ThreatDetectionFeedback

Represents feedback provided by a user about a Threat Detection event that occurred in your org. The feedback specifies whether the event was malicious, suspicious, not a threat, or unknown. Each ThreatDetectionFeedback object is associated with one of these Threat Detection storage events: ApiAnomalyEventStore, CredentialStuffingEventStore, ReportAnomalyEventStore, or SessionHijackingEventStore.

Introduced in API version 49.0.

create(), describeLayout(), describeSObjects(), getDeleted(), getUpdated(), query(), update(), upsert()

  • Type: picklist
  • Properties: Create, Filter, Group, Restricted picklist, Sort, Update
  • Description: Describes the severity of the threat.
  • Possible values:
    • Malicious — Malicious
    • Not a Threat — Not a Threat
    • Suspicious — Suspicious
    • Unknown — Unknown

  • Type: reference

  • Properties: Create, Filter, Group, Nillable, Sort, Update

  • Description:

    Reference to the unique ID of one of these associated Threat Detection storage events:

    For example, 0fjRM000000005p.

    This is a polymorphic relationship field.

  • Relationship name: ThreatDetectionEvent

  • Relationship type: polymorphic

  • Refers to: ApiAnomalyEventStore, CredentialStuffingEventStore, GuestUserAnomalyEventStore, LoginAnomalyEventStore, ReportAnomalyEventStore, SessionHijackingEventStore, UniversalAnomalyEventStore

  • Type: string
  • Properties: Autonumber, Defaulted on create, Filter, idLookup, Sort
  • Description: Auto-generated number used as the unique name for this object.

  • Type: reference

  • Properties: Create, Filter, Group, Nillable, Sort, Update

  • Description:

    The origin user’s unique ID. For example, 005000000000123.

    This is a polymorphic relationship field.

  • Relationship name: User

  • Relationship type: polymorphic

  • Refers to: SelfServiceUser, User

  • Type: string
  • Properties: Create, Filter, Group, Nillable, Sort, Update
  • Description: The origin username in the format of user@company.com at the time the object was created.

This object has the following associated objects. If the API version isn’t specified, they’re available in the same API versions as this object. Otherwise, they’re available in the specified API version.