From ee5011ea1bc24cbe8207263ee066afb4dc8d725e Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 10:21:23 -0700 Subject: [PATCH 01/14] Test ingestion workflow --- .../runAsimSchemaAndDataTesters.yaml | 25 +- .../asimParsersTest/ingestASimSampleData.py | 75 +++--- .../Parsers/ASimAuthentication.yaml | 4 +- .../ASimAuthenticationCynerioTest.yaml | 147 ++++++++++++ .../Parsers/imAuthentication.yaml | 6 +- .../Parsers/vimAuthenticationCynerioTest.yaml | 216 ++++++++++++++++++ 6 files changed, 422 insertions(+), 51 deletions(-) create mode 100644 Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml create mode 100644 Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml diff --git a/.github/workflows/runAsimSchemaAndDataTesters.yaml b/.github/workflows/runAsimSchemaAndDataTesters.yaml index ff6b5cc3e26..a38ad2633a7 100644 --- a/.github/workflows/runAsimSchemaAndDataTesters.yaml +++ b/.github/workflows/runAsimSchemaAndDataTesters.yaml @@ -2,7 +2,9 @@ # The script runs ASIM Schema and Data testers on the "eco-connector-test" workspace. name: Run ASIM tests on "ASIM-SchemaDataTester-GithubShared" workspace on: - pull_request_target: + pull_request: + # Uncomment back when done testing + # pull_request_target: types: [labeled, synchronize] branches: - master @@ -386,17 +388,18 @@ jobs: id: Ingestlogs run: | filePath=".script/tests/asimParsersTest/ingestASimSampleData.py" - url="https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/.script/tests/asimParsersTest/ingestASimSampleData.py" - # Check if file exists and delete if it does - if [ -f "$filePath" ]; then - rm -f "$filePath" - fi - # Download the file - echo "Downloading script from the master: $url" - curl -o "$filePath" "$url" - chmod +x "$filePath" + # Uncomment back when test is done + # url="https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/.script/tests/asimParsersTest/ingestASimSampleData.py" + # # Check if file exists and delete if it does + # if [ -f "$filePath" ]; then + # rm -f "$filePath" + # fi + # # Download the file + # echo "Downloading script from the master: $url" + # curl -o "$filePath" "$url" + # chmod +x "$filePath" # Execute the script - python "$filePath" "${{ github.event.pull_request.number }}" + python "$filePath" Run-ASim-Schema-Data-tests: needs: Run-ASim-Sample-Data-Ingest name: Run ASim Schema and Data tests diff --git a/.script/tests/asimParsersTest/ingestASimSampleData.py b/.script/tests/asimParsersTest/ingestASimSampleData.py index eabc6e41950..b3107eece13 100644 --- a/.script/tests/asimParsersTest/ingestASimSampleData.py +++ b/.script/tests/asimParsersTest/ingestASimSampleData.py @@ -1,3 +1,16 @@ +# ingestASimSampleData.py +# +# This script ingests ASIM parser sample data into a Log Analytics workspace for testing. +# +# It expects the Azure-Sentinel repo to be checked out locally and works as follows: +# 1. Detects modified ASIM parser YAML files by comparing the current branch against upstream/master. +# 2. Reads each parser YAML from the local repo to extract schema, vendor, and product info. +# 3. Loads the corresponding sample data and schema CSV files from "Sample Data/ASIM/". +# 4. For custom log tables: creates the table and a Data Collection Rule (DCR), then ingests data. +# 5. For built-in tables: creates a DCR (handling GUID column mismatches) and ingests data. +# +# Usage: python ingestASimSampleData.py + import sys import os @@ -36,21 +49,6 @@ def get_modified_files(current_directory): print(f"::error::Error occurred while executing the command: {e}") return [] -def get_current_commit_number(): - cmd = "git rev-parse HEAD" - try: - return subprocess.check_output(cmd, shell=True, text=True).strip() - except subprocess.CalledProcessError as e: - print(f"::error::Error occurred while executing the command: {e}") - return None - -def read_github_yaml(url): - try: - response = requests.get(url) - except Exception as e: - print(f"::error::An error occurred while trying to get content of YAML file located at {url}: {e}") - return yaml.safe_load(response.text) if response.status_code == 200 else None - def filter_yaml_files(modified_files): # Take only the YAML files return [line for line in modified_files if line.endswith('.yaml')] @@ -313,8 +311,6 @@ def convert_data_type(schema_result, data_result): subscriptionId = "419581d6-4853-49bd-83b6-d94bb8a77887" dataCollectionEndpointname = "ASIM-SchemaDataTester-GithubShared-Canary" endpoint_uri = "https://asim-schemadatatester-githubshared-canary-qa1f.eastus2euap-1.canary.ingest.monitor.azure.com" # logs ingestion endpoint of the DCR -SENTINEL_REPO_RAW_URL = f'https://raw.githubusercontent.com/Azure/Azure-Sentinel' -SAMPLE_DATA_PATH = 'Sample%20Data/ASIM/' dcr_directory=[] lia_supported_builtin_table = ['ADAssessmentRecommendation','ADSecurityAssessmentRecommendation','Anomalies','ASimAuditEventLogs','ASimAuthenticationEventLogs','ASimDhcpEventLogs','ASimDnsActivityLogs','ASimDnsAuditLogs','ASimFileEventLogs','ASimNetworkSessionLogs','ASimProcessEventLogs','ASimRegistryEventLogs','ASimUserManagementActivityLogs','ASimWebSessionLogs','AWSCloudTrail','AWSCloudWatch','AWSGuardDuty','AWSVPCFlow','AzureAssessmentRecommendation','CommonSecurityLog','DeviceTvmSecureConfigurationAssessmentKB','DeviceTvmSoftwareVulnerabilitiesKB','ExchangeAssessmentRecommendation','ExchangeOnlineAssessmentRecommendation','GCPAuditLogs','GoogleCloudSCC','SCCMAssessmentRecommendation','SCOMAssessmentRecommendation','SecurityEvent','SfBAssessmentRecommendation','SharePointOnlineAssessmentRecommendation','SQLAssessmentRecommendation','StorageInsightsAccountPropertiesDaily','StorageInsightsDailyMetrics','StorageInsightsHourlyMetrics','StorageInsightsMonthlyMetrics','StorageInsightsWeeklyMetrics','Syslog','UCClient','UCClientReadinessStatus','UCClientUpdateStatus','UCDeviceAlert','UCDOAggregatedStatus','UCServiceUpdateStatus','UCUpdateAlert','WindowsEvent','WindowsServerAssessmentRecommendation','NTANetAnalytics', 'AZFWNetworkRule', 'AZFWNatRule', 'AZFWApplicationRule', 'AZFWDnsQuery', 'AZFWIdspSignature', 'AZFWThreatIntel'] @@ -326,7 +322,6 @@ def convert_data_type(schema_result, data_result): parser_yaml_files = filter_yaml_files(modified_files) -commit_number = get_current_commit_number() prnumber = sys.argv[1] for file in parser_yaml_files: @@ -340,9 +335,15 @@ def convert_data_type(schema_result, data_result): print(f"Ignoring this {file} because it is a union or empty parser file") continue print(f"Starting ingestion for sample data present in {file}") - asim_parser_url = f'{SENTINEL_REPO_RAW_URL}/{commit_number}/{file}' - print(f"Reading Asim Parser file from : {asim_parser_url}") - asim_parser = read_github_yaml(asim_parser_url) + repo_root = os.path.abspath(os.path.join(current_directory, '..', '..', '..')) + asim_parser_path = os.path.join(repo_root, file) + print(f"Reading Asim Parser file from local path: {asim_parser_path}") + try: + with open(asim_parser_path, 'r', encoding='utf-8') as f: + asim_parser = yaml.safe_load(f.read()) + except Exception as e: + print(f"::error::An error occurred while trying to read YAML file at {asim_parser_path}: {e}") + continue parser_query = asim_parser.get('ParserQuery', '') normalization = asim_parser.get('Normalization', {}) schema = normalization.get('Schema') @@ -350,15 +351,15 @@ def convert_data_type(schema_result, data_result): event_vendor, event_product, schema_name = extract_event_vendor_product(parser_query, file) SampleDataFile = f'{event_vendor}_{event_product}_{schema}_IngestedLogs.csv' - sample_data_url = f'{SENTINEL_REPO_RAW_URL}/{commit_number}/{SAMPLE_DATA_PATH}' - SampleDataUrl = sample_data_url+SampleDataFile - print(f"Sample data log file reading from url: {SampleDataUrl}") - response = requests.get(SampleDataUrl) - if response.status_code == 200: - with open('tempfile.csv', 'wb') as file: - file.write(response.content) - else: - print(f"::error::An error occurred while trying to get content of Sample Data file located at {SampleDataUrl}: {response.text}") + sample_data_dir = os.path.join(repo_root, 'Sample Data', 'ASIM') + sample_data_path = os.path.join(sample_data_dir, SampleDataFile) + print(f"Sample data log file reading from local path: {sample_data_path}") + try: + with open(sample_data_path, 'rb') as f: + with open('tempfile.csv', 'wb') as file: + file.write(f.read()) + except Exception as e: + print(f"::error::An error occurred while trying to read Sample Data file at {sample_data_path}: {e}") continue data_result,table_name = convert_data_csv_to_json('tempfile.csv') print(f"Table Name : {table_name}") @@ -367,13 +368,13 @@ def convert_data_type(schema_result, data_result): if log_ingestion_supported == True and table_type =="custom_log": flag=0 #flag value is used to check if DCR is created for the table or not schema_file_name = f"{table_name}_Schema.csv" - schemaUrl = sample_data_url+schema_file_name - response = requests.get(schemaUrl) - if response.status_code == 200: - with open('tempfile.csv', 'wb') as file: - file.write(response.content) - else: - print(f"::error::An error occurred while trying to get content of Schema file located at {schemaUrl}: {response.text}") + schema_path = os.path.join(sample_data_dir, schema_file_name) + try: + with open(schema_path, 'rb') as f: + with open('tempfile.csv', 'wb') as file: + file.write(f.read()) + except Exception as e: + print(f"::error::An error occurred while trying to read Schema file at {schema_path}: {e}") continue schema_result = convert_schema_csv_to_json('tempfile.csv') data_result = convert_data_type(schema_result, data_result) diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml index 9abd7c0c154..5cb060e8583 100644 --- a/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml +++ b/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml @@ -61,7 +61,8 @@ ParserQuery: | ASimAuthenticationNative (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationNative' in (DisabledParsers) )), ASimAuthenticationPaloAltoPanOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoPanOS' in (DisabledParsers) ), pack=pack), ASimAuthenticationPaloAltoGlobalProtect (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) ), pack=pack), - ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack) + ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack), + ASimAuthenticationCynerioCynerio (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCynerioCynerio' in (DisabledParsers)), pack=pack) Parsers: - _Im_Authentication_Empty - _ASim_Authentication_AADManagedIdentitySignInLogs @@ -102,3 +103,4 @@ Parsers: - _ASim_Authentication_Native - _ASim_Authentication_VMwareESXi - _ASim_Authentication_PaloAltoGlobalProtect + - _ASim_Authentication_CynerioCynerio \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml new file mode 100644 index 00000000000..2f04e08403a --- /dev/null +++ b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml @@ -0,0 +1,147 @@ +Parser: + Title: ASIM Authentication parser for Fortinet - Fortigate + Version: '0.1.0' + LastUpdated: Mar 10, 2026 +Product: + Name: Cynerio +Normalization: + Schema: Authentication + Version: '0.1.4' +References: +- Title: ASIM Authentication Schema + Link: https://aka.ms/ASimAuthenticationDoc +- Title: ASIM + Link: https://aka.ms/AboutASIM +- Title: FortiGate Documentation + Link: + https://docs.fortinet.com/ +Description: | + This ASIM parser supports normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. +ParserName: ASimAuthenticationCynerioCynerio +EquivalentBuiltInParser: _ASim_Authentication_CynerioCynerio +ParserParams: + - Name: disabled + Type: bool + Default: false +ParserQuery: | + let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string) + [ + "information", "Informational", + "notice", "Informational", + "warning", "Low", + "error", "Low", + "alert", "Medium", + "critical", "High", + "emergency", "High", + "0", "Informational", + "1", "Informational", + "2", "Informational", + "3", "Informational", + "4", "Low", + "5", "Low", + "6", "Low", + "7", "Medium", + "8", "Medium", + "9", "High", + "10", "High" + ]; + let parser = (disabled: bool) { + let FortigateLogs = CynerioEvent_CL + | where not(disabled) + | where DeviceVendor == "Cynerio" + | where DeviceProduct has "Cynerio" + | where DeviceEventClassID !in ("0100022949", "0100022952"); // Omit "Attempted to join FortiCloud" and "service activation failed" + let LogoutEvents = FortigateLogs + | where Activity == "system event logout" + | extend EventType = "Logoff"; + let LoginEvents = FortigateLogs + | where Activity == "system event login" + | extend EventType = "Logon" + | extend EventResultDetails = case( + Message has "invalid password", "Incorrect password", + Message has "invalid", "No such user or password", + Message has "disabled", "User disabled", + Message has "no valid user certificate", "Incorrect key", + Message has "blocked IP", "Logon violates policy", + Message has "max login failures", "Logon violates policy", + Message has "declined disclaimer", "Logon violates policy", + Message has "password renewal", "Logon violates policy", + Message has "internal error", "Other", + Message has "connection timeout", "Other", + "" + ); + union + LogoutEvents, + LoginEvents + | extend + EventStartTime = TimeGenerated, + EventEndTime = TimeGenerated, + EventSchema = "Authentication", + EventSchemaVersion = "0.1.4", + EventCount = int(1), + Type = "CommonSecurityLog" + | project-rename + EventProductVersion = DeviceVersion, + EventProduct = DeviceProduct, + EventVendor = DeviceVendor, + TargetIpAddr = DestinationIP, + TargetHostname = Computer, + TargetFQDN = DeviceName, + EventOriginalType = Activity, + EventOriginalSubType = DeviceEventClassID, + TargetUsername = DestinationUserName, + TargetDvcId = DeviceExternalID, + SrcIpAddr = SourceIP, + ActingAppName = SourceProcessName, + EventMessage = Message + | extend + TargetUsernameType = "Simple", + TargetDvcIdType = "Other" + | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, ["ad.status"]: string) with (pair_delimiter=";", kv_delimiter="=") + | extend EventResult = case( + ["ad.status"] == "success" or status == "success", "Success", + ["ad.status"] == "failed" or status == "failed", "Failure", + EventMessage has "login failed", "Failure", + EventMessage has "Login disabled", "Failure", + EventMessage has "logged out", "Success", + EventMessage has "logged in successfully", "Success", + "NA" + ) + | extend + EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, "") + | lookup EventSeverityLookup on EventOriginalSeverity + | extend + Dvc = TargetDvcId, + IpAddr = SrcIpAddr + | project + TimeGenerated, + Type, + EventResultDetails, + EventType, + EventStartTime, + EventEndTime, + EventSchema, + EventSchemaVersion, + EventCount, + EventProductVersion, + EventProduct, + EventVendor, + TargetIpAddr, + TargetHostname, + TargetFQDN, + EventOriginalType, + EventOriginalSeverity, + EventOriginalSubType, + TargetUsername, + TargetDvcId, + SrcIpAddr, + ActingAppName, + EventMessage, + TargetUsernameType, + TargetDvcIdType, + EventResult, + EventSeverity, + Dvc, + IpAddr + }; + parser(disabled = disabled) \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml b/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml index 1f1c4546338..2cb0fe0eb90 100644 --- a/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml +++ b/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml @@ -89,7 +89,8 @@ ParserQuery: | , vimAuthenticationFortinetFortigate (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) ))) , vimAuthenticationVMwareESXi (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareESXi' in (DisabledParsers) )), pack=pack) , vimAuthenticationPaloAltoPanOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )), pack=pack) - , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack) + , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack), + , vimAuthenticationCynerioCynerio (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCynerio' in (DisabledParsers) )), pack=pack) }; Generic(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, pack=pack) Parsers: @@ -130,4 +131,5 @@ Parsers: - _Im_Authentication_CrowdStrikeFalconHost - _Im_Authentication_IllumioSaaSCore - _Im_Authentication_Native - - _Im_Authentication_VMwareESXi \ No newline at end of file + - _Im_Authentication_VMwareESXi + - _Im_Authentication_CynerioCynerio \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml new file mode 100644 index 00000000000..e0259c1fa5c --- /dev/null +++ b/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml @@ -0,0 +1,216 @@ +Parser: + Title: ASIM Authentication filtering parser for Fortinet - Fortigate + Version: '0.1.0' + LastUpdated: Mar 10, 2026 +Product: + Name: Cynerio +Normalization: + Schema: Authentication + Version: '0.1.4' +References: +- Title: ASIM Authentication Schema + Link: https://aka.ms/ASimAuthenticationDoc +- Title: ASIM + Link: https://aka.ms/AboutASIM +- Title: FortiGate Documentation + Link: + https://docs.fortinet.com/ +Description: | + This ASIM parser supports filtering and normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. +ParserName: vimAuthenticationFortinetFortigate +EquivalentBuiltInParser: _Im_Authentication_FortinetFortigate +ParserParams: + - Name: starttime + Type: datetime + Default: datetime(null) + - Name: endtime + Type: datetime + Default: datetime(null) + - Name: username_has_any + Type: dynamic + Default: dynamic([]) + - Name: targetappname_has_any + Type: dynamic + Default: dynamic([]) + - Name: srcipaddr_has_any_prefix + Type: dynamic + Default: dynamic([]) + - Name: srchostname_has_any + Type: dynamic + Default: dynamic([]) + - Name: eventtype_in + Type: dynamic + Default: dynamic([]) + - Name: eventresultdetails_in + Type: dynamic + Default: dynamic([]) + - Name: eventresult + Type: string + Default: '*' + - Name: disabled + Type: bool + Default: false +ParserQuery: | + let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string) + [ + "information", "Informational", + "notice", "Informational", + "warning", "Low", + "error", "Low", + "alert", "Medium", + "critical", "High", + "emergency", "High", + "0", "Informational", + "1", "Informational", + "2", "Informational", + "3", "Informational", + "4", "Low", + "5", "Low", + "6", "Low", + "7", "Medium", + "8", "Medium", + "9", "High", + "10", "High" + ]; + let parser = ( + starttime: datetime=datetime(null), + endtime: datetime=datetime(null), + username_has_any: dynamic = dynamic([]), + targetappname_has_any: dynamic = dynamic([]), // no targetappname + srcipaddr_has_any_prefix: dynamic = dynamic([]), + srchostname_has_any: dynamic = dynamic([]), // no srchostname + eventtype_in: dynamic = dynamic([]), + eventresultdetails_in: dynamic = dynamic([]), + eventresult: string = '*', + disabled: bool=false + ) { + let FortigateLogs = CynerioEvent_CL + | where not(disabled) + | where + (isnull(starttime) or TimeGenerated >= starttime) + and (isnull(endtime) or TimeGenerated <= endtime) + | where DeviceVendor == "Cynerio" + | where DeviceProduct has "Cynerio" + | where DeviceEventClassID !in ("0100022949", "0100022952") // Omit "Attempted to join FortiCloud" and "service activation failed" logs + | where ((array_length(username_has_any) == 0) or DestinationUserName has_any(username_has_any)) + and ((array_length(srcipaddr_has_any_prefix) == 0) or (has_any_ipv4_prefix(SourceIP, srcipaddr_has_any_prefix))) + and (array_length(srchostname_has_any) == 0) + and (array_length(targetappname_has_any) == 0); + let LogoutEvents = FortigateLogs + | where Activity == "system event logout" + | where ((array_length(eventtype_in) == 0) or "Logoff" in~ (eventtype_in)) + | where (array_length(eventresultdetails_in) == 0) + | extend EventType = "Logoff"; + let LoginEvents = FortigateLogs + | where Activity == "system event login" + | where ((array_length(eventtype_in) == 0) or "Logon" in~ (eventtype_in)) + | extend EventType = "Logon" + | extend EventResultDetails = case( + Message has "invalid password", "Incorrect password", + Message has "invalid", "No such user or password", + Message has "disabled", "User disabled", + Message has "no valid user certificate", "Incorrect key", + Message has "blocked IP", "Logon violates policy", + Message has "max login failures", "Logon violates policy", + Message has "declined disclaimer", "Logon violates policy", + Message has "password renewal", "Logon violates policy", + Message has "internal error", "Other", + Message has "connection timeout", "Other", + "" + ) + | where (array_length(eventresultdetails_in) == 0 or EventResultDetails in~ (eventresultdetails_in)); + union + LogoutEvents, + LoginEvents + | extend + EventStartTime = TimeGenerated, + EventEndTime = TimeGenerated, + EventSchema = "Authentication", + EventSchemaVersion = "0.1.4", + EventCount = int(1), + Type = "CommonSecurityLog" + | project-rename + EventProductVersion = DeviceVersion, + EventProduct = DeviceProduct, + EventVendor = DeviceVendor, + TargetIpAddr = DestinationIP, + TargetHostname = Computer, + TargetFQDN = DeviceName, + EventOriginalType = Activity, + EventOriginalSubType = DeviceEventClassID, + TargetUsername = DestinationUserName, + TargetDvcId = DeviceExternalID, + SrcIpAddr = SourceIP, + ActingAppName = SourceProcessName, + EventMessage = Message + | extend + TargetUsernameType = "Simple", + TargetDvcIdType = "Other" + | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, ["ad.status"]: string) with (pair_delimiter=";", kv_delimiter="=") + | extend EventResult = case( + ["ad.status"] == "success" or status == "success", "Success", + ["ad.status"] == "failed" or status == "failed", "Failure", + EventMessage has "login failed", "Failure", + EventMessage has "Login disabled", "Failure", + EventMessage has "logged out", "Success", + EventMessage has "logged in successfully", "Success", + "NA" + ) + | where (eventresult == "*" or (EventResult == eventresult)) + | extend + EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, "") + | lookup EventSeverityLookup on EventOriginalSeverity + | extend temp_isMatchTargetUsername = TargetUsername has_any(username_has_any) + | extend ASimMatchingUsername = case( + array_length(username_has_any) == 0, + "-", + temp_isMatchTargetUsername, + "TargetUsername", + "No match" + ) + | extend + Dvc = TargetDvcId, + IpAddr = SrcIpAddr + | project + TimeGenerated, + Type, + EventResultDetails, + EventType, + EventStartTime, + EventEndTime, + EventSchema, + EventSchemaVersion, + EventCount, + EventProductVersion, + EventProduct, + EventVendor, + TargetIpAddr, + TargetHostname, + TargetFQDN, + EventOriginalType, + EventOriginalSeverity, + EventOriginalSubType, + TargetUsername, + TargetDvcId, + SrcIpAddr, + ActingAppName, + EventMessage, + TargetUsernameType, + TargetDvcIdType, + EventResult, + EventSeverity, + ASimMatchingUsername, + Dvc, + IpAddr + }; + parser( + starttime=starttime, + endtime=endtime, + username_has_any=username_has_any, + targetappname_has_any=targetappname_has_any, + srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, + srchostname_has_any=srchostname_has_any, + eventtype_in=eventtype_in, + eventresultdetails_in=eventresultdetails_in, + eventresult=eventresult, + disabled=disabled) \ No newline at end of file From 4d059327cdd8fb1233984bd710cb375106517298 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <> Date: Tue, 16 Jun 2026 17:28:27 +0000 Subject: [PATCH 02/14] [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. --- .../ASimAuthentication.json | 2 +- .../ASimAuthenticationCynerioTest.json | 36 +++++++++++++++++ .../ASimAuthenticationCynerioTest/README.md | 21 ++++++++++ .../ARM/FullDeploymentAuthentication.json | 40 +++++++++++++++++++ .../imAuthentication/imAuthentication.json | 2 +- .../vimAuthenticationCynerioTest/README.md | 21 ++++++++++ .../vimAuthenticationCynerioTest.json | 36 +++++++++++++++++ 7 files changed, 156 insertions(+), 2 deletions(-) create mode 100644 Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json create mode 100644 Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md create mode 100644 Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md create mode 100644 Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json b/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json index f860bd49296..4b5455ead55 100644 --- a/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json +++ b/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json @@ -27,7 +27,7 @@ "displayName": "Authentication ASIM parser", "category": "ASIM", "FunctionAlias": "ASimAuthentication", - "query": "let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeASimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\nlet ASimAuthenticationDisabled=toscalar('ExcludeASimAuthentication' in (DisabledParsers) or 'Any' in (DisabledParsers)); \nunion isfuzzy=true\n vimAuthenticationEmpty, \n ASimAuthenticationAADManagedIdentitySignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADNonInteractiveUserSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADServicePrincipalSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAWSCloudTrail (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAWSCloudTrail' in (DisabledParsers) )),\n ASimAuthenticationBarracudaWAF (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationBarracudaWAF' in (DisabledParsers) )),\n ASimAuthenticationCiscoASA (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoASA' in (DisabledParsers) )), \n ASimAuthenticationCiscoDNAC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoDNAC' in (DisabledParsers) )),\n ASimAuthenticationCiscoIOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoIOS' in (DisabledParsers) )),\n ASimAuthenticationCiscoISE (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISE' in (DisabledParsers) )),\n ASimAuthenticationCiscoISEAdministrator (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISEAdministrator' in (DisabledParsers) ),pack=pack),\n ASimAuthenticationCiscoMeraki (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMeraki' in (DisabledParsers) )),\n ASimAuthenticationCiscoMerakiSyslog (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )),\n ASimAuthenticationFortinetFortigate (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationFortigate' in (DisabledParsers) )),\n ASimAuthenticationM365Defender (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationM365Defender' in (DisabledParsers) )),\n ASimAuthenticationMD4IoT (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMD4IoT' in (DisabledParsers) )),\n ASimAuthenticationMicrosoftWindowsEvent (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )),\n ASimAuthenticationOktaSSO (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSSO' in (DisabledParsers) )),\n ASimAuthenticationOktaV2(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaV2' in (DisabledParsers) )),\n ASimAuthenticationOktaSystemLogs(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSystemLogs' in (DisabledParsers) )),\n ASimAuthenticationPostgreSQL (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPostgreSQL' in (DisabledParsers) )),\n ASimAuthenticationSigninLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSigninLogs' in (DisabledParsers) )),\n ASimAuthenticationSshd (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSshd' in (DisabledParsers) )),\n ASimAuthenticationSu (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSu' in (DisabledParsers) )),\n ASimAuthenticationSudo (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSudo' in (DisabledParsers) )),\n ASimAuthenticationSalesforceSC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSalesforceSC' in (DisabledParsers) )),\n ASimAuthenticationVectraXDRAudit (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVectraXDRAudit' in (DisabledParsers) )),\n ASimAuthenticationSentinelOne (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSentinelOne' in (DisabledParsers) )),\n ASimAuthenticationGoogleWorkspace (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationGoogleWorkspace' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoCortexDataLake (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )),\n ASimAuthenticationVMwareCarbonBlackCloud (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )),\n ASimAuthenticationVMwareVCenter (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareVCenter' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationCrowdStrikeFalconHost (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCrowdStrikeFalcon' in (DisabledParsers) )),\n ASimAuthenticationIllumioSaaSCore (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationIllumioSaaS' in (DisabledParsers) )),\n ASimAuthenticationNative (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationNative' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoPanOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoPanOS' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationPaloAltoGlobalProtect (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack)\n", + "query": "let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeASimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\nlet ASimAuthenticationDisabled=toscalar('ExcludeASimAuthentication' in (DisabledParsers) or 'Any' in (DisabledParsers)); \nunion isfuzzy=true\n vimAuthenticationEmpty, \n ASimAuthenticationAADManagedIdentitySignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADNonInteractiveUserSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADServicePrincipalSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAWSCloudTrail (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAWSCloudTrail' in (DisabledParsers) )),\n ASimAuthenticationBarracudaWAF (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationBarracudaWAF' in (DisabledParsers) )),\n ASimAuthenticationCiscoASA (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoASA' in (DisabledParsers) )), \n ASimAuthenticationCiscoDNAC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoDNAC' in (DisabledParsers) )),\n ASimAuthenticationCiscoIOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoIOS' in (DisabledParsers) )),\n ASimAuthenticationCiscoISE (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISE' in (DisabledParsers) )),\n ASimAuthenticationCiscoISEAdministrator (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISEAdministrator' in (DisabledParsers) ),pack=pack),\n ASimAuthenticationCiscoMeraki (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMeraki' in (DisabledParsers) )),\n ASimAuthenticationCiscoMerakiSyslog (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )),\n ASimAuthenticationFortinetFortigate (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationFortigate' in (DisabledParsers) )),\n ASimAuthenticationM365Defender (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationM365Defender' in (DisabledParsers) )),\n ASimAuthenticationMD4IoT (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMD4IoT' in (DisabledParsers) )),\n ASimAuthenticationMicrosoftWindowsEvent (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )),\n ASimAuthenticationOktaSSO (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSSO' in (DisabledParsers) )),\n ASimAuthenticationOktaV2(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaV2' in (DisabledParsers) )),\n ASimAuthenticationOktaSystemLogs(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSystemLogs' in (DisabledParsers) )),\n ASimAuthenticationPostgreSQL (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPostgreSQL' in (DisabledParsers) )),\n ASimAuthenticationSigninLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSigninLogs' in (DisabledParsers) )),\n ASimAuthenticationSshd (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSshd' in (DisabledParsers) )),\n ASimAuthenticationSu (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSu' in (DisabledParsers) )),\n ASimAuthenticationSudo (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSudo' in (DisabledParsers) )),\n ASimAuthenticationSalesforceSC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSalesforceSC' in (DisabledParsers) )),\n ASimAuthenticationVectraXDRAudit (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVectraXDRAudit' in (DisabledParsers) )),\n ASimAuthenticationSentinelOne (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSentinelOne' in (DisabledParsers) )),\n ASimAuthenticationGoogleWorkspace (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationGoogleWorkspace' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoCortexDataLake (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )),\n ASimAuthenticationVMwareCarbonBlackCloud (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )),\n ASimAuthenticationVMwareVCenter (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareVCenter' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationCrowdStrikeFalconHost (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCrowdStrikeFalcon' in (DisabledParsers) )),\n ASimAuthenticationIllumioSaaSCore (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationIllumioSaaS' in (DisabledParsers) )),\n ASimAuthenticationNative (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationNative' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoPanOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoPanOS' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationPaloAltoGlobalProtect (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack),\n ASimAuthenticationCynerioCynerio (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCynerioCynerio' in (DisabledParsers)), pack=pack)\n", "version": 1, "functionParameters": "pack:bool=False" } diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json new file mode 100644 index 00000000000..875539112c1 --- /dev/null +++ b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json @@ -0,0 +1,36 @@ +{ + "$schema": "https://schema.management.azure.com/schemas/2019-08-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "Workspace": { + "type": "string", + "metadata": { + "description": "The Microsoft Sentinel workspace into which the function will be deployed. Has to be in the selected Resource Group." + } + }, + "WorkspaceRegion": { + "type": "string", + "defaultValue": "[resourceGroup().location]", + "metadata": { + "description": "The region of the selected workspace. The default value will use the Region selection above." + } + } + }, + "resources": [ + { + "type": "Microsoft.OperationalInsights/workspaces/savedSearches", + "apiVersion": "2020-08-01", + "name": "[concat(parameters('Workspace'), '/ASimAuthenticationCynerioCynerio')]", + "location": "[parameters('WorkspaceRegion')]", + "properties": { + "etag": "*", + "displayName": "ASIM Authentication parser for Fortinet - Fortigate", + "category": "ASIM", + "FunctionAlias": "ASimAuthenticationCynerioCynerio", + "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (disabled: bool) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\"); // Omit \"Attempted to join FortiCloud\" and \"service activation failed\"\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n );\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = DeviceProduct,\n EventVendor = DeviceVendor,\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n Dvc,\n IpAddr\n};\nparser(disabled = disabled)", + "version": 1, + "functionParameters": "disabled:bool=False" + } + } + ] +} \ No newline at end of file diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md new file mode 100644 index 00000000000..2de3e012fdf --- /dev/null +++ b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md @@ -0,0 +1,21 @@ +# Cynerio ASIM Authentication Normalization Parser + +ARM template for ASIM Authentication schema parser for Cynerio. + +This ASIM parser supports normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. + + +The Advanced Security Information Model (ASIM) enables you to use and create source-agnostic content, simplifying your analysis of the data in your Microsoft Sentinel workspace. + +For more information, see: + +- [Normalization and the Advanced Security Information Model (ASIM)](https://aka.ms/AboutASIM) +- [Deploy all of ASIM](https://aka.ms/DeployASIM) +- [ASIM Authentication normalization schema reference](https://aka.ms/ASimAuthenticationDoc) + +For the changelog, see: +- [CHANGELOG](https://github.com/Azure/Azure-Sentinel/blob/master/Parsers/ASimAuthentication/CHANGELOG/ASimAuthenticationCynerioTest.md) + +
+ +[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FASimAuthenticationCynerioTest%2FASimAuthenticationCynerioTest.json) [![Deploy to Azure Gov](https://aka.ms/deploytoazuregovbutton)](https://portal.azure.us/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FASimAuthenticationCynerioTest%2FASimAuthenticationCynerioTest.json) diff --git a/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json b/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json index 0f66a239e44..c7b076ed14b 100644 --- a/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json +++ b/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json @@ -318,6 +318,26 @@ } } }, + { + "type": "Microsoft.Resources/deployments", + "apiVersion": "2020-10-01", + "name": "linkedASimAuthenticationCynerioTest", + "properties": { + "mode": "Incremental", + "templateLink": { + "uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json", + "contentVersion": "1.0.0.0" + }, + "parameters": { + "Workspace": { + "value": "[parameters('Workspace')]" + }, + "WorkspaceRegion": { + "value": "[parameters('WorkspaceRegion')]" + } + } + } + }, { "type": "Microsoft.Resources/deployments", "apiVersion": "2020-10-01", @@ -1078,6 +1098,26 @@ } } }, + { + "type": "Microsoft.Resources/deployments", + "apiVersion": "2020-10-01", + "name": "linkedvimAuthenticationCynerioTest", + "properties": { + "mode": "Incremental", + "templateLink": { + "uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json", + "contentVersion": "1.0.0.0" + }, + "parameters": { + "Workspace": { + "value": "[parameters('Workspace')]" + }, + "WorkspaceRegion": { + "value": "[parameters('WorkspaceRegion')]" + } + } + } + }, { "type": "Microsoft.Resources/deployments", "apiVersion": "2020-10-01", diff --git a/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json b/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json index d4dbabeada1..a2f052f3e90 100644 --- a/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json +++ b/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json @@ -27,7 +27,7 @@ "displayName": "Authentication ASIM filtering parser", "category": "ASIM", "FunctionAlias": "imAuthentication", - "query": "let Generic=(starttime: datetime=datetime(null), endtime: datetime=datetime(null), username_has_any: dynamic = dynamic([]), targetappname_has_any: dynamic = dynamic([]), srcipaddr_has_any_prefix: dynamic = dynamic([]), srchostname_has_any: dynamic = dynamic([]), eventtype_in: dynamic = dynamic([]), eventresultdetails_in: dynamic = dynamic([]), eventresult: string = '*', pack: bool=false) {\n let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\n let imAuthenticationBuiltInDisabled=toscalar('ExcludeimAuthenticationBuiltIn' in (DisabledParsers) or 'Any' in (DisabledParsers)); \n union isfuzzy=true\n vimAuthenticationEmpty\n , vimAuthenticationAADManagedIdentitySignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADNonInteractiveUserSignInLogs(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADServicePrincipalSignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationSigninLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSigninLogs' in (DisabledParsers) )))\n , vimAuthenticationAWSCloudTrail (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled = (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAWSCloudTrail' in (DisabledParsers) )))\n , vimAuthenticationOktaSSO (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSSO' in (DisabledParsers) )))\n , vimAuthenticationOktaSystemLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSystemLogs' in (DisabledParsers) )))\n , vimAuthenticationOktaV2 (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaV2' in (DisabledParsers) )))\n , vimAuthenticationM365Defender (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationM365Defender' in (DisabledParsers) )))\n , vimAuthenticationMicrosoftWindowsEvent (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )))\n , vimAuthenticationMD4IoT (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMD4IoT' in (DisabledParsers) )))\n , vimAuthenticationPostgreSQL (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPostgreSQL' in (DisabledParsers) )))\n , vimAuthenticationSshd (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSshd' in (DisabledParsers) )))\n , vimAuthenticationSu (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSu' in (DisabledParsers) )))\n , vimAuthenticationSudo (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSudo' in (DisabledParsers) )))\n , vimAuthenticationCiscoASA (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoASA' in (DisabledParsers) )))\n , vimAuthenticationCiscoDNAC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoDNAC' in (DisabledParsers) )))\n , vimAuthenticationCiscoMeraki (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMeraki' in (DisabledParsers) )))\n , vimAuthenticationCiscoMerakiSyslog (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )))\n , vimAuthenticationCiscoIOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoIOS' in (DisabledParsers) )))\n , vimAuthenticationCiscoISE (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISE' in (DisabledParsers) )))\n , vimAuthenticationCiscoISEAdministrator (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISEAdministrator' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationBarracudaWAF (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationBarracudaWAF' in (DisabledParsers) )))\n , vimAuthenticationVectraXDRAudit (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVectraXDRAudit' in (DisabledParsers) )))\n , vimAuthenticationGoogleWorkspace (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationGoogleWorkspace' in (DisabledParsers) )))\n , vimAuthenticationSalesforceSC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSalesforceSC' in (DisabledParsers) )))\n , vimAuthenticationPaloAltoCortexDataLake (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )))\n , vimAuthenticationSentinelOne (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSentinelOne' in (DisabledParsers) )))\n , vimAuthenticationCrowdStrikeFalconHost (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCrowdStrikeFalconHost' in (DisabledParsers) )))\n , vimAuthenticationVMwareCarbonBlackCloud (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )))\n , vimAuthenticationVMwareVCenter (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationIllumioSaaSCore (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationIllumioSaaS' in (DisabledParsers) )))\n , vimAuthenticationNative (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationNative' in (DisabledParsers) )))\n , vimAuthenticationFortinetFortigate (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )))\n , vimAuthenticationVMwareESXi (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareESXi' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoPanOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack)\n};\nGeneric(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, pack=pack)\n", + "query": "let Generic=(starttime: datetime=datetime(null), endtime: datetime=datetime(null), username_has_any: dynamic = dynamic([]), targetappname_has_any: dynamic = dynamic([]), srcipaddr_has_any_prefix: dynamic = dynamic([]), srchostname_has_any: dynamic = dynamic([]), eventtype_in: dynamic = dynamic([]), eventresultdetails_in: dynamic = dynamic([]), eventresult: string = '*', pack: bool=false) {\n let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\n let imAuthenticationBuiltInDisabled=toscalar('ExcludeimAuthenticationBuiltIn' in (DisabledParsers) or 'Any' in (DisabledParsers)); \n union isfuzzy=true\n vimAuthenticationEmpty\n , vimAuthenticationAADManagedIdentitySignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADNonInteractiveUserSignInLogs(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADServicePrincipalSignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationSigninLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSigninLogs' in (DisabledParsers) )))\n , vimAuthenticationAWSCloudTrail (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled = (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAWSCloudTrail' in (DisabledParsers) )))\n , vimAuthenticationOktaSSO (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSSO' in (DisabledParsers) )))\n , vimAuthenticationOktaSystemLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSystemLogs' in (DisabledParsers) )))\n , vimAuthenticationOktaV2 (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaV2' in (DisabledParsers) )))\n , vimAuthenticationM365Defender (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationM365Defender' in (DisabledParsers) )))\n , vimAuthenticationMicrosoftWindowsEvent (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )))\n , vimAuthenticationMD4IoT (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMD4IoT' in (DisabledParsers) )))\n , vimAuthenticationPostgreSQL (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPostgreSQL' in (DisabledParsers) )))\n , vimAuthenticationSshd (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSshd' in (DisabledParsers) )))\n , vimAuthenticationSu (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSu' in (DisabledParsers) )))\n , vimAuthenticationSudo (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSudo' in (DisabledParsers) )))\n , vimAuthenticationCiscoASA (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoASA' in (DisabledParsers) )))\n , vimAuthenticationCiscoDNAC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoDNAC' in (DisabledParsers) )))\n , vimAuthenticationCiscoMeraki (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMeraki' in (DisabledParsers) )))\n , vimAuthenticationCiscoMerakiSyslog (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )))\n , vimAuthenticationCiscoIOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoIOS' in (DisabledParsers) )))\n , vimAuthenticationCiscoISE (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISE' in (DisabledParsers) )))\n , vimAuthenticationCiscoISEAdministrator (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISEAdministrator' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationBarracudaWAF (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationBarracudaWAF' in (DisabledParsers) )))\n , vimAuthenticationVectraXDRAudit (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVectraXDRAudit' in (DisabledParsers) )))\n , vimAuthenticationGoogleWorkspace (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationGoogleWorkspace' in (DisabledParsers) )))\n , vimAuthenticationSalesforceSC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSalesforceSC' in (DisabledParsers) )))\n , vimAuthenticationPaloAltoCortexDataLake (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )))\n , vimAuthenticationSentinelOne (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSentinelOne' in (DisabledParsers) )))\n , vimAuthenticationCrowdStrikeFalconHost (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCrowdStrikeFalconHost' in (DisabledParsers) )))\n , vimAuthenticationVMwareCarbonBlackCloud (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )))\n , vimAuthenticationVMwareVCenter (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationIllumioSaaSCore (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationIllumioSaaS' in (DisabledParsers) )))\n , vimAuthenticationNative (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationNative' in (DisabledParsers) )))\n , vimAuthenticationFortinetFortigate (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )))\n , vimAuthenticationVMwareESXi (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareESXi' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoPanOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack),\n , vimAuthenticationCynerioCynerio (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCynerio' in (DisabledParsers) )), pack=pack)\n};\nGeneric(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, pack=pack)\n", "version": 1, "functionParameters": "starttime:datetime=datetime(null),endtime:datetime=datetime(null),username_has_any:dynamic=dynamic([]),targetappname_has_any:dynamic=dynamic([]),srcipaddr_has_any_prefix:dynamic=dynamic([]),srchostname_has_any:dynamic=dynamic([]),eventtype_in:dynamic=dynamic([]),eventresultdetails_in:dynamic=dynamic([]),eventresult:string='*',pack:bool=False" } diff --git a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md new file mode 100644 index 00000000000..08ca0a3bb6d --- /dev/null +++ b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md @@ -0,0 +1,21 @@ +# Cynerio ASIM Authentication Normalization Parser + +ARM template for ASIM Authentication schema parser for Cynerio. + +This ASIM parser supports filtering and normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. + + +The Advanced Security Information Model (ASIM) enables you to use and create source-agnostic content, simplifying your analysis of the data in your Microsoft Sentinel workspace. + +For more information, see: + +- [Normalization and the Advanced Security Information Model (ASIM)](https://aka.ms/AboutASIM) +- [Deploy all of ASIM](https://aka.ms/DeployASIM) +- [ASIM Authentication normalization schema reference](https://aka.ms/ASimAuthenticationDoc) + +For the changelog, see: +- [CHANGELOG](https://github.com/Azure/Azure-Sentinel/blob/master/Parsers/ASimAuthentication/CHANGELOG/vimAuthenticationCynerioTest.md) + +
+ +[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FvimAuthenticationCynerioTest%2FvimAuthenticationCynerioTest.json) [![Deploy to Azure Gov](https://aka.ms/deploytoazuregovbutton)](https://portal.azure.us/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FvimAuthenticationCynerioTest%2FvimAuthenticationCynerioTest.json) diff --git a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json new file mode 100644 index 00000000000..d1bda9abbe3 --- /dev/null +++ b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json @@ -0,0 +1,36 @@ +{ + "$schema": "https://schema.management.azure.com/schemas/2019-08-01/deploymentTemplate.json#", + "contentVersion": "1.0.0.0", + "parameters": { + "Workspace": { + "type": "string", + "metadata": { + "description": "The Microsoft Sentinel workspace into which the function will be deployed. Has to be in the selected Resource Group." + } + }, + "WorkspaceRegion": { + "type": "string", + "defaultValue": "[resourceGroup().location]", + "metadata": { + "description": "The region of the selected workspace. The default value will use the Region selection above." + } + } + }, + "resources": [ + { + "type": "Microsoft.OperationalInsights/workspaces/savedSearches", + "apiVersion": "2020-08-01", + "name": "[concat(parameters('Workspace'), '/vimAuthenticationFortinetFortigate')]", + "location": "[parameters('WorkspaceRegion')]", + "properties": { + "etag": "*", + "displayName": "ASIM Authentication filtering parser for Fortinet - Fortigate", + "category": "ASIM", + "FunctionAlias": "vimAuthenticationFortinetFortigate", + "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (\n starttime: datetime=datetime(null), \n endtime: datetime=datetime(null), \n username_has_any: dynamic = dynamic([]),\n targetappname_has_any: dynamic = dynamic([]), // no targetappname\n srcipaddr_has_any_prefix: dynamic = dynamic([]),\n srchostname_has_any: dynamic = dynamic([]), // no srchostname\n eventtype_in: dynamic = dynamic([]),\n eventresultdetails_in: dynamic = dynamic([]),\n eventresult: string = '*',\n disabled: bool=false\n) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where \n (isnull(starttime) or TimeGenerated >= starttime) \n and (isnull(endtime) or TimeGenerated <= endtime) \n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\") // Omit \"Attempted to join FortiCloud\" and \"service activation failed\" logs\n | where ((array_length(username_has_any) == 0) or DestinationUserName has_any(username_has_any))\n and ((array_length(srcipaddr_has_any_prefix) == 0) or (has_any_ipv4_prefix(SourceIP, srcipaddr_has_any_prefix)))\n and (array_length(srchostname_has_any) == 0)\n and (array_length(targetappname_has_any) == 0);\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | where ((array_length(eventtype_in) == 0) or \"Logoff\" in~ (eventtype_in))\n | where (array_length(eventresultdetails_in) == 0)\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | where ((array_length(eventtype_in) == 0) or \"Logon\" in~ (eventtype_in))\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n )\n | where (array_length(eventresultdetails_in) == 0 or EventResultDetails in~ (eventresultdetails_in));\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = DeviceProduct,\n EventVendor = DeviceVendor,\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | where (eventresult == \"*\" or (EventResult == eventresult))\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend temp_isMatchTargetUsername = TargetUsername has_any(username_has_any)\n | extend ASimMatchingUsername = case(\n array_length(username_has_any) == 0,\n \"-\",\n temp_isMatchTargetUsername,\n \"TargetUsername\",\n \"No match\"\n )\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n ASimMatchingUsername,\n Dvc,\n IpAddr\n};\nparser(\n starttime=starttime,\n endtime=endtime,\n username_has_any=username_has_any,\n targetappname_has_any=targetappname_has_any,\n srcipaddr_has_any_prefix=srcipaddr_has_any_prefix,\n srchostname_has_any=srchostname_has_any,\n eventtype_in=eventtype_in,\n eventresultdetails_in=eventresultdetails_in,\n eventresult=eventresult,\n disabled=disabled)", + "version": 1, + "functionParameters": "starttime:datetime=datetime(null),endtime:datetime=datetime(null),username_has_any:dynamic=dynamic([]),targetappname_has_any:dynamic=dynamic([]),srcipaddr_has_any_prefix:dynamic=dynamic([]),srchostname_has_any:dynamic=dynamic([]),eventtype_in:dynamic=dynamic([]),eventresultdetails_in:dynamic=dynamic([]),eventresult:string='*',disabled:bool=False" + } + } + ] +} \ No newline at end of file From 523350d9399d800f6faa01d4ad63b21e509f3d2c Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 10:39:35 -0700 Subject: [PATCH 03/14] Fix for template validaiton --- .../Parsers/ASimAuthenticationCynerioTest.yaml | 4 ++-- .../Parsers/vimAuthenticationCynerioTest.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml index 2f04e08403a..5156df468c3 100644 --- a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml +++ b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml @@ -82,8 +82,8 @@ ParserQuery: | Type = "CommonSecurityLog" | project-rename EventProductVersion = DeviceVersion, - EventProduct = DeviceProduct, - EventVendor = DeviceVendor, + EventProduct = "Cynerio", + EventVendor = "Cynerio", TargetIpAddr = DestinationIP, TargetHostname = Computer, TargetFQDN = DeviceName, diff --git a/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml index e0259c1fa5c..861a80d28a8 100644 --- a/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml +++ b/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml @@ -131,8 +131,8 @@ ParserQuery: | Type = "CommonSecurityLog" | project-rename EventProductVersion = DeviceVersion, - EventProduct = DeviceProduct, - EventVendor = DeviceVendor, + EventProduct = "Cynerio", + EventVendor = "Cynerio", TargetIpAddr = DestinationIP, TargetHostname = Computer, TargetFQDN = DeviceName, From 8e6513c6d8dcd6c974b27ed0d5b3e9041c12a2de Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <> Date: Tue, 16 Jun 2026 17:45:46 +0000 Subject: [PATCH 04/14] [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. --- .../ASimAuthenticationCynerioTest.json | 2 +- .../vimAuthenticationCynerioTest.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json index 875539112c1..17ecd99f70e 100644 --- a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json +++ b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json @@ -27,7 +27,7 @@ "displayName": "ASIM Authentication parser for Fortinet - Fortigate", "category": "ASIM", "FunctionAlias": "ASimAuthenticationCynerioCynerio", - "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (disabled: bool) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\"); // Omit \"Attempted to join FortiCloud\" and \"service activation failed\"\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n );\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = DeviceProduct,\n EventVendor = DeviceVendor,\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n Dvc,\n IpAddr\n};\nparser(disabled = disabled)", + "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (disabled: bool) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\"); // Omit \"Attempted to join FortiCloud\" and \"service activation failed\"\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n );\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\",\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n Dvc,\n IpAddr\n};\nparser(disabled = disabled)", "version": 1, "functionParameters": "disabled:bool=False" } diff --git a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json index d1bda9abbe3..0be2b31fb12 100644 --- a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json +++ b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json @@ -27,7 +27,7 @@ "displayName": "ASIM Authentication filtering parser for Fortinet - Fortigate", "category": "ASIM", "FunctionAlias": "vimAuthenticationFortinetFortigate", - "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (\n starttime: datetime=datetime(null), \n endtime: datetime=datetime(null), \n username_has_any: dynamic = dynamic([]),\n targetappname_has_any: dynamic = dynamic([]), // no targetappname\n srcipaddr_has_any_prefix: dynamic = dynamic([]),\n srchostname_has_any: dynamic = dynamic([]), // no srchostname\n eventtype_in: dynamic = dynamic([]),\n eventresultdetails_in: dynamic = dynamic([]),\n eventresult: string = '*',\n disabled: bool=false\n) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where \n (isnull(starttime) or TimeGenerated >= starttime) \n and (isnull(endtime) or TimeGenerated <= endtime) \n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\") // Omit \"Attempted to join FortiCloud\" and \"service activation failed\" logs\n | where ((array_length(username_has_any) == 0) or DestinationUserName has_any(username_has_any))\n and ((array_length(srcipaddr_has_any_prefix) == 0) or (has_any_ipv4_prefix(SourceIP, srcipaddr_has_any_prefix)))\n and (array_length(srchostname_has_any) == 0)\n and (array_length(targetappname_has_any) == 0);\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | where ((array_length(eventtype_in) == 0) or \"Logoff\" in~ (eventtype_in))\n | where (array_length(eventresultdetails_in) == 0)\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | where ((array_length(eventtype_in) == 0) or \"Logon\" in~ (eventtype_in))\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n )\n | where (array_length(eventresultdetails_in) == 0 or EventResultDetails in~ (eventresultdetails_in));\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = DeviceProduct,\n EventVendor = DeviceVendor,\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | where (eventresult == \"*\" or (EventResult == eventresult))\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend temp_isMatchTargetUsername = TargetUsername has_any(username_has_any)\n | extend ASimMatchingUsername = case(\n array_length(username_has_any) == 0,\n \"-\",\n temp_isMatchTargetUsername,\n \"TargetUsername\",\n \"No match\"\n )\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n ASimMatchingUsername,\n Dvc,\n IpAddr\n};\nparser(\n starttime=starttime,\n endtime=endtime,\n username_has_any=username_has_any,\n targetappname_has_any=targetappname_has_any,\n srcipaddr_has_any_prefix=srcipaddr_has_any_prefix,\n srchostname_has_any=srchostname_has_any,\n eventtype_in=eventtype_in,\n eventresultdetails_in=eventresultdetails_in,\n eventresult=eventresult,\n disabled=disabled)", + "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (\n starttime: datetime=datetime(null), \n endtime: datetime=datetime(null), \n username_has_any: dynamic = dynamic([]),\n targetappname_has_any: dynamic = dynamic([]), // no targetappname\n srcipaddr_has_any_prefix: dynamic = dynamic([]),\n srchostname_has_any: dynamic = dynamic([]), // no srchostname\n eventtype_in: dynamic = dynamic([]),\n eventresultdetails_in: dynamic = dynamic([]),\n eventresult: string = '*',\n disabled: bool=false\n) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where \n (isnull(starttime) or TimeGenerated >= starttime) \n and (isnull(endtime) or TimeGenerated <= endtime) \n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\") // Omit \"Attempted to join FortiCloud\" and \"service activation failed\" logs\n | where ((array_length(username_has_any) == 0) or DestinationUserName has_any(username_has_any))\n and ((array_length(srcipaddr_has_any_prefix) == 0) or (has_any_ipv4_prefix(SourceIP, srcipaddr_has_any_prefix)))\n and (array_length(srchostname_has_any) == 0)\n and (array_length(targetappname_has_any) == 0);\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | where ((array_length(eventtype_in) == 0) or \"Logoff\" in~ (eventtype_in))\n | where (array_length(eventresultdetails_in) == 0)\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | where ((array_length(eventtype_in) == 0) or \"Logon\" in~ (eventtype_in))\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n )\n | where (array_length(eventresultdetails_in) == 0 or EventResultDetails in~ (eventresultdetails_in));\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\",\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | where (eventresult == \"*\" or (EventResult == eventresult))\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend temp_isMatchTargetUsername = TargetUsername has_any(username_has_any)\n | extend ASimMatchingUsername = case(\n array_length(username_has_any) == 0,\n \"-\",\n temp_isMatchTargetUsername,\n \"TargetUsername\",\n \"No match\"\n )\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n ASimMatchingUsername,\n Dvc,\n IpAddr\n};\nparser(\n starttime=starttime,\n endtime=endtime,\n username_has_any=username_has_any,\n targetappname_has_any=targetappname_has_any,\n srcipaddr_has_any_prefix=srcipaddr_has_any_prefix,\n srchostname_has_any=srchostname_has_any,\n eventtype_in=eventtype_in,\n eventresultdetails_in=eventresultdetails_in,\n eventresult=eventresult,\n disabled=disabled)", "version": 1, "functionParameters": "starttime:datetime=datetime(null),endtime:datetime=datetime(null),username_has_any:dynamic=dynamic([]),targetappname_has_any:dynamic=dynamic([]),srcipaddr_has_any_prefix:dynamic=dynamic([]),srchostname_has_any:dynamic=dynamic([]),eventtype_in:dynamic=dynamic([]),eventresultdetails_in:dynamic=dynamic([]),eventresult:string='*',disabled:bool=False" } From fb82d9a538e0fc45eb918b8f76129583c698f929 Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 10:59:48 -0700 Subject: [PATCH 05/14] Move sample data dir --- .../VerifyASimParserTemplate.py | 2 +- ...io_Cynerio_Authentication_IngestedLogs.csv | 1694 +++++++-------- ...io_Cynerio_NetworkSession_IngestedLogs.csv | 1910 ++++++++--------- 3 files changed, 1803 insertions(+), 1803 deletions(-) rename Sample Data/{ => ASIM}/Cynerio_Cynerio_Authentication_IngestedLogs.csv (99%) rename Sample Data/{ => ASIM}/Cynerio_Cynerio_NetworkSession_IngestedLogs.csv (99%) diff --git a/.script/tests/asimParsersTest/VerifyASimParserTemplate.py b/.script/tests/asimParsersTest/VerifyASimParserTemplate.py index fc295fada18..cf6505cddd2 100644 --- a/.script/tests/asimParsersTest/VerifyASimParserTemplate.py +++ b/.script/tests/asimParsersTest/VerifyASimParserTemplate.py @@ -313,7 +313,7 @@ def extract_and_check_properties(Parser_file, Union_Parser__file, FileType, ASIM if os.path.exists(SampleDataFilePath): results.append((SampleDataFile, 'Sample data file exists', 'Pass')) else: - results.append((f'{RED}Expected sample file not found{RESET}', f'{RED}Sample data file does not exist or may not be named correctly. Please include sample data file "{event_vendor}_{event_product}_{schema}_IngestedLogs.csv"{RESET}', f'{RED}Fail{RESET}')) + results.append((f'{RED}Expected sample file not found{RESET}', f'{RED}Sample data file does not exist or may not be named correctly. Please include sample data file "{SampleDataFile}"{RESET}', f'{RED}Fail{RESET}')) return results def filter_yaml_files(modified_files): diff --git a/Sample Data/Cynerio_Cynerio_Authentication_IngestedLogs.csv b/Sample Data/ASIM/Cynerio_Cynerio_Authentication_IngestedLogs.csv similarity index 99% rename from Sample Data/Cynerio_Cynerio_Authentication_IngestedLogs.csv rename to Sample Data/ASIM/Cynerio_Cynerio_Authentication_IngestedLogs.csv index 9dade08ed9f..3366a1947ad 100644 --- a/Sample Data/Cynerio_Cynerio_Authentication_IngestedLogs.csv +++ b/Sample Data/ASIM/Cynerio_Cynerio_Authentication_IngestedLogs.csv @@ -1,847 +1,847 @@ -TenantId,SourceSystem,MG,ManagementGroupName,"TimeGenerated [UTC]",Computer,RawData,"date_t [UTC]","asset_id_s","dst_ip_s","src_ip_s","trans_s","uid_s","service_s","new_status_s","risk_name_s","browser_s","host_s",Severity,"status_code_s","asset_asset_type_code_s","asset_id_g","asset_ip_s","asset_model_s","asset_name_s","asset_type_s","asset_type_code_s","client_ip_s","details_s","id_g","module_s","port_d","related_risks_s","server_ip_s","severity_s","timestamp_d","title_s",Type,"_ResourceId" -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.372 AM",,,,,"efc3f5a7-56d9-4e9d-8f85-e620b1fed85d_uiu2",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6ZfC3ZAS4f84c5eexOcn9g, Source IP: 10.10.155.20","efc3f5a7-56d9-4e9d-8f85-e620b1fed85d",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.241.10",Medium,"1679770371.45865","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.368 AM",,,,,"e7381051-0aa4-424e-b186-b8bbabb958a4_N1Jc",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SFFjPx6qlo0BnJNk_FaJ7g, Source IP: 10.10.155.20","e7381051-0aa4-424e-b186-b8bbabb958a4",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.42",Medium,"1679770381.7546","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.366 AM",,,,,"e36aa09f-0c0d-4981-8c5a-3c50e392a6ae_X46E",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_GTpSkk2S1Tky5iFytxGSHQ, Source IP: 10.10.155.20","e36aa09f-0c0d-4981-8c5a-3c50e392a6ae",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.36",Medium,"1679770381.74637","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.359 AM",,,,,"0ac37b99-fabd-4438-b8ee-19da4101e4bd_U4hK",HTTP,,,,,,,VOIP,"f7245c4d-eb2f-4b0a-9a1e-90b2cf9f63c1","10.10.153.32","IP Phone 8841",SEPD4AD71BF4105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_U5qo67YqNCshqrpnRNai2Q, Source IP: 10.10.155.20","0ac37b99-fabd-4438-b8ee-19da4101e4bd",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.153.32",Medium,"1679770371.45874","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.354 AM",,,,,"106512c6-653a-47e5-a781-4ab9092f7cd0_N7t/",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nlo5D_SlT7GkPkiaXWERsw, Source IP: 10.10.155.20","106512c6-653a-47e5-a781-4ab9092f7cd0",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.16",Medium,"1679770381.73733","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.350 AM",,,,,"2823da81-f0f8-49c0-a3a0-fd182dede561_kH6L",HTTP,,,,,,,VOIP,"8d8ac1dd-e457-45c1-a20d-3552201b213e","10.50.51.22","IP Phone 8841",SEPCC70ED5793C6,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IuNquCFv_oBM_HBX0HKHcQ, Source IP: 10.10.155.20","2823da81-f0f8-49c0-a3a0-fd182dede561",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.22",Medium,"1679770381.75711","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.346 AM",,,,,"f5a18a0a-8ec1-4bb0-8515-eceebee6f116_3Qda",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9PvLyr1DPi9e1Df8OEBLRg, Source IP: 10.10.155.20","f5a18a0a-8ec1-4bb0-8515-eceebee6f116",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.22",Medium,"1679770371.45897","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.343 AM",,,,,"ba4b3ee8-a0c2-4659-abac-4f57d07cc98e_jUZ5",HTTP,,,,,,,VOIP,"8a868242-7170-442d-ace2-2c9ee0d097af","10.50.52.55","IP Phone 8841",SEPD4AD71BF385B,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JrxKUR3ieIckIfuVYW8oZw, Source IP: 10.10.155.20","ba4b3ee8-a0c2-4659-abac-4f57d07cc98e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.55",Medium,"1679770381.77914","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.185 AM",,,,,"85322169-942d-436c-8eb3-2b1ce348908b_jTSn",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_cI7xNKee5slqmE93no3ROw, Source IP: 10.10.155.20","85322169-942d-436c-8eb3-2b1ce348908b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.77",Medium,"1679770381.74765","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.181 AM",,,,,"ce61a7ca-cc9a-45d4-a024-ce4662b24b0f_64nM",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_VKEDvugYIjpd06Wtq5haBw, Source IP: 10.10.155.20","ce61a7ca-cc9a-45d4-a024-ce4662b24b0f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.41",Medium,"1679770381.7448","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.117 AM",,,,,"68e430f8-213e-48f2-bc15-13cde96087d5_Xr2S",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_4PCdPBOXjKLHk78gTmoxRg, Source IP: 10.10.155.20","68e430f8-213e-48f2-bc15-13cde96087d5",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679770371.54582","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.114 AM",,,,,"8eb2ea3f-93c4-44c3-9722-72f89b57891b_nE6d",HTTP,,,,,,,VOIP,"4c3d8787-96c1-42d4-bc6f-096b3fc35b38","10.50.49.73","IP Phone 8841",SEPCC70ED56F42A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T0EEOLRRkDnh-kuNlSiJDw, Source IP: 10.10.155.20","8eb2ea3f-93c4-44c3-9722-72f89b57891b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.73",Medium,"1679770371.5512","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.111 AM",,,,,"8d921d68-d184-4e84-bdf9-13c98e1c1797_Q4E6",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3O_S3Uz682Rq0JbbZa9Vfw, Source IP: 10.10.155.20","8d921d68-d184-4e84-bdf9-13c98e1c1797",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.43",Medium,"1679770371.61078","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.108 AM",,,,,"55c81cb0-2da1-49b1-87e2-3f910eeff446_TzFa",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_KzmQkKUJQ3OzPYXb-Alw1w, Source IP: 10.10.155.20","55c81cb0-2da1-49b1-87e2-3f910eeff446",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.70",Medium,"1679770371.55115","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.106 AM",,,,,"807fb93b-bb23-4c54-8f36-738c19fd6d72_RAYw",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_yjFnJ5RfYFYIXpZDpcEqYg, Source IP: 10.10.155.20","807fb93b-bb23-4c54-8f36-738c19fd6d72",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.57",Medium,"1679770381.73603","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.103 AM",,,,,"81369d0b-9806-4dcb-a149-5734d357a266_U/os",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_WGdzBgIJaGV-mJQsoP33QA, Source IP: 10.10.155.20","81369d0b-9806-4dcb-a149-5734d357a266",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.37",Medium,"1679770381.73782","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.100 AM",,,,,"1f2d4e88-83fe-483d-bade-1e2082d527ab_DzjK",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_AE4TDC8OZw9CKv-U-RpiFw, Source IP: 10.10.155.20","1f2d4e88-83fe-483d-bade-1e2082d527ab",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679770381.73747","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.098 AM",,,,,"73f0b982-763e-4e33-9301-80d07ed14f93_QpKH",HTTP,,,,,,,VOIP,"bd57c664-4b28-41c3-aeb0-54337ed7d49e","10.50.53.46","IP Phone 8841",SEPD4AD71BF3105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_oDdujac52Qd6Yxb_KFDIsw, Source IP: 10.10.155.20","73f0b982-763e-4e33-9301-80d07ed14f93",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.46",Medium,"1679770371.56482","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.095 AM",,,,,"8d0b3014-633e-4f1e-be48-ce7364180c86_msds",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_pnD__gqAQf5_RqwFH3NTLg, Source IP: 