# Email Security Supported Fields

This document shows the fields supported by each provider and operation.

- [get_threat_details](#get_threat_details)
- [query_threats](#query_threats)


## get_threat_details

| Field | Mimecast Cloud Gateway | Type |
|  --- | --- | --- |
| action | ✅ | string |
| action_id | ✅ | number |
| activity_id | ✅ | number |
| activity_name | ✅ | string |
| category_name | ✅ | string |
| category_uid | ✅ | number |
| class_name | ✅ | string |
| class_uid | ✅ | number |
| disposition | ✅ | string |
| disposition_id | ✅ | number |
| evidences[].email.files[].ext | ✅ | string |
| evidences[].email.files[].hashes[].algorithm | ✅ | string |
| evidences[].email.files[].hashes[].algorithm_id | ✅ | number |
| evidences[].email.files[].hashes[].value | ✅ | string |
| evidences[].email.files[].mime_type | ✅ | string |
| evidences[].email.files[].name | ✅ | string |
| evidences[].email.files[].size | ✅ | number |
| evidences[].email.files[].type | ✅ | string |
| evidences[].email.files[].type_id | ✅ | number |
| evidences[].email.from | ✅ | string |
| evidences[].email.message_uid | ✅ | string |
| evidences[].email.sender | ✅ | string |
| evidences[].email.size | ✅ | number |
| evidences[].email.subject | ✅ | string |
| evidences[].email.to[] | ✅ | string |
| finding_info.uid | ✅ | string |
| metadata.extensions[].name | ✅ | string |
| metadata.extensions[].uid | ✅ | string |
| metadata.extensions[].version | ✅ | string |
| metadata.product.name | ✅ | string |
| metadata.product.vendor_name | ✅ | string |
| metadata.profiles[] | ✅ | string |
| metadata.version | ✅ | string |
| severity | ✅ | string |
| severity_id | ✅ | number |
| time | ✅ | number |
| time_dt | ✅ | string |
| timezone_offset | ✅ | number |
| type_name | ✅ | string |
| type_uid | ✅ | number |


## query_threats

| Field | Mimecast Cloud Gateway | Type |
|  --- | --- | --- |
| action | ✅ | string |
| action_id | ✅ | number |
| activity_id | ✅ | number |
| activity_name | ✅ | string |
| category_name | ✅ | string |
| category_uid | ✅ | number |
| class_name | ✅ | string |
| class_uid | ✅ | number |
| disposition | ✅ | string |
| disposition_id | ✅ | number |
| evidences[].email.from | ✅ | string |
| evidences[].email.subject | ✅ | string |
| finding_info.uid | ✅ | string |
| metadata.extensions[].name | ✅ | string |
| metadata.extensions[].uid | ✅ | string |
| metadata.extensions[].version | ✅ | string |
| metadata.product.name | ✅ | string |
| metadata.product.vendor_name | ✅ | string |
| metadata.profiles[] | ✅ | string |
| metadata.version | ✅ | string |
| severity | ✅ | string |
| severity_id | ✅ | number |
| time | ✅ | number |
| time_dt | ✅ | string |
| timezone_offset | ✅ | number |
| type_name | ✅ | string |
| type_uid | ✅ | number |