Partager via


Valeurs d’énumération de sécurité

Espace de noms : microsoft.graph.security

Valeurs auditLogQueryStatus

Member
notStarted
course
Réussi
raté
annulé
unknownFutureValue

Valeurs auditLogRecordType

Member
exchangeAdmin
exchangeItem
exchangeItemGroup
sharePoint
syntheticProbe
sharePointFileOperation
oneDrive
azureActiveDirectory
azureActiveDirectoryAccountLogon
dataCenterSecurityCmdlet
complianceDLPSharePoint
balancer
complianceDLPExchange
sharePointSharingOperation
azureActiveDirectoryStsLogon
skypeForBusinessPSTNUsage
skypeForBusinessUsersBlocked
securityComplianceCenterEOPCmdlet
exchangeAggregatedOperation
powerBIAudit
crm
Yammer
skypeForBusinessCmdlets
découverte
microsoftTeams
threatIntelligence
mailSubmission
microsoftFlow
aeD
microsoftStream
complianceDLPSharePointClassification
threatFinder
projet
sharePointListOperation
sharePointCommentOperation
dataGovernance
kaizala
securityComplianceAlerts
threatIntelligenceUrl
securityComplianceInsights
mipLabel
workplaceAnalytics
powerAppsApp
powerAppsPlan
threatIntelligenceAtpContent
labelContentExplorer
teamsHealthcare
exchangeItemAggregated
hygieneEvent
dataInsightsRestApiAudit
informationBarrierPolicyApplication
sharePointListItemOperation
sharePointContentTypeOperation
sharePointFieldOperation
microsoftTeamsAdmin
hrSignal
microsoftTeamsDevice
microsoftTeamsAnalytics
informationWorkerProtection
campagne
dlpEndpoint
airInvestigation
quarantaine
microsoftForms
applicationAudit
complianceSupervisionExchange
customerKeyServiceEncryption
officeNative
mipAutoLabelSharePointItem
mipAutoLabelSharePointPolicyLocation
microsoftTeamsShifts
secureScore
mipAutoLabelExchangeItem
cortanaBriefing
recherche
wdatpAlerts
powerPlatformAdminDlp
powerPlatformAdminEnvironment
mdatpAudit
sensitivityLabelPolicyMatch
sensitivityLabelAction
sensitivityLabeledFileAction
attackSim
airManualInvestigation
securityComplianceRBAC
userTraining
airAdminActionInvestigation
mstic
physicalBadgingSignal
teamsEasyApprovals
aipDiscover
aipSensitivityLabelAction
aipProtectionAction
aipFileDeleted
aipHeartBeat
mcasAlerts
onPremisesFileShareScannerDlp
onPremisesSharePointScannerDlp
exchangeSearch
sharePointSearch
privacyDataMinimization
labelAnalyticsAggregate
myAnalyticsSettings
securityComplianceUserChange
complianceDLPExchangeClassification
complianceDLPEndpoint
mipExactDataMatch
msdeResponseActions
msdeGeneralSettings
msdeIndicatorsSettings
ms365DCustomDetection
msdeRolesSettings
mapgAlerts
mapgPolicy
mapgRemediation
privacyRemediationAction
privacyDigestEmail
mipAutoLabelSimulationProgress
mipAutoLabelSimulationCompletion
mipAutoLabelProgressFeedback
dlpSensitiveInformationType
mipAutoLabelSimulationStatistics
largeContentMetadata
microsoft365Group
cdpMlInferencingResult
filteringMailMetadata
