@pnp/cli-microsoft365 6.8.0-beta.f473be5 → 6.9.0-beta.1cd2525

package/docs/docs/cmd/tenant/id/id-get.md

@@ -1,60 +0,0 @@
-# tenant id get
-
-Gets Microsoft 365 tenant ID for the specified domain
-
-## Usage
-
-```sh
-m365 tenant id get [options]
-```
-
-## Options
-
-`-d, --domainName [domainName]`
-: The domain name for which to retrieve the Microsoft 365 tenant ID
-
---8<-- "docs/cmd/_global.md"
-
-## Remarks
-
-If no domain name is specified, the command will return the tenant ID of the tenant to which you are currently logged in.
-
-## Examples
-
-Get Microsoft 365 tenant ID for the specified domain
-
-```sh
-m365 tenant id get --domainName contoso.com
-```
-
-Get Microsoft 365 tenant ID of the the tenant to which you are currently logged in
-
-```sh
-m365 tenant id get
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    "e65b162c-6f87-4eb1-a24e-1b37d3504663"
-    ```
-
-=== "Text"
-
-    ```text
-    e65b162c-6f87-4eb1-a24e-1b37d3504663
-    ```
-
-=== "CSV"
-
-    ```csv
-    e65b162c-6f87-4eb1-a24e-1b37d3504663
-    ```
-
-=== "Markdown"
-
-    ```md
-    e65b162c-6f87-4eb1-a24e-1b37d3504663
-    ```

package/docs/docs/cmd/tenant/report/report-activeusercounts.md

@@ -1,81 +0,0 @@
-# tenant report activeusercounts
-
-Gets the count of daily active users in the reporting period by product.
-
-## Usage
-
-```sh
-m365 tenant report activeusercounts [options]
-```
-
-## Options
-
-`-p, --period <period>`
-: The length of time over which the report is aggregated. Supported values `D7,D30,D90,D180`
-
-`-f, --outputFile [outputFile]`
-: Path to the file where the Microsoft Teams daily unique users by device type report should be stored in
-
---8<-- "docs/cmd/_global.md"
-
-## Examples
-
-Gets the count of daily active users in the reporting period by product for the last week
-
-```sh
-m365 tenant report activeusercounts --period D7
-```
-
-Gets the count of daily active users in the reporting period by product for the last week and exports the report data in the specified path in text format
-
-```sh
-m365 tenant report activeusercounts --period D7 --output text > "activeusercounts.txt"
-```
-
-Gets the count of daily active users in the reporting period by product for the last week and exports the report data in the specified path in json format
-
-```sh
-m365 tenant report activeusercounts --period D7 --output json > "activeusercounts.json"
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    [
-      {
-        "Report Refresh Date": "2022-10-25",
-        "Office 365": "1",
-        "Exchange": "5",
-        "OneDrive": "4",
-        "SharePoint": "3",
-        "Skype For Business": "2",
-        "Yammer": "3",
-        "Teams": "1",
-        "Report Date": "2022-10-19",
-        "Report Period": "7"
-      }
-    ]
-    ```
-
-=== "Text"
-
-    ```text
-    Report Refresh Date,Office 365,Exchange,OneDrive,SharePoint,Skype For Business,Yammer,Teams,Report Date,Report Period
-    2022-10-25,1,5,4,3,2,3,1,2022-10-19,7
-    ```
-
-=== "CSV"
-
-    ```csv
-    Report Refresh Date,Office 365,Exchange,OneDrive,SharePoint,Skype For Business,Yammer,Teams,Report Date,Report Period
-    2022-10-25,1,5,4,3,2,3,1,2022-10-19,7
-    ```
-
-=== "Markdown"
-
-    ```md
-    Report Refresh Date,Office 365,Exchange,OneDrive,SharePoint,Skype For Business,Yammer,Teams,Report Date,Report Period
-    2022-10-25,1,5,4,3,2,3,1,2022-10-19,7
-    ```

package/docs/docs/cmd/tenant/report/report-activeuserdetail.md

@@ -1,108 +0,0 @@
-# tenant report activeuserdetail
-
-Gets details about Microsoft 365 active users
-
-## Usage
-
-```sh
-m365 tenant report activeuserdetail [options]
-```
-
-## Options
-
-`-d, --date [date]`
-: The date for which you would like to view the users who performed any activity. Supported date format is `YYYY-MM-DD`. Specify the date or period, but not both.
