WitFoo-Artifact ::: program=microsoft_graph ::: userName=johndoe ::: message={"businessPhones":[],"displayName":"211 Birmingham Mailbox","givenName":null,"id":"ada1cfc7-ddf7-4f2f-88ad-0bb30f1736b4","jobTitle":"211 Birmingham Mailbox","mail":"johndoe","mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":null,"userPrincipalName":"johndoe"} ::: messageType=asset_inventory ::: streamName=Microsoft Graph Asset Inventory ::: tags=[mail=johndoe,jobTitle=211 Birmingham Mailbox,displayName=211 Birmingham Mailbox]
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['jobTitle=211 Birmingham Mailbox', 'mail=211Connects@uwca.org', 'displayName=211 Birmingham Mailbox', 'Microsoft Graph Asset Inventory', 'asset_inventory']
userName: johndoe