Azure-Sentinel/Sample Data/AADUSerInfo.csv

1	UserPrincipalName_s	TimeGenerated [UTC]	TenantId	SourceSystem	MG	ManagementGroupName	Computer	RawData	PSComputerName_s	RunspaceId_g	PSShowComputerName_b	ExtensionProperty_odata_type_s	ExtensionProperty_createdDateTime_s	ExtensionProperty_userIdentities_s	ExtensionProperty_onPremisesDistinguishedName_s	ExtensionProperty_thumbnailPhoto_odata_mediaEditLink_s	ObjectId_g	ObjectType_s	AccountEnabled_b	AssignedLicenses_s	AssignedPlans_s	DirSyncEnabled_b	DisplayName_s	GivenName_s	ImmutableId_s	LastDirSyncTime_t [UTC]	MailNickName_s	OnPremisesSecurityIdentifier_s	OtherMails_s	PasswordPolicies_s	ProvisionedPlans_s	ProvisioningErrors_s	ProxyAddresses_s	RefreshTokensValidFromDateTime_t [UTC]	SignInNames_s	Surname_s	UserType_s	CompanyName_s	Department_s	JobTitle_s	Mail_s	SipProxyAddress_s	UsageLocation_s	PasswordProfile_s	PreferredLanguage_s	CreationType_s	ShowInAddressList_b	UserState_s	UserStateChangedOn_t [UTC]	City_s	Mobile_s	PhysicalDeliveryOfficeName_s	PostalCode_s	State_s	StreetAddress_s	ExtensionProperty_thumbnailPhoto_odata_mediaContentType_s	Country_s	Type	_ResourceId
2	AdSync@domain.onmicrosoft.com	6/4/2021, 4:00:37.371 PM	b3a60639-f318-4790-aa86-c91548ca5ea3	RestAPI					localhost	dba59882-29b8-4f02-8fee-6a00d162ba96	FALSE	Microsoft.DirectoryServices.User	11/4/2020 21:11	[]		directoryObjects/2bedcdc9-1d82-439e-b07e-86a70ad19cb8/Microsoft.DirectoryServices.User/thumbnailPhoto	2bedcdc9-1d82-439e-b07e-86a70ad19cb8	User	TRUE	[]	[]		Active Directory Sync	Active			AdSync		[]		[]	[]	[]	11/4/2020, 9:12:53.000 PM	[]	Directory	Member	Contoso Build	Build	Active Directory Service Account																		AADUserInfov2_CL
3	JeffL@domain.onmicrosoft.com	6/4/2021, 4:00:37.381 PM	b3a60639-f318-4790-aa86-c91548ca5ea3	RestAPI					localhost	dba59882-29b8-4f02-8fee-6a00d162ba96	FALSE	Microsoft.DirectoryServices.User	11/4/2020 21:21	[]	CN=JeffL,CN=Users,DC=Contoso,DC=Azure	directoryObjects/907ee970-5ed2-43cf-8e7f-e8e19ec8bbed/Microsoft.DirectoryServices.User/thumbnailPhoto	907ee970-5ed2-43cf-8e7f-e8e19ec8bbed	User	TRUE	[]	[]	TRUE	Jeff Leatherman	Jeff	DEoOcv5mCEqOvSg/Etfb6A==	11/4/2020, 9:21:40.000 PM	JeffL	S-1-5-21-2238293948-1392010073-595408551-1107	[]	DisablePasswordExpiration	[]	[]	[]	11/4/2020, 7:48:10.000 PM	[]	Leatherman	Member	Contoso	Marketing	Director										Tulsa	+1 309 555 0101	19/2106	74133	OK	7633 E. 63rd Place, Suite 300			AADUserInfov2_CL
