Skip to content

Commit 6ad3e3c

Browse files
authored
Update Export-ActivityExplorerData.md
1 parent 535511e commit 6ad3e3c

File tree

1 file changed

+87
-0
lines changed

1 file changed

+87
-0
lines changed

exchange/exchange-ps/exchange/Export-ActivityExplorerData.md

Lines changed: 87 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -164,6 +164,93 @@ Valid activity filters include the following values:
164164

165165
To use this cmdlet in Security & Compliance PowerShell, you need to be assigned permissions. For more information, see [Permissions in the Microsoft Purview compliance portal](https://learn.microsoft.com/purview/microsoft-365-compliance-center-permissions).
166166

167+
### Output
168+
The cmdlet exports following data columns. However, not all columns will be present for each activity. For details on exported column for different activities, it is recommended to check the activities on [Activity Explorer](https://learn.microsoft.com/en-us/purview/data-classification-activity-explorer)
169+
- Activity
170+
- Happened
171+
- RecordIdentity
172+
- Workload
173+
- User
174+
- FilePath
175+
- HowApplied
176+
- HowAppliedDetail
177+
- LabelEventType
178+
- ClientIP
179+
- FileExtension
180+
- FileType
181+
- SensitivityLabel
182+
- OldSensitivityLabel
183+
- SensitivityLabelPolicyId
184+
- RetentionLabel
185+
- OldRetentionLabel
186+
- SourceLocationType
187+
- DestinationLocationType
188+
- Platform
189+
- ProductVersion
190+
- Application
191+
- ProcessName
192+
- DeviceName
193+
- MDATPDeviceId
194+
- Sha1
195+
- Sha256
196+
- ParentArchiveHash
197+
- EnforcementMode
198+
- Justification
199+
- OriginatingDomain
200+
- PreviousFileName
201+
- PreviousFilePath
202+
- TargetPrinterName
203+
- TargetDomain
204+
- TargetFilePath
205+
- FileSize
206+
- RMSEncrypted
207+
- IRMContentId
208+
- SensitiveInfoTypeData
209+
- SensitiveInfoTypeBucketsData
210+
- PolicyId
211+
- PolicyName
212+
- PolicyMode
213+
- RuleId
214+
- RuleName
215+
- RuleActions
216+
- MatchedWithV1DetailedScheme
217+
- Manufacturer
218+
- SerialNumber
219+
- Model
220+
- Sender
221+
- Subject
222+
- Receivers
223+
- UserSku
224+
- DataState
225+
- ProtectionEventType
226+
- ProtectionType
227+
- TemplateId
228+
- IsProtected
229+
- IsProtectedBefore
230+
- ProtectionOwner
231+
- PreviousProtectionOwner
232+
- ArtifactType
233+
- UserType
234+
- GroupId
235+
- GroupName
236+
- AssociatedAdminUnits
237+
- EndpointOperation
238+
- Hidden
239+
- JitTriggered
240+
- DlpPolicyMatchId
241+
- EvaluationTime
242+
- AuthorizedGroupId
243+
- AuthorizedGroupName
244+
- GroupType
245+
- EntityProperties
246+
- VpnServerAddress
247+
- VpnNetworkAddress
248+
- IsCorporateNetwork
249+
- StorageName
250+
- FullUrl
251+
- FalsePositive
252+
- Reason
253+
167254
## EXAMPLES
168255

169256
### Example 1

0 commit comments

Comments
 (0)