WitFoo-Artifact ::: streamName=Microsoft Graph Asset Inventory ::: program=microsoft_graph ::: tags=[mail=AcuityAdmin@umbrella.org,surname=Admin,jobTitle=Email only account for Acuity Web Program,givenName=Acuity,displayName=Acuity Admin] ::: messageType=asset_inventory ::: message={"businessPhones":[],"displayName":"Acuity Admin","givenName":"Acuity","id":"23d51ade-cd62-4cda-8fe1-8f226f34eeb1","jobTitle":"Email only account for Acuity Web Program","mail":"AcuityAdmin@umbrella.org","mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":"Admin","userPrincipalName":"janedoe"} ::: userName=janedoe
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['jobTitle=Email only account for Acuity Web Program', 'displayName=Acuity Admin', 'Microsoft Graph Asset Inventory', 'mail=AcuityAdmin@uwca.org', 'givenName=Acuity', 'surname=Admin', 'asset_inventory']
userName: janedoe