{
    "events": [
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"652b339f-908c-a000-f25f-91423da7dd9b\",\"CreationTime\":\"2020-02-07T16:44:07\",\"EventSource\":\"SharePoint\",\"Id\":\"ec04aa09-0a43-4879-cdc8-08d7abecf327\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"4803608a-df7d-4f63-aa73-67aa33bb576e\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot 2020-01-27 at 11.30.48.png\",\"Operation\":\"FileDeleted\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot 2020-01-27 at 11.30.48.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "652b339f-908c-a000-f25f-91423da7dd9b",
                "CreationTime": "2020-02-07T16:44:07",
                "EventSource": "SharePoint",
                "Id": "ec04aa09-0a43-4879-cdc8-08d7abecf327",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "4803608a-df7d-4f63-aa73-67aa33bb576e",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot 2020-01-27 at 11.30.48.png",
                "Operation": "FileDeleted",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot 2020-01-27 at 11.30.48.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"652b339f-908c-a000-f25f-91423da7dd9b\",\"CreationTime\":\"2020-02-07T16:44:07\",\"EventSource\":\"SharePoint\",\"Id\":\"ec04aa09-0a43-4879-cdc8-08d7abecf327\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"4803608a-df7d-4f63-aa73-67aa33bb576e\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot 2020-01-27 at 11.30.48.png\",\"Operation\":\"FileDeleted\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot 2020-01-27 at 11.30.48.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "652b339f-908c-a000-f25f-91423da7dd9b",
                "CreationTime": "2020-02-07T16:44:07",
                "EventSource": "SharePoint",
                "Id": "ec04aa09-0a43-4879-cdc8-08d7abecf327",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "4803608a-df7d-4f63-aa73-67aa33bb576e",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot 2020-01-27 at 11.30.48.png",
                "Operation": "FileDeleted",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot 2020-01-27 at 11.30.48.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"652b339f-90a0-a000-f25f-919afc141eb1\",\"CreationTime\":\"2020-02-07T16:44:08\",\"EventSource\":\"SharePoint\",\"Id\":\"25b08f04-48ee-4755-ce22-08d7abecf3a9\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"ff3631c1-6189-45c7-ad45-c15cea9e9255\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Forms/All.aspx\",\"Operation\":\"FileAccessed\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"aspx\",\"SourceFileName\":\"All.aspx\",\"SourceRelativeUrl\":\"Documents/Forms\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "652b339f-90a0-a000-f25f-919afc141eb1",
                "CreationTime": "2020-02-07T16:44:08",
                "EventSource": "SharePoint",
                "Id": "25b08f04-48ee-4755-ce22-08d7abecf3a9",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "ff3631c1-6189-45c7-ad45-c15cea9e9255",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Forms/All.aspx",
                "Operation": "FileAccessed",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "aspx",
                "SourceFileName": "All.aspx",
                "SourceRelativeUrl": "Documents/Forms",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"652b339f-90a0-a000-f25f-919afc141eb1\",\"CreationTime\":\"2020-02-07T16:44:08\",\"EventSource\":\"SharePoint\",\"Id\":\"25b08f04-48ee-4755-ce22-08d7abecf3a9\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"ff3631c1-6189-45c7-ad45-c15cea9e9255\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Forms/All.aspx\",\"Operation\":\"FileAccessed\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"aspx\",\"SourceFileName\":\"All.aspx\",\"SourceRelativeUrl\":\"Documents/Forms\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "652b339f-90a0-a000-f25f-919afc141eb1",
                "CreationTime": "2020-02-07T16:44:08",
                "EventSource": "SharePoint",
                "Id": "25b08f04-48ee-4755-ce22-08d7abecf3a9",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "ff3631c1-6189-45c7-ad45-c15cea9e9255",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Forms/All.aspx",
                "Operation": "FileAccessed",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "aspx",
                "SourceFileName": "All.aspx",
                "SourceRelativeUrl": "Documents/Forms",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"692b339f-c016-a000-f25f-990a07b2e011\",\"CreationTime\":\"2020-02-07T16:44:21\",\"EventSource\":\"SharePoint\",\"Id\":\"dac93a9f-f2fb-4cac-d18f-08d7abecfbb6\",\"ImplicitShare\":\"No\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png\",\"Operation\":\"FileUploaded\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "692b339f-c016-a000-f25f-990a07b2e011",
