diff --git a/Sample Data/Custom/SlackAuditNativePoller_CL.json b/Sample Data/Custom/SlackAuditNativePoller_CL.json new file mode 100644 index 0000000000..fd4b67a0b6 --- /dev/null +++ b/Sample Data/Custom/SlackAuditNativePoller_CL.json @@ -0,0 +1,902 @@ +[ + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "bda3f258-ec72-44ac-8526-8fe3cef62c3f", + "date_create_d": 1637753737, + "action_s": "file_shared", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "F02NGM3LZGB", + "entity_file_name_s": "test", + "entity_file_filetype_s": "application/vnd.google-apps.document", + "entity_file_title_s": "test", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 2353217475334, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "b9457f56-6109-45ba-b58d-d5d4ddde98e5", + "date_create_d": 1637753736, + "action_s": "file_uploaded", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "F02NGM3LZGB", + "entity_file_name_s": "test", + "entity_file_filetype_s": "", + "entity_file_title_s": "test", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 2353217475334, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "a8170df3-f0b5-44c3-9ba2-b7d81b456c90", + "date_create_d": 1637753710, + "action_s": "file_shared", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "test", + "entity_file_name_s": "slack_image__2021-11-23_17-57-52_.jpg", + "entity_file_filetype_s": "image/jpeg", + "entity_file_title_s": "Slack Image (2021-11-23_17-57-52).jpg", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "Mozilla/5.0 (Windows NT 10.0.19043; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 OS_Product/Workstation Servicing_Channel/SAC Sonic Slack_SSB/4.22.0", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 1639277775665, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "3265fb41-d3c9-4667-98c9-664d8d4d94fe", + "date_create_d": 1637753708, + "action_s": "file_shared", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "test", + "entity_file_name_s": "image.png", + "entity_file_filetype_s": "image/png", + "entity_file_title_s": "image.png", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 Sonic Slack_SSB/4.22.0", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 971594246096, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "0cd5db48-c90a-453d-89d5-76146eff9004", + "date_create_d": 1637753707, + "action_s": "file_uploaded", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "test", + "entity_file_name_s": "image.png", + "entity_file_filetype_s": "", + "entity_file_title_s": "image.png", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": "", + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "3d8637ba-329d-446c-a2a2-6641ab59a5e9", + "date_create_d": 1637753688, + "action_s": "file_downloaded", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "F02NT6XRV6D", + "entity_file_name_s": "slack_image__2021-11-23_17-57-52_.jpg", + "entity_file_filetype_s": "image/jpeg", + "entity_file_title_s": "Slack Image (2021-11-23_17-57-52).jpg", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "Slack/21.11.20 (iPhone; iOS 14.8.1; Scale/3.00)", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 1517175686928, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "2b716055-3efd-418c-bb9a-b645c28353d9", + "date_create_d": 1637753569, + "action_s": "file_downloaded", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "F02NT6XRV6D", + "entity_file_name_s": "slack_image__2021-11-23_17-57-52_.jpg", + "entity_file_filetype_s": "image/jpeg", + "entity_file_title_s": "Slack Image (2021-11-23_17-57-52).jpg", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "Mozilla/5.0 (Windows NT 10.0.19043; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 OS_Product/Workstation Servicing_Channel/SAC Sonic Slack_SSB/4.22.0", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 1639277775665, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "807ed8aa-2758-4a0b-bf22-2f9cf03381bd", + "date_create_d": 