We had published the schema for attack simulation events (Recordtype 85,88.218) a while back, and it was accessible via below link.
https://learn.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-schema#attack-sim-schema
However, looks like it has been removed in some PR, and we need to restore it.
We had published the schema for attack simulation events (Recordtype 85,88.218) a while back, and it was accessible via below link.
https://learn.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-schema#attack-sim-schema
However, looks like it has been removed in some PR, and we need to restore it.