Edit

Share via


compromiseIndicator resource type

Namespace: microsoft.graph.security

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents an indicator and its associated verdict that suggests whether an email is compromised. The resource combines specific indicators found in the email with categorized verdicts to help identify potential security threats like malware, phishing attempts, or spam.

Properties

Property Type Description
value String Indicator.
verdict microsoft.graph.security.verdictCategory .The possible values are: none, malware, phish, siteUnavailable, spam, decryptionFailed, unsupportedUriScheme, unsupportedFileType, undefined, unknownFutureValue.

verdictCategory values

Member
none
malware
phish
siteUnavailable
spam
decryptionFailed
unsupportedUriScheme
unsupportedFileType
undefined
unknownFutureValue

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.compromiseIndicator",
  "verdict": "String",
  "value": "String"
}