命名空间：microsoft.graph.security
appCategory 值
| Member |
|---|
| 安全 |
| 协作 |
| hostingServices |
| onlineMeetings |
| newsAndEntertainment |
| 电子商务 |
| 教育 |
| cloudStorage |
| 营销 |
| operationsManagement |
| 健康 |
| 广告 |
| 生产力 |
| accountingAndFinance |
| contentManagement |
| contentSharing |
| businessManagement |
| 通信 |
| dataAnalytics |
| businessIntelligence |
| webemail |
| codeHosting |
| webAnalytics |
| socialNetwork |
| crm |
| 论坛 |
| humanResourceManagement |
| transportationAndTravel |
| productDesign |
| 销售 |
| cloudComputingPlatform |
| projectManagement |
| personalInstantMessaging |
| developmentTools |
| itServices |
| supplyChainAndLogistics |
| propertyManagement |
| customerSupport |
| internetOfProduct |
| vendorManagementSystems |
| websiteMonitoring |
| generativeAi |
| unknown |
| unknownFutureValue |
| aiModelProvider |
| mcpServer |
| clientAiApp |
appInfoCsaStarLevel 值
| Member |
|---|
| selfAssessment |
| 认证 |
| 证明 |
| cStarAssessment |
| continuousMonitoring |
| unknown |
| unknownFutureValue |
appInfoDataAtRestEncryptionMethod 值
| Member |
|---|
| aes |
| bitLocker |
| 河豚 |
| des3 |
| des |
| rc4 |
| rsA |
| notSupported |
| unknown |
| unknownFutureValue |
appInfoDataRetentionPolicy 值
| Member |
|---|
| dataRetained |
| deletedImmediately |
| deletedWithinTwoWeeks |
| deletedWithinOneMonth |
| deletedWithinThreeMonths |
| deletedWithinMoreThanThreeMonths |
| unknown |
| unknownFutureValue |
appInfoFedRampLevel 值
| Member |
|---|
| 高 |
| 温和 |
| 低 |
| liSaaS |
| unknown |
| unknownFutureValue |
| notSupported |
appInfoHolding 值
| Member |
|---|
| 私人 |
| 公开 |
| unknown |
| unknownFutureValue |
appInfoPciDssVersion 值
| Member |
|---|
| v1 |
| v2 |
| v3 |
| v3_1 |
| v3_2 |
| v3_2_1 |
| notSupported |
| unknown |
| unknownFutureValue |
| v4 |
appInfoEncryptionProtocol 值
| Member |
|---|
| tls1_0 |
| tls1_1 |
| tls1_2 |
| tls1_3 |
| notApplicable |
| notSupported |
| unknown |
| unknownFutureValue |
| ssl3 |
appInfoUploadedDataTypes 值
| Member |
|---|
| 文档 |
| mediaFiles |
| codingFiles |
| 信用卡 |
| databaseFiles |
| 无 |
| unknown |
| unknownFutureValue |
cloudAppInfoState 值
| Member |
|---|
| true |
| false |
| unknown |
| unknownFutureValue |
entityType 值
| Member |
|---|
| userName |
| ipAddress |
| machineName |
| 其他 |
| unknown |
| unknownFutureValue |
logDataProvider 值
| Member |
|---|
| 梭鱼 |
| bluecoat |
| 检查站 |
| ciscoAsa |
| ciscoIronportProxy |
| fortigate |
| paloAlto |
| 鱿鱼 |
| zscaler |
| mcafeeSwg |
| ciscoScanSafe |
| juniperSrx |
| sophosSg |
| websenseV75 |
| websenseSiemCef |
| machineZoneMeraki |
| squidNative |
| ciscoFwsm |
| microsoftIsaW3C |
| sonicwall |
| sophosCyberoam |
| clavister |
| customParser |
| juniperSsg |
| zscalerQradar |
| juniperSrxSd |
| juniperSrxWelf |
| microsoftConditionalAppAccess |
| ciscoAsaFirepower |
| genericCef |
| genericLeef |
| genericW3C |
| iFilter |
| checkpointXml |
| checkpointSmartViewTracker |
| barracudaNextGenFw |
| barracudaNextGenFwWeblog |
| microsoftDefenderForEndpoint |
| zscalerCef |
| sophosXg |
| iboss |
| forcepoint |
| fortios |
| ciscoIronportWsaIi |
| paloAltoLeef |
| forcepointLeef |
| stormshield |
| contentkeeper |
| ciscoIronportWsa Iii |
| checkpointCef |
| corrata |
| ciscoFirepowerV6 |
| menloSecurityCef |
| watchguardXtm |
| openSystemsSecureWebGateway |
| wandera |
| unknownFutureValue |
receiverProtocol 值
| Member |
|---|
| ftp |
| ftps |
| syslogUdp |
| syslogTcp |