1637753931, + "action_s": "file_downloaded", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "F02NJ2HKJ8L", + "entity_file_name_s": "audio_clip__2021-11-24_08_51_50_.m4a", + "entity_file_filetype_s": "audio/mp4", + "entity_file_title_s": "Audio Clip (2021-11-24 08:51:50)", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.1 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 MacAppStore/21.1.0 Sonic Slack_SSB/4.22.1", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 1642319554900, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "f48ce188-8b75-4d8d-85e4-d7f84ffa0c70", + "date_create_d": 1637753859, + "action_s": "file_downloaded", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "test", + "entity_file_name_s": "image.png", + "entity_file_filetype_s": "image/png", + "entity_file_title_s": "image.png", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 Sonic Slack_SSB/4.22.0", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 1378563859536, + "action_description_s": "" + }, + { + "RawData": "", + "details_name_s": "", + "details_disconnecting_team_s": "", + "entity_workspace_id_s": "", + "entity_workspace_name_s": "", + "entity_workspace_domain_s": "", + "details_new_value_type_s": "", + "details_new_value_user_s": "", + "details_new_value_subteam_s": "", + "details_previous_value_type_s": "", + "details_new_value_s": "", + "details_previous_value_s": "", + "details_is_token_rotation_enabled_app_b": "", + "entity_huddle_id_s": "", + "entity_huddle_date_start_d": "", + "entity_huddle_date_end_d": "", + "entity_huddle_participants_s": "", + "entity_channel_teams_shared_with_s": "", + "details_origin_team_s": "", + "details_target_team_s": "", + "details_approver_id_s": "", + "details_approval_type_s": "", + "details_mobile_only_b": "", + "details_web_only_b": "", + "details_kicker_id_s": "", + "details_kicker_name_s": "", + "details_kicker_email_s": "", + "details_kicker_team_s": "", + "details_app_owner_id_s": "", + "details_granular_bot_token_b": "", + "details_new_scopes_s": "", + "details_previous_scopes_s": "", + "entity_usergroup_id_s": "", + "entity_usergroup_name_s": "", + "details_kicker_type_s": "", + "details_kicker_user_id_s": "", + "details_kicker_user_name_s": "", + "details_kicker_user_email_s": "", + "details_kicker_user_team_s": "", + "details_inviter_id_s": "", + "details_inviter_name_s": "", + "details_inviter_email_s": "", + "details_inviter_team_s": "", + "details_inviter_type_s": "", + "details_inviter_user_id_s": "", + "details_inviter_user_name_s": "", + "details_inviter_user_email_s": "", + "details_inviter_user_team_s": "", + "details_is_workflow_b": "", + "entity_app_id_s": "", + "entity_app_name_s": "", + "entity_app_is_distributed_b": "", + "entity_app_is_directory_approved_b": "", + "entity_app_is_workflow_app_b": "", + "entity_app_scopes_s": "", + "details_is_internal_integration_b": "", + "details_bot_scopes_s": "", + "entity_channel_id_s": "", + "entity_channel_privacy_s": "", + "entity_channel_name_s": "", + "entity_channel_is_shared_b": "", + "entity_channel_is_org_shared_b": "", + "details_type_s": "", + "entity_user_id_s": "", + "entity_user_name_s": "", + "entity_user_email_s": "", + "entity_user_team_s": "", + "id_g": "eebad56a-b0e1-4813-b0a4-b924fcd2dbb3", + "date_create_d": 1637753854, + "action_s": "file_shared", + "actor_type_s": "user", + "actor_user_id_s": "test", + "actor_user_name_s": "test", + "actor_user_email_s": "sanitized@sanitized.com", + "actor_user_team_s": "test", + "entity_type_s": "file", + "entity_file_id_s": "F02NGLGS0KC", + "entity_file_name_s": "image.png", + "entity_file_filetype_s": "image/png", + "entity_file_title_s": "image.png", + "context_location_type_s": "workspace", + "context_location_id_s": "test", + "context_location_name_s": "test", + "context_location_domain_s": "test", + "context_ua_s": "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Slack/4.22.0 Chrome/94.0.4606.81 Electron/15.3.0 Safari/537.36 Sonic Slack_SSB/4.22.0", + "context_ip_address_s": "10.10.10.10", + "context_session_id_d": 971594246096, + "action_description_s": "" + } +] \ No newline at end of file