Hinweis
Für den Zugriff auf diese Seite ist eine Autorisierung erforderlich. Sie können versuchen, sich anzumelden oder das Verzeichnis zu wechseln.
Für den Zugriff auf diese Seite ist eine Autorisierung erforderlich. Sie können versuchen, das Verzeichnis zu wechseln.
Namespace: microsoft.graph.security
appCategory-Werte
| Member |
|---|
| Sicherheit |
| Zusammenarbeit |
| hostingServices |
| onlineMeetings |
| newsAndEntertainment |
| eCommerce |
| Bildung |
| cloudStorage |
| Marketing |
| operationsManagement |
| Gesundheit |
| Werbung |
| Produktivität |
| accountingAndFinance |
| contentManagement |
| contentSharing |
| businessManagement |
| Kommunikationen |
| dataAnalytics |
| businessIntelligence |
| webemail |
| codeHosting |
| webAnalytics |
| socialNetwork |
| crm |
| Foren |
| humanResourceManagement |
| transportAndTravel |
| productDesign |
| Umsatz |
| cloudComputingPlatform |
| projectManagement |
| personalInstantMessaging |
| developmentTools |
| itServices |
| supplyChainAndLogistics |
| propertyManagement |
| customerSupport |
| internetOfThings |
| vendorManagementSystems |
| websiteMonitoring |
| generativeAi |
| unknown |
| unknownFutureValue |
| aiModelProvider |
| mcpServer |
| clientAiApp |
appInfoCsaStarLevel-Werte
| Member |
|---|
| selfAssessment |
| Zertifizierung |
| Bescheinigung |
| cStarAssessment |
| continuousMonitoring |
| unknown |
| unknownFutureValue |
appInfoDataAtRestEncryptionMethod-Werte
| Member |
|---|
| aes |
| bitLocker |
| Kugelfisch |
| des3 |
| des |
| rc4 |
| rsa |
| notSupported |
| unknown |
| unknownFutureValue |
appInfoDataRetentionPolicy-Werte
| Member |
|---|
| dataRetained |
| deletedImmediately |
| deletedWithinTwoWeeks |
| deletedWithinOneMonth |
| deletedWithinThreeMonths |
| deletedWithinMoreThanThreeMonths |
| unknown |
| unknownFutureValue |
appInfoFedRampLevel-Werte
| Member |
|---|
| Hoch |
| mäßig |
| Niedrig |
| liSaaS |
| unknown |
| unknownFutureValue |
| notSupported |
appInfoHolding-Werte
| Member |
|---|
| privat |
| Öffentlich |
| unknown |
| unknownFutureValue |
appInfoPciDssVersion-Werte
| Member |
|---|
| v1 |
| v2 |
| v3 |
| v3_1 |
| v3_2 |
| v3_2_1 |
| notSupported |
| unknown |
| unknownFutureValue |
| v3, v4 |
appInfoEncryptionProtocol-Werte
| Member |
|---|
| tls1_0 |
| tls1_1 |
| tls1_2 |
| tls1_3 |
| notApplicable |
| notSupported |
| unknown |
| unknownFutureValue |
| ssl3 |
appInfoUploadedDataTypes-Werte
| Member |
|---|
| Dokumente |
| mediaFiles |
| codingFiles |
| creditCards |
| databaseFiles |
| keine |
| unknown |
| unknownFutureValue |
cloudAppInfoState-Werte
| Member |
|---|
| true |
| false |
| unknown |
| unknownFutureValue |
entityType-Werte
| Member |
|---|
| userName |
| ipAddress |
| machineName |
| andere |
| unknown |
| unknownFutureValue |
logDataProvider-Werte
| Member |
|---|
| Barracuda |
| blauer Mantel |
| Kontrollpunkt |
| ciscoAsa |
| ciscoIronportProxy |
| fortigate |
| paloAlto |
| Tintenfisch |
| zscaler |
| mcafeeSwg |
| ciscoScanSafe |
| JuniperSrx |
| sophosSg |
| websenseV75 |
| websenseSiemCef |
| machineZoneMeraki |
