Skip to content

Commit afb6e8e

Browse files
chrisdachrisda
committed
Updates to RecordType parameter values
Added 2 new values in Search-UnifiedAuditLog, New-ActivityAlert, and Set-ActivityAlert
1 parent d2c4efa commit afb6e8e

File tree

3 files changed

+51
-27
lines changed

3 files changed

+51
-27
lines changed

‎exchange/exchange-ps/exchange/policy-and-compliance-audit/Search-UnifiedAuditLog.md

Lines changed: 19 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,19 @@ For information about the parameter sets in the Syntax section below, see Exchan
1818
## SYNTAX
1919

2020
```
21-
Search-UnifiedAuditLog -EndDate <ExDateTime> -StartDate <ExDateTime> [-Formatted] [-FreeText <String>]
22-
[-IPAddresses <String[]>] [-ObjectIds <String[]>] [-Operations <String[]>]
23-
[-RecordType <ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence>]
24-
[-ResultSize <Int32>] [-SessionCommand <Initialize | ReturnLargeSet | ReturnNextPreviewPage>]
25-
[-SessionId <String>] [-SiteIds <String[]>] [-UserIds <String[]>] [<CommonParameters>]
21+
Search-UnifiedAuditLog -EndDate <ExDateTime> -StartDate <ExDateTime>
22+
[-Formatted]
23+
[-FreeText <String>]
24+
[-IPAddresses <String[]>]
25+
[-ObjectIds <String[]>]
26+
[-Operations <String[]>]
27+
[-RecordType <AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer>]
28+
[-ResultSize <Int32>]
29+
[-SessionCommand <Initialize | ReturnLargeSet | ReturnNextPreviewPage>]
30+
[-SessionId <String>]
31+
[-SiteIds <String[]>]
32+
[-UserIds <String[]>]
33+
[<CommonParameters>]
2634
```
2735

2836
## DESCRIPTION
@@ -201,9 +209,7 @@ Accept wildcard characters: False
201209
```
202210
203211
### -RecordType
204-
The RecordType parameter filters the log entries by record type.
205-
206-
Valid values are:
212+
The RecordType parameter filters the log entries by record type. Valid values are:
207213
208214
- AzureActiveDirectory
209215
@@ -239,8 +245,12 @@ Valid values are:
239245
240246
- PowerBIAudit
241247
248+
- SecurityComplianceAlerts
249+
242250
- SecurityComplianceCenterEOPCmdlet
243251
252+
- SecurityComplianceInsights
253+
244254
- SharePoint
245255
246256
- SharePointFileOperation
@@ -260,7 +270,7 @@ Valid values are:
260270
- Yammer
261271
262272
```yaml
263-
Type: ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence
273+
Type: AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer
264274
Parameter Sets: (All)
265275
Aliases:
266276
Applicable: Exchange Online

‎exchange/exchange-ps/exchange/policy-and-compliance/New-ActivityAlert.md

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ New-ActivityAlert -Multiplier <Double> -Name <String> -NotifyUser <MultiValuedPr
2727
[-Disabled <$true | $false>]
2828
[-DomainController <Fqdn>]
2929
[-EmailCulture <CultureInfo>]
30-
[-RecordType <ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence>]
30+
[-RecordType <AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer>]
3131
[-ScopeLevel <SingleUser | AllUsers>]
3232
[-Severity <Low | Medium | High | None>]
3333
[-UserId <MultiValuedProperty>]
@@ -43,7 +43,7 @@ New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> -Operation <M
4343
[-Disabled <$true | $false>]
4444
[-DomainController <Fqdn>]
4545
[-EmailCulture <CultureInfo>]
46-
[-RecordType <ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence>]
46+
[-RecordType <AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer>]
4747
[-Severity <Low | Medium | High | None>]
4848
[-UserId <MultiValuedProperty>]
4949
[-WhatIf] [<CommonParameters>]
@@ -59,7 +59,7 @@ New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> [-Operation <
5959
[-Disabled <$true | $false>]
6060
[-DomainController <Fqdn>]
6161
[-EmailCulture <CultureInfo>]
62-
[-RecordType <ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence>]
62+
[-RecordType <AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer>]
6363
[-ScopeLevel <SingleUser | AllUsers>]
6464
[-Severity <Low | Medium | High | None>]
6565
[-UserId <MultiValuedProperty>]
@@ -75,7 +75,7 @@ New-ActivityAlert -Name <String> -NotifyUser <MultiValuedProperty> -Type <Custom
7575
[-Disabled <$true | $false>]
7676
[-DomainController <Fqdn>]
7777
[-EmailCulture <CultureInfo>]
78-
[-RecordType <ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence>]
78+
[-RecordType <AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer>]
7979
[-Severity <Low | Medium | High | None>]
8080
[-UserId <MultiValuedProperty>]
8181
[-WhatIf] [<CommonParameters>]
@@ -384,9 +384,7 @@ Accept wildcard characters: False
384384
```
385385
386386
### -RecordType
387-
The RecordType parameter specifies a record type label for the activity alert.
388-
389-
Valid values are:
387+
The RecordType parameter specifies a record type label for the activity alert. Valid values are:
390388
391389
- AzureActiveDirectory
392390
@@ -422,8 +420,12 @@ Valid values are:
422420
423421
- PowerBIAudit
424422
423+
- SecurityComplianceAlerts
424+
425425
- SecurityComplianceCenterEOPCmdlet
426426
427+
- SecurityComplianceInsights
428+
427429
- SharePoint
428430
429431
- SharePointFileOperation
@@ -445,7 +447,7 @@ Valid values are:
445447
You can't use this parameter when the value of the Type parameter is ElevationOfPrivilege.
446448
447449
```yaml
448-
Type: ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence
450+
Type: AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer
449451
Parameter Sets: (All)
450452
Aliases:
451453
Applicable: Office 365 Security & Compliance Center

