{"CreationTime": "2023-11-06T20:50:43", "Id": "b9f8aeeb-8e7f-49cf-a6c0-7a26da502101", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "efd025c2-fce0-49d3-9f2d-d5d3a99990c7", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "44.233.54.28", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Donald.Reed@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "efd025c2-fce0-49d3-9f2d-d5d3a99990c7", "Type": 0}, {"ID": "Donald.Reed@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "44.233.54.28", "InterSystemsId": "848adcb7-0d0e-48aa-85b0-b49d20f4a1ed", "IntraSystemId": "b9f8aeeb-8e7f-49cf-a6c0-7a26da502101", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:43", "Id": "173da627-a39d-40fb-a417-6329b6162100", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "2c7ec731-86c9-44b6-9fb5-30d1a4b76972", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "44.233.55.40", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Paul.Morgan@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "2c7ec731-86c9-44b6-9fb5-30d1a4b76972", "Type": 0}, {"ID": "Paul.Morgan@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "44.233.55.40", "InterSystemsId": "919c2957-e10b-4f6c-ba01-243d4c3a8591", "IntraSystemId": "173da627-a39d-40fb-a417-6329b6162100", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:42", "Id": "5588e23a-8852-430f-8182-e7e0bc726f00", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "839ea01b-0d6e-4865-977a-fa0f8c6a059c", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.126.64", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Christopher.Collins@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "839ea01b-0d6e-4865-977a-fa0f8c6a059c", "Type": 0}, {"ID": "Christopher.Collins@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.126.64", "InterSystemsId": "eda76ba9-5cba-446d-8916-edc3b12a56a4", "IntraSystemId": "5588e23a-8852-430f-8182-e7e0bc726f00", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:41", "Id": "3b094f07-842e-49b6-a1f3-34e2fe8e1300", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "0d0b5d67-601c-4720-b10e-39df0c384b38", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.126.71", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Joseph.Phillips@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "0d0b5d67-601c-4720-b10e-39df0c384b38", "Type": 0}, {"ID": "Joseph.Phillips@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.126.71", "InterSystemsId": "19945f51-2b54-416e-9f15-61a0038a1785", "IntraSystemId": "3b094f07-842e-49b6-a1f3-34e2fe8e1300", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:41", "Id": "586c75d7-e59b-4ac0-989d-6a2d2d33a500", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "27e92fed-cd5a-423c-bc75-ae1760f3e5ca", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.92.26.38", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Robert.Turner@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "27e92fed-cd5a-423c-bc75-ae1760f3e5ca", "Type": 0}, {"ID": "Robert.Turner@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.92.26.38", "InterSystemsId": "7c1467f7-0fad-4415-b921-05849a4be6bd", "IntraSystemId": "586c75d7-e59b-4ac0-989d-6a2d2d33a500", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:40", "Id": "a4fbf42f-96f9-47aa-90c2-1bd52ca02d01", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "c1437ae2-bf45-4bdb-ac55-d8ecf522ee77", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.127.69", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Elizabeth.Walker@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "c1437ae2-bf45-4bdb-ac55-d8ecf522ee77", "Type": 0}, {"ID": "Elizabeth.Walker@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.127.69", "InterSystemsId": "76614770-9d56-4d66-b1c9-036b7b28c56c", "IntraSystemId": "a4fbf42f-96f9-47aa-90c2-1bd52ca02d01", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:40", "Id": "0a292c71-afd9-480f-8a69-a02b855d0101", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "4aa8d932-5741-423d-b113-8ce1b4ec239e", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "34.223.69.241", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Mary.Evans@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "4aa8d932-5741-423d-b113-8ce1b4ec239e", "Type": 0}, {"ID": "Mary.Evans@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "34.223.69.241", "InterSystemsId": "4b7a0189-05d6-4498-bf1b-5ea5b6967eb4", "IntraSystemId": "0a292c71-afd9-480f-8a69-a02b855d0101", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:39", "Id": "516a3af1-5fc2-4a90-add7-84dd8e941300", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "9b7aefaa-e2a0-4d2b-af12-a72def046809", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "44.233.54.40", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Sebastian.Lee@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "9b7aefaa-e2a0-4d2b-af12-a72def046809", "Type": 