This article lists the currently supported Security and Compliance reports with all of the properties that SysKit Trace loads.

Security and Compliance

Reports

Audit Configuration Policy

NameDescription
WorkloadWorkload associated with the policy.

Compliance Cases

NameDescription
NameThe 'Name' property specifies the unique name of the compliance case.
DescriptionThe description of the case.
StatusStatus for the case. Can either be 'Active', 'Closed' or 'ClosedWithError'.

Data Loss Prevention

NameDescription
NameThe 'Name' property specifies the unique name of the DLP policy.
CommentThe 'Comment' property specifies an optional comment.
Exchange LocationThe 'Exchange Location' property specifies Exchange Online mailboxes to include in the DLP policy. Only the value All is supported to include all mailboxes.
Exchange Sender Member OfExchange members to include.
Exchange Sender Member Of ExceptionExchange members to exclude.
ModeThe 'Mode' property specifies the action and notification level of the DLP policy. Valid values are: Enable, TestWithNotifications, TestWithoutNotifications, Disable and PendingDeletion.
OneDrive LocationThe 'OneDrive Location' property specifies the OneDrive for Business sites to include. The value 'All' specifies to include all sites, otherwise the value will be a URL of the site.
OneDrive Location ExceptionThis property specifies the OneDrive for Business sites to exclude when you use the value All for the 'OneDrive Location' parameter. The site is identified by its URL value.
PriorityPriority for the Policy.
SharePoint LocationThe 'SharePoint Location' property specifies the SharePoint Online sites to include. The value 'All' specifies to include all sites, otherwise the value will be a URL of the site.
SharePoint Location ExceptionThis property specifies the SharePoint Online sites to exclude when you use the value All for the 'SharePoint Location' parameter. The site is identified by its URL value.
Teams LocationTeams locations to include.
Teams Location ExceptionTeams locations to exclude.

Device Conditional Access Policy

NameDescription
NameThe name of the Device Conditional Access Policy.
CommentThe 'Comment' property specifies an optional comment.
EnabledThe 'Enabled' property specifies whether the policy is enabled.

Device Configuration Policy

NameDescription
NameThe name of the Device Configuration Policy.
CommentThe 'Comment' property specifies an optional comment.
EnabledThe 'Enabled' property specifies whether the policy is enabled.

Retention

NameDescription
NameThe 'Name' property specifies the unique name of the retention policy.
CommentThe 'Comment' property specifies an optional comment.
Dynamic Scope LocationLocation of the dynamic scope for this policy.
EnabledDetermines if the policy is enabled or not.
Exchange LocationThe 'Exchange Location' property specifies the mailboxes to include.
Exchange Location ExceptionThis property specifies the mailboxes to remove from the list of excluded mailboxes when the 'Exchange Location' parameter is set to 'All'.
Modern Group LocationThe 'Modern Group Location' property specifies the Office 365 groups to include in the policy.
Modern Group Location ExceptionThe 'Modern Group Location Exception' property specifies the Office 365 groups to exclude when the 'Modern Group Location' parameter is set to 'All'.
OneDrive LocationThe 'OneDrive Location' property specifies the OneDrive for Business sites to include. The value 'All' specifies to include all sites, otherwise the value will be a URL of the site.
OneDrive Location ExceptionThis property specifies the OneDrive for Business sites to exclude when you use the value All for the 'OneDrive Location' parameter. The site is identified by its URL value.
Public Folder LocationThe 'Public Folder Location' property specifies that you want to include all public folders in the retention policy.
Restrictive RetentionThe 'Restrictive Retention' property specifies whether Preservation Lock is enabled for the policy.
SharePoint LocationThe 'SharePoint Location' property specifies the SharePoint Online sites to include. You identify the site by its URL value, or you can use the value All to include all sites.
SharePoint Location ExceptionThis property specifies the SharePoint Online sites to exclude when you use the value All for the 'SharePoint Location' parameter. The site is identified by its URL value.
Skype LocationThe 'Skype Location' property specifies the Skype for Business Online users to include in the policy.
Skype Location ExceptionThis property is reserved for internal Microsoft use.
Teams Channel LocationThe 'Teams Channel Location' property specifies the Teams Channel to include in the policy.
Teams Channel Location ExceptionThis property specifies the Teams to exclude when 'Teams Channel Location' property is set to 'All'.
Teams Chat LocationThe 'Teams Chat Location' property specifies the Teams Chat to include in the policy.
Teams Chat Location ExceptionThis property specifies the Teams users to exclude when the ' Teams Chat Location' property is set to 'All'.