-
-`-p, --period [period]`
-: The length of time over which the report is aggregated. Supported values `D7,D30,D90,D180`
-
-`-f, --outputFile [outputFile]`
-: Path to the file where the report should be stored in
-
---8<-- "docs/cmd/_global.md"
-
-## Remarks
-
-As this report is only available for the past 28 days, date parameter value should be a date from that range.
-
-## Examples
-
-Gets details about Microsoft 365 active users for the last week
-
-```sh
-m365 tenant report activeuserdetail --period D7
-```
-
-Gets details about Microsoft 365 active users for May 1, 2019
-
-```sh
-m365 tenant report activeuserdetail --date 2019-05-01
-```
-
-Gets details about Microsoft 365 active users for the last week and exports the report data in the specified path in text format
-
-```sh
-m365 tenant report activeuserdetail --period D7 --output text > "activeuserdetail.txt"
-```
-
-Gets details about Microsoft 365 active users for the last week and exports the report data in the specified path in json format
-
-```sh
-m365 tenant report activeuserdetail --period D7 --output json > "activeuserdetail.json"
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    [
-      {
-        "Report Refresh Date": "2022-10-23",
-        "User Principal Name": "0439A166C614C2E8C7B4075DC4752054",
-        "Display Name": "2236A6E43D08F619FE695DF3B163A32F",
-        "Is Deleted": "False",
-        "Deleted Date": "",
-        "Has Exchange License": "True",
-        "Has OneDrive License": "True",
-        "Has SharePoint License": "True",
-        "Has Skype For Business License": "True",
-        "Has Yammer License": "True",
-        "Has Teams License": "True",
-        "Exchange Last Activity Date": "2020-03-27",
-        "OneDrive Last Activity Date": "2020-03-27",
-        "SharePoint Last Activity Date": "2020-04-30",
-        "Skype For Business Last Activity Date": "2020-05-10",
-        "Yammer Last Activity Date": "2020-05-10",
-        "Teams Last Activity Date": "2020-05-10",
-        "Exchange License Assign Date": "2020-02-26",
-        "OneDrive License Assign Date": "2020-02-26",
-        "SharePoint License Assign Date": "2020-02-26",
-        "Skype For Business License Assign Date": "2020-02-26",
-        "Yammer License Assign Date": "2020-02-26",
-        "Teams License Assign Date": "2020-02-26",
-        "Assigned Products": "MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)"
-      }
-    ]
-    ```
-
-=== "Text"
-
-    ```text
-    Report Refresh Date,User Principal Name,Display Name,Is Deleted,Deleted Date,Has Exchange License,Has OneDrive License,Has SharePoint License,Has Skype For Business License,Has Yammer License,Has Teams License,Exchange Last Activity Date,OneDrive Last Activity Date,SharePoint Last Activity Date,Skype For Business Last Activity Date,Yammer Last Activity Date,Teams Last Activity Date,Exchange License Assign Date,OneDrive License Assign Date,SharePoint License Assign Date,Skype For Business License Assign Date,Yammer License Assign Date,Teams License Assign Date,Assigned Products
-    2022-10-23,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,False,,True,True,True,True,True,True,2020-09-12,2022-09-12,2021-10-30,2020-10-30,2019-04-21,2017-09-20,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
-    ```
-
-=== "CSV"
-
-    ```csv
-    Report Refresh Date,User Principal Name,Display Name,Is Deleted,Deleted Date,Has Exchange License,Has OneDrive License,Has SharePoint License,Has Skype For Business License,Has Yammer License,Has Teams License,Exchange Last Activity Date,OneDrive Last Activity Date,SharePoint Last Activity Date,Skype For Business Last Activity Date,Yammer Last Activity Date,Teams Last Activity Date,Exchange License Assign Date,OneDrive License Assign Date,SharePoint License Assign Date,Skype For Business License Assign Date,Yammer License Assign Date,Teams License Assign Date,Assigned Products
