WitFoo-Artifact ::: tags=["result=success","reason=null"] ::: localIP=null ::: message={"access_device":{"epkey":null,"hostname":null,"ip":"160.226.32.156","location":{"city":"Woodstock","country":"United States","state":"Georgia"}},"alias":"unknown","application":{"key":"DI5NR1TYEZ6N0Y46F8AN","name":"LastPass"},"auth_device":{"ip":null,"key":null,"location":{"city":null,"country":null,"state":null},"name":null},"email":null,"event_type":"enrollment","factor":"not_available","isotimestamp":"2023-11-06T01:30:50.914147+00:00","ood_software":null,"reason":null,"result":"success","timestamp":1699234250,"trusted_endpoint_status":"unknown","txid":"39110e91-1ae2-42f4-8776-2ee059799ecb","user":{"groups":[],"key":"DU40USAAYBJJDPKW76FN","name":"nighthawk"}} ::: clientIP=160.226.32.156 ::: userName=nighthawk ::: created_at=1699234250 ::: streamName=DUO ::: application=LastPass ::: messageType=credential_access ::: pipelineName=DUO ::: severityCode=2 ::: startTimeUTC=1699234250 ::: pipelineEntrypoint=dispatch
{
    "application": "LastPass",
    "localip": "null",
    "message": "WitFoo-Artifact ::: tags=[\"result=success\",\"reason=null\"] ::: localIP=null ::: message={\"access_device\":{\"epkey\":null,\"hostname\":null,\"ip\":\"160.226.32.156\",\"location\":{\"city\":\"Woodstock\",\"country\":\"United States\",\"state\":\"Georgia\"}},\"alias\":\"unknown\",\"application\":{\"key\":\"DI5NR1TYEZ6N0Y46F8AN\",\"name\":\"LastPass\"},\"auth_device\":{\"ip\":null,\"key\":null,\"location\":{\"city\":null,\"country\":null,\"state\":null},\"name\":null},\"email\":null,\"event_type\":\"enrollment\",\"factor\":\"not_available\",\"isotimestamp\":\"2023-11-06T01:30:50.914147+00:00\",\"ood_software\":null,\"reason\":null,\"result\":\"success\",\"timestamp\":1699234250,\"trusted_endpoint_status\":\"unknown\",\"txid\":\"39110e91-1ae2-42f4-8776-2ee059799ecb\",\"user\":{\"groups\":[],\"key\":\"DU40USAAYBJJDPKW76FN\",\"name\":\"nighthawk\"}} ::: clientIP=160.226.32.156 ::: userName=nighthawk ::: created_at=1699234250 ::: streamName=DUO ::: application=LastPass ::: messageType=credential_access ::: pipelineName=DUO ::: severityCode=2 ::: startTimeUTC=1699234250 ::: pipelineEntrypoint=dispatch",
    "messagetype": "credential_access",
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "starttimeutc": "1699234250",
    "tags": [
        "result=success",
        "reason=null",
        "DUO",
        "credential_access"
    ],
    "streamName": "DUO",
    "clientIP": "160.226.32.156",
    "userName": "nighthawk"
}