Message Data Model (MDM)
Login
Blacklist
Detections
Dashboard
Account
Messages
Organization Users
Reference
Models
AdminActionDeleteExternalMessageResponse
AdminActionReviewRequest
AdminActionReviewResponse
AdminActionReviewResult
Attachment
BlacklistIPRequest
BlacklistIPResponse
Body
ChartsMessagesData
ChartsMessagesResponse
ChartsRulesData
ChartsRulesResponse
ChartsThreatsByTagData
ChartsThreatsByTagResponse
ChartsThreatsData
ChartsThreatsResponse
ChartsUsersData
ChartsUsersOrderBy
ChartsUsersResponse
CreateDetectionRequest
CreateDetectionResponse
DetailedMessageResult
DetectionResultFull
DetectionSimple
DetectionStats
DetectionsOrderBy
Domain
EmailAddress
EnrichmentDetail
EnrichmentResultFull
External
GetDetectionAuthorsResponse
GetDetectionResponse
GetDetectionsResponse
GetModelResponse
GetOrgResponse
GetSupportedTagsResponse
GetUserResponse
GetUsersResponse
Headers
IP
Image
ImageType
ListMessagesResponse
ListUnsubscribeMailTo
ListUnsubscribeURL
Mailbox
MessageDataModel
MessageDataModelOLD
MessageDataModelObject
MessagesAttachment0
MessagesAuthResults0
MessagesBody0
MessagesBodyText0
MessagesBodyText1
MessagesCompAuth0
MessagesDMARC0
MessagesDomain0
MessagesDomain1
MessagesDomain2
MessagesDomain3
MessagesDomain4
MessagesEmailAddress0
MessagesEmailAddress1
MessagesEmailAddress2
MessagesExternal0
MessagesHeaders0
MessagesHop0
MessagesHopField0
MessagesIP0
MessagesIP1
MessagesIP2
MessagesLink0
MessagesMailbox0
MessagesMailbox1
MessagesMailbox2
MessagesMessageType0
MessagesMetadata0
MessagesRecipients0
MessagesSPF0
MessagesSPF1
MessagesSignature0
MessagesSignature1
MessagesSubject0
MessagesURL0
MessagesURL1
Org
OrgDetection
Paging
PagingCursors
Recipient
SSOLoginRequest
SSOLoginResponse
Sender
ShareDetectionRequest
ShareDetectionResponse
SimpleMessageResult
Subject
Sublime
SublimeUserMe
SubscribeDetectionRequest
SubscribeDetectionResponse
Token
URL
UnshareDetectionResponse
UnsubscribeDetectionResponse
UpdateDetectionRequest
User
UsernamePasswordLoginRequest

Attachment

object
contains_dde
boolean

[Coming Soon] Contains Dynamic Data Exchange

contains_js
boolean

[Coming Soon] Contains Javascript

contains_macros
boolean

[Coming Soon] Contains one or more macros

content_transfer_encoding
string

Content-Transfer-Encoding extracted from the MIME payload

content_type
string

Content-Type extracted from the MIME payload

encrypted
boolean

[Coming Soon] Is encrypted

entropy
number

[Coming Soon] Determined by Strelka

extracted_code
string

[Coming Soon] Any code extracted from the attachment

extracted_urls
array[object]

[Coming Soon] Any URLs extracted from the attachment

1 validation
file_extension
string

[Coming Soon] File extension

file_name
string

File name

file_type
string

[Coming Soon] File type (determined by looking at the magic bytes in the file)

magic_header
string

[Coming Soon] Magic header

md5
string

[Coming Soon] MD5 hash of the attachment

sdhash
string

[Coming Soon] Sdhash of the attachment

sha1
string

[Coming Soon] SHA1 hash of the attachment

sha256
string

[Coming Soon] SHA256 hash of the attachment

size
integer

[Coming Soon] Size of the attachment in bytes

source
string

Base64 encoded source of the attachment

required
spawns_process
boolean

[Coming Soon] Does the attachment spawn a process or processes

ssdeep
string

[Coming Soon] SSDEEP fuzzy hash of the attachment

tlsh
string

[Coming Soon] TLSH fuzzy hash of the attachment