| syslogTls |
| unknownFutureValue |
trafficType 值
| Member |
|---|
| downloadedBytes |
| uploadedBytes |
| unknown |
| unknownFutureValue |
auditLogQueryStatus 值
| Member |
|---|
| notStarted |
| 运行 |
| 成功 |
| 失败 |
| 取消 |
| unknownFutureValue |
auditLogRecordType 值
| Member |
|---|
| exchangeAdmin |
| exchangeItem |
| exchangeItemGroup |
| sharePoint |
| syntheticProbe |
| sharePointFileOperation |
| oneDrive |
| azureActiveDirectory |
| azureActiveDirectoryAccountLogon |
| dataCenterSecurityCmdlet |
| complianceDLPSharePoint |
| 摇摆 |
| complianceDLPExchange |
| sharePointSharingOperation |
| azureActiveDirectoryStsLogon |
| skypeForBusinessPSTNUsage |
| skypeForBusinessUsersBlocked |
| securityComplianceCenterEOPCmdlet |
| exchangeAggregatedOperation |
| powerBIAudit |
| crm |
| yammer |
| skypeForBusinessCmdlets |
| 发现 |
| microsoftTeams |
| threatIntelligence |
| mailSubmission |
| microsoftFlow |
| aeD |
| microsoftStream |
| complianceDLPSharePointClassification |
| threatFinder |
| 项目 |
| sharePointListOperation |
| sharePointCommentOperation |
| dataGovernance |
| kaizala |
| securityComplianceAlerts |
| threatIntelligenceUrl |
| securityComplianceInsights |
| mipLabel |
| workplaceAnalytics |
| powerAppsApp |
| powerAppsPlan |
| threatIntelligenceAtpContent |
| labelContentExplorer |
| teamsHealthcare |
| exchangeItemAggregated |
| hygieneEvent |
| dataInsightsRestApiAudit |
| informationBarrierPolicyApplication |
| sharePointListItemOperation |
| sharePointContentTypeOperation |
| sharePointFieldOperation |
| microsoftTeamsAdmin |
| hrSignal |
| microsoftTeamsDevice |
| microsoftTeamsAnalytics |
| informationWorkerProtection |
| 运动 |
| dlpEndpoint |
| airInvestigation |
| 隔离 |
| microsoftForms |
| applicationAudit |
| complianceSupervisionExchange |
| customerKeyServiceEncryption |
| officeNative |
| mipAutoLabelSharePointItem |
| mipAutoLabelSharePointPolicyLocation |
| microsoftTeamsShifts |
| secureScore |
| mipAutoLabelExchangeItem |
| cortanaBriefing |
| search |
| wdatpAlerts |
| powerPlatformAdminDlp |
| powerPlatformAdminEnvironment |
| mdatpAudit |
| sensitivityLabelPolicyMatch |
| sensitivityLabelAction |
| sensitivityLabeledFileAction |
| attackSim |
| airManualInvestigation |
| securityComplianceRBAC |
| userTraining |
| airAdminActionInvestigation |
| mstic |
| physicalBadgingSignal |
| teamsEasyApprovals |
| aipDiscover |
| aipSensitivityLabelAction |
| aipProtectionAction |
| aipFileDeleted |
| aipHeartBeat |
| mcasAlerts |
| onPremisesFileShareScannerDlp |
| onPremisesSharePointScannerDlp |
| exchangeSearch |
| sharePointSearch |
| privacyDataMinimization |
| labelAnalyticsAggregate |
| myAnalyticsSettings |
| securityComplianceUserChange |
| complianceDLPExchangeClassification |
| complianceDLPEndpoint |
| mipExactDataMatch |
| msdeResponseActions |
| msdeGeneralSettings |
| msdeIndicatorsSettings |
| ms365DCustomDetection |
| msdeRolesSettings |
| mapgAlerts |
| mapgPolicy |
| mapgRemediation |
| privacyRemediationAction |
| privacyDigestEmail |
| mipAutoLabelSimulationProgress |
| mipAutoLabelSimulationCompletion |
| mipAutoLabelProgressFeedback |
| dlpSensitiveInformationType |
| mipAutoLabelSimulationStatistics |
| largeContentMetadata |
| microsoft365Group |
| cdpMlInferencingResult |
| filteringMailMetadata |
| cdpClassificationMailItem |
| cdpClassificationDocument |
| officeScriptsRunAction |
| filteringPostMailDeliveryAction |
