WitFoo-Artifact ::: tags=["result=success","reason=user_approved"] ::: localIP=197.71.99.93 ::: message={"access_device":{"epkey":"EPQCRTTH5FVULC2B8TEY","hostname":null,"ip":"197.71.99.93","location":{"city":"Cumming","country":"United States","state":"Georgia"}},"alias":"","application":{"key":"DI5NR1TYEZ6N0Y46F8AN","name":"LastPass"},"auth_device":{"ip":"197.71.99.93","key":"DP0W9R0H7R0WJ4GY2HK8","location":{"city":"Cumming","country":"United States","state":"Georgia"},"name":"phone2 (314-537-1336)"},"email":"jbetro@umbrellaelectric.com","event_type":"authentication","factor":"duo_push","isotimestamp":"2023-02-19T11:22:54.442069+00:00","ood_software":null,"reason":"user_approved","result":"success","timestamp":1676805774,"txid":"6e748a95-cdd4-4bcb-873e-b8a1d4f35764","user":{"groups":[],"key":"DUCOEHG5PIQG8MF7JIQ7","name":"charlie"}} ::: clientIP=197.71.99.93 ::: userName=charlie ::: created_at=1676805774 ::: streamName=DUO ::: application=LastPass ::: messageType=credential_access ::: pipelineName=DUO ::: severityCode=2 ::: startTimeUTC=1676805774 ::: clientHostname=phone2 (314-537-1336) ::: pipelineEntrypoint=dispatch
{
    "senderhost": "localhost",
    "severitylabel": "critical",
    "starttimeutc": "1676805774",
    "tags": [
        "DUO",
        "credential_access"
    ],
    "productids": [
        0
    ],
    "severitycode": 2,
    "sourceinfo": "unknown",
    "localip": "99.56.191.170",
    "sensitivity": "normal",
    "application": "LastPass",
    "messagetype": "credential_access",
    "clienthostname": "phone2 (314-537-1336)",
    "message": "WitFoo-Artifact ::: tags=[\"result=success\",\"reason=user_approved\"] ::: localIP=197.71.99.93 ::: message={\"access_device\":{\"epkey\":\"EPQCRTTH5FVULC2B8TEY\",\"hostname\":null,\"ip\":\"197.71.99.93\",\"location\":{\"city\":\"Cumming\",\"country\":\"United States\",\"state\":\"Georgia\"}},\"alias\":\"\",\"application\":{\"key\":\"DI5NR1TYEZ6N0Y46F8AN\",\"name\":\"LastPass\"},\"auth_device\":{\"ip\":\"197.71.99.93\",\"key\":\"DP0W9R0H7R0WJ4GY2HK8\",\"location\":{\"city\":\"Cumming\",\"country\":\"United States\",\"state\":\"Georgia\"},\"name\":\"phone2 (314-537-1336)\"},\"email\":\"jbetro@umbrellaelectric.com\",\"event_type\":\"authentication\",\"factor\":\"duo_push\",\"isotimestamp\":\"2023-02-19T11:22:54.442069+00:00\",\"ood_software\":null,\"reason\":\"user_approved\",\"result\":\"success\",\"timestamp\":1676805774,\"txid\":\"6e748a95-cdd4-4bcb-873e-b8a1d4f35764\",\"user\":{\"groups\":[],\"key\":\"DUCOEHG5PIQG8MF7JIQ7\",\"name\":\"charlie\"}} ::: clientIP=197.71.99.93 ::: userName=charlie ::: created_at=1676805774 ::: streamName=DUO ::: application=LastPass ::: messageType=credential_access ::: pipelineName=DUO ::: severityCode=2 ::: startTimeUTC=1676805774 ::: clientHostname=phone2 (314-537-1336) ::: pipelineEntrypoint=dispatch",
    "streamName": "DUO",
    "clientIP": "197.71.99.93",
    "userName": "charlie"
}