10.10.155.20","8d0b3014-633e-4f1e-be48-ce7364180c86",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.64",Medium,"1679770381.7552","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.092 AM",,,,,"0baf4b68-04fc-4c5a-be77-68f9627bfe4f_OrAh",HTTP,,,,,,,VOIP,"2fbc5b18-0006-4c1c-beab-f82c8fa34d86","10.10.153.13","IP Phone 8841",SEP2C31246EEC38,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kW658hxhbqrx01RpKAeiPQ, Source IP: 10.10.155.20","0baf4b68-04fc-4c5a-be77-68f9627bfe4f",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.153.13",Medium,"1679770381.77692","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.089 AM",,,,,"4e4136da-5c4b-48ee-bf55-8c859d26f935_Vx6X",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_MQtQn3wPpljk6J1mLHXZLA, Source IP: 10.10.155.20","4e4136da-5c4b-48ee-bf55-8c859d26f935",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.41",Medium,"1679770371.53489","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.087 AM",,,,,"5a62d274-a4ed-4d7a-94c4-dea378849b99_75cK",HTTP,,,,,,,VOIP,"48b34814-f3d4-4c3b-a14f-dfca32ab8d49","10.50.54.49","IP Phone 8841","10.50.54.49",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Obw5K4_lTA_ChRz7rTv5PA, Source IP: 10.10.155.20","5a62d274-a4ed-4d7a-94c4-dea378849b99",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.49",Medium,"1679770371.56681","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.084 AM",,,,,"c5fe2758-3bb4-4275-bddc-122ecedebc20_5pbq",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_TxuMqofhxNXGHSjBGwwc8w, Source IP: 10.10.155.20","c5fe2758-3bb4-4275-bddc-122ecedebc20",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679770371.55192","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.081 AM",,,,,"02644a75-2e4e-43e7-a429-878eb61d3d1b_PSiq",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9ai3QY077By45eMfhFh8nQ, Source IP: 10.10.155.20","02644a75-2e4e-43e7-a429-878eb61d3d1b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.48",Medium,"1679770371.56732","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.012 AM",,,,,"beca06a9-23e5-42ab-bc14-0aeef81eaa6c_nINb",HTTP,,,,,,,VOIP,"2d778507-014e-49b7-98dc-9da6bc6592dd","10.10.31.14","IP Phone 8841",SEPD4AD71BF7221,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8LMWhrkCB1qlP8AqMoGPBA, Source IP: 10.10.155.20","beca06a9-23e5-42ab-bc14-0aeef81eaa6c",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.14",Medium,"1679770381.74643","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.010 AM",,,,,"00c48920-38ce-40e7-b915-97f757ba4749_pxys",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_2LtPMYknVCyJkvcMtJv68A, Source IP: 10.10.155.20","00c48920-38ce-40e7-b915-97f757ba4749",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.23",Medium,"1679770371.54772","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.008 AM",,,,,"9c8bd597-fd61-421d-b396-3bd7d27ec5ce_S64D",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uDmLx_B-w0eC_bUTEektJQ, Source IP: 10.10.155.20","9c8bd597-fd61-421d-b396-3bd7d27ec5ce",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.33.31",Medium,"1679770381.76954","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.999 AM",,,,,"56025467-6ff1-4cbe-affc-c1d05f0558ce_ArQx",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IzvZzMHDbvsODhe2Gt9qaw, Source IP: 10.10.155.20","56025467-6ff1-4cbe-affc-c1d05f0558ce",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.64.221",Medium,"1679770382.05882","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.997 AM",,,,,"ed296ada-3e1c-4c42-ba2c-b83f3c3d3997_6SKG",HTTP,,,,,,,VOIP,"2d778507-014e-49b7-98dc-9da6bc6592dd","10.10.31.14","IP Phone 8841",SEPD4AD71BF7221,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lE4pbmE9ZL__n4_Dla28bA, Source IP: 10.10.155.20","ed296ada-3e1c-4c42-ba2c-b83f3c3d3997",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.14",Medium,"1679770371.47117","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.994 AM",,,,,"7cc3e545-2d5d-4a30-9325-136810d21ca4_u8DO",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HXSWkgHo1gDLSdA8OjmMsw, Source IP: 10.10.155.20","7cc3e545-2d5d-4a30-9325-136810d21ca4",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679770381.72977","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.991 AM",,,,,"470419c9-7ff1-4cb6-bd23-b8d696196eda_REgx",HTTP,,,,,,,VOIP,"808f3fe0-9523-48ed-a0e8-a3241829ddb7","10.50.46.32","IP Phone 8841",SEPD4AD71BEB649,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JKldDLeUamS9okArLlbPXA, Source IP: 10.10.155.20","470419c9-7ff1-4cb6-bd23-b8d696196eda",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.32",Medium,"1679770381.74437","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.989 AM",,,,,"eb7a0c2c-ad85-4a92-83af-0615b0a0ec5d_Yo+l",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wYRA46VyNsIxWwHMDlyEWA, Source IP: 10.10.155.20","eb7a0c2c-ad85-4a92-83af-0615b0a0ec5d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.72",Medium,"1679770381.73743","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.987 AM",,,,,"36b65295-65f7-4d2e-9a3e-903be22507c2_vNQO",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aaBztjMelhnxe18bPaUbFg, Source IP: 10.10.155.20","36b65295-65f7-4d2e-9a3e-903be22507c2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.55",Medium,"1679770371.56732","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.984 AM",,,,,"ca7152c8-6ea6-40c6-949b-8c6eb4baa1a8_Hrqm",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8U4P6obGL5w4bRBMEpe0rg, Source IP: 10.10.155.20","ca7152c8-6ea6-40c6-949b-8c6eb4baa1a8",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.21",Medium,"1679770381.73563","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.981 AM",,,,,"e06e1f56-b3f3-4a67-877a-8fad314b65b6_AB5p",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LBv2KuYG217-CtK0GNtLOg, Source IP: 10.10.155.20","e06e1f56-b3f3-4a67-877a-8fad314b65b6",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.39",Medium,"1679770381.74462","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.978 AM",,,,,"75953c66-fe8f-4e35-b8f7-f788f1134947_2MOI",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nZG0z9SyHtgyeH4fxrHX9A, Source IP: 10.10.155.20","75953c66-fe8f-4e35-b8f7-f788f1134947",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.58",Medium,"1679770381.80235","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.188 AM",,,,,"29240ff3-75db-48ba-a3f0-9df5539a5dad_zUrz",HTTP,,,,,,,VOIP,"fae4dc6f-27e1-49f9-83bc-2a58f3a7c675","10.10.31.13","IP Phone 8841",SEPD4AD71BF5B69,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LGTSULf4oJJcG3q5Gd_UWA, Source IP: 10.10.155.20","29240ff3-75db-48ba-a3f0-9df5539a5dad",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.13",Medium,"1679770381.76942","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.186 AM",,,,,"915f8490-df52-4b16-b84a-1c774e6c1973_gmPQ",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_fensda5ZDLYJWt9jBoLkWQ, Source IP: 10.10.155.20","915f8490-df52-4b16-b84a-1c774e6c1973",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.56",Medium,"1679770381.80977","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.183 AM",,,,,"3037543c-60d4-4537-b09a-526fe7146991_MZZs",HTTP,,,,,,,VOIP,"fae4dc6f-27e1-49f9-83bc-2a58f3a7c675","10.10.31.13","IP Phone 8841",SEPD4AD71BF5B69,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_zmRnIu2M2UrfOrJGRm0u0g, Source IP: 10.10.155.20","3037543c-60d4-4537-b09a-526fe7146991",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.13",Medium,"1679770371.46534","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.181 AM",,,,,"338ac928-d481-4f7a-980e-ee4930384e3b_Hu4N",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841","10.10.31.11",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5nMTHPtPEQKVAQn-fOO_mw, Source IP: 10.10.155.20","338ac928-d481-4f7a-980e-ee4930384e3b",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.11",Medium,"1679770371.49423","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.119 AM",,,,,"c8138c49-7ee0-4e51-8120-033b9ca70215_0EBM",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_I4zN7W4tMdpoHXnaI6ZxhA, Source IP: 10.10.155.20","c8138c49-7ee0-4e51-8120-033b9ca70215",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.42",Medium,"1679770371.47306","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.116 AM",,,,,"2a4ac7c4-62c1-4ad5-86a4-63e214d74ba5_TX2z",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_xIi3DPTQPICf3AvmInrMqQ, Source IP: 10.10.155.20","2a4ac7c4-62c1-4ad5-86a4-63e214d74ba5",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.43",Medium,"1679770381.73525","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.114 AM",,,,,"91ea2e0b-6f33-4164-a76e-7f9097b06999_zVr8",HTTP,,,,,,,VOIP,"b886bca6-9754-42b7-b81a-2c17ff7d48a1","10.50.49.34","IP Phone 8841",SEPD4AD71BF2CCF,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_-zpdQqm_u7BcgOufZoy0EQ, Source IP: 10.10.155.20","91ea2e0b-6f33-4164-a76e-7f9097b06999",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.34",Medium,"1679770371.52406","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.112 AM",,,,,"abefff7f-74c9-464f-9c3c-616c35d7a67e_sr/3",HTTP,,,,,,,VOIP,"b886bca6-9754-42b7-b81a-2c17ff7d48a1","10.50.49.34","IP Phone 8841",SEPD4AD71BF2CCF,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_a4eHymoi_LoI_zQcaWC22Q, Source IP: 10.10.155.20","abefff7f-74c9-464f-9c3c-616c35d7a67e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.34",Medium,"1679770381.74557","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.109 AM",,,,,"9be8c2be-1072-4847-b1d8-199a7332b501_4Ksn",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_PSHf46iOZ00hRRj6uWZCMQ, Source IP: 10.10.155.20","9be8c2be-1072-4847-b1d8-199a7332b501",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.44",Medium,"1679770381.81047","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.107 AM",,,,,"4b14413d-6e26-487d-98f1-d832d3e3787f_Ed9p",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ak5u9BDGKfb557WtP5uFOg, Source IP: 10.10.155.20","4b14413d-6e26-487d-98f1-d832d3e3787f",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.64",Medium,"1679770371.45889","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.815 AM",,,,,"85b6c9ba-e2ef-49cb-9fb1-a46d6552a04c_81dh",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Z7mZRlvOZWCGGPobaStWdw, Source IP: 10.10.155.20","85b6c9ba-e2ef-49cb-9fb1-a46d6552a04c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.61",Medium,"1679770381.73116","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.810 AM",,,,,"e9ee7c42-6038-4f6e-b423-f9d865a995ae_A3RS",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_OSsekfyX0otihxZGv2MT-Q, Source IP: 10.10.155.20","e9ee7c42-6038-4f6e-b423-f9d865a995ae",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.58",Medium,"1679770371.56775","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.807 AM",,,,,"2a3966ef-9d92-4035-b669-9409f0e162e2_JJMD",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wVliwFJjePBMDz_CCe9Cxw, Source IP: 10.10.155.20","2a3966ef-9d92-4035-b669-9409f0e162e2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.43",Medium,"1679770381.80307","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.805 AM",,,,,"01ee3372-6cb1-433d-9f37-d52e536475e8_+rgS",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_qJPoTaGX0mXpKkd9tirbVA, Source IP: 10.10.155.20","01ee3372-6cb1-433d-9f37-d52e536475e8",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.58",Medium,"1679770371.55218","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.802 AM",,,,,"041393a9-26d5-4ebd-b526-dbc64aaf2167_lmar",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_gDvJc97Q37eirnrSwaCsng, Source IP: 10.10.155.20","041393a9-26d5-4ebd-b526-dbc64aaf2167",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.39",Medium,"1679770371.54108","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.799 AM",,,,,"67a268bc-a811-4364-8291-cd9bec5e5007_f8NQ",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5On6adoMJxEa6flyfEuZag, Source IP: 10.10.155.20","67a268bc-a811-4364-8291-cd9bec5e5007",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.57",Medium,"1679770371.55357","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.797 AM",,,,,"960d5aee-3060-480e-8cb1-fbf12bbdb758_YGg1",HTTP,,,,,,,VOIP,"8a868242-7170-442d-ace2-2c9ee0d097af","10.50.52.55","IP Phone 8841",SEPD4AD71BF385B,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_y0g5JRg40ZGcaaXgn_15lw, Source IP: 10.10.155.20","960d5aee-3060-480e-8cb1-fbf12bbdb758",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.55",Medium,"1679770371.54776","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.795 AM",,,,,"634c4bab-b6e1-4b26-93d7-d7e975915f48_4inR",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ksvqohF_XK6jDJKVyYOTbA, Source IP: 10.10.155.20","634c4bab-b6e1-4b26-93d7-d7e975915f48",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679770371.54552","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.791 AM",,,,,"eeac3ed5-d207-431a-9ec9-06fb0fe89b89_Eu/T",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_R0O0xOJUFeuLDg-EES-xsw, Source IP: 10.10.155.20","eeac3ed5-d207-431a-9ec9-06fb0fe89b89",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.55",Medium,"1679770381.80515","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.789 AM",,,,,"7f65f419-749a-44e0-b084-8597e93b27b9_7NHU",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LxJtSatJrCQ4Tk6mxeC71g, Source IP: 10.10.155.20","7f65f419-749a-44e0-b084-8597e93b27b9",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.64.221",Medium,"1679770371.88169","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.787 AM",,,,,"d1530bf5-d2d2-481d-8b59-c222d8c32e43_skwI",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lDB988cvgqZB-UesO1t_0w, Source IP: 10.10.155.20","d1530bf5-d2d2-481d-8b59-c222d8c32e43",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.71",Medium,"1679770381.80199","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.784 AM",,,,,"93077170-4b9f-48cd-bc2d-b91bb362e1ab_t+XD",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_D6K1eicW46H-fnEFQCBQ_g, Source IP: 10.10.155.20","93077170-4b9f-48cd-bc2d-b91bb362e1ab",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.28",Medium,"1679770371.5456","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.781 AM",,,,,"8b1fc6e2-282f-42c5-ac1a-76ec2e619123_emNT",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_sziNVw2jJgD7J9QsgmAJHw, Source IP: 10.10.155.20","8b1fc6e2-282f-42c5-ac1a-76ec2e619123",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679770381.73121","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.713 AM",,,,,"d0a23c46-577c-43d0-8c04-ddedb7feb035_jfTP",HTTP,,,,,,,VOIP,"bd57c664-4b28-41c3-aeb0-54337ed7d49e","10.50.53.46","IP Phone 8841",SEPD4AD71BF3105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3E5v02G3SfXNnFWh0WPuLw, Source IP: 10.10.155.20","d0a23c46-577c-43d0-8c04-ddedb7feb035",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.46",Medium,"1679770381.81051","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.710 AM",,,,,"966a7b0b-215b-4409-990d-f26dfb582143_ZeDP",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_KM1UduZiqP4vnuS6clck7g, Source IP: 10.10.155.20","966a7b0b-215b-4409-990d-f26dfb582143",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.16",Medium,"1679770371.54563","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.707 AM",,,,,"fc856ae6-87f1-42c1-b008-215ad95b83aa_6QCo",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nWTTt0ZPa-Ni144AefOozw, Source IP: 10.10.155.20","fc856ae6-87f1-42c1-b008-215ad95b83aa",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.61",Medium,"1679770371.55225","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.705 AM",,,,,"85c12500-02ec-45e6-a345-ec389ce3ebda_FCfK",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IxaLQp3eVPe1D2VwgJcYhw, Source IP: 10.10.155.20","85c12500-02ec-45e6-a345-ec389ce3ebda",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.35.28",Medium,"1679770371.45883","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.702 AM",,,,,"5a39134e-84c7-490d-a2f0-21fca3bea172_WQ3u",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_CctbSFvXHCjSTPa8kXrqBA, Source IP: 10.10.155.20","5a39134e-84c7-490d-a2f0-21fca3bea172",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.21",Medium,"1679770371.55231","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.989 AM",,,,,"df177ba8-5a86-4586-a3c3-f4496fd46ca7_QZR0",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_tO9CCAXL0rgC1zTouGeMLw, Source IP: 10.10.155.20","df177ba8-5a86-4586-a3c3-f4496fd46ca7",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679767118.77918","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.712 AM",,,,,"fb655cbc-5a0b-447e-91ef-856439b46a31_iVu7",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uw6dHlRre9XxuKKv0hj4Gw, Source IP: 10.10.155.20","fb655cbc-5a0b-447e-91ef-856439b46a31",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679767112.56791","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.406 AM",,,,,"4f6d70f4-69c5-4676-8ded-703dbc78ebaa_coH3",HTTP,,,,,,,"IP_CAMERA","a85fe9c0-e16f-44c1-bf6e-d145263dcd92","10.50.171.121",M5054,"axis-accc8ee4c4d4","IP Camera","IP_CAMERA","10.50.171.62","Service: HTTP, User Name: root, Source IP: 10.50.171.62","4f6d70f4-69c5-4676-8ded-703dbc78ebaa",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.171.121",Medium,"1679726298.87799","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:08.070 AM",,,,,"2e385431-25d3-4a91-9856-6eff84e48f2b_FDTq",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uDjlxeDRifjkTkgNbImQIQ, Source IP: 10.10.155.20","2e385431-25d3-4a91-9856-6eff84e48f2b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679707628.75609","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:08.066 AM",,,,,"f916e44f-cc05-4697-8a2b-a42436a603e9_tgCY",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_4ZxR5vUZFYLa8XQQkx2fyQ, Source IP: 10.10.155.20","f916e44f-cc05-4697-8a2b-a42436a603e9",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679707628.76708","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.205 AM",,,,,"c5ca7dd5-d1ea-4868-9954-2b0e9c2cec9b_49jk",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3Ey9eRPmmSPmErGiaAftfw, Source IP: 10.10.155.20","c5ca7dd5-d1ea-4868-9954-2b0e9c2cec9b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.58",Medium,"1679706055.87024","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.201 AM",,,,,"fd893e59-7da9-440d-bf2e-139e98c27bfe_R3Bk",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lxxP3jjc3FoHxeYyU6JyMw, Source IP: 10.10.155.20","fd893e59-7da9-440d-bf2e-139e98c27bfe",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.22",Medium,"1679706055.86779","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.183 AM",,,,,"955ee4c1-1f6a-4a7c-8fa8-e7f2c95903d7_LzRB",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_M0Nnfpub_uZkauL1GH6LGg, Source IP: 10.10.155.20","955ee4c1-1f6a-4a7c-8fa8-e7f2c95903d7",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.64",Medium,"1679706039.70032","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.130 AM",,,,,"b6b019d6-7345-42e6-8901-6f1571676ca6_Utrg",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_O2MEz7BGdIEAFq8PA4Uong, Source IP: 10.10.155.20","b6b019d6-7345-42e6-8901-6f1571676ca6",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.72",Medium,"1679706039.75501","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.127 AM",,,,,"e9e2cd76-8bec-4ee4-9726-af31856a5be5_06ou",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__hxN36mEyn44VTb82bwnhA, Source IP: 10.10.155.20","e9e2cd76-8bec-4ee4-9726-af31856a5be5",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.42",Medium,"1679706055.94212","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.124 AM",,,,,"211dd88b-f31c-495e-90de-db9a669c8b66_jyO/",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_86EMi8D9RvsCHcCWxMMvug, Source IP: 10.10.155.20","211dd88b-f31c-495e-90de-db9a669c8b66",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.58",Medium,"1679706039.75425","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.121 AM",,,,,"a79b3b41-2024-4472-abc0-dd4732f4382f_vwoY",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_k14IUeiV4PRstgkwsuLSdw, Source IP: 10.10.155.20","a79b3b41-2024-4472-abc0-dd4732f4382f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.25",Medium,"1679706055.94747","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.117 AM",,,,,"6be209a9-c0ec-43df-9493-284c82a81cb2_ji7f",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wXEwhlGsOCUpt8aUTe9GzA, Source IP: 10.10.155.20","6be209a9-c0ec-43df-9493-284c82a81cb2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.55",Medium,"1679706055.86651","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.113 AM",,,,,"0474e26f-a0dc-4c40-8b60-0c30ab16cd7c_af1G",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Nn-9bFXtXx_z7K_4EYZ9Ig, Source IP: 10.10.155.20","0474e26f-a0dc-4c40-8b60-0c30ab16cd7c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.36",Medium,"1679706055.9321","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.080 AM",,,,,"12980e08-159e-4bcf-ab64-f1c50188e606_v1aB",HTTP,,,,,,,VOIP,"2fbc5b18-0006-4c1c-beab-f82c8fa34d86","10.10.153.13","IP Phone 8841",SEP2C31246EEC38,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_QyXetxBPAoPvsH4TcJZB6A, Source IP: 10.10.155.20","12980e08-159e-4bcf-ab64-f1c50188e606",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.153.13",Medium,"1679706039.69103","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.387 AM",,,,,"63f1d2cd-f96d-4ae4-a586-0653704025a2_hcKq",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_f25Tzs0LO_QvQJNvXeyksA, Source IP: 10.10.155.20","63f1d2cd-f96d-4ae4-a586-0653704025a2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.77",Medium,"1679706055.93193","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.384 AM",,,,,"0863249f-a8ff-4602-a696-2b1aea4fec7a_vETb",HTTP,,,,,,,VOIP,"8d8ac1dd-e457-45c1-a20d-3552201b213e","10.50.51.22","IP Phone 8841",SEPCC70ED5793C6,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_47htWIBX2iiAH4hnzdZMkQ, Source IP: 10.10.155.20","0863249f-a8ff-4602-a696-2b1aea4fec7a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.22",Medium,"1679706055.93168","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.380 AM",,,,,"4bc118ff-b395-4b01-900a-45be9ade8fd2_Byvb",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_D49l6eNGIVPACm_FMzIT7w, Source IP: 10.10.155.20","4bc118ff-b395-4b01-900a-45be9ade8fd2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.25",Medium,"1679706039.85733","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.378 AM",,,,,"ab937c91-5366-4bcd-a10d-f86f15db3b65_FpJ/",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_F3qnTQScLjA675QNlXRXHg, Source IP: 10.10.155.20","ab937c91-5366-4bcd-a10d-f86f15db3b65",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.16",Medium,"1679706039.73643","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.374 AM",,,,,"fd93c25b-2509-4312-9597-c66e21a524bc_8Yrd",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HjrbuIu3AE2b3te68NL43w, Source IP: 10.10.155.20","fd93c25b-2509-4312-9597-c66e21a524bc",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.16",Medium,"1679706055.94043","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.371 AM",,,,,"4d65eb99-0995-467e-a358-82888bd9a0a5_pRof",HTTP,,,,,,,VOIP,"aa29744d-1cc2-42c1-9e18-309f24f40fa1","10.50.49.41","IP Phone 8841",SEPD4AD71BF27DB,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_I94rMhe3DxaYONKAQGDjtg, Source IP: 10.10.155.20","4d65eb99-0995-467e-a358-82888bd9a0a5",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.41",Medium,"1679706039.6913","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.368 AM",,,,,"c4699fcd-8f59-46d0-ab54-cde8f769b4b5_eIOa",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ekg6RGW7BraWXkMXabJXgQ, Source IP: 10.10.155.20","c4699fcd-8f59-46d0-ab54-cde8f769b4b5",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.44",Medium,"1679706055.93121","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.360 AM",,,,,"48aa601f-0e01-465d-ad26-cfb4670729a2_W+ya",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_YHs7qIDElp1Qo0jcYWJ_CQ, Source IP: 10.10.155.20","48aa601f-0e01-465d-ad26-cfb4670729a2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.72",Medium,"1679706055.93018","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.516 AM",,,,,"fb537900-9906-4af3-8938-ee2294405793_jxru",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_1wCr-jhvw9Q3g9bcTpemcQ, Source IP: 10.10.155.20","fb537900-9906-4af3-8938-ee2294405793",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.23",Medium,"1679706039.73314","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.513 AM",,,,,"f52c8e00-ca36-4dad-9526-78ed078347b6_gvRo",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_mFaISmSqgVIbhluW-88f2A, Source IP: 10.10.155.20","f52c8e00-ca36-4dad-9526-78ed078347b6",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.21",Medium,"1679706039.73192","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.511 AM",,,,,"6acaa23a-44b1-48cb-963d-38826b873c3d_lDC5",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Iiqg9GJYkUVmiBkEb6kvHg, Source IP: 10.10.155.20","6acaa23a-44b1-48cb-963d-38826b873c3d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.58",Medium,"1679706055.93162","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.507 AM",,,,,"d5720f3f-af47-4469-9bf0-be1beb3cdf79_tzHp",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ZGfMUT2wDody4Crz7lSX9Q, Source IP: 10.10.155.20","d5720f3f-af47-4469-9bf0-be1beb3cdf79",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.53",Medium,"1679706055.9409","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.504 AM",,,,,"eefda94e-e675-4365-b1fc-f44fda9adf39_x7KB",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_iDspOIPxQkk18PEDKFooAQ, Source IP: 10.10.155.20","eefda94e-e675-4365-b1fc-f44fda9adf39",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.64",Medium,"1679706055.88164","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.501 AM",,,,,"07042da5-5846-4c0a-bd89-e81effbe9b95_sWNZ",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_sp9_ibP0qIVEByIYm01u-Q, Source IP: 10.10.155.20","07042da5-5846-4c0a-bd89-e81effbe9b95",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.241.10",Medium,"1679706039.71511","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.497 AM",,,,,"917c1314-5be4-4325-9f6b-3ed55c044f37_gMGU",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HeAjE8TZff5K0Hd0Lv7pjA, Source IP: 10.10.155.20","917c1314-5be4-4325-9f6b-3ed55c044f37",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.39",Medium,"1679706039.70015","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.493 AM",,,,,"e380387b-1e02-4f52-96e3-0be4cd464273_+ST2",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aXnGPXSZm1Dvgtd4h9Kz5Q, Source IP: 10.10.155.20","e380387b-1e02-4f52-96e3-0be4cd464273",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.28",Medium,"1679706039.73326","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.489 AM",,,,,"8752259c-0090-4f13-b183-17e151d9d979_6Fgc",HTTP,,,,,,,VOIP,"f7245c4d-eb2f-4b0a-9a1e-90b2cf9f63c1","10.10.153.32","IP Phone 8841",SEPD4AD71BF4105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_hKgz3W3qQXdGxwLPjMIrKg, Source IP: 10.10.155.20","8752259c-0090-4f13-b183-17e151d9d979",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.153.32",Medium,"1679706055.87508","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.486 AM",,,,,"b5f1c4a4-4418-45ef-9ba0-c3eb319d0189_TSrS",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ArOwOy6WPIWRBUCunD8w_w, Source IP: 10.10.155.20","b5f1c4a4-4418-45ef-9ba0-c3eb319d0189",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.56",Medium,"1679706055.94043","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.482 AM",,,,,"c24009be-8850-46ea-b977-b336e23656fa_BjkI",HTTP,,,,,,,VOIP,"27b24cd5-08cd-462a-989e-4983ec9785b0","10.10.34.116","IP Phone 8841",SEP70C9C668EBBD,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_0hRcu6ty2zkY_jTqcdczMg, Source IP: 10.10.155.20","c24009be-8850-46ea-b977-b336e23656fa",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.116",Medium,"1679706055.93123","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.426 AM",,,,,"9ed62d42-d0fc-49d3-9157-133a9d2eb30a_sqVY",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_7-G_QStQW0TSXYt27dcgqQ, Source IP: 10.10.155.20","9ed62d42-d0fc-49d3-9157-133a9d2eb30a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.48",Medium,"1679706055.93031","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.423 AM",,,,,"a3bf10f9-2c76-45cb-a305-76ff7dacb286_/kco",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_dL8Gt5NLK4RqqurgoZ_UXg, Source IP: 10.10.155.20","a3bf10f9-2c76-45cb-a305-76ff7dacb286",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.57",Medium,"1679706055.87009","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.420 AM",,,,,"1e6412f6-9c15-4ed3-83f0-7d7e6b607561_qoaY",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T_WgIUPKMjMAkxXQsaV7GA, Source IP: 10.10.155.20","1e6412f6-9c15-4ed3-83f0-7d7e6b607561",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.35.28",Medium,"1679706055.8753","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.417 AM",,,,,"e9c9b85d-f72b-4cd6-a070-ff5671751b7f_U8+a",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6l7wNq30hU4t5Kb4mZ-x0g, Source IP: 10.10.155.20","e9c9b85d-f72b-4cd6-a070-ff5671751b7f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.37",Medium,"1679706055.93055","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.414 AM",,,,,"8252baca-ad04-4240-9891-da9aa5be9bac_WL1Z",HTTP,,,,,,,VOIP,"22bddb40-4061-4599-8f25-6ae0ab49a820","10.10.31.22","IP Phone 8841",SEP70C9C668072E,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5FEMNhP1DjPW9wVn77-Qwg, Source IP: 10.10.155.20","8252baca-ad04-4240-9891-da9aa5be9bac",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.22",Medium,"1679706039.70038","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.410 AM",,,,,"6a95378f-0f48-4306-9962-b0b82f27074a_L/5a",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9NJkIfPpZLtkUyarUci0Hg, Source IP: 10.10.155.20","6a95378f-0f48-4306-9962-b0b82f27074a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.43",Medium,"1679706039.734","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.407 AM",,,,,"37bc1790-d028-407e-8bcc-720f33eb3c8b_C+IF",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_hDuq7AbP-ZiUk8wNOqfuFA, Source IP: 10.10.155.20","37bc1790-d028-407e-8bcc-720f33eb3c8b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.70",Medium,"1679706039.68963","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.403 AM",,,,,"0090218d-c28f-4846-864e-2083287f3cd1_pUoP",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_2PZYJppCGOPCz1hbSeKctQ, Source IP: 10.10.155.20","0090218d-c28f-4846-864e-2083287f3cd1",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679706039.73547","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.400 AM",,,,,"bd395a78-a228-4f7a-aa46-fb3240db933f_pT1z",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8_pB1fXKa8iO2STIQsUY8w, Source IP: 10.10.155.20","bd395a78-a228-4f7a-aa46-fb3240db933f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.41",Medium,"1679706055.93035","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.397 AM",,,,,"e1dbb6df-2c3b-47c6-9c39-83bf7eaad93f_ToNU",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_P3VWq_EnNgKyKxAuFOE53Q, Source IP: 10.10.155.20","e1dbb6df-2c3b-47c6-9c39-83bf7eaad93f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.70",Medium,"1679706055.86797","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.393 AM",,,,,"e683ed8d-caef-472c-99e1-3f4d3ca78544_w2Sj",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_rAC3m642UV_GxXqFaiuZDg, Source IP: 10.10.155.20","e683ed8d-caef-472c-99e1-3f4d3ca78544",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.61",Medium,"1679706055.86673","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.389 AM",,,,,"16222c72-c058-44ca-80fc-9ca45752b7e8_zKlS",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HXW1WEBppT03Lac3JU6AQQ, Source IP: 10.10.155.20","16222c72-c058-44ca-80fc-9ca45752b7e8",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.48",Medium,"1679706039.73405","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.384 AM",,,,,"4c77e44f-febd-452d-bf02-ec763caf7291_Ho23",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841","10.10.31.11",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_NLOz7MxqKwqyqLT02r93Fw, Source IP: 10.10.155.20","4c77e44f-febd-452d-bf02-ec763caf7291",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.11",Medium,"1679706055.92687","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.381 AM",,,,,"8e17a20a-65ff-4bb6-aaf8-d8a2b1b57d28_mkEA",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_yRhNdqhkVYpk_WVkc2qQwg, Source IP: 10.10.155.20","8e17a20a-65ff-4bb6-aaf8-d8a2b1b57d28",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.42",Medium,"1679706039.70228","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.323 AM",,,,,"5c64145e-d4db-4bee-a749-b58db1063ac6_l//y",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ZK6VhNK3RiqT-WKqdmb4YA, Source IP: 10.10.155.20","5c64145e-d4db-4bee-a749-b58db1063ac6",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679706039.7543","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.321 AM",,,,,"5cbaf7b2-d982-47d9-8b71-465c36ba7d0b_TtTN",HTTP,,,,,,,VOIP,"4c3d8787-96c1-42d4-bc6f-096b3fc35b38","10.50.49.73","IP Phone 8841",SEPCC70ED56F42A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_f7E0GGngN6FNXuoyrXmcow, Source IP: 10.10.155.20","5cbaf7b2-d982-47d9-8b71-465c36ba7d0b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.73",Medium,"1679706039.73336","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.318 AM",,,,,"c5252310-993e-40c6-b855-4baa53713534_O9cw",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_tegUhdSIRjUksCTzPjkgEg, Source IP: 10.10.155.20","c5252310-993e-40c6-b855-4baa53713534",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.77",Medium,"1679706039.73544","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.315 AM",,,,,"c867b172-025a-4aa2-8e80-80c256fd25ff_10hG",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UDG4fTadJUFMUXx-MDrTmg, Source IP: 10.10.155.20","c867b172-025a-4aa2-8e80-80c256fd25ff",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.56",Medium,"1679706039.68896","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.312 AM",,,,,"e06c21c4-7d80-4e34-86cf-c5afd40050b3_75hs",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_DD6B6G15MLFotcZR5zA37w, Source IP: 10.10.155.20","e06c21c4-7d80-4e34-86cf-c5afd40050b3",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679706055.9556","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.309 AM",,,,,"33db0017-0a6b-42c7-adf3-137e8fcf3696_W/gh",HTTP,,,,,,,VOIP,"2d778507-014e-49b7-98dc-9da6bc6592dd","10.10.31.14","IP Phone 8841",SEPD4AD71BF7221,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_TrV6VpHj3eVViRT92kN6UA, Source IP: 10.10.155.20","33db0017-0a6b-42c7-adf3-137e8fcf3696",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.14",Medium,"1679706039.6887","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.793 AM",,,,,"76138f42-1a91-4cd4-a838-e71c6c8d0760_txNK",HTTP,,,,,,,"IP_CAMERA","4832413e-70fa-4e2d-b833-ae653e775282","10.50.171.21",M5054,"axis-accc8ee4d4a1","IP Camera","IP_CAMERA","10.10.147.105","Service: HTTP, User Name: root, Source IP: 10.10.147.105","76138f42-1a91-4cd4-a838-e71c6c8d0760",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.171.21",Medium,"1679702661.50426","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.010 AM",,,,,"1e395f2a-a3e0-4fe6-8bad-1e90769b94b5_eDjN",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T4Xi52wTLXPu30-_Z25Gjw, Source IP: 10.10.155.20","1e395f2a-a3e0-4fe6-8bad-1e90769b94b5",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.25",Medium,"1679697735.56773","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.008 AM",,,,,"43db3a1b-4266-46ad-80af-c1468c8ec1bf_TGM9",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_K7Kez_EtT5a4ipMahS-fhQ, Source IP: 10.10.155.20","43db3a1b-4266-46ad-80af-c1468c8ec1bf",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.44",Medium,"1679697735.54114","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.000 AM",,,,,"e8cf5f96-7e7d-4458-9fa8-dc5def32ed41_rSLm",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_-yZycgLXcGwlIqKKzmCI8g, Source IP: 10.10.155.20","e8cf5f96-7e7d-4458-9fa8-dc5def32ed41",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.72",Medium,"1679697735.54234","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.881 AM",,,,,"a973fbaa-d607-49bf-8cb7-c6d68fcba245_kKsl",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8-KBLuxsQ-eBaBY0DHltqg, Source IP: 10.10.155.20","a973fbaa-d607-49bf-8cb7-c6d68fcba245",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.71",Medium,"1679697749.83986","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.818 AM",,,,,"74ca1670-f70d-4a6e-956d-461097190494_pcau",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kUkJlo8SsKaCqzsOvqjFkQ, Source IP: 10.10.155.20","74ca1670-f70d-4a6e-956d-461097190494",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.58",Medium,"1679697749.83063","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.815 AM",,,,,"60d34396-2316-4fba-8016-92f5fadf8f11_k4Ab",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_s98yQDYFZji2s2fWGmCGKA, Source IP: 10.10.155.20","60d34396-2316-4fba-8016-92f5fadf8f11",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.241.10",Medium,"1679697735.50227","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.812 AM",,,,,"021b791c-28d9-49f0-b1f4-95d6cd340d01_z72X",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BPObFdeEJiU4CAXnbOcEqw, Source IP: 10.10.155.20","021b791c-28d9-49f0-b1f4-95d6cd340d01",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.64.221",Medium,"1679697750.07005","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.809 AM",,,,,"5bfa1a1e-8061-41bd-aee1-4fd151ac2078_XYC1",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8VlJ9T_rPiOjbHvbmdMDww, Source IP: 10.10.155.20","5bfa1a1e-8061-41bd-aee1-4fd151ac2078",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679697749.82405","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.806 AM",,,,,"7aff6ae2-61ed-47db-b81c-f10cf5ca6034_IlS+",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lcU8xU_cxa09FbY4owy5SA, Source IP: 10.10.155.20","7aff6ae2-61ed-47db-b81c-f10cf5ca6034",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679697749.81659","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.803 AM",,,,,"ccb0a91d-de9d-4ed5-9966-b254b7d35183_2pk5",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Szn9gmSzcgFFR6e1GFsqqg, Source IP: 10.10.155.20","ccb0a91d-de9d-4ed5-9966-b254b7d35183",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.53",Medium,"1679697735.5427","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.800 AM",,,,,"e315db92-dd7d-438f-9e6d-033c744301f4_J02n",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_YKvy3EszuQAYs4bzgo_wHg, Source IP: 10.10.155.20","e315db92-dd7d-438f-9e6d-033c744301f4",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.43",Medium,"1679697749.85991","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.797 AM",,,,,"366d67ba-2498-4715-85bb-bfd0f5e7ed10_55co",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T-ZoD9scSDZIK755Qo73Eg, Source IP: 10.10.155.20","366d67ba-2498-4715-85bb-bfd0f5e7ed10",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.37",Medium,"1679697749.82425","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.795 AM",,,,,"67ce8e6d-4795-4d7e-ab4c-6c6edc54ff28_/WBV",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_V6VWwg0LBltSMvENlxy-ow, Source IP: 10.10.155.20","67ce8e6d-4795-4d7e-ab4c-6c6edc54ff28",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.56",Medium,"1679697749.83344","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.793 AM",,,,,"250504dc-c722-4bae-896d-0fe4ad12155d_XMR+",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_011Z-wpLt7z1MkB_ymjw5Q, Source IP: 10.10.155.20","250504dc-c722-4bae-896d-0fe4ad12155d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.55",Medium,"1679697735.51058","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.790 AM",,,,,"2b95b947-1b08-4ecc-9936-1a1a1c7cc84d_QSNq",HTTP,,,,,,,VOIP,"48b34814-f3d4-4c3b-a14f-dfca32ab8d49","10.50.54.49","IP Phone 8841","10.50.54.49",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_7XI8DBKgeOd46LeDtUaN-Q, Source IP: 10.10.155.20","2b95b947-1b08-4ecc-9936-1a1a1c7cc84d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.49",Medium,"1679697735.54247","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.787 AM",,,,,"7f172e5f-8134-460f-b399-1c985093c3e6_rKsu",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_QpFHCYCLcgH-Utnki6ZKmA, Source IP: 10.10.155.20","7f172e5f-8134-460f-b399-1c985093c3e6",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.25",Medium,"1679697749.81581","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.784 AM",,,,,"f8346126-082a-42d2-953e-4b8268243176_x8ph",HTTP,,,,,,,VOIP,"22bddb40-4061-4599-8f25-6ae0ab49a820","10.10.31.22","IP Phone 8841",SEP70C9C668072E,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_oSezr9iK3DbU0vj5fiW46A, Source IP: 10.10.155.20","f8346126-082a-42d2-953e-4b8268243176",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.22",Medium,"1679697735.48006","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.781 AM",,,,,"d3377956-ecdb-4a19-8891-9075e6c1d7bd_AKV4",HTTP,,,,,,,VOIP,"634faeed-a4de-4f9e-87df-c0a400ad6c7b","10.50.49.68","IP Phone 8841",SEPD4AD71BF2860,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wayYP30OmhTfMdYfui0LHQ, Source IP: 10.10.155.20","d3377956-ecdb-4a19-8891-9075e6c1d7bd",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.68",Medium,"1679697749.8147","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.715 AM",,,,,"90997bf7-6fb3-4392-aec7-07369f6502fb_GZpG",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_g4HyCCAVQ-1B2eqak0Txlw, Source IP: 10.10.155.20","90997bf7-6fb3-4392-aec7-07369f6502fb",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.61",Medium,"1679697735.56466","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.711 AM",,,,,"1499c866-8d04-4241-a43b-82a2818b0422_B84W",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6f77P8Dwj9PCcQEwMmchSw, Source IP: 10.10.155.20","1499c866-8d04-4241-a43b-82a2818b0422",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.33.31",Medium,"1679697749.84069","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.709 AM",,,,,"06343f1d-5bb6-4d5c-9eda-8fed56cc274c_3mlM",HTTP,,,,,,,VOIP,"8a868242-7170-442d-ace2-2c9ee0d097af","10.50.52.55","IP Phone 8841",SEPD4AD71BF385B,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_1JKc5XJB1U_JHBOydGyw4A, Source IP: 10.10.155.20","06343f1d-5bb6-4d5c-9eda-8fed56cc274c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.55",Medium,"1679697735.54206","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.705 AM",,,,,"c721904b-39fb-44ec-bd9a-98af77d91d20_yNkF",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8Ykwtks5Mpduxpm634KGhQ, Source IP: 10.10.155.20","c721904b-39fb-44ec-bd9a-98af77d91d20",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.53",Medium,"1679697749.8502","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.702 AM",,,,,"1eb39097-1cee-47b3-acdd-1382ab2b4e19_Rw3T",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uJiWuJspiDuHoficPpMttA, Source IP: 10.10.155.20","1eb39097-1cee-47b3-acdd-1382ab2b4e19",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679697735.55872","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.700 AM",,,,,"95e914ce-6f08-43e4-93e8-f78a27a408bc_RGJH",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_53M-pwUAnUHIqFbCw9DKmQ, Source IP: 10.10.155.20","95e914ce-6f08-43e4-93e8-f78a27a408bc",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.22",Medium,"1679697749.82959","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.696 AM",,,,,"331b22b3-4871-4f40-92ef-a7fc3654bcbe_/zdr",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_bxIvTl5LfsIUuYt-0gV6cA, Source IP: 10.10.155.20","331b22b3-4871-4f40-92ef-a7fc3654bcbe",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.71",Medium,"1679697735.54404","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:27.642 AM",,,,,"1e208da3-2267-4992-9e75-8ce0b77c359e_zJFQ",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6esGGw0pnFdjYjE3xBHTIw, Source IP: 10.10.155.20","1e208da3-2267-4992-9e75-8ce0b77c359e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679695866.54049","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.193 AM",,,,,"d3d6f94c-2566-4317-95b6-46199decdd5e_41LY",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_X_VJA-7i_69DYBLNeN0iqA, Source IP: 10.10.155.20","d3d6f94c-2566-4317-95b6-46199decdd5e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679689181.25192","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.188 AM",,,,,"68061f0e-cdb5-47ce-b886-265b90679d9a_ArV1",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_yKdA5YDDA8DZGSLYSLArRg, Source IP: 10.10.155.20","68061f0e-cdb5-47ce-b886-265b90679d9a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679689210.30697","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.185 AM",,,,,"ab912f7e-b21e-4364-bbc5-9a4ce218c00f_aj0I",HTTP,,,,,,,VOIP,"bdd00ed8-cefa-442e-b3c7-0bfc60e90197","10.10.188.64","IP Phone 8841",SEP34F8E77B4297,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BtcvgAjWd8DeS8yt67OiQg, Source IP: 10.10.155.20","ab912f7e-b21e-4364-bbc5-9a4ce218c00f",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.188.64",Medium,"1679689423.71109","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:51.661 AM",,,,,"6e58a3e0-96ad-4021-8709-5f706abe8627_ommu",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UB0ezDI-c8V0WopzXz4Jmg, Source IP: 10.10.155.20","6e58a3e0-96ad-4021-8709-5f706abe8627",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679687607.65803","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:51.658 AM",,,,,"928cd35f-3052-470b-ba2d-fff92557dc89_vwya",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_NHRAbfpfkguNsxiIiUfi0A, Source IP: 10.10.155.20","928cd35f-3052-470b-ba2d-fff92557dc89",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679687581.58065","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.182 AM",,,,,"6ff3a520-1394-498d-924d-728c3b87bfb7_hbZR",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__kCrCdTenq03qFaNKGZCsQ, Source IP: 10.10.155.20","6ff3a520-1394-498d-924d-728c3b87bfb7",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679687588.79348","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.117 AM",,,,,"9a1c965b-7a92-4675-b0ce-75007849b789_8e5q",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5FPeEkn6mUNBSCiP9eFApw, Source IP: 10.10.155.20","9a1c965b-7a92-4675-b0ce-75007849b789",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679686898.32244","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.115 AM",,,,,"563cf2ba-b2f9-4e63-b312-4ec2cd718231_CCeP",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ejRgaJxu41hUtRTv6BWvPg, Source IP: 10.10.155.20","563cf2ba-b2f9-4e63-b312-4ec2cd718231",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679687607.65988","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.111 AM",,,,,"70c9562b-179e-4a25-815f-b40ffa5de35d_hcRh",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_mNiqJTLqqOhLZ5nfrkIqOA, Source IP: 10.10.155.20","70c9562b-179e-4a25-815f-b40ffa5de35d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679687581.57223","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.904 AM",,,,,"9824a445-581a-45a5-bc5e-5736ff979de5_tiJO",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_VMcTFT3gYvSHMxcNbDMtwA, Source IP: 10.10.155.20","9824a445-581a-45a5-bc5e-5736ff979de5",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679685999.59764","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.901 AM",,,,,"b0097233-2847-41e3-9f55-baf601e5f128_L+CQ",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IVVXn5_JBwdbBYTjLiP-8g, Source IP: 10.10.155.20","b0097233-2847-41e3-9f55-baf601e5f128",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679686106.37334","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.898 AM",,,,,"e44d6ae6-ba35-4b68-bdc4-a9d747e03150_g191",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_GDFFHpM549sc9LsAZzDSDw, Source IP: 10.10.155.20","e44d6ae6-ba35-4b68-bdc4-a9d747e03150",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679685992.3978","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.896 AM",,,,,"d35e2cf8-a37a-41f8-b138-2a40e433493d_dVmF",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_zhtE-7NdhQTYAOmS9CN4ig, Source IP: 10.10.155.20","d35e2cf8-a37a-41f8-b138-2a40e433493d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679685999.59739","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.893 AM",,,,,"4cd17d4a-3216-4aa4-9edf-2748a95eed73_W8y/",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uBedgBXx9YyPifam8jHncA, Source IP: 10.10.155.20","4cd17d4a-3216-4aa4-9edf-2748a95eed73",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679685992.39923","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:12.801 AM",,,,,"727fde9a-6512-4764-8689-93e8865d1312_o98K",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_CjSV7M8aj4EZ9vwBoIEdig, Source IP: 10.10.155.20","727fde9a-6512-4764-8689-93e8865d1312",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679680084.94643","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:12.798 AM",,,,,"71fe00b3-6d2e-4a6a-b2ef-b6c1bc37f41d_UrVE",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Dh_rDViUHmZgnOT-vIOHyQ, Source IP: 10.10.155.20","71fe00b3-6d2e-4a6a-b2ef-b6c1bc37f41d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679680084.94333","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:12.794 AM",,,,,"54a349dc-9730-4f38-afbc-577982851d27_kGhS",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_DDJKfpxsdPbRwD_TJD0Q6g, Source IP: 10.10.155.20","54a349dc-9730-4f38-afbc-577982851d27",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679680077.73433","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.910 AM",,,,,"d5d97d2f-72a9-4ddf-a44a-ba8722593920_tJPC",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_mae1jLY2krEtxN18pDoQbw, Source IP: 10.10.155.20","d5d97d2f-72a9-4ddf-a44a-ba8722593920",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679679614.3436","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.907 AM",,,,,"df57ca61-2c20-4a82-ba12-75caab9bb625_kqpH",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_31suQheJWq_qzh2DUgpPZg, Source IP: 10.10.155.20","df57ca61-2c20-4a82-ba12-75caab9bb625",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679679915.40465","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.290 AM",,,,,"4623124b-7d51-4041-85a6-2686e9bdb81a_6Nar",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Q8r1okaRyLINiSBQtlio7A, Source IP: 10.10.155.20","4623124b-7d51-4041-85a6-2686e9bdb81a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679671806.84604","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.285 AM",,,,,"d382c36f-e648-46d6-b108-b695b515a735_tppe",HTTP,,,,,,,"OT_DEVICE","687251b6-37a6-42cc-9296-8ce69f691646","10.10.25.135","APC by Schneider Electric",netbotzC36344,"OT Device","OT_DEVICE","10.10.140.203","Service: HTTP, User Name: apc, Password: apc, Source IP: 10.10.140.203","d382c36f-e648-46d6-b108-b695b515a735",IDS,80,"[ - ""default_credentials_v2_http"" -]","10.10.25.135",Medium,"1679674882.42072","Default Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.231 AM",,,,,"5eaf62cf-d871-49fc-bdd5-6a4299c1fc59_tppe",HTTP,,,,,,,"OT_DEVICE","687251b6-37a6-42cc-9296-8ce69f691646","10.10.25.135","APC by Schneider Electric",netbotzC36344,"OT Device","OT_DEVICE","10.10.140.203","Service: HTTP, User Name: apc, Source IP: 10.10.140.203","5eaf62cf-d871-49fc-bdd5-6a4299c1fc59",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.25.135",Medium,"1679674882.42072","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.227 AM",,,,,"eb362d6a-a4d1-45b0-8be9-cb0a0b5b13f4_Mjl+",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kdkrOZi5WTbSVGeLmBStsg, Source IP: 10.10.155.20","eb362d6a-a4d1-45b0-8be9-cb0a0b5b13f4",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679671806.85495","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:56.101 AM",,,,,"746427a0-cf4f-490f-a3b6-6dcb214eeb6c_I/kd",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841","10.10.31.11",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_GQ4272Q1yS6qnkoUXNZzSQ, Source IP: 10.10.155.20","746427a0-cf4f-490f-a3b6-6dcb214eeb6c",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.11",Medium,"1679672717.8723","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:56.098 AM",,,,,"8bc4bec8-d54d-4b71-8117-787f4a864f0c_rG/c",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nLWeBV92kepIHCtMu0F-6g, Source IP: 10.10.155.20","8bc4bec8-d54d-4b71-8117-787f4a864f0c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679671555.42487","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:56.094 AM",,,,,"8985ecd4-69ea-4e84-b0a4-e3ae4d5fcd89_3hg4",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9TRw_c1r058sebdcVkx6dA, Source IP: 10.10.155.20","8985ecd4-69ea-4e84-b0a4-e3ae4d5fcd89",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.70",Medium,"1679672717.94972","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:52.722 AM",,,,,"4319b98c-e322-4531-b796-e70d51d6e95d_26E6",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_v6qPReWFx2b_l9MW9jBDvg, Source IP: 10.10.155.20","4319b98c-e322-4531-b796-e70d51d6e95d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679671119.40486","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:52.718 AM",,,,,"6668d810-9512-4d56-a56c-f644670d3ee3_lu40",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uxyBaqazrM1Gkjokqc9jRw, Source IP: 10.10.155.20","6668d810-9512-4d56-a56c-f644670d3ee3",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679670503.44922","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.418 AM",,,,,"f737e1a5-76f4-4838-9109-8c82846c1f5a_EGIo",HTTP,,,,,,,"IP_CAMERA","a85fe9c0-e16f-44c1-bf6e-d145263dcd92","10.50.171.121",M5054,"axis-accc8ee4c4d4","IP Camera","IP_CAMERA","10.10.147.105","Service: HTTP, User Name: root, Source IP: 10.10.147.105","f737e1a5-76f4-4838-9109-8c82846c1f5a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.171.121",Medium,"1679669791.4567","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:42.800 AM",,,,,"7f7b511f-3896-4c40-81e9-8ce50bf316b0_6DDW",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_up4DbxqYvmUkZ4_RUI6kDw, Source IP: 10.10.155.20","7f7b511f-3896-4c40-81e9-8ce50bf316b0",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679665452.35579","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:42.796 AM",,,,,"2dd346ae-cc8d-4953-b057-f7391087afdd_70ay",HTTP,,,,,,,"IP_CAMERA","4832413e-70fa-4e2d-b833-ae653e775282","10.50.171.21",M5054,"axis-accc8ee4d4a1","IP Camera","IP_CAMERA","10.10.147.105","Service: HTTP, User Name: root, Source IP: 10.10.147.105","2dd346ae-cc8d-4953-b057-f7391087afdd",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.171.21",Medium,"1679665496.53826","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:42.789 AM",,,,,"1e5b2d38-047e-440a-bc62-f830b1dc12fb_yQBC",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UXCRziZpFzZM9wV-Jd-Irg, Source IP: 10.10.155.20","1e5b2d38-047e-440a-bc62-f830b1dc12fb",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679665452.35571","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.580 AM",,,,,"fc779963-41e3-4caa-a070-0e04f706e33e_MalP",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_FJUDRMNet07DVkNwoETYWw, Source IP: 10.10.155.20","fc779963-41e3-4caa-a070-0e04f706e33e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679617776.63783","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.530 AM",,,,,"0bd28e8c-d519-4224-878a-d4f89be7264e_ylEh",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6srlLmm5LBna4BnfXJfryw, Source IP: 10.10.155.20","0bd28e8c-d519-4224-878a-d4f89be7264e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679617769.41528","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.405 AM",,,,,"279567fc-e624-454c-ae2f-3ccc6ddf0fed_HvAO",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3HEPWpO21dr_dQlrLZaKxw, Source IP: 10.10.155.20","279567fc-e624-454c-ae2f-3ccc6ddf0fed",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679617710.89796","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.403 AM",,,,,"47ba4893-b6a3-44a9-b236-359481c3f1ab_8lM/",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ALHOYb03G45Hp-z2u5nDAg, Source IP: 10.10.155.20","47ba4893-b6a3-44a9-b236-359481c3f1ab",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679617720.12268","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.089 AM",,,,,"4a1ebe07-e3c6-4ee8-9aba-bcb5d6bb4fc4_gNWw",HTTP,,,,,,,VOIP,"0a1568ad-ddf8-4c79-bc09-3f1a02b6b4b1","10.10.188.62","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_au_wdWKun3eKJesXQLsd6w, Source IP: 10.10.155.20","4a1ebe07-e3c6-4ee8-9aba-bcb5d6bb4fc4",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.188.62",Medium,"1679613531.41407","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.087 AM",,,,,"3b9f59db-504b-4d70-baf6-1081fffb3549_OnAH",HTTP,,,,,,,VOIP,"821fe666-9895-4865-b566-f0d310d42c35","10.10.188.23","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JRP-Ebe7khYa6ierbQ_RYA, Source IP: 10.10.155.20","3b9f59db-504b-4d70-baf6-1081fffb3549",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.188.23",Medium,"1679613531.41467","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.988 AM",,,,,"d1c6dfd1-c62d-42a8-a515-b65a4d6a2161_1BEN",HTTP,,,,,,,VOIP,"bdd00ed8-cefa-442e-b3c7-0bfc60e90197","10.10.188.64","IP Phone 8841",SEP34F8E77B4297,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BKmV74qHfuvj_yR5Qi40Wg, Source IP: 10.10.155.20","d1c6dfd1-c62d-42a8-a515-b65a4d6a2161",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.188.64",Medium,"1679613525.00304","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.381 AM",,,,,"aac0cb37-d71a-4e69-9266-11f2d0e60ab7_jLbX",HTTP,,,,,,,"IP_CAMERA","a85fe9c0-e16f-44c1-bf6e-d145263dcd92","10.50.171.121",M5054,"axis-accc8ee4c4d4","IP Camera","IP_CAMERA","10.50.171.62","Service: HTTP, User Name: root, Source IP: 10.50.171.62","aac0cb37-d71a-4e69-9266-11f2d0e60ab7",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.171.121",Medium,"1679610151.98068","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.206 AM",,,,,"7467f85c-c6a4-4f4f-b653-59d82d9c0776_kduB",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_urYJbLmVhpBA7TKtfODCqQ, Source IP: 10.10.155.20","7467f85c-c6a4-4f4f-b653-59d82d9c0776",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.21",Medium,"1679607297.77138","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.203 AM",,,,,"8dba4967-e9ec-4fa1-8a13-f0fea7c81dd3_AqN/",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_O0jftEAWKMEv32I0E88U8g, Source IP: 10.10.155.20","8dba4967-e9ec-4fa1-8a13-f0fea7c81dd3",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.37",Medium,"1679607297.78527","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.199 AM",,,,,"7287fd21-7abb-4380-a3e1-355b1b586e9e_Krsq",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_McDTDUDa1ksqHbL_kiMmcw, Source IP: 10.10.155.20","7287fd21-7abb-4380-a3e1-355b1b586e9e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.41",Medium,"1679607297.78068","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.194 AM",,,,,"26b3812c-8053-4961-a356-55bd485b790f_Tnkf",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kRzJdK_6RTeBks_fUPWb5w, Source IP: 10.10.155.20","26b3812c-8053-4961-a356-55bd485b790f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.56",Medium,"1679607297.78258","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.190 AM",,,,,"5f44144c-b20e-4f00-a88c-4f43a9a17be0_b8jZ",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_gPvZk4DDUvpr_sSRKSNdgg, Source IP: 10.10.155.20","5f44144c-b20e-4f00-a88c-4f43a9a17be0",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.42",Medium,"1679607297.63685","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.185 AM",,,,,"a7631431-1964-4484-afb6-d9845baa6bb3_RZfD",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SpxeFmyL8Bd2iqXEDPUaxw, Source IP: 10.10.155.20","a7631431-1964-4484-afb6-d9845baa6bb3",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.22",Medium,"1679607297.66804","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.182 AM",,,,,"064d051b-aef1-4b3a-bc46-57b4e27acc30_hsdG",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Z4ZvSFsozPi4byv9bDkHIg, Source IP: 10.10.155.20","064d051b-aef1-4b3a-bc46-57b4e27acc30",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.23",Medium,"1679607297.77254","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.179 AM",,,,,"ea8e21e0-e3a3-46ee-8c49-6b5f5d4af707_dhgr",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_VlJVTVqXtR26-B6Wz6nq7g, Source IP: 10.10.155.20","ea8e21e0-e3a3-46ee-8c49-6b5f5d4af707",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.71",Medium,"1679607297.78946","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.174 AM",,,,,"f14a2a53-226f-45a7-947d-9c04d195d9cb_/THe",HTTP,,,,,,,VOIP,"f7245c4d-eb2f-4b0a-9a1e-90b2cf9f63c1","10.10.153.32","IP Phone 8841",SEPD4AD71BF4105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_B8T6UTyQG8FsAlChUWv2vA, Source IP: 10.10.155.20","f14a2a53-226f-45a7-947d-9c04d195d9cb",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.153.32",Medium,"1679607297.65627","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.171 AM",,,,,"9f39b82f-0735-4a26-9140-32537d6f4b9f_W677",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8ftk8L1osequk8GfXQh40A, Source IP: 10.10.155.20","9f39b82f-0735-4a26-9140-32537d6f4b9f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679607297.76965","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.167 AM",,,,,"a99a9b8f-af35-4f91-8ade-3ce8d2d5d803_zcrp",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_0WJWdhJ5mneeMollW7kDcw, Source IP: 10.10.155.20","a99a9b8f-af35-4f91-8ade-3ce8d2d5d803",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.55",Medium,"1679607297.75436","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.163 AM",,,,,"36654658-8fae-4cbf-aa50-54d676c65f1a_a/J4",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BGzjtOjXzEqqS5cG_ARyNw, Source IP: 10.10.155.20","36654658-8fae-4cbf-aa50-54d676c65f1a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.44",Medium,"1679607297.79094","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.159 AM",,,,,"19d4f25f-ef6d-48e3-afdf-71ce45e2b128_1Bpq",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Mw1kkRgLdnirlgJ4gepECA, Source IP: 10.10.155.20","19d4f25f-ef6d-48e3-afdf-71ce45e2b128",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.64",Medium,"1679607297.63932","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.157 AM",,,,,"d9f1a1cc-6bed-4cf6-ac3b-326dc2c3a559_1mme",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lZc2qakmbGRZKUD6i6AoLg, Source IP: 10.10.155.20","d9f1a1cc-6bed-4cf6-ac3b-326dc2c3a559",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.43",Medium,"1679607297.80414","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.153 AM",,,,,"0a4bbf98-3bc3-4b33-85d7-4dcf472990df_IOot",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9nLlSnaaypboIP6eJ6WAEQ, Source IP: 10.10.155.20","0a4bbf98-3bc3-4b33-85d7-4dcf472990df",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.53",Medium,"1679607297.77128","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.149 AM",,,,,"fb376342-ce1f-4bee-a2e4-5eb1e17d158a_9NP3",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_N0J-j5ZkOCW3q4bxWpPiOA, Source IP: 10.10.155.20","fb376342-ce1f-4bee-a2e4-5eb1e17d158a",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.33.31",Medium,"1679607297.63722","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.144 AM",,,,,"1e127376-fe74-4715-ab61-58b824f2b4c2_ArNn",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kWE_HNXShkuzyDiGv4936A, Source IP: 10.10.155.20","1e127376-fe74-4715-ab61-58b824f2b4c2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.77",Medium,"1679607297.77124","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.412 AM",,,,,"e80d66b5-8c28-4ca1-a1b2-3a7319901686_r2gP",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__Jb6q-CP4vxuYl-dM3unzw, Source IP: 10.10.155.20","e80d66b5-8c28-4ca1-a1b2-3a7319901686",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.28",Medium,"1679607297.77063","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.408 AM",,,,,"eb023847-90c9-406a-a0c6-e6813985699e_xp1S",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_k2ajNR8bBO_KxPj0gVuUHQ, Source IP: 10.10.155.20","eb023847-90c9-406a-a0c6-e6813985699e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.58",Medium,"1679607297.79337","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.320 AM",,,,,"9c17f67f-11f7-45c2-a8be-73d93ae6cb7b_xdjU",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_XuhwhVi0MeWSIcY9XIVMMQ, Source IP: 10.10.155.20","9c17f67f-11f7-45c2-a8be-73d93ae6cb7b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679606152.31585","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.315 AM",,,,,"16fef8db-23a4-443f-909c-388c3179ae6a_4LG7",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ufZaqOJ4T47p8rWDZWCIGw, Source IP: 10.10.155.20","16fef8db-23a4-443f-909c-388c3179ae6a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679606152.31298","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.310 AM",,,,,"d8ff03bc-c5d0-43b1-8505-2abb8811d2b3_4WXj",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_AN8JvkLq6069phyMHvbUGA, Source IP: 10.10.155.20","d8ff03bc-c5d0-43b1-8505-2abb8811d2b3",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679606147.09072","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:13.660 AM",,,,,"ac68318f-0670-4fa2-a1a8-fa0aa285f559_DbDJ",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_PQVD03u7iLB6OpuV5x7Fyw, Source IP: 10.10.155.20","ac68318f-0670-4fa2-a1a8-fa0aa285f559",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679599424.96126","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:12.909 AM",,,,,"4a966da3-9fd0-42f2-87c5-7f9520abac21_N7og",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kL17KMY_LNRN3ZlMg1o6XA, Source IP: 10.10.155.20","4a966da3-9fd0-42f2-87c5-7f9520abac21",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.64",Medium,"1679597592.44689","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.087 AM",,,,,"659261d6-8257-4385-bf7a-5435a6de4b84_kWIh",HTTP,,,,,,,VOIP,"8d8ac1dd-e457-45c1-a20d-3552201b213e","10.50.51.22","IP Phone 8841",SEPCC70ED5793C6,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_DPf0gn5CkISAMp_6GB99Gg, Source IP: 10.10.155.20","659261d6-8257-4385-bf7a-5435a6de4b84",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.22",Medium,"1679597592.48729","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.042 AM",,,,,"53d2f174-d7c7-4683-9522-57a15168b307_lv0n",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_RVvo1RgMOWeo_WfRg2kRwA, Source IP: 10.10.155.20","53d2f174-d7c7-4683-9522-57a15168b307",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.43",Medium,"1679597580.30219","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.039 AM",,,,,"2ffaedf5-c8a1-4e3d-aaa3-f78d13fc360b_l7oo",HTTP,,,,,,,VOIP,"fae4dc6f-27e1-49f9-83bc-2a58f3a7c675","10.10.31.13","IP Phone 8841","10.10.31.13",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_4soNx56oX_B9Kgdm1wVrLQ, Source IP: 10.10.155.20","2ffaedf5-c8a1-4e3d-aaa3-f78d13fc360b",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.13",Medium,"1679597580.28219","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.035 AM",,,,,"35c348bd-2d1c-4cb1-aa4f-7e0d78b8862a_uNnb",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SL7UtqFhp8ey48PYZ5J9rw, Source IP: 10.10.155.20","35c348bd-2d1c-4cb1-aa4f-7e0d78b8862a",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.35.28",Medium,"1679597592.48613","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.032 AM",,,,,"95968b27-e70f-4033-9884-c67c331f07ba_koqQ",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aAS8_sKH22bKBLJnKW_Pfg, Source IP: 10.10.155.20","95968b27-e70f-4033-9884-c67c331f07ba",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679597580.29906","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.022 AM",,,,,"0be80739-da71-44e8-8603-c1b34a98f0ed_MSq2",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_M9mbRyhm79l4FzNoK9r47w, Source IP: 10.10.155.20","0be80739-da71-44e8-8603-c1b34a98f0ed",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.241.10",Medium,"1679597592.41273","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.018 AM",,,,,"fa15a455-8b70-45ac-b7eb-9b27c7e9b493_hrZ5",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_pztVZP27tJ7juPP88GqgcA, Source IP: 10.10.155.20","fa15a455-8b70-45ac-b7eb-9b27c7e9b493",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679597592.44601","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.004 AM",,,,,"aff16a41-a76e-4850-a710-11a98c95f3bd_xES2",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_KsMzdp-FBpmj3qDMNjPrgA, Source IP: 10.10.155.20","aff16a41-a76e-4850-a710-11a98c95f3bd",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.56",Medium,"1679597592.4994","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.997 AM",,,,,"bc46301d-f82c-4c13-9c83-1cca68788254_7CrB",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Z0RAPpUOhFHaimx3ZnklgQ, Source IP: 10.10.155.20","bc46301d-f82c-4c13-9c83-1cca68788254",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.11",Medium,"1679597580.23915","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.993 AM",,,,,"3c833d54-7a26-4b52-a44d-142476731f67_x4yZ",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_s8b0XPHpjKNbc7k3ADYahQ, Source IP: 10.10.155.20","3c833d54-7a26-4b52-a44d-142476731f67",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.43",Medium,"1679597592.52428","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.988 AM",,,,,"8aaf1818-8522-4aac-8186-b90d3d2c5327_mgTf",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_FthBRjJhyOTcvU41jg8rNg, Source IP: 10.10.155.20","8aaf1818-8522-4aac-8186-b90d3d2c5327",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.22",Medium,"1679597592.50631","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.983 AM",,,,,"a03bbd12-880e-4e1b-9486-ca3ac3d19c79_ZAZZ",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_RXned2WjWNKT-fMhzOq6nQ, Source IP: 10.10.155.20","a03bbd12-880e-4e1b-9486-ca3ac3d19c79",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.58",Medium,"1679597580.32354","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.979 AM",,,,,"59c34c46-adbc-4a86-8a32-7f2a5f3e68dd_rwOn",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__cVD2ABWWBDRXmxEE2RpGQ, Source IP: 10.10.155.20","59c34c46-adbc-4a86-8a32-7f2a5f3e68dd",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.23",Medium,"1679597580.29514","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.931 AM",,,,,"70037b5e-eb68-474b-ae22-8c2d8d486554_XQtC",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_YV1U4LFDHu0KixYlpA4EPA, Source IP: 10.10.155.20","70037b5e-eb68-474b-ae22-8c2d8d486554",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.35.28",Medium,"1679597580.23826","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.927 AM",,,,,"fe8c0245-3264-45cf-be85-8311cab14baf_Cz2f",HTTP,,,,,,,VOIP,"808f3fe0-9523-48ed-a0e8-a3241829ddb7","10.50.46.32","IP Phone 8841",SEPD4AD71BEB649,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JgaIVmXxTBViLW0-aOQJLw, Source IP: 10.10.155.20","fe8c0245-3264-45cf-be85-8311cab14baf",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.32",Medium,"1679597592.50255","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.923 AM",,,,,"f9712d15-b48b-482d-9bd3-c38050b6ca66_xs3K",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_FYR5G66ay_uD7-Knm7Hz2A, Source IP: 10.10.155.20","f9712d15-b48b-482d-9bd3-c38050b6ca66",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.53",Medium,"1679597592.50269","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.918 