@microsoft/msgraph-sdk 1.0.0-preview.45 → 1.0.0-preview.46

package/models/security/index.d.ts

@@ -303,6 +303,7 @@ export interface AnalyzedMessageEvidence extends AlertEvidence, Parsable {
      */
     urn?: string | null;
 }
+export type AntispamTeamsDirection = (typeof AntispamTeamsDirectionObject)[keyof typeof AntispamTeamsDirectionObject];
 export interface Article extends Entity, Parsable {
     /**
      * The body property
@@ -1784,6 +1785,12 @@ export declare function createSubmissionMailEvidenceFromDiscriminatorValue(parse
  * @returns {Tag}
  */
 export declare function createTagFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
+/**
+ * Creates a new instance of the appropriate class based on discriminator value
+ * @param parseNode The parse node to use to read the discriminator value and create the object
+ * @returns {TeamsMessageEvidence}
+ */
+export declare function createTeamsMessageEvidenceFromDiscriminatorValue(parseNode: ParseNode | undefined): ((instance?: Parsable) => Record<string, (node: ParseNode) => void>);
 /**
  * Creates a new instance of the appropriate class based on discriminator value
  * @param parseNode The parse node to use to read the discriminator value and create the object
@@ -2984,6 +2991,11 @@ export declare function deserializeIntoSubmissionMailEvidence(submissionMailEvid
  * @returns {Record<string, (node: ParseNode) => void>}
  */
 export declare function deserializeIntoTag(tag?: Partial<Tag> | undefined): Record<string, (node: ParseNode) => void>;
+/**
+ * The deserialization information for the current model
+ * @returns {Record<string, (node: ParseNode) => void>}
+ */
+export declare function deserializeIntoTeamsMessageEvidence(teamsMessageEvidence?: Partial<TeamsMessageEvidence> | undefined): Record<string, (node: ParseNode) => void>;
 /**
  * The deserialization information for the current model
  * @returns {Record<string, (node: ParseNode) => void>}
@@ -5179,6 +5191,10 @@ export interface MailboxEvidence extends AlertEvidence, Parsable {
      * The primary email address of the mailbox.
      */
     primaryAddress?: string | null;
+    /**
+     * The user principal name of the mailbox.
+     */
+    upn?: string | null;
     /**
      * The user account of the mailbox.
      */
@@ -6786,6 +6802,11 @@ export declare function serializeSubmissionMailEvidence(writer: SerializationWri
  * @param writer Serialization writer to use to serialize this model
  */
 export declare function serializeTag(writer: SerializationWriter, tag?: Partial<Tag> | undefined | null): void;
+/**
+ * Serializes information the current object
+ * @param writer Serialization writer to use to serialize this model
+ */
+export declare function serializeTeamsMessageEvidence(writer: SerializationWriter, teamsMessageEvidence?: Partial<TeamsMessageEvidence> | undefined | null): void;
 /**
  * Serializes information the current object
  * @param writer Serialization writer to use to serialize this model
@@ -7165,6 +7186,106 @@ export interface Tag extends Entity, Parsable {
      */
     lastModifiedDateTime?: Date | null;
 }
+export type TeamsDeliveryLocation = (typeof TeamsDeliveryLocationObject)[keyof typeof TeamsDeliveryLocationObject];
+export type TeamsMessageDeliveryAction = (typeof TeamsMessageDeliveryActionObject)[keyof typeof TeamsMessageDeliveryActionObject];
+export interface TeamsMessageEvidence extends AlertEvidence, Parsable {
+    /**
+     * The identifier of the campaign that this Teams message is part of.
+     */
+    campaignId?: string | null;
+    /**
+     * The channel ID associated with this Teams message.
+     */
+    channelId?: string | null;
+    /**
+     * The delivery action of this Teams message. Possible values are: unknown, deliveredAsSpam, delivered, blocked, replaced, unknownFutureValue.
+     */
+    deliveryAction?: TeamsMessageDeliveryAction | null;
+    /**
+     * The delivery location of this Teams message. Possible values are: unknown, teams, quarantine, failed, unknownFutureValue.