| cdpUnifiedFeedback |
| tenantAllowBlockList |
| consumptionResource |
| healthcareSignal |
| dlpImportResult |
| cdpCompliancePolicyExecution |
| multiStageDisposition |
| privacyDataMatch |
| filteringDocMetadata |
| filteringEmailFeatures |
| powerBIDlp |
| filteringUrlInfo |
| filteringAttachmentInfo |
| coreReportingSettings |
| complianceConnector |
| powerPlatformLockboxResourceAccessRequest |
| powerPlatformLockboxResourceCommand |
| cdpPredictiveCodingLabel |
| cdpCompliancePolicyUserFeedback |
| 网页ActivityEndpoint |
| omePortal |
| cmImprovementActionChange |
| filteringUrlClick |
| mipLabelAnalyticsAuditRecord |
| filteringEntityEvent |
| filteringRuleHits |
| filteringMailSubmission |
| labelExplorer |
| microsoftManagedServicePlatform |
| powerPlatformServiceActivity |
| scorePlatformGenericAuditRecord |
| filteringTimeTravelDocMetadata |
| 警报 |
| alertStatus |
| alertIncident |
| incidentStatus |
| 箱 |
| caseInvestigation |
| recordsManagement |
| privacyRemediation |
| dataShareOperation |
| cdpDlpSensitive |
| ehrConnector |
| filteringMailGradingResult |
| publicFolder |
| privacyTenantAuditHistoryRecord |
| aipScannerDiscoverEvent |
| eduDataLakeDownloadOperation |
| m365ComplianceConnector |
| microsoftGraphDataConnectOperation |
| microsoftPurview |
| filteringEmailContentFeatures |
| powerPagesSite |
| powerAppsResource |
| plannerPlan |
| plannerCopyPlan |
| plannerTask |
| plannerRoster |
| plannerPlanList |
| plannerTaskList |
| plannerTenantSettings |
| projectForTheWebProject |
| projectForTheWebTask |
| projectForTheWebRoadmap |
| projectForTheWebRoadmapItem |
| projectForTheWebProjectSettings |
| projectForTheWebRoadmapSettings |
| quarantineMetadata |
| microsoftTodoAudit |
| timeTravelFilteringDocMetadata |
| teamsQuarantineMetadata |
| sharePointAppPermissionOperation |
| microsoftTeamsSensitivityLabelAction |
| filteringTeamsMetadata |
| filteringTeamsUrlInfo |
| filteringTeamsPostDeliveryAction |
| mdcAssessments |
| mdcRegulatoryComplianceStandards |
| mdcRegulatoryComplianceControls |
| mdcRegulatoryComplianceAssessments |
| mdcSecurityConnectors |
| mdaDataSecuritySignal |
| vivaGoals |
| filteringRuntimeInfo |
| attackSimAdmin |
| microsoftGraphDataConnectConsent |
| filteringAtpDetonationInfo |
| privacyPortal |
| managedTenants |
| unifiedSimulationMatchedItem |
| unifiedSimulationSummary |
| updateQuarantineMetadata |
| ms365DSuppressionRule |
| purviewDataMapOperation |
| filteringUrlPostClickAction |
| irmUserDefinedDetectionSignal |
| teamsUpdates |
| plannerRosterSensitivityLabel |
| ms365DIncident |
| filteringDelistingMetadata |
| complianceDLPSharePointClassificationExtended |
| microsoftDefenderForIdentityAudit |
| supervisoryReviewDayXInsight |
| defenderExpertsforXDRAdmin |
| cdpEdgeBlockedMessage |
| hostedRpa |
| cdpContentExplorerAggregateRecord |
| cdpHygieneAttachmentInfo |
| cdpHygieneSummary |
| cdpPostMailDeliveryAction |
| cdpEmailFeatures |
| cdpHygieneUrlInfo |
| cdpUrlClick |
| cdpPackageManagerHygieneEvent |
| filteringDocScan |
| timeTravelFilteringDocScan |
| mapgOnboard |
| unknownFutureValue |
auditLogUserType 值
| Member |
|---|
| 定期 |
| 保留 |
| 管理 |
| dcAdmin |
| system |
| 应用程序 |
| servicePrincipal |
| customPolicy |
| systemPolicy |
| partnerTechnician |
| 客人 |
| unknownFutureValue |
actionAfterRetentionPeriod 值
| Member |
|---|
| 无 |
| delete |
| startDispositionReview |
| unknownFutureValue |