cdpClassificationMailItem
cdpClassificationDocument
officeScriptsRunAction
filteringPostMailDeliveryAction
cdpUnifiedFeedback
tenantAllowBlockList
consumptionResource
healthcareSignal
dlpImportResult
cdpCompliancePolicyExecution
multiStageDisposition
privacyDataMatch
filteringDocMetadata
filteringEmailFeatures
powerBIDlp
filteringUrlInfo
filteringAttachmentInfo
coreReportingSettings
complianceConnector
powerPlatformLockboxResourceAccessRequest
powerPlatformLockboxResourceCommand
cdpPredictiveCodingLabel
cdpCompliancePolicyUserFeedback
page webActivityEndpoint
omePortal
cmImprovementActionChange
filteringUrlClick
mipLabelAnalyticsAuditRecord
filteringEntityEvent
filteringRuleHits
filteringMailSubmission
labelExplorer
microsoftManagedServicePlatform
powerPlatformServiceActivity
scorePlatformGenericAuditRecord
filteringTimeTravelDocMetadata
alerte
alertStatus
alertIncident
incidentStatus
cas
caseInvestigation
recordsManagement
confidentialitéRemediation
dataShareOperation
cdpDlpSensitive
ehrConnector
filteringMailGradingResult
publicFolder
privacyTenantAuditHistoryRecord
aipScannerDiscoverEvent
eduDataLakeDownloadOperation
m365ComplianceConnector
microsoftGraphDataConnectOperation
microsoftPurview
filteringEmailContentFeatures
powerPagesSite
powerAppsResource
plannerPlan
plannerCopyPlan
plannerTask
plannerRoster
plannerPlanList
plannerTaskList
plannerTenantSettings
projectForTheWebProject
projectForTheWebTask
projectForTheWebRoadmap
projectForTheWebRoadmapItem
projectForTheWebProjectSettings
projectForTheWebRoadmapSettings
quarantineMetadata
microsoftTodoAudit
timeTravelFilteringDocMetadata
teamsQuarantineMetadata
sharePointAppPermissionOperation
microsoftTeamsSensitivityLabelAction
filteringTeamsMetadata
filteringTeamsUrlInfo
filteringTeamsPostDeliveryAction
mdcAssessments
mdcRegulatoryComplianceStandards
mdcRegulatoryComplianceControls
mdcRegulatoryComplianceAssessments
mdcSecurityConnectors
mdaDataSecuritySignal
vivaGoals
filteringRuntimeInfo
attackSimAdmin
microsoftGraphDataConnectConsent
filteringAtpDetonationInfo
privacyPortal
managedTenants
unifiedSimulationMatchedItem
unifiedSimulationSummary
updateQuarantineMetadata
ms365DSuppressionRule
purviewDataMapOperation
filteringUrlPostClickAction
irmUserDefinedDetectionSignal
teamsUpdates
plannerRosterSensitivityLabel
ms365DIncident
filteringDelistingMetadata
complianceDLPSharePointClassificationExtended
microsoftDefenderForIdentityAudit
supervisoryReviewDayXInsight
defenderExpertsforXDRAdmin
cdpEdgeBlockedMessage
hostedRpa
cdpContentExplorerAggregateRecord
cdpHygieneAttachmentInfo
cdpHygieneSummary
cdpPostMailDeliveryAction
cdpEmailFeatures
cdpHygieneUrlInfo
cdpUrlClick
cdpPackageManagerHygieneEvent
filteringDocScan
timeTravelFilteringDocScan
mapgOnboard
unknownFutureValue

