A mobile suspicious activity alert. Derived from audit logs.
| JSON representation |
|---|
{
"email"
:
string
,
"events"
:
[
{
object (
|
| Fields | |
|---|---|
email
|
The email of the user this alert was created for. |
events[]
|
Required. The list of security events. |
SuspiciousActivitySecurityDetail
Detailed information of a single MDM suspicious activity event.
| JSON representation |
|---|
{ "deviceId" : string , "serialNumber" : string , "deviceType" : string , "deviceModel" : string , "resourceId" : string , "iosVendorId" : string , "deviceProperty" : string , "oldValue" : string , "newValue" : string } |
| Fields | |
|---|---|
deviceId
|
Required. The device ID. |
serialNumber
|
The serial number of the device. |
deviceType
|
The type of the device. |
deviceModel
|
The model of the device. |
resourceId
|
The device resource ID. |
iosVendorId
|
Required for iOS, empty for others. |
deviceProperty
|
The device property which was changed. |
oldValue
|
The old value of the device property before the change. |
newValue
|
The new value of the device property after the change. |

