创建 emailThreatSubmission
命名空间:microsoft.graph.security
重要
Microsoft Graph /beta
版本下的 API 可能会发生更改。 不支持在生产应用程序中使用这些 API。 若要确定 API 是否在 v1.0 中可用,请使用 版本 选择器。
创建新的 emailThreatSubmission 对象。
此 API 可用于以下国家级云部署。
全局服务 | 美国政府 L4 | 美国政府 L5 (DOD) | 由世纪互联运营的中国 |
---|---|---|---|
✅ | ❌ | ❌ | ❌ |
权限
为此 API 选择标记为最低特权的权限。 只有在应用需要它时,才使用更高的特权权限。 有关委派权限和应用程序权限的详细信息,请参阅权限类型。 要了解有关这些权限的详细信息,请参阅 权限参考。
权限类型 | 最低特权权限 | 更高特权权限 |
---|---|---|
委派(工作或学校帐户) | ThreatSubmission.ReadWrite | ThreatSubmission.ReadWrite.All |
委派(个人 Microsoft 帐户) | 不支持。 | 不支持。 |
应用程序 | ThreatSubmission.ReadWrite.All | 不可用。 |
HTTP 请求
POST /security/threatSubmission/emailThreats
请求标头
名称 | 说明 |
---|---|
Authorization | 持有者 {token}。 必填。 详细了解 身份验证和授权。 |
Content-Type | application/json. 必需。 |
请求正文
在请求正文中,提供 emailContentThreatSubmission 对象或 emailUrlThreatSubmission 对象的 JSON 表示形式。
emailContentThreatSubmission 和 emailUrlThreatSubmission 资源都是 emailThreatSubmission 实体的子类型。 根据以下条件选择要包含在请求正文中的内容:
- 如果要使用电子邮件内容本身创建提交,请包含 emailContentThreatSubmission 对象。
- 如果要使用指向电子邮件的 URL 创建提交,请包含 emailUrlThreatSubmission 对象。
创建 emailContentThreatSubmission 或 emailUrlThreatSubmision 对象后,威胁提交服务只会存储有关电子邮件的一些元数据。 不会存储电子邮件内容。 因此,将创建 emailThreatSubmission 实体。
响应
如果成功,此方法在 201 Created
响应正文中返回响应代码和 emailThreatSubmission 对象。
示例
示例 1:使用 messageUrl 和 emailUrlThreatSubmission 类型Email威胁提交创建
请求
POST https://graph.microsoft.com/beta/security/threatSubmission/emailThreats
Content-type: application/json
{
"@odata.type": "#microsoft.graph.security.emailUrlThreatSubmission",
"category": "spam",
"recipientEmailAddress": "tifc@contoso.com",
"messageUrl": "https://graph.microsoft.com/beta/users/c52ce8db-3e4b-4181-93c4-7d6b6bffaf60/messages/AAMkADU3MWUxOTU0LWNlOTEt="
}
响应
注意:为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 201 Created
Content-type: application/json
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#security/threatSubmission/emailThreatSubmission/$entity",
"@odata.type": "#microsoft.graph.security.emailUrlThreatSubmission",
"category": "spam",
"recipientEmailAddress": "tifc@contoso.com",
"id": "49c5ef5b-1f65-444a-e6b9-08d772ea2059",
"createdDateTime": "2021-10-10T03:30:18.6890937Z",
"contentType": "email",
"emailSubject": "This is a spam",
"status": "succeeded",
"source": "administrator",
"createdBy": {
"user": {
"identity": "c52ce8db-3e4b-4181-93c4-7d6b6bffaf60",
"displayName": "Ronald Admin",
"email": "tifc@contoso.com"
}
},
"result": {
"detail": "allowedByTenant",
"category": "notSpam",
"userMailboxSetting": "isFromDomainInDomainSafeList,isJunkMailRuleEnabled",
"detectedUrls": ["contoso.com"],
"detectedFiles": [
{
"fileName": "test.ps1",
"fileHash": "hash of test.ps1"
}
]
},
"adminReview": null,
"internetMessageId": "some-internet-message-id@contoso.com",
"sender": "test@contoso.com",
"senderIP": "127.0.0.1",
"receivedDateTime": "2021-10-09T03:30:18.6890937Z",
"originalCategory": "notSpam",
"attackSimulationInfo": null,
"tenantAllowOrBlockListAction": null,
"tenantId" : "39238e87-b5ab-4ef6-a559-af54c6b07b42"
}
示例 2:使用 tenantAllowOrBlockListAction 提供的Email威胁提交创建
请求
POST https://graph.microsoft.com/beta/security/threatSubmission/emailThreats
Content-type: application/json
{
"@odata.type": "#microsoft.graph.security.emailUrlThreatSubmission",
"category": "notSpam",
"recipientEmailAddress": "tifc@contoso.com",
"messageUrl": "https://graph.microsoft.com/beta/users/c52ce8db-3e4b-4181-93c4-7d6b6bffaf60/messages/AAMkADU3MWUxOTU0LWNlOTEt=",
"tenantAllowOrBlockListAction":
{
"action": "allow",
"expirationDateTime": "2021-10-30T03:30:18.6890937Z"
"note": "temporal allow the url/attachment/sender in the email."