Retention Event Types

NameDescription
NameThe 'Name' property specifies the unique name of the retention event type.
CommentThe 'Comment' property specifies an optional comment.

Supervision Policies

NameDescription
NameThe 'Name' property specifies the unique name for the supervisory review policy. The name can't exceed 64 characters.
CommentThe 'Comment' property specifies an optional comment.
ReviewersThe 'Reviewers' property specifies the SMTP addresses of the reviewers for the supervisory review policy. Multiple email addresses are separated by commas.

Compliance Cases ⯈ Case Hold Policy

NameDescription
Policy NameThe 'Policy Name' property specifies the unique name of the case hold policy.
Compliance CaseThe 'Compliance Case' property specifies the eDiscovery case that is associated with the case hold policy.
CommentThe 'Comment' property specifies an optional comment.
EnabledThe 'Enabled' property specifies whether the policy is enabled or disabled.
Exchange LocationThe 'Exchange Location' property specifies the mailboxes to include in the policy.
Public Folder LocationThe 'Public Folder Location' property specifies all included public folders in the case hold policy.
SharePoint LocationThe 'SharePoint Location' property specifies the SharePoint Online and OneDrive for Business sites to include.

Compliance Cases ⯈ Case Hold Rules

NameDescription
PolicyThe 'Policy' property specifies the case hold policy that contains the rule.
CommentThe 'Comment' property specifies an optional comment.
Content Match QueryThe 'Content Match Query' property specifies a content search filter. Only the content that matches the specified search query is placed on hold. This property uses a text search string or a query that's formatted by using the Keyword Query Language (KQL).
DisabledThe 'Disabled' property specifies whether the case hold rule is enabled or disabled.
NameDescription
Compliance CaseCompliance 'Compliance Case' (eDiscovery) that this Search is associated with.
Search NameThe 'Search Name' property specifies the unique name of the complaiance tag.
Allow Not Found Exchange Locations EnabledThe 'Allow Not Found Exchange Locations Enabled' property specifies whether to include mailboxes other than regular user mailboxes in the compliance search.
Content Match QueryThe 'Content Match Query' property specifies a content search filter. This property uses a text search string or a query that's formatted by using the Keyword Query Language (KQL).
DescriptionThe 'Description' property specifies an optional description for the compliance search.
Exchange LocationThe 'Exchange Location' property specifies the mailboxes to include.
Exchange Location ExclusionThis property specifies the mailboxes to exclude when the 'Exchange Location' parameter is set to 'All'.
Hold NamesThe 'Hold Names' property specifies that the content locations that have been placed on hold in the specified eDiscovery case are searched.
Include User App ContentThe 'Include User App Content' property specifies that the cloud-based storage location for users who don't have a regular Office 365 user account in your organization are searched. These types of users include users without an Exchange Online license who use Office applications, Office 365 guest users, and on-premises users whose identity is synchronized with your Office 365 organization.
LanguageThe 'Language' property specifies the language for the compliance search. Valid input for this property is a supported culture code value from the Microsoft .NET Framework CultureInfo class. For example, da-DK for Danish or ja-JP for Japanese.
Public Folder LocationThe 'Public Folder Location' property specifies that you want to include all public folders in the search.
SharePoint LocationThe 'SharePoint Location' property specifies the SharePoint Online sites to include.
SharePoint Location ExclusionThis property specifies the SharePoint Online sites to exclude when the 'SharePoint Location' parameter is set to 'All'. You identify the site by its URL value.

