| Supported rule predicate | Predicate name | First predicate property | Second predicate property | Description |
|
from people
|
From
|
Addresses
|
Not applicable
|
From matches mailboxes, mail-enabled users, or contacts that have sent an e-mail message.
|
|
from a member of distribution list
|
FromMemberOf
|
Addresses
|
Not applicable
|
FromMemberOf matches senders of an e-mail message that are members of the specified distribution group.
|
|
from users inside or outside the organization
|
FromScope
|
Scope
|
Not applicable
|
FromScope matches e-mail messages that are sent from the specified scope.
|
|
sent to people
|
SentTo
|
Addresses
|
Not applicable
|
SentTo matches e-mail messages that contain mailboxes, mail-enabled users, or contacts that are the recipients of the message. The specified mailboxes, mail-enabled users, and contacts can exist anywhere in the To, carbon copy (Cc), or blind carbon copy (Bcc) fields of the message.
|
|
sent to a member of distribution list
|
SentToMemberOf
|
Addresses
|
Not applicable
|
SentToMemberOf matches e-mail messages that contain recipients that are members of the specified distribution group. The recipients can exist anywhere in the To, Cc, or Bcc fields of the e-mail message.
|
|
sent to users inside or outside the organization
|
SentToScope
|
Scope
|
Not applicable
|
SentToScope matches e-mail messages that are sent to the specified scope.
|
|
between members of distribution list and distribution list
|
BetweenMemberOf
|
Addresses
|
Addresses2
|
BetweenMemberOf matches e-mail messages that are sent between members of two distribution groups.
|
|
when any of the recipients in the To field is people
|
AnyOfToHeader
|
Addresses
|
Not applicable
|
AnyOfToHeader matches e-mail messages that are sent to mailboxes, mail-enabled users, or contacts that are listed in the To field of an e-mail message.
|
|
when any of the recipients in the To field is a member of distribution list
|
AnyOfToHeaderMemberOf
|
Addresses
|
Not applicable
|
AnyOfToHeaderMemberOf matches e-mail messages that are sent to recipients where the recipients are listed in the To field of an e-mail message and are members of the specified distribution group.
|
|
when any of the recipients in the Cc field is people
|
AnyOfCcHeader
|
Addresses
|
Not applicable
|
AnyOfCcHeader matches e-mail messages that are sent to mailboxes, mail-enabled users, or contacts that are listed in the Cc field of an e-mail message.
|
|
when any of the recipients in the Cc field is a member of distribution list
|
AnyOfCcHeaderMemberOf
|
Addresses
|
Not applicable
|
AnyOfCcHeaderMemberOf matches e-mail messages that are sent to recipients where the recipients are listed in the Cc field of an e-mail message and are members of the specified distribution group.
|
|
when any of the recipients in the To or Cc fields are people
|
AnyOfToCcHeader
|
Addresses
|
Not applicable
|
AnyOfToCcHeader matches e-mail messages that are sent to mailboxes, mail-enabled users, or contacts that are listed in the To or Cc fields of an e-mail message.
|
|
when any of the recipients in the To or Cc fields is a member of distribution list
|
AnyOfToCcHeaderMemberOf
|
Addresses
|
Not applicable
|
AnyOfToCcHeaderMemberOf matches e-mail messages that are sent to recipients where the recipients are listed in the To or Cc fields of an e-mail message and are members of the specified distribution group.
|
|
when the Subject field contains specific words
|
SubjectContains
|
Words
|
Not applicable
|
SubjectContains matches e-mail messages that contain the specified words in the subject field of the message.
|
|
when the Subject field or the body of the message contains specific words
|
SubjectOrBodyContains
|
Words
|
Not applicable
|
SubjectOrBodyContains matches e-mail messages that contain the specified words in the subject field or body of the message.
|
|
when a message header contains specific words
|
HeaderContains
|
MessageHeader
|
Words
|
HeaderContains matches e-mail messages where the specified message header field contains the specified message header field value.
|
|
when the From address contains specific words
|
FromAddressContains
|
Words
|
Not applicable
|
FromAddressContains matches e-mail messages that contain the specified words in the From field of the message.
|
|
when the Subject field contains text patterns
|
SubjectMatches
|
Patterns
|
Not applicable
|
SubjectMatches matches e-mail messages where Text Patterns or Regular Expressions in the Subject field of the message match a specified regular expression.
|
|
when the Subject field or the body of the message contains text patterns
|
SubjectOrBodyMatches
|
Patterns
|
Not applicable
|
SubjectOrBodyMatches matches e-mail messages where Text Patterns or Regular Expressions in the Subject field or body of the message match a specified regular expression.
|
|
when the message header contains text patterns
|
HeaderMatches
|
MessageHeader
|
Patterns
|
HeaderMatches matches e-mail messages where the specified message header field contains Text Patterns or Regular Expressions that match a specified regular expression.
|
|
when the From address contains text patterns
|
FromAddressMatches
|
Patterns
|
Not applicable
|
FromAddressMatches matches e-mail messages that contain Text Patterns or Regular Expressions in the From field of the message that match a specified regular expression.
|
|
when any attachment file name contains text patterns
|
AttachmentNameMatches
|
Patterns
|
Not applicable
|
AttachmentNameMatches matches e-mail messages that contain Text Patterns or Regular Expressions in attachment file names that match a specified regular expression.
|
|
with a spam confidence level (SCL) rating that is greater or equal to limit
|
SclOver
|
SclValue
|
Not applicable
|
SclOver matches e-mail messages that are configured by using the specified spam confidence level (SCL).
|
|
when the size of any attachment is greater than or equal to limit
|
AttachmentSizeOver
|
Size
|
Not applicable
|
AttachmentSizeOver matches e-mail messages that contain attachments that are larger than the specified value.
|
|
marked with classification
|
HasClassification
|
Classification
|
Not applicable
|
HasClassification matches e-mail messages that are classified with the specified classification.
|
|
marked with importance
|
WithImportance
|
Importance
|
Not applicable
|
WithImportance matches e-mail messages that are set to the specified importance.
|