AM",,,,,"2b95b5c8-11d5-4564-ba98-0dd6d1042a2c_ivxV",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_jnwOQCRjNYcC0sq0tVnGng, Source IP: 10.10.155.20","2b95b5c8-11d5-4564-ba98-0dd6d1042a2c",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.64.221",Medium,"1679597592.70191","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.914 AM",,,,,"ce78fa0c-ff80-4d06-8e3b-91950007f2c5_1IGZ",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IJuDaKN5eBzMcNAceNg0Rw, Source IP: 10.10.155.20","ce78fa0c-ff80-4d06-8e3b-91950007f2c5",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.21",Medium,"1679597592.49494","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.910 AM",,,,,"98e3fc88-f45e-4ebf-8b66-8a46b0575259_9PHB",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_OFKN2KVxgImidHcAXM3pYQ, Source IP: 10.10.155.20","98e3fc88-f45e-4ebf-8b66-8a46b0575259",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.41",Medium,"1679597592.48738","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.907 AM",,,,,"144dc8ac-7ac9-434b-aed0-3e8f0d24cc1b_Xmu/",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_vLf1UuWaFCsqIfOqQKQWSw, Source IP: 10.10.155.20","144dc8ac-7ac9-434b-aed0-3e8f0d24cc1b",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.64",Medium,"1679597580.23671","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.902 AM",,,,,"08c150dd-83bd-482e-8ab4-27635328c542_qVz/",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_EvdJIw6IoqZZYV0YN5s0PA, Source IP: 10.10.155.20","08c150dd-83bd-482e-8ab4-27635328c542",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.71",Medium,"1679597580.27034","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.899 AM",,,,,"930c2dac-6204-4bf8-92c3-9e445ce17963_rboQ",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_jmV6d8LqfN5s7wnu9suj3w, Source IP: 10.10.155.20","930c2dac-6204-4bf8-92c3-9e445ce17963",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.57",Medium,"1679597592.49916","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.895 AM",,,,,"57b42d5d-6b4b-4f50-a717-a8af0190663e_U2F8",HTTP,,,,,,,VOIP,"27b24cd5-08cd-462a-989e-4983ec9785b0","10.10.34.116","IP Phone 8841",SEP70C9C668EBBD,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_iUpoivo2fl_B7gDXycn-oA, Source IP: 10.10.155.20","57b42d5d-6b4b-4f50-a717-a8af0190663e",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.116",Medium,"1679597580.23824","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.893 AM",,,,,"d1347254-2032-4e4f-94a2-529e4833f95b_eknh",HTTP,,,,,,,VOIP,"27b24cd5-08cd-462a-989e-4983ec9785b0","10.10.34.116","IP Phone 8841",SEP70C9C668EBBD,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kj40GKTIm3r_-hLWLrbn5g, Source IP: 10.10.155.20","d1347254-2032-4e4f-94a2-529e4833f95b",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.116",Medium,"1679597592.44208","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.889 AM",,,,,"9531c3f2-edd0-43a0-acfd-173e512c4843_1JNh",HTTP,,,,,,,VOIP,"808f3fe0-9523-48ed-a0e8-a3241829ddb7","10.50.46.32","IP Phone 8841",SEPD4AD71BEB649,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_02oJ3pKhRkVgKw2YLfBtjg, Source IP: 10.10.155.20","9531c3f2-edd0-43a0-acfd-173e512c4843",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.32",Medium,"1679597580.27534","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.885 AM",,,,,"6b99f7f1-264c-4f77-b546-d6e18ddc81da_WR+d",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_V-J9y7OMDvpyQLoRcOYbTg, Source IP: 10.10.155.20","6b99f7f1-264c-4f77-b546-d6e18ddc81da",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.55.25",Medium,"1679597592.51496","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.881 AM",,,,,"903f5ea0-2c92-425d-8eca-48271e0fbed1_AXi7",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_zVRBFww4aatZueWlMlVpXA, Source IP: 10.10.155.20","903f5ea0-2c92-425d-8eca-48271e0fbed1",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.55",Medium,"1679597592.44009","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.834 AM",,,,,"3d446e0c-22da-4a80-813d-7ab5d74eb852_uJYn",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_W5CZ4mR-TTEu5ToiIdK0Tw, Source IP: 10.10.155.20","3d446e0c-22da-4a80-813d-7ab5d74eb852",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.71",Medium,"1679597592.49509","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.831 AM",,,,,"95c16b19-2280-4ea9-949c-b84eaf086738_3J65",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_vFLcEQCagTglUrzduQw6HQ, Source IP: 10.10.155.20","95c16b19-2280-4ea9-949c-b84eaf086738",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.33.31",Medium,"1679597580.22358","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.827 AM",,,,,"681df186-40cb-4ba5-85c9-112e99b4bef8_ep5h",HTTP,,,,,,,VOIP,"383a7b2d-5ec5-45ff-b038-b23725318353","10.10.34.126","IP Phone 8841",SEPCC70ED56E50C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_q1l_5vsV02_0tfds1iQ9TA, Source IP: 10.10.155.20","681df186-40cb-4ba5-85c9-112e99b4bef8",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.126",Medium,"1679597592.44594","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.821 AM",,,,,"6fb457e7-99ed-4fab-bd20-ddc2a564863f_nCTl",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_koZmFA40FYEui7TaeEafPg, Source IP: 10.10.155.20","6fb457e7-99ed-4fab-bd20-ddc2a564863f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.36",Medium,"1679597592.48916","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.816 AM",,,,,"04e8ef29-a581-4486-9999-005d2c381dab_WHpQ",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_1ycp39mN3KqZTHW5FbSCng, Source IP: 10.10.155.20","04e8ef29-a581-4486-9999-005d2c381dab",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.57",Medium,"1679597580.31569","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.812 AM",,,,,"6331d98a-7e49-4b75-aec0-d3114024dce8_pJIa",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SP4edaoOsREyKuNv734IZQ, Source IP: 10.10.155.20","6331d98a-7e49-4b75-aec0-d3114024dce8",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.64.221",Medium,"1679597580.77992","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.808 AM",,,,,"3b81d11b-2fc0-4c49-a7e5-2fe3fbcfb46f_rUjS",HTTP,,,,,,,VOIP,"bd57c664-4b28-41c3-aeb0-54337ed7d49e","10.50.53.46","IP Phone 8841",SEPD4AD71BF3105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_EuKSjh0UUBXaPNvHJHto1w, Source IP: 10.10.155.20","3b81d11b-2fc0-4c49-a7e5-2fe3fbcfb46f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.46",Medium,"1679597580.3074","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.804 AM",,,,,"1e997459-76eb-4e44-8dbe-bae9f7c12e0f_GWMa",HTTP,,,,,,,VOIP,"48b34814-f3d4-4c3b-a14f-dfca32ab8d49","10.50.54.49","IP Phone 8841","10.50.54.49",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_n1QOn-lPmLg507-t2FjnHA, Source IP: 10.10.155.20","1e997459-76eb-4e44-8dbe-bae9f7c12e0f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.54.49",Medium,"1679597592.4891","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.801 AM",,,,,"1d692424-8352-426c-a693-154d56997a60_BsUP",HTTP,,,,,,,VOIP,"383a7b2d-5ec5-45ff-b038-b23725318353","10.10.34.126","IP Phone 8841",SEPCC70ED56E50C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_fdwgtwtW8i-_uOvJUMWZNA, Source IP: 10.10.155.20","1d692424-8352-426c-a693-154d56997a60",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.34.126",Medium,"1679597580.23824","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.797 AM",,,,,"7c44ba93-97c6-4a67-a3fe-b3d366898214_GXMo",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_TjiCQurerfaXhsl0FRb97A, Source IP: 10.10.155.20","7c44ba93-97c6-4a67-a3fe-b3d366898214",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.58",Medium,"1679597592.48767","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.793 AM",,,,,"7895824e-5ab0-4562-b2ad-648bffd4f8dc_wa+y",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Ryx4074ghH9cmanXia4Vzw, Source IP: 10.10.155.20","7895824e-5ab0-4562-b2ad-648bffd4f8dc",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.39",Medium,"1679597592.44661","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.789 AM",,,,,"8da3198d-f6c9-4e59-a7c3-d648578d5caf_K2N1",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_OYxIg5tqdPzQdKyzU63rQg, Source IP: 10.10.155.20","8da3198d-f6c9-4e59-a7c3-d648578d5caf",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.77",Medium,"1679597592.49232","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.785 AM",,,,,"1b906b12-404b-4ef6-a805-a2c561c4852f_qYof",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ARjGfdQuEMGsz_M3meGUrw, Source IP: 10.10.155.20","1b906b12-404b-4ef6-a805-a2c561c4852f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.72",Medium,"1679597580.30857","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.781 AM",,,,,"a4c59eb5-a72a-439c-be6d-9d885c69d875_A9Om",HTTP,,,,,,,VOIP,"2fbc5b18-0006-4c1c-beab-f82c8fa34d86","10.10.153.13","IP Phone 8841",SEP2C31246EEC38,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uEVlcu29zU608ou6-ezJfA, Source IP: 10.10.155.20","a4c59eb5-a72a-439c-be6d-9d885c69d875",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.153.13",Medium,"1679597580.2255","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.747 AM",,,,,"d14a61e4-edcb-4531-94d4-ec23b3585cfd_JFD+",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LxoUTlEbd56OJS_LS1Yl1A, Source IP: 10.10.155.20","d14a61e4-edcb-4531-94d4-ec23b3585cfd",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.28",Medium,"1679597592.49943","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.743 AM",,,,,"f6a4f146-6e1a-45cd-b1a5-7faa3d18a58c_rf6R",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_0iASF3fyYW-6UuRdkAlW0A, Source IP: 10.10.155.20","f6a4f146-6e1a-45cd-b1a5-7faa3d18a58c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.16",Medium,"1679597580.30739","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.535 AM",,,,,"1f918772-b7ee-4899-9702-52b999353024_pO3Q",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_gEfF4pwdAnED5zpayZOo-Q, Source IP: 10.10.155.20","1f918772-b7ee-4899-9702-52b999353024",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.36",Medium,"1679597580.30208","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.532 AM",,,,,"8f96f8e1-0def-4abb-9c28-33e0f58b42f7_bb3A",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_WcvgL69BB9e2gRDMjMkitg, Source IP: 10.10.155.20","8f96f8e1-0def-4abb-9c28-33e0f58b42f7",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679597578.66801","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.528 AM",,,,,"3f5c66bc-b124-43a5-813c-a4e5f6b0046d_yhe4",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Brhb_GWHMWKmFCkfyZN2hQ, Source IP: 10.10.155.20","3f5c66bc-b124-43a5-813c-a4e5f6b0046d",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.44",Medium,"1679597580.30343","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.523 AM",,,,,"8a33d8ff-e0fe-4a92-b05c-46e3404e5f73_QQsr",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_dQTkx-3Bb7IlxDFx-Ktp-w, Source IP: 10.10.155.20","8a33d8ff-e0fe-4a92-b05c-46e3404e5f73",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.53",Medium,"1679597580.30164","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.519 AM",,,,,"bf1d6142-bc82-49c9-94b6-4646fe1563bb_Hy8m",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_rsNHPp5qcR44mndj3KllEQ, Source IP: 10.10.155.20","bf1d6142-bc82-49c9-94b6-4646fe1563bb",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.31.42",Medium,"1679597580.24136","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.514 AM",,,,,"dbcd527c-9498-447b-be8b-d36a9666ef90_hJBr",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ewV7R9d6J3Df5KPrkPFVwg, Source IP: 10.10.155.20","dbcd527c-9498-447b-be8b-d36a9666ef90",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.28",Medium,"1679597580.29935","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.510 AM",,,,,"a308f2db-34aa-4c94-937b-c6a24a7faa68_wglB",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_k6UMZpn8v2hvxo1_i9o_XA, Source IP: 10.10.155.20","a308f2db-34aa-4c94-937b-c6a24a7faa68",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.77",Medium,"1679597580.30151","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.506 AM",,,,,"488912f9-c94e-436c-9676-8d9d63262a1b_j4Cn",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_MBclonz92QfRBv5haXkxEQ, Source IP: 10.10.155.20","488912f9-c94e-436c-9676-8d9d63262a1b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.56",Medium,"1679597580.31497","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.501 AM",,,,,"a5a37642-d824-4e21-86f0-52f6c07b307e_h9ww",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SB11nhAenDQGeTpbixTE6g, Source IP: 10.10.155.20","a5a37642-d824-4e21-86f0-52f6c07b307e",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.48",Medium,"1679597592.4858","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.497 AM",,,,,"aaf6e7f9-a8ad-4d97-9e1a-299fac4e5cd8_wEVy",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_pdGQO8dYqcg0i2on8VzaEg, Source IP: 10.10.155.20","aaf6e7f9-a8ad-4d97-9e1a-299fac4e5cd8",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.53.44",Medium,"1679597592.4962","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.493 AM",,,,,"ea4ea5af-cd21-4b03-81db-1346428d068c_9W51",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aIKIESopt3Q5NZfHlXAZTg, Source IP: 10.10.155.20","ea4ea5af-cd21-4b03-81db-1346428d068c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679597580.29522","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.489 AM",,,,,"8fd5c2cd-40dc-40a5-a1ee-96a51f94d68c_X54X",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wCqcgWrEcymtULARjR1trw, Source IP: 10.10.155.20","8fd5c2cd-40dc-40a5-a1ee-96a51f94d68c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679597573.44333","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.485 AM",,,,,"44c7ae68-2826-4be0-91c6-82f611f53c5f_eIHP",HTTP,,,,,,,VOIP,"4c3d8787-96c1-42d4-bc6f-096b3fc35b38","10.50.49.73","IP Phone 8841",SEPCC70ED56F42A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_iwT2FqCWLy7qj1hSP-Co1w, Source IP: 10.10.155.20","44c7ae68-2826-4be0-91c6-82f611f53c5f",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.73",Medium,"1679597580.3024","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.481 AM",,,,,"814dc68b-7b28-4b75-8e10-82df1ea2403b_ckev",HTTP,,,,,,,VOIP,"634faeed-a4de-4f9e-87df-c0a400ad6c7b","10.50.49.68","IP Phone 8841",SEPD4AD71BF2860,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8hEWSy87pDUQ48PMDmGTIw, Source IP: 10.10.155.20","814dc68b-7b28-4b75-8e10-82df1ea2403b",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.68",Medium,"1679597592.49372","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.452 AM",,,,,"13c32d1d-0084-4f4c-95b6-6db0f226a868_t3yo",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nEVmNYAyVfsISUERLmTJmA, Source IP: 10.10.155.20","13c32d1d-0084-4f4c-95b6-6db0f226a868",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679597580.29678","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.449 AM",,,,,"94edf2ff-0d17-4bbc-9859-fbc4957a72a8_l5Ls",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_eY4E7SAcLFpK2ShK4JPnXw, Source IP: 10.10.155.20","94edf2ff-0d17-4bbc-9859-fbc4957a72a8",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.46.22",Medium,"1679597580.26836","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.445 AM",,,,,"363a75ca-1c5e-44a0-b9ff-b470537efba2_XibM",HTTP,,,,,,,VOIP,"aa29744d-1cc2-42c1-9e18-309f24f40fa1","10.50.49.41","IP Phone 8841",SEPD4AD71BF27DB,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_AIxfBmLzwa2RaQMlHvTGHw, Source IP: 10.10.155.20","363a75ca-1c5e-44a0-b9ff-b470537efba2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.41",Medium,"1679597592.49651","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.441 AM",,,,,"97c6f36e-90c8-4d90-b347-8f43f5a27c81_Hr5y",HTTP,,,,,,,VOIP,"aa29744d-1cc2-42c1-9e18-309f24f40fa1","10.50.49.41","IP Phone 8841",SEPD4AD71BF27DB,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__jAubmDM_ZxZj4S0eQCnCQ, Source IP: 10.10.155.20","97c6f36e-90c8-4d90-b347-8f43f5a27c81",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.41",Medium,"1679597580.26916","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.437 AM",,,,,"56345381-ef3c-4513-bae0-33780bd5b15c_KQBB",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_P9B5YF22SEVGR1h6PkpZEA, Source IP: 10.10.155.20","56345381-ef3c-4513-bae0-33780bd5b15c",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.58",Medium,"1679597580.31825","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.432 AM",,,,,"d48bfd71-bdd0-461d-afc8-3d553fc97e73_cb9e",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UHww8VZN31xiKdSUvO96dw, Source IP: 10.10.155.20","d48bfd71-bdd0-461d-afc8-3d553fc97e73",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.61",Medium,"1679597592.49494","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.422 AM",,,,,"99b9d48c-1660-4599-9b6f-cd18421c2911_tfgf",HTTP,,,,,,,VOIP,"b886bca6-9754-42b7-b81a-2c17ff7d48a1","10.50.49.34","IP Phone 8841",SEPD4AD71BF2CCF,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3RiBd2yEgjluEbSgzr7bCg, Source IP: 10.10.155.20","99b9d48c-1660-4599-9b6f-cd18421c2911",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.49.34",Medium,"1679597580.24373","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.411 AM",,,,,"ad84a207-c1cc-4d33-97f6-4d1aa6cb27aa_L+71",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_2KvxBMv1JNBiwaIVf9DKeQ, Source IP: 10.10.155.20","ad84a207-c1cc-4d33-97f6-4d1aa6cb27aa",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.41",Medium,"1679597580.29578","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.405 AM",,,,,"82c6d8f9-7108-4e65-8fc0-850b94b9cf76_8N61",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_fEJdwkoPRORI4seRb7e1Lg, Source IP: 10.10.155.20","82c6d8f9-7108-4e65-8fc0-850b94b9cf76",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679597510.7767","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.401 AM",,,,,"ac1b0bc8-48a7-43f2-9004-7c5e1aeb4ff0_2S8g",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_skhAWbpHJzzDRfe5QCFOcQ, Source IP: 10.10.155.20","ac1b0bc8-48a7-43f2-9004-7c5e1aeb4ff0",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.44",Medium,"1679597592.49505","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.396 AM",,,,,"9c5ad9bc-a147-4148-9c0c-978f28e104d2_1Fab",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nqAb7nCSInpnTj-mPCjV4Q, Source IP: 10.10.155.20","9c5ad9bc-a147-4148-9c0c-978f28e104d2",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679596178.84883","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.390 AM",,,,,"06d22fc5-f764-41f4-8e53-4c1691d56b2a_6Acb",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_qrdVduvPmQ_CTW_1MsxOWg, Source IP: 10.10.155.20","06d22fc5-f764-41f4-8e53-4c1691d56b2a",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.52.43",Medium,"1679597592.48766","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:24:51.307 PM",,,,,"186eeca9-cd8a-482b-adea-6812aa2f9dce_OqIx",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_rOlO-eGYlofMPDK61dc4OA, Source IP: 10.10.155.20","186eeca9-cd8a-482b-adea-6812aa2f9dce",IDS,80,"[ - ""weak_credentials_http"" -]","10.10.33.31",Medium,"1679593164.15628","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:24:49.648 PM",,,,,"64455e02-e2e5-4c45-8884-d92298edd322_ykfZ",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IJgYZcrsfX86pI-EHhWycg, Source IP: 10.10.155.20","64455e02-e2e5-4c45-8884-d92298edd322",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.64",Medium,"1679593338.05879","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:10:37.146 PM",,,,,"d935fb54-50b2-4d14-b333-71eeed6f35b1_XxCH",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T7TVbOJV395Fp1wGvZDh8Q, Source IP: 10.10.155.20","d935fb54-50b2-4d14-b333-71eeed6f35b1",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679592689.02798","Weak Password","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:10:35.464 PM",,,,,"b59d829e-53b3-4252-8e4f-1d321341cae0_bt9L",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6ts7Zi2VwxsgkUHChU8Vmg, Source IP: 10.10.155.20","b59d829e-53b3-4252-8e4f-1d321341cae0",IDS,80,"[ - ""weak_credentials_http"" -]","10.50.51.70",Medium,"1679592535.28869","Weak Password","CynerioEvent_CL", +TenantId,SourceSystem,MG,ManagementGroupName,"TimeGenerated [UTC]",Computer,RawData,"date_t [UTC]","asset_id_s","dst_ip_s","src_ip_s","trans_s","uid_s","service_s","new_status_s","risk_name_s","browser_s","host_s",Severity,"status_code_s","asset_asset_type_code_s","asset_id_g","asset_ip_s","asset_model_s","asset_name_s","asset_type_s","asset_type_code_s","client_ip_s","details_s","id_g","module_s","port_d","related_risks_s","server_ip_s","severity_s","timestamp_d","title_s",Type,"_ResourceId" +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.372 AM",,,,,"efc3f5a7-56d9-4e9d-8f85-e620b1fed85d_uiu2",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6ZfC3ZAS4f84c5eexOcn9g, Source IP: 10.10.155.20","efc3f5a7-56d9-4e9d-8f85-e620b1fed85d",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.241.10",Medium,"1679770371.45865","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.368 AM",,,,,"e7381051-0aa4-424e-b186-b8bbabb958a4_N1Jc",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SFFjPx6qlo0BnJNk_FaJ7g, Source IP: 10.10.155.20","e7381051-0aa4-424e-b186-b8bbabb958a4",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.42",Medium,"1679770381.7546","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.366 AM",,,,,"e36aa09f-0c0d-4981-8c5a-3c50e392a6ae_X46E",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_GTpSkk2S1Tky5iFytxGSHQ, Source IP: 10.10.155.20","e36aa09f-0c0d-4981-8c5a-3c50e392a6ae",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.36",Medium,"1679770381.74637","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.359 AM",,,,,"0ac37b99-fabd-4438-b8ee-19da4101e4bd_U4hK",HTTP,,,,,,,VOIP,"f7245c4d-eb2f-4b0a-9a1e-90b2cf9f63c1","10.10.153.32","IP Phone 8841",SEPD4AD71BF4105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_U5qo67YqNCshqrpnRNai2Q, Source IP: 10.10.155.20","0ac37b99-fabd-4438-b8ee-19da4101e4bd",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.153.32",Medium,"1679770371.45874","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.354 AM",,,,,"106512c6-653a-47e5-a781-4ab9092f7cd0_N7t/",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nlo5D_SlT7GkPkiaXWERsw, Source IP: 10.10.155.20","106512c6-653a-47e5-a781-4ab9092f7cd0",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.16",Medium,"1679770381.73733","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.350 AM",,,,,"2823da81-f0f8-49c0-a3a0-fd182dede561_kH6L",HTTP,,,,,,,VOIP,"8d8ac1dd-e457-45c1-a20d-3552201b213e","10.50.51.22","IP Phone 8841",SEPCC70ED5793C6,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IuNquCFv_oBM_HBX0HKHcQ, Source IP: 10.10.155.20","2823da81-f0f8-49c0-a3a0-fd182dede561",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.22",Medium,"1679770381.75711","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.346 AM",,,,,"f5a18a0a-8ec1-4bb0-8515-eceebee6f116_3Qda",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9PvLyr1DPi9e1Df8OEBLRg, Source IP: 10.10.155.20","f5a18a0a-8ec1-4bb0-8515-eceebee6f116",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.22",Medium,"1679770371.45897","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.343 AM",,,,,"ba4b3ee8-a0c2-4659-abac-4f57d07cc98e_jUZ5",HTTP,,,,,,,VOIP,"8a868242-7170-442d-ace2-2c9ee0d097af","10.50.52.55","IP Phone 8841",SEPD4AD71BF385B,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JrxKUR3ieIckIfuVYW8oZw, Source IP: 10.10.155.20","ba4b3ee8-a0c2-4659-abac-4f57d07cc98e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.55",Medium,"1679770381.77914","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.185 AM",,,,,"85322169-942d-436c-8eb3-2b1ce348908b_jTSn",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_cI7xNKee5slqmE93no3ROw, Source IP: 10.10.155.20","85322169-942d-436c-8eb3-2b1ce348908b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.77",Medium,"1679770381.74765","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.181 AM",,,,,"ce61a7ca-cc9a-45d4-a024-ce4662b24b0f_64nM",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_VKEDvugYIjpd06Wtq5haBw, Source IP: 10.10.155.20","ce61a7ca-cc9a-45d4-a024-ce4662b24b0f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.41",Medium,"1679770381.7448","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.117 AM",,,,,"68e430f8-213e-48f2-bc15-13cde96087d5_Xr2S",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_4PCdPBOXjKLHk78gTmoxRg, Source IP: 10.10.155.20","68e430f8-213e-48f2-bc15-13cde96087d5",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679770371.54582","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.114 AM",,,,,"8eb2ea3f-93c4-44c3-9722-72f89b57891b_nE6d",HTTP,,,,,,,VOIP,"4c3d8787-96c1-42d4-bc6f-096b3fc35b38","10.50.49.73","IP Phone 8841",SEPCC70ED56F42A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T0EEOLRRkDnh-kuNlSiJDw, Source IP: 10.10.155.20","8eb2ea3f-93c4-44c3-9722-72f89b57891b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.73",Medium,"1679770371.5512","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.111 AM",,,,,"8d921d68-d184-4e84-bdf9-13c98e1c1797_Q4E6",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3O_S3Uz682Rq0JbbZa9Vfw, Source IP: 10.10.155.20","8d921d68-d184-4e84-bdf9-13c98e1c1797",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.43",Medium,"1679770371.61078","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.108 AM",,,,,"55c81cb0-2da1-49b1-87e2-3f910eeff446_TzFa",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_KzmQkKUJQ3OzPYXb-Alw1w, Source IP: 10.10.155.20","55c81cb0-2da1-49b1-87e2-3f910eeff446",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.70",Medium,"1679770371.55115","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.106 AM",,,,,"807fb93b-bb23-4c54-8f36-738c19fd6d72_RAYw",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_yjFnJ5RfYFYIXpZDpcEqYg, Source IP: 10.10.155.20","807fb93b-bb23-4c54-8f36-738c19fd6d72",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.57",Medium,"1679770381.73603","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.103 AM",,,,,"81369d0b-9806-4dcb-a149-5734d357a266_U/os",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_WGdzBgIJaGV-mJQsoP33QA, Source IP: 10.10.155.20","81369d0b-9806-4dcb-a149-5734d357a266",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.37",Medium,"1679770381.73782","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.100 AM",,,,,"1f2d4e88-83fe-483d-bade-1e2082d527ab_DzjK",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_AE4TDC8OZw9CKv-U-RpiFw, Source IP: 10.10.155.20","1f2d4e88-83fe-483d-bade-1e2082d527ab",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679770381.73747","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.098 AM",,,,,"73f0b982-763e-4e33-9301-80d07ed14f93_QpKH",HTTP,,,,,,,VOIP,"bd57c664-4b28-41c3-aeb0-54337ed7d49e","10.50.53.46","IP Phone 8841",SEPD4AD71BF3105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_oDdujac52Qd6Yxb_KFDIsw, Source IP: 10.10.155.20","73f0b982-763e-4e33-9301-80d07ed14f93",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.46",Medium,"1679770371.56482","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.095 AM",,,,,"8d0b3014-633e-4f1e-be48-ce7364180c86_msds",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_pnD__gqAQf5_RqwFH3NTLg, Source IP: 10.10.155.20","8d0b3014-633e-4f1e-be48-ce7364180c86",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.64",Medium,"1679770381.7552","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.092 AM",,,,,"0baf4b68-04fc-4c5a-be77-68f9627bfe4f_OrAh",HTTP,,,,,,,VOIP,"2fbc5b18-0006-4c1c-beab-f82c8fa34d86","10.10.153.13","IP Phone 8841",SEP2C31246EEC38,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kW658hxhbqrx01RpKAeiPQ, Source IP: 10.10.155.20","0baf4b68-04fc-4c5a-be77-68f9627bfe4f",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.153.13",Medium,"1679770381.77692","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.089 AM",,,,,"4e4136da-5c4b-48ee-bf55-8c859d26f935_Vx6X",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_MQtQn3wPpljk6J1mLHXZLA, Source IP: 10.10.155.20","4e4136da-5c4b-48ee-bf55-8c859d26f935",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.41",Medium,"1679770371.53489","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.087 AM",,,,,"5a62d274-a4ed-4d7a-94c4-dea378849b99_75cK",HTTP,,,,,,,VOIP,"48b34814-f3d4-4c3b-a14f-dfca32ab8d49","10.50.54.49","IP Phone 8841","10.50.54.49",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Obw5K4_lTA_ChRz7rTv5PA, Source IP: 10.10.155.20","5a62d274-a4ed-4d7a-94c4-dea378849b99",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.49",Medium,"1679770371.56681","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.084 AM",,,,,"c5fe2758-3bb4-4275-bddc-122ecedebc20_5pbq",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_TxuMqofhxNXGHSjBGwwc8w, Source IP: 10.10.155.20","c5fe2758-3bb4-4275-bddc-122ecedebc20",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679770371.55192","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.081 AM",,,,,"02644a75-2e4e-43e7-a429-878eb61d3d1b_PSiq",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9ai3QY077By45eMfhFh8nQ, Source IP: 10.10.155.20","02644a75-2e4e-43e7-a429-878eb61d3d1b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.48",Medium,"1679770371.56732","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.012 AM",,,,,"beca06a9-23e5-42ab-bc14-0aeef81eaa6c_nINb",HTTP,,,,,,,VOIP,"2d778507-014e-49b7-98dc-9da6bc6592dd","10.10.31.14","IP Phone 8841",SEPD4AD71BF7221,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8LMWhrkCB1qlP8AqMoGPBA, Source IP: 10.10.155.20","beca06a9-23e5-42ab-bc14-0aeef81eaa6c",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.14",Medium,"1679770381.74643","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.010 AM",,,,,"00c48920-38ce-40e7-b915-97f757ba4749_pxys",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_2LtPMYknVCyJkvcMtJv68A, Source IP: 10.10.155.20","00c48920-38ce-40e7-b915-97f757ba4749",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.23",Medium,"1679770371.54772","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:14.008 AM",,,,,"9c8bd597-fd61-421d-b396-3bd7d27ec5ce_S64D",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uDmLx_B-w0eC_bUTEektJQ, Source IP: 10.10.155.20","9c8bd597-fd61-421d-b396-3bd7d27ec5ce",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.33.31",Medium,"1679770381.76954","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.999 AM",,,,,"56025467-6ff1-4cbe-affc-c1d05f0558ce_ArQx",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IzvZzMHDbvsODhe2Gt9qaw, Source IP: 10.10.155.20","56025467-6ff1-4cbe-affc-c1d05f0558ce",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.64.221",Medium,"1679770382.05882","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.997 AM",,,,,"ed296ada-3e1c-4c42-ba2c-b83f3c3d3997_6SKG",HTTP,,,,,,,VOIP,"2d778507-014e-49b7-98dc-9da6bc6592dd","10.10.31.14","IP Phone 8841",SEPD4AD71BF7221,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lE4pbmE9ZL__n4_Dla28bA, Source IP: 10.10.155.20","ed296ada-3e1c-4c42-ba2c-b83f3c3d3997",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.14",Medium,"1679770371.47117","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.994 AM",,,,,"7cc3e545-2d5d-4a30-9325-136810d21ca4_u8DO",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HXSWkgHo1gDLSdA8OjmMsw, Source IP: 10.10.155.20","7cc3e545-2d5d-4a30-9325-136810d21ca4",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679770381.72977","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.991 AM",,,,,"470419c9-7ff1-4cb6-bd23-b8d696196eda_REgx",HTTP,,,,,,,VOIP,"808f3fe0-9523-48ed-a0e8-a3241829ddb7","10.50.46.32","IP Phone 8841",SEPD4AD71BEB649,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JKldDLeUamS9okArLlbPXA, Source IP: 10.10.155.20","470419c9-7ff1-4cb6-bd23-b8d696196eda",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.32",Medium,"1679770381.74437","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.989 AM",,,,,"eb7a0c2c-ad85-4a92-83af-0615b0a0ec5d_Yo+l",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wYRA46VyNsIxWwHMDlyEWA, Source IP: 10.10.155.20","eb7a0c2c-ad85-4a92-83af-0615b0a0ec5d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.72",Medium,"1679770381.73743","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.987 AM",,,,,"36b65295-65f7-4d2e-9a3e-903be22507c2_vNQO",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aaBztjMelhnxe18bPaUbFg, Source IP: 10.10.155.20","36b65295-65f7-4d2e-9a3e-903be22507c2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.55",Medium,"1679770371.56732","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.984 AM",,,,,"ca7152c8-6ea6-40c6-949b-8c6eb4baa1a8_Hrqm",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8U4P6obGL5w4bRBMEpe0rg, Source IP: 10.10.155.20","ca7152c8-6ea6-40c6-949b-8c6eb4baa1a8",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.21",Medium,"1679770381.73563","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.981 AM",,,,,"e06e1f56-b3f3-4a67-877a-8fad314b65b6_AB5p",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LBv2KuYG217-CtK0GNtLOg, Source IP: 10.10.155.20","e06e1f56-b3f3-4a67-877a-8fad314b65b6",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.39",Medium,"1679770381.74462","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:13.978 AM",,,,,"75953c66-fe8f-4e35-b8f7-f788f1134947_2MOI",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nZG0z9SyHtgyeH4fxrHX9A, Source IP: 10.10.155.20","75953c66-fe8f-4e35-b8f7-f788f1134947",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.58",Medium,"1679770381.80235","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.188 AM",,,,,"29240ff3-75db-48ba-a3f0-9df5539a5dad_zUrz",HTTP,,,,,,,VOIP,"fae4dc6f-27e1-49f9-83bc-2a58f3a7c675","10.10.31.13","IP Phone 8841",SEPD4AD71BF5B69,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LGTSULf4oJJcG3q5Gd_UWA, Source IP: 10.10.155.20","29240ff3-75db-48ba-a3f0-9df5539a5dad",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.13",Medium,"1679770381.76942","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.186 AM",,,,,"915f8490-df52-4b16-b84a-1c774e6c1973_gmPQ",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_fensda5ZDLYJWt9jBoLkWQ, Source IP: 10.10.155.20","915f8490-df52-4b16-b84a-1c774e6c1973",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.56",Medium,"1679770381.80977","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.183 AM",,,,,"3037543c-60d4-4537-b09a-526fe7146991_MZZs",HTTP,,,,,,,VOIP,"fae4dc6f-27e1-49f9-83bc-2a58f3a7c675","10.10.31.13","IP Phone 8841",SEPD4AD71BF5B69,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_zmRnIu2M2UrfOrJGRm0u0g, Source IP: 10.10.155.20","3037543c-60d4-4537-b09a-526fe7146991",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.13",Medium,"1679770371.46534","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.181 AM",,,,,"338ac928-d481-4f7a-980e-ee4930384e3b_Hu4N",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841","10.10.31.11",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5nMTHPtPEQKVAQn-fOO_mw, Source IP: 10.10.155.20","338ac928-d481-4f7a-980e-ee4930384e3b",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.11",Medium,"1679770371.49423","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.119 AM",,,,,"c8138c49-7ee0-4e51-8120-033b9ca70215_0EBM",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_I4zN7W4tMdpoHXnaI6ZxhA, Source IP: 10.10.155.20","c8138c49-7ee0-4e51-8120-033b9ca70215",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.42",Medium,"1679770371.47306","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.116 AM",,,,,"2a4ac7c4-62c1-4ad5-86a4-63e214d74ba5_TX2z",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_xIi3DPTQPICf3AvmInrMqQ, Source IP: 10.10.155.20","2a4ac7c4-62c1-4ad5-86a4-63e214d74ba5",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.43",Medium,"1679770381.73525","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.114 AM",,,,,"91ea2e0b-6f33-4164-a76e-7f9097b06999_zVr8",HTTP,,,,,,,VOIP,"b886bca6-9754-42b7-b81a-2c17ff7d48a1","10.50.49.34","IP Phone 8841",SEPD4AD71BF2CCF,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_-zpdQqm_u7BcgOufZoy0EQ, Source IP: 10.10.155.20","91ea2e0b-6f33-4164-a76e-7f9097b06999",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.34",Medium,"1679770371.52406","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.112 AM",,,,,"abefff7f-74c9-464f-9c3c-616c35d7a67e_sr/3",HTTP,,,,,,,VOIP,"b886bca6-9754-42b7-b81a-2c17ff7d48a1","10.50.49.34","IP Phone 8841",SEPD4AD71BF2CCF,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_a4eHymoi_LoI_zQcaWC22Q, Source IP: 10.10.155.20","abefff7f-74c9-464f-9c3c-616c35d7a67e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.34",Medium,"1679770381.74557","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.109 AM",,,,,"9be8c2be-1072-4847-b1d8-199a7332b501_4Ksn",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_PSHf46iOZ00hRRj6uWZCMQ, Source IP: 10.10.155.20","9be8c2be-1072-4847-b1d8-199a7332b501",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.44",Medium,"1679770381.81047","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:09.107 AM",,,,,"4b14413d-6e26-487d-98f1-d832d3e3787f_Ed9p",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ak5u9BDGKfb557WtP5uFOg, Source IP: 10.10.155.20","4b14413d-6e26-487d-98f1-d832d3e3787f",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.64",Medium,"1679770371.45889","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.815 AM",,,,,"85b6c9ba-e2ef-49cb-9fb1-a46d6552a04c_81dh",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Z7mZRlvOZWCGGPobaStWdw, Source IP: 10.10.155.20","85b6c9ba-e2ef-49cb-9fb1-a46d6552a04c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.61",Medium,"1679770381.73116","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.810 AM",,,,,"e9ee7c42-6038-4f6e-b423-f9d865a995ae_A3RS",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_OSsekfyX0otihxZGv2MT-Q, Source IP: 10.10.155.20","e9ee7c42-6038-4f6e-b423-f9d865a995ae",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.58",Medium,"1679770371.56775","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.807 AM",,,,,"2a3966ef-9d92-4035-b669-9409f0e162e2_JJMD",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wVliwFJjePBMDz_CCe9Cxw, Source IP: 10.10.155.20","2a3966ef-9d92-4035-b669-9409f0e162e2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.43",Medium,"1679770381.80307","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.805 AM",,,,,"01ee3372-6cb1-433d-9f37-d52e536475e8_+rgS",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_qJPoTaGX0mXpKkd9tirbVA, Source IP: 10.10.155.20","01ee3372-6cb1-433d-9f37-d52e536475e8",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.58",Medium,"1679770371.55218","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.802 AM",,,,,"041393a9-26d5-4ebd-b526-dbc64aaf2167_lmar",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_gDvJc97Q37eirnrSwaCsng, Source IP: 10.10.155.20","041393a9-26d5-4ebd-b526-dbc64aaf2167",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.39",Medium,"1679770371.54108","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.799 AM",,,,,"67a268bc-a811-4364-8291-cd9bec5e5007_f8NQ",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5On6adoMJxEa6flyfEuZag, Source IP: 10.10.155.20","67a268bc-a811-4364-8291-cd9bec5e5007",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.57",Medium,"1679770371.55357","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.797 AM",,,,,"960d5aee-3060-480e-8cb1-fbf12bbdb758_YGg1",HTTP,,,,,,,VOIP,"8a868242-7170-442d-ace2-2c9ee0d097af","10.50.52.55","IP Phone 8841",SEPD4AD71BF385B,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_y0g5JRg40ZGcaaXgn_15lw, Source IP: 10.10.155.20","960d5aee-3060-480e-8cb1-fbf12bbdb758",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.55",Medium,"1679770371.54776","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.795 AM",,,,,"634c4bab-b6e1-4b26-93d7-d7e975915f48_4inR",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ksvqohF_XK6jDJKVyYOTbA, Source IP: 10.10.155.20","634c4bab-b6e1-4b26-93d7-d7e975915f48",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679770371.54552","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.791 AM",,,,,"eeac3ed5-d207-431a-9ec9-06fb0fe89b89_Eu/T",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_R0O0xOJUFeuLDg-EES-xsw, Source IP: 10.10.155.20","eeac3ed5-d207-431a-9ec9-06fb0fe89b89",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.55",Medium,"1679770381.80515","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.789 AM",,,,,"7f65f419-749a-44e0-b084-8597e93b27b9_7NHU",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LxJtSatJrCQ4Tk6mxeC71g, Source IP: 10.10.155.20","7f65f419-749a-44e0-b084-8597e93b27b9",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.64.221",Medium,"1679770371.88169","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.787 AM",,,,,"d1530bf5-d2d2-481d-8b59-c222d8c32e43_skwI",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lDB988cvgqZB-UesO1t_0w, Source IP: 10.10.155.20","d1530bf5-d2d2-481d-8b59-c222d8c32e43",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.71",Medium,"1679770381.80199","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.784 AM",,,,,"93077170-4b9f-48cd-bc2d-b91bb362e1ab_t+XD",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_D6K1eicW46H-fnEFQCBQ_g, Source IP: 10.10.155.20","93077170-4b9f-48cd-bc2d-b91bb362e1ab",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.28",Medium,"1679770371.5456","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.781 AM",,,,,"8b1fc6e2-282f-42c5-ac1a-76ec2e619123_emNT",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_sziNVw2jJgD7J9QsgmAJHw, Source IP: 10.10.155.20","8b1fc6e2-282f-42c5-ac1a-76ec2e619123",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679770381.73121","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.713 AM",,,,,"d0a23c46-577c-43d0-8c04-ddedb7feb035_jfTP",HTTP,,,,,,,VOIP,"bd57c664-4b28-41c3-aeb0-54337ed7d49e","10.50.53.46","IP Phone 8841",SEPD4AD71BF3105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3E5v02G3SfXNnFWh0WPuLw, Source IP: 10.10.155.20","d0a23c46-577c-43d0-8c04-ddedb7feb035",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.46",Medium,"1679770381.81051","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.710 AM",,,,,"966a7b0b-215b-4409-990d-f26dfb582143_ZeDP",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_KM1UduZiqP4vnuS6clck7g, Source IP: 10.10.155.20","966a7b0b-215b-4409-990d-f26dfb582143",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.16",Medium,"1679770371.54563","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.707 AM",,,,,"fc856ae6-87f1-42c1-b008-215ad95b83aa_6QCo",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nWTTt0ZPa-Ni144AefOozw, Source IP: 10.10.155.20","fc856ae6-87f1-42c1-b008-215ad95b83aa",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.61",Medium,"1679770371.55225","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.705 AM",,,,,"85c12500-02ec-45e6-a345-ec389ce3ebda_FCfK",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IxaLQp3eVPe1D2VwgJcYhw, Source IP: 10.10.155.20","85c12500-02ec-45e6-a345-ec389ce3ebda",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.35.28",Medium,"1679770371.45883","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.702 AM",,,,,"5a39134e-84c7-490d-a2f0-21fca3bea172_WQ3u",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_CctbSFvXHCjSTPa8kXrqBA, Source IP: 10.10.155.20","5a39134e-84c7-490d-a2f0-21fca3bea172",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.21",Medium,"1679770371.55231","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.989 AM",,,,,"df177ba8-5a86-4586-a3c3-f4496fd46ca7_QZR0",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_tO9CCAXL0rgC1zTouGeMLw, Source IP: 10.10.155.20","df177ba8-5a86-4586-a3c3-f4496fd46ca7",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679767118.77918","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.712 AM",,,,,"fb655cbc-5a0b-447e-91ef-856439b46a31_iVu7",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uw6dHlRre9XxuKKv0hj4Gw, Source IP: 10.10.155.20","fb655cbc-5a0b-447e-91ef-856439b46a31",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679767112.56791","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.406 AM",,,,,"4f6d70f4-69c5-4676-8ded-703dbc78ebaa_coH3",HTTP,,,,,,,"IP_CAMERA","a85fe9c0-e16f-44c1-bf6e-d145263dcd92","10.50.171.121",M5054,"axis-accc8ee4c4d4","IP Camera","IP_CAMERA","10.50.171.62","Service: HTTP, User Name: root, Source IP: 10.50.171.62","4f6d70f4-69c5-4676-8ded-703dbc78ebaa",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.171.121",Medium,"1679726298.87799","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:08.070 AM",,,,,"2e385431-25d3-4a91-9856-6eff84e48f2b_FDTq",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uDjlxeDRifjkTkgNbImQIQ, Source IP: 10.10.155.20","2e385431-25d3-4a91-9856-6eff84e48f2b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679707628.75609","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:08.066 AM",,,,,"f916e44f-cc05-4697-8a2b-a42436a603e9_tgCY",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_4ZxR5vUZFYLa8XQQkx2fyQ, Source IP: 10.10.155.20","f916e44f-cc05-4697-8a2b-a42436a603e9",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679707628.76708","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.205 AM",,,,,"c5ca7dd5-d1ea-4868-9954-2b0e9c2cec9b_49jk",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3Ey9eRPmmSPmErGiaAftfw, Source IP: 10.10.155.20","c5ca7dd5-d1ea-4868-9954-2b0e9c2cec9b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.58",Medium,"1679706055.87024","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.201 AM",,,,,"fd893e59-7da9-440d-bf2e-139e98c27bfe_R3Bk",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lxxP3jjc3FoHxeYyU6JyMw, Source IP: 10.10.155.20","fd893e59-7da9-440d-bf2e-139e98c27bfe",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.22",Medium,"1679706055.86779","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.183 AM",,,,,"955ee4c1-1f6a-4a7c-8fa8-e7f2c95903d7_LzRB",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_M0Nnfpub_uZkauL1GH6LGg, Source IP: 10.10.155.20","955ee4c1-1f6a-4a7c-8fa8-e7f2c95903d7",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.64",Medium,"1679706039.70032","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.130 AM",,,,,"b6b019d6-7345-42e6-8901-6f1571676ca6_Utrg",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_O2MEz7BGdIEAFq8PA4Uong, Source IP: 10.10.155.20","b6b019d6-7345-42e6-8901-6f1571676ca6",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.72",Medium,"1679706039.75501","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.127 AM",,,,,"e9e2cd76-8bec-4ee4-9726-af31856a5be5_06ou",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__hxN36mEyn44VTb82bwnhA, Source IP: 10.10.155.20","e9e2cd76-8bec-4ee4-9726-af31856a5be5",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.42",Medium,"1679706055.94212","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.124 AM",,,,,"211dd88b-f31c-495e-90de-db9a669c8b66_jyO/",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_86EMi8D9RvsCHcCWxMMvug, Source IP: 10.10.155.20","211dd88b-f31c-495e-90de-db9a669c8b66",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.58",Medium,"1679706039.75425","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.121 AM",,,,,"a79b3b41-2024-4472-abc0-dd4732f4382f_vwoY",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_k14IUeiV4PRstgkwsuLSdw, Source IP: 10.10.155.20","a79b3b41-2024-4472-abc0-dd4732f4382f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.25",Medium,"1679706055.94747","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.117 AM",,,,,"6be209a9-c0ec-43df-9493-284c82a81cb2_ji7f",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wXEwhlGsOCUpt8aUTe9GzA, Source IP: 10.10.155.20","6be209a9-c0ec-43df-9493-284c82a81cb2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.55",Medium,"1679706055.86651","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.113 AM",,,,,"0474e26f-a0dc-4c40-8b60-0c30ab16cd7c_af1G",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Nn-9bFXtXx_z7K_4EYZ9Ig, Source IP: 10.10.155.20","0474e26f-a0dc-4c40-8b60-0c30ab16cd7c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.36",Medium,"1679706055.9321","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:45.080 AM",,,,,"12980e08-159e-4bcf-ab64-f1c50188e606_v1aB",HTTP,,,,,,,VOIP,"2fbc5b18-0006-4c1c-beab-f82c8fa34d86","10.10.153.13","IP Phone 8841",SEP2C31246EEC38,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_QyXetxBPAoPvsH4TcJZB6A, Source IP: 10.10.155.20","12980e08-159e-4bcf-ab64-f1c50188e606",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.153.13",Medium,"1679706039.69103","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.387 AM",,,,,"63f1d2cd-f96d-4ae4-a586-0653704025a2_hcKq",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_f25Tzs0LO_QvQJNvXeyksA, Source IP: 10.10.155.20","63f1d2cd-f96d-4ae4-a586-0653704025a2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.77",Medium,"1679706055.93193","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.384 AM",,,,,"0863249f-a8ff-4602-a696-2b1aea4fec7a_vETb",HTTP,,,,,,,VOIP,"8d8ac1dd-e457-45c1-a20d-3552201b213e","10.50.51.22","IP Phone 8841",SEPCC70ED5793C6,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_47htWIBX2iiAH4hnzdZMkQ, Source IP: 10.10.155.20","0863249f-a8ff-4602-a696-2b1aea4fec7a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.22",Medium,"1679706055.93168","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.380 AM",,,,,"4bc118ff-b395-4b01-900a-45be9ade8fd2_Byvb",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_D49l6eNGIVPACm_FMzIT7w, Source IP: 10.10.155.20","4bc118ff-b395-4b01-900a-45be9ade8fd2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.25",Medium,"1679706039.85733","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.378 AM",,,,,"ab937c91-5366-4bcd-a10d-f86f15db3b65_FpJ/",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_F3qnTQScLjA675QNlXRXHg, Source IP: 10.10.155.20","ab937c91-5366-4bcd-a10d-f86f15db3b65",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.16",Medium,"1679706039.73643","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.374 AM",,,,,"fd93c25b-2509-4312-9597-c66e21a524bc_8Yrd",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HjrbuIu3AE2b3te68NL43w, Source IP: 10.10.155.20","fd93c25b-2509-4312-9597-c66e21a524bc",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.16",Medium,"1679706055.94043","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.371 AM",,,,,"4d65eb99-0995-467e-a358-82888bd9a0a5_pRof",HTTP,,,,,,,VOIP,"aa29744d-1cc2-42c1-9e18-309f24f40fa1","10.50.49.41","IP Phone 8841",SEPD4AD71BF27DB,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_I94rMhe3DxaYONKAQGDjtg, Source IP: 10.10.155.20","4d65eb99-0995-467e-a358-82888bd9a0a5",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.41",Medium,"1679706039.6913","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.368 AM",,,,,"c4699fcd-8f59-46d0-ab54-cde8f769b4b5_eIOa",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ekg6RGW7BraWXkMXabJXgQ, Source IP: 10.10.155.20","c4699fcd-8f59-46d0-ab54-cde8f769b4b5",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.44",Medium,"1679706055.93121","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:42.360 AM",,,,,"48aa601f-0e01-465d-ad26-cfb4670729a2_W+ya",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_YHs7qIDElp1Qo0jcYWJ_CQ, Source IP: 10.10.155.20","48aa601f-0e01-465d-ad26-cfb4670729a2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.72",Medium,"1679706055.93018","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.516 AM",,,,,"fb537900-9906-4af3-8938-ee2294405793_jxru",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_1wCr-jhvw9Q3g9bcTpemcQ, Source IP: 10.10.155.20","fb537900-9906-4af3-8938-ee2294405793",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.23",Medium,"1679706039.73314","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.513 AM",,,,,"f52c8e00-ca36-4dad-9526-78ed078347b6_gvRo",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_mFaISmSqgVIbhluW-88f2A, Source IP: 10.10.155.20","f52c8e00-ca36-4dad-9526-78ed078347b6",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.21",Medium,"1679706039.73192","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.511 AM",,,,,"6acaa23a-44b1-48cb-963d-38826b873c3d_lDC5",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Iiqg9GJYkUVmiBkEb6kvHg, Source IP: 10.10.155.20","6acaa23a-44b1-48cb-963d-38826b873c3d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.58",Medium,"1679706055.93162","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.507 AM",,,,,"d5720f3f-af47-4469-9bf0-be1beb3cdf79_tzHp",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ZGfMUT2wDody4Crz7lSX9Q, Source IP: 10.10.155.20","d5720f3f-af47-4469-9bf0-be1beb3cdf79",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.53",Medium,"1679706055.9409","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.504 AM",,,,,"eefda94e-e675-4365-b1fc-f44fda9adf39_x7KB",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_iDspOIPxQkk18PEDKFooAQ, Source IP: 10.10.155.20","eefda94e-e675-4365-b1fc-f44fda9adf39",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.64",Medium,"1679706055.88164","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.501 AM",,,,,"07042da5-5846-4c0a-bd89-e81effbe9b95_sWNZ",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_sp9_ibP0qIVEByIYm01u-Q, Source IP: 10.10.155.20","07042da5-5846-4c0a-bd89-e81effbe9b95",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.241.10",Medium,"1679706039.71511","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.497 AM",,,,,"917c1314-5be4-4325-9f6b-3ed55c044f37_gMGU",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HeAjE8TZff5K0Hd0Lv7pjA, Source IP: 10.10.155.20","917c1314-5be4-4325-9f6b-3ed55c044f37",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.39",Medium,"1679706039.70015","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.493 AM",,,,,"e380387b-1e02-4f52-96e3-0be4cd464273_+ST2",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aXnGPXSZm1Dvgtd4h9Kz5Q, Source IP: 10.10.155.20","e380387b-1e02-4f52-96e3-0be4cd464273",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.28",Medium,"1679706039.73326","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.489 AM",,,,,"8752259c-0090-4f13-b183-17e151d9d979_6Fgc",HTTP,,,,,,,VOIP,"f7245c4d-eb2f-4b0a-9a1e-90b2cf9f63c1","10.10.153.32","IP Phone 8841",SEPD4AD71BF4105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_hKgz3W3qQXdGxwLPjMIrKg, Source IP: 10.10.155.20","8752259c-0090-4f13-b183-17e151d9d979",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.153.32",Medium,"1679706055.87508","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.486 AM",,,,,"b5f1c4a4-4418-45ef-9ba0-c3eb319d0189_TSrS",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ArOwOy6WPIWRBUCunD8w_w, Source IP: 10.10.155.20","b5f1c4a4-4418-45ef-9ba0-c3eb319d0189",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.56",Medium,"1679706055.94043","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.482 AM",,,,,"c24009be-8850-46ea-b977-b336e23656fa_BjkI",HTTP,,,,,,,VOIP,"27b24cd5-08cd-462a-989e-4983ec9785b0","10.10.34.116","IP Phone 8841",SEP70C9C668EBBD,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_0hRcu6ty2zkY_jTqcdczMg, Source IP: 10.10.155.20","c24009be-8850-46ea-b977-b336e23656fa",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.116",Medium,"1679706055.93123","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.426 AM",,,,,"9ed62d42-d0fc-49d3-9157-133a9d2eb30a_sqVY",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_7-G_QStQW0TSXYt27dcgqQ, Source IP: 10.10.155.20","9ed62d42-d0fc-49d3-9157-133a9d2eb30a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.48",Medium,"1679706055.93031","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.423 AM",,,,,"a3bf10f9-2c76-45cb-a305-76ff7dacb286_/kco",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_dL8Gt5NLK4RqqurgoZ_UXg, Source IP: 10.10.155.20","a3bf10f9-2c76-45cb-a305-76ff7dacb286",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.57",Medium,"1679706055.87009","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.420 AM",,,,,"1e6412f6-9c15-4ed3-83f0-7d7e6b607561_qoaY",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T_WgIUPKMjMAkxXQsaV7GA, Source IP: 10.10.155.20","1e6412f6-9c15-4ed3-83f0-7d7e6b607561",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.35.28",Medium,"1679706055.8753","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.417 AM",,,,,"e9c9b85d-f72b-4cd6-a070-ff5671751b7f_U8+a",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6l7wNq30hU4t5Kb4mZ-x0g, Source IP: 10.10.155.20","e9c9b85d-f72b-4cd6-a070-ff5671751b7f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.37",Medium,"1679706055.93055","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.414 AM",,,,,"8252baca-ad04-4240-9891-da9aa5be9bac_WL1Z",HTTP,,,,,,,VOIP,"22bddb40-4061-4599-8f25-6ae0ab49a820","10.10.31.22","IP Phone 8841",SEP70C9C668072E,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5FEMNhP1DjPW9wVn77-Qwg, Source IP: 10.10.155.20","8252baca-ad04-4240-9891-da9aa5be9bac",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.22",Medium,"1679706039.70038","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.410 AM",,,,,"6a95378f-0f48-4306-9962-b0b82f27074a_L/5a",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9NJkIfPpZLtkUyarUci0Hg, Source IP: 10.10.155.20","6a95378f-0f48-4306-9962-b0b82f27074a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.43",Medium,"1679706039.734","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.407 AM",,,,,"37bc1790-d028-407e-8bcc-720f33eb3c8b_C+IF",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_hDuq7AbP-ZiUk8wNOqfuFA, Source IP: 10.10.155.20","37bc1790-d028-407e-8bcc-720f33eb3c8b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.70",Medium,"1679706039.68963","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.403 AM",,,,,"0090218d-c28f-4846-864e-2083287f3cd1_pUoP",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_2PZYJppCGOPCz1hbSeKctQ, Source IP: 10.10.155.20","0090218d-c28f-4846-864e-2083287f3cd1",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679706039.73547","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.400 AM",,,,,"bd395a78-a228-4f7a-aa46-fb3240db933f_pT1z",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8_pB1fXKa8iO2STIQsUY8w, Source IP: 10.10.155.20","bd395a78-a228-4f7a-aa46-fb3240db933f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.41",Medium,"1679706055.93035","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.397 AM",,,,,"e1dbb6df-2c3b-47c6-9c39-83bf7eaad93f_ToNU",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_P3VWq_EnNgKyKxAuFOE53Q, Source IP: 10.10.155.20","e1dbb6df-2c3b-47c6-9c39-83bf7eaad93f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.70",Medium,"1679706055.86797","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.393 AM",,,,,"e683ed8d-caef-472c-99e1-3f4d3ca78544_w2Sj",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_rAC3m642UV_GxXqFaiuZDg, Source IP: 10.10.155.20","e683ed8d-caef-472c-99e1-3f4d3ca78544",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.61",Medium,"1679706055.86673","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.389 AM",,,,,"16222c72-c058-44ca-80fc-9ca45752b7e8_zKlS",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_HXW1WEBppT03Lac3JU6AQQ, Source IP: 10.10.155.20","16222c72-c058-44ca-80fc-9ca45752b7e8",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.48",Medium,"1679706039.73405","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.384 AM",,,,,"4c77e44f-febd-452d-bf02-ec763caf7291_Ho23",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841","10.10.31.11",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_NLOz7MxqKwqyqLT02r93Fw, Source IP: 10.10.155.20","4c77e44f-febd-452d-bf02-ec763caf7291",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.11",Medium,"1679706055.92687","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.381 AM",,,,,"8e17a20a-65ff-4bb6-aaf8-d8a2b1b57d28_mkEA",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_yRhNdqhkVYpk_WVkc2qQwg, Source IP: 10.10.155.20","8e17a20a-65ff-4bb6-aaf8-d8a2b1b57d28",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.42",Medium,"1679706039.70228","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.323 AM",,,,,"5c64145e-d4db-4bee-a749-b58db1063ac6_l//y",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ZK6VhNK3RiqT-WKqdmb4YA, Source IP: 10.10.155.20","5c64145e-d4db-4bee-a749-b58db1063ac6",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679706039.7543","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.321 AM",,,,,"5cbaf7b2-d982-47d9-8b71-465c36ba7d0b_TtTN",HTTP,,,,,,,VOIP,"4c3d8787-96c1-42d4-bc6f-096b3fc35b38","10.50.49.73","IP Phone 8841",SEPCC70ED56F42A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_f7E0GGngN6FNXuoyrXmcow, Source IP: 10.10.155.20","5cbaf7b2-d982-47d9-8b71-465c36ba7d0b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.73",Medium,"1679706039.73336","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.318 AM",,,,,"c5252310-993e-40c6-b855-4baa53713534_O9cw",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_tegUhdSIRjUksCTzPjkgEg, Source IP: 10.10.155.20","c5252310-993e-40c6-b855-4baa53713534",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.77",Medium,"1679706039.73544","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.315 AM",,,,,"c867b172-025a-4aa2-8e80-80c256fd25ff_10hG",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UDG4fTadJUFMUXx-MDrTmg, Source IP: 10.10.155.20","c867b172-025a-4aa2-8e80-80c256fd25ff",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.56",Medium,"1679706039.68896","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.312 AM",,,,,"e06c21c4-7d80-4e34-86cf-c5afd40050b3_75hs",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_DD6B6G15MLFotcZR5zA37w, Source IP: 10.10.155.20","e06c21c4-7d80-4e34-86cf-c5afd40050b3",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679706055.9556","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.309 AM",,,,,"33db0017-0a6b-42c7-adf3-137e8fcf3696_W/gh",HTTP,,,,,,,VOIP,"2d778507-014e-49b7-98dc-9da6bc6592dd","10.10.31.14","IP Phone 8841",SEPD4AD71BF7221,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_TrV6VpHj3eVViRT92kN6UA, Source IP: 10.10.155.20","33db0017-0a6b-42c7-adf3-137e8fcf3696",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.14",Medium,"1679706039.6887","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.793 AM",,,,,"76138f42-1a91-4cd4-a838-e71c6c8d0760_txNK",HTTP,,,,,,,"IP_CAMERA","4832413e-70fa-4e2d-b833-ae653e775282","10.50.171.21",M5054,"axis-accc8ee4d4a1","IP Camera","IP_CAMERA","10.10.147.105","Service: HTTP, User Name: root, Source IP: 10.10.147.105","76138f42-1a91-4cd4-a838-e71c6c8d0760",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.171.21",Medium,"1679702661.50426","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.010 AM",,,,,"1e395f2a-a3e0-4fe6-8bad-1e90769b94b5_eDjN",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T4Xi52wTLXPu30-_Z25Gjw, Source IP: 10.10.155.20","1e395f2a-a3e0-4fe6-8bad-1e90769b94b5",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.25",Medium,"1679697735.56773","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.008 AM",,,,,"43db3a1b-4266-46ad-80af-c1468c8ec1bf_TGM9",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_K7Kez_EtT5a4ipMahS-fhQ, Source IP: 10.10.155.20","43db3a1b-4266-46ad-80af-c1468c8ec1bf",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.44",Medium,"1679697735.54114","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.000 AM",,,,,"e8cf5f96-7e7d-4458-9fa8-dc5def32ed41_rSLm",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_-yZycgLXcGwlIqKKzmCI8g, Source IP: 10.10.155.20","e8cf5f96-7e7d-4458-9fa8-dc5def32ed41",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.72",Medium,"1679697735.54234","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.881 AM",,,,,"a973fbaa-d607-49bf-8cb7-c6d68fcba245_kKsl",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8-KBLuxsQ-eBaBY0DHltqg, Source IP: 10.10.155.20","a973fbaa-d607-49bf-8cb7-c6d68fcba245",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.71",Medium,"1679697749.83986","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.818 AM",,,,,"74ca1670-f70d-4a6e-956d-461097190494_pcau",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kUkJlo8SsKaCqzsOvqjFkQ, Source IP: 10.10.155.20","74ca1670-f70d-4a6e-956d-461097190494",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.58",Medium,"1679697749.83063","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.815 AM",,,,,"60d34396-2316-4fba-8016-92f5fadf8f11_k4Ab",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_s98yQDYFZji2s2fWGmCGKA, Source IP: 10.10.155.20","60d34396-2316-4fba-8016-92f5fadf8f11",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.241.10",Medium,"1679697735.50227","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.812 AM",,,,,"021b791c-28d9-49f0-b1f4-95d6cd340d01_z72X",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BPObFdeEJiU4CAXnbOcEqw, Source IP: 10.10.155.20","021b791c-28d9-49f0-b1f4-95d6cd340d01",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.64.221",Medium,"1679697750.07005","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.809 AM",,,,,"5bfa1a1e-8061-41bd-aee1-4fd151ac2078_XYC1",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8VlJ9T_rPiOjbHvbmdMDww, Source IP: 10.10.155.20","5bfa1a1e-8061-41bd-aee1-4fd151ac2078",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679697749.82405","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.806 AM",,,,,"7aff6ae2-61ed-47db-b81c-f10cf5ca6034_IlS+",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lcU8xU_cxa09FbY4owy5SA, Source IP: 10.10.155.20","7aff6ae2-61ed-47db-b81c-f10cf5ca6034",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679697749.81659","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.803 AM",,,,,"ccb0a91d-de9d-4ed5-9966-b254b7d35183_2pk5",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Szn9gmSzcgFFR6e1GFsqqg, Source IP: 10.10.155.20","ccb0a91d-de9d-4ed5-9966-b254b7d35183",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.53",Medium,"1679697735.5427","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.800 AM",,,,,"e315db92-dd7d-438f-9e6d-033c744301f4_J02n",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_YKvy3EszuQAYs4bzgo_wHg, Source IP: 10.10.155.20","e315db92-dd7d-438f-9e6d-033c744301f4",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.43",Medium,"1679697749.85991","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.797 AM",,,,,"366d67ba-2498-4715-85bb-bfd0f5e7ed10_55co",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T-ZoD9scSDZIK755Qo73Eg, Source IP: 10.10.155.20","366d67ba-2498-4715-85bb-bfd0f5e7ed10",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.37",Medium,"1679697749.82425","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.795 AM",,,,,"67ce8e6d-4795-4d7e-ab4c-6c6edc54ff28_/WBV",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_V6VWwg0LBltSMvENlxy-ow, Source IP: 10.10.155.20","67ce8e6d-4795-4d7e-ab4c-6c6edc54ff28",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.56",Medium,"1679697749.83344","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.793 AM",,,,,"250504dc-c722-4bae-896d-0fe4ad12155d_XMR+",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_011Z-wpLt7z1MkB_ymjw5Q, Source IP: 10.10.155.20","250504dc-c722-4bae-896d-0fe4ad12155d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.55",Medium,"1679697735.51058","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.790 AM",,,,,"2b95b947-1b08-4ecc-9936-1a1a1c7cc84d_QSNq",HTTP,,,,,,,VOIP,"48b34814-f3d4-4c3b-a14f-dfca32ab8d49","10.50.54.49","IP Phone 8841","10.50.54.49",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_7XI8DBKgeOd46LeDtUaN-Q, Source IP: 10.10.155.20","2b95b947-1b08-4ecc-9936-1a1a1c7cc84d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.49",Medium,"1679697735.54247","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.787 AM",,,,,"7f172e5f-8134-460f-b399-1c985093c3e6_rKsu",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_QpFHCYCLcgH-Utnki6ZKmA, Source IP: 10.10.155.20","7f172e5f-8134-460f-b399-1c985093c3e6",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.25",Medium,"1679697749.81581","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.784 AM",,,,,"f8346126-082a-42d2-953e-4b8268243176_x8ph",HTTP,,,,,,,VOIP,"22bddb40-4061-4599-8f25-6ae0ab49a820","10.10.31.22","IP Phone 8841",SEP70C9C668072E,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_oSezr9iK3DbU0vj5fiW46A, Source IP: 10.10.155.20","f8346126-082a-42d2-953e-4b8268243176",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.22",Medium,"1679697735.48006","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.781 AM",,,,,"d3377956-ecdb-4a19-8891-9075e6c1d7bd_AKV4",HTTP,,,,,,,VOIP,"634faeed-a4de-4f9e-87df-c0a400ad6c7b","10.50.49.68","IP Phone 8841",SEPD4AD71BF2860,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wayYP30OmhTfMdYfui0LHQ, Source IP: 10.10.155.20","d3377956-ecdb-4a19-8891-9075e6c1d7bd",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.68",Medium,"1679697749.8147","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.715 AM",,,,,"90997bf7-6fb3-4392-aec7-07369f6502fb_GZpG",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_g4HyCCAVQ-1B2eqak0Txlw, Source IP: 10.10.155.20","90997bf7-6fb3-4392-aec7-07369f6502fb",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.61",Medium,"1679697735.56466","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.711 AM",,,,,"1499c866-8d04-4241-a43b-82a2818b0422_B84W",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6f77P8Dwj9PCcQEwMmchSw, Source IP: 10.10.155.20","1499c866-8d04-4241-a43b-82a2818b0422",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.33.31",Medium,"1679697749.84069","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.709 AM",,,,,"06343f1d-5bb6-4d5c-9eda-8fed56cc274c_3mlM",HTTP,,,,,,,VOIP,"8a868242-7170-442d-ace2-2c9ee0d097af","10.50.52.55","IP Phone 8841",SEPD4AD71BF385B,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_1JKc5XJB1U_JHBOydGyw4A, Source IP: 10.10.155.20","06343f1d-5bb6-4d5c-9eda-8fed56cc274c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.55",Medium,"1679697735.54206","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.705 AM",,,,,"c721904b-39fb-44ec-bd9a-98af77d91d20_yNkF",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8Ykwtks5Mpduxpm634KGhQ, Source IP: 10.10.155.20","c721904b-39fb-44ec-bd9a-98af77d91d20",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.53",Medium,"1679697749.8502","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.702 AM",,,,,"1eb39097-1cee-47b3-acdd-1382ab2b4e19_Rw3T",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uJiWuJspiDuHoficPpMttA, Source IP: 10.10.155.20","1eb39097-1cee-47b3-acdd-1382ab2b4e19",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679697735.55872","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.700 AM",,,,,"95e914ce-6f08-43e4-93e8-f78a27a408bc_RGJH",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_53M-pwUAnUHIqFbCw9DKmQ, Source IP: 10.10.155.20","95e914ce-6f08-43e4-93e8-f78a27a408bc",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.22",Medium,"1679697749.82959","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.696 AM",,,,,"331b22b3-4871-4f40-92ef-a7fc3654bcbe_/zdr",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_bxIvTl5LfsIUuYt-0gV6cA, Source IP: 10.10.155.20","331b22b3-4871-4f40-92ef-a7fc3654bcbe",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.71",Medium,"1679697735.54404","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:27.642 AM",,,,,"1e208da3-2267-4992-9e75-8ce0b77c359e_zJFQ",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6esGGw0pnFdjYjE3xBHTIw, Source IP: 10.10.155.20","1e208da3-2267-4992-9e75-8ce0b77c359e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679695866.54049","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.193 