Package com.microsoft.graph.models

Class ServicePrincipalRiskDetection

java.lang.Object
com.microsoft.graph.models.Entity
com.microsoft.graph.models.ServicePrincipalRiskDetection
All Implemented Interfaces:
com.microsoft.kiota.serialization.AdditionalDataHolder, com.microsoft.kiota.serialization.Parsable, com.microsoft.kiota.store.BackedModel
@Generated("com.microsoft.kiota") public class ServicePrincipalRiskDetection extends Entity implements com.microsoft.kiota.serialization.Parsable

  • Constructor Details

    • ServicePrincipalRiskDetection

      public ServicePrincipalRiskDetection()
      Instantiates a new ServicePrincipalRiskDetection and sets the default values.

  • Method Details

    • createFromDiscriminatorValue

      @Nonnull public static ServicePrincipalRiskDetection createFromDiscriminatorValue(@Nonnull com.microsoft.kiota.serialization.ParseNode parseNode)
      Creates a new instance of the appropriate class based on discriminator value
      Parameters:
      parseNode - The parse node to use to read the discriminator value and create the object
      Returns:
      a ServicePrincipalRiskDetection

    • getActivity

      @Nullable public ActivityType getActivity()
      Gets the activity property value. Indicates the activity type the detected risk is linked to. The possible values are: signin, servicePrincipal. Use the Prefer: include-unknown-enum-members request header to get the following value(s) in this evolvable enum: servicePrincipal.
      Returns:
      a ActivityType

    • getActivityDateTime

      @Nullable public OffsetDateTime getActivityDateTime()
      Gets the activityDateTime property value. Date and time when the risky activity occurred. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      Returns:
      a OffsetDateTime

    • getAdditionalInfo

      @Nullable public String getAdditionalInfo()
      Gets the additionalInfo property value. Additional information associated with the risk detection. This string value is represented as a JSON object with the quotations escaped.
      Returns:
      a String

    • getAppId

      @Nullable public String getAppId()
      Gets the appId property value. The unique identifier for the associated application.
      Returns:
      a String

    • getCorrelationId

      @Nullable public String getCorrelationId()
      Gets the correlationId property value. Correlation ID of the sign-in activity associated with the risk detection. This property is null if the risk detection is not associated with a sign-in activity.
      Returns:
      a String

    • getDetectedDateTime

      @Nullable public OffsetDateTime getDetectedDateTime()
      Gets the detectedDateTime property value. Date and time when the risk was detected. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
      Returns:
      a OffsetDateTime

    • getDetectionTimingType

      @Nullable public RiskDetectionTimingType getDetectionTimingType()
      Gets the detectionTimingType property value. Timing of the detected risk , whether real-time or offline. The possible values are: notDefined, realtime, nearRealtime, offline, unknownFutureValue.
      Returns:
      a RiskDetectionTimingType

    • getFieldDeserializers

      @Nonnull public Map<String,Consumer<com.microsoft.kiota.serialization.ParseNode>> getFieldDeserializers()
      The deserialization information for the current model
      Specified by:
      getFieldDeserializers in interface com.microsoft.kiota.serialization.Parsable
      Overrides:
      getFieldDeserializers in class Entity
      Returns:
      a Map<String,Consumer<com.microsoft.kiota.serialization.ParseNode>>

    • getIpAddress

      @Nullable public String getIpAddress()
      Gets the ipAddress property value. Provides the IP address of the client from where the risk occurred.
      Returns:
      a String

    • getKeyIds

      @Nullable public List<String> getKeyIds()
      Gets the keyIds property value. The unique identifier for the key credential associated with the risk detection.
      Returns:
      a List<String>

    • getLastUpdatedDateTime

      @Nullable public OffsetDateTime getLastUpdatedDateTime()
      Gets the lastUpdatedDateTime property value. Date and time when the risk detection was last updated.
      Returns:
      a OffsetDateTime

    • getLocation

      @Nullable public SignInLocation getLocation()
      Gets the location property value. Location from where the sign-in was initiated.
      Returns:
      a SignInLocation

