue |
detectionStatus 值
| Member |
| 检测 |
| 封锁 |
| 阻止 |
| unknownFutureValue |
eventPropagationStatus 值
| Member |
| 无 |
| inProcessing |
| 失败 |
| success |
| unknownFutureValue |
eventStatusType 值
| Member |
| 等待 |
| error |
| success |
| notAvaliable |
| unknownFutureValue |
hostPortProtocol 值
| Member |
| tcp |
| Udp |
| unknownFutureValue |
hostPortStatus 值
| Member |
| 打开 |
| 过滤 |
| 关闭 |
| unknownFutureValue |
hostReputationClassification 值
| Member |
| unknown |
| 中性 |
| 可疑 |
| 恶意 |
| unknownFutureValue |
hostReputationRuleSeverity 值
| Member |
| unknown |
| 低 |
| 中等 |
| 高 |
| unknownFutureValue |
indicatorSource 值
| Member |
| microsoft |
| osint |
| 公开 |
| unknownFutureValue |
intelligenceProfileKind 值
| Member |
| actor |
| 工具 |
| unknownFutureValue |
queryType 值
| Member |
| files |
| messages |
| unknownFutureValue |
retentionTrigger 值
| Member |
| dateLabeled |
| dateCreated |
| dateModified |
| dateOfEvent |
| unknownFutureValue |
vulnerabilitySeverity 值
| Member |
| 无 |
| 低 |
| 中等 |
| 高 |
| 关键 |
| unknownFutureValue |
deviceAssetIdentifier 值
| Member |
| deviceId |
| deviceName |
| remoteDeviceName |
| targetDeviceName |
| destinationDeviceName |
| unknownFutureValue |
deviceIdEntityIdentifier 值
| Member |
| deviceId |
| unknownFutureValue |
disableUserEntityIdentifier 值
| Member |
| accountSid |
| initiatingProcessAccountSid |
| requestAccountSid |
| onPremSid |
| unknownFutureValue |
emailEntityIdentifier 值
| Member |
| networkMessageId |
| recipientEmailAddress |
| unknownFutureValue |
fileEntityIdentifier 值
| Member |
| sha1 |
| initiatingProcessSHA1 |
| sha256 |
| initiatingProcessSHA256 |
| unknownFutureValue |
forceUserPasswordResetEntityIdentifier 值
| Member |
| accountSid |
| initiatingProcessAccountSid |
| requestAccountSid |
| onPremSid |
| unknownFutureValue |
huntingRuleErrorCode 值
| Member |
| queryExecutionFailed |
| queryExecutionThrottling |
| queryExceededResultSize |
| queryLimitsExceeded |
| queryTimeout |
| alertCreationFailed |
| alertReportNotFound |
| partialRowsFailed |
| unknownFutureValue |
| noImpactedEntity |
huntingRuleRunStatus 值
| Member |
| 运行 |
| 完成 |
| 失败 |
| partiallyFailed |
| unknownFutureValue |
isolationType 值
| Member |
| 全 |
| 选择性 |
| unknownFutureValue |
mailboxAssetIdentifier 值
| Member |
| accountUpn |
| fileOwnerUpn |
| initiatingProcessAccountUpn |
| lastModificationAccountUpn |
| targetAccountUpn |
| senderFromAddress |
| senderDisplayName |
| recipientEmailAddress |
| senderMailFromAddress |
| unknownFutureValue |
markUserAsCompromisedEntityIdentifier 值
| Member |
| accountObjectId |
| initiatingProcessAccountObjectId |
| servicePrincipalId |
| recipientObjectId |
| unknownFutureValue |
scopeType 值
| Member |
| deviceGroup |
| unknownFutureValue |
stopAndQuarantineFileEntityIdentifier 值
| Member |
| deviceId |
| sha1 |
| initiatingProcessSHA1 |
| unknownFutureValue |
userAssetIdentifier 值
| Member |
| accountObjectId |
| accountSid |
| accountUpn |
| accountName |
| accountDomain |
| accountId |
| requestAccountSid |
| requestAccountName |
| requestAccountDomain |
| recipientObjectId |
| processAccountObjectId |
| initiatingAccountSid |
| initiatingProcessAccountUpn |
| initiatingAccountName |
| initiatingAccountDomain |
| servicePrincipalId |
| servicePrincipalName |
| targetAccountUpn |
| unknownFutureValue |
submissionResultCategory 值
| Member |
| notJunk |
| 垃圾邮件 |
| 仿冒 |
| 恶意软件 |
| allowedByPolicy |
| blockedByPolicy |
| 恶搞 |
| unknown |
| noResultAvailable |
| unknownFutureValue |
| beingAnalyzed |