| squidNative |
| ciscoFwsm |
| microsoftIsaW3C |
| Sonicwall |
| sophosCyberoam |
| Clavister |
| customParser |
| WacholderSsg |
| zscalerQradar |
| JuniperSrxSd |
| JuniperSrxWelf |
| microsoftConditionalAppAccess |
| ciscoAsaFirepower |
| genericCef |
| genericLeef |
| genericW3C |
| iFilter |
| checkpointXml |
| checkpointSmartViewTracker |
| barracudaNextGenFw |
| barracudaNextGenFwWeblog |
| microsoftDefenderForEndpoint |
| zscalerCef |
| sophosXg |
| iboss |
| Forcepoint |
| fortios |
| ciscoIronportWsaIi |
| paloAltoLeef |
| forcepointLeef |
| stormshield |
| contentkeeper |
| ciscoIronportWsaIii |
| checkpointCef |
| corrata |
| ciscoFirepowerV6 |
| menloSecurityCef |
| watchguardXtm |
| openSystemsSecureWebGateway |
| wandera |
| unknownFutureValue |
receiverProtocol-Werte
| Member |
|---|
| ftp |
| ftps |
| syslogUdp |
| syslogTcp |
| syslogTls |
| unknownFutureValue |
trafficType-Werte
| Member |
|---|
| downloadBytes |
| uploadedBytes |
| unknown |
| unknownFutureValue |
auditLogQueryStatus-Werte
| Member |
|---|
| notStarted |
| Ausgeführte |
| Gelungen |
| misslungen |
| abgebrochen |
| unknownFutureValue |
auditLogRecordType-Werte
| Member |
|---|
| exchangeAdmin |
| exchangeItem |
| exchangeItemGroup |
| sharePoint |
| syntheticProbe |
| sharePointFileOperation |
| oneDrive |
| azureActiveDirectory |
| azureActiveDirectoryAccountLogon |
| dataCenterSecurityCmdlet |
| complianceDLPSharePoint |
| schwanken |
| complianceDLPExchange |
| sharePointSharingOperation |
| azureActiveDirectoryStsLogon |
| skypeForBusinessPSTNUsage |
| skypeForBusinessUsersBlocked |
| securityComplianceCenterEOPCmdlet |
| exchangeAggregatedOperation |
| powerBIAudit |
| crm |
| Yammer |
| skypeForBusinessCmdlets |
| Entdeckung |
| microsoftTeams |
| threatIntelligence |
| mailSubmission |
| microsoftFlow |
| aeD |
| microsoftStream |
| complianceDLPSharePointClassification |
| threatFinder |
| Projekt |
| sharePointListOperation |
| sharePointCommentOperation |
| dataGovernance |
| kaizala |
| securityComplianceAlerts |
| threatIntelligenceUrl |
| securityComplianceInsights |
| mipLabel |
| workplaceAnalytics |
| powerAppsApp |
| powerAppsPlan |
| threatIntelligenceAtpContent |
| labelContentExplorer |
| teamsHealthcare |
| exchangeItemAggregated |
| hygieneEvent |
| dataInsightsRestApiAudit |
| informationBarrierPolicyApplication |
| sharePointListItemOperation |
| sharePointContentTypeOperation |
| sharePointFieldOperation |
| microsoftTeamsAdmin |
| hrSignal |
| microsoftTeamsDevice |
| microsoftTeamsAnalytics |
| informationWorkerProtection |
| Feldzug |
| dlpEndpoint |
| airInvestigation |
| Unter Quarantäne stellen |
| microsoftForms |
| applicationAudit |
| complianceSupervisionExchange |
| customerKeyServiceEncryption |
| officeNative |
| mipAutoLabelSharePointItem |
| mipAutoLabelSharePointPolicyLocation |
| microsoftTeamsShifts |
| secureScore |
| mipAutoLabelExchangeItem |
| cortanaBriefing |
| search |
| wdatpAlerts |
| powerPlatformAdminDlp |
| powerPlatformAdminEnvironment |
| mdatpAudit |
| sensitivityLabelPolicyMatch |