-    2022-10-23,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,False,,True,True,True,True,True,True,,2022-09-12,2020-09-12,2022-09-12,2021-10-30,2020-10-30,2019-04-21,2017-09-20,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
-    ```
-
-=== "Markdown"
-
-    ```md
-    Report Refresh Date,User Principal Name,Display Name,Is Deleted,Deleted Date,Has Exchange License,Has OneDrive License,Has SharePoint License,Has Skype For Business License,Has Yammer License,Has Teams License,Exchange Last Activity Date,OneDrive Last Activity Date,SharePoint Last Activity Date,Skype For Business Last Activity Date,Yammer Last Activity Date,Teams Last Activity Date,Exchange License Assign Date,OneDrive License Assign Date,SharePoint License Assign Date,Skype For Business License Assign Date,Yammer License Assign Date,Teams License Assign Date,Assigned Products
-    2022-10-23,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,False,,True,True,True,True,True,True,,2022-09-12,2020-09-12,2022-09-12,2021-10-30,2020-10-30,2019-04-21,2017-09-20,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,2021-01-10,MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
-    ```

package/docs/docs/cmd/tenant/report/report-office365activationcounts.md

@@ -1,60 +0,0 @@
-# tenant report office365activationcounts
-
-Get the count of Microsoft 365 activations on desktops and devices
-
-## Usage
-
-```sh
-m365 tenant report office365activationcounts [options]
-```
-
-## Options
-
---8<-- "docs/cmd/_global.md"
-
-## Examples
-
-Get the count of Microsoft 365 activations on desktops and devices
-
-```sh
-m365 tenant report office365activationcounts
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    [
-      {
-        "Report Refresh Date": "2022-10-25",
-        "Product Type": "MICROSOFT 365 APPS FOR ENTERPRISE",
-        "Windows": 5,
-        "Mac": 0,
-        "Android": 0,
-        "iOS": 0,
-        "Windows 10 Mobile": 0
-      }
-    ]
-    ```
-
-=== "Text"
-
-    ```text
-    Report Refresh Date,Product Type,Windows,Mac,Android,iOS,Windows 10 Mobile
-    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,5,0,0,0,0
-    ```
-
-=== "CSV"
-
-    ```csv
-    Report Refresh Date,Product Type,Windows,Mac,Android,iOS,Windows 10 Mobile
-    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,5,0,0,0,0
-    ```
-
-=== "Markdown"
-
-    ```md
-    Report Refresh Date,Product Type,Windows,Mac,Android,iOS,Windows 10 Mobile
-    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,5,0,0,0,0
-    ```

package/docs/docs/cmd/tenant/report/report-office365activationsusercounts.md

@@ -1,58 +0,0 @@
-# tenant report office365activationsusercounts
-
-Get the count of users that are enabled and those that have activated the Office subscription on desktop or devices or shared computers
-
-## Usage
-
-```sh
-m365 tenant report office365activationsusercounts [options]
-```
-
-## Options
-
---8<-- "docs/cmd/_global.md"
-
-## Examples
-
-Get the count of users that are enabled and those that have activated the Office subscription on desktop or devices or shared computers
-
-```sh
-m365 tenant report office365activationsusercounts
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    [
-      {
-        "Report Refresh Date": "2022-10-25",
-        "Product Type": "MICROSOFT 365 APPS FOR ENTERPRISE",
-        "Assigned": 24,
-        "Activated": 5,
-        "Shared Computer Activation": 0
-      }
-    ]
-    ```
-
-=== "Text"
-
-    ```text
-    Report Refresh Date,Product Type,Assigned,Activated,Shared Computer Activation
-    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,24,5,0
-    ```
-
-=== "CSV"
-
-    ```csv
-    Report Refresh Date,Product Type,Assigned,Activated,Shared Computer Activation