                "CreationTime": "2020-02-07T16:44:21",
                "EventSource": "SharePoint",
                "Id": "dac93a9f-f2fb-4cac-d18f-08d7abecfbb6",
                "ImplicitShare": "No",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png",
                "Operation": "FileUploaded",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"692b339f-902e-a000-f25f-95def5f17903\",\"CreationTime\":\"2020-02-07T16:44:23\",\"EventSource\":\"SharePoint\",\"Id\":\"5b02fadb-8eac-4aff-af87-08d7abecfca3\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png\",\"Operation\":\"FileModified\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "692b339f-902e-a000-f25f-95def5f17903",
                "CreationTime": "2020-02-07T16:44:23",
                "EventSource": "SharePoint",
                "Id": "5b02fadb-8eac-4aff-af87-08d7abecfca3",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png",
                "Operation": "FileModified",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"652b339f-908c-a000-f25f-91423da7dd9b\",\"CreationTime\":\"2020-02-07T16:44:07\",\"EventSource\":\"SharePoint\",\"Id\":\"ec04aa09-0a43-4879-cdc8-08d7abecf327\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"4803608a-df7d-4f63-aa73-67aa33bb576e\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot 2020-01-27 at 11.30.48.png\",\"Operation\":\"FileDeleted\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot 2020-01-27 at 11.30.48.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "652b339f-908c-a000-f25f-91423da7dd9b",
                "CreationTime": "2020-02-07T16:44:07",
                "EventSource": "SharePoint",
                "Id": "ec04aa09-0a43-4879-cdc8-08d7abecf327",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "4803608a-df7d-4f63-aa73-67aa33bb576e",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot 2020-01-27 at 11.30.48.png",
                "Operation": "FileDeleted",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot 2020-01-27 at 11.30.48.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"692b339f-c016-a000-f25f-990a07b2e011\",\"CreationTime\":\"2020-02-07T16:44:21\",\"EventSource\":\"SharePoint\",\"Id\":\"dac93a9f-f2fb-4cac-d18f-08d7abecfbb6\",\"ImplicitShare\":\"No\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png\",\"Operation\":\"FileUploaded\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "692b339f-c016-a000-f25f-990a07b2e011",
                "CreationTime": "2020-02-07T16:44:21",
                "EventSource": "SharePoint",
                "Id": "dac93a9f-f2fb-4cac-d18f-08d7abecfbb6",
                "ImplicitShare": "No",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png",
                "Operation": "FileUploaded",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"692b339f-902e-a000-f25f-95def5f17903\",\"CreationTime\":\"2020-02-07T16:44:23\",\"EventSource\":\"SharePoint\",\"Id\":\"5b02fadb-8eac-4aff-af87-08d7abecfca3\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png\",\"Operation\":\"FileModified\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "692b339f-902e-a000-f25f-95def5f17903",
                "CreationTime": "2020-02-07T16:44:23",
                "EventSource": "SharePoint",
                "Id": "5b02fadb-8eac-4aff-af87-08d7abecfca3",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png",
                "Operation": "FileModified",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"692b339f-902e-a000-f25f-95def5f17903\",\"CreationTime\":\"2020-02-07T16:44:23\",\"EventSource\":\"SharePoint\",\"Id\":\"5b02fadb-8eac-4aff-af87-08d7abecfca3\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png\",\"Operation\":\"FileModified\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "692b339f-902e-a000-f25f-95def5f17903",
                "CreationTime": "2020-02-07T16:44:23",
                "EventSource": "SharePoint",
                "Id": "5b02fadb-8eac-4aff-af87-08d7abecfca3",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png",
                "Operation": "FileModified",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"ClientIP\":\"67.43.156.15\",\"CorrelationId\":\"692b339f-902e-a000-f25f-95def5f17903\",\"CreationTime\":\"2020-02-07T16:44:23\",\"EventSource\":\"SharePoint\",\"Id\":\"5b02fadb-8eac-4aff-af87-08d7abecfca3\",\"ItemType\":\"File\",\"ListId\":\"2b6ad2bd-0fd7-4556-9c89-a97847085b85\",\"ListItemUniqueId\":\"7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8\",\"ObjectId\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png\",\"Operation\":\"FileModified\",\"OrganizationId\":\"b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd\",\"RecordType\":\"6\",\"Site\":\"d5180cfc-3479-44d6-b410-8c985ac894e3\",\"SiteUrl\":\"https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/\",\"SourceFileExtension\":\"png\",\"SourceFileName\":\"Screenshot.png\",\"SourceRelativeUrl\":\"Documents\",\"UserAgent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0\",\"UserId\":\"asr@testsiem.onmicrosoft.com\",\"UserKey\":\"i:0h.f|membership|1003200096971f55@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"WebId\":\"8c5c94bb-8396-470c-87d7-8999f440cd30\",\"Workload\":\"OneDrive\"}"