| sensitivityLabelAction |
| sensitivityLabeledFileAction |
| attackSim |
| airManualInvestigation |
| securityComplianceRBAC |
| userTraining |
| airAdminActionInvestigation |
| mstic |
| physicalBadgingSignal |
| teamsEasyApprovals |
| aipDiscover |
| aipSensitivityLabelAction |
| aipProtectionAction |
| aipFileDeleted |
| aipHeartBeat |
| mcasAlerts |
| onPremisesFileShareScannerDlp |
| onPremisesSharePointScannerDlp |
| exchangeSearch |
| sharePointSearch |
| privacyDataMinimization |
| labelAnalyticsAggregate |
| myAnalyticsSettings |
| securityComplianceUserChange |
| complianceDLPExchangeClassification |
| complianceDLPEndpoint |
| mipExactDataMatch |
| msdeResponseActions |
| msdeGeneralSettings |
| msdeIndicatorsSettings |
| ms365DCustomDetection |
| msdeRolesSettings |
| mapgAlerts |
| mapgPolicy |
| mapgRemediation |
| privacyRemediationAction |
| privacyDigestEmail |
| mipAutoLabelSimulationProgress |
| mipAutoLabelSimulationCompletion |
| mipAutoLabelProgressFeedback |
| dlpSensitiveInformationType |
| mipAutoLabelSimulationStatistics |
| largeContentMetadata |
| microsoft365Group |
| cdpMlInferencingResult |
| filteringMailMetadata |
| cdpClassificationMailItem |
| cdpClassificationDocument |
| officeScriptsRunAction |
| filteringPostMailDeliveryAction |
| cdpUnifiedFeedback |
| tenantAllowBlockList |
| consumptionResource |
| healthcareSignal |
| dlpImportResult |
| cdpCompliancePolicyExecution |
| multiStageDisposition |
| privacyDataMatch |
| filteringDocMetadata |
| filteringEmailFeatures |
| powerBIDlp |
| filteringUrlInfo |
| filteringAttachmentInfo |
| coreReportingSettings |
| complianceConnector |
| powerPlatformLockboxResourceAccessRequest |
| powerPlatformLockboxResourceCommand |
| cdpPredictiveCodingLabel |
| cdpCompliancePolicyUserFeedback |
| webpageActivityEndpoint |
| omePortal |
| cmImprovementActionChange |
| filteringUrlClick |
| mipLabelAnalyticsAuditRecord |
| filteringEntityEvent |
| filteringRuleHits |
| filteringMailSubmission |
| labelExplorer |
| microsoftManagedServicePlatform |
| powerPlatformServiceActivity |
| scorePlatformGenericAuditRecord |
| filteringTimeTravelDocMetadata |
| wachsam |
| alertStatus |
| alertIncident |
| incidentStatus |
| Fall |
| caseInvestigation |
| recordsManagement |
| privacyRemediation |
| dataShareOperation |
| cdpDlpSensitive |
| ehrConnector |
| filteringMailGradingResult |
| publicFolder |
| privacyTenantAuditHistoryRecord |
| aipScannerDiscoverEvent |
| eduDataLakeDownloadOperation |
| m365ComplianceConnector |
| microsoftGraphDataConnectOperation |
| microsoftPurview |
| filteringEmailContentFeatures |
| powerPagesSite |
| powerAppsResource |
| plannerPlan |
| plannerCopyPlan |
| plannerTask |
| plannerRoster |
| plannerPlanList |
| plannerTaskList |
| plannerTenantSettings |
| projectForTheWebProject |
| projectForTheWebTask |
| projectForTheWebRoadmap |
| projectForTheWebRoadmapItem |
| projectForTheWebProjectSettings |
| projectForTheWebRoadmapSettings |
| quarantineMetadata |
| microsoftTodoAudit |
| timeTravelFilteringDocMetadata |
| teamsQuarantineMetadata |
