{"body":{"time": "2022-09-01T20:32:31.2508421Z", "resourceId": "/tenants/8497b40a-61d2-4be1-80c3-2d46e5443116/providers/Microsoft.aadiam", "operationName": "Add unverified domain", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "8497b40a-61d2-4be1-80c3-2d46e5443116", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "70.0.0.1", "correlationId": "7bf958ad-582d-48a3-b00d-4289711c2172", "Level": 4, "properties": {"id": "Directory_7bf958ad-582d-48a3-b00d-4289711c2172_0PND2_43275872", "category": "DirectoryManagement", "correlationId": "7bf958ad-582d-48a3-b00d-4289711c2172", "result": "success", "resultReason": "", "activityDisplayName": "Add unverified domain", "activityDateTime": "2022-09-01T20:32:31.2508421+00:00", "loggedByService": "Core Directory", "operationType": "Add", "userAgent": null, "initiatedBy": {"user": {"id": "db2cc61b-9805-4bdd-ab26-f27db9b22f95", "displayName": null, "userPrincipalName": "azureadmin@contoso.onmicrosoft.com", "ipAddress": "70.0.0.1", "roles": []}}, "targetResources": [{"id": null, "displayName": "evil.splunkresearch.com", "modifiedProperties": [{"displayName": "Name", "oldValue": "[\"\"]", "newValue": "[\"evil.splunkresearch.com\"]"}, {"displayName": "LiveType", "oldValue": "[\"None\"]", "newValue": "[\"Managed\"]"}, {"displayName": "Included Updated Properties", "oldValue": null, "newValue": "\"Name,LiveType\""}], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"}]}},"x-opt-sequence-number":4071,"x-opt-offset":"34361602560","x-opt-enqueued-time":1662064676124}
{"body":{"time": "2022-09-01T20:35:10.3408416Z", "resourceId": "/tenants/8497b40a-61d2-4be1-80c3-2d46e5443116/providers/Microsoft.aadiam", "operationName": "Verify domain", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "8497b40a-61d2-4be1-80c3-2d46e5443116", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "52.177.250.168", "correlationId": "3ce5e288-0533-456d-a012-4b8cbee7e07e", "Level": 4, "properties": {"id": "Directory_3ce5e288-0533-456d-a012-4b8cbee7e07e_HUYU9_41173116", "category": "DirectoryManagement", "correlationId": "3ce5e288-0533-456d-a012-4b8cbee7e07e", "result": "success", "resultReason": "", "activityDisplayName": "Verify domain", "activityDateTime": "2022-09-01T20:35:10.3408416+00:00", "loggedByService": "Core Directory", "operationType": "Update", "userAgent": null, "initiatedBy": {"user": {"id": "db2cc61b-9805-4bdd-ab26-f27db9b22f95", "displayName": null, "userPrincipalName": "azureadmin@contoso.onmicrosoft.com", "ipAddress": "52.177.250.168", "roles": []}}, "targetResources": [{"id": null, "displayName": "evil.splunkresearch.com", "modifiedProperties": [], "administrativeUnits": []}], "additionalDetails": []}},"x-opt-sequence-number":4072,"x-opt-offset":"34361604184","x-opt-enqueued-time":1662064757374}
{"body":{"time": "2022-09-01T20:36:34.3590273Z", "resourceId": "/tenants/8497b40a-61d2-4be1-80c3-2d46e5443116/providers/Microsoft.aadiam", "operationName": "Set domain authentication", "operationVersion": "1.0", "category": "AuditLogs", "tenantId": "8497b40a-61d2-4be1-80c3-2d46e5443116", "resultSignature": "None", "durationMs": 0, "callerIpAddress": "70.0.0.1", "correlationId": "e8e90bb5-14a1-4f33-8c42-4e470f6db218", "Level": 4, "properties": {"id": "Directory_e8e90bb5-14a1-4f33-8c42-4e470f6db218_TJOYK_20876994", "category": "DirectoryManagement", "correlationId": "e8e90bb5-14a1-4f33-8c42-4e470f6db218", "result": "success", "resultReason": "", "activityDisplayName": "Set domain authentication", "activityDateTime": "2022-09-01T20:36:34.3590273+00:00", "loggedByService": "Core Directory", "operationType": "Update", "userAgent": null, "initiatedBy": {"user": {"id": "db2cc61b-9805-4bdd-ab26-f27db9b22f95", "displayName": null, "userPrincipalName": "azureadmin@contoso.onmicrosoft.com", "ipAddress": "70.0.0.1", "roles": []}}, "targetResources": [{"id": null, "displayName": "evil.splunkresearch.com", "modifiedProperties": [{"displayName": "IssuerUri", "oldValue": "[]", "newValue": "[\"http://any.sts/AFF8AE3F\"]"}, {"displayName": "Included Updated Properties", "oldValue": null, "newValue": "\"IssuerUri,LiveType\""}, {"displayName": "LiveType", "oldValue": "[\"Managed\"]", "newValue": "[\"Federated\"]"}], "administrativeUnits": []}], "additionalDetails": [{"key": "User-Agent", "value": "Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.14393.4402"}]}},"x-opt-sequence-number":4073,"x-opt-offset":"34361605392","x-opt-enqueued-time":1662064854388}