WitFoo-Artifact ::: tags=[mail=acsmith@burr.com,surname=Smith,jobTitle=Guest,givenName=Angie,displayName=Angie Smith] ::: program=microsoft_graph ::: userName=nighthawk ::: message={"businessPhones":[],"displayName":"Angie Smith","givenName":"Angie","id":"2a08ca98-e6fe-42f8-92a2-7927fcae3fae","jobTitle":"Guest","mail":"acsmith@burr.com","mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":"Smith","userPrincipalName":"nighthawk"} ::: streamName=Microsoft Graph Asset Inventory ::: messageType=asset_inventory
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['mail=acsmith@burr.com', 'surname=Smith', 'givenName=Angie', 'Microsoft Graph Asset Inventory', 'jobTitle=Guest', 'displayName=Angie Smith', 'asset_inventory']
userName: nighthawk