| sharePointAppPermissionOperation |
| microsoftTeamsSensitivityLabelAction |
| filteringTeamsMetadata |
| filteringTeamsUrlInfo |
| filteringTeamsPostDeliveryAction |
| mdcAssessments |
| mdcRegulatoryComplianceStandards |
| mdcRegulatoryComplianceControls |
| mdcRegulatoryComplianceAssessments |
| mdcSecurityConnectors |
| mdaDataSecuritySignal |
| vivaGoals |
| filteringRuntimeInfo |
| attackSimAdmin |
| microsoftGraphDataConnectConsent |
| filteringAtpDetonationInfo |
| privacyPortal |
| managedTenants |
| unifiedSimulationMatchedItem |
| unifiedSimulationSummary |
| updateQuarantineMetadata |
| ms365DSuppressionRule |
| purviewDataMapOperation |
| filteringUrlPostClickAction |
| irmUserDefinedDetectionSignal |
| teamsUpdates |
| plannerRosterSensitivityLabel |
| ms365DIncident |
| filteringDelistingMetadata |
| complianceDLPSharePointClassificationExtended |
| microsoftDefenderForIdentityAudit |
| supervisoryReviewDayXInsight |
| defenderExpertsforXDRAdmin |
| cdpEdgeBlockedMessage |
| hostedRpa |
| cdpContentExplorerAggregateRecord |
| cdpHygieneAttachmentInfo |
| cdpHygieneSummary |
| cdpPostMailDeliveryAction |
| cdpEmailFeatures |
| cdpHygieneUrlInfo |
| cdpUrlClick |
| cdpPackageManagerHygieneEvent |
| filteringDocScan |
| timeTravelFilteringDocScan |
| mapgOnboard |
| unknownFutureValue |
auditLogUserType-Werte
| Member |
|---|
| regelmäßig |
| reserviert |
| Administrator |
| dcAdmin |
| System |
| Anwendung |
| servicePrincipal |
| customPolicy |
| systemPolicy |
| partnerTechnician |
| Gast |
| unknownFutureValue |
actionAfterRetentionPeriod-Werte
| Member |
|---|
| keine |
| Löschen |
| startDispositionReview |
| unknownFutureValue |
behaviorDuringRetentionPeriod-Werte
| Member |
|---|
| doNotRetain |
| behalten |
| retainAsRecord |
| retainAsRegulatoryRecord |
| unknownFutureValue |
contentFormat-Werte
| Member |
|---|
| text |
| HTML |
| MARKDOWN |
| unknownFutureValue |
defaultRecordBehavior-Werte
| Member |
|---|
| startLocked |
| startUnlocked |
| unknownFutureValue |
detectionStatus-Werte
| Member |
|---|
| entdeckt |
| gesperrt |
| verhinderte |
| unknownFutureValue |
eventPropagationStatus-Werte
| Member |
|---|
| keine |
| inProcessing |
| misslungen |
| Erfolgreich |
| unknownFutureValue |
eventStatusType-Werte
| Member |
|---|
| anhängig |
| error |
| Erfolgreich |
| notAvaliable |
| unknownFutureValue |
hostPortProtocol-Werte
| Member |
|---|
| tcp |
| udp |
| unknownFutureValue |
hostPortStatus-Werte
| Member |
|---|
| offen |
| gefiltert |
| geschlossen |
| unknownFutureValue |
hostReputationClassification-Werte
| Member |
|---|
| unknown |
| neutral |
| argwöhnisch |
| böswillig |
| unknownFutureValue |
hostReputationRuleSeverity-Werte
| Member |
|---|
| unknown |
| Niedrig |
| medium |
| Hoch |
| unknownFutureValue |
indicatorSource-Werte
| Member |
|---|
| microsoft |
| osint |
| Öffentlich |
| unknownFutureValue |
intelligenceProfileKind-Werte
| Member |
|---|
| Akteur |
| Werkzeug |
| unknownFutureValue |
queryType-Werte
| Member |
|---|
| files |
| messages |
| unknownFutureValue |