4	LisaV@domain.onmicrosoft.com	6/4/2021, 4:00:37.381 PM	b3a60639-f318-4790-aa86-c91548ca5ea3	RestAPI					localhost	dba59882-29b8-4f02-8fee-6a00d162ba96	FALSE	Microsoft.DirectoryServices.User	11/4/2020 21:21	[]	CN=LisaV,CN=Users,DC=Contoso,DC=Azure	directoryObjects/ae03170f-7cdd-49cf-a66e-43c0f86ac72b/Microsoft.DirectoryServices.User/thumbnailPhoto	ae03170f-7cdd-49cf-a66e-43c0f86ac72b	User	TRUE	[]	[]	TRUE	Lisa Valentine	Lisa	wgUaVeUsx06/IkllS959Yg==	11/4/2020, 9:21:40.000 PM	LisaV	S-1-5-21-2238293948-1392010073-595408551-1108	[]	DisablePasswordExpiration	[]	[]	[]	11/4/2020, 7:48:11.000 PM	[]	Valentine	Member	Contoso	Human Resources	HR Manager										Redmond	+1 425 555 0100	20/2008	98052	WA	One Microsoft Way			AADUserInfov2_CL
5	MeganB@domain.onmicrosoft.com	6/4/2021, 4:00:37.386 PM	b3a60639-f318-4790-aa86-c91548ca5ea3	RestAPI					localhost	dba59882-29b8-4f02-8fee-6a00d162ba96	FALSE	Microsoft.DirectoryServices.User	11/4/2020 21:21	[]	CN=MeganB,CN=Users,DC=Contoso,DC=Azure	directoryObjects/d3c1c696-260e-4685-9077-1e46114bbd1a/Microsoft.DirectoryServices.User/thumbnailPhoto	d3c1c696-260e-4685-9077-1e46114bbd1a	User	TRUE	[]	[]	TRUE	Megan Bowens	Megan	tE9oIawG9EyCUgqcqRs8YQ==	2/2/2021, 7:23:00.000 AM	MeganB	S-1-5-21-2238293948-1392010073-595408551-1110	[]	DisablePasswordExpiration	[]	[]	[]	11/4/2020, 7:48:13.000 PM	[]	Bowens	Member	Contoso	Marketing	Marketing Manager										Pittsburgh	+1 412 555 0109	12/1110	15212	PA	30 Isabella St., Second Floor			AADUserInfov2_CL
6	RonHD@domain.onmicrosoft.com	6/4/2021, 4:00:37.391 PM	b3a60639-f318-4790-aa86-c91548ca5ea3	RestAPI					localhost	dba59882-29b8-4f02-8fee-6a00d162ba96	FALSE	Microsoft.DirectoryServices.User	11/4/2020 21:21	[]	CN=RonHD,CN=Users,DC=Contoso,DC=Azure	directoryObjects/d4814335-030c-41d0-af95-8ecbaf6ba2ac/Microsoft.DirectoryServices.User/thumbnailPhoto	d4814335-030c-41d0-af95-8ecbaf6ba2ac	User	TRUE	[]	[]	TRUE	RonHD	Ron	CmTEP4ALPEyUdyW1fINLyw==	11/4/2020, 9:21:41.000 PM	RonHD	S-1-5-21-2238293948-1392010073-595408551-1105	[]	DisablePasswordExpiration	[]	[]	[]	11/4/2020, 7:48:09.000 PM	[]	HD	Member	Contoso	IT	Systems Support Analyst										San Diego	+1 858 555 0110	131/1104	92121	CA	9256 Towne Center Dr., Suite 400			AADUserInfov2_CL
7	SamiraA@domain.onmicrosoft.com	6/4/2021, 4:00:37.391 PM	b3a60639-f318-4790-aa86-c91548ca5ea3	RestAPI					localhost	dba59882-29b8-4f02-8fee-6a00d162ba96	FALSE	Microsoft.DirectoryServices.User	11/4/2020 21:21	[]	CN=SamiraA,CN=Users,DC=Contoso,DC=Azure	directoryObjects/fb0a11ed-06a6-42b1-8749-2552648f869c/Microsoft.DirectoryServices.User/thumbnailPhoto	fb0a11ed-06a6-42b1-8749-2552648f869c	User	TRUE	[]	[]	TRUE	Samira Abbasi	Samira	d30ISuwZhkaw789iv4Kwrw==	11/4/2020, 9:21:40.000 PM	SamiraA	S-1-5-21-2238293948-1392010073-595408551-1103	[]	DisablePasswordExpiration	[]	[]	[]	11/4/2020, 7:48:07.000 PM	[]	Abbasi	Member	Contoso	IT	Infrastructure Administrator										Louisville	+1 502 555 0102	23/2102	40223	KY	9900 Corporate Campus Dr., Suite 3000			AADUserInfov2_CL