WitFoo-Artifact ::: messageType=asset_inventory ::: program=microsoft_graph ::: message={"businessPhones":[],"displayName":"Susan Clowdus","givenName":"Susan","id":"0c952ddd-de2f-4c74-bf67-58e311738809","jobTitle":"Guest","mail":"susan.clowdus@regions.com","mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":"Clowdus","userPrincipalName":"fish"} ::: streamName=Microsoft Graph Asset Inventory ::: tags=[mail=susan.clowdus@regions.com,surname=Clowdus,jobTitle=Guest,givenName=Susan,displayName=Susan Clowdus] ::: userName=fish
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['surname=Clowdus', 'Microsoft Graph Asset Inventory', 'jobTitle=Guest', 'givenName=Susan', 'asset_inventory', 'mail=susan.clowdus@regions.com', 'displayName=Susan Clowdus']
userName: fish