Compliance Cases ⯈ Compliance Search Action

NameDescription
Search NameThe 'Search Name' property specifies the name of the existing content search to associate with the content search action. Multiple content searches are separated by commas.
ActionThe 'Action' property specifies what type of action to define. Accepted values are Export, Retention and Purge.
File Type Exclusions For Unindexed ItemsThe 'File Type Exclusions For Unindexed Items' specifies the file types to exclude because they can't be indexed.
Enable DeduplicationThe 'Enable Deduplication' property eliminates duplication of messages when you export content search results.
Include CredentialThe 'Include Credential' switch specifies whether to include the credential in the results.
Include SharePoint Document VersionsThe 'Include SharePoint Document Versions' property specifies whether to export previous versions of the document when you use the Export switch.
Purge TypeThe 'Purge Type' property specifies how to remove items when the action is Purge.
Retry On ErrorThe 'Retry On Error' switch specifies whether to retry the action on any items that failed without re-running the entire action all over again.
Action ScopeThe 'Action Scope' property specifies the items to include when the action is Export.

Data Loss Prevention ⯈ Data Loss Prevention Rules

NameDescription
PolicyName of the associated DLP Compliance Policy.
NameName of the Rule.
Access ScopeThe 'Access Scope' property specifies a condition for the DLP rule that's based on the access scope of the content. The rule is applied to content that matches the specified access scope.
Block AccessThe 'Block Access' property specifies an action for the DLP rule that blocks access to the source item when the conditions of the rule are met. True: Blocks further access to the source item that matched the rule. The owner, author, and site owner can still access the item. False: Allows access to the source item that matched the rule. This is the default value.
Block Access ScopeThe 'Block Access Scope' property specifies the scope of the block access action.
CommentThe 'Comment' property specifies an optional comment.
Content Property Contains WordsThe 'Content Property Contains Words' property specifies a condition for the DLP rule that's based on a property match in content. The rule is applied to content that contains the specified property.
DisabledThe 'Disabled' property specifies whether the DLP rule is disabled.
Generate AlertThe 'Generate Alert' property specifies an action for the DLP rule that notifies the specified users when the conditions of the rule are met.
Generate Incident ReportThe 'Generate Incident Report' property specifies an action for the DLP rule that sends an incident report to the specified users when the conditions of the rule are met.
Incident Report ContentThe 'Incident Report Content' property specifies the content to include in the report when you use the 'Generate Incident Report' parameter.
Notify Allow OverrideThe 'Notify Allow Override' property specifies the notification override options when the conditions of the rule are met.
Notify Email Custom TextThe 'Notify Email Custom Text' property specifies the custom text in the email notification message that's sent to recipients when the conditions of the rule are met.
Notify Policy Tip Custom TextThe 'Notify Policy Tip Custom Text' property specifies the custom text in the Policy Tip notification message that's shown to recipients when the conditions of the rule are met. The maximum length is 256 characters. HTML tags and tokens (variables) aren't supported.
Notify UserThe 'Notify User' property specifies an action for the DLP rule that notifies the specified users when the conditions of the rule are met.
Report Severity LevelThe 'Report Severity Level' property specifies the severity level of the incident report for content detections based on the rule.
Rule Error ActionThe 'Rule Error Action' property specifies what to do if an error is encountered during the evaluation of the rule.

