WitFoo-Artifact ::: fqdn=xobr219pa.com ::: action=BLOCKED ::: message={"originId":596750534,"originType":"Roaming Computers","internalIp":"248.37.243.55","externalIp":"248.37.243.55","categories":["Malware"],"tags":[],"destination":"xobr219pa.com","originLabel":"janedoe","actionTaken":"BLOCKED","datetime":"2023-05-10T19:58:06.000Z"} ::: clientIP=248.37.243.55 ::: serverIP=248.37.243.55 ::: userName=janedoe ::: created_at=2023-05-10T19:58:06.000Z ::: streamName=OpenDNS Detection ::: vendorCode=Malware ::: messageType=firewall_action ::: pipelineName=OpenDNS Detection ::: severityCode=2 ::: startTimeUTC=2023-05-10T19:58:06.000Z ::: serverHostname=xobr219pa.com ::: pipelineEntrypoint=dispatch
Product: Umbrella
Vendor: Cisco