| notSubmittedToMicrosoft |
| phishingSimulation |
| allowedDueToOrganizationOverride |
| blockedDueToOrganizationOverride |
| allowedDueToUserOverride |
| blockedDueToUserOverride |
| itemNotfound |
| threatsFound |
| noThreatsFound |
| domainImpersonation |
| userImpersonation |
| brandImpersonation |
| authenticationFailure |
| spoofedBlocked |
| spoofedAllowed |
| reasonLostInTransit |
| 散装 |
antispamTeamsDirection 值
| Member |
| unknown |
| 入境 |
| 出境 |
| intraorg |
| unknownFutureValue |
teamsDeliveryLocation 值
| Member |
| unknown |
| 团队 |
| 隔离 |
| 失败 |
| unknownFutureValue |
teamsMessageDeliveryAction 值
| Member |
| unknown |
| deliveredAsSpam |
| 交付 |
| 封锁 |
| 取代 |
| unknownFutureValue |
cloudAttachmentVersion 值
| Member |
| 最新 |
| recent10 |
| recent100 |
| 全部 |
| unknownFutureValue |
documentVersion 值
| Member |
| 最新 |
| recent10 |
| recent100 |
| 全部 |
| unknownFutureValue |
recipientType 值
| Member |
| 用户 |
| roleGroup |
| unknownFutureValue |
contentProcessingErrorType 值
| Member |
| 瞬 态 |
| 永久 |
| unknownFutureValue |
dlpAction 值
| Member |
| notifyUser |
| blockAccess |
| deviceRestriction |
| browserRestriction |
| unknownFutureValue |
| restrictAccess |
| generateAlert |
| generateIncidentReportAction |
| sPBlockAnonymousAccess |
| sPRuntimeAccessControl |
| sPSharingNotifyUser |
| sPSharingGenerateIncidentReport |
| restrictWebGrounding |
executionMode 值
| Member |
| evaluateInline |
| evaluateOffline |
| unknownFutureValue |
overrideOption 值
| Member |
| notAllowed |
| allowFalsePositiveOverride |
| allowWithJustification |
| allowWithoutJustification |
| unknownFutureValue |
| allowWithAcknowledgement |
policyPivotProperty 值
| Member |
| 无 |
| 活动 |
| 位置 |
| unknownFutureValue |
protectionScopeState 值
| Member |
| notModified |
| 修改内容 |
| unknownFutureValue |
userActivityTypes 值
| Member |
| 无 |
| uploadText |
| uploadFile |
| downloadText |
| downloadFile |
| unknownFutureValue |
userActivityType 值
| Member |
| uploadText |
| uploadFile |
| downloadText |
| downloadFile |
| unknownFutureValue |
labelActionSource 值
| Member |
| 手动 |
| 自动 |
| 建议 |
| 无 |
| unknownFutureValue |
sensitivityLabelTarget 值
| Member |
| 电子邮件 |
| 网站 |
| unifiedGroup |
| 团队合作 |
| unknownFutureValue |
applicationMode 值
restrictionAction 值
操作值
| Member |
| disable |
| 使 |
| forcePasswordReset |
| revokeAllSessions |
| requireUserToSignInAgain |
| markUserAsCompromised |
| unknownFutureValue |
alertStatus 值
| Member |
| unknown |
| 新增功能 |
| inProgress |
| 已解决 |
| unknownFutureValue |
identityProvider 值
| Member |
| entraID |
| activeDirectory |
| okta |
| unknownFutureValue |
sensorCandidateActivationMode 值
| Member |
| 手动 |
| 自动化 |
| unknownFutureValue |
serviceStatus 值
| Member |
| 停止 |
| 开始 |
| 运行 |
| 禁用 |
| 载入 |
| unknown |
| unknownFutureValue |
serviceSource 值
| Member |
| unknown |
| microsoftDefenderForEndpoint |
| microsoftDefenderForIdentity |
| microsoftDefenderForCloudApps |
| microsoftDefenderForOffice365 |
| microsoft365Defender |
| azureAdIdentityProtection |
| microsoftAppGovernance |
| dataLossPrevention |
| unknownFutureValue |
| microsoftDefenderForCloud |
| microsoftSentinel |
| microsoftThreatIntelligence |
environmentKind 值
| Member |
| azureSubscription |
| awsOrganization |
| awsAccount |
| gcpOrganization |
| gcpProject |
| dockersHubOrganization |
| devOpsConnection |
| azureDevOpsOrganization |
| gitHubOrganization |
| gitLabGroup |
| jFrogArtifactory |
| unknownFutureValue |
deviceType 值
| Member |
| domainController |
| adfs |
| Adc |
| entraConnect |
| unknownFutureValue |