{"CreationTime": "2023-08-31T19:44:30", "Id": "bbad6e21-517e-4658-8b29-50bc28fafb3d", "Operation": "Update service principal.", "OrganizationId": "a417c578-c7ee-480d-a225-d48057e74df5", "RecordType": 8, "ResultStatus": "Success", "UserKey": "1003BFFD98415B4E@contoso.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "d829f2cd-1b4a-459d-91de-32ae50bd7794", "UserId": "attacker@contoso.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36\",\"AppId\":\"d829f2cd-1b4a-459d-91de-32ae50bd7794\"}"}, {"Name": "extendedAuditEventCategory", "Value": "ServicePrincipal"}], "ModifiedProperties": [{"Name": "Included Updated Properties", "NewValue": "", "OldValue": ""}, {"Name": "TargetId.ServicePrincipalNames", "NewValue": "d829f2cd-1b4a-459d-91de-32ae50bd7794", "OldValue": ""}], "Actor": [{"ID": "attacker@contoso.onmicrosoft.com", "Type": 5}, {"ID": "1003BFFD98415B4E", "Type": 3}, {"ID": "18ed3507-a475-4ccb-b669-d66bc9f2a36e", "Type": 2}, {"ID": "User_e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "InterSystemsId": "9d16d49e-99a4-43ff-961d-e54b84a091b5", "IntraSystemId": "a2d4d7c4-727c-401b-9e6c-70413a080855", "SupportTicketId": "", "Target": [{"ID": "ServicePrincipal_a30ef28f-3e6b-4eed-9990-efe335541198", "Type": 2}, {"ID": "a30ef28f-3e6b-4eed-9990-efe335541198", "Type": 2}, {"ID": "ServicePrincipal", "Type": 2}, {"ID": "TestApp", "Type": 1}, {"ID": "d829f2cd-1b4a-459d-91de-32ae50bd7794", "Type": 2}, {"ID": "d829f2cd-1b4a-459d-91de-32ae50bd7794", "Type": 4}], "TargetContextId": "a417c578-c7ee-480d-a225-d48057e74df5"}
{"CreationTime": "2023-08-31T19:44:30", "Id": "cb2cc16f-70ed-4e7c-93c2-8febd9a0ccf9", "Operation": "Update application \u2013 Certificates and secrets management ", "OrganizationId": "a417c578-c7ee-480d-a225-d48057e74df5", "RecordType": 8, "ResultStatus": "Success", "UserKey": "1003BFFD98415B4E@contoso.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "Application_09dae8dc-b449-4c91-8380-9072fd6635fd", "UserId": "attacker@contoso.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36\",\"AppId\":\"d829f2cd-1b4a-459d-91de-32ae50bd7794\"}"}, {"Name": "extendedAuditEventCategory", "Value": "Application"}], "ModifiedProperties": [{"Name": "KeyDescription", "NewValue": "[\r\n  \"[KeyIdentifier=3c831f7b-1dce-4925-a85e-0841cca4626a,KeyType=Password,KeyUsage=Verify,DisplayName=ClientSecret]\",\r\n  \"[KeyIdentifier=97b5f6a0-1a2a-480a-99bf-5dfb68ce9f72,KeyType=Password,KeyUsage=Verify,DisplayName=test2]\"\r\n]", "OldValue": "[\r\n  \"[KeyIdentifier=3c831f7b-1dce-4925-a85e-0841cca4626a,KeyType=Password,KeyUsage=Verify,DisplayName=ClientSecret]\"\r\n]"}, {"Name": "Included Updated Properties", "NewValue": "KeyDescription", "OldValue": ""}], "Actor": [{"ID": "attacker@contoso.onmicrosoft.com", "Type": 5}, {"ID": "1003BFFD98415B4E", "Type": 3}, {"ID": "18ed3507-a475-4ccb-b669-d66bc9f2a36e", "Type": 2}, {"ID": "User_e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "InterSystemsId": "9d16d49e-99a4-43ff-961d-e54b84a091b5", "IntraSystemId": "a2d4d7c4-727c-401b-9e6c-70413a080855", "SupportTicketId": "", "Target": [{"ID": "Application_09dae8dc-b449-4c91-8380-9072fd6635fd", "Type": 2}, {"ID": "09dae8dc-b449-4c91-8380-9072fd6635fd", "Type": 2}, {"ID": "Application", "Type": 2}, {"ID": "TestApp", "Type": 1}, {"ID": "d829f2cd-1b4a-459d-91de-32ae50bd7794", "Type": 2}], "TargetContextId": "a417c578-c7ee-480d-a225-d48057e74df5"}
{"CreationTime": "2023-08-31T19:44:30", "Id": "a865d3b5-9085-471b-b82f-a9df4fea7d06", "Operation": "Update application.", "OrganizationId": "a417c578-c7ee-480d-a225-d48057e74df5", "RecordType": 8, "ResultStatus": "Success", "UserKey": "1003BFFD98415B4E@contoso.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "Application_09dae8dc-b449-4c91-8380-9072fd6635fd", "UserId": "attacker@contoso.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36\",\"AppId\":\"d829f2cd-1b4a-459d-91de-32ae50bd7794\"}"}, {"Name": "extendedAuditEventCategory", "Value": "Application"}], "ModifiedProperties": [], "Actor": [{"ID": "attacker@contoso.onmicrosoft.com", "Type": 5}, {"ID": "1003BFFD98415B4E", "Type": 3}, {"ID": "18ed3507-a475-4ccb-b669-d66bc9f2a36e", "Type": 2}, {"ID": "User_e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "e4c722ac-3b83-478d-8f52-c388885dc30f", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "InterSystemsId": "9d16d49e-99a4-43ff-961d-e54b84a091b5", "IntraSystemId": "a2d4d7c4-727c-401b-9e6c-70413a080855", "SupportTicketId": "", "Target": [{"ID": "Application_09dae8dc-b449-4c91-8380-9072fd6635fd", "Type": 2}, {"ID": "09dae8dc-b449-4c91-8380-9072fd6635fd", "Type": 2}, {"ID": "Application", "Type": 2}, {"ID": "TestApp", "Type": 1}, {"ID": "d829f2cd-1b4a-459d-91de-32ae50bd7794", "Type": 2}], "TargetContextId": "a417c578-c7ee-480d-a225-d48057e74df5"}