Namespace Google.Apis.AlertCenter.v1beta1.Data

Classes

ActivityRule

Alerts from Google Workspace Security Center rules service configured by an admin.

AppMakerSqlSetupNotification

Alerts from App Maker to notify admins to set up default SQL instance.

AppSettingsChanged

Alerts from AppSettingsChanged bucket Rules configured by Admin which contain the below rules. Calendar settings changed Drive settings changed Email settings changed Mobile settings changed

Attachment

Attachment with application-specific information about an alert.

BadWhitelist

Alert for setting the domain or IP that malicious email comes from as whitelisted domain or IP in Gmail advanced settings.

BatchDeleteAlertsRequest

A request to perform batch delete on alerts.

BatchDeleteAlertsResponse

Response to batch delete operation on alerts.

BatchUndeleteAlertsRequest

A request to perform batch undelete on alerts.

BatchUndeleteAlertsResponse

Response to batch undelete operation on alerts.

A reference to a Cloud Pubsub topic. To register for notifications, the owner of the topic must grant alerts-api-push-notifications@system.gserviceaccount.com the projects.topics.publish permission.

Csv

A representation of a CSV file attachment, as a list of column headers and a list of data rows.

CsvRow

A representation of a single data row in a CSV file.

DeviceCompromised

A mobile device compromised alert. Derived from audit logs.

DeviceCompromisedSecurityDetail

Detailed information of a single MDM device compromised event.

DlpRuleViolation

Alerts that get triggered on violations of Data Loss Prevention (DLP) rules.

DomainId

Domain ID of Gmail phishing alerts.

DomainWideTakeoutInitiated

A takeout operation for the entire domain was initiated by an admin. Derived from audit logs.

Empty

A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); } The JSON representation for Empty is empty JSON object {}.

GmailMessageInfo

Details of a message in phishing spike alert.

GoogleOperations

An incident reported by Google Operations for a Google Workspace application.

ListAlertFeedbackResponse

Response message for an alert feedback listing request.

ListAlertsResponse

Response message for an alert listing request.

LoginDetails

The details of the login action.

MailPhishing

Proto for all phishing alerts with common payload. Supported types are any of the following: * User reported phishing * User reported spam spike * Suspicious message reported * Phishing reclassification * Malware reclassification * Gmail potential employee spoofing

MaliciousEntity

Entity whose actions triggered a Gmail phishing alert.

MatchInfo

Proto that contains match information from the condition part of the rule.

Notification

Settings for callback notifications. For more details see Google Workspace Alert Notification.

PhishingSpike

Alert for a spike in user reported phishing. Warning: This type has been deprecated. Use MailPhishing instead.

PredefinedDetectorInfo

Detector provided by Google.

ReportingRule

Alerts from Reporting Rules configured by Admin.

RequestInfo

Requests for one application that needs default SQL setup.

ResourceInfo

Proto that contains resource information.

RuleInfo

Proto that contains rule information.

RuleViolationInfo

Common alert information about violated rules that are configured by Google Workspace administrators.

Settings

Customer-level settings.

StateSponsoredAttack

A state-sponsored attack alert. Derived from audit logs.

Status

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

SuspiciousActivity

A mobile suspicious activity alert. Derived from audit logs.

SuspiciousActivitySecurityDetail

Detailed information of a single MDM suspicious activity event.

UndeleteAlertRequest

A request to undelete a specific alert that was marked for deletion.

User

A user.

UserChanges

Alerts from UserChanges bucket Rules for predefined rules which contain the below rules. Suspended user made active New user Added User suspended (by admin) User granted admin privileges User admin privileges revoked User deleted Users password changed

UserDefinedDetectorInfo

Detector defined by administrators.