-    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,24,5,0
-    ```
-
-=== "Markdown"
-
-    ```md
-    Report Refresh Date,Product Type,Assigned,Activated,Shared Computer Activation
-    2022-10-25,MICROSOFT 365 APPS FOR ENTERPRISE,24,5,0
-    ```

package/docs/docs/cmd/tenant/report/report-office365activationsuserdetail.md

@@ -1,64 +0,0 @@
-# tenant report office365activationsuserdetail
-
-Get details about users who have activated Microsoft 365
-
-## Usage
-
-```sh
-m365 tenant report office365activationsuserdetail [options]
-```
-
-## Options
-
---8<-- "docs/cmd/_global.md"
-
-## Examples
-
-Get details about users who have activated Microsoft 365
-
-```sh
-m365 tenant report office365activationsuserdetail
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    [
-      {
-        "Report Refresh Date": "2022-10-25",
-        "User Principal Name": "554630B7593DDE8E04F27933A965D5B2",
-        "Display Name": "2BA57CC6348F53C9EE6347528301E896",
-        "Product Type": "MICROSOFT EXCEL ADVANCED ANALYTICS",
-        "Last Activated Date": "2021-01-10",
-        "Windows": 0,
-        "Mac": 0,
-        "Windows 10 Mobile": 0,
-        "iOS": 0,
-        "Android": 0,
-        "Activated On Shared Computer": "False"
-      }
-    ]
-    ```
-
-=== "Text"
-
-    ```text
-    Report Refresh Date,User Principal Name,Display Name,Product Type,Last Activated Date,Windows,Mac,Windows 10 Mobile,iOS,Android,Activated On Shared Computer
-    2022-10-25,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,MICROSOFT 365 APPS FOR ENTERPRISE,2021-01-10,1,0,0,0,0,False
-    ```
-
-=== "CSV"
-
-    ```csv
-    Report Refresh Date,User Principal Name,Display Name,Product Type,Last Activated Date,Windows,Mac,Windows 10 Mobile,iOS,Android,Activated On Shared Computer
-    2022-10-25,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,MICROSOFT 365 APPS FOR ENTERPRISE,2021-01-10,1,0,0,0,0,False
-    ```
-
-=== "Markdown"
-
-    ```md
-    Report Refresh Date,User Principal Name,Display Name,Product Type,Last Activated Date,Windows,Mac,Windows 10 Mobile,iOS,Android,Activated On Shared Computer
-    2022-10-25,77E5979DD60BA6EAA53E814DBEEEFA5F,4291DA7C39EE3263E97336B42734A667,MICROSOFT 365 APPS FOR ENTERPRISE,2021-01-10,1,0,0,0,0,False
-    ```

package/docs/docs/cmd/tenant/report/report-servicesusercounts.md

@@ -1,87 +0,0 @@
-# tenant report servicesusercounts
-
-Gets the count of users by activity type and service.
-
-## Usage
-
-```sh
-m365 tenant report servicesusercounts [options]
-```
-
-## Options
-
-`-p, --period <period>`
-: The length of time over which the report is aggregated. Supported values `D7,D30,D90,D180`
-
-`-f, --outputFile [outputFile]`
-: Path to the file where the report should be stored in
-
---8<-- "docs/cmd/_global.md"
-
-## Examples
-
-Gets the count of users by activity type and service for the last week
-
-```sh
-m365 tenant report servicesusercounts --period D7
-```
-
-Gets the count of users by activity type and service for the last week and exports the report data in the specified path in text format
-
-```sh
-m365 tenant report servicesusercounts --period D7 --output text > "servicesusercounts.txt"
-```
-
-Gets the count of users by activity type and service for the last week and exports the report data in the specified path in json format
-
-```sh
-m365 tenant report servicesusercounts --period D7 --output json > "servicesusercounts.json"
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    [
-      {
-        "Report Refresh Date": "2022-10-23",
-        "Exchange Active": "1",
-        "Exchange Inactive": "23",
-        "OneDrive Active": "1",
-        "OneDrive Inactive": "23",
-        "SharePoint Active": "1",
-        "SharePoint Inactive": "23",
-        "Skype For Business Active": "0",