‎exchange/exchange-ps/exchange/policy-and-compliance/Set-ActivityAlert.md

Lines changed: 22 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,22 @@ For information about the parameter sets in the Syntax section below, see Exchan
2020
```
2121
Set-ActivityAlert [-Identity] <ComplianceRuleIdParameter>
2222
[-Category <None | DataLossPrevention | ThreatManagement | DataGovernance | AccessGovernance | Others>]
23-
[-Condition <String>] [-Confirm] [-Description <String>] [-Disabled <$true | $false>]
24-
[-DomainController <Fqdn>] [-EmailCulture <CultureInfo>] [-Multiplier <Double>] [-Name <String>]
25-
[-NotifyUser <MultiValuedProperty>] [-Operation <MultiValuedProperty>]
26-
[-RecordType <ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence>]
27-
[-ScopeLevel <SingleUser | AllUsers>] [-Severity <Low | Medium | High | None>] [-Threshold <Int32>]
28-
[-TimeWindow <Int32>] [-UserId <MultiValuedProperty>] [-WhatIf] [<CommonParameters>]
23+
[-Condition <String>] [-Confirm]
24+
[-Description <String>]
25+
[-Disabled <$true | $false>]
26+
[-DomainController <Fqdn>]
27+
[-EmailCulture <CultureInfo>]
28+
[-Multiplier <Double>]
29+
[-Name <String>]
30+
[-NotifyUser <MultiValuedProperty>]
31+
[-Operation <MultiValuedProperty>]
32+
[-RecordType <AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer>]
33+
[-ScopeLevel <SingleUser | AllUsers>]
34+
[-Severity <Low | Medium | High | None>]
35+
[-Threshold <Int32>]
36+
[-TimeWindow <Int32>]
37+
[-UserId <MultiValuedProperty>]
38+
[-WhatIf] [<CommonParameters>]
2939
```
3040

3141
## DESCRIPTION
@@ -272,9 +282,7 @@ Accept wildcard characters: False
272282
```
273283
274284
### -RecordType
275-
The RecordType parameter specifies a record type label for the activity alert.
276-
277-
Valid values are:
285+
The RecordType parameter specifies a record type label for the activity alert. Valid values are:
278286
279287
- AzureActiveDirectory
280288
@@ -310,8 +318,12 @@ Valid values are:
310318
311319
- PowerBIAudit
312320
321+
- SecurityComplianceAlerts
322+
313323
- SecurityComplianceCenterEOPCmdlet
314324
325+
- SecurityComplianceInsights
326+
315327
- SharePoint
316328
317329
- SharePointFileOperation
@@ -333,7 +345,7 @@ Valid values are:
333345
You can't use this parameter when the value of the Type parameter is ElevationOfPrivilege.
334346
335347
```yaml
336-
Type: ExchangeAdmin | ExchangeItem | ExchangeItemGroup | SharePoint | SyntheticProbe | SharePointFileOperation | OneDrive | AzureActiveDirectory | AzureActiveDirectoryAccountLogon | DataCenterSecurityCmdlet | ComplianceDLPSharePoint | Sway | ComplianceDLPExchange | SharePointSharingOperation | AzureActiveDirectoryStsLogon | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | SecurityComplianceCenterEOPCmdlet | ExchangeAggregatedOperation | PowerBIAudit | CRM | Yammer | SkypeForBusinessCmdlets | Discovery | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | ThreatIntelligence
348+
Type: AzureActiveDirectory | AzureActiveDirectoryAccountLogon | AzureActiveDirectoryStsLogon | CRM | ComplianceDLPExchange | ComplianceDLPSharePoint | DataCenterSecurityCmdlet | Discovery | ExchangeAdmin | ExchangeAggregatedOperation | ExchangeItem | ExchangeItemGroup | MicrosoftTeams | MicrosoftTeamsAddOns | MicrosoftTeamsSettingsOperation | OneDrive | PowerBIAudit | SecurityComplianceAlerts | SecurityComplianceCenterEOPCmdlet | SecurityComplianceInsights | SharePoint | SharePointFileOperation | SharePointSharingOperation | SkypeForBusinessCmdlets | SkypeForBusinessPSTNUsage | SkypeForBusinessUsersBlocked | Sway | ThreatIntelligence | Yammer
337349
Parameter Sets: (All)
338350
Aliases:
339351
Applicable: Office 365 Security & Compliance Center

0 commit comments

Comments
 (0)