Azure-Sentinel/Sample Data/Custom/NCProtectUAL_CL.csv

6.8 KiB

1TimeGenerated [UTC]DocumentUrlSHA512HashIdTimestampUserDisplayNameUserLoginNameUserEmailDocumentProtectionIdTypeStatusApplicationBrowserOSRuleNameRuleUrlJSONExtraSender
23/21/2021, 10:38:57.794 PMhttps://hsftrms.sharepoint.com/sites/KMTest851/Shared%20Documents/Board%20Agenda.pdfn/a47949cb8-ca30-4af9-b905-8b05bf03ae3c3/21/2021 10:38:56 PMLeigh Rowlandi:0#.f|membership|l.rowland@hsftrms.onmicrosoft.coml.rowland@hsftrms.onmicrosoft.com00000000-0000-0000-0000-000000000000NCProtectUAL_CLFailChromeChromeWindows{"Details":"NC Protect blocked requested access to /sites/KMTest851/_layouts/15/download.aspx?UniqueId=5c83b4ad-efa3-4df7-b446-7d0e43adfe4a by user i:0#.f|membership|l.rowland@hsftrms.onmicrosoft.com"}NCProtect
33/21/2021, 10:30:12.446 PMhttps://hsftrms.sharepoint.com/sites/KMTest851/Shared%20Documents/Allice%20Hollows%20Resume.docx00000000-0000-0000-0000-0000000000009a689509-c8d8-44f1-8a36-b21dbfdf25ac3/21/2021 10:30:12 PMLeigh Rowlandi:0#.f|membership|l.rowland@hsftrms.onmicrosoft.coml.rowland@hsftrms.onmicrosoft.com00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindows{"Details":""}NCProtect
43/21/2021, 10:26:52.506 PM\\sheriff\hrdoc\F5.txt1524c20f-7430-4c0f-b173-b3c325dd97b83/21/2021 10:26:47 PMsvcncprotectsvcncprotect00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindowsNCProtect
53/21/2021, 10:21:38.756 AM\\sheriff\hrdoc\F5.txt6f62b409-b8dc-45b9-905a-2d5cbb65f78a6f62b409-b8dc-45b9-905a-2d5cbb65f78a3/21/2021 10:21:33 AMsvcncprotectsvcncprotect00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessNC ProtectChromeWindowssr/_admin/Pages/SettingsPages/Sharing RuleEdit.aspx?id=0NCProtect
63/21/2021, 10:21:38.075 AM\\sheriff\hrdoc\F5.txta37916cc-8cb4-483e-a9f5-622c8813dc793/21/2021 10:21:34 AMsvcncprotectsvcncprotect00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindowssr/_admin/Pages/SettingsPages/Sharing RuleEdit.aspx?id=0NCProtect
73/18/2021, 5:08:11.067 AMhttps://sheriff/_admin/Account/Login.aspx30648b14-5922-4980-a8ad-efc8a842f6433/18/2021 5:08:10 AMAdministratorAdministrator00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindows{"Details":"Login Success for User Administrator"}NCProtect
83/18/2021, 5:08:41.756 AMhttps://sheriff/_admin/default.aspxa83486fc-182e-4fd1-887e-ffac603356ec3/18/2021 5:08:41 AMAdministratorAdministrator00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindows{"Details":"Logged out Success for User Administrator"}NCProtect
93/18/2021, 11:16:36.117 PMhttps://sheriff/_admin/Account/Login.aspx236bb41a-0a33-42f3-9bdb-562548d5ed763/18/2021 11:16:34 PMAdministratorAdministrator00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindows{"Details":"Login Failed for User Administrator"}NCProtect
