Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Namespace: microsoft.graph.security
Holds the per-entity-type mappings that translate detection query columns into the entities that are attached to the resulting alert. This resource is configured in the entityMappings property of an alertTemplate.
Properties
| Property | Type | Description |
|---|---|---|
| accounts | microsoft.graph.security.accountEntityMapping collection | Mappings from detection query columns to account entities attached to the alert. |
| amazonResources | microsoft.graph.security.amazonResourceEntityMapping collection | Mappings from detection query columns to Amazon Web Services resource entities attached to the alert. |
| azureResources | microsoft.graph.security.azureResourceEntityMapping collection | Mappings from detection query columns to Azure resource entities attached to the alert. |
| cloudApplications | microsoft.graph.security.cloudApplicationEntityMapping collection | Mappings from detection query columns to cloud application entities attached to the alert. |
| dns | microsoft.graph.security.dnsEntityMapping collection | Mappings from detection query columns to DNS entities attached to the alert. |
| files | microsoft.graph.security.fileEntityMapping collection | Mappings from detection query columns to file entities attached to the alert. |
| googleCloudResources | microsoft.graph.security.googleCloudResourceEntityMapping collection | Mappings from detection query columns to Google Cloud resource entities attached to the alert. |
| hosts | microsoft.graph.security.hostEntityMapping collection | Mappings from detection query columns to host entities attached to the alert. |
| ips | microsoft.graph.security.ipEntityMapping collection | Mappings from detection query columns to IP address entities attached to the alert. |
| mailboxes | microsoft.graph.security.mailboxEntityMapping collection | Mappings from detection query columns to mailbox entities attached to the alert. |
| mailClusters | microsoft.graph.security.mailClusterEntityMapping collection | Mappings from detection query columns to mail cluster entities attached to the alert. |
| mailMessages | microsoft.graph.security.mailMessageEntityMapping collection | Mappings from detection query columns to mail message entities attached to the alert. |
| oAuthApplications | microsoft.graph.security.oAuthApplicationEntityMapping collection | Mappings from detection query columns to OAuth application entities attached to the alert. |
| processes | microsoft.graph.security.processEntityMapping collection | Mappings from detection query columns to process entities attached to the alert. |
| registryValues | microsoft.graph.security.registryValueEntityMapping collection | Mappings from detection query columns to registry value entities attached to the alert. |
| securityGroups | microsoft.graph.security.securityGroupEntityMapping collection | Mappings from detection query columns to security group entities attached to the alert. |
| urls | microsoft.graph.security.urlEntityMapping collection | Mappings from detection query columns to URL entities attached to the alert. |
Relationships
None.
JSON representation
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.entityMappingConfiguration",
"accounts": [
{ "@odata.type": "microsoft.graph.security.accountEntityMapping" }
],
"amazonResources": [
{ "@odata.type": "microsoft.graph.security.amazonResourceEntityMapping" }
],
"azureResources": [
{ "@odata.type": "microsoft.graph.security.azureResourceEntityMapping" }
],
"cloudApplications": [
{ "@odata.type": "microsoft.graph.security.cloudApplicationEntityMapping" }
],
"dns": [
{ "@odata.type": "microsoft.graph.security.dnsEntityMapping" }
],
"files": [
{ "@odata.type": "microsoft.graph.security.fileEntityMapping" }
],
"googleCloudResources": [
{ "@odata.type": "microsoft.graph.security.googleCloudResourceEntityMapping" }
],
"hosts": [
{ "@odata.type": "microsoft.graph.security.hostEntityMapping" }
],
"ips": [
{ "@odata.type": "microsoft.graph.security.ipEntityMapping" }
],
"mailboxes": [
{ "@odata.type": "microsoft.graph.security.mailboxEntityMapping" }
],
"mailClusters": [
{ "@odata.type": "microsoft.graph.security.mailClusterEntityMapping" }
],
"mailMessages": [
{ "@odata.type": "microsoft.graph.security.mailMessageEntityMapping" }
],
"oAuthApplications": [
{ "@odata.type": "microsoft.graph.security.oAuthApplicationEntityMapping" }
],
"processes": [
{ "@odata.type": "microsoft.graph.security.processEntityMapping" }
],
"registryValues": [
{ "@odata.type": "microsoft.graph.security.registryValueEntityMapping" }
],
"securityGroups": [
{ "@odata.type": "microsoft.graph.security.securityGroupEntityMapping" }
],
"urls": [
{ "@odata.type": "microsoft.graph.security.urlEntityMapping" }
]
}