Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

Merge pull request #2792 from socprime/GoogleWorkspaceReports_issue#2624 

GSuite_issue#2624_fix
This commit is contained in:
v-rucdu 2021-09-16 20:38:33 +05:30 коммит произвёл GitHub
Родитель 882b36e42e bbdec76ce7
Коммит 19872d46a6
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
9 изменённых файлов: 17 добавлений и 1180 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

Двоичные данные
DataConnectors/GoogleWorkspaceReports/GWorkspaceReportsAPISentinelConn.zip
Просмотреть файл

Двоичный файл не отображается.

15
DataConnectors/GoogleWorkspaceReports/GWorkspaceReportsAPISentinelConnector/__init__.py
Просмотреть файл

@ -128,19 +128,24 @@ def post_data(customer_id, shared_key, body, log_type):
logging.warn("Response code: {}".format(response.status_code))
def expand_data(obj):
new_obj = []
for event in obj:
for nested in event["events"]:
nested_events_arr = event["events"]
for nested in nested_events_arr:
head_event_part = event.copy()
head_event_part.pop("events")
if 'name' in nested:
event.update({'event_name': nested["name"]})
head_event_part.update({'event_name': nested["name"]})
if 'type' in nested:
event.update({'event_type': nested["type"]})
head_event_part.update({'event_type': nested["type"]})
if 'parameters' in nested:
for parameter in nested["parameters"]:
if 'name' in parameter:
for param_name in ["value", "boolValue", "multiValue", "multiMessageValue", "multiIntValue", "messageValue", "intValue"]:
if param_name in parameter:
event.update({parameter["name"]: parameter[param_name]})
return obj
head_event_part.update({parameter["name"]: parameter[param_name]})
new_obj.append(head_event_part)
return new_obj
def gen_chunks_to_object(data,chunksize=100):
chunk = []

48
Sample Data/Custom/GWorkspace_ReportsAPI_admin_CL.json
Просмотреть файл

@ -12,26 +12,6 @@
"callerType": "KEY",
"key": "SYSTEM"
},
"events": [
{
"type": "LICENSES_SETTINGS",
"name": "USER_LICENSE_ASSIGNMENT",
"parameters": [
{
"name": "USER_EMAIL",
"value": "sanitized@sanitized.com"
},
{
"name": "PRODUCT_NAME",
"value": "Google Workspace"
},
{
"name": "NEW_VALUE",
"value": "G Suite Business"
}
]
}
],
"event_name": "USER_LICENSE_ASSIGNMENT",
"event_type": "LICENSES_SETTINGS",
"USER_EMAIL": "sanitized@sanitized.com",
@ -53,18 +33,6 @@
"profileId": "117433848155128707444"
},
"ipAddress": "77.77.77.77",
"events": [
{
"type": "USER_SETTINGS",
"name": "CREATE_USER",
"parameters": [
{
"name": "USER_EMAIL",
"value": "sanitized@sanitized.com"
}
]
}
],
"event_name": "CREATE_USER",
"event_type": "USER_SETTINGS",
"USER_EMAIL": "sanitized@sanitized.com"
@ -84,22 +52,6 @@
"profileId": "117433848155128707444"
},
"ipAddress": "77.77.77.77",
"events": [
{
"type": "GROUP_SETTINGS",
"name": "ADD_GROUP_MEMBER",
"parameters": [
{
"name": "USER_EMAIL",
"value": "sanitized@sanitized.com"
},
{
"name": "GROUP_EMAIL",
"value": "sanitized@sanitized.com"
}
]
}
],
"event_name": "ADD_GROUP_MEMBER",
"event_type": "GROUP_SETTINGS",
"USER_EMAIL": "sanitized@sanitized.com",

