microsoft office 365

Expression

product = microsoft office 365

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
alert-trigger	additional_info
	alert_id	Legacy			✓
	dest_ip	Legacy	✓	✓
	domain
	dest_host	Legacy		✓
	domain_user_name
	src_host	Legacy	✓	✓
	user	Legacy		✓
app-activity	sensitivity_label	Default			✓
	encrypted	Default			✓
	old_sensitivity_label	Default			✓
	label_id	Default			✓
email-receive	connectors
	dkim_result
	spf_result
	dmarc_result
	compauth_result
email-send	connectors
	dkim_result
	spf_result
	dmarc_result
	compauth_result