Email Authentication

email_auth

The Email Authentication object describes the Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and Domain-based Message Authentication, Reporting and Conformance (DMARC) attributes of an email.

Attributes

CaptionNameTypeDescription
DKIM StatusdkimString

The DomainKeys Identified Mail (DKIM) status of the email.

DKIM Domaindkim_domainString

The DomainKeys Identified Mail (DKIM) signing domain of the email.

DKIM Signaturedkim_signatureString

The DomainKeys Identified Mail (DKIM) signature used by the sending/receiving system.

DMARC StatusdmarcString

The Domain-based Message Authentication, Reporting and Conformance (DMARC) status of the email.

DMARC Overridedmarc_overrideString

The Domain-based Message Authentication, Reporting and Conformance (DMARC) override action.

DMARC Policydmarc_policyString

The Domain-based Message Authentication, Reporting and Conformance (DMARC) policy status.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

SPF StatusspfString

The Sender Policy Framework (SPF) status of the email.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

Email Authentication shown in context

Inbound Relationships

These objects and events reference Email Authentication in their attributes:

Outbound Relationships

Email Authentication references the following objects and events in its attributes:

This page describes ocsf-1.4.0