added column

Author: poliveria

defender-xdr/advanced-hunting-messageevents-table.md

@@ -66,6 +66,7 @@ For information on other tables in the advanced hunting schema, [see the advance
 | `DeliveryAction` | `string` |Delivery action of the message: Delivered, Blocked|
 | `DeliveryLocation` | `string` |Location of the message at the time of delivery|
 | `ReportId` | `string` |Unique identifier for the event|
+| `SafetyTip` | `string` |Indicates if a safe tip has been added on the message|
 
 
 

defender-xdr/advanced-hunting-messagepostdeliveryevents-table.md

@@ -54,6 +54,7 @@ For information on other tables in the advanced hunting schema, [see the advance
 | `LatestDeliveryLocation` | `string` |Last known location of the message |
 | `ReportId` | `string` |Unique identifier for the event|
 | `IsExternalThread` | `boolean` |Indicates if there are external recipients in the thread (1) or none (0)|
+| `SafetyTip` | `string` |Indicates if a safe tip has been added on the message|
 
 
 

defender-xdr/custom-detection-rules.md

@@ -89,6 +89,7 @@ To create a custom detection rule, the query must return the following columns:
       - `RecipientEmailAddress`
       - `SenderFromAddress` (envelope sender or Return-Path address)
       - `SenderMailFromAddress` (sender address displayed by email client)
+      - `SenderObjectId`
       - `RecipientObjectId`
       - `AccountObjectId`
       - `AccountSid`