134
Sample Data/Custom/GWorkspace_ReportsAPI_calendar_CL.json
Просмотреть файл

@ -12,52 +12,8 @@
"email": "sanitized@sanitized.com",
"profileId": "109950366970271381671"
},
"ownerDomain": "socprime.com",
"ownerDomain": "sanitized.com",
"ipAddress": "100.100.100.100",
"events": [
{
"type": "notification",
"name": "notification_triggered",
"parameters": [
{
"name": "notification_type",
"value": "reply_received"
},
{
"name": "notification_method",
"value": "email"
},
{
"name": "recipient_email",
"value": "sanitized@sanitized.com"
},
{
"name": "calendar_id",
"value": "sanitized@sanitized.com"
},
{
"name": "target_calendar_id",
"value": "sanitized@sanitized.com"
},
{
"name": "notification_message_id",
"value": "<000000000000b67fb605b3bb81be@google.com>"
},
{
"name": "event_id",
"value": "0n5llhrpmcrvr6s3pesoe06n5n"
},
{
"name": "api_kind",
"value": "web"
},
{
"name": "user_agent",
"value": "Mozilla/5.0"
}
]
}
],
"event_name": "notification_triggered",
"event_type": "notification",
"notification_type": "reply_received",
@ -65,7 +21,7 @@
"recipient_email": "sanitized@sanitized.com",
"calendar_id": "sanitized@sanitized.com",
"target_calendar_id": "sanitized@sanitized.com",
"notification_message_id": "<000000000000b67fb605b3bb81be@google.com>",
"notification_message_id": "<sanitized@sanitized.com>",
"event_id": "0n5llhrpmcrvr6s3pesoe06n5n",
"api_kind": "web",
"user_agent": "Mozilla/5.0"
@ -83,52 +39,8 @@
"email": "sanitized@sanitized.com",
"profileId": "111024176775869387097"
},
"ownerDomain": "socprime.com",
"ownerDomain": "sanitized.com",
"ipAddress": "185.185.185.185",
"events": [
{
"type": "notification",
"name": "notification_triggered",
"parameters": [
{
"name": "notification_type",
"value": "changed_event"
},
{
"name": "notification_method",
"value": "email"
},
{
"name": "recipient_email",
"value": "sanitized@sanitized.com"
},
{
"name": "calendar_id",
"value": "sanitized@sanitized.com"
},
{
"name": "target_calendar_id",
"value": "sanitized@sanitized.com"
},
{
"name": "notification_message_id",
"value": "<00000000000091945805b3bb77d3@google.com>"
},
{
"name": "event_id",
"value": "0n5llhrpmcrvr6s3pesoe06n5n"
},
{
"name": "api_kind",
"value": "web"
},
{
"name": "user_agent",
"value": "Mozilla/5.0"
}
]
}
],
"event_name": "notification_triggered",
"event_type": "notification",
"notification_type": "changed_event",
@ -136,7 +48,7 @@
"recipient_email": "sanitized@sanitized.com",
"calendar_id": "sanitized@sanitized.com",
"target_calendar_id": "sanitized@sanitized.com",
"notification_message_id": "<00000000000091945805b3bb77d3@google.com>",
"notification_message_id": "<sanitized@sanitized.com>",
"event_id": "0n5llhrpmcrvr6s3pesoe06n5n",
"api_kind": "web",
"user_agent": "Mozilla/5.0"
@ -154,43 +66,7 @@
"email": "sanitized@sanitized.com",
"profileId": "116493571738454115081"
},
"ownerDomain": "socprime.com",
"events": [
{
"type": "event_change",
"name": "change_event_guest_response",
"parameters": [
{
"name": "event_id",
"value": "4t99ageou49oin9nso02kct42m"
},
{
"name": "organizer_calendar_id",
"value": "sanitized@sanitized.com"
},
{
"name": "calendar_id",
"value": "sanitized@sanitized.com"
},
{
"name": "target_calendar_id",
"value": "sanitized@sanitized.com"
},
{
"name": "event_title",
"value": "First Steps"
},
{
"name": "event_guest",
"value": "sanitized@sanitized.com"
},
{
"name": "event_response_status",
"value": "accepted"
}
]
}
],
"ownerDomain": "sanitized.com",
"event_name": "change_event_guest_response",
"event_type": "event_change",
"event_id": "4t99ageou49oin9nso02kct42m",

