Skip to content

This document shows the fields supported by each provider and operation.

get_threat_details

FieldMimecast Cloud GatewayType
actionstring
action_idnumber
activity_idnumber
activity_namestring
category_namestring
category_uidnumber
class_namestring
class_uidnumber
dispositionstring
disposition_idnumber
evidences[].email.files[].extstring
evidences[].email.files[].hashes[].algorithmstring
evidences[].email.files[].hashes[].algorithm_idnumber
evidences[].email.files[].hashes[].valuestring
evidences[].email.files[].mime_typestring
evidences[].email.files[].namestring
evidences[].email.files[].sizenumber
evidences[].email.files[].typestring
evidences[].email.files[].type_idnumber
evidences[].email.fromstring
evidences[].email.message_uidstring
evidences[].email.senderstring
evidences[].email.sizenumber
evidences[].email.subjectstring
evidences[].email.to[]string
finding_info.uidstring
metadata.extensions[].namestring
metadata.extensions[].uidstring
metadata.extensions[].versionstring
metadata.product.namestring
metadata.product.vendor_namestring
metadata.profiles[]string
metadata.versionstring
severitystring
severity_idnumber
timenumber
time_dtstring
timezone_offsetnumber
type_namestring
type_uidnumber

query_threats

FieldMimecast Cloud GatewayType
actionstring
action_idnumber
activity_idnumber
activity_namestring
category_namestring
category_uidnumber
class_namestring
class_uidnumber
dispositionstring
disposition_idnumber
evidences[].email.fromstring
evidences[].email.subjectstring
finding_info.uidstring
metadata.extensions[].namestring
metadata.extensions[].uidstring
metadata.extensions[].versionstring
metadata.product.namestring
metadata.product.vendor_namestring
metadata.profiles[]string
metadata.versionstring
severitystring
severity_idnumber
timenumber
time_dtstring
timezone_offsetnumber
type_namestring
type_uidnumber