WitFoo-Artifact ::: message={"businessPhones":[],"displayName":"Crisis Center Accounting","givenName":null,"id":"cf564093-31fd-4c98-835a-986e81bf42f4","jobTitle":"Crisis Center Accounting","mail":"fish","mobilePhone":null,"officeLocation":null,"preferredLanguage":null,"surname":null,"userPrincipalName":"fish"} ::: userName=fish ::: streamName=Microsoft Graph Asset Inventory ::: tags=[mail=fish,jobTitle=Crisis Center Accounting,displayName=Crisis Center Accounting] ::: messageType=asset_inventory ::: program=microsoft_graph
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['mail=accounting@crisiscenterbham.org', 'Microsoft Graph Asset Inventory', 'jobTitle=Crisis Center Accounting', 'displayName=Crisis Center Accounting', 'asset_inventory']
userName: fish