103/18/2021, 11:09:04.292 PMc22e5160-cdb0-4339-95b2-05ff2d3bfd583/18/2021 11:09:02 PMAdministratorAdministratorl.rowland@hsftrms.onmicrosoft.com00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindowsDAR Rulehttps://sheriff/_admin/Pages/SettingsPages/DynamicAccessRuleEdit.aspx?itemid=1023{"New":"{\r\n \"Name\": \"DAR Rule\",\r\n \"Description\": \"\",\r\n \"ScopeUrl\": \"2019\",\r\n \"Condition\": {\r\n \"Expressions\": [\r\n {\r\n \"Level\": 0,\r\n \"Operator\": \"None\",\r\n \"RHSType\": \"FixedValue\",\r\n \"RHSSource\": \"txt\",\r\n \"LHSType\": \"Column\",\r\n \"LHSSource\": \"File Type\",\r\n \"ExpressionOperator\": \"Equals\"\r\n }\r\n ]\r\n },\r\n \"RuleAccessAction\": \"1\",\r\n \"IsActive\": false,\r\n \"Scope\": \"Asset\",\r\n \"IsDeny\": false\r\n}","Old":"","Site URL":""}NCProtect
113/18/2021, 11:09:18.391 PM47827159-646b-48a2-a00f-836a1e09b12c3/18/2021 11:09:16 PMAdministratorAdministratorl.rowland@hsftrms.onmicrosoft.com00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindowsDAR Rulehttps://sheriff/_admin/Pages/SettingsPages/DynamicAccessRuleEdit.aspx?itemid=1023{"New":"{\r\n \"Name\": \"DAR Rule\",\r\n \"Description\": \"Description Added\",\r\n \"ScopeUrl\": \"2019\",\r\n \"Condition\": {\r\n \"Expressions\": [\r\n {\r\n \"Level\": 0,\r\n \"Operator\": \"None\",\r\n \"RHSType\": \"FixedValue\",\r\n \"RHSSource\": \"txt\",\r\n \"LHSType\": \"Column\",\r\n \"LHSSource\": \"File Type\",\r\n \"ExpressionOperator\": \"Equals\"\r\n }\r\n ]\r\n },\r\n \"RuleAccessAction\": \"1\",\r\n \"IsActive\": false,\r\n \"Scope\": \"Asset\",\r\n \"IsDeny\": false\r\n}","Old":"{\r\n \"Name\": \"DAR Rule\",\r\n \"Description\": \"Description Added\",\r\n \"ScopeUrl\": \"2019\",\r\n \"Condition\": {\r\n \"Expressions\": [\r\n {\r\n \"Level\": 0,\r\n \"Operator\": \"None\",\r\n \"RHSType\": \"FixedValue\",\r\n \"RHSSource\": \"txt\",\r\n \"LHSType\": \"Column\",\r\n \"LHSSource\": \"File Type\",\r\n \"ExpressionOperator\": \"Equals\"\r\n }\r\n ]\r\n },\r\n \"RuleAccessAction\": \"1\",\r\n \"IsActive\": false,\r\n \"Scope\": \"Asset\",\r\n \"IsDeny\": false\r\n}","Site URL":""}NCProtect
123/18/2021, 11:12:14.041 PM949dcf51-fa64-4a1d-8e3b-d85f3748596a3/18/2021 11:12:12 PMAdministratorAdministratorl.rowland@hsftrms.onmicrosoft.com00000000-0000-0000-0000-000000000000NCProtectUAL_CLSuccessChromeChromeWindowsDAR Rulehttps://sheriff/_admin/Pages/SettingsPages/DynamicAccessRuleEdit.aspx?itemid=1023{"New":"","Old":"{\r\n \"Name\": \"DAR Rule\",\r\n \"Description\": \"Description Added 1\",\r\n \"ScopeUrl\": \"2019\",\r\n \"Condition\": {\r\n \"Expressions\": [\r\n {\r\n \"Level\": 0,\r\n \"Operator\": \"None\",\r\n \"RHSType\": \"FixedValue\",\r\n \"RHSSource\": \"txt\",\r\n \"LHSType\": \"Column\",\r\n \"LHSSource\": \"File Type\",\r\n \"ExpressionOperator\": \"Equals\"\r\n }\r\n ]\r\n },\r\n \"RuleAccessAction\": \"1\",\r\n \"IsActive\": true,\r\n \"Scope\": \"Asset\",\r\n \"IsDeny\": false\r\n}","Site URL":"undefined"}NCProtect