AM",,,,,"d3d6f94c-2566-4317-95b6-46199decdd5e_41LY",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_X_VJA-7i_69DYBLNeN0iqA, Source IP: 10.10.155.20","d3d6f94c-2566-4317-95b6-46199decdd5e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679689181.25192","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.188 AM",,,,,"68061f0e-cdb5-47ce-b886-265b90679d9a_ArV1",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_yKdA5YDDA8DZGSLYSLArRg, Source IP: 10.10.155.20","68061f0e-cdb5-47ce-b886-265b90679d9a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679689210.30697","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.185 AM",,,,,"ab912f7e-b21e-4364-bbc5-9a4ce218c00f_aj0I",HTTP,,,,,,,VOIP,"bdd00ed8-cefa-442e-b3c7-0bfc60e90197","10.10.188.64","IP Phone 8841",SEP34F8E77B4297,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BtcvgAjWd8DeS8yt67OiQg, Source IP: 10.10.155.20","ab912f7e-b21e-4364-bbc5-9a4ce218c00f",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.188.64",Medium,"1679689423.71109","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:51.661 AM",,,,,"6e58a3e0-96ad-4021-8709-5f706abe8627_ommu",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UB0ezDI-c8V0WopzXz4Jmg, Source IP: 10.10.155.20","6e58a3e0-96ad-4021-8709-5f706abe8627",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679687607.65803","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:51.658 AM",,,,,"928cd35f-3052-470b-ba2d-fff92557dc89_vwya",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_NHRAbfpfkguNsxiIiUfi0A, Source IP: 10.10.155.20","928cd35f-3052-470b-ba2d-fff92557dc89",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679687581.58065","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.182 AM",,,,,"6ff3a520-1394-498d-924d-728c3b87bfb7_hbZR",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__kCrCdTenq03qFaNKGZCsQ, Source IP: 10.10.155.20","6ff3a520-1394-498d-924d-728c3b87bfb7",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679687588.79348","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.117 AM",,,,,"9a1c965b-7a92-4675-b0ce-75007849b789_8e5q",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_5FPeEkn6mUNBSCiP9eFApw, Source IP: 10.10.155.20","9a1c965b-7a92-4675-b0ce-75007849b789",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679686898.32244","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.115 AM",,,,,"563cf2ba-b2f9-4e63-b312-4ec2cd718231_CCeP",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ejRgaJxu41hUtRTv6BWvPg, Source IP: 10.10.155.20","563cf2ba-b2f9-4e63-b312-4ec2cd718231",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679687607.65988","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.111 AM",,,,,"70c9562b-179e-4a25-815f-b40ffa5de35d_hcRh",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_mNiqJTLqqOhLZ5nfrkIqOA, Source IP: 10.10.155.20","70c9562b-179e-4a25-815f-b40ffa5de35d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679687581.57223","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.904 AM",,,,,"9824a445-581a-45a5-bc5e-5736ff979de5_tiJO",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_VMcTFT3gYvSHMxcNbDMtwA, Source IP: 10.10.155.20","9824a445-581a-45a5-bc5e-5736ff979de5",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679685999.59764","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.901 AM",,,,,"b0097233-2847-41e3-9f55-baf601e5f128_L+CQ",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IVVXn5_JBwdbBYTjLiP-8g, Source IP: 10.10.155.20","b0097233-2847-41e3-9f55-baf601e5f128",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679686106.37334","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.898 AM",,,,,"e44d6ae6-ba35-4b68-bdc4-a9d747e03150_g191",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_GDFFHpM549sc9LsAZzDSDw, Source IP: 10.10.155.20","e44d6ae6-ba35-4b68-bdc4-a9d747e03150",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679685992.3978","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.896 AM",,,,,"d35e2cf8-a37a-41f8-b138-2a40e433493d_dVmF",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_zhtE-7NdhQTYAOmS9CN4ig, Source IP: 10.10.155.20","d35e2cf8-a37a-41f8-b138-2a40e433493d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679685999.59739","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.893 AM",,,,,"4cd17d4a-3216-4aa4-9edf-2748a95eed73_W8y/",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uBedgBXx9YyPifam8jHncA, Source IP: 10.10.155.20","4cd17d4a-3216-4aa4-9edf-2748a95eed73",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679685992.39923","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:12.801 AM",,,,,"727fde9a-6512-4764-8689-93e8865d1312_o98K",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_CjSV7M8aj4EZ9vwBoIEdig, Source IP: 10.10.155.20","727fde9a-6512-4764-8689-93e8865d1312",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679680084.94643","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:12.798 AM",,,,,"71fe00b3-6d2e-4a6a-b2ef-b6c1bc37f41d_UrVE",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Dh_rDViUHmZgnOT-vIOHyQ, Source IP: 10.10.155.20","71fe00b3-6d2e-4a6a-b2ef-b6c1bc37f41d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679680084.94333","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:12.794 AM",,,,,"54a349dc-9730-4f38-afbc-577982851d27_kGhS",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_DDJKfpxsdPbRwD_TJD0Q6g, Source IP: 10.10.155.20","54a349dc-9730-4f38-afbc-577982851d27",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679680077.73433","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.910 AM",,,,,"d5d97d2f-72a9-4ddf-a44a-ba8722593920_tJPC",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_mae1jLY2krEtxN18pDoQbw, Source IP: 10.10.155.20","d5d97d2f-72a9-4ddf-a44a-ba8722593920",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679679614.3436","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.907 AM",,,,,"df57ca61-2c20-4a82-ba12-75caab9bb625_kqpH",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_31suQheJWq_qzh2DUgpPZg, Source IP: 10.10.155.20","df57ca61-2c20-4a82-ba12-75caab9bb625",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679679915.40465","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.290 AM",,,,,"4623124b-7d51-4041-85a6-2686e9bdb81a_6Nar",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Q8r1okaRyLINiSBQtlio7A, Source IP: 10.10.155.20","4623124b-7d51-4041-85a6-2686e9bdb81a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679671806.84604","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.285 AM",,,,,"d382c36f-e648-46d6-b108-b695b515a735_tppe",HTTP,,,,,,,"OT_DEVICE","687251b6-37a6-42cc-9296-8ce69f691646","10.10.25.135","APC by Schneider Electric",netbotzC36344,"OT Device","OT_DEVICE","10.10.140.203","Service: HTTP, User Name: apc, Password: apc, Source IP: 10.10.140.203","d382c36f-e648-46d6-b108-b695b515a735",IDS,80,"[ + ""default_credentials_v2_http"" +]","10.10.25.135",Medium,"1679674882.42072","Default Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.231 AM",,,,,"5eaf62cf-d871-49fc-bdd5-6a4299c1fc59_tppe",HTTP,,,,,,,"OT_DEVICE","687251b6-37a6-42cc-9296-8ce69f691646","10.10.25.135","APC by Schneider Electric",netbotzC36344,"OT Device","OT_DEVICE","10.10.140.203","Service: HTTP, User Name: apc, Source IP: 10.10.140.203","5eaf62cf-d871-49fc-bdd5-6a4299c1fc59",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.25.135",Medium,"1679674882.42072","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.227 AM",,,,,"eb362d6a-a4d1-45b0-8be9-cb0a0b5b13f4_Mjl+",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kdkrOZi5WTbSVGeLmBStsg, Source IP: 10.10.155.20","eb362d6a-a4d1-45b0-8be9-cb0a0b5b13f4",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679671806.85495","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:56.101 AM",,,,,"746427a0-cf4f-490f-a3b6-6dcb214eeb6c_I/kd",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841","10.10.31.11",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_GQ4272Q1yS6qnkoUXNZzSQ, Source IP: 10.10.155.20","746427a0-cf4f-490f-a3b6-6dcb214eeb6c",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.11",Medium,"1679672717.8723","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:56.098 AM",,,,,"8bc4bec8-d54d-4b71-8117-787f4a864f0c_rG/c",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nLWeBV92kepIHCtMu0F-6g, Source IP: 10.10.155.20","8bc4bec8-d54d-4b71-8117-787f4a864f0c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679671555.42487","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:56.094 AM",,,,,"8985ecd4-69ea-4e84-b0a4-e3ae4d5fcd89_3hg4",HTTP,,,,,,,VOIP,"b10001bd-71d6-413a-9adc-92ac9db1b862","10.50.49.70","IP Phone 8841",SEPD4AD71BF1CFA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9TRw_c1r058sebdcVkx6dA, Source IP: 10.10.155.20","8985ecd4-69ea-4e84-b0a4-e3ae4d5fcd89",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.70",Medium,"1679672717.94972","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:52.722 AM",,,,,"4319b98c-e322-4531-b796-e70d51d6e95d_26E6",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_v6qPReWFx2b_l9MW9jBDvg, Source IP: 10.10.155.20","4319b98c-e322-4531-b796-e70d51d6e95d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679671119.40486","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:52.718 AM",,,,,"6668d810-9512-4d56-a56c-f644670d3ee3_lu40",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uxyBaqazrM1Gkjokqc9jRw, Source IP: 10.10.155.20","6668d810-9512-4d56-a56c-f644670d3ee3",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679670503.44922","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.418 AM",,,,,"f737e1a5-76f4-4838-9109-8c82846c1f5a_EGIo",HTTP,,,,,,,"IP_CAMERA","a85fe9c0-e16f-44c1-bf6e-d145263dcd92","10.50.171.121",M5054,"axis-accc8ee4c4d4","IP Camera","IP_CAMERA","10.10.147.105","Service: HTTP, User Name: root, Source IP: 10.10.147.105","f737e1a5-76f4-4838-9109-8c82846c1f5a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.171.121",Medium,"1679669791.4567","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:42.800 AM",,,,,"7f7b511f-3896-4c40-81e9-8ce50bf316b0_6DDW",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_up4DbxqYvmUkZ4_RUI6kDw, Source IP: 10.10.155.20","7f7b511f-3896-4c40-81e9-8ce50bf316b0",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679665452.35579","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:42.796 AM",,,,,"2dd346ae-cc8d-4953-b057-f7391087afdd_70ay",HTTP,,,,,,,"IP_CAMERA","4832413e-70fa-4e2d-b833-ae653e775282","10.50.171.21",M5054,"axis-accc8ee4d4a1","IP Camera","IP_CAMERA","10.10.147.105","Service: HTTP, User Name: root, Source IP: 10.10.147.105","2dd346ae-cc8d-4953-b057-f7391087afdd",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.171.21",Medium,"1679665496.53826","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:42.789 AM",,,,,"1e5b2d38-047e-440a-bc62-f830b1dc12fb_yQBC",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UXCRziZpFzZM9wV-Jd-Irg, Source IP: 10.10.155.20","1e5b2d38-047e-440a-bc62-f830b1dc12fb",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679665452.35571","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.580 AM",,,,,"fc779963-41e3-4caa-a070-0e04f706e33e_MalP",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_FJUDRMNet07DVkNwoETYWw, Source IP: 10.10.155.20","fc779963-41e3-4caa-a070-0e04f706e33e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679617776.63783","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.530 AM",,,,,"0bd28e8c-d519-4224-878a-d4f89be7264e_ylEh",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6srlLmm5LBna4BnfXJfryw, Source IP: 10.10.155.20","0bd28e8c-d519-4224-878a-d4f89be7264e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679617769.41528","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.405 AM",,,,,"279567fc-e624-454c-ae2f-3ccc6ddf0fed_HvAO",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3HEPWpO21dr_dQlrLZaKxw, Source IP: 10.10.155.20","279567fc-e624-454c-ae2f-3ccc6ddf0fed",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679617710.89796","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:09.403 AM",,,,,"47ba4893-b6a3-44a9-b236-359481c3f1ab_8lM/",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ALHOYb03G45Hp-z2u5nDAg, Source IP: 10.10.155.20","47ba4893-b6a3-44a9-b236-359481c3f1ab",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679617720.12268","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.089 AM",,,,,"4a1ebe07-e3c6-4ee8-9aba-bcb5d6bb4fc4_gNWw",HTTP,,,,,,,VOIP,"0a1568ad-ddf8-4c79-bc09-3f1a02b6b4b1","10.10.188.62","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_au_wdWKun3eKJesXQLsd6w, Source IP: 10.10.155.20","4a1ebe07-e3c6-4ee8-9aba-bcb5d6bb4fc4",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.188.62",Medium,"1679613531.41407","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.087 AM",,,,,"3b9f59db-504b-4d70-baf6-1081fffb3549_OnAH",HTTP,,,,,,,VOIP,"821fe666-9895-4865-b566-f0d310d42c35","10.10.188.23","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JRP-Ebe7khYa6ierbQ_RYA, Source IP: 10.10.155.20","3b9f59db-504b-4d70-baf6-1081fffb3549",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.188.23",Medium,"1679613531.41467","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.988 AM",,,,,"d1c6dfd1-c62d-42a8-a515-b65a4d6a2161_1BEN",HTTP,,,,,,,VOIP,"bdd00ed8-cefa-442e-b3c7-0bfc60e90197","10.10.188.64","IP Phone 8841",SEP34F8E77B4297,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BKmV74qHfuvj_yR5Qi40Wg, Source IP: 10.10.155.20","d1c6dfd1-c62d-42a8-a515-b65a4d6a2161",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.188.64",Medium,"1679613525.00304","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.381 AM",,,,,"aac0cb37-d71a-4e69-9266-11f2d0e60ab7_jLbX",HTTP,,,,,,,"IP_CAMERA","a85fe9c0-e16f-44c1-bf6e-d145263dcd92","10.50.171.121",M5054,"axis-accc8ee4c4d4","IP Camera","IP_CAMERA","10.50.171.62","Service: HTTP, User Name: root, Source IP: 10.50.171.62","aac0cb37-d71a-4e69-9266-11f2d0e60ab7",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.171.121",Medium,"1679610151.98068","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.206 AM",,,,,"7467f85c-c6a4-4f4f-b653-59d82d9c0776_kduB",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_urYJbLmVhpBA7TKtfODCqQ, Source IP: 10.10.155.20","7467f85c-c6a4-4f4f-b653-59d82d9c0776",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.21",Medium,"1679607297.77138","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.203 AM",,,,,"8dba4967-e9ec-4fa1-8a13-f0fea7c81dd3_AqN/",HTTP,,,,,,,VOIP,"4e01939c-6605-459c-b7d9-1f7a9d50c063","10.50.52.37","IP Phone 8841",SEPD4AD71BFEEAA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_O0jftEAWKMEv32I0E88U8g, Source IP: 10.10.155.20","8dba4967-e9ec-4fa1-8a13-f0fea7c81dd3",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.37",Medium,"1679607297.78527","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.199 AM",,,,,"7287fd21-7abb-4380-a3e1-355b1b586e9e_Krsq",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_McDTDUDa1ksqHbL_kiMmcw, Source IP: 10.10.155.20","7287fd21-7abb-4380-a3e1-355b1b586e9e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.41",Medium,"1679607297.78068","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.194 AM",,,,,"26b3812c-8053-4961-a356-55bd485b790f_Tnkf",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kRzJdK_6RTeBks_fUPWb5w, Source IP: 10.10.155.20","26b3812c-8053-4961-a356-55bd485b790f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.56",Medium,"1679607297.78258","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.190 AM",,,,,"5f44144c-b20e-4f00-a88c-4f43a9a17be0_b8jZ",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_gPvZk4DDUvpr_sSRKSNdgg, Source IP: 10.10.155.20","5f44144c-b20e-4f00-a88c-4f43a9a17be0",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.42",Medium,"1679607297.63685","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.185 AM",,,,,"a7631431-1964-4484-afb6-d9845baa6bb3_RZfD",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SpxeFmyL8Bd2iqXEDPUaxw, Source IP: 10.10.155.20","a7631431-1964-4484-afb6-d9845baa6bb3",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.22",Medium,"1679607297.66804","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.182 AM",,,,,"064d051b-aef1-4b3a-bc46-57b4e27acc30_hsdG",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Z4ZvSFsozPi4byv9bDkHIg, Source IP: 10.10.155.20","064d051b-aef1-4b3a-bc46-57b4e27acc30",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.23",Medium,"1679607297.77254","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.179 AM",,,,,"ea8e21e0-e3a3-46ee-8c49-6b5f5d4af707_dhgr",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_VlJVTVqXtR26-B6Wz6nq7g, Source IP: 10.10.155.20","ea8e21e0-e3a3-46ee-8c49-6b5f5d4af707",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.71",Medium,"1679607297.78946","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.174 AM",,,,,"f14a2a53-226f-45a7-947d-9c04d195d9cb_/THe",HTTP,,,,,,,VOIP,"f7245c4d-eb2f-4b0a-9a1e-90b2cf9f63c1","10.10.153.32","IP Phone 8841",SEPD4AD71BF4105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_B8T6UTyQG8FsAlChUWv2vA, Source IP: 10.10.155.20","f14a2a53-226f-45a7-947d-9c04d195d9cb",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.153.32",Medium,"1679607297.65627","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.171 AM",,,,,"9f39b82f-0735-4a26-9140-32537d6f4b9f_W677",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8ftk8L1osequk8GfXQh40A, Source IP: 10.10.155.20","9f39b82f-0735-4a26-9140-32537d6f4b9f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679607297.76965","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.167 AM",,,,,"a99a9b8f-af35-4f91-8ade-3ce8d2d5d803_zcrp",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_0WJWdhJ5mneeMollW7kDcw, Source IP: 10.10.155.20","a99a9b8f-af35-4f91-8ade-3ce8d2d5d803",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.55",Medium,"1679607297.75436","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.163 AM",,,,,"36654658-8fae-4cbf-aa50-54d676c65f1a_a/J4",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_BGzjtOjXzEqqS5cG_ARyNw, Source IP: 10.10.155.20","36654658-8fae-4cbf-aa50-54d676c65f1a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.44",Medium,"1679607297.79094","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.159 AM",,,,,"19d4f25f-ef6d-48e3-afdf-71ce45e2b128_1Bpq",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Mw1kkRgLdnirlgJ4gepECA, Source IP: 10.10.155.20","19d4f25f-ef6d-48e3-afdf-71ce45e2b128",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.64",Medium,"1679607297.63932","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.157 AM",,,,,"d9f1a1cc-6bed-4cf6-ac3b-326dc2c3a559_1mme",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_lZc2qakmbGRZKUD6i6AoLg, Source IP: 10.10.155.20","d9f1a1cc-6bed-4cf6-ac3b-326dc2c3a559",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.43",Medium,"1679607297.80414","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.153 AM",,,,,"0a4bbf98-3bc3-4b33-85d7-4dcf472990df_IOot",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_9nLlSnaaypboIP6eJ6WAEQ, Source IP: 10.10.155.20","0a4bbf98-3bc3-4b33-85d7-4dcf472990df",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.53",Medium,"1679607297.77128","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.149 AM",,,,,"fb376342-ce1f-4bee-a2e4-5eb1e17d158a_9NP3",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_N0J-j5ZkOCW3q4bxWpPiOA, Source IP: 10.10.155.20","fb376342-ce1f-4bee-a2e4-5eb1e17d158a",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.33.31",Medium,"1679607297.63722","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.144 AM",,,,,"1e127376-fe74-4715-ab61-58b824f2b4c2_ArNn",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kWE_HNXShkuzyDiGv4936A, Source IP: 10.10.155.20","1e127376-fe74-4715-ab61-58b824f2b4c2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.77",Medium,"1679607297.77124","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.412 AM",,,,,"e80d66b5-8c28-4ca1-a1b2-3a7319901686_r2gP",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__Jb6q-CP4vxuYl-dM3unzw, Source IP: 10.10.155.20","e80d66b5-8c28-4ca1-a1b2-3a7319901686",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.28",Medium,"1679607297.77063","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.408 AM",,,,,"eb023847-90c9-406a-a0c6-e6813985699e_xp1S",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_k2ajNR8bBO_KxPj0gVuUHQ, Source IP: 10.10.155.20","eb023847-90c9-406a-a0c6-e6813985699e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.58",Medium,"1679607297.79337","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.320 AM",,,,,"9c17f67f-11f7-45c2-a8be-73d93ae6cb7b_xdjU",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_XuhwhVi0MeWSIcY9XIVMMQ, Source IP: 10.10.155.20","9c17f67f-11f7-45c2-a8be-73d93ae6cb7b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679606152.31585","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.315 AM",,,,,"16fef8db-23a4-443f-909c-388c3179ae6a_4LG7",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ufZaqOJ4T47p8rWDZWCIGw, Source IP: 10.10.155.20","16fef8db-23a4-443f-909c-388c3179ae6a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679606152.31298","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:32.310 AM",,,,,"d8ff03bc-c5d0-43b1-8505-2abb8811d2b3_4WXj",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_AN8JvkLq6069phyMHvbUGA, Source IP: 10.10.155.20","d8ff03bc-c5d0-43b1-8505-2abb8811d2b3",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679606147.09072","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:13.660 AM",,,,,"ac68318f-0670-4fa2-a1a8-fa0aa285f559_DbDJ",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_PQVD03u7iLB6OpuV5x7Fyw, Source IP: 10.10.155.20","ac68318f-0670-4fa2-a1a8-fa0aa285f559",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679599424.96126","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:12.909 AM",,,,,"4a966da3-9fd0-42f2-87c5-7f9520abac21_N7og",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kL17KMY_LNRN3ZlMg1o6XA, Source IP: 10.10.155.20","4a966da3-9fd0-42f2-87c5-7f9520abac21",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.64",Medium,"1679597592.44689","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.087 AM",,,,,"659261d6-8257-4385-bf7a-5435a6de4b84_kWIh",HTTP,,,,,,,VOIP,"8d8ac1dd-e457-45c1-a20d-3552201b213e","10.50.51.22","IP Phone 8841",SEPCC70ED5793C6,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_DPf0gn5CkISAMp_6GB99Gg, Source IP: 10.10.155.20","659261d6-8257-4385-bf7a-5435a6de4b84",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.22",Medium,"1679597592.48729","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.042 AM",,,,,"53d2f174-d7c7-4683-9522-57a15168b307_lv0n",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_RVvo1RgMOWeo_WfRg2kRwA, Source IP: 10.10.155.20","53d2f174-d7c7-4683-9522-57a15168b307",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.43",Medium,"1679597580.30219","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.039 AM",,,,,"2ffaedf5-c8a1-4e3d-aaa3-f78d13fc360b_l7oo",HTTP,,,,,,,VOIP,"fae4dc6f-27e1-49f9-83bc-2a58f3a7c675","10.10.31.13","IP Phone 8841","10.10.31.13",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_4soNx56oX_B9Kgdm1wVrLQ, Source IP: 10.10.155.20","2ffaedf5-c8a1-4e3d-aaa3-f78d13fc360b",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.13",Medium,"1679597580.28219","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.035 AM",,,,,"35c348bd-2d1c-4cb1-aa4f-7e0d78b8862a_uNnb",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SL7UtqFhp8ey48PYZ5J9rw, Source IP: 10.10.155.20","35c348bd-2d1c-4cb1-aa4f-7e0d78b8862a",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.35.28",Medium,"1679597592.48613","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.032 AM",,,,,"95968b27-e70f-4033-9884-c67c331f07ba_koqQ",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aAS8_sKH22bKBLJnKW_Pfg, Source IP: 10.10.155.20","95968b27-e70f-4033-9884-c67c331f07ba",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679597580.29906","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.022 AM",,,,,"0be80739-da71-44e8-8603-c1b34a98f0ed_MSq2",HTTP,,,,,,,VOIP,"9faf85f4-f783-49ab-ba52-67e5c23d7b71","10.10.241.10","IP Phone 8841",SEP00A3D1F32EFE,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_M9mbRyhm79l4FzNoK9r47w, Source IP: 10.10.155.20","0be80739-da71-44e8-8603-c1b34a98f0ed",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.241.10",Medium,"1679597592.41273","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.018 AM",,,,,"fa15a455-8b70-45ac-b7eb-9b27c7e9b493_hrZ5",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_pztVZP27tJ7juPP88GqgcA, Source IP: 10.10.155.20","fa15a455-8b70-45ac-b7eb-9b27c7e9b493",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679597592.44601","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:10.004 AM",,,,,"aff16a41-a76e-4850-a710-11a98c95f3bd_xES2",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_KsMzdp-FBpmj3qDMNjPrgA, Source IP: 10.10.155.20","aff16a41-a76e-4850-a710-11a98c95f3bd",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.56",Medium,"1679597592.4994","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.997 AM",,,,,"bc46301d-f82c-4c13-9c83-1cca68788254_7CrB",HTTP,,,,,,,VOIP,"9382be1b-259b-40cf-ae9a-de4c4444966f","10.10.31.11","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Z0RAPpUOhFHaimx3ZnklgQ, Source IP: 10.10.155.20","bc46301d-f82c-4c13-9c83-1cca68788254",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.11",Medium,"1679597580.23915","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.993 AM",,,,,"3c833d54-7a26-4b52-a44d-142476731f67_x4yZ",HTTP,,,,,,,VOIP,"ca1356d2-290c-45d5-91e6-e544d329c35a","10.50.55.43","IP Phone 8841",SEPD4AD71BFF930,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_s8b0XPHpjKNbc7k3ADYahQ, Source IP: 10.10.155.20","3c833d54-7a26-4b52-a44d-142476731f67",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.43",Medium,"1679597592.52428","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.988 AM",,,,,"8aaf1818-8522-4aac-8186-b90d3d2c5327_mgTf",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_FthBRjJhyOTcvU41jg8rNg, Source IP: 10.10.155.20","8aaf1818-8522-4aac-8186-b90d3d2c5327",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.22",Medium,"1679597592.50631","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.983 AM",,,,,"a03bbd12-880e-4e1b-9486-ca3ac3d19c79_ZAZZ",HTTP,,,,,,,VOIP,"07b57958-ea43-4ee5-a4d4-5878b320aaf9","10.50.54.58","IP Phone 8841",SEPD4AD71BF380A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_RXned2WjWNKT-fMhzOq6nQ, Source IP: 10.10.155.20","a03bbd12-880e-4e1b-9486-ca3ac3d19c79",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.58",Medium,"1679597580.32354","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.979 AM",,,,,"59c34c46-adbc-4a86-8a32-7f2a5f3e68dd_rwOn",HTTP,,,,,,,VOIP,"782ab535-3334-40a5-bbfa-272c5f36c3aa","10.50.51.23","IP Phone 8841",SEPD4AD71BF31F2,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__cVD2ABWWBDRXmxEE2RpGQ, Source IP: 10.10.155.20","59c34c46-adbc-4a86-8a32-7f2a5f3e68dd",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.23",Medium,"1679597580.29514","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.931 AM",,,,,"70037b5e-eb68-474b-ae22-8c2d8d486554_XQtC",HTTP,,,,,,,VOIP,"450776b1-a64e-4184-b70d-e171eef9abb5","10.10.35.28","IP Phone 8841",SEP34F8E77AACA8,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_YV1U4LFDHu0KixYlpA4EPA, Source IP: 10.10.155.20","70037b5e-eb68-474b-ae22-8c2d8d486554",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.35.28",Medium,"1679597580.23826","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.927 AM",,,,,"fe8c0245-3264-45cf-be85-8311cab14baf_Cz2f",HTTP,,,,,,,VOIP,"808f3fe0-9523-48ed-a0e8-a3241829ddb7","10.50.46.32","IP Phone 8841",SEPD4AD71BEB649,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_JgaIVmXxTBViLW0-aOQJLw, Source IP: 10.10.155.20","fe8c0245-3264-45cf-be85-8311cab14baf",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.32",Medium,"1679597592.50255","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.923 AM",,,,,"f9712d15-b48b-482d-9bd3-c38050b6ca66_xs3K",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_FYR5G66ay_uD7-Knm7Hz2A, Source IP: 10.10.155.20","f9712d15-b48b-482d-9bd3-c38050b6ca66",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.53",Medium,"1679597592.50269","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.918 AM",,,,,"2b95b5c8-11d5-4564-ba98-0dd6d1042a2c_ivxV",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_jnwOQCRjNYcC0sq0tVnGng, Source IP: 10.10.155.20","2b95b5c8-11d5-4564-ba98-0dd6d1042a2c",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.64.221",Medium,"1679597592.70191","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.914 AM",,,,,"ce78fa0c-ff80-4d06-8e3b-91950007f2c5_1IGZ",HTTP,,,,,,,VOIP,"ea7b1bce-1d6e-44ca-be7a-6299cd24fcaa","10.50.52.21","IP Phone 8841",SEP70C9C6686926,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IJuDaKN5eBzMcNAceNg0Rw, Source IP: 10.10.155.20","ce78fa0c-ff80-4d06-8e3b-91950007f2c5",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.21",Medium,"1679597592.49494","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.910 AM",,,,,"98e3fc88-f45e-4ebf-8b66-8a46b0575259_9PHB",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_OFKN2KVxgImidHcAXM3pYQ, Source IP: 10.10.155.20","98e3fc88-f45e-4ebf-8b66-8a46b0575259",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.41",Medium,"1679597592.48738","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.907 AM",,,,,"144dc8ac-7ac9-434b-aed0-3e8f0d24cc1b_Xmu/",HTTP,,,,,,,VOIP,"1fb35de3-c5ab-4ef7-91d8-e59503e30bae","10.10.34.64","IP Phone 8841",SEPD4AD71BFF312,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_vLf1UuWaFCsqIfOqQKQWSw, Source IP: 10.10.155.20","144dc8ac-7ac9-434b-aed0-3e8f0d24cc1b",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.64",Medium,"1679597580.23671","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.902 AM",,,,,"08c150dd-83bd-482e-8ab4-27635328c542_qVz/",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_EvdJIw6IoqZZYV0YN5s0PA, Source IP: 10.10.155.20","08c150dd-83bd-482e-8ab4-27635328c542",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.71",Medium,"1679597580.27034","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.899 AM",,,,,"930c2dac-6204-4bf8-92c3-9e445ce17963_rboQ",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_jmV6d8LqfN5s7wnu9suj3w, Source IP: 10.10.155.20","930c2dac-6204-4bf8-92c3-9e445ce17963",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.57",Medium,"1679597592.49916","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.895 AM",,,,,"57b42d5d-6b4b-4f50-a717-a8af0190663e_U2F8",HTTP,,,,,,,VOIP,"27b24cd5-08cd-462a-989e-4983ec9785b0","10.10.34.116","IP Phone 8841",SEP70C9C668EBBD,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_iUpoivo2fl_B7gDXycn-oA, Source IP: 10.10.155.20","57b42d5d-6b4b-4f50-a717-a8af0190663e",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.116",Medium,"1679597580.23824","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.893 AM",,,,,"d1347254-2032-4e4f-94a2-529e4833f95b_eknh",HTTP,,,,,,,VOIP,"27b24cd5-08cd-462a-989e-4983ec9785b0","10.10.34.116","IP Phone 8841",SEP70C9C668EBBD,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_kj40GKTIm3r_-hLWLrbn5g, Source IP: 10.10.155.20","d1347254-2032-4e4f-94a2-529e4833f95b",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.116",Medium,"1679597592.44208","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.889 AM",,,,,"9531c3f2-edd0-43a0-acfd-173e512c4843_1JNh",HTTP,,,,,,,VOIP,"808f3fe0-9523-48ed-a0e8-a3241829ddb7","10.50.46.32","IP Phone 8841",SEPD4AD71BEB649,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_02oJ3pKhRkVgKw2YLfBtjg, Source IP: 10.10.155.20","9531c3f2-edd0-43a0-acfd-173e512c4843",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.32",Medium,"1679597580.27534","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.885 AM",,,,,"6b99f7f1-264c-4f77-b546-d6e18ddc81da_WR+d",HTTP,,,,,,,VOIP,"01c37385-70d8-45da-921f-47acda9fccc3","10.50.55.25","IP Phone 8841",SEPD4AD71BF121F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_V-J9y7OMDvpyQLoRcOYbTg, Source IP: 10.10.155.20","6b99f7f1-264c-4f77-b546-d6e18ddc81da",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.55.25",Medium,"1679597592.51496","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.881 AM",,,,,"903f5ea0-2c92-425d-8eca-48271e0fbed1_AXi7",HTTP,,,,,,,VOIP,"9dba1782-0d29-4448-b5b6-1e7cb2b67e01","10.50.49.55","IP Phone 8841",SEPD4AD71BF0F47,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_zVRBFww4aatZueWlMlVpXA, Source IP: 10.10.155.20","903f5ea0-2c92-425d-8eca-48271e0fbed1",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.55",Medium,"1679597592.44009","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.834 AM",,,,,"3d446e0c-22da-4a80-813d-7ab5d74eb852_uJYn",HTTP,,,,,,,VOIP,"0847c675-c18f-4878-9624-051da0ed23e8","10.50.49.71","IP Phone 8841",SEP70C9C668A2E9,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_W5CZ4mR-TTEu5ToiIdK0Tw, Source IP: 10.10.155.20","3d446e0c-22da-4a80-813d-7ab5d74eb852",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.71",Medium,"1679597592.49509","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.831 AM",,,,,"95c16b19-2280-4ea9-949c-b84eaf086738_3J65",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_vFLcEQCagTglUrzduQw6HQ, Source IP: 10.10.155.20","95c16b19-2280-4ea9-949c-b84eaf086738",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.33.31",Medium,"1679597580.22358","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.827 AM",,,,,"681df186-40cb-4ba5-85c9-112e99b4bef8_ep5h",HTTP,,,,,,,VOIP,"383a7b2d-5ec5-45ff-b038-b23725318353","10.10.34.126","IP Phone 8841",SEPCC70ED56E50C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_q1l_5vsV02_0tfds1iQ9TA, Source IP: 10.10.155.20","681df186-40cb-4ba5-85c9-112e99b4bef8",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.126",Medium,"1679597592.44594","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.821 AM",,,,,"6fb457e7-99ed-4fab-bd20-ddc2a564863f_nCTl",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_koZmFA40FYEui7TaeEafPg, Source IP: 10.10.155.20","6fb457e7-99ed-4fab-bd20-ddc2a564863f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.36",Medium,"1679597592.48916","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.816 AM",,,,,"04e8ef29-a581-4486-9999-005d2c381dab_WHpQ",HTTP,,,,,,,VOIP,"2e0d714d-8925-45c4-8761-bd80a99f46f9","10.50.49.57","IP Phone 8841",SEPD4AD71BF2B41,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_1ycp39mN3KqZTHW5FbSCng, Source IP: 10.10.155.20","04e8ef29-a581-4486-9999-005d2c381dab",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.57",Medium,"1679597580.31569","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.812 AM",,,,,"6331d98a-7e49-4b75-aec0-d3114024dce8_pJIa",HTTP,,,,,,,VOIP,"fbfea8b5-f9d0-49c8-bbc9-2216fbc74bd5","10.10.64.221","Wireless IP Phone 8821",SEP2852613A5EBC,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SP4edaoOsREyKuNv734IZQ, Source IP: 10.10.155.20","6331d98a-7e49-4b75-aec0-d3114024dce8",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.64.221",Medium,"1679597580.77992","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.808 AM",,,,,"3b81d11b-2fc0-4c49-a7e5-2fe3fbcfb46f_rUjS",HTTP,,,,,,,VOIP,"bd57c664-4b28-41c3-aeb0-54337ed7d49e","10.50.53.46","IP Phone 8841",SEPD4AD71BF3105,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_EuKSjh0UUBXaPNvHJHto1w, Source IP: 10.10.155.20","3b81d11b-2fc0-4c49-a7e5-2fe3fbcfb46f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.46",Medium,"1679597580.3074","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.804 AM",,,,,"1e997459-76eb-4e44-8dbe-bae9f7c12e0f_GWMa",HTTP,,,,,,,VOIP,"48b34814-f3d4-4c3b-a14f-dfca32ab8d49","10.50.54.49","IP Phone 8841","10.50.54.49",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_n1QOn-lPmLg507-t2FjnHA, Source IP: 10.10.155.20","1e997459-76eb-4e44-8dbe-bae9f7c12e0f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.54.49",Medium,"1679597592.4891","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.801 AM",,,,,"1d692424-8352-426c-a693-154d56997a60_BsUP",HTTP,,,,,,,VOIP,"383a7b2d-5ec5-45ff-b038-b23725318353","10.10.34.126","IP Phone 8841",SEPCC70ED56E50C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_fdwgtwtW8i-_uOvJUMWZNA, Source IP: 10.10.155.20","1d692424-8352-426c-a693-154d56997a60",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.34.126",Medium,"1679597580.23824","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.797 AM",,,,,"7c44ba93-97c6-4a67-a3fe-b3d366898214_GXMo",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_TjiCQurerfaXhsl0FRb97A, Source IP: 10.10.155.20","7c44ba93-97c6-4a67-a3fe-b3d366898214",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.58",Medium,"1679597592.48767","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.793 AM",,,,,"7895824e-5ab0-4562-b2ad-648bffd4f8dc_wa+y",HTTP,,,,,,,VOIP,"2964d033-c795-44f5-b9f2-6ee3ed76e32e","10.50.49.39","IP Phone 8841",SEPCC70ED579423,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Ryx4074ghH9cmanXia4Vzw, Source IP: 10.10.155.20","7895824e-5ab0-4562-b2ad-648bffd4f8dc",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.39",Medium,"1679597592.44661","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.789 AM",,,,,"8da3198d-f6c9-4e59-a7c3-d648578d5caf_K2N1",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_OYxIg5tqdPzQdKyzU63rQg, Source IP: 10.10.155.20","8da3198d-f6c9-4e59-a7c3-d648578d5caf",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.77",Medium,"1679597592.49232","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.785 AM",,,,,"1b906b12-404b-4ef6-a805-a2c561c4852f_qYof",HTTP,,,,,,,VOIP,"fcdfeeb4-4eea-45ba-a332-22065939b464","10.50.49.72","IP Phone 8841",SEPD4AD71BF2CC0,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ARjGfdQuEMGsz_M3meGUrw, Source IP: 10.10.155.20","1b906b12-404b-4ef6-a805-a2c561c4852f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.72",Medium,"1679597580.30857","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.781 AM",,,,,"a4c59eb5-a72a-439c-be6d-9d885c69d875_A9Om",HTTP,,,,,,,VOIP,"2fbc5b18-0006-4c1c-beab-f82c8fa34d86","10.10.153.13","IP Phone 8841",SEP2C31246EEC38,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_uEVlcu29zU608ou6-ezJfA, Source IP: 10.10.155.20","a4c59eb5-a72a-439c-be6d-9d885c69d875",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.153.13",Medium,"1679597580.2255","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.747 AM",,,,,"d14a61e4-edcb-4531-94d4-ec23b3585cfd_JFD+",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_LxoUTlEbd56OJS_LS1Yl1A, Source IP: 10.10.155.20","d14a61e4-edcb-4531-94d4-ec23b3585cfd",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.28",Medium,"1679597592.49943","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.743 AM",,,,,"f6a4f146-6e1a-45cd-b1a5-7faa3d18a58c_rf6R",HTTP,,,,,,,VOIP,"29de86a6-a8b6-40ec-9c39-11283937ccb1","10.50.53.16","IP Phone 8841","10.50.53.16",VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_0iASF3fyYW-6UuRdkAlW0A, Source IP: 10.10.155.20","f6a4f146-6e1a-45cd-b1a5-7faa3d18a58c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.16",Medium,"1679597580.30739","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.535 AM",,,,,"1f918772-b7ee-4899-9702-52b999353024_pO3Q",HTTP,,,,,,,VOIP,"4a49a567-f876-4a71-b033-720def0eed19","10.50.52.36","IP Phone 8841",SEP70C9C66934E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_gEfF4pwdAnED5zpayZOo-Q, Source IP: 10.10.155.20","1f918772-b7ee-4899-9702-52b999353024",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.36",Medium,"1679597580.30208","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.532 AM",,,,,"8f96f8e1-0def-4abb-9c28-33e0f58b42f7_bb3A",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_WcvgL69BB9e2gRDMjMkitg, Source IP: 10.10.155.20","8f96f8e1-0def-4abb-9c28-33e0f58b42f7",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679597578.66801","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.528 AM",,,,,"3f5c66bc-b124-43a5-813c-a4e5f6b0046d_yhe4",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_Brhb_GWHMWKmFCkfyZN2hQ, Source IP: 10.10.155.20","3f5c66bc-b124-43a5-813c-a4e5f6b0046d",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.44",Medium,"1679597580.30343","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.523 AM",,,,,"8a33d8ff-e0fe-4a92-b05c-46e3404e5f73_QQsr",HTTP,,,,,,,VOIP,"43c0fd39-58d3-495a-bd71-e247ccf0b521","10.50.52.53","IP Phone 8841",SEPD4AD71BFC2E4,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_dQTkx-3Bb7IlxDFx-Ktp-w, Source IP: 10.10.155.20","8a33d8ff-e0fe-4a92-b05c-46e3404e5f73",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.53",Medium,"1679597580.30164","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.519 AM",,,,,"bf1d6142-bc82-49c9-94b6-4646fe1563bb_Hy8m",HTTP,,,,,,,VOIP,"3e746f69-4119-438e-a206-e3f57c301f59","10.10.31.42","IP Phone 8841",SEPD4AD71BF6D0C,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_rsNHPp5qcR44mndj3KllEQ, Source IP: 10.10.155.20","bf1d6142-bc82-49c9-94b6-4646fe1563bb",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.31.42",Medium,"1679597580.24136","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.514 AM",,,,,"dbcd527c-9498-447b-be8b-d36a9666ef90_hJBr",HTTP,,,,,,,VOIP,"e59fe7f1-dc21-4a1a-9cfc-d021f12103ad","10.50.51.28","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_ewV7R9d6J3Df5KPrkPFVwg, Source IP: 10.10.155.20","dbcd527c-9498-447b-be8b-d36a9666ef90",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.28",Medium,"1679597580.29935","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.510 AM",,,,,"a308f2db-34aa-4c94-937b-c6a24a7faa68_wglB",HTTP,,,,,,,VOIP,"802e623b-10f3-41b0-819f-5c9e1d775ea0","10.50.49.77","IP Phone 8841",SEPCC70ED56ED4F,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_k6UMZpn8v2hvxo1_i9o_XA, Source IP: 10.10.155.20","a308f2db-34aa-4c94-937b-c6a24a7faa68",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.77",Medium,"1679597580.30151","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.506 AM",,,,,"488912f9-c94e-436c-9676-8d9d63262a1b_j4Cn",HTTP,,,,,,,VOIP,"3f8f6d4e-fc58-405e-9c93-c878d5c04e78","10.50.49.56","IP Phone 8841",SEPD4AD71BF3FC3,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_MBclonz92QfRBv5haXkxEQ, Source IP: 10.10.155.20","488912f9-c94e-436c-9676-8d9d63262a1b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.56",Medium,"1679597580.31497","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.501 AM",,,,,"a5a37642-d824-4e21-86f0-52f6c07b307e_h9ww",HTTP,,,,,,,VOIP,"a8ed7d91-0571-4aa9-a8e1-893c050c105e","10.50.53.48","IP Phone 8841",SEP70C9C668A818,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_SB11nhAenDQGeTpbixTE6g, Source IP: 10.10.155.20","a5a37642-d824-4e21-86f0-52f6c07b307e",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.48",Medium,"1679597592.4858","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.497 AM",,,,,"aaf6e7f9-a8ad-4d97-9e1a-299fac4e5cd8_wEVy",HTTP,,,,,,,VOIP,"bf303c4a-69ce-42a5-bd08-375079def0da","10.50.53.44","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_pdGQO8dYqcg0i2on8VzaEg, Source IP: 10.10.155.20","aaf6e7f9-a8ad-4d97-9e1a-299fac4e5cd8",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.53.44",Medium,"1679597592.4962","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.493 AM",,,,,"ea4ea5af-cd21-4b03-81db-1346428d068c_9W51",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_aIKIESopt3Q5NZfHlXAZTg, Source IP: 10.10.155.20","ea4ea5af-cd21-4b03-81db-1346428d068c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679597580.29522","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.489 AM",,,,,"8fd5c2cd-40dc-40a5-a1ee-96a51f94d68c_X54X",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_wCqcgWrEcymtULARjR1trw, Source IP: 10.10.155.20","8fd5c2cd-40dc-40a5-a1ee-96a51f94d68c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679597573.44333","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.485 AM",,,,,"44c7ae68-2826-4be0-91c6-82f611f53c5f_eIHP",HTTP,,,,,,,VOIP,"4c3d8787-96c1-42d4-bc6f-096b3fc35b38","10.50.49.73","IP Phone 8841",SEPCC70ED56F42A,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_iwT2FqCWLy7qj1hSP-Co1w, Source IP: 10.10.155.20","44c7ae68-2826-4be0-91c6-82f611f53c5f",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.73",Medium,"1679597580.3024","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.481 AM",,,,,"814dc68b-7b28-4b75-8e10-82df1ea2403b_ckev",HTTP,,,,,,,VOIP,"634faeed-a4de-4f9e-87df-c0a400ad6c7b","10.50.49.68","IP Phone 8841",SEPD4AD71BF2860,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_8hEWSy87pDUQ48PMDmGTIw, Source IP: 10.10.155.20","814dc68b-7b28-4b75-8e10-82df1ea2403b",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.68",Medium,"1679597592.49372","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.452 AM",,,,,"13c32d1d-0084-4f4c-95b6-6db0f226a868_t3yo",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nEVmNYAyVfsISUERLmTJmA, Source IP: 10.10.155.20","13c32d1d-0084-4f4c-95b6-6db0f226a868",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679597580.29678","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.449 AM",,,,,"94edf2ff-0d17-4bbc-9859-fbc4957a72a8_l5Ls",HTTP,,,,,,,VOIP,"8c71397b-c3c1-4328-9cbf-a4caf3a13fa9","10.50.46.22","IP Phone 8841",SEPD4AD71BF2F03,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_eY4E7SAcLFpK2ShK4JPnXw, Source IP: 10.10.155.20","94edf2ff-0d17-4bbc-9859-fbc4957a72a8",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.46.22",Medium,"1679597580.26836","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.445 AM",,,,,"363a75ca-1c5e-44a0-b9ff-b470537efba2_XibM",HTTP,,,,,,,VOIP,"aa29744d-1cc2-42c1-9e18-309f24f40fa1","10.50.49.41","IP Phone 8841",SEPD4AD71BF27DB,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_AIxfBmLzwa2RaQMlHvTGHw, Source IP: 10.10.155.20","363a75ca-1c5e-44a0-b9ff-b470537efba2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.41",Medium,"1679597592.49651","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.441 AM",,,,,"97c6f36e-90c8-4d90-b347-8f43f5a27c81_Hr5y",HTTP,,,,,,,VOIP,"aa29744d-1cc2-42c1-9e18-309f24f40fa1","10.50.49.41","IP Phone 8841",SEPD4AD71BF27DB,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW__jAubmDM_ZxZj4S0eQCnCQ, Source IP: 10.10.155.20","97c6f36e-90c8-4d90-b347-8f43f5a27c81",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.41",Medium,"1679597580.26916","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.437 AM",,,,,"56345381-ef3c-4513-bae0-33780bd5b15c_KQBB",HTTP,,,,,,,VOIP,"8a47fd35-d605-43fa-8a0d-306fa8079b26","10.50.49.58","IP Phone 8841",SEPD4AD71BFC83D,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_P9B5YF22SEVGR1h6PkpZEA, Source IP: 10.10.155.20","56345381-ef3c-4513-bae0-33780bd5b15c",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.58",Medium,"1679597580.31825","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.432 AM",,,,,"d48bfd71-bdd0-461d-afc8-3d553fc97e73_cb9e",HTTP,,,,,,,VOIP,"96d77ebd-632d-4736-8c90-3b1a4f3359ed","10.50.49.61","IP Phone 8841",SEPD4AD71BF1C70,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_UHww8VZN31xiKdSUvO96dw, Source IP: 10.10.155.20","d48bfd71-bdd0-461d-afc8-3d553fc97e73",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.61",Medium,"1679597592.49494","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.422 AM",,,,,"99b9d48c-1660-4599-9b6f-cd18421c2911_tfgf",HTTP,,,,,,,VOIP,"b886bca6-9754-42b7-b81a-2c17ff7d48a1","10.50.49.34","IP Phone 8841",SEPD4AD71BF2CCF,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_3RiBd2yEgjluEbSgzr7bCg, Source IP: 10.10.155.20","99b9d48c-1660-4599-9b6f-cd18421c2911",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.49.34",Medium,"1679597580.24373","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.411 AM",,,,,"ad84a207-c1cc-4d33-97f6-4d1aa6cb27aa_L+71",HTTP,,,,,,,VOIP,"d971f1c8-0464-4fb0-8e42-308cabd9ccaa","10.50.51.41","IP Phone 8841",SEPD4AD71BF0766,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_2KvxBMv1JNBiwaIVf9DKeQ, Source IP: 10.10.155.20","ad84a207-c1cc-4d33-97f6-4d1aa6cb27aa",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.41",Medium,"1679597580.29578","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.405 AM",,,,,"82c6d8f9-7108-4e65-8fc0-850b94b9cf76_8N61",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_fEJdwkoPRORI4seRb7e1Lg, Source IP: 10.10.155.20","82c6d8f9-7108-4e65-8fc0-850b94b9cf76",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679597510.7767","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.401 AM",,,,,"ac1b0bc8-48a7-43f2-9004-7c5e1aeb4ff0_2S8g",HTTP,,,,,,,VOIP,"e99bbd7e-9bfe-4e40-83a6-43d0b9b41f3d","10.50.52.44","IP Phone 8841",SEPCC70ED570701,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_skhAWbpHJzzDRfe5QCFOcQ, Source IP: 10.10.155.20","ac1b0bc8-48a7-43f2-9004-7c5e1aeb4ff0",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.44",Medium,"1679597592.49505","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.396 AM",,,,,"9c5ad9bc-a147-4148-9c0c-978f28e104d2_1Fab",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_nqAb7nCSInpnTj-mPCjV4Q, Source IP: 10.10.155.20","9c5ad9bc-a147-4148-9c0c-978f28e104d2",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679596178.84883","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.390 AM",,,,,"06d22fc5-f764-41f4-8e53-4c1691d56b2a_6Acb",HTTP,,,,,,,VOIP,"3dc71448-b074-4581-b38f-a3f4c64b2633","10.50.52.43","IP Phone 8841",,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_qrdVduvPmQ_CTW_1MsxOWg, Source IP: 10.10.155.20","06d22fc5-f764-41f4-8e53-4c1691d56b2a",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.52.43",Medium,"1679597592.48766","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:24:51.307 PM",,,,,"186eeca9-cd8a-482b-adea-6812aa2f9dce_OqIx",HTTP,,,,,,,VOIP,"21d4ec09-ba76-4c05-aabc-6f774dafbedb","10.10.33.31","IP Phone 8841",SEPD4AD71BFFDD1,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_rOlO-eGYlofMPDK61dc4OA, Source IP: 10.10.155.20","186eeca9-cd8a-482b-adea-6812aa2f9dce",IDS,80,"[ + ""weak_credentials_http"" +]","10.10.33.31",Medium,"1679593164.15628","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:24:49.648 PM",,,,,"64455e02-e2e5-4c45-8884-d92298edd322_ykfZ",HTTP,,,,,,,VOIP,"5817fd78-4196-413a-90d4-1e8ef7fd70e7","10.50.51.64","IP Phone 8841",SEPD4AD71BF3284,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_IJgYZcrsfX86pI-EHhWycg, Source IP: 10.10.155.20","64455e02-e2e5-4c45-8884-d92298edd322",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.64",Medium,"1679593338.05879","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:10:37.146 PM",,,,,"d935fb54-50b2-4d14-b333-71eeed6f35b1_XxCH",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_T7TVbOJV395Fp1wGvZDh8Q, Source IP: 10.10.155.20","d935fb54-50b2-4d14-b333-71eeed6f35b1",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679592689.02798","Weak Password","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:10:35.464 PM",,,,,"b59d829e-53b3-4252-8e4f-1d321341cae0_bt9L",HTTP,,,,,,,VOIP,"0fe96398-2f71-4a5a-8a18-06419ebbf8db","10.50.51.70","IP Phone 8841",SEPD4AD71BF37DA,VoIP,VOIP,"10.10.155.20","Service: HTTP, User Name: SW_6ts7Zi2VwxsgkUHChU8Vmg, Source IP: 10.10.155.20","b59d829e-53b3-4252-8e4f-1d321341cae0",IDS,80,"[ + ""weak_credentials_http"" +]","10.50.51.70",Medium,"1679592535.28869","Weak Password","CynerioEvent_CL", diff --git a/Sample Data/Cynerio_Cynerio_NetworkSession_IngestedLogs.csv b/Sample Data/ASIM/Cynerio_Cynerio_NetworkSession_IngestedLogs.csv similarity index 99% rename from Sample Data/Cynerio_Cynerio_NetworkSession_IngestedLogs.csv rename to Sample Data/ASIM/Cynerio_Cynerio_NetworkSession_IngestedLogs.csv index b3534b81c60..232733cd923 100644 --- a/Sample Data/Cynerio_Cynerio_NetworkSession_IngestedLogs.csv +++ b/Sample Data/ASIM/Cynerio_Cynerio_NetworkSession_IngestedLogs.csv @@ -1,955 +1,955 @@ -TenantId,SourceSystem,MG,ManagementGroupName,"TimeGenerated [UTC]",Computer,RawData,"date_t [UTC]","asset_id_s","dst_ip_s","src_ip_s","trans_s","uid_s","service_s","new_status_s","risk_name_s","browser_s","host_s",Severity,"status_code_s","asset_asset_type_code_s","asset_id_g","asset_ip_s","asset_model_s","asset_name_s","asset_type_s","asset_type_code_s","client_ip_s","details_s","id_g","module_s","port_d","related_risks_s","server_ip_s","severity_s","timestamp_d","title_s",Type,"_ResourceId" -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:12.229 AM",,"10.10.220.135","10.10.96.151",TCP,"abade7ae-ea81-49f9-ad50-3c54beb9f76a_vEc7",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.96.151","Source IP: 10.10.96.151, Port: 22","abade7ae-ea81-49f9-ad50-3c54beb9f76a",IDS,22,"[ - ""open_port_22"" -]","10.10.220.135",Low,"1679784967.20368","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:12.182 AM",,"10.20.10.194","10.50.132.51",TCP,"72c70e13-c865-426f-a890-cee4e49eeaa1_2TjF",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.50.132.51","Source IP: 10.50.132.51, Port: 22","72c70e13-c865-426f-a890-cee4e49eeaa1",IDS,22,"[ - ""open_port_22"" -]","10.20.10.194",Low,"1679784057.22115","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:11.494 AM",,"10.20.191.2","10.50.132.51",TCP,"4d929a98-af87-4040-b4e9-80f1c701c823_zPHT",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.50.132.51","Source IP: 10.50.132.51, Port: 22","4d929a98-af87-4040-b4e9-80f1c701c823",IDS,22,"[ - ""open_port_22"" -]","10.20.191.2",Low,"1679783907.22084","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:10.843 AM",,"10.20.10.194","10.10.96.151",TCP,"f31c3dda-f08e-4d89-92b8-29a760a846c8_gtvI",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.96.151","Source IP: 10.10.96.151, Port: 22","f31c3dda-f08e-4d89-92b8-29a760a846c8",IDS,22,"[ - ""open_port_22"" -]","10.20.10.194",Low,"1679783552.21626","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:18.690 AM",,,,,"c058b4d9-0f64-4d25-b0e7-6c535021ca47_kNcO",,,,Firefox,"r3.o.lencr.org.x.799a6ce10f037048820836f0e5e73ee83d55.9270f751.id.opendns.com",,,PACS,"9edd7e38-420b-4630-857d-8fc6cf122104","10.10.141.126","McKesson Radiology 12.3","ALI_QUERY_SCP","PACS Server",PACS,"10.10.141.126","Browser: Firefox, Host: r3.o.lencr.org.x.799a6ce10f037048820836f0e5e73ee83d55.9270f751.id.opendns.com, IP: 146.112.247.81","c058b4d9-0f64-4d25-b0e7-6c535021ca47",IDS,80,"[ - ""web_browsing"" -]","146.112.247.81",Medium,"1679779320.67634","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.629 AM",,"10.10.162.100","10.10.141.95",TCP,"152ebadb-8b36-4c0c-866f-c9bbfd6b0681_oPUc",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","152ebadb-8b36-4c0c-866f-c9bbfd6b0681",IDS,22,"[ - ""open_port_22"" -]","10.10.162.100",Low,"1679772672.20545","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.614 AM",,"10.10.162.150","10.10.141.95",TCP,"a2f623dd-d5ac-4439-b515-9f52faab5026_oehO",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","a2f623dd-d5ac-4439-b515-9f52faab5026",IDS,22,"[ - ""open_port_22"" -]","10.10.162.150",Low,"1679772552.22504","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.693 AM",,"10.10.145.26","10.10.141.95",TCP,"906baa53-da3e-4aa0-b83d-88094a067e6d_wcXP",,,,,,,,SWITCH,"63f72b58-a0f8-4a58-a02f-7b26e9fd4b82","10.10.145.26","Cisco Catalyst Switch","MHB-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","906baa53-da3e-4aa0-b83d-88094a067e6d",IDS,22,"[ - ""open_port_22"" -]","10.10.145.26",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.690 AM",,"10.10.145.18","10.10.141.95",TCP,"d7fa37d9-e602-4394-a223-40a2f23a9ea9_wcXP",,,,,,,,SWITCH,"9eb7d56e-0e51-47c2-b53a-dda89d661e44","10.10.145.18","Cisco Catalyst Switch","Lobby-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d7fa37d9-e602-4394-a223-40a2f23a9ea9",IDS,22,"[ - ""open_port_22"" -]","10.10.145.18",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.688 AM",,"10.10.236.129","10.10.141.95",TCP,"6ac74f1d-ea07-42b8-b24c-1884178afbe5_wcXP",,,,,,,,SWITCH,"83d04833-bc04-4e98-b2d7-8eab6c2700ad","10.10.236.129","Catalyst 3750X-24P-E","WS-C3750X-24P-E",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6ac74f1d-ea07-42b8-b24c-1884178afbe5",IDS,22,"[ - ""open_port_22"" -]","10.10.236.129",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.685 AM",,"10.10.145.23","10.10.141.95",TCP,"3ed38082-54cc-4ffb-b411-55e7658b6590_wcXP",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3ed38082-54cc-4ffb-b411-55e7658b6590",IDS,22,"[ - ""open_port_22"" -]","10.10.145.23",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.599 AM",,"10.10.162.200","10.10.141.95",TCP,"b3baf936-60ec-4e8f-9cc7-fd7c1b18b439_lyu5",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","b3baf936-60ec-4e8f-9cc7-fd7c1b18b439",IDS,22,"[ - ""open_port_22"" -]","10.10.162.200",Low,"1679770377.22099","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.934 AM",,"10.10.162.100","10.10.141.95",TCP,"e8f38eb2-b11b-4fae-a2e4-a36634405f74_dluG",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","e8f38eb2-b11b-4fae-a2e4-a36634405f74",IDS,22,"[ - ""open_port_22"" -]","10.10.162.100",Low,"1679768157.2228","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.686 AM",,"10.10.195.140","10.10.141.95",TCP,"22b01640-d05f-4af7-9654-3815fb66a8fd_FxCX",,,,,,,,SWITCH,"715a7bff-b86b-40c1-b290-a1d910333551","10.10.195.140","Catalyst 2960S","1100Eliseo2960-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","22b01640-d05f-4af7-9654-3815fb66a8fd",IDS,22,"[ - ""open_port_22"" -]","10.10.195.140",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.682 AM",,"10.10.194.197","10.10.141.95",TCP,"2892f381-993f-46a6-82bd-7d676834a9c4_FxCX",,,,,,,,SWITCH,"6baf1025-8db2-4587-9f69-6929859d7c8e","10.10.194.197","Cisco Catalyst Switch","1260SEliseo-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2892f381-993f-46a6-82bd-7d676834a9c4",IDS,22,"[ - ""open_port_22"" -]","10.10.194.197",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.680 AM",,"10.10.228.137","10.10.141.95",TCP,"2e25eae3-c471-4f16-a580-72ff5b38811d_FxCX",,,,,,,,SWITCH,"e396e00b-66bc-4c90-9e22-8f219807c304","10.10.228.137","Cisco Catalyst Switch","75Rowl101-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2e25eae3-c471-4f16-a580-72ff5b38811d",IDS,22,"[ - ""open_port_22"" -]","10.10.228.137",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.617 AM",,"10.20.10.194","10.10.141.95",TCP,"e9ec6589-4394-4b07-81a0-1db04b1f4035_FxCX",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e9ec6589-4394-4b07-81a0-1db04b1f4035",IDS,22,"[ - ""open_port_22"" -]","10.20.10.194",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.614 AM",,"10.20.22.194","10.10.141.95",TCP,"a7c94b2a-37a6-4ef7-b98e-8db8078d2c3c_FxCX",,,,,,,,SWITCH,"59c8bdf1-0863-428a-9898-d5827f1c9a42","10.20.22.194","Cisco Catalyst Switch","1341Eliseo-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a7c94b2a-37a6-4ef7-b98e-8db8078d2c3c",IDS,22,"[ - ""open_port_22"" -]","10.20.22.194",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.611 AM",,"10.10.145.85","10.10.141.95",TCP,"882d63a7-afa3-489e-95b8-69a35c24fa58_FxCX",,,,,,,,SWITCH,"46079d19-5c75-4342-a79e-012112c3124c","10.10.145.85","Cisco Catalyst Switch","MIS-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","882d63a7-afa3-489e-95b8-69a35c24fa58",IDS,22,"[ - ""open_port_22"" -]","10.10.145.85",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.609 AM",,"10.10.220.136","10.10.141.95",TCP,"24968e8f-8591-471c-90ba-bd021646a01e_FxCX",,,,,,,,SWITCH,"77e1d12c-3d43-4318-a5a1-82548d8b12d4","10.10.220.136","Catalyst 2960S","2BonAir-C2960-144-SW-VoIP.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","24968e8f-8591-471c-90ba-bd021646a01e",IDS,22,"[ - ""open_port_22"" -]","10.10.220.136",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.606 AM",,"10.10.220.135","10.10.141.95",TCP,"374f539b-5fd6-4ce3-a1ea-1e3812e2f712_FxCX",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","374f539b-5fd6-4ce3-a1ea-1e3812e2f712",IDS,22,"[ - ""open_port_22"" -]","10.10.220.135",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.604 AM",,"10.10.236.135","10.10.141.95",TCP,"400632e8-0e80-4e3c-b9f2-e046ce896d78_FxCX",,,,,,,,SWITCH,"a24e4477-e641-4e07-bbea-a7be77fc2f78","10.10.236.135","Catalyst 2960S","Civic-C2960-144-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","400632e8-0e80-4e3c-b9f2-e046ce896d78",IDS,22,"[ - ""open_port_22"" -]","10.10.236.135",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.602 AM",,"10.20.253.2","10.10.141.95",TCP,"04a57b5e-2398-47d9-8871-f0dc0b789332_FxCX",,,,,,,,SWITCH,"fc28d091-4906-4e1d-97bd-eabbe7538de0","10.20.253.2","Cisco Catalyst Switch","4000Civic-206_209-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","04a57b5e-2398-47d9-8871-f0dc0b789332",IDS,22,"[ - ""open_port_22"" -]","10.20.253.2",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.595 AM",,"10.10.145.9","10.10.141.95",TCP,"7177ab61-6fcc-4e48-a9ed-273558b53986_FxCX",,,,,,,,SWITCH,"96372eef-9a67-4ff6-9520-4851e58e02a9","10.10.145.9","Cisco Catalyst Switch","4Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7177ab61-6fcc-4e48-a9ed-273558b53986",IDS,22,"[ - ""open_port_22"" -]","10.10.145.9",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.592 AM",,"10.10.145.12","10.10.141.95",TCP,"a5a7a605-6f2b-48ad-847c-b4625cf6613b_FxCX",,,,,,,,SWITCH,"f2546184-1d38-4ca3-b3df-5d3149599087","10.10.145.12","Cisco Catalyst Switch","5Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a5a7a605-6f2b-48ad-847c-b4625cf6613b",IDS,22,"[ - ""open_port_22"" -]","10.10.145.12",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.589 AM",,"10.10.145.10","10.10.141.95",TCP,"e33590b6-2be6-4fac-a970-4b83a9e617a1_FxCX",,,,,,,,SWITCH,"224fb103-7597-4c4e-b872-480f8b940e9b","10.10.145.10","Cisco Catalyst Switch","4West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e33590b6-2be6-4fac-a970-4b83a9e617a1",IDS,22,"[ - ""open_port_22"" -]","10.10.145.10",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.587 AM",,"10.10.236.133","10.10.141.95",TCP,"6c0bd7de-7741-499d-aca2-10f7411c0940_FxCX",,,,,,,,SWITCH,"bbf9a2b1-c8a4-4001-ae1f-fb3577c4c5d7","10.10.236.133","Cisco Catalyst Switch","Civic-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6c0bd7de-7741-499d-aca2-10f7411c0940",IDS,22,"[ - ""open_port_22"" -]","10.10.236.133",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.216 AM",,"10.20.21.194","10.10.141.95",TCP,"13d08777-f3bc-417d-937b-a60f4de45df7_npP7",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","13d08777-f3bc-417d-937b-a60f4de45df7",IDS,22,"[ - ""open_port_22"" -]","10.20.21.194",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.213 AM",,"10.10.16.137","10.10.141.95",TCP,"bcd699c0-ba5e-4c21-a75b-9dbdda5ee704_npP7",,,,,,,,SWITCH,"6a24443b-1074-4bd1-9d89-65ce807c6843","10.10.16.137","Catalyst 3850-48U","INT-OAK-DMZ",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bcd699c0-ba5e-4c21-a75b-9dbdda5ee704",IDS,22,"[ - ""open_port_22"" -]","10.10.16.137",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.207 AM",,"10.20.191.2","10.10.141.95",TCP,"09305c89-1571-481e-a3e2-5c3d3c415f56_npP7",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","09305c89-1571-481e-a3e2-5c3d3c415f56",IDS,22,"[ - ""open_port_22"" -]","10.20.191.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.205 AM",,"10.19.88.2","10.10.141.95",TCP,"0edee75f-f4e5-4b53-8c5c-2131e7deef7c_npP7",,,,,,,,SWITCH,"393404cc-a097-4a18-8aa4-1f17f2128ea5","10.19.88.2","Cisco Catalyst Switch","75Rowl220-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0edee75f-f4e5-4b53-8c5c-2131e7deef7c",IDS,22,"[ - ""open_port_22"" -]","10.19.88.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.202 AM",,"10.19.56.2","10.10.141.95",TCP,"0faa1582-7012-433e-8eb1-b7d9e5861cc6_npP7",,,,,,,,SWITCH,"c1aa2466-7676-4798-a7a6-53b59d77ca89","10.19.56.2","Cisco Catalyst Switch","1701FourthSt-120-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0faa1582-7012-433e-8eb1-b7d9e5861cc6",IDS,22,"[ - ""open_port_22"" -]","10.19.56.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.199 AM",,"10.10.184.194","10.10.141.95",TCP,"f22032ba-f6e9-48ff-8791-a51292a6c790_npP7",,,,,,,,SWITCH,"7761f73d-0382-45ed-b9fb-7a104cb390f5","10.10.184.194","Cisco Catalyst Switch","1350-SEliseo-STE130-48.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f22032ba-f6e9-48ff-8791-a51292a6c790",IDS,22,"[ - ""open_port_22"" -]","10.10.184.194",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.196 AM",,"10.19.103.2","10.10.141.95",TCP,"e507f080-93ca-4632-8aca-a83f09c06c54_npP7",,,,,,,,SWITCH,"34565923-0f93-4aec-b330-dc2ec5c5c91b","10.19.103.2","Cisco Catalyst Switch","4000Civic-202-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e507f080-93ca-4632-8aca-a83f09c06c54",IDS,22,"[ - ""open_port_22"" -]","10.19.103.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.683 AM",,"10.10.20.100","10.10.141.95",TCP,"bb469a52-94b9-4c71-b79f-f80eea778fa8_uZrR",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bb469a52-94b9-4c71-b79f-f80eea778fa8",IDS,22,"[ - ""open_port_22"" -]","10.10.20.100",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.680 AM",,"10.10.204.12","10.10.141.95",TCP,"086132e1-b5a1-4295-b9ee-ecbc109aba84_uZrR",,,,,,,,SWITCH,"690a3cc5-7b90-4bf7-b2b4-4a99883c680f","10.10.204.12","Cisco Catalyst Switch","MH-Phlps-3101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","086132e1-b5a1-4295-b9ee-ecbc109aba84",IDS,22,"[ - ""open_port_22"" -]","10.10.204.12",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.621 AM",,"10.20.47.2","10.10.141.95",TCP,"ac2ccb42-10c0-4f0a-92d8-34ef68144529_uZrR",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ac2ccb42-10c0-4f0a-92d8-34ef68144529",IDS,22,"[ - ""open_port_22"" -]","10.20.47.2",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.618 AM",,"10.10.145.67","10.10.141.95",TCP,"a3039609-9682-4811-adfb-f837f8764cb9_uZrR",,,,,,,,SWITCH,"99b4a085-5f3b-4f77-94d2-d75e9814254b","10.10.145.67","Catalyst 3850-48U","MGH-Internet-AGG-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a3039609-9682-4811-adfb-f837f8764cb9",IDS,22,"[ - ""open_port_22"" -]","10.10.145.67",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.478 AM",,"10.10.178.242","10.10.141.95",TCP,"74613d87-ac7d-4d1e-bf88-6414b6270641_y1BI",,,,,,,,SWITCH,"00365818-9730-4f67-af78-d2b4242bf75c","10.10.178.242","Cisco Catalyst Switch","1350-SEliseo-Ste220-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","74613d87-ac7d-4d1e-bf88-6414b6270641",IDS,22,"[ - ""open_port_22"" -]","10.10.178.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.414 AM",,"10.10.145.5","10.10.141.95",TCP,"8e0e1db5-bf65-448d-8a49-f831a889e168_y1BI",,,,,,,,SWITCH,"b188b718-611b-44dd-9de4-b220156dbe65","10.10.145.5","Catalyst 2960S","MGH-Engineering-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8e0e1db5-bf65-448d-8a49-f831a889e168",IDS,22,"[ - ""open_port_22"" -]","10.10.145.5",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.411 AM",,"10.10.145.25","10.10.141.95",TCP,"23c55c90-8a28-4a4a-a0f9-a055ce813dc2_y1BI",,,,,,,,SWITCH,"0337c96d-39f9-4c00-876f-06ac402fa0a3","10.10.145.25","Cisco Catalyst Switch","2Central-C3850-96-SW03.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","23c55c90-8a28-4a4a-a0f9-a055ce813dc2",IDS,22,"[ - ""open_port_22"" -]","10.10.145.25",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.408 AM",,"10.20.159.2","10.10.141.95",TCP,"7224d76b-3dea-4e81-acca-c2828d1e2da4_y1BI",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7224d76b-3dea-4e81-acca-c2828d1e2da4",IDS,22,"[ - ""open_port_22"" -]","10.20.159.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.405 AM",,"10.10.145.11","10.10.141.95",TCP,"47d36506-d403-4c64-bbee-7008777964de_y1BI",,,,,,,,SWITCH,"3e973541-e49d-4ae5-88d7-223f0a8933da","10.10.145.11","Cisco Catalyst Switch","2West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","47d36506-d403-4c64-bbee-7008777964de",IDS,22,"[ - ""open_port_22"" -]","10.10.145.11",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.403 AM",,"10.20.175.2","10.10.141.95",TCP,"664a5d59-d9ee-41ab-bf58-5f5d1b05cdfa_y1BI",,,,,,,,SWITCH,"8fad271e-115d-43f8-982f-ce1687063594","10.20.175.2","Cisco Catalyst Switch","PRIMA-100DRAKES-3850-STACK.maringeneral.",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","664a5d59-d9ee-41ab-bf58-5f5d1b05cdfa",IDS,22,"[ - ""open_port_22"" -]","10.20.175.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.400 AM",,"10.20.79.5","10.10.141.95",TCP,"3b3ad7d0-2879-483f-a4f4-f7bc13a02368_y1BI",,,,,,,,SWITCH,"8df37589-717b-49a5-979e-ec40ac93c229","10.20.79.5","Cisco Catalyst Switch","651FStSonoma-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3b3ad7d0-2879-483f-a4f4-f7bc13a02368",IDS,22,"[ - ""open_port_22"" -]","10.20.79.5",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.397 AM",,"10.20.207.2","10.10.141.95",TCP,"757609d5-af0d-4797-8936-172569af5d03_y1BI",,,,,,,,SWITCH,"0b4e943b-9635-4952-a6be-6ebcb969a459","10.20.207.2","Cisco Catalyst Switch","PRIMA-347Andrieux-c3850-48-SW.maringener",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","757609d5-af0d-4797-8936-172569af5d03",IDS,22,"[ - ""open_port_22"" -]","10.20.207.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.394 AM",,"10.10.145.15","10.10.141.95",TCP,"31eaeb10-9c2e-47d1-a7cd-481ac9175410_y1BI",,,,,,,,SWITCH,"8a336c51-448e-4b38-9ded-dda2b03fd1ba","10.10.145.15","Catalyst 3850-48P","3West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","31eaeb10-9c2e-47d1-a7cd-481ac9175410",IDS,22,"[ - ""open_port_22"" -]","10.10.145.15",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.390 AM",,"10.20.223.2","10.10.141.95",TCP,"dea91448-3c43-48d4-a7f1-5f132af6320d_y1BI",,,,,,,,SWITCH,"de343319-37ea-44ca-9586-073e119a4726","10.20.223.2","Cisco Catalyst Switch","PRIMA-1496Professional-c3850-48-SW.marin",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dea91448-3c43-48d4-a7f1-5f132af6320d",IDS,22,"[ - ""open_port_22"" -]","10.20.223.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.387 AM",,"10.10.145.8","10.10.141.95",TCP,"f8a86035-fad2-4fbd-9c8a-2c82214a0365_y1BI",,,,,,,,SWITCH,"785abf71-059b-4d14-bedc-485bf82e85ff","10.10.145.8","Cisco Catalyst Switch","1Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f8a86035-fad2-4fbd-9c8a-2c82214a0365",IDS,22,"[ - ""open_port_22"" -]","10.10.145.8",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.384 AM",,"10.10.236.136","10.10.141.95",TCP,"8797d149-36ef-4a73-bcfb-fe0d8b0dd82f_y1BI",,,,,,,,SWITCH,"c24cdf3c-7168-4cbb-8a9e-142c8afa8ed1","10.10.236.136","Catalyst 2960S","Civic-C2960-48-SW02",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8797d149-36ef-4a73-bcfb-fe0d8b0dd82f",IDS,22,"[ - ""open_port_22"" -]","10.10.236.136",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.381 AM",,"10.20.30.242","10.10.141.95",TCP,"fd473041-a1a5-4c8c-b6d6-371013ef458e_y1BI",,,,,,,,SWITCH,"716f2c3f-a88c-4c91-aab5-b9aa32edf877","10.20.30.242","Cisco Catalyst Switch","75Rowl250-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fd473041-a1a5-4c8c-b6d6-371013ef458e",IDS,22,"[ - ""open_port_22"" -]","10.20.30.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.307 AM",,"10.20.62.5","10.10.141.95",TCP,"17cd7a21-1772-436c-a548-18709452db41_y1BI",,,,,,,,SWITCH,"5a9c7ddb-8484-4e3e-a560-85eb3f884cb3","10.20.62.5","Cisco Catalyst Switch","900SEliseo201-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","17cd7a21-1772-436c-a548-18709452db41",IDS,22,"[ - ""open_port_22"" -]","10.20.62.5",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.304 AM",,"10.20.143.2","10.10.141.95",TCP,"0e667531-09df-469e-b1e1-a32645c7f880_y1BI",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0e667531-09df-469e-b1e1-a32645c7f880",IDS,22,"[ - ""open_port_22"" -]","10.20.143.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.301 AM",,"10.10.145.87","10.10.141.95",TCP,"95353e6e-63de-4142-8a17-37f274d993a3_y1BI",,,,,,,,SWITCH,"5bdb5c80-de6b-4609-954b-edbbb0ec300c","10.10.145.87","Catalyst 2960S","MIS-C2960S-IMG-SW-2.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","95353e6e-63de-4142-8a17-37f274d993a3",IDS,22,"[ - ""open_port_22"" -]","10.10.145.87",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.298 AM",,"10.10.204.2","10.10.141.95",TCP,"db3b8966-d64c-426d-b489-13475d274638_y1BI",,,,,,,,SWITCH,"9cc0363a-1448-4b03-877b-c743e4edbc11","10.10.204.2","Cisco Catalyst Switch","MH-Phlps-6-A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","db3b8966-d64c-426d-b489-13475d274638",IDS,22,"[ - ""open_port_22"" -]","10.10.204.