-        "Skype For Business Inactive": "24",
-        "Yammer Active": "0",
-        "Yammer Inactive": "24",
-        "Teams Active": "1",
-        "Teams Inactive": "23",
-        "Office 365 Active": "2",
-        "Office 365 Inactive": "22",
-        "Report Period": "7"
-      }
-    ]
-    ```
-
-=== "Text"
-
-    ```text
-    Report Refresh Date,Exchange Active,Exchange Inactive,OneDrive Active,OneDrive Inactive,SharePoint Active,SharePoint Inactive,Skype For Business Active,Skype For Business Inactive,Yammer Active,Yammer Inactive,Teams Active,Teams Inactive,Office 365 Active,Office 365 Inactive,Report Period
-    2022-10-23,1,23,1,23,1,23,0,24,0,24,1,23,2,22,7
-    ```
-
-=== "CSV"
-
-    ```csv
-    Report Refresh Date,Exchange Active,Exchange Inactive,OneDrive Active,OneDrive Inactive,SharePoint Active,SharePoint Inactive,Skype For Business Active,Skype For Business Inactive,Yammer Active,Yammer Inactive,Teams Active,Teams Inactive,Office 365 Active,Office 365 Inactive,Report Period
-    2022-10-23,1,23,1,23,1,23,0,24,0,24,1,23,2,22,7
-    ```
-
-=== "Markdown"
-
-    ```md
-    Report Refresh Date,Exchange Active,Exchange Inactive,OneDrive Active,OneDrive Inactive,SharePoint Active,SharePoint Inactive,Skype For Business Active,Skype For Business Inactive,Yammer Active,Yammer Inactive,Teams Active,Teams Inactive,Office 365 Active,Office 365 Inactive,Report Period
-    2022-10-23,1,23,1,23,1,23,0,24,0,24,1,23,2,22,7
-    ```

package/docs/docs/cmd/tenant/security/security-alerts-list.md

@@ -1,158 +0,0 @@
-# tenant security alerts list
-
-Gets the security alerts for a tenant
-
-## Usage
-
-```sh
-m365 tenant security alerts list [options]
-```
-
-## Options
-
-`--vendor [vendor]`
-: The vendor to return alerts for. Possible values `Azure Advanced Threat Protection`, `Azure Security Center`, `Microsoft Cloud App Security`, `Azure Active Directory Identity Protection`, `Azure Sentinel`, `Microsoft Defender ATP`. If omitted, all alerts are returned
-
---8<-- "docs/cmd/_global.md"
-
-## Examples
-
-Get all security alerts for a tenant
-
-```sh
-m365 tenant security alerts list
-```
-
-Get security alerts for a vendor with name _Azure Sentinel_
-
-```sh
-m365 tenant security alerts list --vendor "Azure Sentinel"
-```
-
-## Response
-
-=== "JSON"
-
-    ```json
-    [
-      {
-          "id": "2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384",
-          "azureTenantId": "b8e1599d-b418-4be9-8f39-df03c3abe27a",
-          "azureSubscriptionId": "ee390228-e284-4e54-a464-d693a1d55540",
-          "riskScore": null,
-          "tags": [],
-          "activityGroupName": null,
-          "assignedTo": null,
-          "category": "Storage.Blob_GeoAnomaly",
-          "closedDateTime": null,
-          "comments": [],
-          "confidence": null,
-          "createdDateTime": "2022-03-30T13:19:15.8039138Z",
-          "description": "Someone has accessed your Azure Storage account 'westeuropegivcekj' from an unusual location.",
-          "detectionIds": [],
-          "eventDateTime": "2022-03-30T10:16:56.846Z",
-          "feedback": null,
-          "incidentIds": [],
-          "lastEventDateTime": null,
-          "lastModifiedDateTime": "2022-03-30T13:19:48.5196488Z",
-          "recommendedActions": [
-            "• Limit access to your storage account, following the 'least privilege' principle: https://go.microsoft.com/fwlink/?linkid=2187303.• Consider using identity-based authentication: https://go.microsoft.com/fwlink/?linkid=2187202.• Consider rotating the storage account access keys and ensure that your access tokens are only shared with authorized users.• Ensure that storage access tokens are stored in a secured location such as Azure Key Vault. Avoid storing or sharing storage access tokens in source code, documentation, and email."
