{"num_message_attachments":2,"upload_error_category":null,"action_type":2,"subject":"test email","is_policy_check_for_sender":true,"destination":[{"smime_decryption_success":null,"smime_extraction_success":null,"smime_signature_verification_success":null,"address":"juan@external_test_email.com","service":"smtp-outbound","rcpt_response":null,"smime_parsing_success":null,"selector":"gmail-for-work"}],"smime_content_type":0,"description":null,"smime_encrypt_message":null,"smime_packaging_success":null,"source":{"address":"pedro@internal_test_email.com","from_header_address":"pedro@internal_test_email.com","service":"gmail-ui","from_header_displayname":"Pedro Test","selector":"send"},"spam_info":null,"message_set":[{"type":8},{"type":9},{"type":10},{"type":11},{"type":12},{"type":2}],"rfc2822_message_id":"<111111-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA@mail.gmail.com>","attachment":[{"sha256":"2222222222222222222222222222222222222222222222222222222222222222","malware_family":null,"file_extension_type":"ps1"},{"sha256":"1111111111111111111111111111111111111111111111111111111111111111","file_extension_type":"sh","malware_family":null}],"smtp_relay_error":null,"smime_sign_message":null,"timestamp":1.629214263407359E9,"is_spam":null,"smime_extraction_success":null,"structured_policy_log_info":null,"link_domain":[],"connection_info":{"smtp_out_remote_host":null,"smtp_response_reason":null,"is_internal":false,"failed_smtp_out_connect_ip":[],"ip_geo_city":null,"smtp_tls_cipher":null,"tls_required_but_unavailable":null,"smtp_tls_state":null,"authenticated_domain":[],"is_intra_domain":false,"dmarc_pass":null,"dkim_pass":false,"client_host_zone":null,"ip_geo_country":null,"smtp_user_agent_ip":null,"spf_pass":false,"dmarc_published_domain":null,"client_ip":"127.0.0.1","smtp_reply_code":0,"smtp_tls_version":null,"smtp_in_connect_ip":null,"smtp_out_connect_ip":null},"triggered_rule_info":[],"flattened_destinations":"smtp-outbound:gmail-for-work:juan@external_test_email.com","payload_size":800000}