Accepted Domain

DNS domains the tenant accepts mail for, joined with DKIM signing status.

Part of the Exchange inventory.

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Weekly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	{{AcceptedDomain.CreatedTime}}
Domain	String		{{AcceptedDomain.DisplayName}}
DKIM Enabled	Boolean	Whether DKIM signing is enabled for this domain.	{{AcceptedDomain.DkimEnabled}}
DKIM Key Size	Int32	DKIM RSA key size (bits). Recommended 2048.	{{AcceptedDomain.DkimKeySize}}
DKIM Selector 1 CNAME	String		{{AcceptedDomain.DkimSelector1Cname}}
DKIM Selector 2 CNAME	String		{{AcceptedDomain.DkimSelector2Cname}}
DKIM Status	String	DKIM key status: Valid / Invalid / etc.	{{AcceptedDomain.DkimStatus}}
Domain Name	String		{{AcceptedDomain.DomainName}}
Domain Type	String	Authoritative, InternalRelay, or ExternalRelay. ExternalRelay can be a misconfig leak. Allowed values: Authoritative, ExternalRelay, InternalRelay.	{{AcceptedDomain.DomainType}}
Is Default	Boolean		{{AcceptedDomain.IsDefault}}
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	{{AcceptedDomain.LastModifiedTime}}
Match Sub Domains	Boolean		{{AcceptedDomain.MatchSubDomains}}
Risk Score	Int32	Stores risk score	{{AcceptedDomain.RiskScore}}
Risk Score Update	DateTime	Stores risk score update	{{AcceptedDomain.RiskScoreLastUpdate}}
Risk Score Value	String	Stores risk score value like Low_Low	{{AcceptedDomain.RiskScoreValue}}

Relations

This object does currently not have any relations.

Segments

Segment	Description
Domains without DKIM	Accepted domains that do not have DKIM signing enabled.

Actions

This object does currently not have any actions.

Policies that check this object

Policy	Severity	Description
Accepted domain without DKIM signing	Medium	Detects accepted domains where DKIM signing is not enabled.