SuspiciousActivity
Stay organized with collections
Save and categorize content based on your preferences.
A mobile suspicious activity alert. Derived from audit logs.
SuspiciousActivitySecurityDetail
Detailed information of a single MDM suspicious activity event.
| JSON representation |
{
"deviceId": string,
"serialNumber": string,
"deviceType": string,
"deviceModel": string,
"resourceId": string,
"iosVendorId": string,
"deviceProperty": string,
"oldValue": string,
"newValue": string
} |
| Fields |
deviceId |
string
Required. The device ID.
|
serialNumber |
string
The serial number of the device.
|
deviceType |
string
The type of the device.
|
deviceModel |
string
The model of the device.
|
resourceId |
string
The device resource ID.
|
iosVendorId |
string
Required for iOS, empty for others.
|
deviceProperty |
string
The device property which was changed.
|
oldValue |
string
The old value of the device property before the change.
|
newValue |
string
The new value of the device property after the change.
|
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-03-25 UTC.
[null,null,["Last updated 2025-03-25 UTC."],[],[],null,["# SuspiciousActivity\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n- [SuspiciousActivitySecurityDetail](#SuspiciousActivitySecurityDetail)\n - [JSON representation](#SuspiciousActivitySecurityDetail.SCHEMA_REPRESENTATION)\n\nA mobile suspicious activity alert. Derived from audit logs.\n\n| JSON representation |\n|-----------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"email\": string, \"events\": [ { object (/workspace/admin/alertcenter/reference/rest/v1beta1/SuspiciousActivity#SuspiciousActivitySecurityDetail) } ] } ``` |\n\n| Fields ||\n|------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `email` | `string` The email of the user this alert was created for. |\n| `events[]` | `object (`[SuspiciousActivitySecurityDetail](/workspace/admin/alertcenter/reference/rest/v1beta1/SuspiciousActivity#SuspiciousActivitySecurityDetail)`)` Required. The list of security events. |\n\nSuspiciousActivitySecurityDetail\n--------------------------------\n\nDetailed information of a single MDM suspicious activity event.\n\n| JSON representation |\n|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"deviceId\": string, \"serialNumber\": string, \"deviceType\": string, \"deviceModel\": string, \"resourceId\": string, \"iosVendorId\": string, \"deviceProperty\": string, \"oldValue\": string, \"newValue\": string } ``` |\n\n| Fields ||\n|------------------|------------------------------------------------------------------|\n| `deviceId` | `string` Required. The device ID. |\n| `serialNumber` | `string` The serial number of the device. |\n| `deviceType` | `string` The type of the device. |\n| `deviceModel` | `string` The model of the device. |\n| `resourceId` | `string` The device resource ID. |\n| `iosVendorId` | `string` Required for iOS, empty for others. |\n| `deviceProperty` | `string` The device property which was changed. |\n| `oldValue` | `string` The old value of the device property before the change. |\n| `newValue` | `string` The new value of the device property after the change. |"]]
