WitFoo-Artifact ::: program=cisco_duo ::: tags=[remembered_device] ::: userName=johndoe ::: message={"access_device":{"browser":"Edge Chromium","browser_version":"126.0.2592.113","epkey":"EPG20VTKCIQQX3W0D1YM","flash_version":"uninstalled","hostname":null,"ip":"24.54.110.146","is_encryption_enabled":"unknown","is_firewall_enabled":"unknown","is_password_set":"unknown","java_version":"uninstalled","location":{"city":"Statesboro","country":"United States","state":"Georgia"},"os":"Windows","os_version":"10"},"adaptive_trust_assessments":{"more_secure_auth":{"detected_attack_detectors":null,"features_version":"3.0","model_version":"2022.07.19.001","policy_enabled":true,"preview_mode_enabled":false,"reason":"Normal level of trust; no detection of known attack pattern","trust_level":"NORMAL"},"remember_me":{"features_version":"3.0","model_version":"2022.07.19.001","policy_enabled":false,"reason":"Known Access IP","trust_level":"NORMAL"}},"alias":"","application":{"key":"DIC6JGE4H7RUE5ATVRCW","name":"HUB - Production (Duo SSO)"},"auth_device":{"ip":null,"key":null,"location":{"city":null,"country":null,"state":null},"name":null},"email":"johndoe","event_type":"authentication","factor":"remembered_device","isotimestamp":"2024-07-26T18:51:21.163768+00:00","ood_software":null,"rbfs_triggered_attacks":null,"reason":"remembered_device","remembered_factor":"passcode","result":"success","timestamp":1722019881,"trusted_endpoint_status":"unknown","txid":"46bb7f86-ad9b-4327-ad6d-10ec8013f175","user":{"groups":["DuoUsers (from AD sync \"AD Sync\")"],"key":"DU1CVHLAPVXF22DRPKPI","name":"smercer"}} ::: messageType=auth_success ::: streamName=DUO Asset Inventory
Product: Duo
Vendor: Cisco