926 <6> 2024-07-26T13:25:09Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722000304-103140-12645-9954-1","src_ip":"104.47.66.44","hdr_from":"Karla Lawrence \u003cklawrence@oscorp.org\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mail-mw2nam12lp2044.outbound.protection.outlook.com","attoscorpments":[{"name":"image001.jpg"}],"recipients":[{"action":"allowed","reason":"content_recipient","reason_extra":"ithelpdesk@sdp756980793.zm.sdpondemand.com","delivered":"delivered","delivery_detail":"165.173.183.7:25:250 Message received","email":"ithelpdesk@sdp756980793.zm.sdpondemand.com","taxonomy":"policy"}],"hdr_to":"Computer Helpdesk \u003cComputerHelpdesk@oscorp.org\u003e","recipient_count":1,"dst_domain":"oscorp.org","size":52983,"subject":"RE: [Request ID :##450241##] : email account needed","env_from":"klawrence@oscorp.org","timestamp":"2024-07-26T13:25:06+0000","geoip":"","tls":true}
{
    "fieldExtractorName": "barracuda_ess",
    "message": "926 <6> 2024-07-26T13:25:09Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {\"message_id\":\"1722000304-103140-12645-9954-1\",\"src_ip\":\"104.47.66.44\",\"hdr_from\":\"Karla Lawrence \\u003cklawrence@oscorp.org\\u003e\",\"account_id\":\"ESS70460\",\"domain_id\":\"158260\",\"ptr_record\":\"mail-mw2nam12lp2044.outbound.protection.outlook.com\",\"attoscorpments\":[{\"name\":\"image001.jpg\"}],\"recipients\":[{\"action\":\"allowed\",\"reason\":\"content_recipient\",\"reason_extra\":\"ithelpdesk@sdp756980793.zm.sdpondemand.com\",\"delivered\":\"delivered\",\"delivery_detail\":\"165.173.183.7:25:250 Message received\",\"email\":\"ithelpdesk@sdp756980793.zm.sdpondemand.com\",\"taxonomy\":\"policy\"}],\"hdr_to\":\"Computer Helpdesk \\u003cComputerHelpdesk@oscorp.org\\u003e\",\"recipient_count\":1,\"dst_domain\":\"oscorp.org\",\"size\":52983,\"subject\":\"RE: [Request ID :##450241##] : email account needed\",\"env_from\":\"klawrence@oscorp.org\",\"timestamp\":\"2024-07-26T13:25:06+0000\",\"geoip\":\"\",\"tls\":true}",
    "messageType": "email_protection",
    "senderHost": "egress.ess.barracudanetworks.com",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "barracuda_ess",
    "tags": [
        "barracuda_ess",
        "email_protection"
    ]
}