| action | ✅ | string |
| action_id | ✅ | number |
| activity_id | ✅ | number |
| activity_name | ✅ | string |
| category_name | ✅ | string |
| category_uid | ✅ | number |
| class_name | ✅ | string |
| class_uid | ✅ | number |
| disposition | ✅ | string |
| disposition_id | ✅ | number |
| evidences[].email.files[].ext | ✅ | string |
| evidences[].email.files[].hashes[].algorithm | ✅ | string |
| evidences[].email.files[].hashes[].algorithm_id | ✅ | number |
| evidences[].email.files[].hashes[].value | ✅ | string |
| evidences[].email.files[].mime_type | ✅ | string |
| evidences[].email.files[].name | ✅ | string |
| evidences[].email.files[].size | ✅ | number |
| evidences[].email.files[].type | ✅ | string |
| evidences[].email.files[].type_id | ✅ | number |
| evidences[].email.from | ✅ | string |
| evidences[].email.message_uid | ✅ | string |
| evidences[].email.sender | ✅ | string |
| evidences[].email.size | ✅ | number |
| evidences[].email.subject | ✅ | string |
| evidences[].email.to[] | ✅ | string |
| finding_info.uid | ✅ | string |
| metadata.extensions[].name | ✅ | string |
| metadata.extensions[].uid | ✅ | string |
| metadata.extensions[].version | ✅ | string |
| metadata.product.name | ✅ | string |
| metadata.product.vendor_name | ✅ | string |
| metadata.profiles[] | ✅ | string |
| metadata.version | ✅ | string |
| severity | ✅ | string |
| severity_id | ✅ | number |
| time | ✅ | number |
| time_dt | ✅ | string |
| timezone_offset | ✅ | number |
| type_name | ✅ | string |
| type_uid | ✅ | number |