A mobile suspicious activity alert. Derived from audit logs.
JSON representation |
---|
{
"email": string,
"events": [
{
object ( |
Fields | |
---|---|
email |
The email of the user this alert was created for. |
events[] |
Required. The list of security events. |
SuspiciousActivitySecurityDetail
Detailed information of a single MDM suspicious activity event.
JSON representation |
---|
{ "deviceId": string, "serialNumber": string, "deviceType": string, "deviceModel": string, "resourceId": string, "iosVendorId": string, "deviceProperty": string, "oldValue": string, "newValue": string } |
Fields | |
---|---|
deviceId |
Required. The device ID. |
serialNumber |
The serial number of the device. |
deviceType |
The type of the device. |
deviceModel |
The model of the device. |
resourceId |
The device resource ID. |
iosVendorId |
Required for iOS, empty for others. |
deviceProperty |
The device property which was changed. |
oldValue |
The old value of the device property before the change. |
newValue |
The new value of the device property after the change. |