Email Authentication

The Email Authentication object describes the Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and Domain-based Message Authentication, Reporting and Conformance (DMARC) attributes of an email.

Attributes

CaptionNameTypeDescription
DKIM Status dkim String The DomainKeys Identified Mail (DKIM) status of the email.
DKIM Domain dkim_domain String The DomainKeys Identified Mail (DKIM) signing domain of the email.
DKIM Signature dkim_signature String The DomainKeys Identified Mail (DKIM) signature used by the sending/receiving system.
DMARC Status dmarc String The Domain-based Message Authentication, Reporting and Conformance (DMARC) status of the email.
DMARC Override dmarc_override String The Domain-based Message Authentication, Reporting and Conformance (DMARC) override action.
DMARC Policy dmarc_policy String The Domain-based Message Authentication, Reporting and Conformance (DMARC) policy status.
Raw Data raw_data JSON The event data as received from the event source.
Raw Header raw_header String The email authentication header.

🚧 WARNING: DEPRECATED

Raw Header has been deprecated since 1.1.0. Deprecated in upgrade from ocsf-0.31.1 to qdm-1.1.0

Record ID record_id String Unique identifier for the object
SPF Status spf String The Sender Policy Framework (SPF) status of the email.
Unmapped Data unmapped Unmapped[] The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

Relationships

Email Authentication shown in context

Inbound Relationships

These objects and events reference Email Authentication in their attributes:

Outbound Relationships

Email Authentication references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0