-          ],
-          "severity": "low",
-          "sourceMaterials": [
-            "https://portal.azure.com/#blade/Microsoft_Azure_Security_AzureDefenderForData/AlertBlade/alertId/2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384/subscriptionId/bbdf91d0-d75b-430e-b738-2c525452144f/resourceGroup/managed-rg-purview-mip-poc/referencedFrom/alertDeepLink/location/westeurope"
-          ],
-          "status": "newAlert",
-          "title": "Access from an unusual location to a storage blob container",
-          "CustomProperties": "[\"{\\\"Alert Id\\\":\\\"658fa695-a5e6-4b60-ac7c-b2c1396df384\\\",\\\"Azure AD user\\\":\\\"N/A (Azure AD user authentication was not used)\\\",\\\"User agent\\\":\\\"Azure-Storage/9.3.0 (.NET Core)\\\",\\\"API type\\\":\\\"Blob\\\",\\\"Client location\\\":\\\"Dublin, Ireland\\\",\\\"Authentication type\\\":\\\"Shared access signature (SAS)\\\",\\\"Investigation steps\\\":\\\"{\\\\\\\"displayValue\\\\\\\":\\\\\\\"View related storage activity using Storage Analytics Logging. See how to configure Storage Analytics logging and more information\\\\\\\",\\\\\\\"kind\\\\\\\":\\\\\\\"Link\\\\\\\",\\\\\\\"value\\\\\\\":\\\\\\\"https:\\\\\\\\/\\\\\\\\/go.microsoft.com\\\\\\\\/fwlink\\\\\\\\/?linkid=2075734\\\\\\\"}\\\",\\\"Operations types\\\":\\\"GetBlob\\\",\\\"Service type\\\":\\\"Azure Blobs\\\",\\\"Container\\\":\\\"temporary\\\",\\\"Potential causes\\\":\\\"This alert indicates that this account has been accessed successfully from an IP address that is unfamiliar and unexpected compared to recent access pattern on this account.\\\\\\Potential causes:\\\\\\• An attacker has accessed your storage account.\\\\\\• A legitimate user has accessed your storage account from a new location.\\\",\\\"resourceType\\\":\\\"Storage\\\",\\\"ReportingSystem\\\":\\\"Azure\\\"}\",\"\\\"InitialAccess\\\"\"]",
-          "vendorInformation": {
-            "provider": "ASC",
-            "providerVersion": null,
-            "subProvider": "StorageThreatDetection",
-            "vendor": "Microsoft"
-          },
-          "alertDetections": [],
-          "cloudAppStates": [],
-          "fileStates": [],
-          "hostStates": [],
-          "historyStates": [],
-          "investigationSecurityStates": [],
-          "malwareStates": [],
-          "messageSecurityStates": [],
-          "networkConnections": [
-            {
-              "applicationName": null,
-              "destinationAddress": null,
-              "destinationDomain": null,
-              "destinationLocation": null,
-              "destinationPort": null,
-              "destinationUrl": null,
-              "direction": null,
-              "domainRegisteredDateTime": null,
-              "localDnsName": null,
-              "natDestinationAddress": null,
-              "natDestinationPort": null,
-              "natSourceAddress": null,
-              "natSourcePort": null,
-              "protocol": "tcp",
-              "riskScore": null,
-              "sourceAddress": "52.214.204.49",
-              "sourceLocation": "Dublin, Dublin, IE",
-              "sourcePort": null,
-              "status": null,
-              "urlParameters": null
-            }
-          ],
-          "processes": [],
-          "registryKeyStates": [],
-          "securityResources": [
-            {
-              "resource": "/subscriptions/bbdf91d0-d75b-430e-b738-2c525452144f/resourceGroups/managed-rg-purview-mip-poc/providers/Microsoft.Storage/storageAccounts/scanwesteuropegivcebj",
-              "resourceType": "attacked"
-            }
-          ],
-          "triggers": [],
-          "userStates": [],
-          "uriClickSecurityStates": [],
-          "vulnerabilityStates": []
-        }
-    ]
-    ```
-
-=== "Text"
-
-    ```text
-    id                                   title                      severity
-    ------------------------------------ -------------------------- --------
-    4ece2cf8-cbc0-5a42-92c3-e23f96006907 SharePoint Bulk Edit Items medium
-    ```
-
-=== "CSV"
-
-    ```csv
-    id,title,severity
-    4ece2cf8-cbc0-5a42-92c3-e23f96006907,SharePoint Bulk Edit Items,medium
-    ```
-
-=== "Markdown"
-
-    ```md
-    # tenant security alerts list
-
-    Date: 3/20/2022
-
-    ## Unfamiliar sign-in properties (2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384)
-
-    Property | Value
-    ---------|-------
-    id | 2517536653831539999_658fa695-a5e6-4b60-ac7c-b2c1396df384
-    azureTenantId | b8e1599d-b418-4be9-8f39-df03c3abe27a
-    category | Storage.Blob_GeoAnomaly
-    createdDateTime | 2022-03-30T13:19:15.8039138Z
-    description | The following properties of this sign-in are unfamiliar for the given user: ASN, Browser, Device, IP, Location, EASId, TenantIPsubnet
-    eventDateTime | 2022-03-30T10:16:56.846Z
-    lastModifiedDateTime | 2022-03-30T13:19:48.5196488Z
-    severity | low
-    status | newAlert
-    title | Access from an unusual location to a storage blob container
-    ```