Labels ⯈ Retention Labels

NameDescription
NameThe 'Name' property specifies the unique name of the complaiance tag.
CommentThe 'Comment' property specifies an optional comment.
Event TypeThe 'Event Type' property specifies the retention rule that's associated with the label.
Is Record LabelThe 'Is Record Label' property specifies whether the label is a record label.
NotesThe 'Notes' property specifies an optional note.
RegulatoryRegulatory description.
Reviewer EmailThe 'Reviewer Email' property specifies the email address of a reviewer for Delete and KeepAndDelete retention actions. Multiple email addresses are separated by commas.
Retention DurationThe 'Retention Duration' property specifies the hold duration for the retention rule. Valid values are: An integer - The hold duration in days, Unlimited - The content is held indefinitely.
Retention ActionThe 'Retention Action' property specifies the action for the label. Valid values are: Delete, Keep or KeepAndDelete.
Retention TypeThe 'Retention Type' property specifies whether the retention duration is calculated from the content creation date, tagged date, or last modification date. Valid values are: CreationAgeInDays, EventAgeInDays, ModificationAgeInDays, or TaggedAgeInDays.

Labels ⯈ Sensitivity Label Policies

NameDescription
NameThe 'Name' property specifies the unique name for the sensitivity label. The maximum length is 64 characters. If the value contains spaces, enclose the value in quotation marks.
CommentThe 'Comment' property specifies an optional comment.
Exchange LocationThe 'Exchange Location' property specifies the mailboxes to include in the policy.
Exchange Location ExceptionThe 'Exchange Location Exception' property specifies the mailboxes to exclude when you use the value All for the 'Exchange Location' parameter.
Modern Group LocationThe 'Modern Group Location' property specifies the Microsoft 365 Groups to include in the policy.
Modern Group Location ExceptionThe 'Modern Group Location Exception' property specifies the Microsoft 365 Groups to exclude when you're using the value All for the 'Modern Group Location' parameter.
LabelsThe 'Labels' property specifies the sensitivity labels that are associated with the policy. You can use any value that uniquely identifies the label.
Add Exchange LocationThe 'Add Exchange Location' property specifies the mailboxes to add in the existing policy.
Add Exchange Location ExceptionThe 'Add Exchange Location Exception' property specifies the mailboxes to add to exclusions when you use the value All for the 'Exchange Location' parameter.
Add Modern Group LocationThe 'Add Modern Group Location' property specifies the Microsoft 365 Groups to add to include the policy.
Add Modern Group Location ExceptionThe 'Add Modern Group Location Exception' property specifies the Microsoft 365 Groups to add to exclusions when you're using the value All for the 'Modern Group Location' parameter.
Add LabelsThe 'Add Labels' property specifies the sensitivity labels to add to the policy. You can use any value that uniquely identifies the label.
Remove Exchange LocationThe 'Remove Exchange Location' property specifies the mailboxes to remove from the policy.
Remove Exchange Location ExceptionThe 'Remove Exchange Location Exception' property specifies the mailboxes to remove when you use the value All for the 'Exchange Location' parameter.
Remove Modern Group LocationThe 'Remove Modern Group Location' property specifies the Microsoft 365 Groups to remove from the policy.
Remove Modern Group Location ExceptionThe 'Remove Modern Group Location Exception' property specifies the Microsoft 365 Groups to remove from excluded values when you're using the value All for the 'Modern Group Location' parameter.
Remove LabelsThe 'Remove Labels' property specifies the sensitivity labels that are removed from the policy. You can use any value that uniquely identifies the label.