    • getRequestId

      @Nullable public String getRequestId()
      Gets the requestId property value. Request identifier of the sign-in activity associated with the risk detection. This property is null if the risk detection is not associated with a sign-in activity. Supports $filter (eq).
      Returns:
      a String

    • getRiskDetail

      @Nullable public RiskDetail getRiskDetail()
      Gets the riskDetail property value. Details of the detected risk. Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without this license will be returned hidden. The possible values are: none, hidden, adminConfirmedServicePrincipalCompromised, adminDismissedAllRiskForServicePrincipal. Use the Prefer: include-unknown-enum-members request header to get the following value(s) in this evolvable enum: adminConfirmedServicePrincipalCompromised , adminDismissedAllRiskForServicePrincipal.
      Returns:
      a RiskDetail

    • getRiskEventType

      @Nullable public String getRiskEventType()
      Gets the riskEventType property value. The type of risk event detected. The possible values are: investigationsThreatIntelligence, generic, adminConfirmedServicePrincipalCompromised, suspiciousSignins, leakedCredentials, anomalousServicePrincipalActivity, maliciousApplication, suspiciousApplication.
      Returns:
      a String

    • getRiskLevel

      @Nullable public RiskLevel getRiskLevel()
      Gets the riskLevel property value. Level of the detected risk. Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without this license will be returned hidden. The possible values are: low, medium, high, hidden, none.
      Returns:
      a RiskLevel

    • getRiskState

      @Nullable public RiskState getRiskState()
      Gets the riskState property value. The state of a detected risky service principal or sign-in activity. The possible values are: none, dismissed, atRisk, confirmedCompromised.
      Returns:
      a RiskState

    • getServicePrincipalDisplayName

      @Nullable public String getServicePrincipalDisplayName()
      Gets the servicePrincipalDisplayName property value. The display name for the service principal.
      Returns:
      a String

    • getServicePrincipalId

      @Nullable public String getServicePrincipalId()
      Gets the servicePrincipalId property value. The unique identifier for the service principal. Supports $filter (eq).
      Returns:
      a String

    • getSource

      @Nullable public String getSource()
      Gets the source property value. Source of the risk detection. For example, identityProtection.
      Returns:
      a String

    • getTokenIssuerType

      @Nullable public TokenIssuerType getTokenIssuerType()
      Gets the tokenIssuerType property value. Indicates the type of token issuer for the detected sign-in risk. The possible values are: AzureAD.
      Returns:
      a TokenIssuerType

    • serialize

      public void serialize(@Nonnull com.microsoft.kiota.serialization.SerializationWriter writer)
      Serializes information the current object
      Specified by:
      serialize in interface com.microsoft.kiota.serialization.Parsable
      Overrides:
      serialize in class Entity
      Parameters:
      writer - Serialization writer to use to serialize this model

    • setActivity

      public void setActivity(@Nullable ActivityType value)
      Sets the activity property value. Indicates the activity type the detected risk is linked to. The possible values are: signin, servicePrincipal. Use the Prefer: include-unknown-enum-members request header to get the following value(s) in this evolvable enum: servicePrincipal.
      Parameters:
      value - Value to set for the activity property.

    • setActivityDateTime

      public void setActivityDateTime(@Nullable OffsetDateTime value)
      Sets the activityDateTime property value. Date and time when the risky activity occurred. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
      Parameters:
      value - Value to set for the activityDateTime property.

    • setAdditionalInfo

      public void setAdditionalInfo(@Nullable String value)
      Sets the additionalInfo property value. Additional information associated with the risk detection. This string value is represented as a JSON object with the quotations escaped.
      Parameters:
      value - Value to set for the additionalInfo property.

    • setAppId

      public void setAppId(@Nullable String value)
      Sets the appId property value. The unique identifier for the associated application.
      Parameters:
      value - Value to set for the appId property.

    • setCorrelationId

      public void setCorrelationId(@Nullable String value)
      Sets the correlationId property value. Correlation ID of the sign-in activity associated with the risk detection. This property is null if the risk detection is not associated with a sign-in activity.
      Parameters:
      value - Value to set for the correlationId property.

    • setDetectedDateTime

      public void setDetectedDateTime(@Nullable OffsetDateTime value)
      Sets the detectedDateTime property value. Date and time when the risk was detected. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
      Parameters:
      value - Value to set for the detectedDateTime property.

