Skip to main content

purview threatassessment list

Get a list of threat assessments

Usage​

m365 purview threatassessment list [options]

Options​

-t, --type [type]

The type of threat assessment to retrieve. Allowed values are mail, file, emailFile and url.

-h, --help [help]

Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are options, examples, remarks, permissions, response, full. Default is options.

--query [query]

JMESPath query string. See http://jmespath.org/ for more information and examples.

-o, --output [output]

Output type. json, text, csv, md, none. Default json.

--verbose

Runs command with verbose logging.

--debug

Runs command with debug logging.

Permissions​

ResourcePermissions
Microsoft GraphThreatAssessment.ReadWrite.All

Examples​

Get a list of threat assessments

m365 purview threatassessment list

Get a list of threat assessments of type mail

m365 purview threatassessment list --type mail

Response​

[
  {
    "type": "mail",
    "id": "49c5ef5b-1f65-444a-e6b9-08d772ea2059",
    "createdDateTime": "2019-11-27T03:30:18.6890937Z",
    "contentType": "mail",
    "expectedAssessment": "block",
    "category": "spam",
    "status": "pending",
    "requestSource": "administrator",
    "recipientEmail": "john@contoso.onmicrosoft.com",
    "destinationRoutingReason": "notJunk",
    "messageUri": "https://graph.microsoft.com/v1.0/users/c52ce8db-3e4b-4181-93c4-7d6b6bffaf60/messages/AAMkADU3MWUxOTU0LWNlOTEt=",
    "createdBy": {
      "user": {
        "id": "c52ce8db-3e4b-4181-93c4-7d6b6bffaf60",
        "displayName": "John Doe"
      }
    }
  }
];