{"CreationTime": "2023-10-11T18:36:39", "Id": "dde2c8ae-414f-4e03-8ba5-7437c4357b0d", "Operation": "Consent to application.", "OrganizationId": "3d0239ee-fe8a-43bd-b468-2da15bafd4cd", "RecordType": 8, "ResultStatus": "Success", "UserKey": "10032002CC029AE9@contoso.onmicrosoft.com", "UserType": 0, "Version": 1, "Workload": "AzureActiveDirectory", "ObjectId": "d47d9dee-7d6f-4f2d-942a-4266b23eeb3e", "UserId": "victimuser@contoso.onmicrosoft.com", "AzureActiveDirectoryEventType": 1, "ExtendedProperties": [{"Name": "additionalDetails", "Value": "{\"User-Agent\":\"EvoSTS\",\"AppId\":\"d47d9dee-7d6f-4f2d-942a-4266b23eeb3e\"}"}, {"Name": "extendedAuditEventCategory", "Value": "ServicePrincipal"}], "ModifiedProperties": [{"Name": "ConsentContext.IsAdminConsent", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.IsAppOnly", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.OnBehalfOfAll", "NewValue": "False", "OldValue": ""}, {"Name": "ConsentContext.Tags", "NewValue": "WindowsAzureActiveDirectoryIntegratedApp", "OldValue": ""}, {"Name": "ConsentAction.Permissions", "NewValue": "[] => [[Id: AAAAAAAAAAAAAAAAAAAAALSZcc5Sj_NGtUtP2B3pYeI2veRXIpdKSpcpcgPY4Aty, ClientId: 00000000-0000-0000-0000-000000000000, PrincipalId: 57e4bd36-9722-4a4a-9729-7203d8e00b72, ResourceId: ce7199b4-8f52-46f3-b54b-4fd81de961e2, ConsentType: Principal, Scope: Mail.Read User.Read Mail.Send Contacts.Read, CreatedDateTime: , LastModifiedDateTime ]]; ", "OldValue": ""}, {"Name": "TargetId.ServicePrincipalNames", "NewValue": "d47d9dee-7d6f-4f2d-942a-4266b23eeb3e", "OldValue": ""}], "Actor": [{"ID": "victimuser@contoso.onmicrosoft.com", "Type": 5}, {"ID": "10032002CC029AE9", "Type": 3}, {"ID": "User_57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "57e4bd36-9722-4a4a-9729-7203d8e00b72", "Type": 2}, {"ID": "User", "Type": 2}], "ActorContextId": "a417c578-c7ee-480d-a225-d48057e74df5", "InterSystemsId": "32d99242-9c0a-4bf2-a55a-0ebbad8e0d78", "IntraSystemId": "4f4cf33f-dcce-47ed-8b60-4d0180a27bd6", "SupportTicketId": "", "Target": [{"ID": "ServicePrincipal_55263b71-2fe5-40b6-abce-6ea01101ccf1", "Type": 2}, {"ID": "55263b71-2fe5-40b6-abce-6ea01101ccf1", "Type": 2}, {"ID": "ServicePrincipal", "Type": 2}, {"ID": "Super Legit", "Type": 1}, {"ID": "d47d9dee-7d6f-4f2d-942a-4266b23eeb3e", "Type": 2}, {"ID": "d47d9dee-7d6f-4f2d-942a-4266b23eeb3e", "Type": 4}], "TargetContextId": "a417c578-c7ee-480d-a225-d48057e74df5"}