Microsoft Office 365 Message Trace DSM specifications

When you configure Microsoft Office 365 Message Trace, understanding the specifications for the Microsoft Office 365 Message Trace DSM can help ensure a successful integration. For example, knowing what the supported version of Microsoft Office 365 Message Trace is before you begin can help reduce frustration during the configuration process.

The following table describes the specifications for the Microsoft Office 365 Message Trace DSM.

Table 1. Microsoft Office 365 Message Trace DSM specifications
Specification Value
Manufacturer Microsoft
DSM name Microsoft Office 365 Message Trace
RPM file name DSM-MicrosoftOffice365MessageTrace-QRadar_version-build_number.noarch.rpm
Supported versions N/A
Protocol Office 365 Message Trace REST API
Event format JSON
Recorded event types Email security threat classification
Automatically discovered? No
Includes identity? No
Includes custom properties? No
More information Message trace in the Security & Compliance Center (https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/message-trace-scc?view=o365-worldwide)