Azure-Sentinel/Sample Data/Custom/PaloAltoPrismaCloudAudit_CL...

93 строки
3.4 KiB
JSON

[
{
"timestamp": "1616422607498",
"user": "00000000-0000-0000-0000-000000000000",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via SSO-SAML.",
"result": "Successful"
},
{
"timestamp": "1616423855485",
"user": "00000000-0000-0000-0000-000000000000",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via SSO-SAML.",
"result": "Successful"
},
{
"timestamp": "1616423870400",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "00000000-0000-0000-0000-000000000000",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via SSO-SAML.",
"result": "Successful"
},
{
"timestamp": "1616423978545",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "User Management",
"resourceName": "00000000-0000-0000-0000-000000000000",
"action": "'test@example.com'(with role 'System Admin':'System Admin') created access key 'testapi'",
"result": "Successful"
},
{
"timestamp": "1616424686681",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via SSO-SAML.",
"result": "Successful"
},
{
"timestamp": "1616425756546",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via access key.",
"result": "Successful"
},
{
"timestamp": "1616581253243",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via access key.",
"result": "Successful"
},
{
"timestamp": "1616581319342",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via access key.",
"result": "Successful"
},
{
"timestamp": "1616581390055",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via access key.",
"result": "Successful"
},
{
"timestamp": "1616581454638",
"user": "test@example.com",
"IPAddress": "10.10.10.10",
"ResourceType": "Login",
"resourceName": "test@example.com",
"action": "'test@example.com'(with role 'System Admin':'System Admin') logged in via access key.",
"result": "Successful"
}
]