0}, {"ID": "Sebastian.Lee@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "44.233.54.40", "InterSystemsId": "d78044cd-c432-48f7-bc31-f12fdaa27bf4", "IntraSystemId": "516a3af1-5fc2-4a90-add7-84dd8e941300", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:38", "Id": "84cdb101-8fe8-4cca-a6c7-9380809f3001", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "91eb47d0-80d5-4e47-acbb-72a724b40442", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.127.47", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Emily.Lewis@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "91eb47d0-80d5-4e47-acbb-72a724b40442", "Type": 0}, {"ID": "Emily.Lewis@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.127.47", "InterSystemsId": "9223b5bc-45ba-4678-8a3f-074591e14caa", "IntraSystemId": "84cdb101-8fe8-4cca-a6c7-9380809f3001", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:38", "Id": "da32853a-961d-44be-b71a-a4410df25301", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "4e7c90ab-fd78-4193-9d4c-16f48d8fd82c", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.80", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Alexander.Rodriguez@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "4e7c90ab-fd78-4193-9d4c-16f48d8fd82c", "Type": 0}, {"ID": "Alexander.Rodriguez@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.80", "InterSystemsId": "ced84fe5-4f6f-42e1-8f17-c3869bb577c6", "IntraSystemId": "da32853a-961d-44be-b71a-a4410df25301", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:37", "Id": "7b6cef56-270d-4c93-bec9-b387a64e4301", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "7a8995be-8532-42a7-b6e9-a70dc1e88301", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.48", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Abigail.Clark@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "7a8995be-8532-42a7-b6e9-a70dc1e88301", "Type": 0}, {"ID": "Abigail.Clark@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.48", "InterSystemsId": "1124cd5b-adf5-49d1-8a70-f0e26de08f29", "IntraSystemId": "7b6cef56-270d-4c93-bec9-b387a64e4301", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:36", "Id": "9cb7ea18-2897-4dc3-b1e2-13c092769d00", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "c424913b-b0b8-42fc-b687-5f3a374f0ef2", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.33", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Logan.Robinson@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "c424913b-b0b8-42fc-b687-5f3a374f0ef2", "Type": 0}, {"ID": "Logan.Robinson@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.33", "InterSystemsId": "06adfcd5-e56d-46bc-9a6b-3fc3e55e6d8b", "IntraSystemId": "9cb7ea18-2897-4dc3-b1e2-13c092769d00", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:36", "Id": "19bc59eb-22f2-4b36-b61c-fb53e2737e00", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "fac51da5-4f4e-4f7d-a7ab-e3ba97143bca", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "44.233.55.57", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Evelyn.Martinez@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "fac51da5-4f4e-4f7d-a7ab-e3ba97143bca", "Type": 0}, {"ID": "Evelyn.Martinez@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "44.233.55.57", "InterSystemsId": "ff39e415-097d-4f91-b6c5-9a1c90a67f5c", "IntraSystemId": "19bc59eb-22f2-4b36-b61c-fb53e2737e00", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:35", "Id": "a77c3704-258d-4cb9-90d3-cc231f824001", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "f1a4a230-1a57-4d8b-9ef0-295b659cad6f", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.2", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Mason.Garcia@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "f1a4a230-1a57-4d8b-9ef0-295b659cad6f", "Type": 0}, {"ID": "Mason.Garcia@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.2", "InterSystemsId": "329cff4f-24bc-4cd1-822c-4457d5545d3e", "IntraSystemId": "a77c3704-258d-4cb9-90d3-cc231f824001", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:34", "Id": "0ae7b4c0-10c9-42f9-acc8-237402d27401", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "5c48d91c-0446-4c14-8417-61340252a403", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.90.133.240", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Lucas.Martin@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "5c48d91c-0446-4c14-8417-61340252a403", "Type": 0}, {"ID": "Lucas.Martin@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.90.133.240", "InterSystemsId": "83bfc5db-6e8c-4b63-a79c-583e846373fc", "IntraSystemId": "0ae7b4c0-10c9-42f9-acc8-237402d27401", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:34", "Id": "3930f5ae-34f4-4272-8c24-d0d8a5b28000", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "b04ac803-1f19-4f6c-a7f9-e29bd896a9cd", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.85", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Harper.Thompson@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "b04ac803-1f19-4f6c-a7f9-e29bd896a9cd", "Type": 0}, {"ID": "Harper.Thompson@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.85", "InterSystemsId": "d6bcc233-3cfc-4f1a-a363-4ddfc87fa73a", "IntraSystemId": "3930f5ae-34f4-4272-8c24-d0d8a5b28000", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:33", "Id": "da9770e7-6a2d-4651-8633-012ede872801", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "e7105e4f-dcca-4542-afb9-d7a619e9a363", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "44.233.54.196", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Amelia.Harris@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "e7105e4f-dcca-4542-afb9-d7a619e9a363", "Type": 