618
Sample Data/Custom/GWorkspace_ReportsAPI_drive_CL.json
Просмотреть файл

@ -13,315 +13,6 @@
"profileId": "117433848155128707444"
},
"ipAddress": "51.51.51.51",
"events": [
{
"type": "access",
"name": "upload",
"parameters": [
{
"name": "primary_event",
"boolValue": true
},
{
"name": "billable",
"boolValue": true
},
{
"name": "doc_id",
"value": "11fXyLycI_mOzOV0oVlbLfI_KkHy96lN5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161618"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "access",
"name": "edit",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "doc_id",
"value": "11fXyLycI_mOzOV0oVlbLfI_KkHy96lN5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161618"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "acl_change",
"name": "change_user_access",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "visibility_change",
"value": "none"
},
{
"name": "target_user",
"value": "sanitized@sanitized.com"
},
{
"name": "old_value",
"multiValue": [
"none"
]
},
{
"name": "new_value",
"multiValue": [
"owner"
]
},
{
"name": "old_visibility",
"value": "unknown"
},
{
"name": "doc_id",
"value": "11fXyLycI_mOzOV0oVlbLfI_KkHy96lN5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161618"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "acl_change",
"name": "change_acl_editors",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "visibility_change",
"value": "none"
},
{
"name": "old_value",
"multiValue": [
"owner"
]
},
{
"name": "new_value",
"multiValue": [
"owner",
"writers"
]
},
{
"name": "old_visibility",
"value": "unknown"
},
{
"name": "doc_id",
"value": "11fXyLycI_mOzOV0oVlbLfI_KkHy96lN5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161618"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "access",
"name": "add_to_folder",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "destination_folder_title",
"multiValue": [
"fdaf7afe-7e4d-4359-82bd-f01a9867f535-CONTENT"
]
},
{
"name": "destination_folder_id",
"multiValue": [
"1qQ7PiBmHDIkKP_aRdSe7r0-4Rv_im1QU"
]
},
{
"name": "doc_id",
"value": "11fXyLycI_mOzOV0oVlbLfI_KkHy96lN5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161618"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
}
],
"event_name": "add_to_folder",
"event_type": "access",
"primary_event": false,
@ -366,315 +57,6 @@
"profileId": "117433848155128707444"
},
"ipAddress": "51.51.51.51",
"events": [
{
"type": "access",
"name": "upload",
"parameters": [
{
"name": "primary_event",
"boolValue": true
},
{
"name": "billable",
"boolValue": true
},
{
"name": "doc_id",
"value": "1d4c31Qjtxu6BGWOmVbAjJ2OaKZRZJId5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161619"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "access",
"name": "edit",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "doc_id",
"value": "1d4c31Qjtxu6BGWOmVbAjJ2OaKZRZJId5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161619"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "acl_change",
"name": "change_user_access",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "visibility_change",
"value": "none"
},
{
"name": "target_user",
"value": "sanitized@sanitized.com"
},
{
"name": "old_value",
"multiValue": [
"none"
]
},
{
"name": "new_value",
"multiValue": [
"owner"
]
},
{
"name": "old_visibility",
"value": "unknown"
},
{
"name": "doc_id",
"value": "1d4c31Qjtxu6BGWOmVbAjJ2OaKZRZJId5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161619"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "acl_change",
"name": "change_acl_editors",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "visibility_change",
"value": "none"
},
{
"name": "old_value",
"multiValue": [
"owner"
]
},
{
"name": "new_value",
"multiValue": [
"owner",
"writers"
]
},
{
"name": "old_visibility",
"value": "unknown"
},
{
"name": "doc_id",
"value": "1d4c31Qjtxu6BGWOmVbAjJ2OaKZRZJId5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161619"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
},
{
"type": "access",
"name": "add_to_folder",
"parameters": [
{
"name": "primary_event",
"boolValue": false
},
{
"name": "billable",
"boolValue": true
},
{
"name": "destination_folder_title",
"multiValue": [
"fdaf7afe-7e4d-4359-82bd-f01a9867f535-CONTENT"
]
},
{
"name": "destination_folder_id",
"multiValue": [
"1qQ7PiBmHDIkKP_aRdSe7r0-4Rv_im1QU"
]
},
{
"name": "doc_id",
"value": "1d4c31Qjtxu6BGWOmVbAjJ2OaKZRZJId5"
},
{
"name": "doc_type",
"value": "unknown"
},
{
"name": "doc_title",
"value": "fdaf7afe-7e4d-4359-82bd-f01a9867f535-chunk-161619"
},
{
"name": "visibility",
"value": "private"
},
{
"name": "originating_app_id",
"value": "962388314550"
},
{
"name": "actor_is_collaborator_account",
"boolValue": false
},
{
"name": "owner",
"value": "sanitized@sanitized.com"
},
{
"name": "owner_is_shared_drive",
"boolValue": false
},
{
"name": "owner_is_team_drive",
"boolValue": false
}
]
}
],
"event_name": "add_to_folder",
"event_type": "access",
"primary_event": false,