Valeurs auditLogUserType

Member
régulier
réservé
Admin
dcAdmin
system
application
servicePrincipal
customPolicy
systemPolicy
partnerTechnician
Invités
unknownFutureValue

Valeurs actionAfterRetentionPeriod

Member
none
delete
startDispositionReview
unknownFutureValue

valeurs behaviorDuringRetentionPeriod

Member
doNotRetain
retenir
retainAsRecord
retainAsRegulatoryRecord
unknownFutureValue

valeurs contentFormat

Member
text
html
Markdown
unknownFutureValue

valeurs defaultRecordBehavior

Member
startLocked
startUnlocked
unknownFutureValue

Valeurs detectionStatus

Member
détecté
bloqué
empêché
unknownFutureValue

Valeurs eventPropagationStatus

Member
none
inProcessing
raté
success
unknownFutureValue

Valeurs eventStatusType

Member
en instance
error
success
notAvaliable
unknownFutureValue

Valeurs hostPortProtocol

Member
tcp
Udp
unknownFutureValue

Valeurs hostPortStatus

Member
ouvrir
filtré
fermé
unknownFutureValue

Valeurs hostReputationClassification

Member
unknown
neutre
suspect
méchant
unknownFutureValue

Valeurs hostReputationRuleSeverity

Member
unknown
bas
medium
haut
unknownFutureValue

valeurs indicatorSource

Member
Microsoft
osint
public
unknownFutureValue

valeurs intelligenceProfileKind

Member
acteur
outil
unknownFutureValue

Valeurs queryType

Member
fichiers
messages
unknownFutureValue

valeurs retentionTrigger

Member
dateLabeled
dateCreated
dateModified
dateOfEvent
unknownFutureValue

valeurs vulnerabilitySeverity

Member
none
bas
medium
haut
critique
unknownFutureValue

Valeurs deviceAssetIdentifier

Member
deviceId
deviceName
remoteDeviceName
targetDeviceName
destinationDeviceName
unknownFutureValue

Valeurs deviceIdEntityIdentifier

Member
deviceId
unknownFutureValue

valeurs disableUserEntityIdentifier

Member
accountSid
initiatingProcessAccountSid
requestAccountSid
onPremSid
unknownFutureValue

Valeurs emailEntityIdentifier

Member
networkMessageId
recipientEmailAddress
unknownFutureValue

Valeurs fileEntityIdentifier

Member
sha1
initiatingProcessSHA1
sha256
initiatingProcessSHA256
unknownFutureValue

valeurs forceUserPasswordResetEntityIdentifier

Member
accountSid
initiatingProcessAccountSid
requestAccountSid
onPremSid
unknownFutureValue

valeurs huntingRuleErrorCode

Member
queryExecutionFailed
queryExecutionThrottling
queryExceededResultSize
queryLimitsExceeded
queryTimeout
alertCreationFailed
alertReportNotFound
partialRowsFailed
unknownFutureValue
noImpactedEntity

valeurs huntingRuleRunStatus

Member
course
terminé
raté
partiellement échoué
unknownFutureValue

Valeurs isolationType

Member
plein
sélectif
unknownFutureValue

Valeurs mailboxAssetIdentifier

Member
accountUpn
fileOwnerUpn
initiatingProcessAccountUpn
lastModifyingAccountUpn
targetAccountUpn
senderFromAddress
senderDisplayName
recipientEmailAddress
senderMailFromAddress
unknownFutureValue

Valeurs markUserAsCompromisedEntityIdentifier

Member
accountObjectId
initiatingProcessAccountObjectId
servicePrincipalId
recipientObjectId
unknownFutureValue

Valeurs scopeType

Member
deviceGroup
unknownFutureValue

Valeurs stopAndQuarantineFileEntityIdentifier

Member
deviceId
sha1
initiatingProcessSHA1
unknownFutureValue

Valeurs userAssetIdentifier

Member
accountObjectId
accountSid
accountUpn
accountName
accountDomain
accountId
requestAccountSid
requestAccountName
requestAccountDomain
recipientObjectId
processAccountObjectId
initiatingAccountSid
initiatingProcessAccountUpn
initiatingAccountName
initiatingAccountDomain
servicePrincipalId
servicePrincipalName
targetAccountUpn
unknownFutureValue

Valeurs de submissionResultCategory

Member
notJunk
courrier indésirable
hameçonnage
programme malveillant
allowedByPolicy
blockedByPolicy
parodie
unknown
noResultAvailable
unknownFutureValue
beingAnalyzed
notSubmittedToMicrosoft
hameçonnageSimulation
allowedDueToOrganizationOverride
blockedDueToOrganizationOverride
allowedDueToUserOverride
blockedDueToUserOverride
itemNotfound
menacesFound
noThreatsFound
domainImpersonation
userImpersonation
brandImpersonation
authenticationFailure
spoofedBlocked
spoofedAllowed
reasonLostInTransit
vrac