0}, {"ID": "Amelia.Harris@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "44.233.54.196", "InterSystemsId": "f28df8a2-0acc-42b2-91f3-e59b44844041", "IntraSystemId": "da9770e7-6a2d-4651-8633-012ede872801", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:32", "Id": "001bfc28-dbaa-40c1-8835-bc110df1f400", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "90aa3998-7603-4a90-91bd-2185ed456afb", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.90.133.25", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Charlotte.Jackson@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "90aa3998-7603-4a90-91bd-2185ed456afb", "Type": 0}, {"ID": "Charlotte.Jackson@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.90.133.25", "InterSystemsId": "3b368197-4117-493f-94f5-17713e9e1ed2", "IntraSystemId": "001bfc28-dbaa-40c1-8835-bc110df1f400", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:32", "Id": "43885b4f-efcf-4e13-a7b8-1498c9cc7a00", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "b54d1d22-ce20-4f96-9be7-100733f5542c", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.90.133.30", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Elijah.White@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "b54d1d22-ce20-4f96-9be7-100733f5542c", "Type": 0}, {"ID": "Elijah.White@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.90.133.30", "InterSystemsId": "3cfc2357-1747-40ee-b00c-d4738485a3a2", "IntraSystemId": "43885b4f-efcf-4e13-a7b8-1498c9cc7a00", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:31", "Id": "001bfc28-dbaa-40c1-8835-bc11b5f0f400", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "bf54ec60-f302-4cc3-b1cb-ffc1850d9951", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "44.233.54.169", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Mia.Anderson@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "bf54ec60-f302-4cc3-b1cb-ffc1850d9951", "Type": 0}, {"ID": "Mia.Anderson@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "44.233.54.169", "InterSystemsId": "e124fea6-5fe0-4a41-9583-cfa8d57629b5", "IntraSystemId": "001bfc28-dbaa-40c1-8835-bc11b5f0f400", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:31", "Id": "001bfc28-dbaa-40c1-8835-bc11e5f0f400", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "e3afc101-d532-42eb-b689-d7914ded085a", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.127.129", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Benjamin.Thomas@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "e3afc101-d532-42eb-b689-d7914ded085a", "Type": 0}, {"ID": "Benjamin.Thomas@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.127.129", "InterSystemsId": "af64c7f8-b50c-4a88-87c7-59607184d4ef", "IntraSystemId": "001bfc28-dbaa-40c1-8835-bc11e5f0f400", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:30", "Id": "93a15966-b068-447d-8314-f3fa73614001", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "848da797-6aa9-4240-b49a-12f33b64c450", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "34.223.70.198", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Isabella.Moore@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "848da797-6aa9-4240-b49a-12f33b64c450", "Type": 0}, {"ID": "Isabella.Moore@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "34.223.70.198", "InterSystemsId": "9a16e260-5562-4833-b679-725444079d19", "IntraSystemId": "93a15966-b068-447d-8314-f3fa73614001", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:30", "Id": "aeab4064-d0d9-4fc7-8a2b-720eb98e3501", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "19836ec3-020b-4c3c-8951-4a44dce7d6a9", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.124.198", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Oliver.Taylor@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "19836ec3-020b-4c3c-8951-4a44dce7d6a9", "Type": 0}, {"ID": "Oliver.Taylor@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.124.198", "InterSystemsId": "56f18b4e-a3dc-4b22-8a1d-b88332046e4f", "IntraSystemId": "aeab4064-d0d9-4fc7-8a2b-720eb98e3501", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:29", "Id": "813c14dd-ba41-4dc8-8ad8-633aabe77a01", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "79e8e658-867f-41d6-966e-39fa9ed94609", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.2", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "James.Wilson@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "79e8e658-867f-41d6-966e-39fa9ed94609", "Type": 0}, {"ID": "James.Wilson@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.2", "InterSystemsId": "5b9f240f-3aef-4bb9-9ce2-343ee7ffe635", "IntraSystemId": "813c14dd-ba41-4dc8-8ad8-633aabe77a01", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:28", "Id": "981ef7af-f1f0-4889-ab94-3a14a6393201", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "0c7072ad-a51f-4321-a281-9eb0575638d5", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.105", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "William.Davis@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "0c7072ad-a51f-4321-a281-9eb0575638d5", "Type": 