Labels ⯈ Sensitivity Labels

NameDescription
NameThe 'Name' property specifies the unique name for the sensitivity label. The maximum length is 64 characters.
Display NameThe 'Display Name' property specifies the display name for the sensitivity label. The display name appears in the Microsoft Office and is used by Outlook users to select the appropriate sensitivity label before they send a message.
CommentThe 'Comment' property specifies an optional comment.
Parent IdThe 'Parent Id' property specifies the parent label that you want this label to be under (a sublabel).
PriorityThe 'Priority' property specifies a priority value for the sensitivity label that determines the order of label processing. A lower integer value indicates a highter priority.
TooltipThe 'Tooltip' property specifies the default tooltip and sensitivity label description that's seen by users.
DisabledThe disabled property specifies whether to enable or disable the sensitivity label.
Apply Content Marking Footer AlignmentThe 'Apply Content Marking Footer Alignment' property specifies the footer alignment.
Apply Content Marking Footer EnabledThe disabled property specifies whether to enable or disable the sensitivity label.
Apply Content Marking Footer Font ColorThe 'Apply Content Marking Footer Font Color' property specifies the color of the footer text. This property accepts a hexadecimal color code value in the format #xxxxxx. The default value is #000000.
Apply Content Marking Footer Font NameThe 'Apply Content Marking Footer Font Name' property specifies the font of the footer text. If the value contains spaces, enclose the value in quotation marks.
Apply Content Marking Footer Font SizeThe 'Apply Content Marking Footer Font Size' property specifies the font size (in points) of the footer text.
Apply Content Marking Footer MarginThe 'Apply Content Marking Footer Margin' property specifies the size (in points) of the footer margin.
Apply Content Marking Footer TextThe 'Apply Content Marking Footer Text' property specifies the footer text. If the value contains spaces, enclose the value in quotation marks.
Apply Content Marking Header AlignmentThe 'Apply Content Marking Footer Alignment' property specifies the header alignment.
Apply Content Marking Header EnabledThe 'Apply Content Marking Header Enabled' property enables or disables the Apply Content Marking Header action for the label.
Apply Content Marking Header Font ColorThe 'Apply Content Marking Footer Font Color' property specifies the color of the header text. This property accepts a hexadecimal color code value in the format #xxxxxx. The default value is #000000.
Apply Content Marking Header Font NameThe 'Apply Content Marking Footer Font Name' property specifies the font of the header text. If the value contains spaces, enclose the value in quotation marks.
Apply Content Marking Header Font SizeThe 'Apply Content Marking Footer Font Size' property specifies the font size (in points) of the header text.
Apply Content Marking Header MarginThe 'Apply Content Marking Footer Margin' property specifies the size (in points) of the header margin.
Apply Content Marking Header TextThe 'Apply Content Marking Footer Text' property specifies the header text. If the value contains spaces, enclose the value in quotation marks.
Apply Water Marking EnabledThe 'Apply Water Marking Enabled' property enables or disables the Apply Watermarking Header action for the label.
Apply Water Marking Font ColorThe 'Apply Water Marking Font Color' property specifies the color of the watermark text. This property accepts a hexadecimal color code value in the format #xxxxxx.
Apply Water Marking Font NameThe 'Apply Water Marking Font Name' property specifies the font of the watermark text. If the value contains spaces, enclose the value in quotation marks.
Apply Water Marking Font SizeThe 'Apply Water Marking Font Size' property specifies the font size (in points) of the watermark text.
Apply Water Marking LayoutThe 'Apply Content Marking Footer Alignment' property specifies the header alignment.
Apply Water Marking TextThe 'Apply Water Marking Text' property specifies the watermark text. If the value contains spaces, enclose the value in quotation marks.
Encryption Aip Template ScopesThe 'Encryption Aip Template Scopes' property specifies that the label is still published and usable in the AIP classic client.
Encryption Content Expired On Date In Days Or NeverThe 'Encryption Content Expired On Date In Days Or Never' property specifies when the encrypted content expires. Valid values are integer or never.
Encryption Do Not ForwardThe 'Encryption Do Not Forward' property specifies whether the Do Not Forward template is applied.
Encryption EnabledThe 'Encryption Enabled' property specifies whether encryption in enabled.
Encryption Offline Access DaysThe 'Encryption Offline Access Days' property specifies the number of days that offline access is allowed.
Encryption Prompt UserThe 'Encryption Prompt User' property specifies whether to set the label with user defined permission in Word, Excel, and PowerPoint.
Encryption Protection TypeThe 'Encryption Protection Type' property specifies the protection type for encryption.
Encryption Rights DefinitionsThe 'Encryption Rights Definitions' property specifies the rights users have when accessing protected. This property uses the syntax Identity1:Rights1, Rights2;Identity2:Rights3, Rights4. For example, [email protected]:VIEW, EDIT;microsoft.com:VIEW.
Encryption Rights UrlThe 'Encryption Rights Url' property specifies the URL for hold your own key (HYOK) protection.
Encryption Template IdThe 'Encryption Template Id' property links an existing Azure RMS template to a new label.
Site And Group Protection Allow Access To Guest UsersThe 'Site And Group Protection Allow Access To Guest Users' property enables or disables access to guest users.
Site And Group Protection Allow Email From Guest UsersThe 'Site And Group Protection Allow Email From Guest Users' property enables or disables email from guest users.
Site And Group Protection Allow Full AccessThe 'Site And Group Protection Allow Full Access' property enables or disables full access.
Site And Group Protection Allow Limited AccessThe 'Site And Group Protection Allow Limited Access' property enables or disables limited access.
Site And Group Protection Block AccessThe 'Site And Group Protection Block Access' property blocks access.
Site And Group Protection EnabledThe 'Site And Group Protection Enabled' property enables or disables the Site and Group Protection action for the labels.
Site And Group Protection PrivacyThe 'Site And Group Protection Privacy' property specifies the privacy level for the label.