behaviorDuringRetentionPeriod 值
| Member |
|---|
| doNotRetain |
| 保留 |
| retainAsRecord |
| retainAsRegulatoryRecord |
| unknownFutureValue |
contentFormat 值
| Member |
|---|
| text |
| html |
| markdown |
| unknownFutureValue |
defaultRecordBehavior 值
| Member |
|---|
| startLocked |
| startUnlocked |
| unknownFutureValue |
detectionStatus 值
| Member |
|---|
| 检测 |
| 封锁 |
| 阻止 |
| unknownFutureValue |
eventPropagationStatus 值
| Member |
|---|
| 无 |
| inProcessing |
| 失败 |
| success |
| unknownFutureValue |
eventStatusType 值
| Member |
|---|
| 待定 |
| error |
| success |
| notAvaliable |
| unknownFutureValue |
hostPortProtocol 值
| Member |
|---|
| tcp |
| udp |
| unknownFutureValue |
hostPortStatus 值
| Member |
|---|
| 打开 |
| 过滤 |
| 闭 |
| unknownFutureValue |
hostReputationClassification 值
| Member |
|---|
| unknown |
| 中性 |
| 可疑 |
| 恶意 |
| unknownFutureValue |
hostReputationRuleSeverity 值
| Member |
|---|
| unknown |
| 低 |
| 中等 |
| 高 |
| unknownFutureValue |
indicatorSource 值
| Member |
|---|
| microsoft |
| osint |
| 公开 |
| unknownFutureValue |
intelligenceProfileKind 值
| Member |
|---|
| actor |
| 工具 |
| unknownFutureValue |
queryType 值
| Member |
|---|
| files |
| messages |
| unknownFutureValue |
retentionTrigger 值
| Member |
|---|
| dateLabeled |
| dateCreated |
| dateModified |
| dateOfEvent |
| unknownFutureValue |
vulnerabilitySeverity 值
| Member |
|---|
| 无 |
| 低 |
| 中等 |
| 高 |
| 危急 |
| unknownFutureValue |
deviceAssetIdentifier 值
| Member |
|---|
| deviceId |
| deviceName |
| remoteDeviceName |
| targetDeviceName |
| destinationDeviceName |
| unknownFutureValue |
deviceIdEntityIdentifier 值
| Member |
|---|
| deviceId |
| unknownFutureValue |
disableUserEntityIdentifier 值
| Member |
|---|
| accountSid |
| initiatingProcessAccountSid |
| requestAccountSid |
| onPremSid |
| unknownFutureValue |
emailEntityIdentifier 值
| Member |
|---|
| networkMessageId |
| recipientEmailAddress |
| unknownFutureValue |
fileEntityIdentifier 值
| Member |
|---|
| sha1 |
| initiatingProcessSHA1 |
| sha256 |
| initiatingProcessSHA256 |
| unknownFutureValue |
forceUserPasswordResetEntityIdentifier 值
| Member |
|---|
| accountSid |
| initiatingProcessAccountSid |
| requestAccountSid |
| onPremSid |
| unknownFutureValue |
huntingRuleErrorCode 值
| Member |
|---|
| queryExecutionFailed |
| queryExecutionThrottling |
| queryExceededResultSize |
| queryLimitsExceeded |
| queryTimeout |
| alertCreationFailed |
| alertReportNotFound |
| partialRowsFailed |
| unknownFutureValue |
| noImpactedEntity |
huntingRuleRunStatus 值
| Member |
|---|
| 运行 |
| 完成 |
| 失败 |
| partiallyFailed |
| unknownFutureValue |
isolationType 值
| Member |
|---|
| 满 |
| 选择性 |
| unknownFutureValue |
mailboxAssetIdentifier 值
| Member |
|---|
| accountUpn |
| fileOwnerUpn |
| initiatingProcessAccountUpn |
| lastModificationAccountUpn |
| targetAccountUpn |
| senderFromAddress |
| senderDisplayName |
| recipientEmailAddress |
| senderMailFromAddress |
| unknownFutureValue |
markUserAsCompromisedEntityIdentifier 值
| Member |
|---|
| accountObjectId |
| initiatingProcessAccountObjectId |
| servicePrincipalId |
| recipientObjectId |
| unknownFutureValue |
scopeType 值
| Member |
|---|
| deviceGroup |
| unknownFutureValue |
stopAndQuarantineFileEntityIdentifier 值
| Member |
|---|
| deviceId |
| sha1 |
| initiatingProcessSHA1 |
| unknownFutureValue |
userAssetIdentifier 值
| Member |
|---|
| accountObjectId |
| accountSid |
| accountUpn |
