Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

slack connector - add sample data

This commit is contained in:
Vitalii Uslystyi 2021-12-01 13:47:59 +02:00
Родитель b50064b914
Коммит e3aeb1c6fa
1 изменённых файлов: 902 добавлений и 0 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

902
Sample Data/Custom/SlackAuditNativePoller_CL.json Normal file
Просмотреть файл

@ -0,0 +1,902 @@
[
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "bda3f258-ec72-44ac-8526-8fe3cef62c3f",
"date_create_d": 1637753737,
"action_s": "file_shared",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "F02NGM3LZGB",
"entity_file_name_s": "test",
"entity_file_filetype_s": "application/vnd.google-apps.document",
"entity_file_title_s": "test",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 2353217475334,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "b9457f56-6109-45ba-b58d-d5d4ddde98e5",
"date_create_d": 1637753736,
"action_s": "file_uploaded",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "F02NGM3LZGB",
"entity_file_name_s": "test",
"entity_file_filetype_s": "",
"entity_file_title_s": "test",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 2353217475334,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "a8170df3-f0b5-44c3-9ba2-b7d81b456c90",
"date_create_d": 1637753710,
"action_s": "file_shared",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "test",
"entity_file_name_s": "slack_image__2021-11-23_17-57-52_.jpg",
"entity_file_filetype_s": "image/jpeg",
"entity_file_title_s": "Slack Image (2021-11-23_17-57-52).jpg",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "Mozilla/5.0 (Windows NT 10.0.19043; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 OS_Product/Workstation Servicing_Channel/SAC Sonic Slack_SSB/4.22.0",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 1639277775665,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "3265fb41-d3c9-4667-98c9-664d8d4d94fe",
"date_create_d": 1637753708,
"action_s": "file_shared",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "test",
"entity_file_name_s": "image.png",
"entity_file_filetype_s": "image/png",
"entity_file_title_s": "image.png",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 Sonic Slack_SSB/4.22.0",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 971594246096,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "0cd5db48-c90a-453d-89d5-76146eff9004",
"date_create_d": 1637753707,
"action_s": "file_uploaded",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "test",
"entity_file_name_s": "image.png",
"entity_file_filetype_s": "",
"entity_file_title_s": "image.png",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": "",
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "3d8637ba-329d-446c-a2a2-6641ab59a5e9",
"date_create_d": 1637753688,
"action_s": "file_downloaded",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "F02NT6XRV6D",
"entity_file_name_s": "slack_image__2021-11-23_17-57-52_.jpg",
"entity_file_filetype_s": "image/jpeg",
"entity_file_title_s": "Slack Image (2021-11-23_17-57-52).jpg",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "Slack/21.11.20 (iPhone; iOS 14.8.1; Scale/3.00)",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 1517175686928,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "2b716055-3efd-418c-bb9a-b645c28353d9",
"date_create_d": 1637753569,
"action_s": "file_downloaded",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "F02NT6XRV6D",
"entity_file_name_s": "slack_image__2021-11-23_17-57-52_.jpg",
"entity_file_filetype_s": "image/jpeg",
"entity_file_title_s": "Slack Image (2021-11-23_17-57-52).jpg",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "Mozilla/5.0 (Windows NT 10.0.19043; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 OS_Product/Workstation Servicing_Channel/SAC Sonic Slack_SSB/4.22.0",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 1639277775665,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "807ed8aa-2758-4a0b-bf22-2f9cf03381bd",
"date_create_d": 1637753931,
"action_s": "file_downloaded",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "F02NJ2HKJ8L",
"entity_file_name_s": "audio_clip__2021-11-24_08_51_50_.m4a",
"entity_file_filetype_s": "audio/mp4",
"entity_file_title_s": "Audio Clip (2021-11-24 08:51:50)",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.1 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 MacAppStore/21.1.0 Sonic Slack_SSB/4.22.1",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 1642319554900,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "f48ce188-8b75-4d8d-85e4-d7f84ffa0c70",
"date_create_d": 1637753859,
"action_s": "file_downloaded",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "test",
"entity_file_name_s": "image.png",
"entity_file_filetype_s": "image/png",
"entity_file_title_s": "image.png",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 Sonic Slack_SSB/4.22.0",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 1378563859536,
"action_description_s": ""
},
{
"RawData": "",
"details_name_s": "",
"details_disconnecting_team_s": "",
"entity_workspace_id_s": "",
"entity_workspace_name_s": "",
"entity_workspace_domain_s": "",
"details_new_value_type_s": "",
"details_new_value_user_s": "",
"details_new_value_subteam_s": "",
"details_previous_value_type_s": "",
"details_new_value_s": "",
"details_previous_value_s": "",
"details_is_token_rotation_enabled_app_b": "",
"entity_huddle_id_s": "",
"entity_huddle_date_start_d": "",
"entity_huddle_date_end_d": "",
"entity_huddle_participants_s": "",
"entity_channel_teams_shared_with_s": "",
"details_origin_team_s": "",
"details_target_team_s": "",
"details_approver_id_s": "",
"details_approval_type_s": "",
"details_mobile_only_b": "",
"details_web_only_b": "",
"details_kicker_id_s": "",
"details_kicker_name_s": "",
"details_kicker_email_s": "",
"details_kicker_team_s": "",
"details_app_owner_id_s": "",
"details_granular_bot_token_b": "",
"details_new_scopes_s": "",
"details_previous_scopes_s": "",
"entity_usergroup_id_s": "",
"entity_usergroup_name_s": "",
"details_kicker_type_s": "",
"details_kicker_user_id_s": "",
"details_kicker_user_name_s": "",
"details_kicker_user_email_s": "",
"details_kicker_user_team_s": "",
"details_inviter_id_s": "",
"details_inviter_name_s": "",
"details_inviter_email_s": "",
"details_inviter_team_s": "",
"details_inviter_type_s": "",
"details_inviter_user_id_s": "",
"details_inviter_user_name_s": "",
"details_inviter_user_email_s": "",
"details_inviter_user_team_s": "",
"details_is_workflow_b": "",
"entity_app_id_s": "",
"entity_app_name_s": "",
"entity_app_is_distributed_b": "",
"entity_app_is_directory_approved_b": "",
"entity_app_is_workflow_app_b": "",
"entity_app_scopes_s": "",
"details_is_internal_integration_b": "",
"details_bot_scopes_s": "",
"entity_channel_id_s": "",
"entity_channel_privacy_s": "",
"entity_channel_name_s": "",
"entity_channel_is_shared_b": "",
"entity_channel_is_org_shared_b": "",
"details_type_s": "",
"entity_user_id_s": "",
"entity_user_name_s": "",
"entity_user_email_s": "",
"entity_user_team_s": "",
"id_g": "eebad56a-b0e1-4813-b0a4-b924fcd2dbb3",
"date_create_d": 1637753854,
"action_s": "file_shared",
"actor_type_s": "user",
"actor_user_id_s": "test",
"actor_user_name_s": "test",
"actor_user_email_s": "sanitized@sanitized.com",
"actor_user_team_s": "test",
"entity_type_s": "file",
"entity_file_id_s": "F02NGLGS0KC",
"entity_file_name_s": "image.png",
"entity_file_filetype_s": "image/png",
"entity_file_title_s": "image.png",
"context_location_type_s": "workspace",
"context_location_id_s": "test",
"context_location_name_s": "test",
"context_location_domain_s": "test",
"context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 Sonic Slack_SSB/4.22.0",
"context_ip_address_s": "10.10.10.10",
"context_session_id_d": 971594246096,
"action_description_s": ""
}
]