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.296 AM",,"10.10.204.15","10.10.141.95",TCP,"c36fc62d-1f5e-4ebd-b2f7-343f4103807b_y1BI",,,,,,,,SWITCH,"669bc5d7-d785-40a5-a8f6-dd6bb0099ef1","10.10.204.15","Cisco Catalyst Switch","MH-Phlps-2101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c36fc62d-1f5e-4ebd-b2f7-343f4103807b",IDS,22,"[ - ""open_port_22"" -]","10.10.204.15",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.293 AM",,"10.10.145.13","10.10.141.95",TCP,"392d625a-5399-4ea8-8e79-931a490fde16_y1BI",,,,,,,,SWITCH,"00bcead7-6eb2-427b-b74b-340afe6fb482","10.10.145.13","Catalyst 2960S","MDF-1-c2960-APC-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","392d625a-5399-4ea8-8e79-931a490fde16",IDS,22,"[ - ""open_port_22"" -]","10.10.145.13",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.290 AM",,"10.10.145.72","10.10.141.95",TCP,"6777c8ea-034f-4874-a94b-73d6689d73c0_y1BI",,,,,,,,SWITCH,"94a134a2-f4ca-460c-8bd0-84465fdfead5","10.10.145.72","Catalyst 2960S","MIS-IMAGING-Sw2960.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6777c8ea-034f-4874-a94b-73d6689d73c0",IDS,22,"[ - ""open_port_22"" -]","10.10.145.72",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.288 AM",,"10.10.176.242","10.10.141.95",TCP,"e41824dd-92f9-4a2a-a9c3-e76d00a6623c_y1BI",,,,,,,,SWITCH,"50310ff2-90c7-46d0-9e4c-932d65b2c23d","10.10.176.242","Cisco Catalyst Switch","1350-SEliseo-Ste120-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e41824dd-92f9-4a2a-a9c3-e76d00a6623c",IDS,22,"[ - ""open_port_22"" -]","10.10.176.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.286 AM",,"10.10.145.84","10.10.141.95",TCP,"820e90df-cd55-4be1-a7cb-5241bf3ac42d_y1BI",,,,,,,,SWITCH,"5aa02184-81ed-4365-b92b-53ccbb648102","10.10.145.84","Catalyst 3750-48PS-S","WS-C3750-48PS-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","820e90df-cd55-4be1-a7cb-5241bf3ac42d",IDS,22,"[ - ""open_port_22"" -]","10.10.145.84",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.283 AM",,"10.20.47.3","10.10.141.95",TCP,"12afd241-195e-4407-adb9-7c4c68e1e832_y1BI",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","12afd241-195e-4407-adb9-7c4c68e1e832",IDS,22,"[ - ""open_port_22"" -]","10.20.47.3",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.280 AM",,"10.20.127.2","10.10.141.95",TCP,"00fed70a-ba81-4ec7-b2e6-f01ab18c581c_y1BI",,,,,,,,SWITCH,"33145016-7192-4675-9a7c-ca39cc128f9d","10.20.127.2","Cisco Catalyst Switch","1350-SEliseo-Ste300-48",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","00fed70a-ba81-4ec7-b2e6-f01ab18c581c",IDS,22,"[ - ""open_port_22"" -]","10.20.127.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.689 AM",,"10.10.232.242","10.10.141.95",TCP,"773b8138-b4ff-4552-b4bb-de778268bb99_y1BI",,,,,,,,SWITCH,"d35ffa2a-aed1-4e33-a316-59c02553750d","10.10.232.242","Cisco Catalyst Switch","75Rowl140-c3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","773b8138-b4ff-4552-b4bb-de778268bb99",IDS,22,"[ - ""open_port_22"" -]","10.10.232.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.685 AM",,"10.10.145.6","10.10.141.95",TCP,"fd42dbce-6bec-4bbf-841f-57daba6fce7f_y1BI",,,,,,,,SWITCH,"26531e3f-80f0-401e-aed6-8cd9fcf1fc74","10.10.145.6","Cisco Catalyst Switch","3West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fd42dbce-6bec-4bbf-841f-57daba6fce7f",IDS,22,"[ - ""open_port_22"" -]","10.10.145.6",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.683 AM",,"10.10.145.4","10.10.141.95",TCP,"99712faa-83bf-4ed3-8b48-6b9ccd282ebf_y1BI",,,,,,,,SWITCH,"a4d28bc4-9482-4924-8423-aa8868def9f4","10.10.145.4","Cisco Catalyst Switch","3Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","99712faa-83bf-4ed3-8b48-6b9ccd282ebf",IDS,22,"[ - ""open_port_22"" -]","10.10.145.4",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.680 AM",,"10.10.228.2","10.10.141.95",TCP,"68ca4643-a67c-4344-8bd6-c9235b711e40_y1BI",,,,,,,,SWITCH,"15358dc2-070d-42b8-957d-fc0537790e77","10.10.228.2","Cisco Catalyst Switch","75Rowl201-C3850-144-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","68ca4643-a67c-4344-8bd6-c9235b711e40",IDS,22,"[ - ""open_port_22"" -]","10.10.228.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.631 AM",,"10.10.145.86","10.10.141.95",TCP,"e163e774-6848-44ba-bd63-d809fcfc27af_y1BI",,,,,,,,SWITCH,"48dcdb84-2dc9-4136-a140-04ff36f0f83e","10.10.145.86","Catalyst 2960S","MIS-C2960S-IMG-SW-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e163e774-6848-44ba-bd63-d809fcfc27af",IDS,22,"[ - ""open_port_22"" -]","10.10.145.86",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.629 AM",,"10.10.145.16","10.10.141.95",TCP,"63a9a8ef-123e-4c2b-89e4-ec56d3d9734d_y1BI",,,,,,,,SWITCH,"2e9e4ef4-57d3-4ac9-8a40-1158265b2a71","10.10.145.16","Cisco Catalyst Switch","4West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","63a9a8ef-123e-4c2b-89e4-ec56d3d9734d",IDS,22,"[ - ""open_port_22"" -]","10.10.145.16",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.625 AM",,"10.10.200.40","10.10.141.95",TCP,"41df7023-3d5d-4b63-89c9-9bff8bdc22c3_y1BI",,,,,,,,SWITCH,"22f915b2-3162-4581-8949-67c0c270d617","10.10.200.40","Cisco Catalyst Switch","100ADrakes140-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","41df7023-3d5d-4b63-89c9-9bff8bdc22c3",IDS,22,"[ - ""open_port_22"" -]","10.10.200.40",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.622 AM",,"10.20.95.2","10.10.141.95",TCP,"963990d2-3352-4a09-8f1a-5de1a05697d3_y1BI",,,,,,,,SWITCH,"b0ae69b1-9c48-4b75-b021-9bffb0112314","10.20.95.2","Cisco Catalyst Switch","1100Larkspur-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","963990d2-3352-4a09-8f1a-5de1a05697d3",IDS,22,"[ - ""open_port_22"" -]","10.20.95.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.618 AM",,"10.10.190.7","10.10.141.95",TCP,"63b3abf0-2ddb-4740-aec2-5f8dcf13ae10_y1BI",,,,,,,,SWITCH,"b5658de0-e0eb-48b0-8e9c-a30f74b0defa","10.10.190.7","Cisco Catalyst Switch","1240Eliseo-C3850-120-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","63b3abf0-2ddb-4740-aec2-5f8dcf13ae10",IDS,22,"[ - ""open_port_22"" -]","10.10.190.7",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.615 AM",,"10.10.145.7","10.10.141.95",TCP,"977ca915-8f68-4642-abe3-7ddb37a681fa_y1BI",,,,,,,,SWITCH,"d10a1c72-257a-4780-a790-1622d394f41f","10.10.145.7","Cisco Catalyst Switch","1West-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","977ca915-8f68-4642-abe3-7ddb37a681fa",IDS,22,"[ - ""open_port_22"" -]","10.10.145.7",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.613 AM",,"10.20.109.10","10.10.141.95",TCP,"f97c5911-2e51-423b-9230-85ce35e0e4cf_y1BI",,,,,,,,SWITCH,"af1b7d9a-62cb-4d32-8ef7-308790e6b055","10.20.109.10","Cisco Catalyst Switch","4000Civic-200B-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f97c5911-2e51-423b-9230-85ce35e0e4cf",IDS,22,"[ - ""open_port_22"" -]","10.20.109.10",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.610 AM",,"10.20.109.2","10.10.141.95",TCP,"f6851dfc-f269-4075-af3b-fee071fd48fb_y1BI",,,,,,,,SWITCH,"766a3b0a-8973-449c-8468-3409cf2a48e4","10.20.109.2","Cisco Catalyst Switch","4000Civic-205-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f6851dfc-f269-4075-af3b-fee071fd48fb",IDS,22,"[ - ""open_port_22"" -]","10.20.109.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.603 AM",,"10.10.145.24","10.10.141.95",TCP,"59bb3acb-7c4e-4701-b12a-99d628c86cc6_y1BI",,,,,,,,SWITCH,"93bd2053-bd4c-4206-ac17-9f09fb17a866","10.10.145.24","Cisco Catalyst Switch","2Central-C3850-192-SW02.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","59bb3acb-7c4e-4701-b12a-99d628c86cc6",IDS,22,"[ - ""open_port_22"" -]","10.10.145.24",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.593 AM",,"10.10.145.92","10.10.141.95",TCP,"93e20465-94a8-4497-93d5-c6c37ba24375_y1BI",,,,,,,,SWITCH,"ede79008-7959-4b40-80f5-4e8d30d99303","10.10.145.92","Catalyst 2960S","RMT2960-48-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","93e20465-94a8-4497-93d5-c6c37ba24375",IDS,22,"[ - ""open_port_22"" -]","10.10.145.92",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.590 AM",,"10.10.145.96","10.10.141.95",TCP,"5c067852-1117-44f5-958d-13414d6e7447_y1BI",,,,,,,,SWITCH,"ab5d1d34-dea3-459d-b30b-adcfaf6f380c","10.10.145.96","Catalyst 2960S","SPC2960-24-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5c067852-1117-44f5-958d-13414d6e7447",IDS,22,"[ - ""open_port_22"" -]","10.10.145.96",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.585 AM",,"10.10.185.2","10.10.141.95",TCP,"ff1b1f27-f839-4152-8fc7-4da01fccc7f7_y1BI",,,,,,,,SWITCH,"8c31c8a3-cc71-4506-9656-d6e947c78ee3","10.10.185.2","Cisco Catalyst Switch","1350-SEliseo-C3850-144.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ff1b1f27-f839-4152-8fc7-4da01fccc7f7",IDS,22,"[ - ""open_port_22"" -]","10.10.185.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.396 AM",,"10.50.145.5","10.10.141.95",TCP,"af4e5102-a10c-440c-b0ee-7f0074f636d7_JY9K",,,,,,,,SWITCH,"8a732210-2406-4ef0-a9a2-ae5d23cd8d98","10.50.145.5","Cisco Catalyst Switch","MH-3850-B561-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","af4e5102-a10c-440c-b0ee-7f0074f636d7",IDS,22,"[ - ""open_port_22"" -]","10.50.145.5",Low,"1679765267.47583","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:04.051 AM",,"10.50.132.74","10.10.138.67",UDP,"6a8f9aae-f75c-4417-b097-e9c1a420c1cc_fWhP",,,,,,,,CAD,"61ecae95-8043-4f00-bcac-9676ebb5d7f6","10.50.132.74",DynaCAD,"VM-PACSRAD29",CAD,CAD,"10.10.138.67","Source IP: 10.10.138.67, Port: 3389","6a8f9aae-f75c-4417-b097-e9c1a420c1cc",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.74",Low,"1679762657.21659","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:55.947 AM",,"10.10.194.136","10.50.138.42",TCP,"10d7c534-e42f-440f-8bfd-8911630e0a1a_2b9v",,,,,,,,MRI,"934fb1ec-eb82-4b60-9703-d991b38c50f0","10.10.194.136",Ingenia,MOMMRI2,MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","10d7c534-e42f-440f-8bfd-8911630e0a1a",IDS,22,"[ - ""open_port_22"" -]","10.10.194.136",Low,"1679738492.20943","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.913 AM",,"10.10.162.200","10.10.141.95",TCP,"c2675da6-6230-4c40-ba0d-7b7f332ab225_cixF",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","c2675da6-6230-4c40-ba0d-7b7f332ab225",IDS,22,"[ - ""open_port_22"" -]","10.10.162.200",Low,"1679730237.48704","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.825 AM",,"10.10.162.150","10.10.141.95",TCP,"05620a83-337b-4c1a-809b-9a4a3cbdf3c8_796B",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","05620a83-337b-4c1a-809b-9a4a3cbdf3c8",IDS,22,"[ - ""open_port_22"" -]","10.10.162.150",Low,"1679729777.20844","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.823 AM",,"10.10.162.100","10.10.141.95",TCP,"4fffd646-b155-4fc9-8b72-2586cb7c3538_796B",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","4fffd646-b155-4fc9-8b72-2586cb7c3538",IDS,22,"[ - ""open_port_22"" -]","10.10.162.100",Low,"1679729777.20844","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.417 AM",,,,,"18a77fc3-ef84-4323-a5db-5010692a84ed_0FYE",,,,Firefox,"r3.o.lencr.org",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: r3.o.lencr.org, IP: 146.112.55.71","18a77fc3-ef84-4323-a5db-5010692a84ed",IDS,80,"[ - ""web_browsing"" -]","146.112.55.71",Medium,"1679728367.57587","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.388 AM",,,,,"1b146ccc-eace-441c-a23b-c46af572867f_nz9I",,,,Firefox,"r3.o.lencr.org.x.cfd1dd0a017b804f3c08c1d03afb45b0ebe0.9270f75d.id.opendns.com",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: r3.o.lencr.org.x.cfd1dd0a017b804f3c08c1d03afb45b0ebe0.9270f75d.id.opendns.com, IP: 146.112.247.93","1b146ccc-eace-441c-a23b-c46af572867f",IDS,80,"[ - ""web_browsing"" -]","146.112.247.93",Medium,"1679728397.47841","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.182 AM",,"10.50.163.21","10.50.138.42",TCP,"50197736-6a9b-4e25-b004-302c309a8a4f_/qXT",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","50197736-6a9b-4e25-b004-302c309a8a4f",IDS,22,"[ - ""open_port_22"" -]","10.50.163.21",Low,"1679728287.47543","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:16.800 AM",,"10.10.194.136","10.50.138.42",TCP,"a5f25c1c-d2f4-45f1-bec3-e0b670004201_DOoU",,,,,,,,MRI,"934fb1ec-eb82-4b60-9703-d991b38c50f0","10.10.194.136",Ingenia,MOMMRI2,MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","a5f25c1c-d2f4-45f1-bec3-e0b670004201",IDS,22,"[ - ""open_port_22"" -]","10.10.194.136",Low,"1679727697.20379","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:16.293 AM",,"10.10.141.118","10.50.140.96",,"fa08ffb1-8264-488d-bd32-a0aed261f7e9_VrIk",,,,,,,,PACS,"907601e7-dc9b-4eda-84d0-9fe6d02195ef","10.10.141.118","McKesson Radiology 12.3","ALI_SCU","PACS Server",PACS,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 41045, ","fa08ffb1-8264-488d-bd32-a0aed261f7e9",IDS,41045,"[]",,Medium,"1679710685.27512","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:11.345 AM",,"10.50.132.68","10.10.138.47",TCP,"2deedf50-e28d-42f1-be66-b7eadfe38d7e_pMH2",,,,,,,,CAD,"4e0dfd4a-2059-47ad-be0d-1c1bf1faeb94","10.50.132.68",DynaCAD,"VM-PACSRAD24",CAD,CAD,"10.10.138.47","Source IP: 10.10.138.47, Port: 3389","2deedf50-e28d-42f1-be66-b7eadfe38d7e",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.68",Low,"1679710052.23151","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:07.358 AM",,"10.50.132.74","10.10.138.31",UDP,"d10b1359-eaf9-42f8-8dc1-e0ccfd89f0b0_/8tQ",,,,,,,,CAD,"61ecae95-8043-4f00-bcac-9676ebb5d7f6","10.50.132.74",DynaCAD,"VM-PACSRAD29",CAD,CAD,"10.10.138.31","Source IP: 10.10.138.31, Port: 3389","d10b1359-eaf9-42f8-8dc1-e0ccfd89f0b0",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.74",Low,"1679630482.20895","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.286 AM",,"10.50.132.73","10.10.138.73",TCP,"75173b38-3065-441f-a228-e91d663a0e0c_Ar6g",,,,,,,,CAD,"f8749de5-18b0-4e3a-9234-99da036b2b8f","10.50.132.73",DynaCAD,"VM-PACSRAD28",CAD,CAD,"10.10.138.73","Source IP: 10.10.138.73, Port: 3389","75173b38-3065-441f-a228-e91d663a0e0c",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.73",Low,"1679705922.21728","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.209 AM",,,,,"99f30ab5-7292-4cf8-9557-5e4a2734e2ff_gV4b",,,,"Internet Explorer","go2.microsoft.com",,,CAD,"f8749de5-18b0-4e3a-9234-99da036b2b8f","10.50.132.73",DynaCAD,"VM-PACSRAD28",CAD,CAD,"10.50.132.73","Browser: Internet Explorer, Host: go2.microsoft.com, IP: 23.207.81.26","99f30ab5-7292-4cf8-9557-5e4a2734e2ff",IDS,80,"[ - ""web_browsing"" -]","23.207.81.26",Medium,"1679705991.27468","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.201 AM",,"10.10.150.177","10.50.140.96",,"51572dd5-0208-451c-ae36-dca447b26d45_MNdq",,,,,,,,"REGULAR_PRINTER","36dfca1c-f372-47c8-b810-74c3832c1211","10.10.150.177","ECOSYS M3655idn","ECOSYS M3655idn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 35610, ","51572dd5-0208-451c-ae36-dca447b26d45",IDS,35610,"[]",,Medium,"1679705835.36348","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.585 AM",,"10.10.141.104","10.10.186.85",TCP,"ec878da6-781e-4523-a332-d0256f5fe52c_paUQ",,,,,,,,LINAC,"942b3c05-0171-4974-b79a-2493ac81645d","10.10.141.104","Pinnacle3 Radiotherapy Treatment Planning System","MGHPINNACLE_SCP",LINAC,LINAC,"10.10.186.85","Source IP: 10.10.186.85, Port: 22","ec878da6-781e-4523-a332-d0256f5fe52c",IDS,22,"[ - ""open_port_22"" -]","10.10.141.104",Low,"1679702127.24931","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.389 AM",,,,,"11ae40ac-1535-46ba-b40f-461cf6283321_CgBE",,,,Chrome,"apps.identrust.com",,,CAD,"67c39118-35fe-410a-a1ba-0127359497f4","10.50.163.62",DynaCAD,"MGH-RADWS04",CAD,CAD,"10.50.163.62","Browser: Chrome, Host: apps.identrust.com, IP: 23.197.50.48","11ae40ac-1535-46ba-b40f-461cf6283321",IDS,80,"[ - ""web_browsing"" -]","23.197.50.48",Medium,"1679700811.24533","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.218 AM",,"10.50.154.245","10.50.140.96",,"2cc414ec-1353-4c33-9c74-d2a48eb96862_eYXE",,,,,,,,"REGULAR_PRINTER","74db2a2a-8ec0-4050-8e35-32dff3038da2","10.50.154.245","ECOSYS P3155dn","ECOSYS P3155dn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33592, ","2cc414ec-1353-4c33-9c74-d2a48eb96862",IDS,33592,"[]",,Medium,"1679699417.24389","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.215 AM",,"10.50.154.241","10.50.140.96",,"e147246a-56f1-45f4-91d2-16db7ba66f51_Zzmc",,,,,,,,"REGULAR_PRINTER","1fd272ad-a4f4-4a11-9d66-02efc4e29074","10.50.154.241","ECOSYS M6535cidn","ECOSYS M6535cidn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 37149, ","e147246a-56f1-45f4-91d2-16db7ba66f51",IDS,37149,"[]",,Medium,"1679699352.41935","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.204 AM",,"10.50.154.242","10.50.140.96",,"c67de4d6-b41c-4f8c-a5cb-44817ba6e363_TOYp",,,,,,,,"REGULAR_PRINTER","b7bc65ad-8169-4a04-b482-f71f02156083","10.50.154.242","ECOSYS M3655idn","ECOSYS M3655idn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 37648, ","c67de4d6-b41c-4f8c-a5cb-44817ba6e363",IDS,37648,"[]",,Medium,"1679699374.61824","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.190 AM",,"10.50.154.240","10.50.140.96",,"46cef887-fdd9-4d33-bfe0-c37f6aaa348e_6VOq",,,,,,,,"REGULAR_PRINTER","d97f92b9-f5c3-449f-8d67-6b367978b487","10.50.154.240","ECOSYS M3655idn","ECOSYS M3655idn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 44471, ","46cef887-fdd9-4d33-bfe0-c37f6aaa348e",IDS,44471,"[]",,Medium,"1679699324.44219","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.089 AM",,"10.50.154.237","10.50.140.96",,"e1cdbe31-e823-4027-a47a-c11654ac41b7_2cRh",,,,,,,,"LABEL_PRINTER","51f2bbd2-6e65-4e9e-b835-950a34fe3408","10.50.154.237",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 40517, ","e1cdbe31-e823-4027-a47a-c11654ac41b7",IDS,40517,"[]",,Medium,"1679699151.32322","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.996 AM",,"10.50.154.236","10.50.140.96",,"ae43914e-9943-4302-b514-0fcca47845a5_A3VA",,,,,,,,"LABEL_PRINTER","b90db675-fa5f-46ce-a4d3-ce4b38624faf","10.50.154.236",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 32188, ","ae43914e-9943-4302-b514-0fcca47845a5",IDS,32188,"[]",,Medium,"1679699021.57094","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.916 AM",,,,,"ce991500-a119-45d4-b587-90a067f7d313_CycD",,,,Firefox,"r3.o.lencr.org",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: r3.o.lencr.org, IP: 146.112.55.83","ce991500-a119-45d4-b587-90a067f7d313",IDS,80,"[ - ""web_browsing"" -]","146.112.55.83",Medium,"1679697859.66626","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.905 AM",,,,,"a3c16942-1c48-45fd-bd5a-a58624360ccf_2bF/",,,,Firefox,"ciscobinary.openh264.org",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: ciscobinary.openh264.org, IP: 23.197.50.91","a3c16942-1c48-45fd-bd5a-a58624360ccf",IDS,80,"[ - ""web_browsing"" -]","23.197.50.91",Medium,"1679697879.95064","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.903 AM",,,,,"3c7c9920-89de-4b8e-92c3-5262c82f559f_c3Lw",,,,Firefox,"ocsp.digicert.com",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: ocsp.digicert.com, IP: 192.229.211.108","3c7c9920-89de-4b8e-92c3-5262c82f559f",IDS,80,"[ - ""web_browsing"" -]","192.229.211.108",Medium,"1679697879.81769","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.493 AM",,"10.50.153.238","10.50.140.96",,"4adf5570-308b-44d6-b0d6-a417b797770a_cTZb",,,,,,,,"LABEL_PRINTER","6a925061-e913-4726-a6a6-89411c9de5e8","10.50.153.238",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 30239, ","4adf5570-308b-44d6-b0d6-a417b797770a",IDS,30239,"[]",,Medium,"1679696743.23819","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:06.290 AM",,"10.50.150.28","10.50.140.96",,"f5642e9f-f210-45cb-b1b8-6b1b6a131a45_lAKP",,,,,,,,"BLOOD_GAS_ANALYZER","f10213f1-4707-4695-82f7-953894a68f2b","10.50.150.28","i-STAT 1 Handheld Blood Analyzer",,"Blood Gas Analyzer","BLOOD_GAS_ANALYZER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 43344, ","f5642e9f-f210-45cb-b1b8-6b1b6a131a45",IDS,43344,"[]",,Medium,"1679692766.18405","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:04.278 AM",,"10.10.142.51","10.50.149.22",UDP,"674db16c-595b-408a-ae61-93620cc8e919_iTfo",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.22","Source IP: 10.50.149.22, Port: 3389","674db16c-595b-408a-ae61-93620cc8e919",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.10.142.51",Low,"1679692427.22069","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.828 AM",,"10.50.149.33","10.50.140.96",,"97e4339b-b8f3-4010-add5-bc94dea96cc6_zf1S",,,,,,,,CAD,"44d3a8ec-2d41-43ac-953f-d1489c5d5ca3","10.50.149.33",DynaCAD,"W-BUS-PACS-29",CAD,CAD,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33737, ","97e4339b-b8f3-4010-add5-bc94dea96cc6",IDS,33737,"[]",,Medium,"1679691221.60889","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.823 AM",,"10.50.149.27","10.50.140.96",,"a68b85f6-8c72-43bf-93e7-fa8120f7bf5b_2UqZ",,,,,,,,CAD,"123d94ae-ec50-4be0-a686-1a38b83944e8","10.50.149.27",DynaCAD,MG10187,CAD,CAD,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33737, ","a68b85f6-8c72-43bf-93e7-fa8120f7bf5b",IDS,33737,"[]",,Medium,"1679691077.52972","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.399 AM",,"10.50.148.41","10.50.140.96",,"e5d8d1ff-962c-4c52-a5ec-6f1b2df88b01_9J3W",,,,,,,,GLUCOMETER,"e5da1c66-0235-4ee6-b01d-3aa9b58efdf5","10.50.148.41",StatStrip,"MAIN ED2",Glucometer,GLUCOMETER,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 44735, ","e5d8d1ff-962c-4c52-a5ec-6f1b2df88b01",IDS,44735,"[]",,Medium,"1679689869.92297","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.382 AM",,"10.10.130.132","10.10.240.43",TCP,"1200da14-dd47-480a-ae4f-dce56812e4ce_UkqO",,,,,,,,SWITCH,"c9d75de3-fa51-4837-bd2f-706efdd3dc36","10.10.130.132","Cisco Catalyst Switch","100BDRAKES-9200-48-SW1.maringeneral.org",Switch,SWITCH,"10.10.240.43","Source IP: 10.10.240.43, Port: 22","1200da14-dd47-480a-ae4f-dce56812e4ce",IDS,22,"[ - ""open_port_22"" -]","10.10.130.132",Low,"1679617837.23035","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.096 AM",,"10.50.148.245","10.50.140.96",,"033153b9-4ee1-4667-a53d-fad097a71290_Ho3e",,,,,,,,"LABEL_PRINTER","972f2674-9bbf-4d27-8f35-b5e2fecf15a3","10.50.148.245",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 36598, ","033153b9-4ee1-4667-a53d-fad097a71290",IDS,36598,"[]",,Medium,"1679689234.67368","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:50.438 AM",,"10.50.146.230","10.50.140.96",,"a60c894c-d1f5-403c-9f90-6ba1dd524480_Uf+d",,,,,,,,"REGULAR_PRINTER","9e5ce265-a299-4ac8-b9b4-50bdee251607","10.50.146.230","ZD421-300dpi ZPL",ZD421,Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33857, ","a60c894c-d1f5-403c-9f90-6ba1dd524480",IDS,33857,"[]",,Medium,"1679687880.61051","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.191 AM",,"10.50.149.27","10.10.138.201",TCP,"42473c32-281d-4b19-af1f-06f39dd29927_YXgh",,,,,,,,CAD,"123d94ae-ec50-4be0-a686-1a38b83944e8","10.50.149.27",DynaCAD,MG10187,CAD,CAD,"10.10.138.201","Source IP: 10.10.138.201, Port: 3389","42473c32-281d-4b19-af1f-06f39dd29927",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.149.27",Low,"1679687967.23947","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.981 AM",,"10.10.140.86","10.10.138.201",TCP,"1ee97d9a-c149-4abf-8327-283ab568be11_i32M",,,,,,,,PACS,"00a5faba-bddf-440a-9515-a407584d5a59","10.10.140.86",Compass,COMPASS,"PACS Server",PACS,"10.10.138.201","Source IP: 10.10.138.201, Port: 3389","1ee97d9a-c149-4abf-8327-283ab568be11",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.10.140.86",Low,"1679686707.24102","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:30.479 AM",,"10.50.132.72","10.50.140.96",,"ff1ba3ca-d7d4-4e0b-b341-340b3d58bf74_OKiu",,,,,,,,CAD,"4a624087-ba30-4da1-ac5b-c9f06a1b2656","10.50.132.72",DynaCAD,"VM-PACSRAD27",CAD,CAD,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 35532, ","ff1ba3ca-d7d4-4e0b-b341-340b3d58bf74",IDS,35532,"[]",,Medium,"1679682957.05549","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.993 AM",,"10.50.132.37","10.50.118.41",UDP,"d9c7f295-636e-476a-8367-8cb1c5b46866_qMq3",,,,,,,,CAD,"0947550e-40e1-4f68-8642-ed279eb0db8a","10.50.132.37",DynaCAD,"VM-PACSRAD16",CAD,CAD,"10.50.118.41","Source IP: 10.50.118.41, Port: 3389","d9c7f295-636e-476a-8367-8cb1c5b46866",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.37",Low,"1679682347.24274","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.796 AM",,"10.10.142.53","10.50.149.33",TCP,"ef427e46-213b-40c9-80a8-58729349d019_aBqv",,,,,,,,"DICOM_WORKSTATION","42a5a4a2-dea3-4c20-8fbe-4fd1d7432358","10.10.142.53","DCMTK System","CARD_SERVER","DICOM Workstation","DICOM_WORKSTATION","10.50.149.33","Source IP: 10.50.149.33, Port: 3389","ef427e46-213b-40c9-80a8-58729349d019",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.10.142.53",Low,"1679613987.4792","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.122 AM",,"10.50.132.37","10.10.138.75",TCP,"7e85045c-5f4f-4aae-a646-a320edda7148_+3bN",,,,,,,,CAD,"0947550e-40e1-4f68-8642-ed279eb0db8a","10.50.132.37",DynaCAD,"VM-PACSRAD16",CAD,CAD,"10.10.138.75","Source IP: 10.10.138.75, Port: 3389","7e85045c-5f4f-4aae-a646-a320edda7148",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.37",Low,"1679681467.24967","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.119 AM",,"10.50.163.21","10.50.138.42",TCP,"5cdda412-d2fa-4260-81d3-ea4baf6e75d1_+3bN",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","5cdda412-d2fa-4260-81d3-ea4baf6e75d1",IDS,22,"[ - ""open_port_22"" -]","10.50.163.21",Low,"1679681467.24967","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.916 AM",,"10.10.140.86","10.50.149.27",UDP,"47c706e2-4e1a-4fc8-9c5a-59cd9814ec55_wp5B",,,,,,,,PACS,"00a5faba-bddf-440a-9515-a407584d5a59","10.10.140.86",Compass,COMPASS,"PACS Server",PACS,"10.50.149.27","Source IP: 10.50.149.27, Port: 3389","47c706e2-4e1a-4fc8-9c5a-59cd9814ec55",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.10.140.86",Low,"1679612992.49047","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.686 AM",,"10.10.162.100","10.10.240.43",TCP,"c0c58817-8675-4b6c-b6d1-9647051e6e71_buYn",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.240.43","Source IP: 10.10.240.43, Port: 22","c0c58817-8675-4b6c-b6d1-9647051e6e71",IDS,22,"[ - ""open_port_22"" -]","10.10.162.100",Low,"1679612917.27554","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.415 AM",,"10.10.161.178","192.68.49.129",TCP,"685cb242-2411-4f33-99f0-b7d3563af48b_0r22",,,,,,,,FLUOROSCOPY,"ea31cee8-1642-4029-be02-d47ee6d75dab","10.10.161.178","Innova IGS",MGHDL01,Fluoroscopy,FLUOROSCOPY,"192.68.49.129","Source IP: 192.68.49.129, Port: 22","685cb242-2411-4f33-99f0-b7d3563af48b",IDS,22,"[ - ""open_port_22"" -]","10.10.161.178",Low,"1679679072.22247","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.381 AM",,"10.50.132.37","10.10.138.204",TCP,"ec6e7628-69d1-4ba8-b0b6-f3c0abb35183_Mz5d",,,,,,,,CAD,"0947550e-40e1-4f68-8642-ed279eb0db8a","10.50.132.37",DynaCAD,"VM-PACSRAD16",CAD,CAD,"10.10.138.204","Source IP: 10.10.138.204, Port: 3389","ec6e7628-69d1-4ba8-b0b6-f3c0abb35183",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.37",Low,"1679678907.22702","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:05.186 AM",,"10.10.194.136","10.50.138.42",TCP,"23bace5b-be0a-46ee-b1e6-549a4e4038d8_luvK",,,,,,,,MRI,"934fb1ec-eb82-4b60-9703-d991b38c50f0","10.10.194.136",Ingenia,MOMMRI2,MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","23bace5b-be0a-46ee-b1e6-549a4e4038d8",IDS,22,"[ - ""open_port_22"" -]","10.10.194.136",Low,"1679677327.22111","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:05.126 AM",,"10.50.132.68","10.10.138.208",TCP,"c26b4edf-e552-4055-a228-12adc4390739_ZY5X",,,,,,,,CAD,"4e0dfd4a-2059-47ad-be0d-1c1bf1faeb94","10.50.132.68",DynaCAD,"VM-PACSRAD24",CAD,CAD,"10.10.138.208","Source IP: 10.10.138.208, Port: 3389","c26b4edf-e552-4055-a228-12adc4390739",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.68",Low,"1679677257.22394","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:04.899 AM",,,,,"6b4e9a49-163e-4c78-a76e-974d1c15f820_AuQj",,,,Chrome,"faoj.org",,,CAD,"d4debd6b-6b28-4bcb-8523-d8759090a757","10.10.194.131",DynaCAD,"MGH-MAMWS02",CAD,CAD,"10.10.194.131","Browser: Chrome, Host: faoj.org, IP: 35.209.93.119","6b4e9a49-163e-4c78-a76e-974d1c15f820",IDS,80,"[ - ""web_browsing"" -]","35.209.93.119",Medium,"1679676483.29242","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:04.792 AM",,"10.20.159.2","10.10.141.95",TCP,"582bc117-1be4-4a40-874a-c7263a6114ff_MbjT",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","582bc117-1be4-4a40-874a-c7263a6114ff",IDS,22,"[ - ""open_port_22"" -]","10.20.159.2",Low,"1679676082.20729","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:04.789 AM",,"10.20.47.3","10.10.141.95",TCP,"b115bdf5-155e-4054-a397-a3ff5b86e741_MbjT",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","b115bdf5-155e-4054-a397-a3ff5b86e741",IDS,22,"[ - ""open_port_22"" -]","10.20.47.3",Low,"1679676082.20729","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.115 AM",,"10.50.149.27","10.10.138.35",TCP,"85819e71-b855-41ee-82fb-65d5de7f9981_+OWv",,,,,,,,CAD,"123d94ae-ec50-4be0-a686-1a38b83944e8","10.50.149.27",DynaCAD,MG10187,CAD,CAD,"10.10.138.35","Source IP: 10.10.138.35, Port: 3389","85819e71-b855-41ee-82fb-65d5de7f9981",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.149.27",Low,"1679610452.2332","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:55.890 AM",,,,,"a48d7d58-3103-4f66-8444-9bb473224552_o8j1",,,,Chrome,"www.google.com",,,CAD,"1433419d-54ed-4ac9-a55c-b78b480b7caf","10.50.163.37",DynaCAD,"MGH-MAMWS03",CAD,CAD,"10.50.163.37","Browser: Chrome, Host: www.google.com, IP: 142.250.189.228","a48d7d58-3103-4f66-8444-9bb473224552",IDS,80,"[ - ""web_browsing"" -]","142.250.189.228",Medium,"1679672514.73143","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:55.884 AM",,"10.19.141.2","10.10.96.151",TCP,"0ec95d68-9205-45f5-bc34-e7d5f9bab745_IxfU",,,,,,,,SWITCH,"47895e5b-faa5-4a83-af4a-81c8373e6abb","10.19.141.2","Cisco Catalyst Switch","4000Civic-210-192-SW.maringeneral.org",Switch,SWITCH,"10.10.96.151","Source IP: 10.10.96.151, Port: 22","0ec95d68-9205-45f5-bc34-e7d5f9bab745",IDS,22,"[ - ""open_port_22"" -]","10.19.141.2",Low,"1679672672.24171","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:52.797 AM",,"10.50.163.76","10.50.149.22",TCP,"e59c2016-7655-4e1e-9b5b-491738739621_KWoN",,,,,,,,CAD,"8251e225-9582-4e20-91c9-7dad4929f26d","10.50.163.76",DynaCAD,"MGH-RADTESTBLD1",CAD,CAD,"10.50.149.22","Source IP: 10.50.149.22, Port: 22","e59c2016-7655-4e1e-9b5b-491738739621",IDS,22,"[ - ""open_port_22"" -]","10.50.163.76",Low,"1679672472.4849","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.406 AM",,"10.10.178.242","10.10.141.95",TCP,"26991cca-4aab-448d-a555-6011c6d03ee8_QnUR",,,,,,,,SWITCH,"00365818-9730-4f67-af78-d2b4242bf75c","10.10.178.242","Cisco Catalyst Switch","1350-SEliseo-Ste220-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","26991cca-4aab-448d-a555-6011c6d03ee8",IDS,22,"[ - ""open_port_22"" -]","10.10.178.242",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.397 AM",,"10.20.159.2","10.10.141.95",TCP,"31f6ddc8-41a7-4716-855f-f798413e9acb_QnUR",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","31f6ddc8-41a7-4716-855f-f798413e9acb",IDS,22,"[ - ""open_port_22"" -]","10.20.159.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.387 AM",,"10.20.175.2","10.10.141.95",TCP,"f366cf17-70a5-4f40-815d-a0fa98d5cf94_QnUR",,,,,,,,SWITCH,"8fad271e-115d-43f8-982f-ce1687063594","10.20.175.2","Cisco Catalyst Switch","PRIMA-100DRAKES-3850-STACK.maringeneral.",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f366cf17-70a5-4f40-815d-a0fa98d5cf94",IDS,22,"[ - ""open_port_22"" -]","10.20.175.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.385 AM",,"10.20.79.5","10.10.141.95",TCP,"3b924469-ff6b-4c0b-8f7b-b5ebd841c57c_QnUR",,,,,,,,SWITCH,"8df37589-717b-49a5-979e-ec40ac93c229","10.20.79.5","Cisco Catalyst Switch","651FStSonoma-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3b924469-ff6b-4c0b-8f7b-b5ebd841c57c",IDS,22,"[ - ""open_port_22"" -]","10.20.79.5",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.325 AM",,"10.10.20.100","10.10.141.95",TCP,"2a10b5eb-ea31-47b6-b612-441bda7660c4_QnUR",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2a10b5eb-ea31-47b6-b612-441bda7660c4",IDS,22,"[ - ""open_port_22"" -]","10.10.20.100",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.323 AM",,"10.20.223.2","10.10.141.95",TCP,"eddad2ae-be38-4525-b450-53d118ac33bf_QnUR",,,,,,,,SWITCH,"de343319-37ea-44ca-9586-073e119a4726","10.20.223.2","Cisco Catalyst Switch","PRIMA-1496Professional-c3850-48-SW.marin",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","eddad2ae-be38-4525-b450-53d118ac33bf",IDS,22,"[ - ""open_port_22"" -]","10.20.223.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.320 AM",,"10.20.207.2","10.10.141.95",TCP,"0f377afc-5fed-4da3-aee5-2509d4f1af52_QnUR",,,,,,,,SWITCH,"0b4e943b-9635-4952-a6be-6ebcb969a459","10.20.207.2","Cisco Catalyst Switch","PRIMA-347Andrieux-c3850-48-SW.maringener",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0f377afc-5fed-4da3-aee5-2509d4f1af52",IDS,22,"[ - ""open_port_22"" -]","10.20.207.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.316 AM",,"10.10.145.15","10.10.141.95",TCP,"de347cd0-399e-4975-a1f6-25c6495f495b_QnUR",,,,,,,,SWITCH,"8a336c51-448e-4b38-9ded-dda2b03fd1ba","10.10.145.15","Catalyst 3850-48P","3West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","de347cd0-399e-4975-a1f6-25c6495f495b",IDS,22,"[ - ""open_port_22"" -]","10.10.145.15",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.310 AM",,"10.20.62.5","10.10.141.95",TCP,"d0c9da07-c2e6-49ec-a1a5-01e61167da85_QnUR",,,,,,,,SWITCH,"5a9c7ddb-8484-4e3e-a560-85eb3f884cb3","10.20.62.5","Cisco Catalyst Switch","900SEliseo201-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d0c9da07-c2e6-49ec-a1a5-01e61167da85",IDS,22,"[ - ""open_port_22"" -]","10.20.62.5",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.298 AM",,"10.10.145.87","10.10.141.95",TCP,"b09ad87a-3dad-4b70-8140-153e27c538f6_QnUR",,,,,,,,SWITCH,"5bdb5c80-de6b-4609-954b-edbbb0ec300c","10.10.145.87","Catalyst 2960S","MIS-C2960S-IMG-SW-2.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","b09ad87a-3dad-4b70-8140-153e27c538f6",IDS,22,"[ - ""open_port_22"" -]","10.10.145.87",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.295 AM",,"10.10.204.2","10.10.141.95",TCP,"500a4f0f-0f23-4b03-9366-b3beb14ffbc6_QnUR",,,,,,,,SWITCH,"9cc0363a-1448-4b03-877b-c743e4edbc11","10.10.204.2","Cisco Catalyst Switch","MH-Phlps-6-A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","500a4f0f-0f23-4b03-9366-b3beb14ffbc6",IDS,22,"[ - ""open_port_22"" -]","10.10.204.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.289 AM",,"10.20.47.3","10.10.141.95",TCP,"f499dd7e-3d8b-4a93-98fb-34b259817325_QnUR",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f499dd7e-3d8b-4a93-98fb-34b259817325",IDS,22,"[ - ""open_port_22"" -]","10.20.47.3",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.285 AM",,"10.10.162.150","10.10.141.95",TCP,"105d2241-d8e6-4407-b439-ae0cd7813d66_QnUR",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","105d2241-d8e6-4407-b439-ae0cd7813d66",IDS,22,"[ - ""open_port_22"" -]","10.10.162.150",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.226 AM",,"10.10.176.242","10.10.141.95",TCP,"411e66c1-3a21-4e33-9fc4-19e8bd1ea1fa_QnUR",,,,,,,,SWITCH,"50310ff2-90c7-46d0-9e4c-932d65b2c23d","10.10.176.242","Cisco Catalyst Switch","1350-SEliseo-Ste120-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","411e66c1-3a21-4e33-9fc4-19e8bd1ea1fa",IDS,22,"[ - ""open_port_22"" -]","10.10.176.242",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.224 AM",,"10.20.127.2","10.10.141.95",TCP,"f4682b29-b98f-4fde-a758-541c7519b5c5_QnUR",,,,,,,,SWITCH,"33145016-7192-4675-9a7c-ca39cc128f9d","10.20.127.2","Cisco Catalyst Switch","1350-SEliseo-Ste300-48",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f4682b29-b98f-4fde-a758-541c7519b5c5",IDS,22,"[ - ""open_port_22"" -]","10.20.127.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.220 AM",,"10.10.204.12","10.10.141.95",TCP,"d2ac1159-1a9c-4bf3-b631-ccf39b64e692_QnUR",,,,,,,,SWITCH,"690a3cc5-7b90-4bf7-b2b4-4a99883c680f","10.10.204.12","Cisco Catalyst Switch","MH-Phlps-3101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d2ac1159-1a9c-4bf3-b631-ccf39b64e692",IDS,22,"[ - ""open_port_22"" -]","10.10.204.12",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.217 AM",,"10.20.47.2","10.10.141.95",TCP,"612cb957-3d60-47bd-8359-068c24b3636c_QnUR",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","612cb957-3d60-47bd-8359-068c24b3636c",IDS,22,"[ - ""open_port_22"" -]","10.20.47.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.204 AM",,"10.10.232.242","10.10.141.95",TCP,"326a35b3-d5a9-4ef2-935b-c9943693d6ee_QnUR",,,,,,,,SWITCH,"d35ffa2a-aed1-4e33-a316-59c02553750d","10.10.232.242","Cisco Catalyst Switch","75Rowl140-c3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","326a35b3-d5a9-4ef2-935b-c9943693d6ee",IDS,22,"[ - ""open_port_22"" -]","10.10.232.242",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.201 AM",,"10.10.145.16","10.10.141.95",TCP,"e4372031-c157-4287-9f2e-2d758d02f60a_QnUR",,,,,,,,SWITCH,"2e9e4ef4-57d3-4ac9-8a40-1158265b2a71","10.10.145.16","Cisco Catalyst Switch","4West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e4372031-c157-4287-9f2e-2d758d02f60a",IDS,22,"[ - ""open_port_22"" -]","10.10.145.16",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.144 AM",,"10.20.109.2","10.10.141.95",TCP,"dae72319-7b48-4900-aef7-a36257d42b84_QnUR",,,,,,,,SWITCH,"766a3b0a-8973-449c-8468-3409cf2a48e4","10.20.109.2","Cisco Catalyst Switch","4000Civic-205-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dae72319-7b48-4900-aef7-a36257d42b84",IDS,22,"[ - ""open_port_22"" -]","10.20.109.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.140 AM",,"10.10.204.11","10.10.141.95",TCP,"4dbf5c19-7359-4d9f-b6e9-45b2ea638702_QnUR",,,,,,,,SWITCH,"99444b64-0c80-4ae5-aa97-e6a018d58acb","10.10.204.11","Catalyst 2960X-24PS-L","WS-C2960X-24PS-L",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4dbf5c19-7359-4d9f-b6e9-45b2ea638702",IDS,22,"[ - ""open_port_22"" -]","10.10.204.11",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.133 AM",,"10.10.204.16","10.10.141.95",TCP,"6089110f-d26d-49e7-a133-f928b045699d_QnUR",,,,,,,,SWITCH,"ac4a0e21-27b4-490d-8dde-95eb3a147f55","10.10.204.16","Catalyst 2960X-24PS-L","WS-C2960X-24PS-L",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6089110f-d26d-49e7-a133-f928b045699d",IDS,22,"[ - ""open_port_22"" -]","10.10.204.16",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.293 AM",,"10.50.145.5","10.10.141.95",TCP,"5e11767e-5ecd-4810-9c28-cf4ccfe9e37e_fAv1",,,,,,,,SWITCH,"8a732210-2406-4ef0-a9a2-ae5d23cd8d98","10.50.145.5","Cisco Catalyst Switch","MH-3850-B561-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5e11767e-5ecd-4810-9c28-cf4ccfe9e37e",IDS,22,"[ - ""open_port_22"" -]","10.50.145.5",Low,"1679671437.4847","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.120 AM",,"10.10.145.5","10.10.141.95",TCP,"c4d34be6-5862-4602-af89-c8b254459fdd_TPuq",,,,,,,,SWITCH,"b188b718-611b-44dd-9de4-b220156dbe65","10.10.145.5","Catalyst 2960S","MGH-Engineering-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c4d34be6-5862-4602-af89-c8b254459fdd",IDS,22,"[ - ""open_port_22"" -]","10.10.145.5",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.099 AM",,"10.10.145.92","10.10.141.95",TCP,"6b7f5a2b-360c-4c20-9cdd-8ed9a0eef58c_TPuq",,,,,,,,SWITCH,"ede79008-7959-4b40-80f5-4e8d30d99303","10.10.145.92","Catalyst 2960S","RMT2960-48-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6b7f5a2b-360c-4c20-9cdd-8ed9a0eef58c",IDS,22,"[ - ""open_port_22"" -]","10.10.145.92",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.095 AM",,"10.10.185.2","10.10.141.95",TCP,"674c67b4-4c84-4752-97bf-746db675e67d_TPuq",,,,,,,,SWITCH,"8c31c8a3-cc71-4506-9656-d6e947c78ee3","10.10.185.2","Cisco Catalyst Switch","1350-SEliseo-C3850-144.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","674c67b4-4c84-4752-97bf-746db675e67d",IDS,22,"[ - ""open_port_22"" -]","10.10.185.2",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.092 AM",,"10.10.145.96","10.10.141.95",TCP,"8aa324bb-01b0-4ec8-9319-10ba5d189c2d_TPuq",,,,,,,,SWITCH,"ab5d1d34-dea3-459d-b30b-adcfaf6f380c","10.10.145.96","Catalyst 2960S","SPC2960-24-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8aa324bb-01b0-4ec8-9319-10ba5d189c2d",IDS,22,"[ - ""open_port_22"" -]","10.10.145.96",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.082 AM",,"10.10.162.100","10.10.141.95",TCP,"29fe3866-8064-46d5-9009-0b26bb6aade9_re5x",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","29fe3866-8064-46d5-9009-0b26bb6aade9",IDS,22,"[ - ""open_port_22"" -]","10.10.162.100",Low,"1679671332.22166","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.981 AM",,"10.20.30.104","10.50.140.96",,"b12ef1c7-d30b-4468-a94d-689f9a73cfc5_fMFm",,,,,,,,"REGULAR_PRINTER","171efa74-9922-4538-a5a4-e2143c99a027","10.20.30.104",,,Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 30146, ","b12ef1c7-d30b-4468-a94d-689f9a73cfc5",IDS,30146,"[]",,Medium,"1679669985.82798","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.812 AM",,"10.50.163.21","10.50.138.42",TCP,"7daff0ef-aa42-45fc-acd6-fc87bed34e0c_rdLt",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","7daff0ef-aa42-45fc-acd6-fc87bed34e0c",IDS,22,"[ - ""open_port_22"" -]","10.50.163.21",Low,"1679670677.48157","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.490 AM",,"10.10.195.140","10.10.141.95",TCP,"4775de42-25ab-48c8-bac3-ddf61fe05a96_yDha",,,,,,,,SWITCH,"715a7bff-b86b-40c1-b290-a1d910333551","10.10.195.140","Catalyst 2960S","1100Eliseo2960-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4775de42-25ab-48c8-bac3-ddf61fe05a96",IDS,22,"[ - ""open_port_22"" -]","10.10.195.140",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.487 AM",,"10.20.21.194","10.10.141.95",TCP,"12ec4cb2-a8d3-4d11-94f3-b49c49f9499d_yDha",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","12ec4cb2-a8d3-4d11-94f3-b49c49f9499d",IDS,22,"[ - ""open_port_22"" -]","10.20.21.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.484 AM",,"10.20.10.194","10.10.141.95",TCP,"1295ceb8-a3df-48dc-9084-8f366d0609ae_yDha",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1295ceb8-a3df-48dc-9084-8f366d0609ae",IDS,22,"[ - ""open_port_22"" -]","10.20.10.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.481 AM",,"10.10.228.137","10.10.141.95",TCP,"a6a160b5-94c2-4e0f-985a-628c95f4f36d_yDha",,,,,,,,SWITCH,"e396e00b-66bc-4c90-9e22-8f219807c304","10.10.228.137","Cisco Catalyst Switch","75Rowl101-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a6a160b5-94c2-4e0f-985a-628c95f4f36d",IDS,22,"[ - ""open_port_22"" -]","10.10.228.137",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.412 AM",,"10.10.145.25","10.10.141.95",TCP,"5f7b88d1-1ede-42c3-9b61-268b10bf0342_yDha",,,,,,,,SWITCH,"0337c96d-39f9-4c00-876f-06ac402fa0a3","10.10.145.25","Cisco Catalyst Switch","2Central-C3850-96-SW03.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5f7b88d1-1ede-42c3-9b61-268b10bf0342",IDS,22,"[ - ""open_port_22"" -]","10.10.145.25",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.406 AM",,"10.10.194.197","10.10.141.95",TCP,"5998f2e2-9835-4c8c-9484-44e17b89f42d_yDha",,,,,,,,SWITCH,"6baf1025-8db2-4587-9f69-6929859d7c8e","10.10.194.197","Cisco Catalyst Switch","1260SEliseo-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5998f2e2-9835-4c8c-9484-44e17b89f42d",IDS,22,"[ - ""open_port_22"" -]","10.10.194.197",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.402 AM",,"10.10.145.11","10.10.141.95",TCP,"946499f0-10e8-4289-9278-38d2dab67b7d_yDha",,,,,,,,SWITCH,"3e973541-e49d-4ae5-88d7-223f0a8933da","10.10.145.11","Cisco Catalyst Switch","2West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","946499f0-10e8-4289-9278-38d2dab67b7d",IDS,22,"[ - ""open_port_22"" -]","10.10.145.11",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.396 AM",,"10.20.22.194","10.10.141.95",TCP,"8225dc82-1cb0-4f73-88ac-576cdaf89362_yDha",,,,,,,,SWITCH,"59c8bdf1-0863-428a-9898-d5827f1c9a42","10.20.22.194","Cisco Catalyst Switch","1341Eliseo-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8225dc82-1cb0-4f73-88ac-576cdaf89362",IDS,22,"[ - ""open_port_22"" -]","10.20.22.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.392 AM",,"10.10.145.26","10.10.141.95",TCP,"59179157-fb6e-4060-97e2-3a45c0f2aff6_yDha",,,,,,,,SWITCH,"63f72b58-a0f8-4a58-a02f-7b26e9fd4b82","10.10.145.26","Cisco Catalyst Switch","MHB-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","59179157-fb6e-4060-97e2-3a45c0f2aff6",IDS,22,"[ - ""open_port_22"" -]","10.10.145.26",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.383 AM",,"10.20.30.242","10.10.141.95",TCP,"0623acdb-1f85-4eb3-824c-e462d69d9db0_yDha",,,,,,,,SWITCH,"716f2c3f-a88c-4c91-aab5-b9aa32edf877","10.20.30.242","Cisco Catalyst Switch","75Rowl250-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0623acdb-1f85-4eb3-824c-e462d69d9db0",IDS,22,"[ - ""open_port_22"" -]","10.20.30.242",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.319 AM",,"10.10.145.8","10.10.141.95",TCP,"fe2be874-20ba-44e8-b548-6364beeff151_yDha",,,,,,,,SWITCH,"785abf71-059b-4d14-bedc-485bf82e85ff","10.10.145.8","Cisco Catalyst Switch","1Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fe2be874-20ba-44e8-b548-6364beeff151",IDS,22,"[ - ""open_port_22"" -]","10.10.145.8",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.316 AM",,"10.10.236.136","10.10.141.95",TCP,"0544aaaa-c96f-4f3a-9a95-ebe7ca732840_yDha",,,,,,,,SWITCH,"c24cdf3c-7168-4cbb-8a9e-142c8afa8ed1","10.10.236.136","Catalyst 2960S","Civic-C2960-48-SW02",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0544aaaa-c96f-4f3a-9a95-ebe7ca732840",IDS,22,"[ - ""open_port_22"" -]","10.10.236.136",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.313 AM",,"10.19.88.2","10.10.141.95",TCP,"94f091d9-51f5-4f15-b64f-dc0a11d2f57f_yDha",,,,,,,,SWITCH,"393404cc-a097-4a18-8aa4-1f17f2128ea5","10.19.88.2","Cisco Catalyst Switch","75Rowl220-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","94f091d9-51f5-4f15-b64f-dc0a11d2f57f",IDS,22,"[ - ""open_port_22"" -]","10.19.88.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.306 AM",,"10.10.145.85","10.10.141.95",TCP,"f46e1cd6-064b-48a2-a788-43491483f87a_yDha",,,,,,,,SWITCH,"46079d19-5c75-4342-a79e-012112c3124c","10.10.145.85","Cisco Catalyst Switch","MIS-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f46e1cd6-064b-48a2-a788-43491483f87a",IDS,22,"[ - ""open_port_22"" -]","10.10.145.85",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.304 AM",,"10.20.143.2","10.10.141.95",TCP,"ede14116-b6d4-442c-854e-e2cb413948bd_yDha",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ede14116-b6d4-442c-854e-e2cb413948bd",IDS,22,"[ - ""open_port_22"" -]","10.20.143.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.301 AM",,"10.10.204.15","10.10.141.95",TCP,"dc89f485-2251-4dfa-afd7-5ce7a387efb6_yDha",,,,,,,,SWITCH,"669bc5d7-d785-40a5-a8f6-dd6bb0099ef1","10.10.204.15","Cisco Catalyst Switch","MH-Phlps-2101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dc89f485-2251-4dfa-afd7-5ce7a387efb6",IDS,22,"[ - ""open_port_22"" -]","10.10.204.15",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.294 AM",,"10.10.145.72","10.10.141.95",TCP,"ba80856a-f81d-485f-a262-cd3bd7666fb7_yDha",,,,,,,,SWITCH,"94a134a2-f4ca-460c-8bd0-84465fdfead5","10.10.145.72","Catalyst 2960S","MIS-IMAGING-Sw2960.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ba80856a-f81d-485f-a262-cd3bd7666fb7",IDS,22,"[ - ""open_port_22"" -]","10.10.145.72",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.291 AM",,"10.10.184.194","10.10.141.95",TCP,"c5cc3faf-c34d-4129-ba8b-3ae398afdb15_yDha",,,,,,,,SWITCH,"7761f73d-0382-45ed-b9fb-7a104cb390f5","10.10.184.194","Cisco Catalyst Switch","1350-SEliseo-STE130-48.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c5cc3faf-c34d-4129-ba8b-3ae398afdb15",IDS,22,"[ - ""open_port_22"" -]","10.10.184.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.289 AM",,"10.10.145.18","10.10.141.95",TCP,"3b770234-0db1-463b-b9b2-25c72d7536ce_yDha",,,,,,,,SWITCH,"9eb7d56e-0e51-47c2-b53a-dda89d661e44","10.10.145.18","Cisco Catalyst Switch","Lobby-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3b770234-0db1-463b-b9b2-25c72d7536ce",IDS,22,"[ - ""open_port_22"" -]","10.10.145.18",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.232 AM",,"10.10.220.135","10.10.141.95",TCP,"dc47405c-bc59-421b-9be4-f029d5c5c079_yDha",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dc47405c-bc59-421b-9be4-f029d5c5c079",IDS,22,"[ - ""open_port_22"" -]","10.10.220.135",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.228 AM",,"10.10.220.136","10.10.141.95",TCP,"7704d0d8-9db7-49b4-8bfd-982b54ff4c01_yDha",,,,,,,,SWITCH,"77e1d12c-3d43-4318-a5a1-82548d8b12d4","10.10.220.136","Catalyst 2960S","2BonAir-C2960-144-SW-VoIP.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7704d0d8-9db7-49b4-8bfd-982b54ff4c01",IDS,22,"[ - ""open_port_22"" -]","10.10.220.136",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.225 AM",,"10.10.145.23","10.10.141.95",TCP,"083a95eb-7998-4ccb-9edf-077e798aa8e3_yDha",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","083a95eb-7998-4ccb-9edf-077e798aa8e3",IDS,22,"[ - ""open_port_22"" -]","10.10.145.23",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.213 AM",,"10.10.145.6","10.10.141.95",TCP,"14f7fe51-4acb-439a-ac75-b1195aebfaf4_yDha",,,,,,,,SWITCH,"26531e3f-80f0-401e-aed6-8cd9fcf1fc74","10.10.145.6","Cisco Catalyst Switch","3West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","14f7fe51-4acb-439a-ac75-b1195aebfaf4",IDS,22,"[ - ""open_port_22"" -]","10.10.145.6",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.210 AM",,"10.10.145.86","10.10.141.95",TCP,"f42248ae-e186-48a5-83af-dc2e621e17ca_yDha",,,,,,,,SWITCH,"48dcdb84-2dc9-4136-a140-04ff36f0f83e","10.10.145.86","Catalyst 2960S","MIS-C2960S-IMG-SW-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f42248ae-e186-48a5-83af-dc2e621e17ca",IDS,22,"[ - ""open_port_22"" -]","10.10.145.86",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.207 AM",,"10.10.16.137","10.10.141.95",TCP,"1e808a2b-f894-45ae-8526-a4ea0ace416d_ZTNw",,,,,,,,SWITCH,"6a24443b-1074-4bd1-9d89-65ce807c6843","10.10.16.137","Catalyst 3850-48U","INT-OAK-DMZ",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1e808a2b-f894-45ae-8526-a4ea0ace416d",IDS,22,"[ - ""open_port_22"" -]","10.10.16.137",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.204 AM",,"10.10.236.135","10.10.141.95",TCP,"595c4a22-4e5c-4e2d-bcf0-5eeaa9a3942e_yDha",,,,,,,,SWITCH,"a24e4477-e641-4e07-bbea-a7be77fc2f78","10.10.236.135","Catalyst 2960S","Civic-C2960-144-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","595c4a22-4e5c-4e2d-bcf0-5eeaa9a3942e",IDS,22,"[ - ""open_port_22"" -]","10.10.236.135",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.201 AM",,"10.20.253.2","10.10.141.95",TCP,"6f4ac4fb-60d7-4c4d-b16b-836fe74388a8_yDha",,,,,,,,SWITCH,"fc28d091-4906-4e1d-97bd-eabbe7538de0","10.20.253.2","Cisco Catalyst Switch","4000Civic-206_209-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6f4ac4fb-60d7-4c4d-b16b-836fe74388a8",IDS,22,"[ - ""open_port_22"" -]","10.20.253.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.197 AM",,"10.10.228.2","10.10.141.95",TCP,"1a9c67f6-3c26-482b-bd4f-73e23b6641c2_yDha",,,,,,,,SWITCH,"15358dc2-070d-42b8-957d-fc0537790e77","10.10.228.2","Cisco Catalyst Switch","75Rowl201-C3850-144-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1a9c67f6-3c26-482b-bd4f-73e23b6641c2",IDS,22,"[ - ""open_port_22"" -]","10.10.228.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.194 AM",,"10.10.145.4","10.10.141.95",TCP,"1bef32d0-079f-4ad9-86a6-0ed791e5be0e_yDha",,,,,,,,SWITCH,"a4d28bc4-9482-4924-8423-aa8868def9f4","10.10.145.4","Cisco Catalyst Switch","3Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1bef32d0-079f-4ad9-86a6-0ed791e5be0e",IDS,22,"[ - ""open_port_22"" -]","10.10.145.4",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.191 AM",,"10.20.191.2","10.10.141.95",TCP,"1daa3a3b-2e6b-4ba0-818c-0a7b755e734f_ZTNw",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1daa3a3b-2e6b-4ba0-818c-0a7b755e734f",IDS,22,"[ - ""open_port_22"" -]","10.20.191.2",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.182 AM",,"10.19.56.2","10.10.141.95",TCP,"aef49fc9-f23e-4a65-8a6f-4cf569bf97dc_ZTNw",,,,,,,,SWITCH,"c1aa2466-7676-4798-a7a6-53b59d77ca89","10.19.56.2","Cisco Catalyst Switch","1701FourthSt-120-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","aef49fc9-f23e-4a65-8a6f-4cf569bf97dc",IDS,22,"[ - ""open_port_22"" -]","10.19.56.2",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.127 AM",,"10.10.145.9","10.10.141.95",TCP,"44007f85-4b35-44d8-9a79-2f628cdd75f1_yDha",,,,,,,,SWITCH,"96372eef-9a67-4ff6-9520-4851e58e02a9","10.10.145.9","Cisco Catalyst Switch","4Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","44007f85-4b35-44d8-9a79-2f628cdd75f1",IDS,22,"[ - ""open_port_22"" -]","10.10.145.9",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.124 AM",,"10.10.145.13","10.10.141.95",TCP,"09f6801f-8bef-461e-8e92-79170a6910e1_ZTNw",,,,,,,,SWITCH,"00bcead7-6eb2-427b-b74b-340afe6fb482","10.10.145.13","Catalyst 2960S","MDF-1-c2960-APC-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","09f6801f-8bef-461e-8e92-79170a6910e1",IDS,22,"[ - ""open_port_22"" -]","10.10.145.13",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.117 AM",,"10.10.200.40","10.10.141.95",TCP,"4190bc84-4e88-4d31-b735-67738044f92b_yDha",,,,,,,,SWITCH,"22f915b2-3162-4581-8949-67c0c270d617","10.10.200.40","Cisco Catalyst Switch","100ADrakes140-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4190bc84-4e88-4d31-b735-67738044f92b",IDS,22,"[ - ""open_port_22"" -]","10.10.200.40",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.115 AM",,"10.10.190.7","10.10.141.95",TCP,"65c87e9a-42b7-4459-b9ab-74fe51562a43_yDha",,,,,,,,SWITCH,"b5658de0-e0eb-48b0-8e9c-a30f74b0defa","10.10.190.7","Cisco Catalyst Switch","1240Eliseo-C3850-120-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","65c87e9a-42b7-4459-b9ab-74fe51562a43",IDS,22,"[ - ""open_port_22"" -]","10.10.190.7",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.112 AM",,"10.20.95.2","10.10.141.95",TCP,"d4906766-90bd-4694-a335-d43f663ee5dc_yDha",,,,,,,,SWITCH,"b0ae69b1-9c48-4b75-b021-9bffb0112314","10.20.95.2","Cisco Catalyst Switch","1100Larkspur-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d4906766-90bd-4694-a335-d43f663ee5dc",IDS,22,"[ - ""open_port_22"" -]","10.20.95.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.110 AM",,"10.19.103.2","10.10.141.95",TCP,"ed6f9432-2d5c-4323-a1f9-fcebc652175d_ZTNw",,,,,,,,SWITCH,"34565923-0f93-4aec-b330-dc2ec5c5c91b","10.19.103.2","Cisco Catalyst Switch","4000Civic-202-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ed6f9432-2d5c-4323-a1f9-fcebc652175d",IDS,22,"[ - ""open_port_22"" -]","10.19.103.2",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.106 AM",,"10.10.145.12","10.10.141.95",TCP,"c04734a1-eb5d-4108-ac6f-cdf5a1edab30_yDha",,,,,,,,SWITCH,"f2546184-1d38-4ca3-b3df-5d3149599087","10.10.145.12","Cisco Catalyst Switch","5Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c04734a1-eb5d-4108-ac6f-cdf5a1edab30",IDS,22,"[ - ""open_port_22"" -]","10.10.145.12",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.096 AM",,"10.10.145.7","10.10.141.95",TCP,"cadbf889-d31a-4ac9-b960-cd86598fb218_yDha",,,,,,,,SWITCH,"d10a1c72-257a-4780-a790-1622d394f41f","10.10.145.7","Cisco Catalyst Switch","1West-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","cadbf889-d31a-4ac9-b960-cd86598fb218",IDS,22,"[ - ""open_port_22"" -]","10.10.145.7",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.092 AM",,"10.20.109.10","10.10.141.95",TCP,"69d547d3-a963-4d17-b8b1-ebf114b2ba97_yDha",,,,,,,,SWITCH,"af1b7d9a-62cb-4d32-8ef7-308790e6b055","10.20.109.10","Cisco Catalyst Switch","4000Civic-200B-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","69d547d3-a963-4d17-b8b1-ebf114b2ba97",IDS,22,"[ - ""open_port_22"" -]","10.20.109.10",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.089 AM",,"10.10.236.133","10.10.141.95",TCP,"7e81fce1-b837-42f5-b2af-9b7fec668747_yDha",,,,,,,,SWITCH,"bbf9a2b1-c8a4-4001-ae1f-fb3577c4c5d7","10.10.236.133","Cisco Catalyst Switch","Civic-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7e81fce1-b837-42f5-b2af-9b7fec668747",IDS,22,"[ - ""open_port_22"" -]","10.10.236.133",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.085 AM",,"10.10.145.10","10.10.141.95",TCP,"fe7ce5cd-7aad-4748-982e-4ecdf13940d9_yDha",,,,,,,,SWITCH,"224fb103-7597-4c4e-b872-480f8b940e9b","10.10.145.10","Cisco Catalyst Switch","4West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fe7ce5cd-7aad-4748-982e-4ecdf13940d9",IDS,22,"[ - ""open_port_22"" -]","10.10.145.10",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.029 AM",,"10.10.162.200","10.10.141.95",TCP,"958cef14-e1f8-459a-b05f-0bf1e44883cd_V+Mc",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","958cef14-e1f8-459a-b05f-0bf1e44883cd",IDS,22,"[ - ""open_port_22"" -]","10.10.162.200",Low,"1679670347.48244","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.026 AM",,"10.10.145.24","10.10.141.95",TCP,"5aabf2aa-9c94-49cf-b943-1b0b3f9941e6_yDha",,,,,,,,SWITCH,"93bd2053-bd4c-4206-ac17-9f09fb17a866","10.10.145.24","Cisco Catalyst Switch","2Central-C3850-192-SW02.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5aabf2aa-9c94-49cf-b943-1b0b3f9941e6",IDS,22,"[ - ""open_port_22"" -]","10.10.145.24",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.023 AM",,"10.10.145.67","10.10.141.95",TCP,"13fd3997-e744-47ee-aa9d-e351b18796a2_yDha",,,,,,,,SWITCH,"99b4a085-5f3b-4f77-94d2-d75e9814254b","10.10.145.67","Catalyst 3850-48U","MGH-Internet-AGG-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","13fd3997-e744-47ee-aa9d-e351b18796a2",IDS,22,"[ - ""open_port_22"" -]","10.10.145.67",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.816 AM",,"10.50.132.74","10.10.138.31",UDP,"573ca255-1125-4b69-af28-ab58ccb3fcfc_HHcT",,,,,,,,CAD,"61ecae95-8043-4f00-bcac-9676ebb5d7f6","10.50.132.74",DynaCAD,"VM-PACSRAD29",CAD,CAD,"10.10.138.31","Source IP: 10.10.138.31, Port: 3389","573ca255-1125-4b69-af28-ab58ccb3fcfc",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.74",Low,"1679669777.22008","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.795 AM",,"10.10.142.51","10.50.149.33",TCP,"7a60db3c-0954-4fa5-9b02-62aeef1bf055_yj0Z",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.33","Source IP: 10.50.149.33, Port: 3389","7a60db3c-0954-4fa5-9b02-62aeef1bf055",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.10.142.51",Low,"1679669777.48065","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.788 AM",,"10.10.142.51","10.50.149.56",TCP,"11d17c11-670c-4bfe-bba5-8992baac519b_yj0Z",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.56","Source IP: 10.50.149.56, Port: 3389","11d17c11-670c-4bfe-bba5-8992baac519b",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.10.142.51",Low,"1679669777.48065","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.033 AM",,"10.20.208.51","10.50.140.96",,"ed8f676c-0d69-4082-8cda-f61a910a20e2_T5W6",,,,,,,,"REGULAR_PRINTER","cf00de08-7627-4712-8f69-ab988c077074","10.20.208.51","LaserJet Printer",P220118,Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33233, ","ed8f676c-0d69-4082-8cda-f61a910a20e2",IDS,33233,"[]",,Medium,"1679667260.05086","Scanner Activity","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:33.941 AM",,"10.50.132.43","10.50.149.22",TCP,"069935d0-a735-4217-acbc-55a86e1b4df8_FQhG",,,,,,,,CAD,"ff1f00ce-1f4c-4abb-80c3-08e8d05f12a8","10.50.132.43",DynaCAD,"VM-PACSRAD03",CAD,CAD,"10.50.149.22","Source IP: 10.50.149.22, Port: 3389","069935d0-a735-4217-acbc-55a86e1b4df8",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.43",Low,"1679604697.48531","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:12.793 AM",,,,,"ebabb58b-9eda-4f92-be7d-232727176a75_aWeR",,,,Firefox,"ocsp.pki.goog",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: ocsp.pki.goog, IP: 172.217.164.99","ebabb58b-9eda-4f92-be7d-232727176a75",IDS,80,"[ - ""web_browsing"" -]","172.217.164.99",Medium,"1679659038.19543","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:44.754 AM",,"10.20.143.2","10.10.142.31",TCP,"9744e23e-72a2-4a8b-8e46-5adfe7751f54_lZGl",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.142.31","Source IP: 10.10.142.31, Port: 22","9744e23e-72a2-4a8b-8e46-5adfe7751f54",IDS,22,"[ - ""open_port_22"" -]","10.20.143.2",Low,"1679606877.23765","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.697 AM",,"10.50.132.43","10.50.149.22",TCP,"b984e9bb-7bf4-4eed-bec9-251a5627691a_y+45",,,,,,,,CAD,"ff1f00ce-1f4c-4abb-80c3-08e8d05f12a8","10.50.132.43",DynaCAD,"VM-PACSRAD03",CAD,CAD,"10.50.149.22","Source IP: 10.50.149.22, Port: 3389","b984e9bb-7bf4-4eed-bec9-251a5627691a",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.43",Low,"1679604667.48093","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.098 AM",,,,,"a0c26c84-5393-4b3d-b2d4-93aeacbdd186_WDfl",,,,Chrome,"www.cisco.com",,,CAD,"9385a087-6fb7-489e-a024-dced1580a558","10.50.163.57",DynaCAD,"MGH-RADWS05",CAD,CAD,"10.50.163.57","Browser: Chrome, Host: www.cisco.com, IP: 104.108.67.95","a0c26c84-5393-4b3d-b2d4-93aeacbdd186",IDS,80,"[ - ""web_browsing"" -]","104.108.67.95",Medium,"1679614844.85038","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.726 AM",,,,,"cdb52538-7dcb-4442-9287-7f30c3527695_z9XA",,,,"Internet Explorer","teams.microsoft.com",,,CAD,"44d3a8ec-2d41-43ac-953f-d1489c5d5ca3","10.50.149.33",DynaCAD,"W-BUS-PACS-29",CAD,CAD,"10.50.149.33","Browser: Internet Explorer, Host: teams.microsoft.com, IP: 52.113.195.132","cdb52538-7dcb-4442-9287-7f30c3527695",IDS,80,"[ - ""web_browsing"" -]","52.113.195.132",Medium,"1679612938.36889","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.713 AM",,"10.20.21.194","10.10.141.95",TCP,"2bae75e8-5202-4e8c-a7c6-3d1508c83c7b_ItLq",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2bae75e8-5202-4e8c-a7c6-3d1508c83c7b",IDS,22,"[ - ""open_port_22"" -]","10.20.21.194",Low,"1679601382.22202","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.710 AM",,"10.19.88.2","10.10.141.95",TCP,"aa9d80e9-8927-4951-8e38-99e8d4d37428_ItLq",,,,,,,,SWITCH,"393404cc-a097-4a18-8aa4-1f17f2128ea5","10.19.88.2","Cisco Catalyst Switch","75Rowl220-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","aa9d80e9-8927-4951-8e38-99e8d4d37428",IDS,22,"[ - ""open_port_22"" -]","10.19.88.2",Low,"1679601382.22202","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:54.284 AM",,,,,"833e52fb-60c8-4185-9cbb-2b01a0522c1d_UXAZ",,,,Firefox,"ocsp.pki.goog",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: ocsp.pki.goog, IP: 172.217.164.99","833e52fb-60c8-4185-9cbb-2b01a0522c1d",IDS,80,"[ - ""web_browsing"" -]","172.217.164.99",Medium,"1679611911.81796","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.331 AM",,"10.10.16.137","10.10.141.95",TCP,"8fe25dc8-f86e-4487-9bfb-b72a0e3ab133_e1Ob",,,,,,,,SWITCH,"6a24443b-1074-4bd1-9d89-65ce807c6843","10.10.16.137","Catalyst 3850-48U","INT-OAK-DMZ",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8fe25dc8-f86e-4487-9bfb-b72a0e3ab133",IDS,22,"[ - ""open_port_22"" -]","10.10.16.137",Low,"1679599832.20683","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.328 AM",,"10.20.191.2","10.10.141.95",TCP,"766f9130-4829-46ee-95ae-a3beb724b8ec_e1Ob",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","766f9130-4829-46ee-95ae-a3beb724b8ec",IDS,22,"[ - ""open_port_22"" -]","10.20.191.2",Low,"1679599832.20683","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.325 AM",,"10.10.184.194","10.10.141.95",TCP,"568dc2fc-ac8d-43df-9195-9e025af433f3_e1Ob",,,,,,,,SWITCH,"7761f73d-0382-45ed-b9fb-7a104cb390f5","10.10.184.194","Cisco Catalyst Switch","1350-SEliseo-STE130-48.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","568dc2fc-ac8d-43df-9195-9e025af433f3",IDS,22,"[ - ""open_port_22"" -]","10.10.184.194",Low,"1679599832.20683","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.282 AM",,,,,"0eca873c-2817-40a4-844b-ed5f0c392d57_jjOs",,,,Chrome,"www.cisco.com",,,CAD,"5a52315c-8866-42cc-b676-92264aeeed40","10.50.163.65",DynaCAD,"MGH-RADWS01",CAD,CAD,"10.50.163.65","Browser: Chrome, Host: www.cisco.com, IP: 104.108.67.95","0eca873c-2817-40a4-844b-ed5f0c392d57",IDS,80,"[ - ""web_browsing"" -]","104.108.67.95",Medium,"1679609873.2246","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.090 AM",,"10.10.162.150","10.10.141.95",TCP,"0c3d12eb-ef1b-469c-a130-52e04474ba07_louL",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","0c3d12eb-ef1b-469c-a130-52e04474ba07",IDS,22,"[ - ""open_port_22"" -]","10.10.162.150",Low,"1679599202.21491","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.086 AM",,"10.10.162.100","10.10.141.95",TCP,"f30febc9-8e4a-42a1-a3c6-fb60b1d58d94_louL",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","f30febc9-8e4a-42a1-a3c6-fb60b1d58d94",IDS,22,"[ - ""open_port_22"" -]","10.10.162.100",Low,"1679599202.21491","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.018 AM",,"10.19.56.2","10.10.141.95",TCP,"d52d046d-7944-4d4d-8077-7c93bcc366ee_LNTZ",,,,,,,,SWITCH,"c1aa2466-7676-4798-a7a6-53b59d77ca89","10.19.56.2","Cisco Catalyst Switch","1701FourthSt-120-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d52d046d-7944-4d4d-8077-7c93bcc366ee",IDS,22,"[ - ""open_port_22"" -]","10.19.56.2",Low,"1679599017.22343","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.013 AM",,"10.19.103.2","10.10.141.95",TCP,"bfc8382e-7c90-4419-bc8d-085c8a8d9b0c_LNTZ",,,,,,,,SWITCH,"34565923-0f93-4aec-b330-dc2ec5c5c91b","10.19.103.2","Cisco Catalyst Switch","4000Civic-202-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bfc8382e-7c90-4419-bc8d-085c8a8d9b0c",IDS,22,"[ - ""open_port_22"" -]","10.19.103.2",Low,"1679599017.22343","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.793 AM",,"10.50.163.21","10.50.138.42",TCP,"42dae1a7-2f1e-4b77-8dc4-af39a4c927cd_Tvxl",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","42dae1a7-2f1e-4b77-8dc4-af39a4c927cd",IDS,22,"[ - ""open_port_22"" -]","10.50.163.21",Low,"1679598652.48505","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:31.650 AM",,,,,"ea002fff-6c8a-414e-b38f-0f83fb1ac86b_/Tc3",,,,Chrome,"cacerts.digicert.com",,,CAD,"5a52315c-8866-42cc-b676-92264aeeed40","10.50.163.65",DynaCAD,"MGH-RADWS01",CAD,CAD,"10.50.163.65","Browser: Chrome, Host: cacerts.digicert.com, IP: 192.229.211.108","ea002fff-6c8a-414e-b38f-0f83fb1ac86b",IDS,80,"[ - ""web_browsing"" -]","192.229.211.108",Medium,"1679605927.47462","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:24.203 AM",,"10.10.162.150","10.10.141.95",TCP,"4e871d0a-d422-4d78-af29-3f85995c140c_fYEx",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","4e871d0a-d422-4d78-af29-3f85995c140c",IDS,22,"[ - ""open_port_22"" -]","10.10.162.150",Low,"1679564687.22832","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:23.938 AM",,"10.10.145.23","10.10.96.148",TCP,"0652a043-9f29-4ec8-a9c9-6ead44a53a32_Vakj",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.96.148","Source IP: 10.10.96.148, Port: 22","0652a043-9f29-4ec8-a9c9-6ead44a53a32",IDS,22,"[ - ""open_port_22"" -]","10.10.145.23",Low,"1679594937.24026","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:23.838 AM",,,,,"453052f6-2c58-460e-afd0-0a00c3644038_9uyP",,,,Firefox,"r3.o.lencr.org.x.71a0cd0504f52040ca0bc3303bdfb364ee72.9270f74f.id.opendns.com",,,PACS,"9edd7e38-420b-4630-857d-8fc6cf122104","10.10.141.126","McKesson Radiology 12.3","ALI_QUERY_SCP","PACS Server",PACS,"10.10.141.126","Browser: Firefox, Host: r3.o.lencr.org.x.71a0cd0504f52040ca0bc3303bdfb364ee72.9270f74f.id.opendns.com, IP: 146.112.247.79","453052f6-2c58-460e-afd0-0a00c3644038",IDS,80,"[ - ""web_browsing"" -]","146.112.247.79",Medium,"1679602921.01168","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.903 AM",,"10.10.20.100","10.10.141.95",TCP,"7483046d-4df6-472f-94c9-14855e52de79_CC6q",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7483046d-4df6-472f-94c9-14855e52de79",IDS,22,"[ - ""open_port_22"" -]","10.10.20.100",Low,"1679563457.20393","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.895 AM",,"10.20.47.2","10.10.141.95",TCP,"8f3314ac-9d56-4fe9-958c-12d6c45389dd_CC6q",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8f3314ac-9d56-4fe9-958c-12d6c45389dd",IDS,22,"[ - ""open_port_22"" -]","10.20.47.2",Low,"1679563457.20393","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.708 AM",,,,,"1786a755-a619-4edf-88b7-446872864164_DcR0",,,,Firefox,"detectportal.firefox.com",,,MAMMOGRAPHY,"c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","Senographe Pristina/Pristina Serena Mammography System","MH_CT1_L552",Mammography,MAMMOGRAPHY,"10.50.163.31","Browser: Firefox, Host: detectportal.firefox.com, IP: 34.107.221.82","1786a755-a619-4edf-88b7-446872864164",IDS,80,"[ - ""web_browsing"" -]","34.107.221.82",Medium,"1679602786.83231","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.702 AM",,"10.50.163.21","10.50.138.42",TCP,"d4f7bd32-9f02-4018-9ed6-8dd26b933900_ZeG0",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","d4f7bd32-9f02-4018-9ed6-8dd26b933900",IDS,22,"[ - ""open_port_22"" -]","10.50.163.21",Low,"1679598667.48213","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.382 AM",,"10.20.21.194","10.10.141.95",TCP,"a09f85c1-1874-49a5-8cdc-972b733bd379_5nIB",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a09f85c1-1874-49a5-8cdc-972b733bd379",IDS,22,"[ - ""open_port_22"" -]","10.20.21.194",Low,"1679594857.25203","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.193 AM",,"10.10.145.13","10.10.141.95",TCP,"05d8ef74-72f5-4fb6-a46f-532dd7c840aa_QvK+",,,,,,,,SWITCH,"00bcead7-6eb2-427b-b74b-340afe6fb482","10.10.145.13","Catalyst 2960S","MDF-1-c2960-APC-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","05d8ef74-72f5-4fb6-a46f-532dd7c840aa",IDS,22,"[ - ""open_port_22"" -]","10.10.145.13",Low,"1679594547.22111","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:06.680 AM",,"10.10.145.23","10.10.96.148",TCP,"0106b02a-1c85-4de2-913c-9d6f42e3c682_h+Cx",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.96.148","Source IP: 10.10.96.148, Port: 22","0106b02a-1c85-4de2-913c-9d6f42e3c682",IDS,22,"[ - ""open_port_22"" -]","10.10.145.23",Low,"1679594117.2464","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:56:49.034 PM",,"10.10.162.200","10.10.141.95",TCP,"7e71e6d5-7f73-4685-8a4d-b6c96c697dec_gPIh",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","7e71e6d5-7f73-4685-8a4d-b6c96c697dec",IDS,22,"[ - ""open_port_22"" -]","10.10.162.200",Low,"1679592892.4876","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:34.907 PM",,"10.10.20.100","10.10.141.95",TCP,"562f309d-a5a9-4777-8d02-8f941c386798_5pT2",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","562f309d-a5a9-4777-8d02-8f941c386798",IDS,22,"[ - ""open_port_22"" -]","10.10.20.100",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:30.483 PM",,"10.10.204.2","10.10.141.95",TCP,"1aa1b396-4150-4496-9d56-4d7184347772_5pT2",,,,,,,,SWITCH,"9cc0363a-1448-4b03-877b-c743e4edbc11","10.10.204.2","Cisco Catalyst Switch","MH-Phlps-6-A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1aa1b396-4150-4496-9d56-4d7184347772",IDS,22,"[ - ""open_port_22"" -]","10.10.204.2",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:27.273 PM",,"10.10.204.12","10.10.141.95",TCP,"e72213e2-7515-486b-9a30-cc9dfa52bf90_5pT2",,,,,,,,SWITCH,"690a3cc5-7b90-4bf7-b2b4-4a99883c680f","10.10.204.12","Cisco Catalyst Switch","MH-Phlps-3101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e72213e2-7515-486b-9a30-cc9dfa52bf90",IDS,22,"[ - ""open_port_22"" -]","10.10.204.12",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:24.525 PM",,"10.20.47.2","10.10.141.95",TCP,"462cc6e5-d78e-48b9-a28d-b1fe0d3ace27_5pT2",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","462cc6e5-d78e-48b9-a28d-b1fe0d3ace27",IDS,22,"[ - ""open_port_22"" -]","10.20.47.2",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:50.349 PM",,"10.10.195.140","10.10.141.95",TCP,"f064c973-6014-428e-87a4-e45f08f5d6fa_DBVn",,,,,,,,SWITCH,"715a7bff-b86b-40c1-b290-a1d910333551","10.10.195.140","Catalyst 2960S","1100Eliseo2960-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f064c973-6014-428e-87a4-e45f08f5d6fa",IDS,22,"[ - ""open_port_22"" -]","10.10.195.140",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:48.201 PM",,"10.10.178.242","10.10.141.95",TCP,"14ea2072-ac60-4eed-b49a-717c2c2ef336_DBVn",,,,,,,,SWITCH,"00365818-9730-4f67-af78-d2b4242bf75c","10.10.178.242","Cisco Catalyst Switch","1350-SEliseo-Ste220-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","14ea2072-ac60-4eed-b49a-717c2c2ef336",IDS,22,"[ - ""open_port_22"" -]","10.10.178.