Data Mapping: Email Activity Data

Tip:

Data collected before January 20, 2022 (00:00 UTC+00:00) is also available using Message Activity Data.

Field

General Field

Example

Notes

attachmentFileName

FileName

example.exe

 

attachmentMd5

FileMD5

46CFB4E38C6299983048DE39012FD08F

 

attachmentSha1

FileSHA1

98A9A1C8F69373B211E5F1E303BA8762F44BC898

 

attachmentSha256

FileSHA2

16e4e8b57e82159a16f5d7d898da9e2a4fbe90c17cd95c02074e75226337c90a

 

attachmentUrls

-

https://www.example.com

 

mailAttachmentHash

FileMD5

46CFB4E38C6299983048DE39012FD08F

 

mailBccAddresses

EmailRecipient

john_doe@example.com

 

mailCcAddresses

EmailRecipient

john_doe@example.com

 

mailDirection

-

3

  • 1: received from internal,

  • 3: received from external,

  • 5: received from unknown,

  • 21: sent to internal,

  • 23: sent to external,

  • 24: sent to both,

  • 25: sent to unknown

mailFromAddresses

EmailSender

john_doe@example.com

 

mailToAddresses

EmailRecipient

john_doe@example.com

 

mailMsgId

EmailMessageID

<rRzmIhBrXbgjvr4uhIwCcbtE6BnmgNTtAU51qWmqY@example.online>

 

mailMsgSubject

EmailSubject

Subject: From the desk of the Nigerian Prince

 

mailSenderIp

-

192.0.2.0

 

msgUuid

-

AAkALgAAAAAAHYQDEapmEc2byACqAC-EWg0AIY0iRcAx3EObusfk9aq1IAAAjK7CSAAA

Office365 mail internal ID

orgId

-

8a126fad-6fd9-4c02-9cd0-00c544c5994c

organization ID

pname

-

742

  • 733 - Trend Micro Cloud App Security

  • 742 - Trend Micro Email Security

tags

-

   

uuid

-

629e4f48-20c5-4467-b005-fa3f2dd66be8

internal id