72
Sample Data/Custom/GWorkspace_ReportsAPI_login_CL.json
Просмотреть файл

@ -13,29 +13,6 @@
"profileId": "106497629058682804316"
},
"ipAddress": "52.52.52.52",
"events": [
{
"type": "login",
"name": "login_success",
"parameters": [
{
"name": "login_type",
"value": "google_password"
},
{
"name": "login_challenge_method",
"multiValue": [
"password",
"google_prompt"
]
},
{
"name": "is_suspicious",
"boolValue": false
}
]
}
],
"event_name": "login_success",
"event_type": "login",
"login_type": "google_password",
@ -59,32 +36,6 @@
"profileId": "106497629058682804316"
},
"ipAddress": "52.52.52.52",
"events": [
{
"type": "login",
"name": "login_verification",
"parameters": [
{
"name": "login_type",
"value": "google_password"
},
{
"name": "login_challenge_method",
"multiValue": [
"google_prompt"
]
},
{
"name": "login_challenge_status",
"value": "passed"
},
{
"name": "is_second_factor",
"boolValue": true
}
]
}
],
"event_name": "login_verification",
"event_type": "login",
"login_type": "google_password",
@ -108,29 +59,6 @@
"profileId": "106497629058682804316"
},
"ipAddress": "52.52.52.52",
"events": [
{
"type": "login",
"name": "login_success",
"parameters": [
{
"name": "login_type",
"value": "google_password"
},
{
"name": "login_challenge_method",
"multiValue": [
"password",
"google_prompt"
]
},
{
"name": "is_suspicious",
"boolValue": false
}
]
}
],
"event_name": "login_success",
"event_type": "login",
"login_type": "google_password",

