Skip to content

Commit 76c2095

Browse files
authored
Update Export-ActivityExplorerData.md
1 parent 506464e commit 76c2095

File tree

1 file changed

+65
-21
lines changed

1 file changed

+65
-21
lines changed

exchange/exchange-ps/exchange/Export-ActivityExplorerData.md

Lines changed: 65 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -33,27 +33,71 @@ Export-ActivityExplorerData -EndTime <DateTime> -OutputFormat <String> -StartTim
3333
```
3434

3535
## DESCRIPTION
36-
This cmdlet supports following filters
37-
38-
| | | | |
39-
| --- | --- | --- | --- |
40-
| Activity | Application | ArtifactType | ClientIP |
41-
| ColdScanPolicyId | CopilotAppHost | CopilotThreadId | CopilotType |
42-
| CreationTime | DataState | DestinationFilePath | DestinationLocationType |
43-
| DeviceName | DLPPolicyId | DLPPolicyRuleId | EmailReceiver |
44-
| EmailSender | EndpointOperation | EnforcementMode | FalsePositive |
45-
| FileExtension | GeneralPurposeComparison | HowApplied | HowAppliedDetail |
46-
| IrmUrlCategory | IsProtected | IsProtectedBefore | ItemName |
47-
| LabelEventType | Location | MDATPDeviceId | OriginatingDomain |
48-
| PageSize | ParentArchiveHash | Platform | PolicyId |
49-
| PolicyMode | PolicyName | PolicyRuleAction | PolicyRuleId |
50-
| PolicyRuleName | PreviousFileName | PreviousProtectionOwner | ProtectionEventType |
51-
| ProtectionOwner | RemovableMediaDeviceManufacturer | RemovableMediaDeviceModel | RemovableMediaDeviceSerialNumber |
52-
| RetentionLabel | RMSEncrypted | SensitiveInfoTypeClassifierType | SensitiveInfoTypeConfidence |
53-
| SensitiveInfoTypeCount | SensitiveInfoTypeId | SensitivityLabel | SensitivityLabelPolicy |
54-
| Sha1 | Sha256 | SourceLocationType | TargetDomain |
55-
| TargetPrinterName | User | UsersPerDay | Workload |
56-
36+
This cmdlet supports following filters:
37+
- Activity
38+
- Application
39+
- ArtifactType
40+
- ClientIP
41+
- ColdScanPolicyId
42+
- CopilotAppHost
43+
- CopilotThreadId
44+
- CopilotType
45+
- CreationTime
46+
- DataState
47+
- DestinationFilePath
48+
- DestinationLocationType
49+
- DeviceName
50+
- DLPPolicyId
51+
- DLPPolicyRuleId
52+
- EmailReceiver
53+
- EmailSender
54+
- EndpointOperation
55+
- EnforcementMode
56+
- FalsePositive
57+
- FileExtension
58+
- GeneralPurposeComparison
59+
- HowApplied
60+
- HowAppliedDetail
61+
- IrmUrlCategory
62+
- IsProtected
63+
- IsProtectedBefore
64+
- ItemName
65+
- LabelEventType
66+
- Location
67+
- MDATPDeviceId
68+
- OriginatingDomain
69+
- PageSize
70+
- ParentArchiveHash
71+
- Platform
72+
- PolicyId
73+
- PolicyMode
74+
- PolicyName
75+
- PolicyRuleAction
76+
- PolicyRuleId
77+
- PolicyRuleName
78+
- PreviousFileName
79+
- PreviousProtectionOwner
80+
- ProtectionEventType
81+
- ProtectionOwner
82+
- RemovableMediaDeviceManufacturer
83+
- RemovableMediaDeviceModel
84+
- RemovableMediaDeviceSerialNumber
85+
- RetentionLabel
86+
- RMSEncrypted
87+
- SensitiveInfoTypeClassifierType
88+
- SensitiveInfoTypeConfidence
89+
- SensitiveInfoTypeCount
90+
- SensitiveInfoTypeId
91+
- SensitivityLabel
92+
- SensitivityLabelPolicy
93+
- Sha1
94+
- Sha256
95+
- SourceLocationType
96+
- TargetDomain
97+
- TargetPrinterName
98+
- User
99+
- UsersPerDay
100+
- Workload
57101

58102
Valid workload filters include the following values:
59103

0 commit comments

Comments
 (0)