0}, {"ID": "William.Davis@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.105", "InterSystemsId": "af93fbf6-6222-45b7-8d95-12fb6264ffd7", "IntraSystemId": "981ef7af-f1f0-4889-ab94-3a14a6393201", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:28", "Id": "6f83d2cd-1be5-4c73-b496-fb111e896600", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "6a0b0b13-d395-4960-b73c-08f3ab76ea66", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "18.246.176.217", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Sophia.Miller@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "6a0b0b13-d395-4960-b73c-08f3ab76ea66", "Type": 0}, {"ID": "Sophia.Miller@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "18.246.176.217", "InterSystemsId": "fb5565f9-1f85-444a-80f2-69a6cbbcd81e", "IntraSystemId": "6f83d2cd-1be5-4c73-b496-fb111e896600", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:27", "Id": "e03a254c-12f7-4ee0-9a6e-0f2ff1b66e01", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "d8d8f231-cf8c-4fa8-b30c-3d1ebe87d468", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "34.223.70.18", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Noah.Jones@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "d8d8f231-cf8c-4fa8-b30c-3d1ebe87d468", "Type": 0}, {"ID": "Noah.Jones@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "34.223.70.18", "InterSystemsId": "bf3d6536-06b4-4850-9239-08da89a9f2ed", "IntraSystemId": "e03a254c-12f7-4ee0-9a6e-0f2ff1b66e01", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:27", "Id": "c0ef5eb8-13c6-44c5-972f-e3d161d97e00", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "6dac50a1-f179-4b5a-8a7b-bbe57c66d65d", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.90.132.190", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Ava.Brown@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "6dac50a1-f179-4b5a-8a7b-bbe57c66d65d", "Type": 0}, {"ID": "Ava.Brown@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.90.132.190", "InterSystemsId": "5e70d729-9ead-4bed-848f-445999162ffc", "IntraSystemId": "c0ef5eb8-13c6-44c5-972f-e3d161d97e00", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:26", "Id": "981ef7af-f1f0-4889-ab94-3a1422393201", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "f4b8f6d1-c347-4b9f-a7a4-5bc9fb5f61b8", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "34.223.69.193", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Olivia.Williams@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "f4b8f6d1-c347-4b9f-a7a4-5bc9fb5f61b8", "Type": 0}, {"ID": "Olivia.Williams@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "34.223.69.193", "InterSystemsId": "71fe4675-3916-440e-8295-3de8b6dfa2bb", "IntraSystemId": "981ef7af-f1f0-4889-ab94-3a1422393201", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:25", "Id": "7301052b-b465-4729-b3d4-82501f1d5801", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "8e8fde78-8682-49fd-a85d-66ed4d4e4140", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.127.13", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Liam.Johnson@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "8e8fde78-8682-49fd-a85d-66ed4d4e4140", "Type": 0}, {"ID": "Liam.Johnson@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.127.13", "InterSystemsId": "cf86aa91-58a9-4ce7-9edd-c328a5c528b2", "IntraSystemId": "7301052b-b465-4729-b3d4-82501f1d5801", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}
{"CreationTime": "2023-11-06T20:50:24", "Id": "3e9dd5bd-dbc9-401d-8d6a-67e910407900", "Operation": "UserLoginFailed", "OrganizationId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "RecordType": 15, "ResultStatus": "Failed", "UserKey": "6ea4f2c7-f168-468a-a618-043b1d11f777", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ClientIP": "35.93.124.137", "ObjectId": "00000002-0000-0000-c000-000000000000", "UserId": "Emma.Smith@splunkresearch.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "ResultStatusDetail", "Value": "UserError"}, {"Name": "UserAgent", "Value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.22621.2428"}, {"Name": "UserAuthenticationMethod", "Value": "1"}, {"Name": "RequestType", "Value": "OAuth2:Token"}], "ModifiedProperties": [], "Actor": [{"ID": "6ea4f2c7-f168-468a-a618-043b1d11f777", "Type": 0}, {"ID": "Emma.Smith@splunkresearch.onmicrosoft.com", "Type": 5}], "ActorContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ActorIpAddress": "35.93.124.137", "InterSystemsId": "f98b1cc8-ba27-44fd-b58e-a20f3453efe8", "IntraSystemId": "3e9dd5bd-dbc9-401d-8d6a-67e910407900", "SupportTicketId": "", "Target": [{"ID": "00000002-0000-0000-c000-000000000000", "Type": 0}], "TargetContextId": "75243ab2-44f8-435c-a7a6-b479385df6d4", "ApplicationId": "1b730954-1685-4b74-9bfd-dac224a7b894", "DeviceProperties": [{"Name": "OS", "Value": "Windows"}, {"Name": "BrowserType", "Value": "Other"}], "ErrorNumber": "50126", "LogonError": "InvalidUserNameOrPassword"}