132
Sample Data/Custom/GWorkspace_ReportsAPI_mobile_CL.json
Просмотреть файл

@ -13,50 +13,6 @@
"email": "sanitized@sanitized.com",
"profileId": "115119904266583144094"
},
"events": [
{
"type": "device_updates",
"name": "DEVICE_SYNC_EVENT",
"parameters": [
{
"name": "USER_EMAIL",
"value": "sanitized@sanitized.com"
},
{
"name": "DEVICE_ID",
"value": "260bbc87-0f0b-490e-8bcb-452d7e0b0df1"
},
{
"name": "SERIAL_NUMBER",
"value": ""
},
{
"name": "DEVICE_TYPE",
"value": "MAC"
},
{
"name": "DEVICE_MODEL",
"value": "Mac"
},
{
"name": "RESOURCE_ID",
"value": "AFiQxQ_8LfqYBExwWEth5ZjFv1a3rCZiF15vjsDTuJDEK8aaS1vNSuG6MQvimuBK0gxhW2xSHKISKD-X_qIQfJafyybk8c6kc9FhV2gJtqYxgYhLSW1oP3kL7zAq5HMRAo4eqK19hZIA"
},
{
"name": "IOS_VENDOR_ID",
"value": ""
},
{
"name": "LAST_SYNC_AUDIT_DATE",
"intValue": "1604994006247"
},
{
"name": "OS_VERSION",
"value": "macOS 10.15.7"
}
]
}
],
"event_name": "DEVICE_SYNC_EVENT",
"event_type": "device_updates",
"USER_EMAIL": "sanitized@sanitized.com",
@ -83,50 +39,6 @@
"email": "sanitized@sanitized.com",
"profileId": "106006796177445084667"
},
"events": [
{
"type": "device_updates",
"name": "DEVICE_SYNC_EVENT",
"parameters": [
{
"name": "USER_EMAIL",
"value": "sanitized@sanitized.com"
},
{
"name": "DEVICE_ID",
"value": "b717eaf0-65ea-4e1f-bbe4-69503db4952f"
},
{
"name": "SERIAL_NUMBER",
"value": ""
},
{
"name": "DEVICE_TYPE",
"value": "WINDOWS"
},
{
"name": "DEVICE_MODEL",
"value": "Windows"
},
{
"name": "RESOURCE_ID",
"value": "AFiQxQ9Hnb__JdI8sdIBO8Bn_ItdeZjUyKIoDsnCDNi7hUeXSEnp25yhPPkipdGaTSZ2icCvwE5rjgAj_RjbnktyEVDnKBxKjXxvYxspxdI9jAwRgBmohYNgRZI6dh16UzJqLR3gXGGG"
},
{
"name": "IOS_VENDOR_ID",
"value": ""
},
{
"name": "LAST_SYNC_AUDIT_DATE",
"intValue": "1604993558235"
},
{
"name": "OS_VERSION",
"value": "Windows 10.0"
}
]
}
],
"event_name": "DEVICE_SYNC_EVENT",
"event_type": "device_updates",
"USER_EMAIL": "sanitized@sanitized.com",
@ -153,50 +65,6 @@
"email": "sanitized@sanitized.com",
"profileId": "107768716075060161935"
},
"events": [
{
"type": "device_updates",
"name": "DEVICE_SYNC_EVENT",
"parameters": [
{
"name": "USER_EMAIL",
"value": "sanitized@sanitized.com"
},
{
"name": "DEVICE_ID",
"value": "cec57193-aabf-42d9-baf0-bb2d6cfba938"
},
{
"name": "SERIAL_NUMBER",
"value": "VMware-56 4d 82 d4 91 8c f3 92-61 1d a4 e3 f3 d7 22 42"
},
{
"name": "DEVICE_TYPE",
"value": "WINDOWS"
},
{
"name": "DEVICE_MODEL",
"value": "VMware7,1"
},
{
"name": "RESOURCE_ID",
"value": "AFiQxQ9Hnb__JdI8sdIBO8Bn_Itd8n9FNLAgDtkb-SwGZz5mKeiSPyNLUZSnL5U6QyUyj6kN_DC5QOmrEiw7H-8AM8gcZHO5AIxKXS-vMRBW6pSLajU_oL4fA3FghTcm8kv6qY-kNFWK"
},
{
"name": "IOS_VENDOR_ID",
"value": ""
},
{
"name": "LAST_SYNC_AUDIT_DATE",
"intValue": "1604987079348"
},
{
"name": "OS_VERSION",
"value": "Windows/10.0.19041"
}
]
}
],
"event_name": "DEVICE_SYNC_EVENT",
"event_type": "device_updates",
"USER_EMAIL": "sanitized@sanitized.com",

