This model is used to store data for Microsoft Defender Quarantine Message Staging

An asterisk * in the title indicates the field is mandatory.
If a field has a default value, it is shown in the Description column.
If the field type is an array, the Field Name has a .[n] suffix, where n is the array index placeholder.
Object and array field names are listed to provide context. If a field belongs to an object or an array, the full field name is shown in dot separated notation.

Title	Description	Details
Identity *	Name of the Quarantine Message	Field Name: identity Type: String
Summary	Summary of the Quarantine Message	Field Name: summary Type: String
Detail	Detail desription of the Quarantine Message	Field Name: detail Type: String
Justification	Justification for the release of Quarantine Message	Field Name: justification Type: String
Create Timestamp		Field Name: created_timestamp Type: String
Last Updated Timestamp		Field Name: updated_timestamp Type: String
State *	State of the Quarantine Message Default: PENDING	Field Name: state Type: String Default: PENDING Choices: ["PENDING", "REJECTED", "APPROVED", "COMPLETED"]
External Reference Id	External Reference Id from the external system, e.g. ServiceNow	Field Name: external_reference_id Type: String
Requested By User	Requested By User	Field Name: requested_by Type: String
Approved By User	Approved By User	Field Name: approved_by Type: String
Rejected By User	Rejected By User	Field Name: rejected_by Type: String

Model: data/MicrosoftDefenderQuarantineMessageStaging