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:45.938 PM",,"10.10.145.5","10.10.141.95",TCP,"93cd9e76-3b75-490b-9cf5-b8d30b01356d_DBVn",,,,,,,,SWITCH,"b188b718-611b-44dd-9de4-b220156dbe65","10.10.145.5","Catalyst 2960S","MGH-Engineering-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","93cd9e76-3b75-490b-9cf5-b8d30b01356d",IDS,22,"[ - ""open_port_22"" -]","10.10.145.5",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:44.519 PM",,"10.10.228.137","10.10.141.95",TCP,"cfb6c70a-56f7-47e0-b3f9-ee932c29ea63_DBVn",,,,,,,,SWITCH,"e396e00b-66bc-4c90-9e22-8f219807c304","10.10.228.137","Cisco Catalyst Switch","75Rowl101-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","cfb6c70a-56f7-47e0-b3f9-ee932c29ea63",IDS,22,"[ - ""open_port_22"" -]","10.10.228.137",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:44.514 PM",,"10.10.145.25","10.10.141.95",TCP,"bf5ab39b-fa5a-4e43-a163-e4d4f5eac9f4_DBVn",,,,,,,,SWITCH,"0337c96d-39f9-4c00-876f-06ac402fa0a3","10.10.145.25","Cisco Catalyst Switch","2Central-C3850-96-SW03.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bf5ab39b-fa5a-4e43-a163-e4d4f5eac9f4",IDS,22,"[ - ""open_port_22"" -]","10.10.145.25",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:44.510 PM",,"10.20.10.194","10.10.141.95",TCP,"a5cc4fc7-b674-43ab-9441-a37d065b5cb6_DBVn",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a5cc4fc7-b674-43ab-9441-a37d065b5cb6",IDS,22,"[ - ""open_port_22"" -]","10.20.10.194",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:40.011 PM",,"10.10.194.197","10.10.141.95",TCP,"95b5c95c-30a7-47df-b152-66cdcc542ea7_DBVn",,,,,,,,SWITCH,"6baf1025-8db2-4587-9f69-6929859d7c8e","10.10.194.197","Cisco Catalyst Switch","1260SEliseo-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","95b5c95c-30a7-47df-b152-66cdcc542ea7",IDS,22,"[ - ""open_port_22"" -]","10.10.194.197",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:35.336 PM",,"10.20.159.2","10.10.141.95",TCP,"216bd28f-9b1b-4b76-8dbd-116370ded59b_DBVn",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","216bd28f-9b1b-4b76-8dbd-116370ded59b",IDS,22,"[ - ""open_port_22"" -]","10.20.159.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:33.050 PM",,"10.10.145.11","10.10.141.95",TCP,"18ad46ac-98a2-4b1a-b3f9-a4bb858e1603_DBVn",,,,,,,,SWITCH,"3e973541-e49d-4ae5-88d7-223f0a8933da","10.10.145.11","Cisco Catalyst Switch","2West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","18ad46ac-98a2-4b1a-b3f9-a4bb858e1603",IDS,22,"[ - ""open_port_22"" -]","10.10.145.11",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:30.844 PM",,"10.20.175.2","10.10.141.95",TCP,"1a03ea38-3091-4a32-a251-f8c750a3807a_DBVn",,,,,,,,SWITCH,"8fad271e-115d-43f8-982f-ce1687063594","10.20.175.2","Cisco Catalyst Switch","PRIMA-100DRAKES-3850-STACK.maringeneral.",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1a03ea38-3091-4a32-a251-f8c750a3807a",IDS,22,"[ - ""open_port_22"" -]","10.20.175.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:28.141 PM",,"10.20.22.194","10.10.141.95",TCP,"22d9215f-1a97-4294-8e53-ec35a2955471_DBVn",,,,,,,,SWITCH,"59c8bdf1-0863-428a-9898-d5827f1c9a42","10.20.22.194","Cisco Catalyst Switch","1341Eliseo-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","22d9215f-1a97-4294-8e53-ec35a2955471",IDS,22,"[ - ""open_port_22"" -]","10.20.22.194",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:28.137 PM",,"10.20.79.5","10.10.141.95",TCP,"30ceb4f5-2eca-41b3-8014-52659d33626f_DBVn",,,,,,,,SWITCH,"8df37589-717b-49a5-979e-ec40ac93c229","10.20.79.5","Cisco Catalyst Switch","651FStSonoma-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","30ceb4f5-2eca-41b3-8014-52659d33626f",IDS,22,"[ - ""open_port_22"" -]","10.20.79.5",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:24.579 PM",,"10.10.145.26","10.10.141.95",TCP,"a32cc7a5-1b01-4069-b744-93f75c97486a_DBVn",,,,,,,,SWITCH,"63f72b58-a0f8-4a58-a02f-7b26e9fd4b82","10.10.145.26","Cisco Catalyst Switch","MHB-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a32cc7a5-1b01-4069-b744-93f75c97486a",IDS,22,"[ - ""open_port_22"" -]","10.10.145.26",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:22.335 PM",,"10.20.207.2","10.10.141.95",TCP,"87fb083a-2937-46a8-9867-bf21102975ca_DBVn",,,,,,,,SWITCH,"0b4e943b-9635-4952-a6be-6ebcb969a459","10.20.207.2","Cisco Catalyst Switch","PRIMA-347Andrieux-c3850-48-SW.maringener",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","87fb083a-2937-46a8-9867-bf21102975ca",IDS,22,"[ - ""open_port_22"" -]","10.20.207.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:20.080 PM",,"10.10.145.8","10.10.141.95",TCP,"14a5ef6f-7e89-4627-adf3-8d2172ea09e9_DBVn",,,,,,,,SWITCH,"785abf71-059b-4d14-bedc-485bf82e85ff","10.10.145.8","Cisco Catalyst Switch","1Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","14a5ef6f-7e89-4627-adf3-8d2172ea09e9",IDS,22,"[ - ""open_port_22"" -]","10.10.145.8",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:19.214 PM",,"10.20.223.2","10.10.141.95",TCP,"5783240b-228f-4627-9037-82d553449017_DBVn",,,,,,,,SWITCH,"de343319-37ea-44ca-9586-073e119a4726","10.20.223.2","Cisco Catalyst Switch","PRIMA-1496Professional-c3850-48-SW.marin",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5783240b-228f-4627-9037-82d553449017",IDS,22,"[ - ""open_port_22"" -]","10.20.223.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:19.208 PM",,"10.10.145.15","10.10.141.95",TCP,"1a39b63c-3096-451c-b519-5ea215d49f91_DBVn",,,,,,,,SWITCH,"8a336c51-448e-4b38-9ded-dda2b03fd1ba","10.10.145.15","Catalyst 3850-48P","3West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1a39b63c-3096-451c-b519-5ea215d49f91",IDS,22,"[ - ""open_port_22"" -]","10.10.145.15",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:15.613 PM",,"10.20.30.242","10.10.141.95",TCP,"ee8f7d62-d67d-4294-aa27-f616122aee5d_DBVn",,,,,,,,SWITCH,"716f2c3f-a88c-4c91-aab5-b9aa32edf877","10.20.30.242","Cisco Catalyst Switch","75Rowl250-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ee8f7d62-d67d-4294-aa27-f616122aee5d",IDS,22,"[ - ""open_port_22"" -]","10.20.30.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:10.941 PM",,"10.10.236.136","10.10.141.95",TCP,"51a66496-dc08-4f68-a632-7c2b55329aab_DBVn",,,,,,,,SWITCH,"c24cdf3c-7168-4cbb-8a9e-142c8afa8ed1","10.10.236.136","Catalyst 2960S","Civic-C2960-48-SW02",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","51a66496-dc08-4f68-a632-7c2b55329aab",IDS,22,"[ - ""open_port_22"" -]","10.10.236.136",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:10.026 PM",,"10.20.62.5","10.10.141.95",TCP,"d9eba895-825f-470d-8715-375e8bf279c6_DBVn",,,,,,,,SWITCH,"5a9c7ddb-8484-4e3e-a560-85eb3f884cb3","10.20.62.5","Cisco Catalyst Switch","900SEliseo201-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d9eba895-825f-470d-8715-375e8bf279c6",IDS,22,"[ - ""open_port_22"" -]","10.20.62.5",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:05.672 PM",,"10.10.145.85","10.10.141.95",TCP,"82e3ee4b-1ecb-4c17-b017-73ccb44da731_DBVn",,,,,,,,SWITCH,"46079d19-5c75-4342-a79e-012112c3124c","10.10.145.85","Cisco Catalyst Switch","MIS-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","82e3ee4b-1ecb-4c17-b017-73ccb44da731",IDS,22,"[ - ""open_port_22"" -]","10.10.145.85",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:04.251 PM",,"10.20.143.2","10.10.141.95",TCP,"b8455175-bafa-4412-ac2f-5fc451c9d0b3_DBVn",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","b8455175-bafa-4412-ac2f-5fc451c9d0b3",IDS,22,"[ - ""open_port_22"" -]","10.20.143.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:01.947 PM",,"10.10.204.15","10.10.141.95",TCP,"d0b7eba9-d72b-44e5-bdb3-a10fee57d7b1_DBVn",,,,,,,,SWITCH,"669bc5d7-d785-40a5-a8f6-dd6bb0099ef1","10.10.204.15","Cisco Catalyst Switch","MH-Phlps-2101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d0b7eba9-d72b-44e5-bdb3-a10fee57d7b1",IDS,22,"[ - ""open_port_22"" -]","10.10.204.15",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:01.942 PM",,"10.10.145.87","10.10.141.95",TCP,"0792b14e-e6d4-4e9c-8018-f09c16c01b42_DBVn",,,,,,,,SWITCH,"5bdb5c80-de6b-4609-954b-edbbb0ec300c","10.10.145.87","Catalyst 2960S","MIS-C2960S-IMG-SW-2.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0792b14e-e6d4-4e9c-8018-f09c16c01b42",IDS,22,"[ - ""open_port_22"" -]","10.10.145.87",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:57.474 PM",,"10.10.145.72","10.10.141.95",TCP,"f2aa2963-5e66-4942-8240-6024e352ce0c_DBVn",,,,,,,,SWITCH,"94a134a2-f4ca-460c-8bd0-84465fdfead5","10.10.145.72","Catalyst 2960S","MIS-IMAGING-Sw2960.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f2aa2963-5e66-4942-8240-6024e352ce0c",IDS,22,"[ - ""open_port_22"" -]","10.10.145.72",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:55.985 PM",,"10.20.47.3","10.10.141.95",TCP,"e6f2b745-fa8e-47e5-9829-4e94a434f9a2_DBVn",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e6f2b745-fa8e-47e5-9829-4e94a434f9a2",IDS,22,"[ - ""open_port_22"" -]","10.20.47.3",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:53.603 PM",,"10.10.176.242","10.10.141.95",TCP,"a2abaa0f-59ce-4bf3-aa56-d61b57a174e5_DBVn",,,,,,,,SWITCH,"50310ff2-90c7-46d0-9e4c-932d65b2c23d","10.10.176.242","Cisco Catalyst Switch","1350-SEliseo-Ste120-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a2abaa0f-59ce-4bf3-aa56-d61b57a174e5",IDS,22,"[ - ""open_port_22"" -]","10.10.176.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:51.293 PM",,"10.10.145.18","10.10.141.95",TCP,"527b448f-1805-4a3d-8f88-a7c61e986327_DBVn",,,,,,,,SWITCH,"9eb7d56e-0e51-47c2-b53a-dda89d661e44","10.10.145.18","Cisco Catalyst Switch","Lobby-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","527b448f-1805-4a3d-8f88-a7c61e986327",IDS,22,"[ - ""open_port_22"" -]","10.10.145.18",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:49.058 PM",,"10.20.127.2","10.10.141.95",TCP,"5ac437dd-b38b-48aa-9da2-fa89dbc9b3d9_DBVn",,,,,,,,SWITCH,"33145016-7192-4675-9a7c-ca39cc128f9d","10.20.127.2","Cisco Catalyst Switch","1350-SEliseo-Ste300-48",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5ac437dd-b38b-48aa-9da2-fa89dbc9b3d9",IDS,22,"[ - ""open_port_22"" -]","10.20.127.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:49.053 PM",,"10.10.220.136","10.10.141.95",TCP,"082b91c1-0fd8-4c74-b024-e34a01d4be38_DBVn",,,,,,,,SWITCH,"77e1d12c-3d43-4318-a5a1-82548d8b12d4","10.10.220.136","Catalyst 2960S","2BonAir-C2960-144-SW-VoIP.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","082b91c1-0fd8-4c74-b024-e34a01d4be38",IDS,22,"[ - ""open_port_22"" -]","10.10.220.136",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:45.261 PM",,"10.10.162.100","10.10.141.95",TCP,"122ec98b-bb59-47d3-8b4c-8d6f6fb52b08_DBVn",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","122ec98b-bb59-47d3-8b4c-8d6f6fb52b08",IDS,22,"[ - ""open_port_22"" -]","10.10.162.100",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:44.431 PM",,"10.10.145.23","10.10.141.95",TCP,"cc861e49-2aac-4697-b026-591c9b5f8b94_DBVn",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","cc861e49-2aac-4697-b026-591c9b5f8b94",IDS,22,"[ - ""open_port_22"" -]","10.10.145.23",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:44.426 PM",,"10.10.220.135","10.10.141.95",TCP,"453657cd-c580-4aff-8fce-abe7deb77f9b_DBVn",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","453657cd-c580-4aff-8fce-abe7deb77f9b",IDS,22,"[ - ""open_port_22"" -]","10.10.220.135",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:40.905 PM",,"10.10.232.242","10.10.141.95",TCP,"711b1d0b-9bc6-4c90-9a20-762c61f555cf_DBVn",,,,,,,,SWITCH,"d35ffa2a-aed1-4e33-a316-59c02553750d","10.10.232.242","Cisco Catalyst Switch","75Rowl140-c3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","711b1d0b-9bc6-4c90-9a20-762c61f555cf",IDS,22,"[ - ""open_port_22"" -]","10.10.232.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:36.907 PM",,"10.10.145.86","10.10.141.95",TCP,"ec7d09d1-9be7-46b2-a202-440437e57694_DBVn",,,,,,,,SWITCH,"48dcdb84-2dc9-4136-a140-04ff36f0f83e","10.10.145.86","Catalyst 2960S","MIS-C2960S-IMG-SW-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ec7d09d1-9be7-46b2-a202-440437e57694",IDS,22,"[ - ""open_port_22"" -]","10.10.145.86",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:36.902 PM",,"10.10.145.6","10.10.141.95",TCP,"283a8e25-4c99-4d58-ac22-d363aa803d29_DBVn",,,,,,,,SWITCH,"26531e3f-80f0-401e-aed6-8cd9fcf1fc74","10.10.145.6","Cisco Catalyst Switch","3West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","283a8e25-4c99-4d58-ac22-d363aa803d29",IDS,22,"[ - ""open_port_22"" -]","10.10.145.6",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:33.350 PM",,"10.10.145.16","10.10.141.95",TCP,"310bee02-aeb6-441f-b705-41ec16b8885c_DBVn",,,,,,,,SWITCH,"2e9e4ef4-57d3-4ac9-8a40-1158265b2a71","10.10.145.16","Cisco Catalyst Switch","4West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","310bee02-aeb6-441f-b705-41ec16b8885c",IDS,22,"[ - ""open_port_22"" -]","10.10.145.16",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:30.510 PM",,"10.10.236.135","10.10.141.95",TCP,"981cc0c9-360b-4c98-9370-a406b148295c_DBVn",,,,,,,,SWITCH,"a24e4477-e641-4e07-bbea-a7be77fc2f78","10.10.236.135","Catalyst 2960S","Civic-C2960-144-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","981cc0c9-360b-4c98-9370-a406b148295c",IDS,22,"[ - ""open_port_22"" -]","10.10.236.135",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:30.507 PM",,"10.10.228.2","10.10.141.95",TCP,"97eb21f7-d374-4984-a261-37794b1be839_DBVn",,,,,,,,SWITCH,"15358dc2-070d-42b8-957d-fc0537790e77","10.10.228.2","Cisco Catalyst Switch","75Rowl201-C3850-144-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","97eb21f7-d374-4984-a261-37794b1be839",IDS,22,"[ - ""open_port_22"" -]","10.10.228.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:30.502 PM",,"10.20.253.2","10.10.141.95",TCP,"febb64d9-1cca-483f-8d9b-c9a264308c7c_DBVn",,,,,,,,SWITCH,"fc28d091-4906-4e1d-97bd-eabbe7538de0","10.20.253.2","Cisco Catalyst Switch","4000Civic-206_209-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","febb64d9-1cca-483f-8d9b-c9a264308c7c",IDS,22,"[ - ""open_port_22"" -]","10.20.253.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:24.801 PM",,"10.10.145.4","10.10.141.95",TCP,"8e7058e8-17b6-4893-9c69-35ca66ea8ea7_DBVn",,,,,,,,SWITCH,"a4d28bc4-9482-4924-8423-aa8868def9f4","10.10.145.4","Cisco Catalyst Switch","3Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8e7058e8-17b6-4893-9c69-35ca66ea8ea7",IDS,22,"[ - ""open_port_22"" -]","10.10.145.4",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:20.932 PM",,"10.10.145.9","10.10.141.95",TCP,"2c743081-804d-4215-944a-8f9cbc7a0043_DBVn",,,,,,,,SWITCH,"96372eef-9a67-4ff6-9520-4851e58e02a9","10.10.145.9","Cisco Catalyst Switch","4Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2c743081-804d-4215-944a-8f9cbc7a0043",IDS,22,"[ - ""open_port_22"" -]","10.10.145.9",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:18.505 PM",,"10.10.145.12","10.10.141.95",TCP,"ff4e8a8c-0c69-4d64-b6b2-f901375b47ea_DBVn",,,,,,,,SWITCH,"f2546184-1d38-4ca3-b3df-5d3149599087","10.10.145.12","Cisco Catalyst Switch","5Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ff4e8a8c-0c69-4d64-b6b2-f901375b47ea",IDS,22,"[ - ""open_port_22"" -]","10.10.145.12",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:18.500 PM",,"10.20.95.2","10.10.141.95",TCP,"4d8d1a9a-6ebd-4b99-9dea-142d51971d25_DBVn",,,,,,,,SWITCH,"b0ae69b1-9c48-4b75-b021-9bffb0112314","10.20.95.2","Cisco Catalyst Switch","1100Larkspur-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4d8d1a9a-6ebd-4b99-9dea-142d51971d25",IDS,22,"[ - ""open_port_22"" -]","10.20.95.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:18.492 PM",,"10.10.200.40","10.10.141.95",TCP,"caf0da73-bdce-4492-968d-6d19fdedb6c5_DBVn",,,,,,,,SWITCH,"22f915b2-3162-4581-8949-67c0c270d617","10.10.200.40","Cisco Catalyst Switch","100ADrakes140-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","caf0da73-bdce-4492-968d-6d19fdedb6c5",IDS,22,"[ - ""open_port_22"" -]","10.10.200.40",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:13.595 PM",,"10.10.190.7","10.10.141.95",TCP,"4c60e17a-dcce-47da-a8ec-9f5af1a51352_DBVn",,,,,,,,SWITCH,"b5658de0-e0eb-48b0-8e9c-a30f74b0defa","10.10.190.7","Cisco Catalyst Switch","1240Eliseo-C3850-120-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4c60e17a-dcce-47da-a8ec-9f5af1a51352",IDS,22,"[ - ""open_port_22"" -]","10.10.190.7",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:09.641 PM",,"10.10.145.7","10.10.141.95",TCP,"310f0fa4-b744-49c6-89ad-c11fcb3f24e4_DBVn",,,,,,,,SWITCH,"d10a1c72-257a-4780-a790-1622d394f41f","10.10.145.7","Cisco Catalyst Switch","1West-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","310f0fa4-b744-49c6-89ad-c11fcb3f24e4",IDS,22,"[ - ""open_port_22"" -]","10.10.145.7",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:07.275 PM",,"10.20.109.10","10.10.141.95",TCP,"d08ae7a0-6718-4c05-bfa4-e30152586ab2_DBVn",,,,,,,,SWITCH,"af1b7d9a-62cb-4d32-8ef7-308790e6b055","10.20.109.10","Cisco Catalyst Switch","4000Civic-200B-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d08ae7a0-6718-4c05-bfa4-e30152586ab2",IDS,22,"[ - ""open_port_22"" -]","10.20.109.10",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:04.977 PM",,"10.10.145.10","10.10.141.95",TCP,"23a551e2-da2a-4c92-b080-803b7974fd60_DBVn",,,,,,,,SWITCH,"224fb103-7597-4c4e-b872-480f8b940e9b","10.10.145.10","Cisco Catalyst Switch","4West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","23a551e2-da2a-4c92-b080-803b7974fd60",IDS,22,"[ - ""open_port_22"" -]","10.10.145.10",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:03.291 PM",,"10.10.236.133","10.10.141.95",TCP,"236f5c16-4626-479d-8e73-82d1ea6659a9_DBVn",,,,,,,,SWITCH,"bbf9a2b1-c8a4-4001-ae1f-fb3577c4c5d7","10.10.236.133","Cisco Catalyst Switch","Civic-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","236f5c16-4626-479d-8e73-82d1ea6659a9",IDS,22,"[ - ""open_port_22"" -]","10.10.236.133",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:59.393 PM",,"10.20.109.2","10.10.141.95",TCP,"38a9137e-84cf-4b5e-b392-8b324628f559_DBVn",,,,,,,,SWITCH,"766a3b0a-8973-449c-8468-3409cf2a48e4","10.20.109.2","Cisco Catalyst Switch","4000Civic-205-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","38a9137e-84cf-4b5e-b392-8b324628f559",IDS,22,"[ - ""open_port_22"" -]","10.20.109.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:56.983 PM",,"10.10.145.92","10.10.141.95",TCP,"f341775a-97c8-4790-b959-2059145da939_DBVn",,,,,,,,SWITCH,"ede79008-7959-4b40-80f5-4e8d30d99303","10.10.145.92","Catalyst 2960S","RMT2960-48-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f341775a-97c8-4790-b959-2059145da939",IDS,22,"[ - ""open_port_22"" -]","10.10.145.92",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:55.267 PM",,"10.10.145.24","10.10.141.95",TCP,"da09153b-97b4-4812-80f4-b713e5c4eeba_DBVn",,,,,,,,SWITCH,"93bd2053-bd4c-4206-ac17-9f09fb17a866","10.10.145.24","Cisco Catalyst Switch","2Central-C3850-192-SW02.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","da09153b-97b4-4812-80f4-b713e5c4eeba",IDS,22,"[ - ""open_port_22"" -]","10.10.145.24",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:52.508 PM",,"10.10.185.2","10.10.141.95",TCP,"1bfbba3d-7851-4357-a93e-9031036587c2_DBVn",,,,,,,,SWITCH,"8c31c8a3-cc71-4506-9656-d6e947c78ee3","10.10.185.2","Cisco Catalyst Switch","1350-SEliseo-C3850-144.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1bfbba3d-7851-4357-a93e-9031036587c2",IDS,22,"[ - ""open_port_22"" -]","10.10.185.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:50.882 PM",,"10.10.145.96","10.10.141.95",TCP,"84d8a5f7-bbc4-4d27-a3c5-653433d6b489_DBVn",,,,,,,,SWITCH,"ab5d1d34-dea3-459d-b30b-adcfaf6f380c","10.10.145.96","Catalyst 2960S","SPC2960-24-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","84d8a5f7-bbc4-4d27-a3c5-653433d6b489",IDS,22,"[ - ""open_port_22"" -]","10.10.145.96",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:49.343 PM",,"10.10.145.67","10.10.141.95",TCP,"43c51cd9-bbb2-4ecf-8db1-b209cb6ab573_DBVn",,,,,,,,SWITCH,"99b4a085-5f3b-4f77-94d2-d75e9814254b","10.10.145.67","Catalyst 3850-48U","MGH-Internet-AGG-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","43c51cd9-bbb2-4ecf-8db1-b209cb6ab573",IDS,22,"[ - ""open_port_22"" -]","10.10.145.67",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:11.719 PM",,"10.10.142.51","10.50.149.33",TCP,"88ca988e-99ea-4722-95c1-2b686d5d8c89_PPQO",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.33","Source IP: 10.50.149.33, Port: 3389","88ca988e-99ea-4722-95c1-2b686d5d8c89",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.10.142.51",Low,"1679592682.48408","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:23:03.004 PM",,"10.50.145.5","10.10.141.95",TCP,"dcc87832-927d-4472-a9f5-0af6d1244b59_ScAl",,,,,,,,SWITCH,"8a732210-2406-4ef0-a9a2-ae5d23cd8d98","10.50.145.5","Cisco Catalyst Switch","MH-3850-B561-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dcc87832-927d-4472-a9f5-0af6d1244b59",IDS,22,"[ - ""open_port_22"" -]","10.50.145.5",Low,"1679591432.48027","SSH Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:22:59.179 PM",,"10.50.132.69","10.50.149.56",UDP,"4e842bf1-1fa3-4e59-b6e2-21a011c72127_ScAl",,,,,,,,CAD,"c9b57a7d-0178-448f-a764-9dde70789592","10.50.132.69",DynaCAD,"VM-PACSRAD25",CAD,CAD,"10.50.149.56","Source IP: 10.50.149.56, Port: 3389","4e842bf1-1fa3-4e59-b6e2-21a011c72127",IDS,3389,"[ - ""CVE-2019-1181"", - ""CVE-2019-1182"", - ""CVE-2019-0708"", - ""open_port_3389"" -]","10.50.132.69",Low,"1679591432.48027","RDP Connection","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:14:01.759 PM",,,,,"9f46a04c-347b-4057-95d7-c30382572523_x+r7",,,,Chrome,"www.google.com",,,CAD,"1433419d-54ed-4ac9-a55c-b78b480b7caf","10.50.163.37",DynaCAD,"MGH-MAMWS03",CAD,CAD,"10.50.163.37","Browser: Chrome, Host: www.google.com, IP: 142.251.32.36","9f46a04c-347b-4057-95d7-c30382572523",IDS,80,"[ - ""web_browsing"" -]","142.251.32.36",Medium,"1679593174.31044","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:11:20.335 PM",,,,,"3c4a7499-64b6-4ae1-a197-bea44603ca8e_Ylf3",,,,Firefox,"r3.o.lencr.org.x.e4d062fe031b704e770a8c103460a210b436.9270f74f.id.opendns.com",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: r3.o.lencr.org.x.e4d062fe031b704e770a8c103460a210b436.9270f74f.id.opendns.com, IP: 146.112.247.79","3c4a7499-64b6-4ae1-a197-bea44603ca8e",IDS,80,"[ - ""web_browsing"" -]","146.112.247.79",Medium,"1679593006.03105","Internet Browsing","CynerioEvent_CL", -"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:10:37.757 PM",,"10.10.162.150","10.10.141.95",TCP,"c7f53047-3f9a-4835-89fd-aad0746e909f_Hf4U",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","c7f53047-3f9a-4835-89fd-aad0746e909f",IDS,22,"[ - ""open_port_22"" -]","10.10.162.150",Low,"1679590947.22307","SSH Connection","CynerioEvent_CL", +TenantId,SourceSystem,MG,ManagementGroupName,"TimeGenerated [UTC]",Computer,RawData,"date_t [UTC]","asset_id_s","dst_ip_s","src_ip_s","trans_s","uid_s","service_s","new_status_s","risk_name_s","browser_s","host_s",Severity,"status_code_s","asset_asset_type_code_s","asset_id_g","asset_ip_s","asset_model_s","asset_name_s","asset_type_s","asset_type_code_s","client_ip_s","details_s","id_g","module_s","port_d","related_risks_s","server_ip_s","severity_s","timestamp_d","title_s",Type,"_ResourceId" +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:12.229 AM",,"10.10.220.135","10.10.96.151",TCP,"abade7ae-ea81-49f9-ad50-3c54beb9f76a_vEc7",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.96.151","Source IP: 10.10.96.151, Port: 22","abade7ae-ea81-49f9-ad50-3c54beb9f76a",IDS,22,"[ + ""open_port_22"" +]","10.10.220.135",Low,"1679784967.20368","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:12.182 AM",,"10.20.10.194","10.50.132.51",TCP,"72c70e13-c865-426f-a890-cee4e49eeaa1_2TjF",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.50.132.51","Source IP: 10.50.132.51, Port: 22","72c70e13-c865-426f-a890-cee4e49eeaa1",IDS,22,"[ + ""open_port_22"" +]","10.20.10.194",Low,"1679784057.22115","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:11.494 AM",,"10.20.191.2","10.50.132.51",TCP,"4d929a98-af87-4040-b4e9-80f1c701c823_zPHT",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.50.132.51","Source IP: 10.50.132.51, Port: 22","4d929a98-af87-4040-b4e9-80f1c701c823",IDS,22,"[ + ""open_port_22"" +]","10.20.191.2",Low,"1679783907.22084","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:10:10.843 AM",,"10.20.10.194","10.10.96.151",TCP,"f31c3dda-f08e-4d89-92b8-29a760a846c8_gtvI",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.96.151","Source IP: 10.10.96.151, Port: 22","f31c3dda-f08e-4d89-92b8-29a760a846c8",IDS,22,"[ + ""open_port_22"" +]","10.20.10.194",Low,"1679783552.21626","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:18.690 AM",,,,,"c058b4d9-0f64-4d25-b0e7-6c535021ca47_kNcO",,,,Firefox,"r3.o.lencr.org.x.799a6ce10f037048820836f0e5e73ee83d55.9270f751.id.opendns.com",,,PACS,"9edd7e38-420b-4630-857d-8fc6cf122104","10.10.141.126","McKesson Radiology 12.3","ALI_QUERY_SCP","PACS Server",PACS,"10.10.141.126","Browser: Firefox, Host: r3.o.lencr.org.x.799a6ce10f037048820836f0e5e73ee83d55.9270f751.id.opendns.com, IP: 146.112.247.81","c058b4d9-0f64-4d25-b0e7-6c535021ca47",IDS,80,"[ + ""web_browsing"" +]","146.112.247.81",Medium,"1679779320.67634","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.629 AM",,"10.10.162.100","10.10.141.95",TCP,"152ebadb-8b36-4c0c-866f-c9bbfd6b0681_oPUc",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","152ebadb-8b36-4c0c-866f-c9bbfd6b0681",IDS,22,"[ + ""open_port_22"" +]","10.10.162.100",Low,"1679772672.20545","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:16.614 AM",,"10.10.162.150","10.10.141.95",TCP,"a2f623dd-d5ac-4439-b515-9f52faab5026_oehO",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","a2f623dd-d5ac-4439-b515-9f52faab5026",IDS,22,"[ + ""open_port_22"" +]","10.10.162.150",Low,"1679772552.22504","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.693 AM",,"10.10.145.26","10.10.141.95",TCP,"906baa53-da3e-4aa0-b83d-88094a067e6d_wcXP",,,,,,,,SWITCH,"63f72b58-a0f8-4a58-a02f-7b26e9fd4b82","10.10.145.26","Cisco Catalyst Switch","MHB-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","906baa53-da3e-4aa0-b83d-88094a067e6d",IDS,22,"[ + ""open_port_22"" +]","10.10.145.26",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.690 AM",,"10.10.145.18","10.10.141.95",TCP,"d7fa37d9-e602-4394-a223-40a2f23a9ea9_wcXP",,,,,,,,SWITCH,"9eb7d56e-0e51-47c2-b53a-dda89d661e44","10.10.145.18","Cisco Catalyst Switch","Lobby-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d7fa37d9-e602-4394-a223-40a2f23a9ea9",IDS,22,"[ + ""open_port_22"" +]","10.10.145.18",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.688 AM",,"10.10.236.129","10.10.141.95",TCP,"6ac74f1d-ea07-42b8-b24c-1884178afbe5_wcXP",,,,,,,,SWITCH,"83d04833-bc04-4e98-b2d7-8eab6c2700ad","10.10.236.129","Catalyst 3750X-24P-E","WS-C3750X-24P-E",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6ac74f1d-ea07-42b8-b24c-1884178afbe5",IDS,22,"[ + ""open_port_22"" +]","10.10.236.129",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.685 AM",,"10.10.145.23","10.10.141.95",TCP,"3ed38082-54cc-4ffb-b411-55e7658b6590_wcXP",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3ed38082-54cc-4ffb-b411-55e7658b6590",IDS,22,"[ + ""open_port_22"" +]","10.10.145.23",Low,"1679770457.2094","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:08.599 AM",,"10.10.162.200","10.10.141.95",TCP,"b3baf936-60ec-4e8f-9cc7-fd7c1b18b439_lyu5",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","b3baf936-60ec-4e8f-9cc7-fd7c1b18b439",IDS,22,"[ + ""open_port_22"" +]","10.10.162.200",Low,"1679770377.22099","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.934 AM",,"10.10.162.100","10.10.141.95",TCP,"e8f38eb2-b11b-4fae-a2e4-a36634405f74_dluG",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","e8f38eb2-b11b-4fae-a2e4-a36634405f74",IDS,22,"[ + ""open_port_22"" +]","10.10.162.100",Low,"1679768157.2228","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.686 AM",,"10.10.195.140","10.10.141.95",TCP,"22b01640-d05f-4af7-9654-3815fb66a8fd_FxCX",,,,,,,,SWITCH,"715a7bff-b86b-40c1-b290-a1d910333551","10.10.195.140","Catalyst 2960S","1100Eliseo2960-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","22b01640-d05f-4af7-9654-3815fb66a8fd",IDS,22,"[ + ""open_port_22"" +]","10.10.195.140",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.682 AM",,"10.10.194.197","10.10.141.95",TCP,"2892f381-993f-46a6-82bd-7d676834a9c4_FxCX",,,,,,,,SWITCH,"6baf1025-8db2-4587-9f69-6929859d7c8e","10.10.194.197","Cisco Catalyst Switch","1260SEliseo-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2892f381-993f-46a6-82bd-7d676834a9c4",IDS,22,"[ + ""open_port_22"" +]","10.10.194.197",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.680 AM",,"10.10.228.137","10.10.141.95",TCP,"2e25eae3-c471-4f16-a580-72ff5b38811d_FxCX",,,,,,,,SWITCH,"e396e00b-66bc-4c90-9e22-8f219807c304","10.10.228.137","Cisco Catalyst Switch","75Rowl101-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2e25eae3-c471-4f16-a580-72ff5b38811d",IDS,22,"[ + ""open_port_22"" +]","10.10.228.137",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.617 AM",,"10.20.10.194","10.10.141.95",TCP,"e9ec6589-4394-4b07-81a0-1db04b1f4035_FxCX",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e9ec6589-4394-4b07-81a0-1db04b1f4035",IDS,22,"[ + ""open_port_22"" +]","10.20.10.194",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.614 AM",,"10.20.22.194","10.10.141.95",TCP,"a7c94b2a-37a6-4ef7-b98e-8db8078d2c3c_FxCX",,,,,,,,SWITCH,"59c8bdf1-0863-428a-9898-d5827f1c9a42","10.20.22.194","Cisco Catalyst Switch","1341Eliseo-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a7c94b2a-37a6-4ef7-b98e-8db8078d2c3c",IDS,22,"[ + ""open_port_22"" +]","10.20.22.194",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.611 AM",,"10.10.145.85","10.10.141.95",TCP,"882d63a7-afa3-489e-95b8-69a35c24fa58_FxCX",,,,,,,,SWITCH,"46079d19-5c75-4342-a79e-012112c3124c","10.10.145.85","Cisco Catalyst Switch","MIS-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","882d63a7-afa3-489e-95b8-69a35c24fa58",IDS,22,"[ + ""open_port_22"" +]","10.10.145.85",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.609 AM",,"10.10.220.136","10.10.141.95",TCP,"24968e8f-8591-471c-90ba-bd021646a01e_FxCX",,,,,,,,SWITCH,"77e1d12c-3d43-4318-a5a1-82548d8b12d4","10.10.220.136","Catalyst 2960S","2BonAir-C2960-144-SW-VoIP.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","24968e8f-8591-471c-90ba-bd021646a01e",IDS,22,"[ + ""open_port_22"" +]","10.10.220.136",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.606 AM",,"10.10.220.135","10.10.141.95",TCP,"374f539b-5fd6-4ce3-a1ea-1e3812e2f712_FxCX",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","374f539b-5fd6-4ce3-a1ea-1e3812e2f712",IDS,22,"[ + ""open_port_22"" +]","10.10.220.135",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.604 AM",,"10.10.236.135","10.10.141.95",TCP,"400632e8-0e80-4e3c-b9f2-e046ce896d78_FxCX",,,,,,,,SWITCH,"a24e4477-e641-4e07-bbea-a7be77fc2f78","10.10.236.135","Catalyst 2960S","Civic-C2960-144-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","400632e8-0e80-4e3c-b9f2-e046ce896d78",IDS,22,"[ + ""open_port_22"" +]","10.10.236.135",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.602 AM",,"10.20.253.2","10.10.141.95",TCP,"04a57b5e-2398-47d9-8871-f0dc0b789332_FxCX",,,,,,,,SWITCH,"fc28d091-4906-4e1d-97bd-eabbe7538de0","10.20.253.2","Cisco Catalyst Switch","4000Civic-206_209-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","04a57b5e-2398-47d9-8871-f0dc0b789332",IDS,22,"[ + ""open_port_22"" +]","10.20.253.2",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.595 AM",,"10.10.145.9","10.10.141.95",TCP,"7177ab61-6fcc-4e48-a9ed-273558b53986_FxCX",,,,,,,,SWITCH,"96372eef-9a67-4ff6-9520-4851e58e02a9","10.10.145.9","Cisco Catalyst Switch","4Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7177ab61-6fcc-4e48-a9ed-273558b53986",IDS,22,"[ + ""open_port_22"" +]","10.10.145.9",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.592 AM",,"10.10.145.12","10.10.141.95",TCP,"a5a7a605-6f2b-48ad-847c-b4625cf6613b_FxCX",,,,,,,,SWITCH,"f2546184-1d38-4ca3-b3df-5d3149599087","10.10.145.12","Cisco Catalyst Switch","5Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a5a7a605-6f2b-48ad-847c-b4625cf6613b",IDS,22,"[ + ""open_port_22"" +]","10.10.145.12",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.589 AM",,"10.10.145.10","10.10.141.95",TCP,"e33590b6-2be6-4fac-a970-4b83a9e617a1_FxCX",,,,,,,,SWITCH,"224fb103-7597-4c4e-b872-480f8b940e9b","10.10.145.10","Cisco Catalyst Switch","4West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e33590b6-2be6-4fac-a970-4b83a9e617a1",IDS,22,"[ + ""open_port_22"" +]","10.10.145.10",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.587 AM",,"10.10.236.133","10.10.141.95",TCP,"6c0bd7de-7741-499d-aca2-10f7411c0940_FxCX",,,,,,,,SWITCH,"bbf9a2b1-c8a4-4001-ae1f-fb3577c4c5d7","10.10.236.133","Cisco Catalyst Switch","Civic-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6c0bd7de-7741-499d-aca2-10f7411c0940",IDS,22,"[ + ""open_port_22"" +]","10.10.236.133",Low,"1679767617.20487","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.216 AM",,"10.20.21.194","10.10.141.95",TCP,"13d08777-f3bc-417d-937b-a60f4de45df7_npP7",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","13d08777-f3bc-417d-937b-a60f4de45df7",IDS,22,"[ + ""open_port_22"" +]","10.20.21.194",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.213 AM",,"10.10.16.137","10.10.141.95",TCP,"bcd699c0-ba5e-4c21-a75b-9dbdda5ee704_npP7",,,,,,,,SWITCH,"6a24443b-1074-4bd1-9d89-65ce807c6843","10.10.16.137","Catalyst 3850-48U","INT-OAK-DMZ",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bcd699c0-ba5e-4c21-a75b-9dbdda5ee704",IDS,22,"[ + ""open_port_22"" +]","10.10.16.137",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.207 AM",,"10.20.191.2","10.10.141.95",TCP,"09305c89-1571-481e-a3e2-5c3d3c415f56_npP7",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","09305c89-1571-481e-a3e2-5c3d3c415f56",IDS,22,"[ + ""open_port_22"" +]","10.20.191.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.205 AM",,"10.19.88.2","10.10.141.95",TCP,"0edee75f-f4e5-4b53-8c5c-2131e7deef7c_npP7",,,,,,,,SWITCH,"393404cc-a097-4a18-8aa4-1f17f2128ea5","10.19.88.2","Cisco Catalyst Switch","75Rowl220-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0edee75f-f4e5-4b53-8c5c-2131e7deef7c",IDS,22,"[ + ""open_port_22"" +]","10.19.88.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.202 AM",,"10.19.56.2","10.10.141.95",TCP,"0faa1582-7012-433e-8eb1-b7d9e5861cc6_npP7",,,,,,,,SWITCH,"c1aa2466-7676-4798-a7a6-53b59d77ca89","10.19.56.2","Cisco Catalyst Switch","1701FourthSt-120-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0faa1582-7012-433e-8eb1-b7d9e5861cc6",IDS,22,"[ + ""open_port_22"" +]","10.19.56.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.199 AM",,"10.10.184.194","10.10.141.95",TCP,"f22032ba-f6e9-48ff-8791-a51292a6c790_npP7",,,,,,,,SWITCH,"7761f73d-0382-45ed-b9fb-7a104cb390f5","10.10.184.194","Cisco Catalyst Switch","1350-SEliseo-STE130-48.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f22032ba-f6e9-48ff-8791-a51292a6c790",IDS,22,"[ + ""open_port_22"" +]","10.10.184.194",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:07.196 AM",,"10.19.103.2","10.10.141.95",TCP,"e507f080-93ca-4632-8aca-a83f09c06c54_npP7",,,,,,,,SWITCH,"34565923-0f93-4aec-b330-dc2ec5c5c91b","10.19.103.2","Cisco Catalyst Switch","4000Civic-202-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e507f080-93ca-4632-8aca-a83f09c06c54",IDS,22,"[ + ""open_port_22"" +]","10.19.103.2",Low,"1679766502.20598","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.683 AM",,"10.10.20.100","10.10.141.95",TCP,"bb469a52-94b9-4c71-b79f-f80eea778fa8_uZrR",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bb469a52-94b9-4c71-b79f-f80eea778fa8",IDS,22,"[ + ""open_port_22"" +]","10.10.20.100",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.680 AM",,"10.10.204.12","10.10.141.95",TCP,"086132e1-b5a1-4295-b9ee-ecbc109aba84_uZrR",,,,,,,,SWITCH,"690a3cc5-7b90-4bf7-b2b4-4a99883c680f","10.10.204.12","Cisco Catalyst Switch","MH-Phlps-3101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","086132e1-b5a1-4295-b9ee-ecbc109aba84",IDS,22,"[ + ""open_port_22"" +]","10.10.204.12",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.621 AM",,"10.20.47.2","10.10.141.95",TCP,"ac2ccb42-10c0-4f0a-92d8-34ef68144529_uZrR",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ac2ccb42-10c0-4f0a-92d8-34ef68144529",IDS,22,"[ + ""open_port_22"" +]","10.20.47.2",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.618 AM",,"10.10.145.67","10.10.141.95",TCP,"a3039609-9682-4811-adfb-f837f8764cb9_uZrR",,,,,,,,SWITCH,"99b4a085-5f3b-4f77-94d2-d75e9814254b","10.10.145.67","Catalyst 3850-48U","MGH-Internet-AGG-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a3039609-9682-4811-adfb-f837f8764cb9",IDS,22,"[ + ""open_port_22"" +]","10.10.145.67",Low,"1679765272.20555","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.478 AM",,"10.10.178.242","10.10.141.95",TCP,"74613d87-ac7d-4d1e-bf88-6414b6270641_y1BI",,,,,,,,SWITCH,"00365818-9730-4f67-af78-d2b4242bf75c","10.10.178.242","Cisco Catalyst Switch","1350-SEliseo-Ste220-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","74613d87-ac7d-4d1e-bf88-6414b6270641",IDS,22,"[ + ""open_port_22"" +]","10.10.178.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.414 AM",,"10.10.145.5","10.10.141.95",TCP,"8e0e1db5-bf65-448d-8a49-f831a889e168_y1BI",,,,,,,,SWITCH,"b188b718-611b-44dd-9de4-b220156dbe65","10.10.145.5","Catalyst 2960S","MGH-Engineering-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8e0e1db5-bf65-448d-8a49-f831a889e168",IDS,22,"[ + ""open_port_22"" +]","10.10.145.5",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.411 AM",,"10.10.145.25","10.10.141.95",TCP,"23c55c90-8a28-4a4a-a0f9-a055ce813dc2_y1BI",,,,,,,,SWITCH,"0337c96d-39f9-4c00-876f-06ac402fa0a3","10.10.145.25","Cisco Catalyst Switch","2Central-C3850-96-SW03.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","23c55c90-8a28-4a4a-a0f9-a055ce813dc2",IDS,22,"[ + ""open_port_22"" +]","10.10.145.25",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.408 AM",,"10.20.159.2","10.10.141.95",TCP,"7224d76b-3dea-4e81-acca-c2828d1e2da4_y1BI",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7224d76b-3dea-4e81-acca-c2828d1e2da4",IDS,22,"[ + ""open_port_22"" +]","10.20.159.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.405 AM",,"10.10.145.11","10.10.141.95",TCP,"47d36506-d403-4c64-bbee-7008777964de_y1BI",,,,,,,,SWITCH,"3e973541-e49d-4ae5-88d7-223f0a8933da","10.10.145.11","Cisco Catalyst Switch","2West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","47d36506-d403-4c64-bbee-7008777964de",IDS,22,"[ + ""open_port_22"" +]","10.10.145.11",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.403 AM",,"10.20.175.2","10.10.141.95",TCP,"664a5d59-d9ee-41ab-bf58-5f5d1b05cdfa_y1BI",,,,,,,,SWITCH,"8fad271e-115d-43f8-982f-ce1687063594","10.20.175.2","Cisco Catalyst Switch","PRIMA-100DRAKES-3850-STACK.maringeneral.",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","664a5d59-d9ee-41ab-bf58-5f5d1b05cdfa",IDS,22,"[ + ""open_port_22"" +]","10.20.175.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.400 AM",,"10.20.79.5","10.10.141.95",TCP,"3b3ad7d0-2879-483f-a4f4-f7bc13a02368_y1BI",,,,,,,,SWITCH,"8df37589-717b-49a5-979e-ec40ac93c229","10.20.79.5","Cisco Catalyst Switch","651FStSonoma-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3b3ad7d0-2879-483f-a4f4-f7bc13a02368",IDS,22,"[ + ""open_port_22"" +]","10.20.79.5",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.397 AM",,"10.20.207.2","10.10.141.95",TCP,"757609d5-af0d-4797-8936-172569af5d03_y1BI",,,,,,,,SWITCH,"0b4e943b-9635-4952-a6be-6ebcb969a459","10.20.207.2","Cisco Catalyst Switch","PRIMA-347Andrieux-c3850-48-SW.maringener",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","757609d5-af0d-4797-8936-172569af5d03",IDS,22,"[ + ""open_port_22"" +]","10.20.207.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.394 AM",,"10.10.145.15","10.10.141.95",TCP,"31eaeb10-9c2e-47d1-a7cd-481ac9175410_y1BI",,,,,,,,SWITCH,"8a336c51-448e-4b38-9ded-dda2b03fd1ba","10.10.145.15","Catalyst 3850-48P","3West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","31eaeb10-9c2e-47d1-a7cd-481ac9175410",IDS,22,"[ + ""open_port_22"" +]","10.10.145.15",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.390 AM",,"10.20.223.2","10.10.141.95",TCP,"dea91448-3c43-48d4-a7f1-5f132af6320d_y1BI",,,,,,,,SWITCH,"de343319-37ea-44ca-9586-073e119a4726","10.20.223.2","Cisco Catalyst Switch","PRIMA-1496Professional-c3850-48-SW.marin",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dea91448-3c43-48d4-a7f1-5f132af6320d",IDS,22,"[ + ""open_port_22"" +]","10.20.223.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.387 AM",,"10.10.145.8","10.10.141.95",TCP,"f8a86035-fad2-4fbd-9c8a-2c82214a0365_y1BI",,,,,,,,SWITCH,"785abf71-059b-4d14-bedc-485bf82e85ff","10.10.145.8","Cisco Catalyst Switch","1Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f8a86035-fad2-4fbd-9c8a-2c82214a0365",IDS,22,"[ + ""open_port_22"" +]","10.10.145.8",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.384 AM",,"10.10.236.136","10.10.141.95",TCP,"8797d149-36ef-4a73-bcfb-fe0d8b0dd82f_y1BI",,,,,,,,SWITCH,"c24cdf3c-7168-4cbb-8a9e-142c8afa8ed1","10.10.236.136","Catalyst 2960S","Civic-C2960-48-SW02",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8797d149-36ef-4a73-bcfb-fe0d8b0dd82f",IDS,22,"[ + ""open_port_22"" +]","10.10.236.136",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.381 AM",,"10.20.30.242","10.10.141.95",TCP,"fd473041-a1a5-4c8c-b6d6-371013ef458e_y1BI",,,,,,,,SWITCH,"716f2c3f-a88c-4c91-aab5-b9aa32edf877","10.20.30.242","Cisco Catalyst Switch","75Rowl250-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fd473041-a1a5-4c8c-b6d6-371013ef458e",IDS,22,"[ + ""open_port_22"" +]","10.20.30.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.307 AM",,"10.20.62.5","10.10.141.95",TCP,"17cd7a21-1772-436c-a548-18709452db41_y1BI",,,,,,,,SWITCH,"5a9c7ddb-8484-4e3e-a560-85eb3f884cb3","10.20.62.5","Cisco Catalyst Switch","900SEliseo201-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","17cd7a21-1772-436c-a548-18709452db41",IDS,22,"[ + ""open_port_22"" +]","10.20.62.5",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.304 AM",,"10.20.143.2","10.10.141.95",TCP,"0e667531-09df-469e-b1e1-a32645c7f880_y1BI",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0e667531-09df-469e-b1e1-a32645c7f880",IDS,22,"[ + ""open_port_22"" +]","10.20.143.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.301 AM",,"10.10.145.87","10.10.141.95",TCP,"95353e6e-63de-4142-8a17-37f274d993a3_y1BI",,,,,,,,SWITCH,"5bdb5c80-de6b-4609-954b-edbbb0ec300c","10.10.145.87","Catalyst 2960S","MIS-C2960S-IMG-SW-2.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","95353e6e-63de-4142-8a17-37f274d993a3",IDS,22,"[ + ""open_port_22"" +]","10.10.145.87",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.298 AM",,"10.10.204.2","10.10.141.95",TCP,"db3b8966-d64c-426d-b489-13475d274638_y1BI",,,,,,,,SWITCH,"9cc0363a-1448-4b03-877b-c743e4edbc11","10.10.204.2","Cisco Catalyst Switch","MH-Phlps-6-A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","db3b8966-d64c-426d-b489-13475d274638",IDS,22,"[ + ""open_port_22"" +]","10.10.204.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.296 AM",,"10.10.204.15","10.10.141.95",TCP,"c36fc62d-1f5e-4ebd-b2f7-343f4103807b_y1BI",,,,,,,,SWITCH,"669bc5d7-d785-40a5-a8f6-dd6bb0099ef1","10.10.204.15","Cisco Catalyst Switch","MH-Phlps-2101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c36fc62d-1f5e-4ebd-b2f7-343f4103807b",IDS,22,"[ + ""open_port_22"" +]","10.10.204.15",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.293 AM",,"10.10.145.13","10.10.141.95",TCP,"392d625a-5399-4ea8-8e79-931a490fde16_y1BI",,,,,,,,SWITCH,"00bcead7-6eb2-427b-b74b-340afe6fb482","10.10.145.13","Catalyst 2960S","MDF-1-c2960-APC-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","392d625a-5399-4ea8-8e79-931a490fde16",IDS,22,"[ + ""open_port_22"" +]","10.10.145.13",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.290 AM",,"10.10.145.72","10.10.141.95",TCP,"6777c8ea-034f-4874-a94b-73d6689d73c0_y1BI",,,,,,,,SWITCH,"94a134a2-f4ca-460c-8bd0-84465fdfead5","10.10.145.72","Catalyst 2960S","MIS-IMAGING-Sw2960.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6777c8ea-034f-4874-a94b-73d6689d73c0",IDS,22,"[ + ""open_port_22"" +]","10.10.145.72",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.288 AM",,"10.10.176.242","10.10.141.95",TCP,"e41824dd-92f9-4a2a-a9c3-e76d00a6623c_y1BI",,,,,,,,SWITCH,"50310ff2-90c7-46d0-9e4c-932d65b2c23d","10.10.176.242","Cisco Catalyst Switch","1350-SEliseo-Ste120-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e41824dd-92f9-4a2a-a9c3-e76d00a6623c",IDS,22,"[ + ""open_port_22"" +]","10.10.176.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.286 AM",,"10.10.145.84","10.10.141.95",TCP,"820e90df-cd55-4be1-a7cb-5241bf3ac42d_y1BI",,,,,,,,SWITCH,"5aa02184-81ed-4365-b92b-53ccbb648102","10.10.145.84","Catalyst 3750-48PS-S","WS-C3750-48PS-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","820e90df-cd55-4be1-a7cb-5241bf3ac42d",IDS,22,"[ + ""open_port_22"" +]","10.10.145.84",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.283 AM",,"10.20.47.3","10.10.141.95",TCP,"12afd241-195e-4407-adb9-7c4c68e1e832_y1BI",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","12afd241-195e-4407-adb9-7c4c68e1e832",IDS,22,"[ + ""open_port_22"" +]","10.20.47.3",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:06.280 AM",,"10.20.127.2","10.10.141.95",TCP,"00fed70a-ba81-4ec7-b2e6-f01ab18c581c_y1BI",,,,,,,,SWITCH,"33145016-7192-4675-9a7c-ca39cc128f9d","10.20.127.2","Cisco Catalyst Switch","1350-SEliseo-Ste300-48",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","00fed70a-ba81-4ec7-b2e6-f01ab18c581c",IDS,22,"[ + ""open_port_22"" +]","10.20.127.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.689 AM",,"10.10.232.242","10.10.141.95",TCP,"773b8138-b4ff-4552-b4bb-de778268bb99_y1BI",,,,,,,,SWITCH,"d35ffa2a-aed1-4e33-a316-59c02553750d","10.10.232.242","Cisco Catalyst Switch","75Rowl140-c3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","773b8138-b4ff-4552-b4bb-de778268bb99",IDS,22,"[ + ""open_port_22"" +]","10.10.232.242",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.685 AM",,"10.10.145.6","10.10.141.95",TCP,"fd42dbce-6bec-4bbf-841f-57daba6fce7f_y1BI",,,,,,,,SWITCH,"26531e3f-80f0-401e-aed6-8cd9fcf1fc74","10.10.145.6","Cisco Catalyst Switch","3West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fd42dbce-6bec-4bbf-841f-57daba6fce7f",IDS,22,"[ + ""open_port_22"" +]","10.10.145.6",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.683 AM",,"10.10.145.4","10.10.141.95",TCP,"99712faa-83bf-4ed3-8b48-6b9ccd282ebf_y1BI",,,,,,,,SWITCH,"a4d28bc4-9482-4924-8423-aa8868def9f4","10.10.145.4","Cisco Catalyst Switch","3Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","99712faa-83bf-4ed3-8b48-6b9ccd282ebf",IDS,22,"[ + ""open_port_22"" +]","10.10.145.4",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.680 AM",,"10.10.228.2","10.10.141.95",TCP,"68ca4643-a67c-4344-8bd6-c9235b711e40_y1BI",,,,,,,,SWITCH,"15358dc2-070d-42b8-957d-fc0537790e77","10.10.228.2","Cisco Catalyst Switch","75Rowl201-C3850-144-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","68ca4643-a67c-4344-8bd6-c9235b711e40",IDS,22,"[ + ""open_port_22"" +]","10.10.228.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.631 AM",,"10.10.145.86","10.10.141.95",TCP,"e163e774-6848-44ba-bd63-d809fcfc27af_y1BI",,,,,,,,SWITCH,"48dcdb84-2dc9-4136-a140-04ff36f0f83e","10.10.145.86","Catalyst 2960S","MIS-C2960S-IMG-SW-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e163e774-6848-44ba-bd63-d809fcfc27af",IDS,22,"[ + ""open_port_22"" +]","10.10.145.86",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.629 AM",,"10.10.145.16","10.10.141.95",TCP,"63a9a8ef-123e-4c2b-89e4-ec56d3d9734d_y1BI",,,,,,,,SWITCH,"2e9e4ef4-57d3-4ac9-8a40-1158265b2a71","10.10.145.16","Cisco Catalyst Switch","4West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","63a9a8ef-123e-4c2b-89e4-ec56d3d9734d",IDS,22,"[ + ""open_port_22"" +]","10.10.145.16",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.625 AM",,"10.10.200.40","10.10.141.95",TCP,"41df7023-3d5d-4b63-89c9-9bff8bdc22c3_y1BI",,,,,,,,SWITCH,"22f915b2-3162-4581-8949-67c0c270d617","10.10.200.40","Cisco Catalyst Switch","100ADrakes140-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","41df7023-3d5d-4b63-89c9-9bff8bdc22c3",IDS,22,"[ + ""open_port_22"" +]","10.10.200.40",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.622 AM",,"10.20.95.2","10.10.141.95",TCP,"963990d2-3352-4a09-8f1a-5de1a05697d3_y1BI",,,,,,,,SWITCH,"b0ae69b1-9c48-4b75-b021-9bffb0112314","10.20.95.2","Cisco Catalyst Switch","1100Larkspur-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","963990d2-3352-4a09-8f1a-5de1a05697d3",IDS,22,"[ + ""open_port_22"" +]","10.20.95.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.618 AM",,"10.10.190.7","10.10.141.95",TCP,"63b3abf0-2ddb-4740-aec2-5f8dcf13ae10_y1BI",,,,,,,,SWITCH,"b5658de0-e0eb-48b0-8e9c-a30f74b0defa","10.10.190.7","Cisco Catalyst Switch","1240Eliseo-C3850-120-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","63b3abf0-2ddb-4740-aec2-5f8dcf13ae10",IDS,22,"[ + ""open_port_22"" +]","10.10.190.7",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.615 AM",,"10.10.145.7","10.10.141.95",TCP,"977ca915-8f68-4642-abe3-7ddb37a681fa_y1BI",,,,,,,,SWITCH,"d10a1c72-257a-4780-a790-1622d394f41f","10.10.145.7","Cisco Catalyst Switch","1West-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","977ca915-8f68-4642-abe3-7ddb37a681fa",IDS,22,"[ + ""open_port_22"" +]","10.10.145.7",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.613 AM",,"10.20.109.10","10.10.141.95",TCP,"f97c5911-2e51-423b-9230-85ce35e0e4cf_y1BI",,,,,,,,SWITCH,"af1b7d9a-62cb-4d32-8ef7-308790e6b055","10.20.109.10","Cisco Catalyst Switch","4000Civic-200B-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f97c5911-2e51-423b-9230-85ce35e0e4cf",IDS,22,"[ + ""open_port_22"" +]","10.20.109.10",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.610 AM",,"10.20.109.2","10.10.141.95",TCP,"f6851dfc-f269-4075-af3b-fee071fd48fb_y1BI",,,,,,,,SWITCH,"766a3b0a-8973-449c-8468-3409cf2a48e4","10.20.109.2","Cisco Catalyst Switch","4000Civic-205-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f6851dfc-f269-4075-af3b-fee071fd48fb",IDS,22,"[ + ""open_port_22"" +]","10.20.109.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.603 AM",,"10.10.145.24","10.10.141.95",TCP,"59bb3acb-7c4e-4701-b12a-99d628c86cc6_y1BI",,,,,,,,SWITCH,"93bd2053-bd4c-4206-ac17-9f09fb17a866","10.10.145.24","Cisco Catalyst Switch","2Central-C3850-192-SW02.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","59bb3acb-7c4e-4701-b12a-99d628c86cc6",IDS,22,"[ + ""open_port_22"" +]","10.10.145.24",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.593 AM",,"10.10.145.92","10.10.141.95",TCP,"93e20465-94a8-4497-93d5-c6c37ba24375_y1BI",,,,,,,,SWITCH,"ede79008-7959-4b40-80f5-4e8d30d99303","10.10.145.92","Catalyst 2960S","RMT2960-48-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","93e20465-94a8-4497-93d5-c6c37ba24375",IDS,22,"[ + ""open_port_22"" +]","10.10.145.92",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.590 AM",,"10.10.145.96","10.10.141.95",TCP,"5c067852-1117-44f5-958d-13414d6e7447_y1BI",,,,,,,,SWITCH,"ab5d1d34-dea3-459d-b30b-adcfaf6f380c","10.10.145.96","Catalyst 2960S","SPC2960-24-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5c067852-1117-44f5-958d-13414d6e7447",IDS,22,"[ + ""open_port_22"" +]","10.10.145.96",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.585 AM",,"10.10.185.2","10.10.141.95",TCP,"ff1b1f27-f839-4152-8fc7-4da01fccc7f7_y1BI",,,,,,,,SWITCH,"8c31c8a3-cc71-4506-9656-d6e947c78ee3","10.10.185.2","Cisco Catalyst Switch","1350-SEliseo-C3850-144.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ff1b1f27-f839-4152-8fc7-4da01fccc7f7",IDS,22,"[ + ""open_port_22"" +]","10.10.185.2",Low,"1679765267.20461","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:05.396 AM",,"10.50.145.5","10.10.141.95",TCP,"af4e5102-a10c-440c-b0ee-7f0074f636d7_JY9K",,,,,,,,SWITCH,"8a732210-2406-4ef0-a9a2-ae5d23cd8d98","10.50.145.5","Cisco Catalyst Switch","MH-3850-B561-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","af4e5102-a10c-440c-b0ee-7f0074f636d7",IDS,22,"[ + ""open_port_22"" +]","10.50.145.5",Low,"1679765267.47583","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:09:04.051 AM",,"10.50.132.74","10.10.138.67",UDP,"6a8f9aae-f75c-4417-b097-e9c1a420c1cc_fWhP",,,,,,,,CAD,"61ecae95-8043-4f00-bcac-9676ebb5d7f6","10.50.132.74",DynaCAD,"VM-PACSRAD29",CAD,CAD,"10.10.138.67","Source IP: 10.10.138.67, Port: 3389","6a8f9aae-f75c-4417-b097-e9c1a420c1cc",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.74",Low,"1679762657.21659","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:55.947 AM",,"10.10.194.136","10.50.138.42",TCP,"10d7c534-e42f-440f-8bfd-8911630e0a1a_2b9v",,,,,,,,MRI,"934fb1ec-eb82-4b60-9703-d991b38c50f0","10.10.194.136",Ingenia,MOMMRI2,MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","10d7c534-e42f-440f-8bfd-8911630e0a1a",IDS,22,"[ + ""open_port_22"" +]","10.10.194.136",Low,"1679738492.20943","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.913 AM",,"10.10.162.200","10.10.141.95",TCP,"c2675da6-6230-4c40-ba0d-7b7f332ab225_cixF",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","c2675da6-6230-4c40-ba0d-7b7f332ab225",IDS,22,"[ + ""open_port_22"" +]","10.10.162.200",Low,"1679730237.48704","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.825 AM",,"10.10.162.150","10.10.141.95",TCP,"05620a83-337b-4c1a-809b-9a4a3cbdf3c8_796B",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","05620a83-337b-4c1a-809b-9a4a3cbdf3c8",IDS,22,"[ + ""open_port_22"" +]","10.10.162.150",Low,"1679729777.20844","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.823 AM",,"10.10.162.100","10.10.141.95",TCP,"4fffd646-b155-4fc9-8b72-2586cb7c3538_796B",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","4fffd646-b155-4fc9-8b72-2586cb7c3538",IDS,22,"[ + ""open_port_22"" +]","10.10.162.100",Low,"1679729777.20844","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.417 AM",,,,,"18a77fc3-ef84-4323-a5db-5010692a84ed_0FYE",,,,Firefox,"r3.o.lencr.org",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: r3.o.lencr.org, IP: 146.112.55.71","18a77fc3-ef84-4323-a5db-5010692a84ed",IDS,80,"[ + ""web_browsing"" +]","146.112.55.71",Medium,"1679728367.57587","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.388 AM",,,,,"1b146ccc-eace-441c-a23b-c46af572867f_nz9I",,,,Firefox,"r3.o.lencr.org.x.cfd1dd0a017b804f3c08c1d03afb45b0ebe0.9270f75d.id.opendns.com",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: r3.o.lencr.org.x.cfd1dd0a017b804f3c08c1d03afb45b0ebe0.9270f75d.id.opendns.com, IP: 146.112.247.93","1b146ccc-eace-441c-a23b-c46af572867f",IDS,80,"[ + ""web_browsing"" +]","146.112.247.93",Medium,"1679728397.47841","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:17.182 AM",,"10.50.163.21","10.50.138.42",TCP,"50197736-6a9b-4e25-b004-302c309a8a4f_/qXT",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","50197736-6a9b-4e25-b004-302c309a8a4f",IDS,22,"[ + ""open_port_22"" +]","10.50.163.21",Low,"1679728287.47543","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:16.800 AM",,"10.10.194.136","10.50.138.42",TCP,"a5f25c1c-d2f4-45f1-bec3-e0b670004201_DOoU",,,,,,,,MRI,"934fb1ec-eb82-4b60-9703-d991b38c50f0","10.10.194.136",Ingenia,MOMMRI2,MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","a5f25c1c-d2f4-45f1-bec3-e0b670004201",IDS,22,"[ + ""open_port_22"" +]","10.10.194.136",Low,"1679727697.20379","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:16.293 AM",,"10.10.141.118","10.50.140.96",,"fa08ffb1-8264-488d-bd32-a0aed261f7e9_VrIk",,,,,,,,PACS,"907601e7-dc9b-4eda-84d0-9fe6d02195ef","10.10.141.118","McKesson Radiology 12.3","ALI_SCU","PACS Server",PACS,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 41045, ","fa08ffb1-8264-488d-bd32-a0aed261f7e9",IDS,41045,"[]",,Medium,"1679710685.27512","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:11.345 AM",,"10.50.132.68","10.10.138.47",TCP,"2deedf50-e28d-42f1-be66-b7eadfe38d7e_pMH2",,,,,,,,CAD,"4e0dfd4a-2059-47ad-be0d-1c1bf1faeb94","10.50.132.68",DynaCAD,"VM-PACSRAD24",CAD,CAD,"10.10.138.47","Source IP: 10.10.138.47, Port: 3389","2deedf50-e28d-42f1-be66-b7eadfe38d7e",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.68",Low,"1679710052.23151","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:08:07.358 AM",,"10.50.132.74","10.10.138.31",UDP,"d10b1359-eaf9-42f8-8dc1-e0ccfd89f0b0_/8tQ",,,,,,,,CAD,"61ecae95-8043-4f00-bcac-9676ebb5d7f6","10.50.132.74",DynaCAD,"VM-PACSRAD29",CAD,CAD,"10.10.138.31","Source IP: 10.10.138.31, Port: 3389","d10b1359-eaf9-42f8-8dc1-e0ccfd89f0b0",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.74",Low,"1679630482.20895","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.286 AM",,"10.50.132.73","10.10.138.73",TCP,"75173b38-3065-441f-a228-e91d663a0e0c_Ar6g",,,,,,,,CAD,"f8749de5-18b0-4e3a-9234-99da036b2b8f","10.50.132.73",DynaCAD,"VM-PACSRAD28",CAD,CAD,"10.10.138.73","Source IP: 10.10.138.73, Port: 3389","75173b38-3065-441f-a228-e91d663a0e0c",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.73",Low,"1679705922.21728","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.209 AM",,,,,"99f30ab5-7292-4cf8-9557-5e4a2734e2ff_gV4b",,,,"Internet Explorer","go2.microsoft.com",,,CAD,"f8749de5-18b0-4e3a-9234-99da036b2b8f","10.50.132.73",DynaCAD,"VM-PACSRAD28",CAD,CAD,"10.50.132.73","Browser: Internet Explorer, Host: go2.microsoft.com, IP: 23.207.81.26","99f30ab5-7292-4cf8-9557-5e4a2734e2ff",IDS,80,"[ + ""web_browsing"" +]","23.207.81.26",Medium,"1679705991.27468","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:38.201 AM",,"10.10.150.177","10.50.140.96",,"51572dd5-0208-451c-ae36-dca447b26d45_MNdq",,,,,,,,"REGULAR_PRINTER","36dfca1c-f372-47c8-b810-74c3832c1211","10.10.150.177","ECOSYS M3655idn","ECOSYS M3655idn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 35610, ","51572dd5-0208-451c-ae36-dca447b26d45",IDS,35610,"[]",,Medium,"1679705835.36348","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.585 AM",,"10.10.141.104","10.10.186.85",TCP,"ec878da6-781e-4523-a332-d0256f5fe52c_paUQ",,,,,,,,LINAC,"942b3c05-0171-4974-b79a-2493ac81645d","10.10.141.104","Pinnacle3 Radiotherapy Treatment Planning System","MGHPINNACLE_SCP",LINAC,LINAC,"10.10.186.85","Source IP: 10.10.186.85, Port: 22","ec878da6-781e-4523-a332-d0256f5fe52c",IDS,22,"[ + ""open_port_22"" +]","10.10.141.104",Low,"1679702127.24931","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.389 AM",,,,,"11ae40ac-1535-46ba-b40f-461cf6283321_CgBE",,,,Chrome,"apps.identrust.com",,,CAD,"67c39118-35fe-410a-a1ba-0127359497f4","10.50.163.62",DynaCAD,"MGH-RADWS04",CAD,CAD,"10.50.163.62","Browser: Chrome, Host: apps.identrust.com, IP: 23.197.50.48","11ae40ac-1535-46ba-b40f-461cf6283321",IDS,80,"[ + ""web_browsing"" +]","23.197.50.48",Medium,"1679700811.24533","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.218 AM",,"10.50.154.245","10.50.140.96",,"2cc414ec-1353-4c33-9c74-d2a48eb96862_eYXE",,,,,,,,"REGULAR_PRINTER","74db2a2a-8ec0-4050-8e35-32dff3038da2","10.50.154.245","ECOSYS P3155dn","ECOSYS P3155dn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33592, ","2cc414ec-1353-4c33-9c74-d2a48eb96862",IDS,33592,"[]",,Medium,"1679699417.24389","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.215 AM",,"10.50.154.241","10.50.140.96",,"e147246a-56f1-45f4-91d2-16db7ba66f51_Zzmc",,,,,,,,"REGULAR_PRINTER","1fd272ad-a4f4-4a11-9d66-02efc4e29074","10.50.154.241","ECOSYS M6535cidn","ECOSYS M6535cidn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 37149, ","e147246a-56f1-45f4-91d2-16db7ba66f51",IDS,37149,"[]",,Medium,"1679699352.41935","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.204 AM",,"10.50.154.242","10.50.140.96",,"c67de4d6-b41c-4f8c-a5cb-44817ba6e363_TOYp",,,,,,,,"REGULAR_PRINTER","b7bc65ad-8169-4a04-b482-f71f02156083","10.50.154.242","ECOSYS M3655idn","ECOSYS M3655idn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 37648, ","c67de4d6-b41c-4f8c-a5cb-44817ba6e363",IDS,37648,"[]",,Medium,"1679699374.61824","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.190 AM",,"10.50.154.240","10.50.140.96",,"46cef887-fdd9-4d33-bfe0-c37f6aaa348e_6VOq",,,,,,,,"REGULAR_PRINTER","d97f92b9-f5c3-449f-8d67-6b367978b487","10.50.154.240","ECOSYS M3655idn","ECOSYS M3655idn",Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 44471, ","46cef887-fdd9-4d33-bfe0-c37f6aaa348e",IDS,44471,"[]",,Medium,"1679699324.44219","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:36.089 AM",,"10.50.154.237","10.50.140.96",,"e1cdbe31-e823-4027-a47a-c11654ac41b7_2cRh",,,,,,,,"LABEL_PRINTER","51f2bbd2-6e65-4e9e-b835-950a34fe3408","10.50.154.237",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 40517, ","e1cdbe31-e823-4027-a47a-c11654ac41b7",IDS,40517,"[]",,Medium,"1679699151.32322","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.996 AM",,"10.50.154.236","10.50.140.96",,"ae43914e-9943-4302-b514-0fcca47845a5_A3VA",,,,,,,,"LABEL_PRINTER","b90db675-fa5f-46ce-a4d3-ce4b38624faf","10.50.154.236",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 32188, ","ae43914e-9943-4302-b514-0fcca47845a5",IDS,32188,"[]",,Medium,"1679699021.57094","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.916 AM",,,,,"ce991500-a119-45d4-b587-90a067f7d313_CycD",,,,Firefox,"r3.o.lencr.org",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: r3.o.lencr.org, IP: 146.112.55.83","ce991500-a119-45d4-b587-90a067f7d313",IDS,80,"[ + ""web_browsing"" +]","146.112.55.83",Medium,"1679697859.66626","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.905 AM",,,,,"a3c16942-1c48-45fd-bd5a-a58624360ccf_2bF/",,,,Firefox,"ciscobinary.openh264.org",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: ciscobinary.openh264.org, IP: 23.197.50.91","a3c16942-1c48-45fd-bd5a-a58624360ccf",IDS,80,"[ + ""web_browsing"" +]","23.197.50.91",Medium,"1679697879.95064","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.903 AM",,,,,"3c7c9920-89de-4b8e-92c3-5262c82f559f_c3Lw",,,,Firefox,"ocsp.digicert.com",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: ocsp.digicert.com, IP: 192.229.211.108","3c7c9920-89de-4b8e-92c3-5262c82f559f",IDS,80,"[ + ""web_browsing"" +]","192.229.211.108",Medium,"1679697879.81769","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:35.493 AM",,"10.50.153.238","10.50.140.96",,"4adf5570-308b-44d6-b0d6-a417b797770a_cTZb",,,,,,,,"LABEL_PRINTER","6a925061-e913-4726-a6a6-89411c9de5e8","10.50.153.238",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 30239, ","4adf5570-308b-44d6-b0d6-a417b797770a",IDS,30239,"[]",,Medium,"1679696743.23819","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:06.290 AM",,"10.50.150.28","10.50.140.96",,"f5642e9f-f210-45cb-b1b8-6b1b6a131a45_lAKP",,,,,,,,"BLOOD_GAS_ANALYZER","f10213f1-4707-4695-82f7-953894a68f2b","10.50.150.28","i-STAT 1 Handheld Blood Analyzer",,"Blood Gas Analyzer","BLOOD_GAS_ANALYZER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 43344, ","f5642e9f-f210-45cb-b1b8-6b1b6a131a45",IDS,43344,"[]",,Medium,"1679692766.18405","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:07:04.278 AM",,"10.10.142.51","10.50.149.22",UDP,"674db16c-595b-408a-ae61-93620cc8e919_iTfo",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.22","Source IP: 10.50.149.22, Port: 3389","674db16c-595b-408a-ae61-93620cc8e919",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.10.142.51",Low,"1679692427.22069","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.828 AM",,"10.50.149.33","10.50.140.96",,"97e4339b-b8f3-4010-add5-bc94dea96cc6_zf1S",,,,,,,,CAD,"44d3a8ec-2d41-43ac-953f-d1489c5d5ca3","10.50.149.33",DynaCAD,"W-BUS-PACS-29",CAD,CAD,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33737, ","97e4339b-b8f3-4010-add5-bc94dea96cc6",IDS,33737,"[]",,Medium,"1679691221.60889","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.823 AM",,"10.50.149.27","10.50.140.96",,"a68b85f6-8c72-43bf-93e7-fa8120f7bf5b_2UqZ",,,,,,,,CAD,"123d94ae-ec50-4be0-a686-1a38b83944e8","10.50.149.27",DynaCAD,MG10187,CAD,CAD,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33737, ","a68b85f6-8c72-43bf-93e7-fa8120f7bf5b",IDS,33737,"[]",,Medium,"1679691077.52972","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.399 AM",,"10.50.148.41","10.50.140.96",,"e5d8d1ff-962c-4c52-a5ec-6f1b2df88b01_9J3W",,,,,,,,GLUCOMETER,"e5da1c66-0235-4ee6-b01d-3aa9b58efdf5","10.50.148.41",StatStrip,"MAIN ED2",Glucometer,GLUCOMETER,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 44735, ","e5d8d1ff-962c-4c52-a5ec-6f1b2df88b01",IDS,44735,"[]",,Medium,"1679689869.92297","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.888 AM",,,"3/26/2023, 7:06:53.382 AM",,"10.10.130.132","10.10.240.43",TCP,"1200da14-dd47-480a-ae4f-dce56812e4ce_UkqO",,,,,,,,SWITCH,"c9d75de3-fa51-4837-bd2f-706efdd3dc36","10.10.130.132","Cisco Catalyst Switch","100BDRAKES-9200-48-SW1.maringeneral.org",Switch,SWITCH,"10.10.240.43","Source IP: 10.10.240.43, Port: 22","1200da14-dd47-480a-ae4f-dce56812e4ce",IDS,22,"[ + ""open_port_22"" +]","10.10.130.132",Low,"1679617837.23035","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:53.096 AM",,"10.50.148.245","10.50.140.96",,"033153b9-4ee1-4667-a53d-fad097a71290_Ho3e",,,,,,,,"LABEL_PRINTER","972f2674-9bbf-4d27-8f35-b5e2fecf15a3","10.50.148.245",ZT410,ZT410,"Label Printer","LABEL_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 36598, ","033153b9-4ee1-4667-a53d-fad097a71290",IDS,36598,"[]",,Medium,"1679689234.67368","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:50.438 AM",,"10.50.146.230","10.50.140.96",,"a60c894c-d1f5-403c-9f90-6ba1dd524480_Uf+d",,,,,,,,"REGULAR_PRINTER","9e5ce265-a299-4ac8-b9b4-50bdee251607","10.50.146.230","ZD421-300dpi ZPL",ZD421,Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33857, ","a60c894c-d1f5-403c-9f90-6ba1dd524480",IDS,33857,"[]",,Medium,"1679687880.61051","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:49.191 AM",,"10.50.149.27","10.10.138.201",TCP,"42473c32-281d-4b19-af1f-06f39dd29927_YXgh",,,,,,,,CAD,"123d94ae-ec50-4be0-a686-1a38b83944e8","10.50.149.27",DynaCAD,MG10187,CAD,CAD,"10.10.138.201","Source IP: 10.10.138.201, Port: 3389","42473c32-281d-4b19-af1f-06f39dd29927",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.149.27",Low,"1679687967.23947","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:48.981 AM",,"10.10.140.86","10.10.138.201",TCP,"1ee97d9a-c149-4abf-8327-283ab568be11_i32M",,,,,,,,PACS,"00a5faba-bddf-440a-9515-a407584d5a59","10.10.140.86",Compass,COMPASS,"PACS Server",PACS,"10.10.138.201","Source IP: 10.10.138.201, Port: 3389","1ee97d9a-c149-4abf-8327-283ab568be11",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.10.140.86",Low,"1679686707.24102","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:30.479 AM",,"10.50.132.72","10.50.140.96",,"ff1ba3ca-d7d4-4e0b-b341-340b3d58bf74_OKiu",,,,,,,,CAD,"4a624087-ba30-4da1-ac5b-c9f06a1b2656","10.50.132.72",DynaCAD,"VM-PACSRAD27",CAD,CAD,,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 35532, ","ff1ba3ca-d7d4-4e0b-b341-340b3d58bf74",IDS,35532,"[]",,Medium,"1679682957.05549","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.993 AM",,"10.50.132.37","10.50.118.41",UDP,"d9c7f295-636e-476a-8367-8cb1c5b46866_qMq3",,,,,,,,CAD,"0947550e-40e1-4f68-8642-ed279eb0db8a","10.50.132.37",DynaCAD,"VM-PACSRAD16",CAD,CAD,"10.50.118.41","Source IP: 10.50.118.41, Port: 3389","d9c7f295-636e-476a-8367-8cb1c5b46866",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.37",Low,"1679682347.24274","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.796 AM",,"10.10.142.53","10.50.149.33",TCP,"ef427e46-213b-40c9-80a8-58729349d019_aBqv",,,,,,,,"DICOM_WORKSTATION","42a5a4a2-dea3-4c20-8fbe-4fd1d7432358","10.10.142.53","DCMTK System","CARD_SERVER","DICOM Workstation","DICOM_WORKSTATION","10.50.149.33","Source IP: 10.50.149.33, Port: 3389","ef427e46-213b-40c9-80a8-58729349d019",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.10.142.53",Low,"1679613987.4792","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.122 AM",,"10.50.132.37","10.10.138.75",TCP,"7e85045c-5f4f-4aae-a646-a320edda7148_+3bN",,,,,,,,CAD,"0947550e-40e1-4f68-8642-ed279eb0db8a","10.50.132.37",DynaCAD,"VM-PACSRAD16",CAD,CAD,"10.10.138.75","Source IP: 10.10.138.75, Port: 3389","7e85045c-5f4f-4aae-a646-a320edda7148",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.37",Low,"1679681467.24967","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:28.119 AM",,"10.50.163.21","10.50.138.42",TCP,"5cdda412-d2fa-4260-81d3-ea4baf6e75d1_+3bN",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","5cdda412-d2fa-4260-81d3-ea4baf6e75d1",IDS,22,"[ + ""open_port_22"" +]","10.50.163.21",Low,"1679681467.24967","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.916 AM",,"10.10.140.86","10.50.149.27",UDP,"47c706e2-4e1a-4fc8-9c5a-59cd9814ec55_wp5B",,,,,,,,PACS,"00a5faba-bddf-440a-9515-a407584d5a59","10.10.140.86",Compass,COMPASS,"PACS Server",PACS,"10.50.149.27","Source IP: 10.50.149.27, Port: 3389","47c706e2-4e1a-4fc8-9c5a-59cd9814ec55",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.10.140.86",Low,"1679612992.49047","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.686 AM",,"10.10.162.100","10.10.240.43",TCP,"c0c58817-8675-4b6c-b6d1-9647051e6e71_buYn",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.240.43","Source IP: 10.10.240.43, Port: 22","c0c58817-8675-4b6c-b6d1-9647051e6e71",IDS,22,"[ + ""open_port_22"" +]","10.10.162.100",Low,"1679612917.27554","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.415 AM",,"10.10.161.178","192.68.49.129",TCP,"685cb242-2411-4f33-99f0-b7d3563af48b_0r22",,,,,,,,FLUOROSCOPY,"ea31cee8-1642-4029-be02-d47ee6d75dab","10.10.161.178","Innova IGS",MGHDL01,Fluoroscopy,FLUOROSCOPY,"192.68.49.129","Source IP: 192.68.49.129, Port: 22","685cb242-2411-4f33-99f0-b7d3563af48b",IDS,22,"[ + ""open_port_22"" +]","10.10.161.178",Low,"1679679072.22247","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:11.381 AM",,"10.50.132.37","10.10.138.204",TCP,"ec6e7628-69d1-4ba8-b0b6-f3c0abb35183_Mz5d",,,,,,,,CAD,"0947550e-40e1-4f68-8642-ed279eb0db8a","10.50.132.37",DynaCAD,"VM-PACSRAD16",CAD,CAD,"10.10.138.204","Source IP: 10.10.138.204, Port: 3389","ec6e7628-69d1-4ba8-b0b6-f3c0abb35183",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.37",Low,"1679678907.22702","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:05.186 AM",,"10.10.194.136","10.50.138.42",TCP,"23bace5b-be0a-46ee-b1e6-549a4e4038d8_luvK",,,,,,,,MRI,"934fb1ec-eb82-4b60-9703-d991b38c50f0","10.10.194.136",Ingenia,MOMMRI2,MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","23bace5b-be0a-46ee-b1e6-549a4e4038d8",IDS,22,"[ + ""open_port_22"" +]","10.10.194.136",Low,"1679677327.22111","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:05.126 AM",,"10.50.132.68","10.10.138.208",TCP,"c26b4edf-e552-4055-a228-12adc4390739_ZY5X",,,,,,,,CAD,"4e0dfd4a-2059-47ad-be0d-1c1bf1faeb94","10.50.132.68",DynaCAD,"VM-PACSRAD24",CAD,CAD,"10.10.138.208","Source IP: 10.10.138.208, Port: 3389","c26b4edf-e552-4055-a228-12adc4390739",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.68",Low,"1679677257.22394","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:04.899 AM",,,,,"6b4e9a49-163e-4c78-a76e-974d1c15f820_AuQj",,,,Chrome,"faoj.org",,,CAD,"d4debd6b-6b28-4bcb-8523-d8759090a757","10.10.194.131",DynaCAD,"MGH-MAMWS02",CAD,CAD,"10.10.194.131","Browser: Chrome, Host: faoj.org, IP: 35.209.93.119","6b4e9a49-163e-4c78-a76e-974d1c15f820",IDS,80,"[ + ""web_browsing"" +]","35.209.93.119",Medium,"1679676483.29242","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:04.792 AM",,"10.20.159.2","10.10.141.95",TCP,"582bc117-1be4-4a40-874a-c7263a6114ff_MbjT",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","582bc117-1be4-4a40-874a-c7263a6114ff",IDS,22,"[ + ""open_port_22"" +]","10.20.159.2",Low,"1679676082.20729","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:06:04.789 AM",,"10.20.47.3","10.10.141.95",TCP,"b115bdf5-155e-4054-a397-a3ff5b86e741_MbjT",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","b115bdf5-155e-4054-a397-a3ff5b86e741",IDS,22,"[ + ""open_port_22"" +]","10.20.47.3",Low,"1679676082.20729","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:57.115 AM",,"10.50.149.27","10.10.138.35",TCP,"85819e71-b855-41ee-82fb-65d5de7f9981_+OWv",,,,,,,,CAD,"123d94ae-ec50-4be0-a686-1a38b83944e8","10.50.149.27",DynaCAD,MG10187,CAD,CAD,"10.10.138.35","Source IP: 10.10.138.35, Port: 3389","85819e71-b855-41ee-82fb-65d5de7f9981",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.149.27",Low,"1679610452.2332","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:55.890 AM",,,,,"a48d7d58-3103-4f66-8444-9bb473224552_o8j1",,,,Chrome,"www.google.com",,,CAD,"1433419d-54ed-4ac9-a55c-b78b480b7caf","10.50.163.37",DynaCAD,"MGH-MAMWS03",CAD,CAD,"10.50.163.37","Browser: Chrome, Host: www.google.com, IP: 142.250.189.228","a48d7d58-3103-4f66-8444-9bb473224552",IDS,80,"[ + ""web_browsing"" +]","142.250.189.228",Medium,"1679672514.73143","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:55.884 AM",,"10.19.141.2","10.10.96.151",TCP,"0ec95d68-9205-45f5-bc34-e7d5f9bab745_IxfU",,,,,,,,SWITCH,"47895e5b-faa5-4a83-af4a-81c8373e6abb","10.19.141.2","Cisco Catalyst Switch","4000Civic-210-192-SW.maringeneral.org",Switch,SWITCH,"10.10.96.151","Source IP: 10.10.96.151, Port: 22","0ec95d68-9205-45f5-bc34-e7d5f9bab745",IDS,22,"[ + ""open_port_22"" +]","10.19.141.2",Low,"1679672672.24171","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:52.797 AM",,"10.50.163.76","10.50.149.22",TCP,"e59c2016-7655-4e1e-9b5b-491738739621_KWoN",,,,,,,,CAD,"8251e225-9582-4e20-91c9-7dad4929f26d","10.50.163.76",DynaCAD,"MGH-RADTESTBLD1",CAD,CAD,"10.50.149.22","Source IP: 10.50.149.22, Port: 22","e59c2016-7655-4e1e-9b5b-491738739621",IDS,22,"[ + ""open_port_22"" +]","10.50.163.76",Low,"1679672472.4849","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.406 AM",,"10.10.178.242","10.10.141.95",TCP,"26991cca-4aab-448d-a555-6011c6d03ee8_QnUR",,,,,,,,SWITCH,"00365818-9730-4f67-af78-d2b4242bf75c","10.10.178.242","Cisco Catalyst Switch","1350-SEliseo-Ste220-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","26991cca-4aab-448d-a555-6011c6d03ee8",IDS,22,"[ + ""open_port_22"" +]","10.10.178.242",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.397 AM",,"10.20.159.2","10.10.141.95",TCP,"31f6ddc8-41a7-4716-855f-f798413e9acb_QnUR",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","31f6ddc8-41a7-4716-855f-f798413e9acb",IDS,22,"[ + ""open_port_22"" +]","10.20.159.