166
Sample Data/Custom/GWorkspace_ReportsAPI_token_CL.json
Просмотреть файл

@ -13,80 +13,6 @@
"profileId": "109950366970271381671"
},
"ipAddress": "52.52.51.51",
"events": [
{
"name": "authorize",
"parameters": [
{
"name": "client_id",
"value": "905154081809-858sm3f0qnalqd9d44d9gecjtrdji9tf.apps.googleusercontent.com"
},
{
"name": "app_name",
"value": "Notion"
},
{
"name": "client_type",
"value": "WEB"
},
{
"name": "scope_data",
"multiMessageValue": [
{
"parameter": [
{
"name": "scope_name",
"value": "https://www.googleapis.com/auth/userinfo.profile"
},
{
"name": "product_bucket",
"multiValue": [
"IDENTITY"
]
}
]
},
{
"parameter": [
{
"name": "scope_name",
"value": "https://www.googleapis.com/auth/userinfo.email"
},
{
"name": "product_bucket",
"multiValue": [
"IDENTITY"
]
}
]
},
{
"parameter": [
{
"name": "scope_name",
"value": "openid"
},
{
"name": "product_bucket",
"multiValue": [
"IDENTITY"
]
}
]
}
]
},
{
"name": "scope",
"multiValue": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
}
]
}
],
"event_name": "authorize",
"client_id": "905154081809-858sm3f0qnalqd9d44d9gecjtrdji9tf.apps.googleusercontent.com",
"app_name": "Notion",
@ -154,52 +80,8 @@
"email": "sanitized@sanitized.com",
"profileId": "113050896481365905439"
},
"events": [
{
"name": "revoke",
"parameters": [
{
"name": "client_id",
"value": "77185425430.apps.googleusercontent.com"
},
{
"name": "app_name",
"value": "Google Chrome"
},
{
"name": "client_type",
"value": "NATIVE_DESKTOP"
},
{
"name": "scope_data",
"multiMessageValue": [
{
"parameter": [
{
"name": "scope_name",
"value": "https://www.google.com/accounts/OAuthLogin"
},
{
"name": "product_bucket",
"multiValue": [
"IDENTITY"
]
}
]
}
]
},
{
"name": "scope",
"multiValue": [
"https://www.google.com/accounts/OAuthLogin"
]
}
]
}
],
"event_name": "revoke",
"client_id": "77185425430.apps.googleusercontent.com",
"client_id": "77185425430.sanitized.com",
"app_name": "Google Chrome",
"client_type": "NATIVE_DESKTOP",
"scope_data": [
@ -235,52 +117,8 @@
"email": "sanitized@sanitized.com",
"profileId": "115119904266583144094"
},
"events": [
{
"name": "revoke",
"parameters": [
{
"name": "client_id",
"value": "77185425430.apps.googleusercontent.com"
},
{
"name": "app_name",
"value": "Google Chrome"
},
{
"name": "client_type",
"value": "NATIVE_DESKTOP"
},
{
"name": "scope_data",
"multiMessageValue": [
{
"parameter": [
{
"name": "scope_name",
"value": "https://www.google.com/accounts/OAuthLogin"
},
{
"name": "product_bucket",
"multiValue": [
"IDENTITY"
]
}
]
}
]
},
{
"name": "scope",
"multiValue": [
"https://www.google.com/accounts/OAuthLogin"
]
}
]
}
],
"event_name": "revoke",
"client_id": "77185425430.apps.googleusercontent.com",
"client_id": "77185425430.sanitized.com",
"app_name": "Google Chrome",
"client_type": "NATIVE_DESKTOP",
"scope_data": [

12
Sample Data/Custom/GWorkspace_ReportsAPI_user_accounts_CL.json
Просмотреть файл

@ -14,12 +14,6 @@
"profileId": "103558135127700430349"
},
"ipAddress": "165.225.207.72",
"events": [
{
"type": "2sv_change",
"name": "2sv_enroll"
}
],
"event_name": "2sv_enroll",
"event_type": "2sv_change"
},
@ -38,12 +32,6 @@
"profileId": "103558135127700430349"
},
"ipAddress": "165.225.207.41",
"events": [
{
"type": "password_change",
"name": "password_edit"
}
],
"event_name": "password_edit",
"event_type": "password_change"
}