Update security-mailboxevidence.md

Author: JarbasHorst

api-reference/v1.0/resources/security-mailboxevidence.md

@@ -1,6 +1,6 @@
 ---
 title: "mailboxEvidence resource type"
-description: "A mailbox that is reported in the alert as evidence."
+description: "Represents a mailbox that is reported in the alert as evidence."
 ms.date: 11/11/2022
 author: "BenAlfasi"
 ms.localizationpriority: medium
@@ -12,7 +12,7 @@ doc_type: resourcePageType
 
 Namespace: microsoft.graph.security
 
-A mailbox that is reported in the alert as evidence.
+Represents a mailbox that is reported in the alert as evidence.
 
 Inherits from [alertEvidence](../resources/security-alertevidence.md).
 
@@ -21,6 +21,7 @@ Inherits from [alertEvidence](../resources/security-alertevidence.md).
 |:---|:---|:---|
 |displayName|String|The name associated with the mailbox.|
 |primaryAddress|String|The primary email address of the mailbox.|
+|upn|String|TODO|
 |userAccount|[microsoft.graph.security.userAccount](../resources/security-useraccount.md)|The user account of the mailbox.|
 
 ## Relationships
@@ -47,10 +48,9 @@ The following JSON representation shows the resource type.
   "tags": [
     "String"
   ],
-  "primaryAddress": "String",
   "displayName": "String",
-  "userAccount": {
-    "@odata.type": "microsoft.graph.security.userAccount"
-  }
+  "primaryAddress": "String",
+  "upn": "String",
+  "userAccount": {"@odata.type": "microsoft.graph.security.userAccount"}
 }
-```
+```