WitFoo-Artifact ::: tags=[mail=waynefinance@uwwayne.org,surname=Finance,jobTitle=WAYNE Finance Mailbox,givenName=WAYNE,displayName=WAYNE Finance] ::: userName=nighthawk ::: streamName=Microsoft Graph Asset Inventory ::: messageType=asset_inventory ::: message={"businessPhones":[],"displayName":"WAYNE Finance","givenName":"WAYNE","id":"a4cb14b3-51e9-4e1e-9b99-e8c5ceea2028","jobTitle":"WAYNE Finance Mailbox","mail":"waynefinance@uwwayne.org","mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":"Finance","userPrincipalName":"nighthawk"} ::: program=microsoft_graph
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['jobTitle=AAA Finance Mailbox', 'displayName=AAA Finance', 'Microsoft Graph Asset Inventory', 'surname=Finance', 'mail=aaafinance@uwaaa.org', 'givenName=AAA', 'asset_inventory']
userName: nighthawk