+     */
+    deliveryLocation?: TeamsDeliveryLocation | null;
+    /**
+     * The list of file entities that are attached to this Teams message.
+     */
+    files?: FileEvidence[] | null;
+    /**
+     * The identifier of the team or group that this message is part of.
+     */
+    groupId?: string | null;
+    /**
+     * Indicates whether the message is owned by the organization that reported the security detection alert.
+     */
+    isExternal?: boolean | null;
+    /**
+     * Indicates whether the message is owned by your organization.
+     */
+    isOwned?: boolean | null;
+    /**
+     * Date and time when the message was last edited. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
+     */
+    lastModifiedDateTime?: Date | null;
+    /**
+     * The direction of the Teams message. The possible values are: unknown, inbound, outbound, intraorg, unknownFutureValue.
+     */
+    messageDirection?: AntispamTeamsDirection | null;
+    /**
+     * Message identifier unique within the thread.
+     */
+    messageId?: string | null;
+    /**
+     * Tenant ID (GUID) of the owner of the message.
+     */
+    owningTenantId?: Guid | null;
+    /**
+     * Identifier of the message to which the current message is a reply; otherwise, it's the same as the messageId.
+     */
+    parentMessageId?: string | null;
+    /**
+     * The received date of this message. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
+     */
+    receivedDateTime?: Date | null;
+    /**
+     * The recipients of this Teams message.
+     */
+    recipients?: string[] | null;
+    /**
+     * The SMTP format address of the sender.
+     */
+    senderFromAddress?: string | null;
+    /**
+     * The IP address of the sender.
+     */
+    senderIP?: string | null;
+    /**
+     * Source of the message; for example, desktop and mobile.
+     */
+    sourceAppName?: string | null;
+    /**
+     * The source ID of this Teams message.
+     */
+    sourceId?: string | null;
+    /**
+     * The subject of this Teams message.
+     */
+    subject?: string | null;
+    /**
+     * The list of recipients who were detected as suspicious.
+     */
+    suspiciousRecipients?: string[] | null;
+    /**
+     * Identifier of the channel or chat that this message is part of.
+     */
+    threadId?: string | null;
+    /**
+     * The Teams message type. Supported values are: Chat, Topic, Space, and Meeting.
+     */
+    threadType?: string | null;
+    /**
+     * The URLs contained in this Teams message.
+     */
+    urls?: UrlEvidence[] | null;
+}
 export interface ThreatIntelligence extends Entity, Parsable {
     /**
      * Refers to indicators of threat or compromise highlighted in an article.Note: List retrieval is not yet supported.
@@ -7716,6 +7837,13 @@ export declare const AlertStatusObject: {
     readonly Resolved: "resolved";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const AntispamTeamsDirectionObject: {
+    readonly Unknown: "unknown";
+    readonly Inbound: "inbound";
+    readonly Outbound: "outbound";
+    readonly Intraorg: "intraorg";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const BehaviorDuringRetentionPeriodObject: {
     readonly DoNotRetain: "doNotRetain";
     readonly Retain: "retain";
@@ -8144,6 +8272,21 @@ export declare const SourceTypeObject: {
     readonly Site: "site";
     readonly UnknownFutureValue: "unknownFutureValue";
 };
+export declare const TeamsDeliveryLocationObject: {
+    readonly Unknown: "unknown";
+    readonly Teams: "teams";
+    readonly Quarantine: "quarantine";
+    readonly Failed: "failed";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
+export declare const TeamsMessageDeliveryActionObject: {
+    readonly Unknown: "unknown";
+    readonly DeliveredAsSpam: "deliveredAsSpam";
+    readonly Delivered: "delivered";
+    readonly Blocked: "blocked";
+    readonly Replaced: "replaced";
+    readonly UnknownFutureValue: "unknownFutureValue";
+};
 export declare const VmCloudProviderObject: {
     readonly Unknown: "unknown";
     readonly Azure: "azure";