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.387 AM",,"10.20.175.2","10.10.141.95",TCP,"f366cf17-70a5-4f40-815d-a0fa98d5cf94_QnUR",,,,,,,,SWITCH,"8fad271e-115d-43f8-982f-ce1687063594","10.20.175.2","Cisco Catalyst Switch","PRIMA-100DRAKES-3850-STACK.maringeneral.",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f366cf17-70a5-4f40-815d-a0fa98d5cf94",IDS,22,"[ + ""open_port_22"" +]","10.20.175.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.385 AM",,"10.20.79.5","10.10.141.95",TCP,"3b924469-ff6b-4c0b-8f7b-b5ebd841c57c_QnUR",,,,,,,,SWITCH,"8df37589-717b-49a5-979e-ec40ac93c229","10.20.79.5","Cisco Catalyst Switch","651FStSonoma-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3b924469-ff6b-4c0b-8f7b-b5ebd841c57c",IDS,22,"[ + ""open_port_22"" +]","10.20.79.5",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.325 AM",,"10.10.20.100","10.10.141.95",TCP,"2a10b5eb-ea31-47b6-b612-441bda7660c4_QnUR",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2a10b5eb-ea31-47b6-b612-441bda7660c4",IDS,22,"[ + ""open_port_22"" +]","10.10.20.100",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.323 AM",,"10.20.223.2","10.10.141.95",TCP,"eddad2ae-be38-4525-b450-53d118ac33bf_QnUR",,,,,,,,SWITCH,"de343319-37ea-44ca-9586-073e119a4726","10.20.223.2","Cisco Catalyst Switch","PRIMA-1496Professional-c3850-48-SW.marin",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","eddad2ae-be38-4525-b450-53d118ac33bf",IDS,22,"[ + ""open_port_22"" +]","10.20.223.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.320 AM",,"10.20.207.2","10.10.141.95",TCP,"0f377afc-5fed-4da3-aee5-2509d4f1af52_QnUR",,,,,,,,SWITCH,"0b4e943b-9635-4952-a6be-6ebcb969a459","10.20.207.2","Cisco Catalyst Switch","PRIMA-347Andrieux-c3850-48-SW.maringener",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0f377afc-5fed-4da3-aee5-2509d4f1af52",IDS,22,"[ + ""open_port_22"" +]","10.20.207.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.316 AM",,"10.10.145.15","10.10.141.95",TCP,"de347cd0-399e-4975-a1f6-25c6495f495b_QnUR",,,,,,,,SWITCH,"8a336c51-448e-4b38-9ded-dda2b03fd1ba","10.10.145.15","Catalyst 3850-48P","3West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","de347cd0-399e-4975-a1f6-25c6495f495b",IDS,22,"[ + ""open_port_22"" +]","10.10.145.15",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.310 AM",,"10.20.62.5","10.10.141.95",TCP,"d0c9da07-c2e6-49ec-a1a5-01e61167da85_QnUR",,,,,,,,SWITCH,"5a9c7ddb-8484-4e3e-a560-85eb3f884cb3","10.20.62.5","Cisco Catalyst Switch","900SEliseo201-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d0c9da07-c2e6-49ec-a1a5-01e61167da85",IDS,22,"[ + ""open_port_22"" +]","10.20.62.5",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.298 AM",,"10.10.145.87","10.10.141.95",TCP,"b09ad87a-3dad-4b70-8140-153e27c538f6_QnUR",,,,,,,,SWITCH,"5bdb5c80-de6b-4609-954b-edbbb0ec300c","10.10.145.87","Catalyst 2960S","MIS-C2960S-IMG-SW-2.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","b09ad87a-3dad-4b70-8140-153e27c538f6",IDS,22,"[ + ""open_port_22"" +]","10.10.145.87",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.295 AM",,"10.10.204.2","10.10.141.95",TCP,"500a4f0f-0f23-4b03-9366-b3beb14ffbc6_QnUR",,,,,,,,SWITCH,"9cc0363a-1448-4b03-877b-c743e4edbc11","10.10.204.2","Cisco Catalyst Switch","MH-Phlps-6-A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","500a4f0f-0f23-4b03-9366-b3beb14ffbc6",IDS,22,"[ + ""open_port_22"" +]","10.10.204.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.289 AM",,"10.20.47.3","10.10.141.95",TCP,"f499dd7e-3d8b-4a93-98fb-34b259817325_QnUR",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f499dd7e-3d8b-4a93-98fb-34b259817325",IDS,22,"[ + ""open_port_22"" +]","10.20.47.3",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.285 AM",,"10.10.162.150","10.10.141.95",TCP,"105d2241-d8e6-4407-b439-ae0cd7813d66_QnUR",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","105d2241-d8e6-4407-b439-ae0cd7813d66",IDS,22,"[ + ""open_port_22"" +]","10.10.162.150",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.226 AM",,"10.10.176.242","10.10.141.95",TCP,"411e66c1-3a21-4e33-9fc4-19e8bd1ea1fa_QnUR",,,,,,,,SWITCH,"50310ff2-90c7-46d0-9e4c-932d65b2c23d","10.10.176.242","Cisco Catalyst Switch","1350-SEliseo-Ste120-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","411e66c1-3a21-4e33-9fc4-19e8bd1ea1fa",IDS,22,"[ + ""open_port_22"" +]","10.10.176.242",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.224 AM",,"10.20.127.2","10.10.141.95",TCP,"f4682b29-b98f-4fde-a758-541c7519b5c5_QnUR",,,,,,,,SWITCH,"33145016-7192-4675-9a7c-ca39cc128f9d","10.20.127.2","Cisco Catalyst Switch","1350-SEliseo-Ste300-48",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f4682b29-b98f-4fde-a758-541c7519b5c5",IDS,22,"[ + ""open_port_22"" +]","10.20.127.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.220 AM",,"10.10.204.12","10.10.141.95",TCP,"d2ac1159-1a9c-4bf3-b631-ccf39b64e692_QnUR",,,,,,,,SWITCH,"690a3cc5-7b90-4bf7-b2b4-4a99883c680f","10.10.204.12","Cisco Catalyst Switch","MH-Phlps-3101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d2ac1159-1a9c-4bf3-b631-ccf39b64e692",IDS,22,"[ + ""open_port_22"" +]","10.10.204.12",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.217 AM",,"10.20.47.2","10.10.141.95",TCP,"612cb957-3d60-47bd-8359-068c24b3636c_QnUR",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","612cb957-3d60-47bd-8359-068c24b3636c",IDS,22,"[ + ""open_port_22"" +]","10.20.47.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.204 AM",,"10.10.232.242","10.10.141.95",TCP,"326a35b3-d5a9-4ef2-935b-c9943693d6ee_QnUR",,,,,,,,SWITCH,"d35ffa2a-aed1-4e33-a316-59c02553750d","10.10.232.242","Cisco Catalyst Switch","75Rowl140-c3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","326a35b3-d5a9-4ef2-935b-c9943693d6ee",IDS,22,"[ + ""open_port_22"" +]","10.10.232.242",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.201 AM",,"10.10.145.16","10.10.141.95",TCP,"e4372031-c157-4287-9f2e-2d758d02f60a_QnUR",,,,,,,,SWITCH,"2e9e4ef4-57d3-4ac9-8a40-1158265b2a71","10.10.145.16","Cisco Catalyst Switch","4West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e4372031-c157-4287-9f2e-2d758d02f60a",IDS,22,"[ + ""open_port_22"" +]","10.10.145.16",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.144 AM",,"10.20.109.2","10.10.141.95",TCP,"dae72319-7b48-4900-aef7-a36257d42b84_QnUR",,,,,,,,SWITCH,"766a3b0a-8973-449c-8468-3409cf2a48e4","10.20.109.2","Cisco Catalyst Switch","4000Civic-205-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dae72319-7b48-4900-aef7-a36257d42b84",IDS,22,"[ + ""open_port_22"" +]","10.20.109.2",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.140 AM",,"10.10.204.11","10.10.141.95",TCP,"4dbf5c19-7359-4d9f-b6e9-45b2ea638702_QnUR",,,,,,,,SWITCH,"99444b64-0c80-4ae5-aa97-e6a018d58acb","10.10.204.11","Catalyst 2960X-24PS-L","WS-C2960X-24PS-L",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4dbf5c19-7359-4d9f-b6e9-45b2ea638702",IDS,22,"[ + ""open_port_22"" +]","10.10.204.11",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:48.133 AM",,"10.10.204.16","10.10.141.95",TCP,"6089110f-d26d-49e7-a133-f928b045699d_QnUR",,,,,,,,SWITCH,"ac4a0e21-27b4-490d-8dde-95eb3a147f55","10.10.204.16","Catalyst 2960X-24PS-L","WS-C2960X-24PS-L",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6089110f-d26d-49e7-a133-f928b045699d",IDS,22,"[ + ""open_port_22"" +]","10.10.204.16",Low,"1679672237.21287","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.293 AM",,"10.50.145.5","10.10.141.95",TCP,"5e11767e-5ecd-4810-9c28-cf4ccfe9e37e_fAv1",,,,,,,,SWITCH,"8a732210-2406-4ef0-a9a2-ae5d23cd8d98","10.50.145.5","Cisco Catalyst Switch","MH-3850-B561-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5e11767e-5ecd-4810-9c28-cf4ccfe9e37e",IDS,22,"[ + ""open_port_22"" +]","10.50.145.5",Low,"1679671437.4847","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.120 AM",,"10.10.145.5","10.10.141.95",TCP,"c4d34be6-5862-4602-af89-c8b254459fdd_TPuq",,,,,,,,SWITCH,"b188b718-611b-44dd-9de4-b220156dbe65","10.10.145.5","Catalyst 2960S","MGH-Engineering-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c4d34be6-5862-4602-af89-c8b254459fdd",IDS,22,"[ + ""open_port_22"" +]","10.10.145.5",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.099 AM",,"10.10.145.92","10.10.141.95",TCP,"6b7f5a2b-360c-4c20-9cdd-8ed9a0eef58c_TPuq",,,,,,,,SWITCH,"ede79008-7959-4b40-80f5-4e8d30d99303","10.10.145.92","Catalyst 2960S","RMT2960-48-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6b7f5a2b-360c-4c20-9cdd-8ed9a0eef58c",IDS,22,"[ + ""open_port_22"" +]","10.10.145.92",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.095 AM",,"10.10.185.2","10.10.141.95",TCP,"674c67b4-4c84-4752-97bf-746db675e67d_TPuq",,,,,,,,SWITCH,"8c31c8a3-cc71-4506-9656-d6e947c78ee3","10.10.185.2","Cisco Catalyst Switch","1350-SEliseo-C3850-144.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","674c67b4-4c84-4752-97bf-746db675e67d",IDS,22,"[ + ""open_port_22"" +]","10.10.185.2",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.092 AM",,"10.10.145.96","10.10.141.95",TCP,"8aa324bb-01b0-4ec8-9319-10ba5d189c2d_TPuq",,,,,,,,SWITCH,"ab5d1d34-dea3-459d-b30b-adcfaf6f380c","10.10.145.96","Catalyst 2960S","SPC2960-24-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8aa324bb-01b0-4ec8-9319-10ba5d189c2d",IDS,22,"[ + ""open_port_22"" +]","10.10.145.96",Low,"1679671372.20808","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:47.082 AM",,"10.10.162.100","10.10.141.95",TCP,"29fe3866-8064-46d5-9009-0b26bb6aade9_re5x",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","29fe3866-8064-46d5-9009-0b26bb6aade9",IDS,22,"[ + ""open_port_22"" +]","10.10.162.100",Low,"1679671332.22166","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.981 AM",,"10.20.30.104","10.50.140.96",,"b12ef1c7-d30b-4468-a94d-689f9a73cfc5_fMFm",,,,,,,,"REGULAR_PRINTER","171efa74-9922-4538-a5a4-e2143c99a027","10.20.30.104",,,Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 30146, ","b12ef1c7-d30b-4468-a94d-689f9a73cfc5",IDS,30146,"[]",,Medium,"1679669985.82798","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.812 AM",,"10.50.163.21","10.50.138.42",TCP,"7daff0ef-aa42-45fc-acd6-fc87bed34e0c_rdLt",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","7daff0ef-aa42-45fc-acd6-fc87bed34e0c",IDS,22,"[ + ""open_port_22"" +]","10.50.163.21",Low,"1679670677.48157","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.490 AM",,"10.10.195.140","10.10.141.95",TCP,"4775de42-25ab-48c8-bac3-ddf61fe05a96_yDha",,,,,,,,SWITCH,"715a7bff-b86b-40c1-b290-a1d910333551","10.10.195.140","Catalyst 2960S","1100Eliseo2960-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4775de42-25ab-48c8-bac3-ddf61fe05a96",IDS,22,"[ + ""open_port_22"" +]","10.10.195.140",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.487 AM",,"10.20.21.194","10.10.141.95",TCP,"12ec4cb2-a8d3-4d11-94f3-b49c49f9499d_yDha",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","12ec4cb2-a8d3-4d11-94f3-b49c49f9499d",IDS,22,"[ + ""open_port_22"" +]","10.20.21.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.484 AM",,"10.20.10.194","10.10.141.95",TCP,"1295ceb8-a3df-48dc-9084-8f366d0609ae_yDha",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1295ceb8-a3df-48dc-9084-8f366d0609ae",IDS,22,"[ + ""open_port_22"" +]","10.20.10.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.481 AM",,"10.10.228.137","10.10.141.95",TCP,"a6a160b5-94c2-4e0f-985a-628c95f4f36d_yDha",,,,,,,,SWITCH,"e396e00b-66bc-4c90-9e22-8f219807c304","10.10.228.137","Cisco Catalyst Switch","75Rowl101-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a6a160b5-94c2-4e0f-985a-628c95f4f36d",IDS,22,"[ + ""open_port_22"" +]","10.10.228.137",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.412 AM",,"10.10.145.25","10.10.141.95",TCP,"5f7b88d1-1ede-42c3-9b61-268b10bf0342_yDha",,,,,,,,SWITCH,"0337c96d-39f9-4c00-876f-06ac402fa0a3","10.10.145.25","Cisco Catalyst Switch","2Central-C3850-96-SW03.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5f7b88d1-1ede-42c3-9b61-268b10bf0342",IDS,22,"[ + ""open_port_22"" +]","10.10.145.25",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.406 AM",,"10.10.194.197","10.10.141.95",TCP,"5998f2e2-9835-4c8c-9484-44e17b89f42d_yDha",,,,,,,,SWITCH,"6baf1025-8db2-4587-9f69-6929859d7c8e","10.10.194.197","Cisco Catalyst Switch","1260SEliseo-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5998f2e2-9835-4c8c-9484-44e17b89f42d",IDS,22,"[ + ""open_port_22"" +]","10.10.194.197",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.402 AM",,"10.10.145.11","10.10.141.95",TCP,"946499f0-10e8-4289-9278-38d2dab67b7d_yDha",,,,,,,,SWITCH,"3e973541-e49d-4ae5-88d7-223f0a8933da","10.10.145.11","Cisco Catalyst Switch","2West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","946499f0-10e8-4289-9278-38d2dab67b7d",IDS,22,"[ + ""open_port_22"" +]","10.10.145.11",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.396 AM",,"10.20.22.194","10.10.141.95",TCP,"8225dc82-1cb0-4f73-88ac-576cdaf89362_yDha",,,,,,,,SWITCH,"59c8bdf1-0863-428a-9898-d5827f1c9a42","10.20.22.194","Cisco Catalyst Switch","1341Eliseo-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8225dc82-1cb0-4f73-88ac-576cdaf89362",IDS,22,"[ + ""open_port_22"" +]","10.20.22.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.392 AM",,"10.10.145.26","10.10.141.95",TCP,"59179157-fb6e-4060-97e2-3a45c0f2aff6_yDha",,,,,,,,SWITCH,"63f72b58-a0f8-4a58-a02f-7b26e9fd4b82","10.10.145.26","Cisco Catalyst Switch","MHB-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","59179157-fb6e-4060-97e2-3a45c0f2aff6",IDS,22,"[ + ""open_port_22"" +]","10.10.145.26",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.383 AM",,"10.20.30.242","10.10.141.95",TCP,"0623acdb-1f85-4eb3-824c-e462d69d9db0_yDha",,,,,,,,SWITCH,"716f2c3f-a88c-4c91-aab5-b9aa32edf877","10.20.30.242","Cisco Catalyst Switch","75Rowl250-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0623acdb-1f85-4eb3-824c-e462d69d9db0",IDS,22,"[ + ""open_port_22"" +]","10.20.30.242",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.319 AM",,"10.10.145.8","10.10.141.95",TCP,"fe2be874-20ba-44e8-b548-6364beeff151_yDha",,,,,,,,SWITCH,"785abf71-059b-4d14-bedc-485bf82e85ff","10.10.145.8","Cisco Catalyst Switch","1Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fe2be874-20ba-44e8-b548-6364beeff151",IDS,22,"[ + ""open_port_22"" +]","10.10.145.8",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.316 AM",,"10.10.236.136","10.10.141.95",TCP,"0544aaaa-c96f-4f3a-9a95-ebe7ca732840_yDha",,,,,,,,SWITCH,"c24cdf3c-7168-4cbb-8a9e-142c8afa8ed1","10.10.236.136","Catalyst 2960S","Civic-C2960-48-SW02",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0544aaaa-c96f-4f3a-9a95-ebe7ca732840",IDS,22,"[ + ""open_port_22"" +]","10.10.236.136",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.313 AM",,"10.19.88.2","10.10.141.95",TCP,"94f091d9-51f5-4f15-b64f-dc0a11d2f57f_yDha",,,,,,,,SWITCH,"393404cc-a097-4a18-8aa4-1f17f2128ea5","10.19.88.2","Cisco Catalyst Switch","75Rowl220-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","94f091d9-51f5-4f15-b64f-dc0a11d2f57f",IDS,22,"[ + ""open_port_22"" +]","10.19.88.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.306 AM",,"10.10.145.85","10.10.141.95",TCP,"f46e1cd6-064b-48a2-a788-43491483f87a_yDha",,,,,,,,SWITCH,"46079d19-5c75-4342-a79e-012112c3124c","10.10.145.85","Cisco Catalyst Switch","MIS-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f46e1cd6-064b-48a2-a788-43491483f87a",IDS,22,"[ + ""open_port_22"" +]","10.10.145.85",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.304 AM",,"10.20.143.2","10.10.141.95",TCP,"ede14116-b6d4-442c-854e-e2cb413948bd_yDha",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ede14116-b6d4-442c-854e-e2cb413948bd",IDS,22,"[ + ""open_port_22"" +]","10.20.143.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.301 AM",,"10.10.204.15","10.10.141.95",TCP,"dc89f485-2251-4dfa-afd7-5ce7a387efb6_yDha",,,,,,,,SWITCH,"669bc5d7-d785-40a5-a8f6-dd6bb0099ef1","10.10.204.15","Cisco Catalyst Switch","MH-Phlps-2101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dc89f485-2251-4dfa-afd7-5ce7a387efb6",IDS,22,"[ + ""open_port_22"" +]","10.10.204.15",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.294 AM",,"10.10.145.72","10.10.141.95",TCP,"ba80856a-f81d-485f-a262-cd3bd7666fb7_yDha",,,,,,,,SWITCH,"94a134a2-f4ca-460c-8bd0-84465fdfead5","10.10.145.72","Catalyst 2960S","MIS-IMAGING-Sw2960.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ba80856a-f81d-485f-a262-cd3bd7666fb7",IDS,22,"[ + ""open_port_22"" +]","10.10.145.72",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.291 AM",,"10.10.184.194","10.10.141.95",TCP,"c5cc3faf-c34d-4129-ba8b-3ae398afdb15_yDha",,,,,,,,SWITCH,"7761f73d-0382-45ed-b9fb-7a104cb390f5","10.10.184.194","Cisco Catalyst Switch","1350-SEliseo-STE130-48.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c5cc3faf-c34d-4129-ba8b-3ae398afdb15",IDS,22,"[ + ""open_port_22"" +]","10.10.184.194",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.289 AM",,"10.10.145.18","10.10.141.95",TCP,"3b770234-0db1-463b-b9b2-25c72d7536ce_yDha",,,,,,,,SWITCH,"9eb7d56e-0e51-47c2-b53a-dda89d661e44","10.10.145.18","Cisco Catalyst Switch","Lobby-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","3b770234-0db1-463b-b9b2-25c72d7536ce",IDS,22,"[ + ""open_port_22"" +]","10.10.145.18",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.232 AM",,"10.10.220.135","10.10.141.95",TCP,"dc47405c-bc59-421b-9be4-f029d5c5c079_yDha",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dc47405c-bc59-421b-9be4-f029d5c5c079",IDS,22,"[ + ""open_port_22"" +]","10.10.220.135",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.228 AM",,"10.10.220.136","10.10.141.95",TCP,"7704d0d8-9db7-49b4-8bfd-982b54ff4c01_yDha",,,,,,,,SWITCH,"77e1d12c-3d43-4318-a5a1-82548d8b12d4","10.10.220.136","Catalyst 2960S","2BonAir-C2960-144-SW-VoIP.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7704d0d8-9db7-49b4-8bfd-982b54ff4c01",IDS,22,"[ + ""open_port_22"" +]","10.10.220.136",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.225 AM",,"10.10.145.23","10.10.141.95",TCP,"083a95eb-7998-4ccb-9edf-077e798aa8e3_yDha",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","083a95eb-7998-4ccb-9edf-077e798aa8e3",IDS,22,"[ + ""open_port_22"" +]","10.10.145.23",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.213 AM",,"10.10.145.6","10.10.141.95",TCP,"14f7fe51-4acb-439a-ac75-b1195aebfaf4_yDha",,,,,,,,SWITCH,"26531e3f-80f0-401e-aed6-8cd9fcf1fc74","10.10.145.6","Cisco Catalyst Switch","3West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","14f7fe51-4acb-439a-ac75-b1195aebfaf4",IDS,22,"[ + ""open_port_22"" +]","10.10.145.6",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.210 AM",,"10.10.145.86","10.10.141.95",TCP,"f42248ae-e186-48a5-83af-dc2e621e17ca_yDha",,,,,,,,SWITCH,"48dcdb84-2dc9-4136-a140-04ff36f0f83e","10.10.145.86","Catalyst 2960S","MIS-C2960S-IMG-SW-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f42248ae-e186-48a5-83af-dc2e621e17ca",IDS,22,"[ + ""open_port_22"" +]","10.10.145.86",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.207 AM",,"10.10.16.137","10.10.141.95",TCP,"1e808a2b-f894-45ae-8526-a4ea0ace416d_ZTNw",,,,,,,,SWITCH,"6a24443b-1074-4bd1-9d89-65ce807c6843","10.10.16.137","Catalyst 3850-48U","INT-OAK-DMZ",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1e808a2b-f894-45ae-8526-a4ea0ace416d",IDS,22,"[ + ""open_port_22"" +]","10.10.16.137",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.204 AM",,"10.10.236.135","10.10.141.95",TCP,"595c4a22-4e5c-4e2d-bcf0-5eeaa9a3942e_yDha",,,,,,,,SWITCH,"a24e4477-e641-4e07-bbea-a7be77fc2f78","10.10.236.135","Catalyst 2960S","Civic-C2960-144-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","595c4a22-4e5c-4e2d-bcf0-5eeaa9a3942e",IDS,22,"[ + ""open_port_22"" +]","10.10.236.135",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.201 AM",,"10.20.253.2","10.10.141.95",TCP,"6f4ac4fb-60d7-4c4d-b16b-836fe74388a8_yDha",,,,,,,,SWITCH,"fc28d091-4906-4e1d-97bd-eabbe7538de0","10.20.253.2","Cisco Catalyst Switch","4000Civic-206_209-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","6f4ac4fb-60d7-4c4d-b16b-836fe74388a8",IDS,22,"[ + ""open_port_22"" +]","10.20.253.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.197 AM",,"10.10.228.2","10.10.141.95",TCP,"1a9c67f6-3c26-482b-bd4f-73e23b6641c2_yDha",,,,,,,,SWITCH,"15358dc2-070d-42b8-957d-fc0537790e77","10.10.228.2","Cisco Catalyst Switch","75Rowl201-C3850-144-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1a9c67f6-3c26-482b-bd4f-73e23b6641c2",IDS,22,"[ + ""open_port_22"" +]","10.10.228.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.194 AM",,"10.10.145.4","10.10.141.95",TCP,"1bef32d0-079f-4ad9-86a6-0ed791e5be0e_yDha",,,,,,,,SWITCH,"a4d28bc4-9482-4924-8423-aa8868def9f4","10.10.145.4","Cisco Catalyst Switch","3Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1bef32d0-079f-4ad9-86a6-0ed791e5be0e",IDS,22,"[ + ""open_port_22"" +]","10.10.145.4",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.191 AM",,"10.20.191.2","10.10.141.95",TCP,"1daa3a3b-2e6b-4ba0-818c-0a7b755e734f_ZTNw",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1daa3a3b-2e6b-4ba0-818c-0a7b755e734f",IDS,22,"[ + ""open_port_22"" +]","10.20.191.2",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.182 AM",,"10.19.56.2","10.10.141.95",TCP,"aef49fc9-f23e-4a65-8a6f-4cf569bf97dc_ZTNw",,,,,,,,SWITCH,"c1aa2466-7676-4798-a7a6-53b59d77ca89","10.19.56.2","Cisco Catalyst Switch","1701FourthSt-120-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","aef49fc9-f23e-4a65-8a6f-4cf569bf97dc",IDS,22,"[ + ""open_port_22"" +]","10.19.56.2",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.127 AM",,"10.10.145.9","10.10.141.95",TCP,"44007f85-4b35-44d8-9a79-2f628cdd75f1_yDha",,,,,,,,SWITCH,"96372eef-9a67-4ff6-9520-4851e58e02a9","10.10.145.9","Cisco Catalyst Switch","4Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","44007f85-4b35-44d8-9a79-2f628cdd75f1",IDS,22,"[ + ""open_port_22"" +]","10.10.145.9",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.124 AM",,"10.10.145.13","10.10.141.95",TCP,"09f6801f-8bef-461e-8e92-79170a6910e1_ZTNw",,,,,,,,SWITCH,"00bcead7-6eb2-427b-b74b-340afe6fb482","10.10.145.13","Catalyst 2960S","MDF-1-c2960-APC-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","09f6801f-8bef-461e-8e92-79170a6910e1",IDS,22,"[ + ""open_port_22"" +]","10.10.145.13",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.117 AM",,"10.10.200.40","10.10.141.95",TCP,"4190bc84-4e88-4d31-b735-67738044f92b_yDha",,,,,,,,SWITCH,"22f915b2-3162-4581-8949-67c0c270d617","10.10.200.40","Cisco Catalyst Switch","100ADrakes140-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4190bc84-4e88-4d31-b735-67738044f92b",IDS,22,"[ + ""open_port_22"" +]","10.10.200.40",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.115 AM",,"10.10.190.7","10.10.141.95",TCP,"65c87e9a-42b7-4459-b9ab-74fe51562a43_yDha",,,,,,,,SWITCH,"b5658de0-e0eb-48b0-8e9c-a30f74b0defa","10.10.190.7","Cisco Catalyst Switch","1240Eliseo-C3850-120-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","65c87e9a-42b7-4459-b9ab-74fe51562a43",IDS,22,"[ + ""open_port_22"" +]","10.10.190.7",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.112 AM",,"10.20.95.2","10.10.141.95",TCP,"d4906766-90bd-4694-a335-d43f663ee5dc_yDha",,,,,,,,SWITCH,"b0ae69b1-9c48-4b75-b021-9bffb0112314","10.20.95.2","Cisco Catalyst Switch","1100Larkspur-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d4906766-90bd-4694-a335-d43f663ee5dc",IDS,22,"[ + ""open_port_22"" +]","10.20.95.2",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.110 AM",,"10.19.103.2","10.10.141.95",TCP,"ed6f9432-2d5c-4323-a1f9-fcebc652175d_ZTNw",,,,,,,,SWITCH,"34565923-0f93-4aec-b330-dc2ec5c5c91b","10.19.103.2","Cisco Catalyst Switch","4000Civic-202-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ed6f9432-2d5c-4323-a1f9-fcebc652175d",IDS,22,"[ + ""open_port_22"" +]","10.19.103.2",Low,"1679670367.21681","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.106 AM",,"10.10.145.12","10.10.141.95",TCP,"c04734a1-eb5d-4108-ac6f-cdf5a1edab30_yDha",,,,,,,,SWITCH,"f2546184-1d38-4ca3-b3df-5d3149599087","10.10.145.12","Cisco Catalyst Switch","5Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","c04734a1-eb5d-4108-ac6f-cdf5a1edab30",IDS,22,"[ + ""open_port_22"" +]","10.10.145.12",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.096 AM",,"10.10.145.7","10.10.141.95",TCP,"cadbf889-d31a-4ac9-b960-cd86598fb218_yDha",,,,,,,,SWITCH,"d10a1c72-257a-4780-a790-1622d394f41f","10.10.145.7","Cisco Catalyst Switch","1West-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","cadbf889-d31a-4ac9-b960-cd86598fb218",IDS,22,"[ + ""open_port_22"" +]","10.10.145.7",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.092 AM",,"10.20.109.10","10.10.141.95",TCP,"69d547d3-a963-4d17-b8b1-ebf114b2ba97_yDha",,,,,,,,SWITCH,"af1b7d9a-62cb-4d32-8ef7-308790e6b055","10.20.109.10","Cisco Catalyst Switch","4000Civic-200B-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","69d547d3-a963-4d17-b8b1-ebf114b2ba97",IDS,22,"[ + ""open_port_22"" +]","10.20.109.10",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.089 AM",,"10.10.236.133","10.10.141.95",TCP,"7e81fce1-b837-42f5-b2af-9b7fec668747_yDha",,,,,,,,SWITCH,"bbf9a2b1-c8a4-4001-ae1f-fb3577c4c5d7","10.10.236.133","Cisco Catalyst Switch","Civic-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7e81fce1-b837-42f5-b2af-9b7fec668747",IDS,22,"[ + ""open_port_22"" +]","10.10.236.133",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.085 AM",,"10.10.145.10","10.10.141.95",TCP,"fe7ce5cd-7aad-4748-982e-4ecdf13940d9_yDha",,,,,,,,SWITCH,"224fb103-7597-4c4e-b872-480f8b940e9b","10.10.145.10","Cisco Catalyst Switch","4West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","fe7ce5cd-7aad-4748-982e-4ecdf13940d9",IDS,22,"[ + ""open_port_22"" +]","10.10.145.10",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.029 AM",,"10.10.162.200","10.10.141.95",TCP,"958cef14-e1f8-459a-b05f-0bf1e44883cd_V+Mc",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","958cef14-e1f8-459a-b05f-0bf1e44883cd",IDS,22,"[ + ""open_port_22"" +]","10.10.162.200",Low,"1679670347.48244","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.026 AM",,"10.10.145.24","10.10.141.95",TCP,"5aabf2aa-9c94-49cf-b943-1b0b3f9941e6_yDha",,,,,,,,SWITCH,"93bd2053-bd4c-4206-ac17-9f09fb17a866","10.10.145.24","Cisco Catalyst Switch","2Central-C3850-192-SW02.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5aabf2aa-9c94-49cf-b943-1b0b3f9941e6",IDS,22,"[ + ""open_port_22"" +]","10.10.145.24",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:46.023 AM",,"10.10.145.67","10.10.141.95",TCP,"13fd3997-e744-47ee-aa9d-e351b18796a2_yDha",,,,,,,,SWITCH,"99b4a085-5f3b-4f77-94d2-d75e9814254b","10.10.145.67","Catalyst 3850-48U","MGH-Internet-AGG-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","13fd3997-e744-47ee-aa9d-e351b18796a2",IDS,22,"[ + ""open_port_22"" +]","10.10.145.67",Low,"1679670372.20168","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.816 AM",,"10.50.132.74","10.10.138.31",UDP,"573ca255-1125-4b69-af28-ab58ccb3fcfc_HHcT",,,,,,,,CAD,"61ecae95-8043-4f00-bcac-9676ebb5d7f6","10.50.132.74",DynaCAD,"VM-PACSRAD29",CAD,CAD,"10.10.138.31","Source IP: 10.10.138.31, Port: 3389","573ca255-1125-4b69-af28-ab58ccb3fcfc",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.74",Low,"1679669777.22008","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.795 AM",,"10.10.142.51","10.50.149.33",TCP,"7a60db3c-0954-4fa5-9b02-62aeef1bf055_yj0Z",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.33","Source IP: 10.50.149.33, Port: 3389","7a60db3c-0954-4fa5-9b02-62aeef1bf055",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.10.142.51",Low,"1679669777.48065","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.788 AM",,"10.10.142.51","10.50.149.56",TCP,"11d17c11-670c-4bfe-bba5-8992baac519b_yj0Z",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.56","Source IP: 10.50.149.56, Port: 3389","11d17c11-670c-4bfe-bba5-8992baac519b",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.10.142.51",Low,"1679669777.48065","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:43.033 AM",,"10.20.208.51","10.50.140.96",,"ed8f676c-0d69-4082-8cda-f61a910a20e2_T5W6",,,,,,,,"REGULAR_PRINTER","cf00de08-7627-4712-8f69-ab988c077074","10.20.208.51","LaserJet Printer",P220118,Printer,"REGULAR_PRINTER",,"Scanner type: Symphion Source IP: 10.50.140.96, Exploit: SCAN NMAP OS Detection Probe, Target port: 33233, ","ed8f676c-0d69-4082-8cda-f61a910a20e2",IDS,33233,"[]",,Medium,"1679667260.05086","Scanner Activity","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:33.941 AM",,"10.50.132.43","10.50.149.22",TCP,"069935d0-a735-4217-acbc-55a86e1b4df8_FQhG",,,,,,,,CAD,"ff1f00ce-1f4c-4abb-80c3-08e8d05f12a8","10.50.132.43",DynaCAD,"VM-PACSRAD03",CAD,CAD,"10.50.149.22","Source IP: 10.50.149.22, Port: 3389","069935d0-a735-4217-acbc-55a86e1b4df8",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.43",Low,"1679604697.48531","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:05:12.793 AM",,,,,"ebabb58b-9eda-4f92-be7d-232727176a75_aWeR",,,,Firefox,"ocsp.pki.goog",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: ocsp.pki.goog, IP: 172.217.164.99","ebabb58b-9eda-4f92-be7d-232727176a75",IDS,80,"[ + ""web_browsing"" +]","172.217.164.99",Medium,"1679659038.19543","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:04:44.754 AM",,"10.20.143.2","10.10.142.31",TCP,"9744e23e-72a2-4a8b-8e46-5adfe7751f54_lZGl",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.142.31","Source IP: 10.10.142.31, Port: 22","9744e23e-72a2-4a8b-8e46-5adfe7751f54",IDS,22,"[ + ""open_port_22"" +]","10.20.143.2",Low,"1679606877.23765","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.697 AM",,"10.50.132.43","10.50.149.22",TCP,"b984e9bb-7bf4-4eed-bec9-251a5627691a_y+45",,,,,,,,CAD,"ff1f00ce-1f4c-4abb-80c3-08e8d05f12a8","10.50.132.43",DynaCAD,"VM-PACSRAD03",CAD,CAD,"10.50.149.22","Source IP: 10.50.149.22, Port: 3389","b984e9bb-7bf4-4eed-bec9-251a5627691a",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.43",Low,"1679604667.48093","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:59.098 AM",,,,,"a0c26c84-5393-4b3d-b2d4-93aeacbdd186_WDfl",,,,Chrome,"www.cisco.com",,,CAD,"9385a087-6fb7-489e-a024-dced1580a558","10.50.163.57",DynaCAD,"MGH-RADWS05",CAD,CAD,"10.50.163.57","Browser: Chrome, Host: www.cisco.com, IP: 104.108.67.95","a0c26c84-5393-4b3d-b2d4-93aeacbdd186",IDS,80,"[ + ""web_browsing"" +]","104.108.67.95",Medium,"1679614844.85038","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.726 AM",,,,,"cdb52538-7dcb-4442-9287-7f30c3527695_z9XA",,,,"Internet Explorer","teams.microsoft.com",,,CAD,"44d3a8ec-2d41-43ac-953f-d1489c5d5ca3","10.50.149.33",DynaCAD,"W-BUS-PACS-29",CAD,CAD,"10.50.149.33","Browser: Internet Explorer, Host: teams.microsoft.com, IP: 52.113.195.132","cdb52538-7dcb-4442-9287-7f30c3527695",IDS,80,"[ + ""web_browsing"" +]","52.113.195.132",Medium,"1679612938.36889","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.713 AM",,"10.20.21.194","10.10.141.95",TCP,"2bae75e8-5202-4e8c-a7c6-3d1508c83c7b_ItLq",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2bae75e8-5202-4e8c-a7c6-3d1508c83c7b",IDS,22,"[ + ""open_port_22"" +]","10.20.21.194",Low,"1679601382.22202","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:58.710 AM",,"10.19.88.2","10.10.141.95",TCP,"aa9d80e9-8927-4951-8e38-99e8d4d37428_ItLq",,,,,,,,SWITCH,"393404cc-a097-4a18-8aa4-1f17f2128ea5","10.19.88.2","Cisco Catalyst Switch","75Rowl220-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","aa9d80e9-8927-4951-8e38-99e8d4d37428",IDS,22,"[ + ""open_port_22"" +]","10.19.88.2",Low,"1679601382.22202","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:54.284 AM",,,,,"833e52fb-60c8-4185-9cbb-2b01a0522c1d_UXAZ",,,,Firefox,"ocsp.pki.goog",,,"DICOM_WORKSTATION","c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","MedDream DICOM Viewer",Test,"DICOM Workstation","DICOM_WORKSTATION","10.50.163.31","Browser: Firefox, Host: ocsp.pki.goog, IP: 172.217.164.99","833e52fb-60c8-4185-9cbb-2b01a0522c1d",IDS,80,"[ + ""web_browsing"" +]","172.217.164.99",Medium,"1679611911.81796","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.331 AM",,"10.10.16.137","10.10.141.95",TCP,"8fe25dc8-f86e-4487-9bfb-b72a0e3ab133_e1Ob",,,,,,,,SWITCH,"6a24443b-1074-4bd1-9d89-65ce807c6843","10.10.16.137","Catalyst 3850-48U","INT-OAK-DMZ",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8fe25dc8-f86e-4487-9bfb-b72a0e3ab133",IDS,22,"[ + ""open_port_22"" +]","10.10.16.137",Low,"1679599832.20683","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.328 AM",,"10.20.191.2","10.10.141.95",TCP,"766f9130-4829-46ee-95ae-a3beb724b8ec_e1Ob",,,,,,,,SWITCH,"da2bf764-b5ca-4c62-8bbe-7aeba04dcd33","10.20.191.2","Cisco Catalyst Switch","PRIMA-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","766f9130-4829-46ee-95ae-a3beb724b8ec",IDS,22,"[ + ""open_port_22"" +]","10.20.191.2",Low,"1679599832.20683","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.325 AM",,"10.10.184.194","10.10.141.95",TCP,"568dc2fc-ac8d-43df-9195-9e025af433f3_e1Ob",,,,,,,,SWITCH,"7761f73d-0382-45ed-b9fb-7a104cb390f5","10.10.184.194","Cisco Catalyst Switch","1350-SEliseo-STE130-48.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","568dc2fc-ac8d-43df-9195-9e025af433f3",IDS,22,"[ + ""open_port_22"" +]","10.10.184.194",Low,"1679599832.20683","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.282 AM",,,,,"0eca873c-2817-40a4-844b-ed5f0c392d57_jjOs",,,,Chrome,"www.cisco.com",,,CAD,"5a52315c-8866-42cc-b676-92264aeeed40","10.50.163.65",DynaCAD,"MGH-RADWS01",CAD,CAD,"10.50.163.65","Browser: Chrome, Host: www.cisco.com, IP: 104.108.67.95","0eca873c-2817-40a4-844b-ed5f0c392d57",IDS,80,"[ + ""web_browsing"" +]","104.108.67.95",Medium,"1679609873.2246","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.090 AM",,"10.10.162.150","10.10.141.95",TCP,"0c3d12eb-ef1b-469c-a130-52e04474ba07_louL",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","0c3d12eb-ef1b-469c-a130-52e04474ba07",IDS,22,"[ + ""open_port_22"" +]","10.10.162.150",Low,"1679599202.21491","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.086 AM",,"10.10.162.100","10.10.141.95",TCP,"f30febc9-8e4a-42a1-a3c6-fb60b1d58d94_louL",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","f30febc9-8e4a-42a1-a3c6-fb60b1d58d94",IDS,22,"[ + ""open_port_22"" +]","10.10.162.100",Low,"1679599202.21491","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.018 AM",,"10.19.56.2","10.10.141.95",TCP,"d52d046d-7944-4d4d-8077-7c93bcc366ee_LNTZ",,,,,,,,SWITCH,"c1aa2466-7676-4798-a7a6-53b59d77ca89","10.19.56.2","Cisco Catalyst Switch","1701FourthSt-120-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d52d046d-7944-4d4d-8077-7c93bcc366ee",IDS,22,"[ + ""open_port_22"" +]","10.19.56.2",Low,"1679599017.22343","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:34.013 AM",,"10.19.103.2","10.10.141.95",TCP,"bfc8382e-7c90-4419-bc8d-085c8a8d9b0c_LNTZ",,,,,,,,SWITCH,"34565923-0f93-4aec-b330-dc2ec5c5c91b","10.19.103.2","Cisco Catalyst Switch","4000Civic-202-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bfc8382e-7c90-4419-bc8d-085c8a8d9b0c",IDS,22,"[ + ""open_port_22"" +]","10.19.103.2",Low,"1679599017.22343","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:33.793 AM",,"10.50.163.21","10.50.138.42",TCP,"42dae1a7-2f1e-4b77-8dc4-af39a4c927cd_Tvxl",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","42dae1a7-2f1e-4b77-8dc4-af39a4c927cd",IDS,22,"[ + ""open_port_22"" +]","10.50.163.21",Low,"1679598652.48505","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:31.650 AM",,,,,"ea002fff-6c8a-414e-b38f-0f83fb1ac86b_/Tc3",,,,Chrome,"cacerts.digicert.com",,,CAD,"5a52315c-8866-42cc-b676-92264aeeed40","10.50.163.65",DynaCAD,"MGH-RADWS01",CAD,CAD,"10.50.163.65","Browser: Chrome, Host: cacerts.digicert.com, IP: 192.229.211.108","ea002fff-6c8a-414e-b38f-0f83fb1ac86b",IDS,80,"[ + ""web_browsing"" +]","192.229.211.108",Medium,"1679605927.47462","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:24.203 AM",,"10.10.162.150","10.10.141.95",TCP,"4e871d0a-d422-4d78-af29-3f85995c140c_fYEx",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","4e871d0a-d422-4d78-af29-3f85995c140c",IDS,22,"[ + ""open_port_22"" +]","10.10.162.150",Low,"1679564687.22832","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:23.938 AM",,"10.10.145.23","10.10.96.148",TCP,"0652a043-9f29-4ec8-a9c9-6ead44a53a32_Vakj",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.96.148","Source IP: 10.10.96.148, Port: 22","0652a043-9f29-4ec8-a9c9-6ead44a53a32",IDS,22,"[ + ""open_port_22"" +]","10.10.145.23",Low,"1679594937.24026","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:23.838 AM",,,,,"453052f6-2c58-460e-afd0-0a00c3644038_9uyP",,,,Firefox,"r3.o.lencr.org.x.71a0cd0504f52040ca0bc3303bdfb364ee72.9270f74f.id.opendns.com",,,PACS,"9edd7e38-420b-4630-857d-8fc6cf122104","10.10.141.126","McKesson Radiology 12.3","ALI_QUERY_SCP","PACS Server",PACS,"10.10.141.126","Browser: Firefox, Host: r3.o.lencr.org.x.71a0cd0504f52040ca0bc3303bdfb364ee72.9270f74f.id.opendns.com, IP: 146.112.247.79","453052f6-2c58-460e-afd0-0a00c3644038",IDS,80,"[ + ""web_browsing"" +]","146.112.247.79",Medium,"1679602921.01168","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.903 AM",,"10.10.20.100","10.10.141.95",TCP,"7483046d-4df6-472f-94c9-14855e52de79_CC6q",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","7483046d-4df6-472f-94c9-14855e52de79",IDS,22,"[ + ""open_port_22"" +]","10.10.20.100",Low,"1679563457.20393","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.895 AM",,"10.20.47.2","10.10.141.95",TCP,"8f3314ac-9d56-4fe9-958c-12d6c45389dd_CC6q",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8f3314ac-9d56-4fe9-958c-12d6c45389dd",IDS,22,"[ + ""open_port_22"" +]","10.20.47.2",Low,"1679563457.20393","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.708 AM",,,,,"1786a755-a619-4edf-88b7-446872864164_DcR0",,,,Firefox,"detectportal.firefox.com",,,MAMMOGRAPHY,"c7639506-5b0c-4af3-afef-38545263a03c","10.50.163.31","Senographe Pristina/Pristina Serena Mammography System","MH_CT1_L552",Mammography,MAMMOGRAPHY,"10.50.163.31","Browser: Firefox, Host: detectportal.firefox.com, IP: 34.107.221.82","1786a755-a619-4edf-88b7-446872864164",IDS,80,"[ + ""web_browsing"" +]","34.107.221.82",Medium,"1679602786.83231","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:15.702 AM",,"10.50.163.21","10.50.138.42",TCP,"d4f7bd32-9f02-4018-9ed6-8dd26b933900_ZeG0",,,,,,,,MRI,"a928b664-57fd-489f-a502-5670f44bd8ab","10.50.163.21",Ingenia,"MH_MR1_L512",MRI,MRI,"10.50.138.42","Source IP: 10.50.138.42, Port: 22","d4f7bd32-9f02-4018-9ed6-8dd26b933900",IDS,22,"[ + ""open_port_22"" +]","10.50.163.21",Low,"1679598667.48213","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.382 AM",,"10.20.21.194","10.10.141.95",TCP,"a09f85c1-1874-49a5-8cdc-972b733bd379_5nIB",,,,,,,,SWITCH,"32eeceb2-039a-4418-bb08-718f22d3cd12","10.20.21.194","Cisco Catalyst Switch","23Reed-TIM-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a09f85c1-1874-49a5-8cdc-972b733bd379",IDS,22,"[ + ""open_port_22"" +]","10.20.21.194",Low,"1679594857.25203","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:09.193 AM",,"10.10.145.13","10.10.141.95",TCP,"05d8ef74-72f5-4fb6-a46f-532dd7c840aa_QvK+",,,,,,,,SWITCH,"00bcead7-6eb2-427b-b74b-340afe6fb482","10.10.145.13","Catalyst 2960S","MDF-1-c2960-APC-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","05d8ef74-72f5-4fb6-a46f-532dd7c840aa",IDS,22,"[ + ""open_port_22"" +]","10.10.145.13",Low,"1679594547.22111","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/26/2023, 7:03:06.680 AM",,"10.10.145.23","10.10.96.148",TCP,"0106b02a-1c85-4de2-913c-9d6f42e3c682_h+Cx",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.96.148","Source IP: 10.10.96.148, Port: 22","0106b02a-1c85-4de2-913c-9d6f42e3c682",IDS,22,"[ + ""open_port_22"" +]","10.10.145.23",Low,"1679594117.2464","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:56:49.034 PM",,"10.10.162.200","10.10.141.95",TCP,"7e71e6d5-7f73-4685-8a4d-b6c96c697dec_gPIh",,,,,,,,"WIRELESS_CONTROLLER","c23dac78-9ff1-48e1-9573-6a4ae15c3afd","10.10.162.200","5520 Wireless Controller","MDF-2-WLC5520N","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","7e71e6d5-7f73-4685-8a4d-b6c96c697dec",IDS,22,"[ + ""open_port_22"" +]","10.10.162.200",Low,"1679592892.4876","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:34.907 PM",,"10.10.20.100","10.10.141.95",TCP,"562f309d-a5a9-4777-8d02-8f941c386798_5pT2",,,,,,,,SWITCH,"30715d08-b574-4617-a7cd-2c9595cc7ad0","10.10.20.100","Catalyst 3850-48U","INT-CED-DMZ.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","562f309d-a5a9-4777-8d02-8f941c386798",IDS,22,"[ + ""open_port_22"" +]","10.10.20.100",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:30.483 PM",,"10.10.204.2","10.10.141.95",TCP,"1aa1b396-4150-4496-9d56-4d7184347772_5pT2",,,,,,,,SWITCH,"9cc0363a-1448-4b03-877b-c743e4edbc11","10.10.204.2","Cisco Catalyst Switch","MH-Phlps-6-A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1aa1b396-4150-4496-9d56-4d7184347772",IDS,22,"[ + ""open_port_22"" +]","10.10.204.2",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:27.273 PM",,"10.10.204.12","10.10.141.95",TCP,"e72213e2-7515-486b-9a30-cc9dfa52bf90_5pT2",,,,,,,,SWITCH,"690a3cc5-7b90-4bf7-b2b4-4a99883c680f","10.10.204.12","Cisco Catalyst Switch","MH-Phlps-3101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e72213e2-7515-486b-9a30-cc9dfa52bf90",IDS,22,"[ + ""open_port_22"" +]","10.10.204.12",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:46:24.525 PM",,"10.20.47.2","10.10.141.95",TCP,"462cc6e5-d78e-48b9-a28d-b1fe0d3ace27_5pT2",,,,,,,,SWITCH,"a564f192-3122-447b-bbed-8c79dfa5fdbd","10.20.47.2","Cisco Catalyst Switch","75Rowl100-c3850-48-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","462cc6e5-d78e-48b9-a28d-b1fe0d3ace27",IDS,22,"[ + ""open_port_22"" +]","10.20.47.2",Low,"1679592687.23416","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:50.349 PM",,"10.10.195.140","10.10.141.95",TCP,"f064c973-6014-428e-87a4-e45f08f5d6fa_DBVn",,,,,,,,SWITCH,"715a7bff-b86b-40c1-b290-a1d910333551","10.10.195.140","Catalyst 2960S","1100Eliseo2960-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f064c973-6014-428e-87a4-e45f08f5d6fa",IDS,22,"[ + ""open_port_22"" +]","10.10.195.140",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:48.201 PM",,"10.10.178.242","10.10.141.95",TCP,"14ea2072-ac60-4eed-b49a-717c2c2ef336_DBVn",,,,,,,,SWITCH,"00365818-9730-4f67-af78-d2b4242bf75c","10.10.178.242","Cisco Catalyst Switch","1350-SEliseo-Ste220-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","14ea2072-ac60-4eed-b49a-717c2c2ef336",IDS,22,"[ + ""open_port_22"" +]","10.10.178.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:45.938 PM",,"10.10.145.5","10.10.141.95",TCP,"93cd9e76-3b75-490b-9cf5-b8d30b01356d_DBVn",,,,,,,,SWITCH,"b188b718-611b-44dd-9de4-b220156dbe65","10.10.145.5","Catalyst 2960S","MGH-Engineering-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","93cd9e76-3b75-490b-9cf5-b8d30b01356d",IDS,22,"[ + ""open_port_22"" +]","10.10.145.5",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:44.519 PM",,"10.10.228.137","10.10.141.95",TCP,"cfb6c70a-56f7-47e0-b3f9-ee932c29ea63_DBVn",,,,,,,,SWITCH,"e396e00b-66bc-4c90-9e22-8f219807c304","10.10.228.137","Cisco Catalyst Switch","75Rowl101-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","cfb6c70a-56f7-47e0-b3f9-ee932c29ea63",IDS,22,"[ + ""open_port_22"" +]","10.10.228.137",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:44.514 PM",,"10.10.145.25","10.10.141.95",TCP,"bf5ab39b-fa5a-4e43-a163-e4d4f5eac9f4_DBVn",,,,,,,,SWITCH,"0337c96d-39f9-4c00-876f-06ac402fa0a3","10.10.145.25","Cisco Catalyst Switch","2Central-C3850-96-SW03.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","bf5ab39b-fa5a-4e43-a163-e4d4f5eac9f4",IDS,22,"[ + ""open_port_22"" +]","10.10.145.25",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:44.510 PM",,"10.20.10.194","10.10.141.95",TCP,"a5cc4fc7-b674-43ab-9441-a37d065b5cb6_DBVn",,,,,,,,SWITCH,"8e0d83c3-390c-4f33-b643-50389b1d6b86","10.20.10.194","Cisco Catalyst Switch","9Com-C3850-96-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a5cc4fc7-b674-43ab-9441-a37d065b5cb6",IDS,22,"[ + ""open_port_22"" +]","10.20.10.194",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:40.011 PM",,"10.10.194.197","10.10.141.95",TCP,"95b5c95c-30a7-47df-b152-66cdcc542ea7_DBVn",,,,,,,,SWITCH,"6baf1025-8db2-4587-9f69-6929859d7c8e","10.10.194.197","Cisco Catalyst Switch","1260SEliseo-C3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","95b5c95c-30a7-47df-b152-66cdcc542ea7",IDS,22,"[ + ""open_port_22"" +]","10.10.194.197",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:35.336 PM",,"10.20.159.2","10.10.141.95",TCP,"216bd28f-9b1b-4b76-8dbd-116370ded59b_DBVn",,,,,,,,SWITCH,"d0c725c3-1f36-49a6-bd17-1f0db75095d7","10.20.159.2","Cisco Catalyst Switch","5BonAir-101-c3850-48-SW",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","216bd28f-9b1b-4b76-8dbd-116370ded59b",IDS,22,"[ + ""open_port_22"" +]","10.20.159.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:33.050 PM",,"10.10.145.11","10.10.141.95",TCP,"18ad46ac-98a2-4b1a-b3f9-a4bb858e1603_DBVn",,,,,,,,SWITCH,"3e973541-e49d-4ae5-88d7-223f0a8933da","10.10.145.11","Cisco Catalyst Switch","2West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","18ad46ac-98a2-4b1a-b3f9-a4bb858e1603",IDS,22,"[ + ""open_port_22"" +]","10.10.145.11",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:30.844 PM",,"10.20.175.2","10.10.141.95",TCP,"1a03ea38-3091-4a32-a251-f8c750a3807a_DBVn",,,,,,,,SWITCH,"8fad271e-115d-43f8-982f-ce1687063594","10.20.175.2","Cisco Catalyst Switch","PRIMA-100DRAKES-3850-STACK.maringeneral.",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1a03ea38-3091-4a32-a251-f8c750a3807a",IDS,22,"[ + ""open_port_22"" +]","10.20.175.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:28.141 PM",,"10.20.22.194","10.10.141.95",TCP,"22d9215f-1a97-4294-8e53-ec35a2955471_DBVn",,,,,,,,SWITCH,"59c8bdf1-0863-428a-9898-d5827f1c9a42","10.20.22.194","Cisco Catalyst Switch","1341Eliseo-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","22d9215f-1a97-4294-8e53-ec35a2955471",IDS,22,"[ + ""open_port_22"" +]","10.20.22.194",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:28.137 PM",,"10.20.79.5","10.10.141.95",TCP,"30ceb4f5-2eca-41b3-8014-52659d33626f_DBVn",,,,,,,,SWITCH,"8df37589-717b-49a5-979e-ec40ac93c229","10.20.79.5","Cisco Catalyst Switch","651FStSonoma-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","30ceb4f5-2eca-41b3-8014-52659d33626f",IDS,22,"[ + ""open_port_22"" +]","10.20.79.5",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:24.579 PM",,"10.10.145.26","10.10.141.95",TCP,"a32cc7a5-1b01-4069-b744-93f75c97486a_DBVn",,,,,,,,SWITCH,"63f72b58-a0f8-4a58-a02f-7b26e9fd4b82","10.10.145.26","Cisco Catalyst Switch","MHB-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a32cc7a5-1b01-4069-b744-93f75c97486a",IDS,22,"[ + ""open_port_22"" +]","10.10.145.26",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:22.335 PM",,"10.20.207.2","10.10.141.95",TCP,"87fb083a-2937-46a8-9867-bf21102975ca_DBVn",,,,,,,,SWITCH,"0b4e943b-9635-4952-a6be-6ebcb969a459","10.20.207.2","Cisco Catalyst Switch","PRIMA-347Andrieux-c3850-48-SW.maringener",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","87fb083a-2937-46a8-9867-bf21102975ca",IDS,22,"[ + ""open_port_22"" +]","10.20.207.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:20.080 PM",,"10.10.145.8","10.10.141.95",TCP,"14a5ef6f-7e89-4627-adf3-8d2172ea09e9_DBVn",,,,,,,,SWITCH,"785abf71-059b-4d14-bedc-485bf82e85ff","10.10.145.8","Cisco Catalyst Switch","1Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","14a5ef6f-7e89-4627-adf3-8d2172ea09e9",IDS,22,"[ + ""open_port_22"" +]","10.10.145.8",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:19.214 PM",,"10.20.223.2","10.10.141.95",TCP,"5783240b-228f-4627-9037-82d553449017_DBVn",,,,,,,,SWITCH,"de343319-37ea-44ca-9586-073e119a4726","10.20.223.2","Cisco Catalyst Switch","PRIMA-1496Professional-c3850-48-SW.marin",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5783240b-228f-4627-9037-82d553449017",IDS,22,"[ + ""open_port_22"" +]","10.20.223.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:19.208 PM",,"10.10.145.15","10.10.141.95",TCP,"1a39b63c-3096-451c-b519-5ea215d49f91_DBVn",,,,,,,,SWITCH,"8a336c51-448e-4b38-9ded-dda2b03fd1ba","10.10.145.15","Catalyst 3850-48P","3West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1a39b63c-3096-451c-b519-5ea215d49f91",IDS,22,"[ + ""open_port_22"" +]","10.10.145.15",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:15.613 PM",,"10.20.30.242","10.10.141.95",TCP,"ee8f7d62-d67d-4294-aa27-f616122aee5d_DBVn",,,,,,,,SWITCH,"716f2c3f-a88c-4c91-aab5-b9aa32edf877","10.20.30.242","Cisco Catalyst Switch","75Rowl250-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ee8f7d62-d67d-4294-aa27-f616122aee5d",IDS,22,"[ + ""open_port_22"" +]","10.20.30.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:10.941 PM",,"10.10.236.136","10.10.141.95",TCP,"51a66496-dc08-4f68-a632-7c2b55329aab_DBVn",,,,,,,,SWITCH,"c24cdf3c-7168-4cbb-8a9e-142c8afa8ed1","10.10.236.136","Catalyst 2960S","Civic-C2960-48-SW02",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","51a66496-dc08-4f68-a632-7c2b55329aab",IDS,22,"[ + ""open_port_22"" +]","10.10.236.136",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:10.026 PM",,"10.20.62.5","10.10.141.95",TCP,"d9eba895-825f-470d-8715-375e8bf279c6_DBVn",,,,,,,,SWITCH,"5a9c7ddb-8484-4e3e-a560-85eb3f884cb3","10.20.62.5","Cisco Catalyst Switch","900SEliseo201-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d9eba895-825f-470d-8715-375e8bf279c6",IDS,22,"[ + ""open_port_22"" +]","10.20.62.5",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:05.672 PM",,"10.10.145.85","10.10.141.95",TCP,"82e3ee4b-1ecb-4c17-b017-73ccb44da731_DBVn",,,,,,,,SWITCH,"46079d19-5c75-4342-a79e-012112c3124c","10.10.145.85","Cisco Catalyst Switch","MIS-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","82e3ee4b-1ecb-4c17-b017-73ccb44da731",IDS,22,"[ + ""open_port_22"" +]","10.10.145.85",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:04.251 PM",,"10.20.143.2","10.10.141.95",TCP,"b8455175-bafa-4412-ac2f-5fc451c9d0b3_DBVn",,,,,,,,SWITCH,"cd623a19-2c5b-4c72-80e6-125cb2be2dec","10.20.143.2","Cisco Catalyst Switch","3Harbor-c3850-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","b8455175-bafa-4412-ac2f-5fc451c9d0b3",IDS,22,"[ + ""open_port_22"" +]","10.20.143.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:01.947 PM",,"10.10.204.15","10.10.141.95",TCP,"d0b7eba9-d72b-44e5-bdb3-a10fee57d7b1_DBVn",,,,,,,,SWITCH,"669bc5d7-d785-40a5-a8f6-dd6bb0099ef1","10.10.204.15","Cisco Catalyst Switch","MH-Phlps-2101_D_A.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d0b7eba9-d72b-44e5-bdb3-a10fee57d7b1",IDS,22,"[ + ""open_port_22"" +]","10.10.204.15",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:34:01.942 PM",,"10.10.145.87","10.10.141.95",TCP,"0792b14e-e6d4-4e9c-8018-f09c16c01b42_DBVn",,,,,,,,SWITCH,"5bdb5c80-de6b-4609-954b-edbbb0ec300c","10.10.145.87","Catalyst 2960S","MIS-C2960S-IMG-SW-2.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","0792b14e-e6d4-4e9c-8018-f09c16c01b42",IDS,22,"[ + ""open_port_22"" +]","10.10.145.87",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:57.474 PM",,"10.10.145.72","10.10.141.95",TCP,"f2aa2963-5e66-4942-8240-6024e352ce0c_DBVn",,,,,,,,SWITCH,"94a134a2-f4ca-460c-8bd0-84465fdfead5","10.10.145.72","Catalyst 2960S","MIS-IMAGING-Sw2960.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f2aa2963-5e66-4942-8240-6024e352ce0c",IDS,22,"[ + ""open_port_22"" +]","10.10.145.72",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:55.985 PM",,"10.20.47.3","10.10.141.95",TCP,"e6f2b745-fa8e-47e5-9829-4e94a434f9a2_DBVn",,,,,,,,SWITCH,"11220655-a6dc-472b-bd79-dd7c1fd12860","10.20.47.3","Cisco Catalyst Switch","75Rowl275-c3850-24-S",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","e6f2b745-fa8e-47e5-9829-4e94a434f9a2",IDS,22,"[ + ""open_port_22"" +]","10.20.47.3",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:53.603 PM",,"10.10.176.242","10.10.141.95",TCP,"a2abaa0f-59ce-4bf3-aa56-d61b57a174e5_DBVn",,,,,,,,SWITCH,"50310ff2-90c7-46d0-9e4c-932d65b2c23d","10.10.176.242","Cisco Catalyst Switch","1350-SEliseo-Ste120-96.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","a2abaa0f-59ce-4bf3-aa56-d61b57a174e5",IDS,22,"[ + ""open_port_22"" +]","10.10.176.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:51.293 PM",,"10.10.145.18","10.10.141.95",TCP,"527b448f-1805-4a3d-8f88-a7c61e986327_DBVn",,,,,,,,SWITCH,"9eb7d56e-0e51-47c2-b53a-dda89d661e44","10.10.145.18","Cisco Catalyst Switch","Lobby-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","527b448f-1805-4a3d-8f88-a7c61e986327",IDS,22,"[ + ""open_port_22"" +]","10.10.145.18",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:49.058 PM",,"10.20.127.2","10.10.141.95",TCP,"5ac437dd-b38b-48aa-9da2-fa89dbc9b3d9_DBVn",,,,,,,,SWITCH,"33145016-7192-4675-9a7c-ca39cc128f9d","10.20.127.2","Cisco Catalyst Switch","1350-SEliseo-Ste300-48",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","5ac437dd-b38b-48aa-9da2-fa89dbc9b3d9",IDS,22,"[ + ""open_port_22"" +]","10.20.127.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:49.053 PM",,"10.10.220.136","10.10.141.95",TCP,"082b91c1-0fd8-4c74-b024-e34a01d4be38_DBVn",,,,,,,,SWITCH,"77e1d12c-3d43-4318-a5a1-82548d8b12d4","10.10.220.136","Catalyst 2960S","2BonAir-C2960-144-SW-VoIP.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","082b91c1-0fd8-4c74-b024-e34a01d4be38",IDS,22,"[ + ""open_port_22"" +]","10.10.220.136",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:45.261 PM",,"10.10.162.100","10.10.141.95",TCP,"122ec98b-bb59-47d3-8b4c-8d6f6fb52b08_DBVn",,,,,,,,"WIRELESS_CONTROLLER","0c7d8040-7e44-4720-af7e-6564e388aae5","10.10.162.100","5520 Wireless Controller","MDF-1-WLC5520","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","122ec98b-bb59-47d3-8b4c-8d6f6fb52b08",IDS,22,"[ + ""open_port_22"" +]","10.10.162.100",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:44.431 PM",,"10.10.145.23","10.10.141.95",TCP,"cc861e49-2aac-4697-b026-591c9b5f8b94_DBVn",,,,,,,,SWITCH,"8c9c5f46-7b91-4854-82f4-9394e5c8addc","10.10.145.23","Cisco Catalyst Switch","2Central-C3850-192-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","cc861e49-2aac-4697-b026-591c9b5f8b94",IDS,22,"[ + ""open_port_22"" +]","10.10.145.23",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:44.426 PM",,"10.10.220.135","10.10.141.95",TCP,"453657cd-c580-4aff-8fce-abe7deb77f9b_DBVn",,,,,,,,SWITCH,"7ced9ab0-d754-4d23-a175-55e65c5babff","10.10.220.135","Catalyst 2960S","2BonAir-C2960-192-SW-Data.maringeneral.o",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","453657cd-c580-4aff-8fce-abe7deb77f9b",IDS,22,"[ + ""open_port_22"" +]","10.10.220.135",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:40.905 PM",,"10.10.232.242","10.10.141.95",TCP,"711b1d0b-9bc6-4c90-9a20-762c61f555cf_DBVn",,,,,,,,SWITCH,"d35ffa2a-aed1-4e33-a316-59c02553750d","10.10.232.242","Cisco Catalyst Switch","75Rowl140-c3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","711b1d0b-9bc6-4c90-9a20-762c61f555cf",IDS,22,"[ + ""open_port_22"" +]","10.10.232.242",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:36.907 PM",,"10.10.145.86","10.10.141.95",TCP,"ec7d09d1-9be7-46b2-a202-440437e57694_DBVn",,,,,,,,SWITCH,"48dcdb84-2dc9-4136-a140-04ff36f0f83e","10.10.145.86","Catalyst 2960S","MIS-C2960S-IMG-SW-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ec7d09d1-9be7-46b2-a202-440437e57694",IDS,22,"[ + ""open_port_22"" +]","10.10.145.86",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:36.902 PM",,"10.10.145.6","10.10.141.95",TCP,"283a8e25-4c99-4d58-ac22-d363aa803d29_DBVn",,,,,,,,SWITCH,"26531e3f-80f0-401e-aed6-8cd9fcf1fc74","10.10.145.6","Cisco Catalyst Switch","3West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","283a8e25-4c99-4d58-ac22-d363aa803d29",IDS,22,"[ + ""open_port_22"" +]","10.10.145.6",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:33.350 PM",,"10.10.145.16","10.10.141.95",TCP,"310bee02-aeb6-441f-b705-41ec16b8885c_DBVn",,,,,,,,SWITCH,"2e9e4ef4-57d3-4ac9-8a40-1158265b2a71","10.10.145.16","Cisco Catalyst Switch","4West-c3850-48-Banyan",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","310bee02-aeb6-441f-b705-41ec16b8885c",IDS,22,"[ + ""open_port_22"" +]","10.10.145.16",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:30.510 PM",,"10.10.236.135","10.10.141.95",TCP,"981cc0c9-360b-4c98-9370-a406b148295c_DBVn",,,,,,,,SWITCH,"a24e4477-e641-4e07-bbea-a7be77fc2f78","10.10.236.135","Catalyst 2960S","Civic-C2960-144-SW01.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","981cc0c9-360b-4c98-9370-a406b148295c",IDS,22,"[ + ""open_port_22"" +]","10.10.236.135",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:30.507 PM",,"10.10.228.2","10.10.141.95",TCP,"97eb21f7-d374-4984-a261-37794b1be839_DBVn",,,,,,,,SWITCH,"15358dc2-070d-42b8-957d-fc0537790e77","10.10.228.2","Cisco Catalyst Switch","75Rowl201-C3850-144-S.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","97eb21f7-d374-4984-a261-37794b1be839",IDS,22,"[ + ""open_port_22"" +]","10.10.228.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:30.502 PM",,"10.20.253.2","10.10.141.95",TCP,"febb64d9-1cca-483f-8d9b-c9a264308c7c_DBVn",,,,,,,,SWITCH,"fc28d091-4906-4e1d-97bd-eabbe7538de0","10.20.253.2","Cisco Catalyst Switch","4000Civic-206_209-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","febb64d9-1cca-483f-8d9b-c9a264308c7c",IDS,22,"[ + ""open_port_22"" +]","10.20.253.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:24.801 PM",,"10.10.145.4","10.10.141.95",TCP,"8e7058e8-17b6-4893-9c69-35ca66ea8ea7_DBVn",,,,,,,,SWITCH,"a4d28bc4-9482-4924-8423-aa8868def9f4","10.10.145.4","Cisco Catalyst Switch","3Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","8e7058e8-17b6-4893-9c69-35ca66ea8ea7",IDS,22,"[ + ""open_port_22"" +]","10.10.145.4",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:20.932 PM",,"10.10.145.9","10.10.141.95",TCP,"2c743081-804d-4215-944a-8f9cbc7a0043_DBVn",,,,,,,,SWITCH,"96372eef-9a67-4ff6-9520-4851e58e02a9","10.10.145.9","Cisco Catalyst Switch","4Central-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","2c743081-804d-4215-944a-8f9cbc7a0043",IDS,22,"[ + ""open_port_22"" +]","10.10.145.9",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:18.505 PM",,"10.10.145.12","10.10.141.95",TCP,"ff4e8a8c-0c69-4d64-b6b2-f901375b47ea_DBVn",,,,,,,,SWITCH,"f2546184-1d38-4ca3-b3df-5d3149599087","10.10.145.12","Cisco Catalyst Switch","5Central-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","ff4e8a8c-0c69-4d64-b6b2-f901375b47ea",IDS,22,"[ + ""open_port_22"" +]","10.10.145.12",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:18.500 PM",,"10.20.95.2","10.10.141.95",TCP,"4d8d1a9a-6ebd-4b99-9dea-142d51971d25_DBVn",,,,,,,,SWITCH,"b0ae69b1-9c48-4b75-b021-9bffb0112314","10.20.95.2","Cisco Catalyst Switch","1100Larkspur-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4d8d1a9a-6ebd-4b99-9dea-142d51971d25",IDS,22,"[ + ""open_port_22"" +]","10.20.95.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:18.492 PM",,"10.10.200.40","10.10.141.95",TCP,"caf0da73-bdce-4492-968d-6d19fdedb6c5_DBVn",,,,,,,,SWITCH,"22f915b2-3162-4581-8949-67c0c270d617","10.10.200.40","Cisco Catalyst Switch","100ADrakes140-C3850-144-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","caf0da73-bdce-4492-968d-6d19fdedb6c5",IDS,22,"[ + ""open_port_22"" +]","10.10.200.40",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:13.595 PM",,"10.10.190.7","10.10.141.95",TCP,"4c60e17a-dcce-47da-a8ec-9f5af1a51352_DBVn",,,,,,,,SWITCH,"b5658de0-e0eb-48b0-8e9c-a30f74b0defa","10.10.190.7","Cisco Catalyst Switch","1240Eliseo-C3850-120-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","4c60e17a-dcce-47da-a8ec-9f5af1a51352",IDS,22,"[ + ""open_port_22"" +]","10.10.190.7",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:09.641 PM",,"10.10.145.7","10.10.141.95",TCP,"310f0fa4-b744-49c6-89ad-c11fcb3f24e4_DBVn",,,,,,,,SWITCH,"d10a1c72-257a-4780-a790-1622d394f41f","10.10.145.7","Cisco Catalyst Switch","1West-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","310f0fa4-b744-49c6-89ad-c11fcb3f24e4",IDS,22,"[ + ""open_port_22"" +]","10.10.145.7",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:07.275 PM",,"10.20.109.10","10.10.141.95",TCP,"d08ae7a0-6718-4c05-bfa4-e30152586ab2_DBVn",,,,,,,,SWITCH,"af1b7d9a-62cb-4d32-8ef7-308790e6b055","10.20.109.10","Cisco Catalyst Switch","4000Civic-200B-48-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","d08ae7a0-6718-4c05-bfa4-e30152586ab2",IDS,22,"[ + ""open_port_22"" +]","10.20.109.10",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:04.977 PM",,"10.10.145.10","10.10.141.95",TCP,"23a551e2-da2a-4c92-b080-803b7974fd60_DBVn",,,,,,,,SWITCH,"224fb103-7597-4c4e-b872-480f8b940e9b","10.10.145.10","Cisco Catalyst Switch","4West-C3850-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","23a551e2-da2a-4c92-b080-803b7974fd60",IDS,22,"[ + ""open_port_22"" +]","10.10.145.10",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:33:03.291 PM",,"10.10.236.133","10.10.141.95",TCP,"236f5c16-4626-479d-8e73-82d1ea6659a9_DBVn",,,,,,,,SWITCH,"bbf9a2b1-c8a4-4001-ae1f-fb3577c4c5d7","10.10.236.133","Cisco Catalyst Switch","Civic-C3850-192-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","236f5c16-4626-479d-8e73-82d1ea6659a9",IDS,22,"[ + ""open_port_22"" +]","10.10.236.133",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:59.393 PM",,"10.20.109.2","10.10.141.95",TCP,"38a9137e-84cf-4b5e-b392-8b324628f559_DBVn",,,,,,,,SWITCH,"766a3b0a-8973-449c-8468-3409cf2a48e4","10.20.109.2","Cisco Catalyst Switch","4000Civic-205-96-SW.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","38a9137e-84cf-4b5e-b392-8b324628f559",IDS,22,"[ + ""open_port_22"" +]","10.20.109.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:56.983 PM",,"10.10.145.92","10.10.141.95",TCP,"f341775a-97c8-4790-b959-2059145da939_DBVn",,,,,,,,SWITCH,"ede79008-7959-4b40-80f5-4e8d30d99303","10.10.145.92","Catalyst 2960S","RMT2960-48-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","f341775a-97c8-4790-b959-2059145da939",IDS,22,"[ + ""open_port_22"" +]","10.10.145.92",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:55.267 PM",,"10.10.145.24","10.10.141.95",TCP,"da09153b-97b4-4812-80f4-b713e5c4eeba_DBVn",,,,,,,,SWITCH,"93bd2053-bd4c-4206-ac17-9f09fb17a866","10.10.145.24","Cisco Catalyst Switch","2Central-C3850-192-SW02.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","da09153b-97b4-4812-80f4-b713e5c4eeba",IDS,22,"[ + ""open_port_22"" +]","10.10.145.24",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:52.508 PM",,"10.10.185.2","10.10.141.95",TCP,"1bfbba3d-7851-4357-a93e-9031036587c2_DBVn",,,,,,,,SWITCH,"8c31c8a3-cc71-4506-9656-d6e947c78ee3","10.10.185.2","Cisco Catalyst Switch","1350-SEliseo-C3850-144.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","1bfbba3d-7851-4357-a93e-9031036587c2",IDS,22,"[ + ""open_port_22"" +]","10.10.185.2",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:50.882 PM",,"10.10.145.96","10.10.141.95",TCP,"84d8a5f7-bbc4-4d27-a3c5-653433d6b489_DBVn",,,,,,,,SWITCH,"ab5d1d34-dea3-459d-b30b-adcfaf6f380c","10.10.145.96","Catalyst 2960S","SPC2960-24-S1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","84d8a5f7-bbc4-4d27-a3c5-653433d6b489",IDS,22,"[ + ""open_port_22"" +]","10.10.145.96",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:49.343 PM",,"10.10.145.67","10.10.141.95",TCP,"43c51cd9-bbb2-4ecf-8db1-b209cb6ab573_DBVn",,,,,,,,SWITCH,"99b4a085-5f3b-4f77-94d2-d75e9814254b","10.10.145.67","Catalyst 3850-48U","MGH-Internet-AGG-3850.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","43c51cd9-bbb2-4ecf-8db1-b209cb6ab573",IDS,22,"[ + ""open_port_22"" +]","10.10.145.67",Low,"1679592682.23322","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:32:11.719 PM",,"10.10.142.51","10.50.149.33",TCP,"88ca988e-99ea-4722-95c1-2b686d5d8c89_PPQO",,,,,,,,PACS,"7493ebf8-3d74-4300-bb6e-648a1f38307d","10.10.142.51","Medcon CPACS","MEDCON_WL","PACS Server",PACS,"10.50.149.33","Source IP: 10.50.149.33, Port: 3389","88ca988e-99ea-4722-95c1-2b686d5d8c89",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.10.142.51",Low,"1679592682.48408","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:23:03.004 PM",,"10.50.145.5","10.10.141.95",TCP,"dcc87832-927d-4472-a9f5-0af6d1244b59_ScAl",,,,,,,,SWITCH,"8a732210-2406-4ef0-a9a2-ae5d23cd8d98","10.50.145.5","Cisco Catalyst Switch","MH-3850-B561-1.maringeneral.org",Switch,SWITCH,"10.10.141.95","Source IP: 10.10.141.95, Port: 22","dcc87832-927d-4472-a9f5-0af6d1244b59",IDS,22,"[ + ""open_port_22"" +]","10.50.145.5",Low,"1679591432.48027","SSH Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:22:59.179 PM",,"10.50.132.69","10.50.149.56",UDP,"4e842bf1-1fa3-4e59-b6e2-21a011c72127_ScAl",,,,,,,,CAD,"c9b57a7d-0178-448f-a764-9dde70789592","10.50.132.69",DynaCAD,"VM-PACSRAD25",CAD,CAD,"10.50.149.56","Source IP: 10.50.149.56, Port: 3389","4e842bf1-1fa3-4e59-b6e2-21a011c72127",IDS,3389,"[ + ""CVE-2019-1181"", + ""CVE-2019-1182"", + ""CVE-2019-0708"", + ""open_port_3389"" +]","10.50.132.69",Low,"1679591432.48027","RDP Connection","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:14:01.759 PM",,,,,"9f46a04c-347b-4057-95d7-c30382572523_x+r7",,,,Chrome,"www.google.com",,,CAD,"1433419d-54ed-4ac9-a55c-b78b480b7caf","10.50.163.37",DynaCAD,"MGH-MAMWS03",CAD,CAD,"10.50.163.37","Browser: Chrome, Host: www.google.com, IP: 142.251.32.36","9f46a04c-347b-4057-95d7-c30382572523",IDS,80,"[ + ""web_browsing"" +]","142.251.32.36",Medium,"1679593174.31044","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:11:20.335 PM",,,,,"3c4a7499-64b6-4ae1-a197-bea44603ca8e_Ylf3",,,,Firefox,"r3.o.lencr.org.x.e4d062fe031b704e770a8c103460a210b436.9270f74f.id.opendns.com",,,MAMMOGRAPHY,"0dda1255-bd57-4313-9bca-49a25d06049c","10.50.163.30","Senographe Pristina/Pristina Serena Mammography System","MH_CT2_L558",Mammography,MAMMOGRAPHY,"10.50.163.30","Browser: Firefox, Host: r3.o.lencr.org.x.e4d062fe031b704e770a8c103460a210b436.9270f74f.id.opendns.com, IP: 146.112.247.79","3c4a7499-64b6-4ae1-a197-bea44603ca8e",IDS,80,"[ + ""web_browsing"" +]","146.112.247.79",Medium,"1679593006.03105","Internet Browsing","CynerioEvent_CL", +"ad885620-d4e2-4daf-ab9d-4fe7b4a9c5c5",RestAPI,,,"3/26/2023, 8:03:10.904 AM",,,"3/23/2023, 6:10:37.757 PM",,"10.10.162.150","10.10.141.95",TCP,"c7f53047-3f9a-4835-89fd-aad0746e909f_Hf4U",,,,,,,,"WIRELESS_CONTROLLER","38386ae7-574b-4a66-859f-0204ee0899fe","10.10.162.150","5520 Wireless Controller","MDF-1-WLC5520G","Wireless Controller","WIRELESS_CONTROLLER","10.10.141.95","Source IP: 10.10.141.95, Port: 22","c7f53047-3f9a-4835-89fd-aad0746e909f",IDS,22,"[ + ""open_port_22"" +]","10.10.162.150",Low,"1679590947.22307","SSH Connection","CynerioEvent_CL", From dc7ced58c40b0710d25e95c907a2a2929f956313 Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 11:16:25 -0700 Subject: [PATCH 06/14] Add back prnumber in script args --- .github/workflows/runAsimSchemaAndDataTesters.yaml | 2 +- .script/tests/asimParsersTest/ingestASimSampleData.