{"CreationTime": "2023-10-11T16:50:44", "Id": "5209d852-ba11-4ed5-8a7f-e96e0901718e", "Operation": "Consent to application.", "OrganizationId": "1a837aa2-b38c-4c7a-84fe-b831335c17e5", "RecordType": 8, "ResultStatus": "Failure", "UserKey": "10032002CC029AE9@contoso.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "Application_c3aa78b0-3046-44bf-b7fe-6d7cba3e5c4a", "UserId": "mauricio@contoso.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"EvoSTS\",\"AppId\":\"d47d9dee-7d6f-4f2d-942a-4266b23eeb3e\"}"}, {"Name": "extendedAuditEventCategory", "Value": "ServicePrincipal"}], "ModifiedProperties": [{"Name": "ConsentContext.IsAdminConsent", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.IsAppOnly", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.OnBehalfOfAll", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.Tags", "NewValue": "WindowsAzureActiveDirectoryIntegratedApp", "OldValue": ""}, {"Name": "ConsentAction.Permissions", "NewValue": "[] => [[Id: AAAAAAAAAAAAAAAAAAAAALSZcc5Sj_NGtUtP2B3pYeI2veRXIpdKSpcpcgPY4Aty, ClientId: 00000000-0000-0000-0000-000000000000, PrincipalId: 57e4bd36-9722-4a4a-9729-7203d8e00b72, ResourceId: ce7199b4-8f52-46f3-b54b-4fd81de961e2, ConsentType: Principal, Scope: Mail.Read User.Read Mail.Send Contacts.Read, CreatedDateTime: , LastModifiedDateTime ]]; ", "OldValue": ""}, {"Name": "ConsentAction.Reason", "NewValue": "Risky application detected", "OldValue": ""}, {"Name": "MethodExecutionResult.", "NewValue": "Microsoft.Online.Security.UserConsentBlockedForRiskyAppsException", "OldValue": ""}], "Actor": [{"ID": "mauricio@contoso.onmicrosoft.com", "Type": 5}, {"ID": "10032002CC029AE9", "Type": 3}, {"ID": "User_57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "1a837aa2-b38c-4c7a-84fe-b831335c17e5", "InterSystemsId": "c12e7f68-a5ea-4e05-982a-358b28e7e76e", "IntraSystemId": "0a9e300e-81ce-4a35-bc61-392d5612bd0d", "SupportTicketId": "", "Target": [{"ID": "Application_c3aa78b0-3046-44bf-b7fe-6d7cba3e5c4a", "Type": 2}, {"ID": "c3aa78b0-3046-44bf-b7fe-6d7cba3e5c4a", "Type": 2}, {"ID": "Application", "Type": 2}, {"ID": "Super Legit", "Type": 1}, {"ID": "d47d9dee-7d6f-4f2d-942a-4266b23eeb3e", "Type": 2}], "TargetContextId": "1a837aa2-b38c-4c7a-84fe-b831335c17e5"}
{"CreationTime": "2023-10-11T16:49:26", "Id": "275c5039-0d5e-4345-b8d1-5e4067c56650", "Operation": "Consent to application.", "OrganizationId": "1a837aa2-b38c-4c7a-84fe-b831335c17e5", "RecordType": 8, "ResultStatus": "Failure", "UserKey": "10032002CC029AE9@contoso.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "Application_c3aa78b0-3046-44bf-b7fe-6d7cba3e5c4a", "UserId": "mauricio@contoso.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"EvoSTS\",\"AppId\":\"d47d9dee-7d6f-4f2d-942a-4266b23eeb3e\"}"}, {"Name": "extendedAuditEventCategory", "Value": "ServicePrincipal"}], "ModifiedProperties": [{"Name": "ConsentContext.IsAdminConsent", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.IsAppOnly", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.OnBehalfOfAll", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.Tags", "NewValue": "WindowsAzureActiveDirectoryIntegratedApp", "OldValue": ""}, {"Name": "ConsentAction.Permissions", "NewValue": "[] => [[Id: AAAAAAAAAAAAAAAAAAAAALSZcc5Sj_NGtUtP2B3pYeI2veRXIpdKSpcpcgPY4Aty, ClientId: 00000000-0000-0000-0000-000000000000, PrincipalId: 57e4bd36-9722-4a4a-9729-7203d8e00b72, ResourceId: ce7199b4-8f52-46f3-b54b-4fd81de961e2, ConsentType: Principal, Scope: Mail.Read User.Read Mail.Send Contacts.Read, CreatedDateTime: , LastModifiedDateTime ]]; ", "OldValue": ""}, {"Name": "ConsentAction.Reason", "NewValue": "Risky application detected", "OldValue": ""}, {"Name": "MethodExecutionResult.", "NewValue": "Microsoft.Online.Security.UserConsentBlockedForRiskyAppsException", "OldValue": ""}], "Actor": [{"ID": "mauricio@contoso.onmicrosoft.com", "Type": 5}, {"ID": "10032002CC029AE9", "Type": 3}, {"ID": "User_57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "1a837aa2-b38c-4c7a-84fe-b831335c17e5", "InterSystemsId": "4b0fd338-67c6-48f5-8d70-75de34b54ed4", "IntraSystemId": "8611abed-f760-4ec4-b767-df1ed3cf97ea", "SupportTicketId": "", "Target": [{"ID": "Application_c3aa78b0-3046-44bf-b7fe-6d7cba3e5c4a", "Type": 2}, {"ID": "c3aa78b0-3046-44bf-b7fe-6d7cba3e5c4a", "Type": 2}, {"ID": "Application", "Type": 2}, {"ID": "Super Legit", "Type": 1}, {"ID": "d47d9dee-7d6f-4f2d-942a-4266b23eeb3e", "Type": 2}], "TargetContextId": "1a837aa2-b38c-4c7a-84fe-b831335c17e5"}