WitFoo-Artifact ::: userName=nighthawk ::: tags=[mail=nighthawk,jobTitle=Bookings Page,displayName=Admin Team - Bookings Page] ::: streamName=Microsoft Graph Asset Inventory ::: message={"businessPhones":[],"displayName":"Admin Team - Bookings Page","givenName":null,"id":"85e421d0-2a41-4931-924b-53d41c1290e9","jobTitle":"Bookings Page","mail":"nighthawk","mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":null,"userPrincipalName":"nighthawk"} ::: program=microsoft_graph ::: messageType=asset_inventory
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['jobTitle=Bookings Page', 'Microsoft Graph Asset Inventory', 'displayName=Admin Team - Bookings Page', 'mail=AdminTeam-BookingsPage@uwca.org', 'asset_inventory']
userName: nighthawk