WitFoo-Artifact ::: messageType=auth_success ::: program=cisco_duo ::: message={"access_device":{"browser":"Chrome","browser_version":"126.0.6478.185","epkey":"EP21HLQ9XYCZ4MVV3F6S","flash_version":"uninstalled","hostname":null,"ip":"209.198.200.228","is_encryption_enabled":"unknown","is_firewall_enabled":"unknown","is_password_set":"unknown","java_version":"uninstalled","location":{"city":"Peumbrellatree Corners","country":"United States","state":"Georgia"},"os":"Windows","os_version":"10"},"adaptive_trust_assessments":{"more_secure_auth":{"detected_attack_detectors":null,"features_version":"3.0","model_version":"2022.07.19.001","policy_enabled":true,"preview_mode_enabled":false,"reason":"Normal level of trust; no detection of known attack pattern","trust_level":"NORMAL"},"remember_me":{"features_version":"3.0","model_version":"2022.07.19.001","policy_enabled":false,"reason":"Known Access IP","trust_level":"NORMAL"}},"alias":"","application":{"key":"DIK6UXC7JCVKZD6LJEQG","name":"OEA - Production (Duo SSO)"},"auth_device":{"ip":null,"key":null,"location":{"city":null,"country":null,"state":null},"name":null},"email":"fish","event_type":"authentication","factor":"remembered_device","isotimestamp":"2024-07-26T11:48:07.083529+00:00","ood_software":null,"rbfs_triggered_attacks":null,"reason":"remembered_device","remembered_factor":"duo_push","result":"success","timestamp":1721994487,"trusted_endpoint_status":"unknown","txid":"1672813f-9e1a-4680-bea7-aa250141cb0d","user":{"groups":["DuoUsers (from AD sync \"AD Sync\")"],"key":"DUK73NWXMXC6YQP1VJX3","name":"james.pilgrim"}} ::: streamName=DUO Asset Inventory ::: userName=fish ::: tags=[remembered_device]
This is a syslog message from a product called Duo by Cisco. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: auth_success
program: cisco_duo
senderHost: kafka.precinct
sensitivity: normal
sourceInfo: unknown
streamName: DUO Asset Inventory
tags: ['remembered_device', 'DUO Asset Inventory', 'auth_success']
userName: fish