changes.mady.by.user Juan Tomás Alonso Nieto
Saved on Apr 28, 2023
cloud.office365.reporting.messagetrace
cloud.office365.reporting.safelinksdetail
cloud.office365.reporting.spoofmail
cloud.office365.security.scorecontrol
cloud.office365.security.scores
Field
Type
Extra fields
eventdate
timestamp
hostname
str
organization
messageId
received
senderAddress
recipientAddress
subject
status
toIP
ip4
fromIP
size
int4
messageTraceId
startDate
endDate
index
hostchain
✓
tag
rawMessage
clicktime
internalmessageid
clientmessageid
senderaddress
recipientaddress
url
urldomain
flags
action
appname
sourceid
detectedby
urltype
startdate
enddate
domain
date
eventtype
direction
messagecount
summarizeby
spoofedsender
truesender
senderip
sendinginfrastructure
aggregateby
spooftype
source
adminoverride
compauthresult
compauthreason
spfauthstatus
dkimauthstatus
dmarcauthstatus
id
azureTenantId
actionType
actionUrl
controlCategory
title
deprecated
bool
implementationCost
lastModifiedDateTime
maxScore
float8
rank
remediation
remediationImpact
service
threats
tier
userImpact
vendorInformation__provider
vendorInformation__providerVersion
vendorInformation__subProvider
vendorInformation__vendor
complianceInformation
controlStateUpdates
activeUserCount
createdDateTime
currentScore
enabledServices
licensedUserCount
averageComparativeScores
controlScores
cloud.office365.securitycompliancecenter
cloud.office365.sharepoint
cloud.office365.siem_agent_alert
cloud.office365.siem_agent_event
cloud.office365.teams