Labels ⯈ File Plan Descriptors ⯈ Authorities

NameDescription
NameThe 'Name' property specifies the unique name of the Authority.

Labels ⯈ File Plan Descriptors ⯈ Categories

NameDescription
NameThe 'Name' property specifies the unique name of the category.

Labels ⯈ File Plan Descriptors ⯈ Citations

NameDescription
NameThe 'Name' property specifies the unique name of the citation.
Citation UrlURL of the citation.
Citation JurisdictionJurisdiction of the citation.

Labels ⯈ File Plan Descriptors ⯈ Departments

NameDescription
NameThe 'Name' property specifies the unique name of the department.

Labels ⯈ File Plan Descriptors ⯈ Reference Ids

NameDescription
NameThe 'Name' property specifies the unique name of the reference id.

Labels ⯈ File Plan Descriptors ⯈ Subcategories

NameDescription
NameThe 'Name' property specifies the unique name of the sub-category.
CategoryThe 'Category' property specifies the name of the parent category associated with the sub-category.

Retention ⯈ Retention Rules

NameDescription
PolicyThe 'Policy' property specifies the policy to contain the rule.
CommentThe 'Comment' property specifies an optional comment.
Expiration Date OptionThe 'Expiration Date Option' property specifies whether the expiration date is calculated from the content creation date or last modification date. Valid values are: CreationAgeInDays and ModificationAgeInDays.
Excluded Item ClassesThe 'Excluded Item Classes' property specifies the types of messages to exclude from the rule. This property is used to exclude items from a hold policy, which excludes the specified item class from being held. Using this property won't exclude items from deletion policies. Typically, this property is used to exclude voicemail messages, IM conversations, and other Skype for Business Online content from being held by a hold policy.
Content Match QueryThe 'Content Match Query' property specifies a content search filter.
Retention Compliance ActionThe 'Retention Compliance Action' property specifies the retention action for the rule. Valid values are: Delete, Keep and KeepAndDelete.
Retention DurationThe 'Retention Duration' property specifies the hold duration for the retention rule. Valid values are: An integer - The hold duration in days, Unlimited - The content is held indefinitely.
Retention Duration Display HintThe 'Retention Duration Display Hint' property specifies the units that are used to display the retention duration in the Security and Compliance Center. Valid values are: Days, Months or Years.

Supervision Policies ⯈ Supervision Rules

NameDescription
PolicyThe 'Policy' property specifies the supervisory review policy that's assigned to the rule.
Sampling RateThe 'Sampling Rate' property specifies the percentage of communications for review. A value of 100 means the reviewers need to review all detected items.
ConditionThe 'Condition' property specifies the conditions and exceptions for the rule.