{"CreationTime": "2023-10-18T20:28:48", "Id": "38aa106b-a4a5-4c47-93a1-e8d35c149f37", "Operation": "Consent to application.", "OrganizationId": "29b345e7-26bd-432b-9470-7d6b5f59113e", "RecordType": 8, "ResultStatus": "Success", "UserKey": "10032002CC029AE9@contoso.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "7693eab0-dc8b-48ad-9721-cebaf79c828a", "UserId": "victim@contoso.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"EvoSTS\",\"AppId\":\"7693eab0-dc8b-48ad-9721-cebaf79c828a\"}"}, {"Name": "extendedAuditEventCategory", "Value": "ServicePrincipal"}], "ModifiedProperties": [{"Name": "ConsentContext.IsAdminConsent", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.IsAppOnly", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.OnBehalfOfAll", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.Tags", "NewValue": "WindowsAzureActiveDirectoryIntegratedApp", "OldValue": ""}, {"Name": "ConsentAction.Permissions", "NewValue": "[] => [[Id: AAAAAAAAAAAAAAAAAAAAALSZcc5Sj_NGtUtP2B3pYeI2veRXIpdKSpcpcgPY4Aty, ClientId: 00000000-0000-0000-0000-000000000000, PrincipalId: 57e4bd36-9722-4a4a-9729-7203d8e00b72, ResourceId: ce7199b4-8f52-46f3-b54b-4fd81de961e2, ConsentType: Principal, Scope: Files.Read Files.Read.All Files.Read.Selected Files.ReadWrite Files.ReadWrite.All Files.ReadWrite.AppFolder Files.ReadWrite.Selected User.Read, CreatedDateTime: , LastModifiedDateTime ]]; ", "OldValue": ""}, {"Name": "TargetId.ServicePrincipalNames", "NewValue": "7693eab0-dc8b-48ad-9721-cebaf79c828a", "OldValue": ""}], "Actor": [{"ID": "victim@contoso.onmicrosoft.com", "Type": 5}, {"ID": "10032002CC029AE9", "Type": 3}, {"ID": "User_57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "29b345e7-26bd-432b-9470-7d6b5f59113e", "InterSystemsId": "4ccb846d-e346-4bd7-ab5e-eb3c3dbd8cd9", "IntraSystemId": "69d3c4db-4723-49d2-981d-38238c3d95ec", "SupportTicketId": "", "Target": [{"ID": "ServicePrincipal_49f7c1e3-ef0f-469f-b813-3913d41d653c", "Type": 2}, {"ID": "49f7c1e3-ef0f-469f-b813-3913d41d653c", "Type": 2}, {"ID": "ServicePrincipal", "Type": 2}, {"ID": "Bad App", "Type": 1}, {"ID": "7693eab0-dc8b-48ad-9721-cebaf79c828a", "Type": 2}, {"ID": "7693eab0-dc8b-48ad-9721-cebaf79c828a", "Type": 4}], "TargetContextId": "29b345e7-26bd-432b-9470-7d6b5f59113e"}