| accountName |
| accountDomain |
| accountId |
| requestAccountSid |
| requestAccountName |
| requestAccountDomain |
| recipientObjectId |
| processAccountObjectId |
| initiatingAccountSid |
| initiatingProcessAccountUpn |
| initiatingAccountName |
| initiatingAccountDomain |
| servicePrincipalId |
| servicePrincipalName |
| targetAccountUpn |
| unknownFutureValue |
submissionResultCategory 值
| Member |
|---|
| notJunk |
| 垃圾邮件 |
| 仿冒 |
| 恶意软件 |
| allowedByPolicy |
| blockedByPolicy |
| 恶搞 |
| unknown |
| noResultAvailable |
| unknownFutureValue |
| beingAnalyzed |
| notSubmittedToMicrosoft |
| phishingSimulation |
| allowedDueToOrganizationOverride |
| blockedDueToOrganizationOverride |
| allowedDueToUserOverride |
| blockedDueToUserOverride |
| itemNotfound |
| threatsFound |
| noThreatsFound |
| domainImpersonation |
| userImpersonation |
| brandImpersonation |
| authenticationFailure |
| spoofedBlocked |
| spoofedAllowed |
| reasonLostInTransit |
| 散装 |
antispamTeamsDirection 值
| Member |
|---|
| unknown |
| 入境 |
| 出境 |
| intraorg |
| unknownFutureValue |
teamsDeliveryLocation 值
| Member |
|---|
| unknown |
| 团队 |
| 隔离 |
| 失败 |
| unknownFutureValue |
teamsMessageDeliveryAction 值
| Member |
|---|
| unknown |
| deliveredAsSpam |
| 交付 |
| 封锁 |
| 取代 |
| unknownFutureValue |
cloudAttachmentVersion 值
| Member |
|---|
| 最近的 |
| recent10 |
| recent100 |
| 全部 |
| unknownFutureValue |
documentVersion 值
| Member |
|---|
| 最近的 |
| recent10 |
| recent100 |
| 全部 |
| unknownFutureValue |
recipientType 值
| Member |
|---|
| 用户 |
| roleGroup |
| unknownFutureValue |
contentProcessingErrorType 值
| Member |
|---|
| 短暂的 |
| 永久 |
| unknownFutureValue |
dlpAction 值
| Member |
|---|
| notifyUser |
| blockAccess |
| deviceRestriction |
| browserRestriction |
| unknownFutureValue |
| restrictAccess |
| generateAlert |
| generateIncidentReportAction |
| sPBlockAnonymousAccess |
| sPRuntimeAccessControl |
| sPSharingNotifyUser |
| sPSharingGenerateIncidentReport |
executionMode 值
| Member |
|---|
| evaluateInline |
| evaluateOffline |
| unknownFutureValue |
overrideOption 值
| Member |
|---|
| notAllowed |
| allowFalsePositiveOverride |
| allowWithJustification |
| allowWithoutJustification |
| unknownFutureValue |
| allowWithAcknowledgement |
policyPivotProperty 值
| Member |
|---|
| 无 |
| 活动 |
| 位置 |
| unknownFutureValue |
protectionScopeState 值
| Member |
|---|
| notModified |
| 修改内容 |
| unknownFutureValue |
userActivityTypes 值
| Member |
|---|
| 无 |
| uploadText |
| uploadFile |
| downloadText |
| downloadFile |
| unknownFutureValue |
userActivityType 值
| Member |
|---|
| uploadText |
| uploadFile |
| downloadText |
| downloadFile |
| unknownFutureValue |
labelActionSource 值
| Member |
|---|
| 手动 |
| 自动 |
| 建议 |
| 无 |
| unknownFutureValue |
sensitivityLabelTarget 值
| Member |
|---|
| 电子邮件 |
| 网站 |
| unifiedGroup |
| 团队合作 |
| unknownFutureValue |
applicationMode 值
| Member |
|---|
| 手动 |
| 自动 |
| 建议 |
restrictionAction 值
| Member |
|---|
| 警告 |
| 审计 |
| 块 |
作值
| Member |
|---|
| disable |
| 使 |
| forcePasswordReset |
| revokeAllSessions |
| requireUserToSignInAgain |
| markUserAsCompromised |
| unknownFutureValue |
identityProvider 值
| Member |
|---|
| entraID |
| activeDirectory |
| okta |
| unknownFutureValue |
sensorCandidateActivationMode 值
| Member |
|---|
| 手动 |
| 自动化 |
| unknownFutureValue |
serviceStatus 值
| Member |
|---|
| 停止 |
| 开始 |
| 运行 |
| 禁用 |
| 载入 |
| unknown |
| unknownFutureValue |