retentionTrigger-Werte
| Member |
|---|
| dateLabeled |
| dateCreated |
| dateModified |
| dateOfEvent |
| unknownFutureValue |
VulnerabilitySeverity-Werte
| Member |
|---|
| keine |
| Niedrig |
| medium |
| Hoch |
| Kritisch |
| unknownFutureValue |
deviceAssetIdentifier-Werte
| Member |
|---|
| deviceId |
| deviceName |
| remoteDeviceName |
| targetDeviceName |
| destinationDeviceName |
| unknownFutureValue |
deviceIdEntityIdentifier-Werte
| Member |
|---|
| deviceId |
| unknownFutureValue |
disableUserEntityIdentifier-Werte
| Member |
|---|
| accountSid |
| initiatingProcessAccountSid |
| requestAccountSid |
| onPremSid |
| unknownFutureValue |
emailEntityIdentifier-Werte
| Member |
|---|
| networkMessageId |
| recipientEmailAddress |
| unknownFutureValue |
fileEntityIdentifier-Werte
| Member |
|---|
| sha1 |
| initiierenProcessSHA1 |
| sha256 |
| initiatingProcessSHA256 |
| unknownFutureValue |
forceUserPasswordResetEntityIdentifier-Werte
| Member |
|---|
| accountSid |
| initiatingProcessAccountSid |
| requestAccountSid |
| onPremSid |
| unknownFutureValue |
huntingRuleErrorCode-Werte
| Member |
|---|
| queryExecutionFailed |
| queryExecutionThrottling |
| queryExceededResultSize |
| queryLimitsExceed |
| queryTimeout |
| alertCreationFailed |
| alertReportNotFound |
| partialRowsFailed |
| unknownFutureValue |
| noImpactedEntity |
huntingRuleRunStatus-Werte
| Member |
|---|
| Ausgeführte |
| abgeschlossen |
| misslungen |
| partiallyFailed |
| unknownFutureValue |
isolationType-Werte
| Member |
|---|
| voll |
| selektiv |
| unknownFutureValue |
mailboxAssetIdentifier-Werte
| Member |
|---|
| accountUpn |
| fileOwnerUpn |
| initiatingProcessAccountUpn |
| lastModifyingAccountUpn |
| targetAccountUpn |
| senderFromAddress |
| senderDisplayName |
| recipientEmailAddress |
| senderMailFromAddress |
| unknownFutureValue |
markUserAsCompromisedEntityIdentifier-Werte
| Member |
|---|
| accountObjectId |
| initiatingProcessAccountObjectId |
| servicePrincipalId |
| recipientObjectId |
| unknownFutureValue |
scopeType-Werte
| Member |
|---|
| deviceGroup |
| unknownFutureValue |
stopAndQuarantineFileEntityIdentifier-Werte
| Member |
|---|
| deviceId |
| sha1 |
| initiierenProcessSHA1 |
| unknownFutureValue |
userAssetIdentifier-Werte
| Member |
|---|
| accountObjectId |
| accountSid |
| accountUpn |
| accountName |
| accountDomain |
| accountId |
| requestAccountSid |
| requestAccountName |
| requestAccountDomain |
| recipientObjectId |
| processAccountObjectId |
| initiatingAccountSid |
| initiatingProcessAccountUpn |
| initiatingAccountName |
| initiatingAccountDomain |
| servicePrincipalId |
| servicePrincipalName |
| targetAccountUpn |
| unknownFutureValue |
submissionResultCategory-Werte
| Member |
|---|
| notJunk |
| Spam |
| Phishing |
| Schadsoftware |
| allowedByPolicy |
| blockedByPolicy |
| reinlegen |
| unknown |
| noResultAvailable |
| unknownFutureValue |
| beingAnalyzed |
| notSubmittedToMicrosoft |
| phishingSimulation |
| allowedDueToOrganizationOverride |
| blockedDueToOrganizationOverride |
| allowedDueToUserOverride |