}
}
响应
注意:为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 201 Created
Content-type: application/json
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#security/threatSubmission/emailThreatSubmission/$entity",
"@odata.type": "#microsoft.graph.security.emailUrlThreatSubmission",
"category": "spam",
"recipientEmailAddress": "tifc@contoso.com",
"id": "49c5ef5b-1f65-444a-e6b9-08d772ea2059",
"createdDateTime": "2021-10-10T03:30:18.6890937Z",
"contentType": "email",
"emailSubject": "This is a spam",
"status": "succeeded",
"source": "administrator",
"createdBy": {
"user": {
"identity": "c52ce8db-3e4b-4181-93c4-7d6b6bffaf60",
"displayName": "Ronald Admin",
"email": "tifc@contoso.com"
}
},
"result": {
"detail": "allowedByTenant",
"category": "notSpam",
"userMailboxSetting": "isFromDomainInDomainSafeList,isJunkMailRuleEnabled",
"detectedUrls": ["contoso.com"],
"detectedFiles": [
{
"fileName": "test.ps1",
"fileHash": "hash of test.ps1"
}
]
},
"adminReview": null,
"internetMessageId": "some-internet-message-id@contoso.com",
"sender": "test@contoso.com",
"senderIP": "127.0.0.1",
"receivedDateTime": "2021-10-09T03:30:18.6890937Z",
"originalCategory": "notSpam",
"attackSimulationInfo": null,
"tenantAllowOrBlockListAction":
{
"action": "allow",
"expirationDateTime": "2021-10-30T03:30:18.6890937Z",
"note": "temporal allow the url/attachment/sender in the email.",
"results": null
},
"tenantId" : "39238e87-b5ab-4ef6-a559-af54c6b07b42"
}
示例 3:使用 fileContent 和 emailContentThreatSubmission 类型Email威胁提交创建
请求
POST https://graph.microsoft.com/beta/security/threatSubmission/emailThreats
Content-type: application/json
{
"@odata.type": "#microsoft.graph.security.emailContentThreatSubmission",
"category": "spam",
"recipientEmailAddress": "tifc@contoso.com",
"fileContent": "UmVjZWl2ZWQ6IGZyb20gTVcyUFIwME1CMDMxNC5uYW1wcmQwMC....."
}
响应
注意:为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 201 Created
Content-type: application/json
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#security/threatSubmission/emailThreatSubmission/$entity",
"@odata.type": "#microsoft.graph.security.emailContentThreatSubmission",
"category": "spam",
"recipientEmailAddress": "tifc@contoso.com",
"id": "49c5ef5b-1f65-444a-e6b9-08d772ea2059",
"createdDateTime": "2021-10-10T03:30:18.6890937Z",
"contentType": "email",
"emailSubject": "This is a spam",
"status": "succeeded",
"source": "administrator",
"createdBy": {
"user": {
"identity": "c52ce8db-3e4b-4181-93c4-7d6b6bffaf60",
"displayName": "Ronald Admin",
"email": "tifc@contoso.com"
}
},
"result": {
"detail": "allowedByTenant",
"category": "notSpam",
"userMailboxSetting": "isFromDomainInDomainSafeList,isJunkMailRuleEnabled",
"detectedUrls": ["contoso.com"],
"detectedFiles": [
{
"fileName": "test.ps1",
"fileHash": "hash of test.ps1"
}
]
},
"adminReview": null,
"internetMessageId": "some-internet-message-id@contoso.com",
"sender": "test@contoso.com",
"senderIP": "127.0.0.1",
"receivedDateTime": "2021-10-09T03:30:18.6890937Z",
"originalCategory": "notSpam",
"attackSimulationInfo": null,
"tenantAllowOrBlockListAction": null,
"tenantId" : "39238e87-b5ab-4ef6-a559-af54c6b07b42"
}