            },
            "o365audit": {
                "ClientIP": "67.43.156.15",
                "CorrelationId": "692b339f-902e-a000-f25f-95def5f17903",
                "CreationTime": "2020-02-07T16:44:23",
                "EventSource": "SharePoint",
                "Id": "5b02fadb-8eac-4aff-af87-08d7abecfca3",
                "ItemType": "File",
                "ListId": "2b6ad2bd-0fd7-4556-9c89-a97847085b85",
                "ListItemUniqueId": "7f06ab3a-bd98-41d3-a0b2-ad270d71e4d8",
                "ObjectId": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/Documents/Screenshot.png",
                "Operation": "FileModified",
                "OrganizationId": "b86ab9d4-fcf1-4b11-8a06-7a8f91b47fbd",
                "RecordType": "6",
                "Site": "d5180cfc-3479-44d6-b410-8c985ac894e3",
                "SiteUrl": "https://testsiem-my.sharepoint.com/personal/asr_testsiem_onmicrosoft_com/",
                "SourceFileExtension": "png",
                "SourceFileName": "Screenshot.png",
                "SourceRelativeUrl": "Documents",
                "UserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0",
                "UserId": "asr@testsiem.onmicrosoft.com",
                "UserKey": "i:0h.f|membership|1003200096971f55@live.com",
                "UserType": "0",
                "Version": "1",
                "WebId": "8c5c94bb-8396-470c-87d7-8999f440cd30",
                "Workload": "OneDrive"
            }
        },
        {
            "event": {
                "original": "{\"CreationTime\":\"2023-01-30T07:39:56\",\"Id\":\"xxxxxxxxx-832d-4e6a-868b-yyyyyyyyyyyyy\",\"Operation\":\"SecureLinkUsed\",\"OrganizationId\":\"xxxxxxxxxxx-9e16-4286-9a69-yyyyyyyyyy\",\"RecordType\":\"14\",\"UserKey\":\"i:0h.f|membership|xxxxxxxxxc@live.com\",\"UserType\":\"0\",\"Version\":\"1\",\"Workload\":\"SharePoint\",\"ClientIP\":\"67.43.156.15\",\"ObjectId\":\"https://dummydomain.sharepoint.com/sites/msteams_067dce/Shared Documents/General/Trainings/Train The Trainer (TTT)/Day 1 - CSRDesktop/HL Agenda.pdf\",\"UserId\":\"user@dummydomain.com\",\"CorrelationId\":\"xxxxxxx-e021-6000-1d2d-yyyyyyyy\",\"EventSource\":\"SharePoint\",\"ItemType\":\"File\",\"ListId\":\"xxxxxxxxxx-e1db-4a04-ab81-zzzzzzzzzzz\",\"ListItemUniqueId\":\"zzzzzzzz-1872-4e5c-8db1-yyyyyyyyyyyy\",\"Site\":\"xxxxxxxxxxx-6723-456f-994c-yyyyyyyyyyy\",\"UserAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.70\",\"WebId\":\"xxxxxxxxxxxxx-d881-418c-89dd-yyyyyyyy\",\"SourceFileExtension\":\"pdf\",\"SiteUrl\":\"https://dummydomain.sharepoint.com/sites/msteams_067dce\",\"SourceFileName\":\"HL Agenda.pdf\",\"SourceRelativeUrl\":\"Shared Documents/General/Trainings/Train The Trainer (TTT)/Day 1 - CSRDesktop/HL Agenda.pdf\"}"
            },
            "o365audit": {
                "CreationTime": "2023-01-30T07:39:56",
                "Id": "xxxxxxxxx-832d-4e6a-868b-yyyyyyyyyyyyy",
                "Operation": "SecureLinkUsed",
                "OrganizationId": "xxxxxxxxxxx-9e16-4286-9a69-yyyyyyyyyy",
                "RecordType": "14",
                "UserKey": "i:0h.f|membership|xxxxxxxxxc@live.com",
                "UserType": "0",
                "Version": "1",
                "Workload": "SharePoint",
                "ClientIP": "67.43.156.15",
                "ObjectId": "https://dummydomain.sharepoint.com/sites/msteams_067dce/Shared Documents/General/Trainings/Train The Trainer (TTT)/Day 1 - CSRDesktop/HL Agenda.pdf",
                "UserId": "user@dummydomain.com",
                "CorrelationId": "xxxxxxx-e021-6000-1d2d-yyyyyyyy",
                "EventSource": "SharePoint",
                "ItemType": "File",
                "ListId": "xxxxxxxxxx-e1db-4a04-ab81-zzzzzzzzzzz",
                "ListItemUniqueId": "zzzzzzzz-1872-4e5c-8db1-yyyyyyyyyyyy",
                "Site": "xxxxxxxxxxx-6723-456f-994c-yyyyyyyyyyy",
                "UserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Edg/109.0.1518.70",
                "WebId": "xxxxxxxxxxxxx-d881-418c-89dd-yyyyyyyy",
                "SourceFileExtension": "pdf",
                "SiteUrl": "https://dummydomain.sharepoint.com/sites/msteams_067dce",
                "SourceFileName": "HL Agenda.pdf",
                "SourceRelativeUrl": "Shared Documents/General/Trainings/Train The Trainer (TTT)/Day 1 - CSRDesktop/HL Agenda.pdf"
            }
        }
    ]
}