| blockedDueToUserOverride |
| itemNotfound |
| BedrohungenFunden |
| noThreatsFound |
| domainImpersonation |
| userImpersonation |
| brandImpersonation |
| authenticationFailure |
| spoofedBlocked |
| spoofedAllowed |
| reasonLostInTransit |
| Masse |
antispamTeamsDirection-Werte
| Member |
|---|
| unknown |
| eingehend |
| auslaufend |
| intraorg |
| unknownFutureValue |
teamsDeliveryLocation-Werte
| Member |
|---|
| unknown |
| Teams |
| Unter Quarantäne stellen |
| misslungen |
| unknownFutureValue |
teamsMessageDeliveryAction-Werte
| Member |
|---|
| unknown |
| deliveredAsSpam |
| abgegeben |
| gesperrt |
| ausgewechselt |
| unknownFutureValue |
cloudAttachmentVersion-Werte
| Member |
|---|
| neueste |
| Zuletzt10 |
| zuletzt100 |
| alle |
| unknownFutureValue |
documentVersion-Werte
| Member |
|---|
| neueste |
| Zuletzt10 |
| zuletzt100 |
| alle |
| unknownFutureValue |
recipientType-Werte
| Member |
|---|
| Benutzer |
| roleGroup |
| unknownFutureValue |
contentProcessingErrorType-Werte
| Member |
|---|
| flüchtig |
| permanent sind |
| unknownFutureValue |
dlpAction-Werte
| Member |
|---|
| notifyUser |
| blockAccess |
| deviceRestriction |
| browserRestriction |
| unknownFutureValue |
| restrictAccess |
| generateAlert |
| generateIncidentReportAction |
| sPBlockAnonymousAccess |
| sPRuntimeAccessControl |
| sPSharingNotifyUser |
| sPSharingGenerateIncidentReport |
executionMode-Werte
| Member |
|---|
| evaluateInline |
| evaluateOffline |
| unknownFutureValue |
overrideOption-Werte
| Member |
|---|
| notAllowed |
| allowFalsePositiveOverride |
| allowWithJustification |
| allowWithoutJustification |
| unknownFutureValue |
| allowWithAcknowledgement |
policyPivotProperty-Werte
| Member |
|---|
| keine |
| Aktivität |
| Speicherort |
| unknownFutureValue |
protectionScopeState-Werte
| Member |
|---|
| notModified |
| geändert |
| unknownFutureValue |
userActivityTypes-Werte
| Member |
|---|
| keine |
| uploadText |
| uploadFile |
| downloadText |
| downloadFile |
| unknownFutureValue |
userActivityType-Werte
| Member |
|---|
| uploadText |
| uploadFile |
| downloadText |
| downloadFile |
| unknownFutureValue |
labelActionSource-Werte
| Member |
|---|
| Manuell |
| Automatisch |
| empfohlen |
| keine |
| unknownFutureValue |
sensitivityLabelTarget-Werte
| Member |
|---|
| Website |
| unifiedGroup |
| Teamarbeit |
| unknownFutureValue |
applicationMode-Werte
| Member |
|---|
| Manuell |
| Automatisch |
| empfohlen |
restrictionAction-Werte
| Member |
|---|
| warnen |
| Rechnungsprüfung |
| Block |
Aktionswerte
| Member |
|---|
| Deaktivieren |
| ermöglichen |
| forcePasswordReset |
| revokeAllSessions |
| requireUserToSignInAgain |
| markUserAsCompromised |
| unknownFutureValue |
identityProvider-Werte
| Member |
|---|
| entraID |
| activeDirectory |
| Okta |
| unknownFutureValue |
sensorCandidateActivationMode-Werte
| Member |
|---|
| Manuell |
| automatisiert |
| unknownFutureValue |
serviceStatus-Werte
| Member |
|---|
| angehalten |
| Anlassen |
| Ausgeführte |
| deaktiviert |
| Onboarding |
| unknown |
| unknownFutureValue |