WitFoo-Artifact ::: program=microsoft_graph ::: userName=johndoe ::: streamName=Microsoft Graph Asset Inventory ::: messageType=asset_inventory ::: message={"businessPhones":[],"displayName":"UMBRELLA Age Line Phone Resource Account","givenName":null,"id":"13dae66b-8464-4d1f-ab7a-6cc4b2bfb5e1","jobTitle":"Phone Resource Account","mail":null,"mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":null,"userPrincipalName":"johndoe"} ::: tags=[jobTitle=Phone Resource Account,displayName=UMBRELLA Age Line Phone Resource Account]
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['jobTitle=Phone Resource Account', 'displayName=AAA Age Line Phone Resource Account', 'Microsoft Graph Asset Inventory', 'asset_inventory']
userName: johndoe