    • setDetectionTimingType

      public void setDetectionTimingType(@Nullable RiskDetectionTimingType value)
      Sets the detectionTimingType property value. Timing of the detected risk , whether real-time or offline. The possible values are: notDefined, realtime, nearRealtime, offline, unknownFutureValue.
      Parameters:
      value - Value to set for the detectionTimingType property.

    • setIpAddress

      public void setIpAddress(@Nullable String value)
      Sets the ipAddress property value. Provides the IP address of the client from where the risk occurred.
      Parameters:
      value - Value to set for the ipAddress property.

    • setKeyIds

      public void setKeyIds(@Nullable List<String> value)
      Sets the keyIds property value. The unique identifier for the key credential associated with the risk detection.
      Parameters:
      value - Value to set for the keyIds property.

    • setLastUpdatedDateTime

      public void setLastUpdatedDateTime(@Nullable OffsetDateTime value)
      Sets the lastUpdatedDateTime property value. Date and time when the risk detection was last updated.
      Parameters:
      value - Value to set for the lastUpdatedDateTime property.

    • setLocation

      public void setLocation(@Nullable SignInLocation value)
      Sets the location property value. Location from where the sign-in was initiated.
      Parameters:
      value - Value to set for the location property.

    • setRequestId

      public void setRequestId(@Nullable String value)
      Sets the requestId property value. Request identifier of the sign-in activity associated with the risk detection. This property is null if the risk detection is not associated with a sign-in activity. Supports $filter (eq).
      Parameters:
      value - Value to set for the requestId property.

    • setRiskDetail

      public void setRiskDetail(@Nullable RiskDetail value)
      Sets the riskDetail property value. Details of the detected risk. Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without this license will be returned hidden. The possible values are: none, hidden, adminConfirmedServicePrincipalCompromised, adminDismissedAllRiskForServicePrincipal. Use the Prefer: include-unknown-enum-members request header to get the following value(s) in this evolvable enum: adminConfirmedServicePrincipalCompromised , adminDismissedAllRiskForServicePrincipal.
      Parameters:
      value - Value to set for the riskDetail property.

    • setRiskEventType

      public void setRiskEventType(@Nullable String value)
      Sets the riskEventType property value. The type of risk event detected. The possible values are: investigationsThreatIntelligence, generic, adminConfirmedServicePrincipalCompromised, suspiciousSignins, leakedCredentials, anomalousServicePrincipalActivity, maliciousApplication, suspiciousApplication.
      Parameters:
      value - Value to set for the riskEventType property.

    • setRiskLevel

      public void setRiskLevel(@Nullable RiskLevel value)
      Sets the riskLevel property value. Level of the detected risk. Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without this license will be returned hidden. The possible values are: low, medium, high, hidden, none.
      Parameters:
      value - Value to set for the riskLevel property.

    • setRiskState

      public void setRiskState(@Nullable RiskState value)
      Sets the riskState property value. The state of a detected risky service principal or sign-in activity. The possible values are: none, dismissed, atRisk, confirmedCompromised.
      Parameters:
      value - Value to set for the riskState property.

    • setServicePrincipalDisplayName

      public void setServicePrincipalDisplayName(@Nullable String value)
      Sets the servicePrincipalDisplayName property value. The display name for the service principal.
      Parameters:
      value - Value to set for the servicePrincipalDisplayName property.

    • setServicePrincipalId

      public void setServicePrincipalId(@Nullable String value)
      Sets the servicePrincipalId property value. The unique identifier for the service principal. Supports $filter (eq).
      Parameters:
      value - Value to set for the servicePrincipalId property.

    • setSource

      public void setSource(@Nullable String value)
      Sets the source property value. Source of the risk detection. For example, identityProtection.
      Parameters:
      value - Value to set for the source property.

    • setTokenIssuerType

      public void setTokenIssuerType(@Nullable TokenIssuerType value)
      Sets the tokenIssuerType property value. Indicates the type of token issuer for the detected sign-in risk. The possible values are: AzureAD.
      Parameters:
      value - Value to set for the tokenIssuerType property.