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/runAsimSchemaAndDataTesters.yaml b/.github/workflows/runAsimSchemaAndDataTesters.yaml index a38ad2633a7..c2a46505154 100644 --- a/.github/workflows/runAsimSchemaAndDataTesters.yaml +++ b/.github/workflows/runAsimSchemaAndDataTesters.yaml @@ -399,7 +399,7 @@ jobs: # curl -o "$filePath" "$url" # chmod +x "$filePath" # Execute the script - python "$filePath" + python "$filePath" "${{ github.event.pull_request.number }}" Run-ASim-Schema-Data-tests: needs: Run-ASim-Sample-Data-Ingest name: Run ASim Schema and Data tests diff --git a/.script/tests/asimParsersTest/ingestASimSampleData.py b/.script/tests/asimParsersTest/ingestASimSampleData.py index b3107eece13..616962998e5 100644 --- a/.script/tests/asimParsersTest/ingestASimSampleData.py +++ b/.script/tests/asimParsersTest/ingestASimSampleData.py @@ -9,7 +9,7 @@ # 4. For custom log tables: creates the table and a Data Collection Rule (DCR), then ingests data. # 5. For built-in tables: creates a DCR (handling GUID column mismatches) and ingests data. # -# Usage: python ingestASimSampleData.py +# Usage: python ingestASimSampleData.py import sys import os From cdfa0cc21b565b513104aa303c30ce3a9ba18670 Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 12:12:16 -0700 Subject: [PATCH 07/14] Test changes --- .../asimParsersTest/ingestASimSampleData.py | 140 +++++++++++++----- .../tests/asimParsersTest/runAsimTesters.ps1 | 15 ++ 2 files changed, 116 insertions(+), 39 deletions(-) diff --git a/.script/tests/asimParsersTest/ingestASimSampleData.py b/.script/tests/asimParsersTest/ingestASimSampleData.py index 616962998e5..bdcb82f3de4 100644 --- a/.script/tests/asimParsersTest/ingestASimSampleData.py +++ b/.script/tests/asimParsersTest/ingestASimSampleData.py @@ -55,25 +55,67 @@ def filter_yaml_files(modified_files): def convert_schema_csv_to_json(csv_file): + """Reads a schema CSV file with 'ColumnName' and 'ColumnType' headers and returns a list of + column definitions (name/type dicts) suitable for table creation APIs. Reserved columns are + excluded and 'bool' types are mapped to 'boolean'.""" data = [] - with open(csv_file, 'r',encoding='utf-8-sig') as file: - reader = csv.DictReader(file) - for row in reader: - if row['ColumnName'] in reserved_columns: - continue - elif row['ColumnType'] == "bool": - data.append({ - 'name': row['ColumnName'], - 'type': "boolean", - }) - else: - data.append({ - 'name': row['ColumnName'], - 'type': row['ColumnType'], - }) + try: + with open(csv_file, 'r',encoding='utf-8-sig') as file: + reader = csv.DictReader(file) + for row in reader: + if 'ColumnName' not in row or 'ColumnType' not in row: + raise KeyError(f"Required columns 'ColumnName' and/or 'ColumnType' not found in schema CSV '{csv_file}'. Available columns: {list(row.keys())}") + if row['ColumnName'] in reserved_columns: + continue + elif row['ColumnType'] == "bool": + data.append({ + 'name': row['ColumnName'], + 'type': "boolean", + }) + else: + data.append({ + 'name': row['ColumnName'], + 'type': row['ColumnType'], + }) + except FileNotFoundError: + print(f"::error::Schema CSV file not found: {csv_file}") + raise + except KeyError: + raise + except Exception as e: + print(f"::error::Failed to parse schema CSV file '{csv_file}': {e}") + raise + + if not data: + raise ValueError(f"No schema columns found in CSV file '{csv_file}'") + print(f"Schema data for {csv_file}: {data}") return data +def infer_schema_from_data(data_result): + """Infers a schema (list of name/type dicts) from sample data rows when no Schema CSV exists. + Inspects the first data row's values to determine column types. Reserved columns are excluded.""" + if not data_result: + raise ValueError("Cannot infer schema from empty data") + first_row = data_result[0] + schema = [] + for key, value in first_row.items(): + if key in reserved_columns: + continue + if isinstance(value, bool): + col_type = "boolean" + elif isinstance(value, int): + col_type = "int" + elif isinstance(value, float): + col_type = "real" + else: + col_type = "string" + schema.append({'name': key, 'type': col_type}) + return schema + def convert_data_csv_to_json(csv_file): + """Reads a sample data CSV file and returns its rows as a list of dicts with auto-typed values, + along with the table name extracted from the 'Type' column. Timestamp column suffixes + like '[UTC]' and '[Local Time]' are stripped from key names.""" def convert_value(value): # Try to convert the value to an integer, then to a float, and keep it as a string if those fail try: @@ -88,20 +130,37 @@ def convert_value(value): return value data = [] - with open(csv_file, 'r', encoding='utf-8-sig') as file: - reader = csv.DictReader(file) - for row in reader: - table_name = row['Type'] - # Convert each value in the row to its appropriate type - processed_row = {key: convert_value(value) for key, value in row.items()} - data.append(processed_row) - - for item in data: - for key in list(item.keys()): - # If the key matches '[UTC]' or '[Local Time]', rename it - if key.endswith(('[UTC]', '[Local Time]')): - substring = key.split(" [")[0] - item[substring] = item.pop(key) + table_name = None + try: + with open(csv_file, 'r', encoding='utf-8-sig') as file: + reader = csv.DictReader(file) + for row in reader: + if 'Type' not in row: + raise KeyError(f"'Type' column not found in CSV file '{csv_file}'. Available columns: {list(row.keys())}") + table_name = row['Type'] + # Convert each value in the row to its appropriate type + processed_row = {key: convert_value(value) for key, value in row.items()} + data.append(processed_row) + + for item in data: + for key in list(item.keys()): + # If the key matches '[UTC]' or '[Local Time]', rename it + if key.endswith(('[UTC]', '[Local Time]')): + substring = key.split(" [")[0] + item[substring] = item.pop(key) + except FileNotFoundError: + print(f"::error::Data CSV file not found: {csv_file}") + raise + except KeyError: + raise + except Exception as e: + print(f"::error::Failed to parse data CSV file '{csv_file}': {e}") + raise + + if not data: + raise ValueError(f"No data rows found in CSV file '{csv_file}'") + if table_name is None: + raise ValueError(f"Could not determine table name from CSV file '{csv_file}'") return data, table_name @@ -360,8 +419,7 @@ def convert_data_type(schema_result, data_result): file.write(f.read()) except Exception as e: print(f"::error::An error occurred while trying to read Sample Data file at {sample_data_path}: {e}") - continue - data_result,table_name = convert_data_csv_to_json('tempfile.csv') + data_result,table_name = convert_data_csv_to_json('tempfile.csv') print(f"Table Name : {table_name}") log_ingestion_supported,table_type=check_for_custom_table(table_name) print(f"Log ingestion supported: {log_ingestion_supported}\n Table type: {table_type}") @@ -369,14 +427,18 @@ def convert_data_type(schema_result, data_result): flag=0 #flag value is used to check if DCR is created for the table or not schema_file_name = f"{table_name}_Schema.csv" schema_path = os.path.join(sample_data_dir, schema_file_name) - try: - with open(schema_path, 'rb') as f: - with open('tempfile.csv', 'wb') as file: - file.write(f.read()) - except Exception as e: - print(f"::error::An error occurred while trying to read Schema file at {schema_path}: {e}") - continue - schema_result = convert_schema_csv_to_json('tempfile.csv') + if os.path.exists(schema_path): + try: + with open(schema_path, 'rb') as f: + with open('tempfile.csv', 'wb') as file: + file.write(f.read()) + except Exception as e: + print(f"::error::An error occurred while trying to read Schema file at {schema_path}: {e}") + continue + schema_result = convert_schema_csv_to_json('tempfile.csv') + else: + print(f"Schema CSV not found at {schema_path}, inferring schema from sample data") + schema_result = infer_schema_from_data(data_result) data_result = convert_data_type(schema_result, data_result) # conversion of datatype is needed for boolean and string values because during testing it has been observed that # boolean values are consider as string and numerical value of type string are consider diff --git a/.script/tests/asimParsersTest/runAsimTesters.ps1 b/.script/tests/asimParsersTest/runAsimTesters.ps1 index edad7064758..b141a2d5c42 100644 --- a/.script/tests/asimParsersTest/runAsimTesters.ps1 +++ b/.script/tests/asimParsersTest/runAsimTesters.ps1 @@ -1,3 +1,18 @@ +# runAsimTesters.ps1 +# +# Validates modified ASIM parsers by running schema and data tests against a Log Analytics workspace. +# +# The script performs the following steps: +# 1. Detects ASIM parser YAML files modified in the current PR by diffing against upstream/master. +# 2. Converts each parser YAML to an object and wraps its query in a KQL let statement. +# 3. Runs the ASimSchemaTester against each parser to verify its output conforms to the ASIM schema. +# 4. Runs the ASimDataTester against each parser using the last 30 minutes of ingested data. +# 5. Reports errors/warnings per parser, respecting an exclusion list that allows known +# failing parsers to produce warnings instead of blocking the workflow. +# +# Usage: Called by the GitHub Actions workflow (runAsimSchemaAndDataTesters.yaml). +# Requires the Az.OperationalInsights PowerShell module and an authenticated Azure session. + # Workspace ID for the Log Analytics workspace where the ASim schema and data tests will be conducted $global:workspaceId = "cb6a2b4f-7073-4e59-9ab0-803cde6b2221" From 18aa04b2f08a575e7b2bdec24a395d713e76b961 Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 13:42:19 -0700 Subject: [PATCH 08/14] Update script --- .../asimParsersTest/ingestASimSampleData.py | 21 ++++++++++++------- 1 file changed, 14 insertions(+), 7 deletions(-) diff --git a/.script/tests/asimParsersTest/ingestASimSampleData.py b/.script/tests/asimParsersTest/ingestASimSampleData.py index bdcb82f3de4..aa4fd34aaf8 100644 --- a/.script/tests/asimParsersTest/ingestASimSampleData.py +++ b/.script/tests/asimParsersTest/ingestASimSampleData.py @@ -91,7 +91,7 @@ def convert_schema_csv_to_json(csv_file): print(f"Schema data for {csv_file}: {data}") return data -def infer_schema_from_data(data_result): +def infer_schema_from_data(data_result, datetime_keys): """Infers a schema (list of name/type dicts) from sample data rows when no Schema CSV exists. Inspects the first data row's values to determine column types. Reserved columns are excluded.""" if not data_result: @@ -101,7 +101,9 @@ def infer_schema_from_data(data_result): for key, value in first_row.items(): if key in reserved_columns: continue - if isinstance(value, bool): + if key in datetime_keys: + col_type = "datetime" + elif isinstance(value, bool): col_type = "boolean" elif isinstance(value, int): col_type = "int" @@ -110,12 +112,15 @@ def infer_schema_from_data(data_result): else: col_type = "string" schema.append({'name': key, 'type': col_type}) + # Ensure TimeGenerated is always present in the schema + if not any(col['name'] == 'TimeGenerated' for col in schema): + schema.append({'name': 'TimeGenerated', 'type': 'datetime'}) return schema def convert_data_csv_to_json(csv_file): """Reads a sample data CSV file and returns its rows as a list of dicts with auto-typed values, - along with the table name extracted from the 'Type' column. Timestamp column suffixes - like '[UTC]' and '[Local Time]' are stripped from key names.""" + the table name extracted from the 'Type' column, and a list of column names that had timestamp + suffixes ('[UTC]' or '[Local Time]') stripped from their keys.""" def convert_value(value): # Try to convert the value to an integer, then to a float, and keep it as a string if those fail try: @@ -131,6 +136,7 @@ def convert_value(value): data = [] table_name = None + datetime_keys = set() try: with open(csv_file, 'r', encoding='utf-8-sig') as file: reader = csv.DictReader(file) @@ -148,6 +154,7 @@ def convert_value(value): if key.endswith(('[UTC]', '[Local Time]')): substring = key.split(" [")[0] item[substring] = item.pop(key) + datetime_keys.add(substring) except FileNotFoundError: print(f"::error::Data CSV file not found: {csv_file}") raise @@ -162,7 +169,7 @@ def convert_value(value): if table_name is None: raise ValueError(f"Could not determine table name from CSV file '{csv_file}'") - return data, table_name + return data, table_name, list(datetime_keys) def check_for_custom_table(table_name): if table_name in lia_supported_builtin_table: @@ -419,7 +426,7 @@ def convert_data_type(schema_result, data_result): file.write(f.read()) except Exception as e: print(f"::error::An error occurred while trying to read Sample Data file at {sample_data_path}: {e}") - data_result,table_name = convert_data_csv_to_json('tempfile.csv') + data_result,table_name,datetime_keys = convert_data_csv_to_json('tempfile.csv') print(f"Table Name : {table_name}") log_ingestion_supported,table_type=check_for_custom_table(table_name) print(f"Log ingestion supported: {log_ingestion_supported}\n Table type: {table_type}") @@ -438,7 +445,7 @@ def convert_data_type(schema_result, data_result): schema_result = convert_schema_csv_to_json('tempfile.csv') else: print(f"Schema CSV not found at {schema_path}, inferring schema from sample data") - schema_result = infer_schema_from_data(data_result) + schema_result = infer_schema_from_data(data_result, datetime_keys) data_result = convert_data_type(schema_result, data_result) # conversion of datatype is needed for boolean and string values because during testing it has been observed that # boolean values are consider as string and numerical value of type string are consider From 17fd3c8bc0b1d20833901dfb238725e51b09dd50 Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 14:09:13 -0700 Subject: [PATCH 09/14] Add logs to indicate success --- .script/tests/asimParsersTest/ingestASimSampleData.py | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/.script/tests/asimParsersTest/ingestASimSampleData.py b/.script/tests/asimParsersTest/ingestASimSampleData.py index aa4fd34aaf8..049050e1e24 100644 --- a/.script/tests/asimParsersTest/ingestASimSampleData.py +++ b/.script/tests/asimParsersTest/ingestASimSampleData.py @@ -309,16 +309,19 @@ def hit_api(url,request,method): def senddtosentinel(immutable_id,data_result,stream_name,flag_status): if flag_status == 0: - print("DCR is not created for the table. Please create DCR first") - return + print("::error::DCR is not created for the table. Please create DCR first") + return False print("Waiting for data to be sent to sentinel (This will take atleast 20 seconds)") time.sleep(20) credential = DefaultAzureCredential() client = LogsIngestionClient(endpoint=endpoint_uri, credential=credential, logging_enable=True) try: client.upload(rule_id=immutable_id, stream_name=stream_name, logs=data_result) + print(f"Data uploaded successfully to stream '{stream_name}' via DCR '{immutable_id}'") + return True except HttpResponseError as e: - print(f"Upload failed: {e}") + print(f"::error::Upload failed: {e}") + return False def extract_event_vendor_product(parser_query,parser_file): From 9df28876379d14838949443d2bc6e0ff31e02846 Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 14:19:35 -0700 Subject: [PATCH 10/14] Make changes --- .../tests/asimParsersTest/runAsimTesters.ps1 | 22 ++- .../ASimAuthenticationCynerioTest.yaml | 123 +------------ .../Parsers/vimAuthenticationCynerioTest.yaml | 165 +----------------- 3 files changed, 26 insertions(+), 284 deletions(-) diff --git a/.script/tests/asimParsersTest/runAsimTesters.ps1 b/.script/tests/asimParsersTest/runAsimTesters.ps1 index b141a2d5c42..cc244e892b9 100644 --- a/.script/tests/asimParsersTest/runAsimTesters.ps1 +++ b/.script/tests/asimParsersTest/runAsimTesters.ps1 @@ -116,22 +116,40 @@ function testSchema([string] $ParserFile) { } } +function getTesterLetStatements() { + # Load the latest ASimSchemaTester and ASimDataTester from the repo YAML files + # and return them as let statements with a LIVE suffix to avoid conflicts with saved workspace functions + $testersPath = "$($PSScriptRoot)/../../../ASIM/dev/ASimTester/Testers" + + $schemaTesterYaml = Get-Content -Raw "$testersPath/ASimSchemaTester.yaml" | ConvertFrom-Yaml + $dataTesterYaml = Get-Content -Raw "$testersPath/ASimDataTester.yaml" | ConvertFrom-Yaml + + $schemaTesterQuery = $schemaTesterYaml.ParserQuery + $dataTesterQuery = $dataTesterYaml.ParserQuery + + $schemaTesterLet = "let ASimSchemaTesterLIVE = (T:(ColumnName:string,ColumnType:string), selected_schema:string='') { $schemaTesterQuery };" + $dataTesterLet = "let ASimDataTesterLIVE = (T:(*), selected_schema:string='') { $dataTesterQuery };" + + return "$schemaTesterLet`r`n$dataTesterLet" +} + function testParser([Parser] $parser) { Write-Host "***************************************************" Write-Host "${yellow}Testing parser - '$($parser.Name)'${reset}" $letStatementName = "generated$($parser.Name)" $parserAsletStatement = "let $letStatementName = ($(getParameters($parser.Parameters))) { $($parser.OriginalQuery) };" + $testerLetStatements = getTesterLetStatements Write-Host "${yellow}Running 'Schema' test for '$($parser.Name)' parser${reset}" Write-Host "***************************************************" - $schemaTest = "$parserAsletStatement`r`n$letStatementName | getschema | invoke ASimSchemaTester('$($parser.Schema)')" + $schemaTest = "$testerLetStatements`r`n$parserAsletStatement`r`n$letStatementName | getschema | invoke ASimSchemaTesterLIVE('$($parser.Schema)')" Write-Host "${yellow}Schema name : $($parser.Schema)${reset}" invokeAsimTester $schemaTest $parser.Name "schema" Write-Host "***************************************************" Write-Host "${yellow}Running 'Data' tests for '$($parser.Name)' parser${reset}" # Test with only last 30 minutes of data. - $dataTest = "$parserAsletStatement`r`n$letStatementName | where TimeGenerated >= ago(30min) | invoke ASimDataTester('$($parser.Schema)')" + $dataTest = "$testerLetStatements`r`n$parserAsletStatement`r`n$letStatementName | where TimeGenerated >= ago(30min) | invoke ASimDataTesterLIVE('$($parser.Schema)')" invokeAsimTester $dataTest $parser.Name "data" Write-Host "***************************************************" } diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml index 5156df468c3..89e23255e18 100644 --- a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml +++ b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml @@ -24,124 +24,7 @@ ParserParams: Type: bool Default: false ParserQuery: | - let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string) - [ - "information", "Informational", - "notice", "Informational", - "warning", "Low", - "error", "Low", - "alert", "Medium", - "critical", "High", - "emergency", "High", - "0", "Informational", - "1", "Informational", - "2", "Informational", - "3", "Informational", - "4", "Low", - "5", "Low", - "6", "Low", - "7", "Medium", - "8", "Medium", - "9", "High", - "10", "High" - ]; - let parser = (disabled: bool) { - let FortigateLogs = CynerioEvent_CL - | where not(disabled) - | where DeviceVendor == "Cynerio" - | where DeviceProduct has "Cynerio" - | where DeviceEventClassID !in ("0100022949", "0100022952"); // Omit "Attempted to join FortiCloud" and "service activation failed" - let LogoutEvents = FortigateLogs - | where Activity == "system event logout" - | extend EventType = "Logoff"; - let LoginEvents = FortigateLogs - | where Activity == "system event login" - | extend EventType = "Logon" - | extend EventResultDetails = case( - Message has "invalid password", "Incorrect password", - Message has "invalid", "No such user or password", - Message has "disabled", "User disabled", - Message has "no valid user certificate", "Incorrect key", - Message has "blocked IP", "Logon violates policy", - Message has "max login failures", "Logon violates policy", - Message has "declined disclaimer", "Logon violates policy", - Message has "password renewal", "Logon violates policy", - Message has "internal error", "Other", - Message has "connection timeout", "Other", - "" - ); - union - LogoutEvents, - LoginEvents - | extend - EventStartTime = TimeGenerated, - EventEndTime = TimeGenerated, - EventSchema = "Authentication", - EventSchemaVersion = "0.1.4", - EventCount = int(1), - Type = "CommonSecurityLog" - | project-rename - EventProductVersion = DeviceVersion, + CynerioEvent_CL + | extend EventProduct = "Cynerio", - EventVendor = "Cynerio", - TargetIpAddr = DestinationIP, - TargetHostname = Computer, - TargetFQDN = DeviceName, - EventOriginalType = Activity, - EventOriginalSubType = DeviceEventClassID, - TargetUsername = DestinationUserName, - TargetDvcId = DeviceExternalID, - SrcIpAddr = SourceIP, - ActingAppName = SourceProcessName, - EventMessage = Message - | extend - TargetUsernameType = "Simple", - TargetDvcIdType = "Other" - | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, ["ad.status"]: string) with (pair_delimiter=";", kv_delimiter="=") - | extend EventResult = case( - ["ad.status"] == "success" or status == "success", "Success", - ["ad.status"] == "failed" or status == "failed", "Failure", - EventMessage has "login failed", "Failure", - EventMessage has "Login disabled", "Failure", - EventMessage has "logged out", "Success", - EventMessage has "logged in successfully", "Success", - "NA" - ) - | extend - EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, "") - | lookup EventSeverityLookup on EventOriginalSeverity - | extend - Dvc = TargetDvcId, - IpAddr = SrcIpAddr - | project - TimeGenerated, - Type, - EventResultDetails, - EventType, - EventStartTime, - EventEndTime, - EventSchema, - EventSchemaVersion, - EventCount, - EventProductVersion, - EventProduct, - EventVendor, - TargetIpAddr, - TargetHostname, - TargetFQDN, - EventOriginalType, - EventOriginalSeverity, - EventOriginalSubType, - TargetUsername, - TargetDvcId, - SrcIpAddr, - ActingAppName, - EventMessage, - TargetUsernameType, - TargetDvcIdType, - EventResult, - EventSeverity, - Dvc, - IpAddr - }; - parser(disabled = disabled) \ No newline at end of file + EventVendor = "Cynerio" \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml index 861a80d28a8..a401510c0b6 100644 --- a/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml +++ b/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml @@ -51,166 +51,7 @@ ParserParams: Type: bool Default: false ParserQuery: | - let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string) - [ - "information", "Informational", - "notice", "Informational", - "warning", "Low", - "error", "Low", - "alert", "Medium", - "critical", "High", - "emergency", "High", - "0", "Informational", - "1", "Informational", - "2", "Informational", - "3", "Informational", - "4", "Low", - "5", "Low", - "6", "Low", - "7", "Medium", - "8", "Medium", - "9", "High", - "10", "High" - ]; - let parser = ( - starttime: datetime=datetime(null), - endtime: datetime=datetime(null), - username_has_any: dynamic = dynamic([]), - targetappname_has_any: dynamic = dynamic([]), // no targetappname - srcipaddr_has_any_prefix: dynamic = dynamic([]), - srchostname_has_any: dynamic = dynamic([]), // no srchostname - eventtype_in: dynamic = dynamic([]), - eventresultdetails_in: dynamic = dynamic([]), - eventresult: string = '*', - disabled: bool=false - ) { - let FortigateLogs = CynerioEvent_CL - | where not(disabled) - | where - (isnull(starttime) or TimeGenerated >= starttime) - and (isnull(endtime) or TimeGenerated <= endtime) - | where DeviceVendor == "Cynerio" - | where DeviceProduct has "Cynerio" - | where DeviceEventClassID !in ("0100022949", "0100022952") // Omit "Attempted to join FortiCloud" and "service activation failed" logs - | where ((array_length(username_has_any) == 0) or DestinationUserName has_any(username_has_any)) - and ((array_length(srcipaddr_has_any_prefix) == 0) or (has_any_ipv4_prefix(SourceIP, srcipaddr_has_any_prefix))) - and (array_length(srchostname_has_any) == 0) - and (array_length(targetappname_has_any) == 0); - let LogoutEvents = FortigateLogs - | where Activity == "system event logout" - | where ((array_length(eventtype_in) == 0) or "Logoff" in~ (eventtype_in)) - | where (array_length(eventresultdetails_in) == 0) - | extend EventType = "Logoff"; - let LoginEvents = FortigateLogs - | where Activity == "system event login" - | where ((array_length(eventtype_in) == 0) or "Logon" in~ (eventtype_in)) - | extend EventType = "Logon" - | extend EventResultDetails = case( - Message has "invalid password", "Incorrect password", - Message has "invalid", "No such user or password", - Message has "disabled", "User disabled", - Message has "no valid user certificate", "Incorrect key", - Message has "blocked IP", "Logon violates policy", - Message has "max login failures", "Logon violates policy", - Message has "declined disclaimer", "Logon violates policy", - Message has "password renewal", "Logon violates policy", - Message has "internal error", "Other", - Message has "connection timeout", "Other", - "" - ) - | where (array_length(eventresultdetails_in) == 0 or EventResultDetails in~ (eventresultdetails_in)); - union - LogoutEvents, - LoginEvents - | extend - EventStartTime = TimeGenerated, - EventEndTime = TimeGenerated, - EventSchema = "Authentication", - EventSchemaVersion = "0.1.4", - EventCount = int(1), - Type = "CommonSecurityLog" - | project-rename - EventProductVersion = DeviceVersion, + CynerioEvent_CL + | extend EventProduct = "Cynerio", - EventVendor = "Cynerio", - TargetIpAddr = DestinationIP, - TargetHostname = Computer, - TargetFQDN = DeviceName, - EventOriginalType = Activity, - EventOriginalSubType = DeviceEventClassID, - TargetUsername = DestinationUserName, - TargetDvcId = DeviceExternalID, - SrcIpAddr = SourceIP, - ActingAppName = SourceProcessName, - EventMessage = Message - | extend - TargetUsernameType = "Simple", - TargetDvcIdType = "Other" - | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, ["ad.status"]: string) with (pair_delimiter=";", kv_delimiter="=") - | extend EventResult = case( - ["ad.status"] == "success" or status == "success", "Success", - ["ad.status"] == "failed" or status == "failed", "Failure", - EventMessage has "login failed", "Failure", - EventMessage has "Login disabled", "Failure", - EventMessage has "logged out", "Success", - EventMessage has "logged in successfully", "Success", - "NA" - ) - | where (eventresult == "*" or (EventResult == eventresult)) - | extend - EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, "") - | lookup EventSeverityLookup on EventOriginalSeverity - | extend temp_isMatchTargetUsername = TargetUsername has_any(username_has_any) - | extend ASimMatchingUsername = case( - array_length(username_has_any) == 0, - "-", - temp_isMatchTargetUsername, - "TargetUsername", - "No match" - ) - | extend - Dvc = TargetDvcId, - IpAddr = SrcIpAddr - | project - TimeGenerated, - Type, - EventResultDetails, - EventType, - EventStartTime, - EventEndTime, - EventSchema, - EventSchemaVersion, - EventCount, - EventProductVersion, - EventProduct, - EventVendor, - TargetIpAddr, - TargetHostname, - TargetFQDN, - EventOriginalType, - EventOriginalSeverity, - EventOriginalSubType, - TargetUsername, - TargetDvcId, - SrcIpAddr, - ActingAppName, - EventMessage, - TargetUsernameType, - TargetDvcIdType, - EventResult, - EventSeverity, - ASimMatchingUsername, - Dvc, - IpAddr - }; - parser( - starttime=starttime, - endtime=endtime, - username_has_any=username_has_any, - targetappname_has_any=targetappname_has_any, - srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, - srchostname_has_any=srchostname_has_any, - eventtype_in=eventtype_in, - eventresultdetails_in=eventresultdetails_in, - eventresult=eventresult, - disabled=disabled) \ No newline at end of file + EventVendor = "Cynerio" \ No newline at end of file From ec46d2e21e5c77030d408e4d44c51e6338a4e102 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <> Date: Tue, 16 Jun 2026 21:31:08 +0000 Subject: [PATCH 11/14] [ASIM Parsers] Generate deployable ARM templates from KQL function YAML files. --- .../ASimAuthenticationCynerioTest.json | 2 +- .../vimAuthenticationCynerioTest.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json index 17ecd99f70e..daf3ea89699 100644 --- a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json +++ b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json @@ -27,7 +27,7 @@ "displayName": "ASIM Authentication parser for Fortinet - Fortigate", "category": "ASIM", "FunctionAlias": "ASimAuthenticationCynerioCynerio", - "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (disabled: bool) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\"); // Omit \"Attempted to join FortiCloud\" and \"service activation failed\"\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n );\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\",\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n Dvc,\n IpAddr\n};\nparser(disabled = disabled)", + "query": "CynerioEvent_CL\n| extend\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\"", "version": 1, "functionParameters": "disabled:bool=False" } diff --git a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json index 0be2b31fb12..f0dfea3c313 100644 --- a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json +++ b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json @@ -27,7 +27,7 @@ "displayName": "ASIM Authentication filtering parser for Fortinet - Fortigate", "category": "ASIM", "FunctionAlias": "vimAuthenticationFortinetFortigate", - "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (\n starttime: datetime=datetime(null), \n endtime: datetime=datetime(null), \n username_has_any: dynamic = dynamic([]),\n targetappname_has_any: dynamic = dynamic([]), // no targetappname\n srcipaddr_has_any_prefix: dynamic = dynamic([]),\n srchostname_has_any: dynamic = dynamic([]), // no srchostname\n eventtype_in: dynamic = dynamic([]),\n eventresultdetails_in: dynamic = dynamic([]),\n eventresult: string = '*',\n disabled: bool=false\n) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where \n (isnull(starttime) or TimeGenerated >= starttime) \n and (isnull(endtime) or TimeGenerated <= endtime) \n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\") // Omit \"Attempted to join FortiCloud\" and \"service activation failed\" logs\n | where ((array_length(username_has_any) == 0) or DestinationUserName has_any(username_has_any))\n and ((array_length(srcipaddr_has_any_prefix) == 0) or (has_any_ipv4_prefix(SourceIP, srcipaddr_has_any_prefix)))\n and (array_length(srchostname_has_any) == 0)\n and (array_length(targetappname_has_any) == 0);\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | where ((array_length(eventtype_in) == 0) or \"Logoff\" in~ (eventtype_in))\n | where (array_length(eventresultdetails_in) == 0)\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | where ((array_length(eventtype_in) == 0) or \"Logon\" in~ (eventtype_in))\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n )\n | where (array_length(eventresultdetails_in) == 0 or EventResultDetails in~ (eventresultdetails_in));\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\",\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | where (eventresult == \"*\" or (EventResult == eventresult))\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend temp_isMatchTargetUsername = TargetUsername has_any(username_has_any)\n | extend ASimMatchingUsername = case(\n array_length(username_has_any) == 0,\n \"-\",\n temp_isMatchTargetUsername,\n \"TargetUsername\",\n \"No match\"\n )\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n ASimMatchingUsername,\n Dvc,\n IpAddr\n};\nparser(\n starttime=starttime,\n endtime=endtime,\n username_has_any=username_has_any,\n targetappname_has_any=targetappname_has_any,\n srcipaddr_has_any_prefix=srcipaddr_has_any_prefix,\n srchostname_has_any=srchostname_has_any,\n eventtype_in=eventtype_in,\n eventresultdetails_in=eventresultdetails_in,\n eventresult=eventresult,\n disabled=disabled)", + "query": "CynerioEvent_CL\n| extend\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\"", "version": 1, "functionParameters": "starttime:datetime=datetime(null),endtime:datetime=datetime(null),username_has_any:dynamic=dynamic([]),targetappname_has_any:dynamic=dynamic([]),srcipaddr_has_any_prefix:dynamic=dynamic([]),srchostname_has_any:dynamic=dynamic([]),eventtype_in:dynamic=dynamic([]),eventresultdetails_in:dynamic=dynamic([]),eventresult:string='*',disabled:bool=False" } From 16f1e18d3c90bf462f56e800af8a56f3e9f49cd5 Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 15:23:01 -0700 Subject: [PATCH 12/14] Revert test changes --- .../runAsimSchemaAndDataTesters.yaml | 23 ++--- .../tests/asimParsersTest/runAsimTesters.ps1 | 99 +++++++++++-------- .../ASimAuthenticationCynerioTest.json | 36 ------- .../ASimAuthenticationCynerioTest/README.md | 21 ---- .../ARM/FullDeploymentAuthentication.json | 40 -------- .../vimAuthenticationCynerioTest/README.md | 21 ---- .../vimAuthenticationCynerioTest.json | 36 ------- .../Parsers/ASimAuthentication.yaml | 6 +- .../ASimAuthenticationCynerioTest.yaml | 30 ------ .../Parsers/imAuthentication.yaml | 6 +- .../Parsers/vimAuthenticationCynerioTest.yaml | 57 ----------- 11 files changed, 72 insertions(+), 303 deletions(-) delete mode 100644 Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json delete mode 100644 Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md delete mode 100644 Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md delete mode 100644 Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json delete mode 100644 Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml delete mode 100644 Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml diff --git a/.github/workflows/runAsimSchemaAndDataTesters.yaml b/.github/workflows/runAsimSchemaAndDataTesters.yaml index c2a46505154..ff6b5cc3e26 100644 --- a/.github/workflows/runAsimSchemaAndDataTesters.yaml +++ b/.github/workflows/runAsimSchemaAndDataTesters.yaml @@ -2,9 +2,7 @@ # The script runs ASIM Schema and Data testers on the "eco-connector-test" workspace. name: Run ASIM tests on "ASIM-SchemaDataTester-GithubShared" workspace on: - pull_request: - # Uncomment back when done testing - # pull_request_target: + pull_request_target: types: [labeled, synchronize] branches: - master @@ -388,16 +386,15 @@ jobs: id: Ingestlogs run: | filePath=".script/tests/asimParsersTest/ingestASimSampleData.py" - # Uncomment back when test is done - # url="https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/.script/tests/asimParsersTest/ingestASimSampleData.py" - # # Check if file exists and delete if it does - # if [ -f "$filePath" ]; then - # rm -f "$filePath" - # fi - # # Download the file - # echo "Downloading script from the master: $url" - # curl -o "$filePath" "$url" - # chmod +x "$filePath" + url="https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/.script/tests/asimParsersTest/ingestASimSampleData.py" + # Check if file exists and delete if it does + if [ -f "$filePath" ]; then + rm -f "$filePath" + fi + # Download the file + echo "Downloading script from the master: $url" + curl -o "$filePath" "$url" + chmod +x "$filePath" # Execute the script python "$filePath" "${{ github.event.pull_request.number }}" Run-ASim-Schema-Data-tests: diff --git a/.script/tests/asimParsersTest/runAsimTesters.ps1 b/.script/tests/asimParsersTest/runAsimTesters.ps1 index cc244e892b9..4051b4608d1 100644 --- a/.script/tests/asimParsersTest/runAsimTesters.ps1 +++ b/.script/tests/asimParsersTest/runAsimTesters.ps1 @@ -42,48 +42,58 @@ Class Parser { } } +$global:testErrors = @() + function run { Write-Host "This is the script from PR." - # Check if upstream remote already exists - $remoteExists = Invoke-Expression "git remote" | Select-String -Pattern "upstream" + # # Check if upstream remote already exists + # $remoteExists = Invoke-Expression "git remote" | Select-String -Pattern "upstream" - if (-not $remoteExists) { - Write-Host "Adding upstream remote..." - Invoke-Expression "git remote add upstream $SentinelRepoUrl" - } + # if (-not $remoteExists) { + # Write-Host "Adding upstream remote..." + # Invoke-Expression "git remote add upstream $SentinelRepoUrl" + # } - # Fetch the latest changes from upstream repositories - Write-Host "Fetching latest changes from upstream..." - Invoke-Expression "git fetch upstream" *> $null - - # Get modified ASIM Parser files along with their status - $modifiedFilesStatus = Invoke-Expression "git diff --name-status upstream/master -- $($PSScriptRoot)/../../../Parsers/" - # Split the output into lines - $modifiedFilesStatusLines = $modifiedFilesStatus -split "`n" - # Initialize an empty array to store the file names and their status - $global:modifiedFiles = @() - # Iterate over the lines - foreach ($line in $modifiedFilesStatusLines) { - # Split the line into status and file name - $parts = $line -split "\t" - # Assigning the first part to $status and the last part to $file - $status = $parts[0] - $file = $parts[-1] # -1 index refers to the last element - # Check if the file is a YAML file - if ($file -like "*.yaml") { - # Add the file name and status to the array - $global:modifiedFiles += New-Object PSObject -Property @{ - Name = $file - Status = switch -Regex ($status) { - "A" { "Added" } - "M" { "Modified" } - "D" { "Deleted" } - "R" { "Renamed" } - default { "Unknown" } - } - } + # # Fetch the latest changes from upstream repositories + # Write-Host "Fetching latest changes from upstream..." + # Invoke-Expression "git fetch upstream" *> $null + + # # Get modified ASIM Parser files along with their status + # $modifiedFilesStatus = Invoke-Expression "git diff --name-status upstream/master -- $($PSScriptRoot)/../../../Parsers/" + # # Split the output into lines + # $modifiedFilesStatusLines = $modifiedFilesStatus -split "`n" + # # Initialize an empty array to store the file names and their status + # $global:modifiedFiles = @() + # # Iterate over the lines + # foreach ($line in $modifiedFilesStatusLines) { + # # Split the line into status and file name + # $parts = $line -split "\t" + # # Assigning the first part to $status and the last part to $file + # $status = $parts[0] + # $file = $parts[-1] # -1 index refers to the last element + # # Check if the file is a YAML file + # if ($file -like "*.yaml") { + # # Add the file name and status to the array + # $global:modifiedFiles += New-Object PSObject -Property @{ + # Name = $file + # Status = switch -Regex ($status) { + # "A" { "Added" } + # "M" { "Modified" } + # "D" { "Deleted" } + # "R" { "Renamed" } + # default { "Unknown" } + # } + # } + # } + # } + + $global:modifiedFiles = @( + New-Object PSObject -Property @{ + Name = "Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml" + Status = "Added" } - } + ) + # Print the file names and their status Write-Host "${green}The following ASIM parser files have been updated. 'Schema' and 'Data' tests will be performed for each of these parsers:${reset}" foreach ($file in $modifiedFiles) { @@ -93,6 +103,13 @@ function run { # Call testSchema function for each modified parser file $modifiedFiles | ForEach-Object { testSchema $_.Name } + + # Throw all collected errors at the end so every parser gets tested + if ($global:testErrors.Count -gt 0) { + Write-Host "::error::The following parsers failed testing:" + $global:testErrors | ForEach-Object { Write-Host "::error:: - $_" } + throw "$($global:testErrors.Count) parser(s) failed testing. Please fix the errors and try again." + } } function testSchema([string] $ParserFile) { @@ -106,13 +123,13 @@ function testSchema([string] $ParserFile) { $modifiedFiles[$i].Name = $functionName } } - $Schema = (Split-Path -Path $ParserFile -Parent | Split-Path -Parent) + $Schema = $parsersAsObject.Normalization.Schema if ($parsersAsObject.Parsers -or ($parsersAsObject.ParserName -like "*Empty")){ Write-Host "***************************************************" Write-Host "${yellow}The parser '$functionName' is a union or empty parser, ignoring it from 'Schema' and 'Data' testing.${reset}" Write-Host "***************************************************" } else { - testParser ([Parser]::new($functionName, $parsersAsObject.ParserQuery, $Schema.Replace("Parsers/ASim", ""), $parsersAsObject.ParserParams)) + testParser ([Parser]::new($functionName, $parsersAsObject.ParserQuery, $Schema, $parsersAsObject.ParserParams)) } } @@ -189,7 +206,7 @@ function invokeAsimTester([string] $test, [string] $name, [string] $kind) { elseif ($Errorcount -gt 0) { $FinalMessage = "'$name' '$kind' - test failed with $Errorcount error(s):" Write-Host "::error:: $FinalMessage" - throw "Test failed with errors. Please fix the errors and try again." # Commented out to allow the script to continue running + $global:testErrors += $FinalMessage } else { $FinalMessage = "'$name' '$kind' - test completed successfully with no error." Write-Host "${green}$FinalMessage${reset}" @@ -207,7 +224,7 @@ function invokeAsimTester([string] $test, [string] $name, [string] $kind) { Write-Host "::error:: -- $_" Write-Host "::error:: $(((Get-Error -Newest 1)?.Exception)?.Response?.Content)" - throw $_ # Commented out to allow the script to continue running + $global:testErrors += "'$name' '$kind' - query execution failed: $_" } } diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json deleted file mode 100644 index 17ecd99f70e..00000000000 --- a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json +++ /dev/null @@ -1,36 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2019-08-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "Workspace": { - "type": "string", - "metadata": { - "description": "The Microsoft Sentinel workspace into which the function will be deployed. Has to be in the selected Resource Group." - } - }, - "WorkspaceRegion": { - "type": "string", - "defaultValue": "[resourceGroup().location]", - "metadata": { - "description": "The region of the selected workspace. The default value will use the Region selection above." - } - } - }, - "resources": [ - { - "type": "Microsoft.OperationalInsights/workspaces/savedSearches", - "apiVersion": "2020-08-01", - "name": "[concat(parameters('Workspace'), '/ASimAuthenticationCynerioCynerio')]", - "location": "[parameters('WorkspaceRegion')]", - "properties": { - "etag": "*", - "displayName": "ASIM Authentication parser for Fortinet - Fortigate", - "category": "ASIM", - "FunctionAlias": "ASimAuthenticationCynerioCynerio", - "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (disabled: bool) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\"); // Omit \"Attempted to join FortiCloud\" and \"service activation failed\"\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n );\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\",\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n Dvc,\n IpAddr\n};\nparser(disabled = disabled)", - "version": 1, - "functionParameters": "disabled:bool=False" - } - } - ] -} \ No newline at end of file diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md b/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md deleted file mode 100644 index 2de3e012fdf..00000000000 --- a/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/README.md +++ /dev/null @@ -1,21 +0,0 @@ -# Cynerio ASIM Authentication Normalization Parser - -ARM template for ASIM Authentication schema parser for Cynerio. - -This ASIM parser supports normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. - - -The Advanced Security Information Model (ASIM) enables you to use and create source-agnostic content, simplifying your analysis of the data in your Microsoft Sentinel workspace. - -For more information, see: - -- [Normalization and the Advanced Security Information Model (ASIM)](https://aka.ms/AboutASIM) -- [Deploy all of ASIM](https://aka.ms/DeployASIM) -- [ASIM Authentication normalization schema reference](https://aka.ms/ASimAuthenticationDoc) - -For the changelog, see: -- [CHANGELOG](https://github.com/Azure/Azure-Sentinel/blob/master/Parsers/ASimAuthentication/CHANGELOG/ASimAuthenticationCynerioTest.md) - -
- -[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FASimAuthenticationCynerioTest%2FASimAuthenticationCynerioTest.json) [![Deploy to Azure Gov](https://aka.ms/deploytoazuregovbutton)](https://portal.azure.us/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FASimAuthenticationCynerioTest%2FASimAuthenticationCynerioTest.json) diff --git a/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json b/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json index c7b076ed14b..0f66a239e44 100644 --- a/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json +++ b/Parsers/ASimAuthentication/ARM/FullDeploymentAuthentication.json @@ -318,26 +318,6 @@ } } }, - { - "type": "Microsoft.Resources/deployments", - "apiVersion": "2020-10-01", - "name": "linkedASimAuthenticationCynerioTest", - "properties": { - "mode": "Incremental", - "templateLink": { - "uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimAuthentication/ARM/ASimAuthenticationCynerioTest/ASimAuthenticationCynerioTest.json", - "contentVersion": "1.0.0.0" - }, - "parameters": { - "Workspace": { - "value": "[parameters('Workspace')]" - }, - "WorkspaceRegion": { - "value": "[parameters('WorkspaceRegion')]" - } - } - } - }, { "type": "Microsoft.Resources/deployments", "apiVersion": "2020-10-01", @@ -1098,26 +1078,6 @@ } } }, - { - "type": "Microsoft.Resources/deployments", - "apiVersion": "2020-10-01", - "name": "linkedvimAuthenticationCynerioTest", - "properties": { - "mode": "Incremental", - "templateLink": { - "uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json", - "contentVersion": "1.0.0.0" - }, - "parameters": { - "Workspace": { - "value": "[parameters('Workspace')]" - }, - "WorkspaceRegion": { - "value": "[parameters('WorkspaceRegion')]" - } - } - } - }, { "type": "Microsoft.Resources/deployments", "apiVersion": "2020-10-01", diff --git a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md deleted file mode 100644 index 08ca0a3bb6d..00000000000 --- a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/README.md +++ /dev/null @@ -1,21 +0,0 @@ -# Cynerio ASIM Authentication Normalization Parser - -ARM template for ASIM Authentication schema parser for Cynerio. - -This ASIM parser supports filtering and normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. - - -The Advanced Security Information Model (ASIM) enables you to use and create source-agnostic content, simplifying your analysis of the data in your Microsoft Sentinel workspace. - -For more information, see: - -- [Normalization and the Advanced Security Information Model (ASIM)](https://aka.ms/AboutASIM) -- [Deploy all of ASIM](https://aka.ms/DeployASIM) -- [ASIM Authentication normalization schema reference](https://aka.ms/ASimAuthenticationDoc) - -For the changelog, see: -- [CHANGELOG](https://github.com/Azure/Azure-Sentinel/blob/master/Parsers/ASimAuthentication/CHANGELOG/vimAuthenticationCynerioTest.md) - -
- -[![Deploy to Azure](https://aka.ms/deploytoazurebutton)](https://portal.azure.com/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FvimAuthenticationCynerioTest%2FvimAuthenticationCynerioTest.json) [![Deploy to Azure Gov](https://aka.ms/deploytoazuregovbutton)](https://portal.azure.us/#create/Microsoft.Template/uri/https%3A%2F%2Fraw.githubusercontent.com%2FAzure%2FAzure-Sentinel%2Fmaster%2FParsers%2FASimAuthentication%2FARM%2FvimAuthenticationCynerioTest%2FvimAuthenticationCynerioTest.json) diff --git a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json b/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json deleted file mode 100644 index 0be2b31fb12..00000000000 --- a/Parsers/ASimAuthentication/ARM/vimAuthenticationCynerioTest/vimAuthenticationCynerioTest.json +++ /dev/null @@ -1,36 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2019-08-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "Workspace": { - "type": "string", - "metadata": { - "description": "The Microsoft Sentinel workspace into which the function will be deployed. Has to be in the selected Resource Group." - } - }, - "WorkspaceRegion": { - "type": "string", - "defaultValue": "[resourceGroup().location]", - "metadata": { - "description": "The region of the selected workspace. The default value will use the Region selection above." - } - } - }, - "resources": [ - { - "type": "Microsoft.OperationalInsights/workspaces/savedSearches", - "apiVersion": "2020-08-01", - "name": "[concat(parameters('Workspace'), '/vimAuthenticationFortinetFortigate')]", - "location": "[parameters('WorkspaceRegion')]", - "properties": { - "etag": "*", - "displayName": "ASIM Authentication filtering parser for Fortinet - Fortigate", - "category": "ASIM", - "FunctionAlias": "vimAuthenticationFortinetFortigate", - "query": "let EventSeverityLookup = datatable(EventOriginalSeverity: string, EventSeverity: string)\n[\n \"information\", \"Informational\",\n \"notice\", \"Informational\",\n \"warning\", \"Low\",\n \"error\", \"Low\",\n \"alert\", \"Medium\",\n \"critical\", \"High\",\n \"emergency\", \"High\",\n \"0\", \"Informational\",\n \"1\", \"Informational\",\n \"2\", \"Informational\",\n \"3\", \"Informational\",\n \"4\", \"Low\",\n \"5\", \"Low\",\n \"6\", \"Low\",\n \"7\", \"Medium\",\n \"8\", \"Medium\",\n \"9\", \"High\",\n \"10\", \"High\"\n];\nlet parser = (\n starttime: datetime=datetime(null), \n endtime: datetime=datetime(null), \n username_has_any: dynamic = dynamic([]),\n targetappname_has_any: dynamic = dynamic([]), // no targetappname\n srcipaddr_has_any_prefix: dynamic = dynamic([]),\n srchostname_has_any: dynamic = dynamic([]), // no srchostname\n eventtype_in: dynamic = dynamic([]),\n eventresultdetails_in: dynamic = dynamic([]),\n eventresult: string = '*',\n disabled: bool=false\n) {\n let FortigateLogs = CynerioEvent_CL\n | where not(disabled)\n | where \n (isnull(starttime) or TimeGenerated >= starttime) \n and (isnull(endtime) or TimeGenerated <= endtime) \n | where DeviceVendor == \"Cynerio\"\n | where DeviceProduct has \"Cynerio\"\n | where DeviceEventClassID !in (\"0100022949\", \"0100022952\") // Omit \"Attempted to join FortiCloud\" and \"service activation failed\" logs\n | where ((array_length(username_has_any) == 0) or DestinationUserName has_any(username_has_any))\n and ((array_length(srcipaddr_has_any_prefix) == 0) or (has_any_ipv4_prefix(SourceIP, srcipaddr_has_any_prefix)))\n and (array_length(srchostname_has_any) == 0)\n and (array_length(targetappname_has_any) == 0);\n let LogoutEvents = FortigateLogs\n | where Activity == \"system event logout\"\n | where ((array_length(eventtype_in) == 0) or \"Logoff\" in~ (eventtype_in))\n | where (array_length(eventresultdetails_in) == 0)\n | extend EventType = \"Logoff\";\n let LoginEvents = FortigateLogs\n | where Activity == \"system event login\"\n | where ((array_length(eventtype_in) == 0) or \"Logon\" in~ (eventtype_in))\n | extend EventType = \"Logon\"\n | extend EventResultDetails = case(\n Message has \"invalid password\", \"Incorrect password\",\n Message has \"invalid\", \"No such user or password\",\n Message has \"disabled\", \"User disabled\",\n Message has \"no valid user certificate\", \"Incorrect key\",\n Message has \"blocked IP\", \"Logon violates policy\",\n Message has \"max login failures\", \"Logon violates policy\",\n Message has \"declined disclaimer\", \"Logon violates policy\",\n Message has \"password renewal\", \"Logon violates policy\",\n Message has \"internal error\", \"Other\",\n Message has \"connection timeout\", \"Other\",\n \"\"\n )\n | where (array_length(eventresultdetails_in) == 0 or EventResultDetails in~ (eventresultdetails_in));\n union\n LogoutEvents,\n LoginEvents\n | extend \n EventStartTime = TimeGenerated,\n EventEndTime = TimeGenerated,\n EventSchema = \"Authentication\",\n EventSchemaVersion = \"0.1.4\",\n EventCount = int(1),\n Type = \"CommonSecurityLog\"\n | project-rename\n EventProductVersion = DeviceVersion,\n EventProduct = \"Cynerio\",\n EventVendor = \"Cynerio\",\n TargetIpAddr = DestinationIP,\n TargetHostname = Computer,\n TargetFQDN = DeviceName,\n EventOriginalType = Activity,\n EventOriginalSubType = DeviceEventClassID,\n TargetUsername = DestinationUserName,\n TargetDvcId = DeviceExternalID,\n SrcIpAddr = SourceIP,\n ActingAppName = SourceProcessName,\n EventMessage = Message\n | extend\n TargetUsernameType = \"Simple\",\n TargetDvcIdType = \"Other\"\n | parse-kv AdditionalExtensions as (deviceSeverity: string, status: string, [\"ad.status\"]: string) with (pair_delimiter=\";\", kv_delimiter=\"=\")\n | extend EventResult = case(\n [\"ad.status\"] == \"success\" or status == \"success\", \"Success\",\n [\"ad.status\"] == \"failed\" or status == \"failed\", \"Failure\",\n EventMessage has \"login failed\", \"Failure\",\n EventMessage has \"Login disabled\", \"Failure\",\n EventMessage has \"logged out\", \"Success\",\n EventMessage has \"logged in successfully\", \"Success\",\n \"NA\"\n )\n | where (eventresult == \"*\" or (EventResult == eventresult))\n | extend\n EventOriginalSeverity = coalesce(deviceSeverity, LogSeverity, \"\")\n | lookup EventSeverityLookup on EventOriginalSeverity\n | extend temp_isMatchTargetUsername = TargetUsername has_any(username_has_any)\n | extend ASimMatchingUsername = case(\n array_length(username_has_any) == 0,\n \"-\",\n temp_isMatchTargetUsername,\n \"TargetUsername\",\n \"No match\"\n )\n | extend\n Dvc = TargetDvcId,\n IpAddr = SrcIpAddr\n | project\n TimeGenerated,\n Type,\n EventResultDetails,\n EventType,\n EventStartTime,\n EventEndTime,\n EventSchema,\n EventSchemaVersion,\n EventCount,\n EventProductVersion,\n EventProduct,\n EventVendor,\n TargetIpAddr,\n TargetHostname,\n TargetFQDN,\n EventOriginalType,\n EventOriginalSeverity,\n EventOriginalSubType,\n TargetUsername,\n TargetDvcId,\n SrcIpAddr,\n ActingAppName,\n EventMessage,\n TargetUsernameType,\n TargetDvcIdType,\n EventResult,\n EventSeverity,\n ASimMatchingUsername,\n Dvc,\n IpAddr\n};\nparser(\n starttime=starttime,\n endtime=endtime,\n username_has_any=username_has_any,\n targetappname_has_any=targetappname_has_any,\n srcipaddr_has_any_prefix=srcipaddr_has_any_prefix,\n srchostname_has_any=srchostname_has_any,\n eventtype_in=eventtype_in,\n eventresultdetails_in=eventresultdetails_in,\n eventresult=eventresult,\n disabled=disabled)", - "version": 1, - "functionParameters": "starttime:datetime=datetime(null),endtime:datetime=datetime(null),username_has_any:dynamic=dynamic([]),targetappname_has_any:dynamic=dynamic([]),srcipaddr_has_any_prefix:dynamic=dynamic([]),srchostname_has_any:dynamic=dynamic([]),eventtype_in:dynamic=dynamic([]),eventresultdetails_in:dynamic=dynamic([]),eventresult:string='*',disabled:bool=False" - } - } - ] -} \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml index 5cb060e8583..f39cd362dcb 100644 --- a/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml +++ b/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml @@ -61,8 +61,7 @@ ParserQuery: | ASimAuthenticationNative (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationNative' in (DisabledParsers) )), ASimAuthenticationPaloAltoPanOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoPanOS' in (DisabledParsers) ), pack=pack), ASimAuthenticationPaloAltoGlobalProtect (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) ), pack=pack), - ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack), - ASimAuthenticationCynerioCynerio (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCynerioCynerio' in (DisabledParsers)), pack=pack) + ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack) Parsers: - _Im_Authentication_Empty - _ASim_Authentication_AADManagedIdentitySignInLogs @@ -102,5 +101,4 @@ Parsers: - _ASim_Authentication_IllumioSaaSCore - _ASim_Authentication_Native - _ASim_Authentication_VMwareESXi - - _ASim_Authentication_PaloAltoGlobalProtect - - _ASim_Authentication_CynerioCynerio \ No newline at end of file + - _ASim_Authentication_PaloAltoGlobalProtect \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml deleted file mode 100644 index 89e23255e18..00000000000 --- a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationCynerioTest.yaml +++ /dev/null @@ -1,30 +0,0 @@ -Parser: - Title: ASIM Authentication parser for Fortinet - Fortigate - Version: '0.1.0' - LastUpdated: Mar 10, 2026 -Product: - Name: Cynerio -Normalization: - Schema: Authentication - Version: '0.1.4' -References: -- Title: ASIM Authentication Schema - Link: https://aka.ms/ASimAuthenticationDoc -- Title: ASIM - Link: https://aka.ms/AboutASIM -- Title: FortiGate Documentation - Link: - https://docs.fortinet.com/ -Description: | - This ASIM parser supports normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. -ParserName: ASimAuthenticationCynerioCynerio -EquivalentBuiltInParser: _ASim_Authentication_CynerioCynerio -ParserParams: - - Name: disabled - Type: bool - Default: false -ParserQuery: | - CynerioEvent_CL - | extend - EventProduct = "Cynerio", - EventVendor = "Cynerio" \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml b/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml index 2cb0fe0eb90..1f1c4546338 100644 --- a/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml +++ b/Parsers/ASimAuthentication/Parsers/imAuthentication.yaml @@ -89,8 +89,7 @@ ParserQuery: | , vimAuthenticationFortinetFortigate (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) ))) , vimAuthenticationVMwareESXi (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareESXi' in (DisabledParsers) )), pack=pack) , vimAuthenticationPaloAltoPanOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )), pack=pack) - , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack), - , vimAuthenticationCynerioCynerio (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCynerio' in (DisabledParsers) )), pack=pack) + , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack) }; Generic(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, pack=pack) Parsers: @@ -131,5 +130,4 @@ Parsers: - _Im_Authentication_CrowdStrikeFalconHost - _Im_Authentication_IllumioSaaSCore - _Im_Authentication_Native - - _Im_Authentication_VMwareESXi - - _Im_Authentication_CynerioCynerio \ No newline at end of file + - _Im_Authentication_VMwareESXi \ No newline at end of file diff --git a/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml b/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml deleted file mode 100644 index a401510c0b6..00000000000 --- a/Parsers/ASimAuthentication/Parsers/vimAuthenticationCynerioTest.yaml +++ /dev/null @@ -1,57 +0,0 @@ -Parser: - Title: ASIM Authentication filtering parser for Fortinet - Fortigate - Version: '0.1.0' - LastUpdated: Mar 10, 2026 -Product: - Name: Cynerio -Normalization: - Schema: Authentication - Version: '0.1.4' -References: -- Title: ASIM Authentication Schema - Link: https://aka.ms/ASimAuthenticationDoc -- Title: ASIM - Link: https://aka.ms/AboutASIM -- Title: FortiGate Documentation - Link: - https://docs.fortinet.com/ -Description: | - This ASIM parser supports filtering and normalizing Fortinet - Fortigate administrator authentication logs to the ASIM Authentication normalized schema. -ParserName: vimAuthenticationFortinetFortigate -EquivalentBuiltInParser: _Im_Authentication_FortinetFortigate -ParserParams: - - Name: starttime - Type: datetime - Default: datetime(null) - - Name: endtime - Type: datetime - Default: datetime(null) - - Name: username_has_any - Type: dynamic - Default: dynamic([]) - - Name: targetappname_has_any - Type: dynamic - Default: dynamic([]) - - Name: srcipaddr_has_any_prefix - Type: dynamic - Default: dynamic([]) - - Name: srchostname_has_any - Type: dynamic - Default: dynamic([]) - - Name: eventtype_in - Type: dynamic - Default: dynamic([]) - - Name: eventresultdetails_in - Type: dynamic - Default: dynamic([]) - - Name: eventresult - Type: string - Default: '*' - - Name: disabled - Type: bool - Default: false -ParserQuery: | - CynerioEvent_CL - | extend - EventProduct = "Cynerio", - EventVendor = "Cynerio" \ No newline at end of file From a958654c2b01f5a12a9b6046cf47f7526a3eecfc Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 15:24:43 -0700 Subject: [PATCH 13/14] Fix white space --- Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml index f39cd362dcb..9abd7c0c154 100644 --- a/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml +++ b/Parsers/ASimAuthentication/Parsers/ASimAuthentication.yaml @@ -101,4 +101,4 @@ Parsers: - _ASim_Authentication_IllumioSaaSCore - _ASim_Authentication_Native - _ASim_Authentication_VMwareESXi - - _ASim_Authentication_PaloAltoGlobalProtect \ No newline at end of file + - _ASim_Authentication_PaloAltoGlobalProtect From db12271cee1677b573522d47c150901b4d1a5ecd Mon Sep 17 00:00:00 2001 From: Derrick Lee Date: Tue, 16 Jun 2026 15:25:51 -0700 Subject: [PATCH 14/14] Revert --- .../ARM/ASimAuthentication/ASimAuthentication.json | 2 +- .../ARM/imAuthentication/imAuthentication.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json b/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json index 4b5455ead55..f860bd49296 100644 --- a/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json +++ b/Parsers/ASimAuthentication/ARM/ASimAuthentication/ASimAuthentication.json @@ -27,7 +27,7 @@ "displayName": "Authentication ASIM parser", "category": "ASIM", "FunctionAlias": "ASimAuthentication", - "query": "let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeASimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\nlet ASimAuthenticationDisabled=toscalar('ExcludeASimAuthentication' in (DisabledParsers) or 'Any' in (DisabledParsers)); \nunion isfuzzy=true\n vimAuthenticationEmpty, \n ASimAuthenticationAADManagedIdentitySignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADNonInteractiveUserSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADServicePrincipalSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAWSCloudTrail (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAWSCloudTrail' in (DisabledParsers) )),\n ASimAuthenticationBarracudaWAF (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationBarracudaWAF' in (DisabledParsers) )),\n ASimAuthenticationCiscoASA (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoASA' in (DisabledParsers) )), \n ASimAuthenticationCiscoDNAC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoDNAC' in (DisabledParsers) )),\n ASimAuthenticationCiscoIOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoIOS' in (DisabledParsers) )),\n ASimAuthenticationCiscoISE (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISE' in (DisabledParsers) )),\n ASimAuthenticationCiscoISEAdministrator (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISEAdministrator' in (DisabledParsers) ),pack=pack),\n ASimAuthenticationCiscoMeraki (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMeraki' in (DisabledParsers) )),\n ASimAuthenticationCiscoMerakiSyslog (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )),\n ASimAuthenticationFortinetFortigate (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationFortigate' in (DisabledParsers) )),\n ASimAuthenticationM365Defender (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationM365Defender' in (DisabledParsers) )),\n ASimAuthenticationMD4IoT (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMD4IoT' in (DisabledParsers) )),\n ASimAuthenticationMicrosoftWindowsEvent (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )),\n ASimAuthenticationOktaSSO (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSSO' in (DisabledParsers) )),\n ASimAuthenticationOktaV2(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaV2' in (DisabledParsers) )),\n ASimAuthenticationOktaSystemLogs(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSystemLogs' in (DisabledParsers) )),\n ASimAuthenticationPostgreSQL (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPostgreSQL' in (DisabledParsers) )),\n ASimAuthenticationSigninLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSigninLogs' in (DisabledParsers) )),\n ASimAuthenticationSshd (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSshd' in (DisabledParsers) )),\n ASimAuthenticationSu (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSu' in (DisabledParsers) )),\n ASimAuthenticationSudo (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSudo' in (DisabledParsers) )),\n ASimAuthenticationSalesforceSC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSalesforceSC' in (DisabledParsers) )),\n ASimAuthenticationVectraXDRAudit (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVectraXDRAudit' in (DisabledParsers) )),\n ASimAuthenticationSentinelOne (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSentinelOne' in (DisabledParsers) )),\n ASimAuthenticationGoogleWorkspace (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationGoogleWorkspace' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoCortexDataLake (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )),\n ASimAuthenticationVMwareCarbonBlackCloud (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )),\n ASimAuthenticationVMwareVCenter (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareVCenter' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationCrowdStrikeFalconHost (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCrowdStrikeFalcon' in (DisabledParsers) )),\n ASimAuthenticationIllumioSaaSCore (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationIllumioSaaS' in (DisabledParsers) )),\n ASimAuthenticationNative (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationNative' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoPanOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoPanOS' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationPaloAltoGlobalProtect (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack),\n ASimAuthenticationCynerioCynerio (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCynerioCynerio' in (DisabledParsers)), pack=pack)\n", + "query": "let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeASimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\nlet ASimAuthenticationDisabled=toscalar('ExcludeASimAuthentication' in (DisabledParsers) or 'Any' in (DisabledParsers)); \nunion isfuzzy=true\n vimAuthenticationEmpty, \n ASimAuthenticationAADManagedIdentitySignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADNonInteractiveUserSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAADServicePrincipalSignInLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )),\n ASimAuthenticationAWSCloudTrail (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationAWSCloudTrail' in (DisabledParsers) )),\n ASimAuthenticationBarracudaWAF (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationBarracudaWAF' in (DisabledParsers) )),\n ASimAuthenticationCiscoASA (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoASA' in (DisabledParsers) )), \n ASimAuthenticationCiscoDNAC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoDNAC' in (DisabledParsers) )),\n ASimAuthenticationCiscoIOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoIOS' in (DisabledParsers) )),\n ASimAuthenticationCiscoISE (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISE' in (DisabledParsers) )),\n ASimAuthenticationCiscoISEAdministrator (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoISEAdministrator' in (DisabledParsers) ),pack=pack),\n ASimAuthenticationCiscoMeraki (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMeraki' in (DisabledParsers) )),\n ASimAuthenticationCiscoMerakiSyslog (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )),\n ASimAuthenticationFortinetFortigate (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationFortigate' in (DisabledParsers) )),\n ASimAuthenticationM365Defender (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationM365Defender' in (DisabledParsers) )),\n ASimAuthenticationMD4IoT (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMD4IoT' in (DisabledParsers) )),\n ASimAuthenticationMicrosoftWindowsEvent (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )),\n ASimAuthenticationOktaSSO (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSSO' in (DisabledParsers) )),\n ASimAuthenticationOktaV2(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaV2' in (DisabledParsers) )),\n ASimAuthenticationOktaSystemLogs(ASimAuthenticationDisabled or ('ExcludeASimAuthenticationOktaSystemLogs' in (DisabledParsers) )),\n ASimAuthenticationPostgreSQL (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPostgreSQL' in (DisabledParsers) )),\n ASimAuthenticationSigninLogs (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSigninLogs' in (DisabledParsers) )),\n ASimAuthenticationSshd (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSshd' in (DisabledParsers) )),\n ASimAuthenticationSu (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSu' in (DisabledParsers) )),\n ASimAuthenticationSudo (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSudo' in (DisabledParsers) )),\n ASimAuthenticationSalesforceSC (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSalesforceSC' in (DisabledParsers) )),\n ASimAuthenticationVectraXDRAudit (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVectraXDRAudit' in (DisabledParsers) )),\n ASimAuthenticationSentinelOne (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationSentinelOne' in (DisabledParsers) )),\n ASimAuthenticationGoogleWorkspace (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationGoogleWorkspace' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoCortexDataLake (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )),\n ASimAuthenticationVMwareCarbonBlackCloud (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )),\n ASimAuthenticationVMwareVCenter (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareVCenter' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationCrowdStrikeFalconHost (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationCrowdStrikeFalcon' in (DisabledParsers) )),\n ASimAuthenticationIllumioSaaSCore (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationIllumioSaaS' in (DisabledParsers) )),\n ASimAuthenticationNative (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationNative' in (DisabledParsers) )),\n ASimAuthenticationPaloAltoPanOS (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoPanOS' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationPaloAltoGlobalProtect (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) ), pack=pack),\n ASimAuthenticationVMwareESXi (ASimAuthenticationDisabled or ('ExcludeASimAuthenticationVMwareESXi' in (DisabledParsers)), pack=pack)\n", "version": 1, "functionParameters": "pack:bool=False" } diff --git a/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json b/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json index a2f052f3e90..d4dbabeada1 100644 --- a/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json +++ b/Parsers/ASimAuthentication/ARM/imAuthentication/imAuthentication.json @@ -27,7 +27,7 @@ "displayName": "Authentication ASIM filtering parser", "category": "ASIM", "FunctionAlias": "imAuthentication", - "query": "let Generic=(starttime: datetime=datetime(null), endtime: datetime=datetime(null), username_has_any: dynamic = dynamic([]), targetappname_has_any: dynamic = dynamic([]), srcipaddr_has_any_prefix: dynamic = dynamic([]), srchostname_has_any: dynamic = dynamic([]), eventtype_in: dynamic = dynamic([]), eventresultdetails_in: dynamic = dynamic([]), eventresult: string = '*', pack: bool=false) {\n let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\n let imAuthenticationBuiltInDisabled=toscalar('ExcludeimAuthenticationBuiltIn' in (DisabledParsers) or 'Any' in (DisabledParsers)); \n union isfuzzy=true\n vimAuthenticationEmpty\n , vimAuthenticationAADManagedIdentitySignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADNonInteractiveUserSignInLogs(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADServicePrincipalSignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationSigninLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSigninLogs' in (DisabledParsers) )))\n , vimAuthenticationAWSCloudTrail (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled = (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAWSCloudTrail' in (DisabledParsers) )))\n , vimAuthenticationOktaSSO (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSSO' in (DisabledParsers) )))\n , vimAuthenticationOktaSystemLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSystemLogs' in (DisabledParsers) )))\n , vimAuthenticationOktaV2 (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaV2' in (DisabledParsers) )))\n , vimAuthenticationM365Defender (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationM365Defender' in (DisabledParsers) )))\n , vimAuthenticationMicrosoftWindowsEvent (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )))\n , vimAuthenticationMD4IoT (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMD4IoT' in (DisabledParsers) )))\n , vimAuthenticationPostgreSQL (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPostgreSQL' in (DisabledParsers) )))\n , vimAuthenticationSshd (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSshd' in (DisabledParsers) )))\n , vimAuthenticationSu (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSu' in (DisabledParsers) )))\n , vimAuthenticationSudo (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSudo' in (DisabledParsers) )))\n , vimAuthenticationCiscoASA (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoASA' in (DisabledParsers) )))\n , vimAuthenticationCiscoDNAC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoDNAC' in (DisabledParsers) )))\n , vimAuthenticationCiscoMeraki (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMeraki' in (DisabledParsers) )))\n , vimAuthenticationCiscoMerakiSyslog (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )))\n , vimAuthenticationCiscoIOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoIOS' in (DisabledParsers) )))\n , vimAuthenticationCiscoISE (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISE' in (DisabledParsers) )))\n , vimAuthenticationCiscoISEAdministrator (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISEAdministrator' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationBarracudaWAF (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationBarracudaWAF' in (DisabledParsers) )))\n , vimAuthenticationVectraXDRAudit (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVectraXDRAudit' in (DisabledParsers) )))\n , vimAuthenticationGoogleWorkspace (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationGoogleWorkspace' in (DisabledParsers) )))\n , vimAuthenticationSalesforceSC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSalesforceSC' in (DisabledParsers) )))\n , vimAuthenticationPaloAltoCortexDataLake (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )))\n , vimAuthenticationSentinelOne (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSentinelOne' in (DisabledParsers) )))\n , vimAuthenticationCrowdStrikeFalconHost (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCrowdStrikeFalconHost' in (DisabledParsers) )))\n , vimAuthenticationVMwareCarbonBlackCloud (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )))\n , vimAuthenticationVMwareVCenter (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationIllumioSaaSCore (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationIllumioSaaS' in (DisabledParsers) )))\n , vimAuthenticationNative (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationNative' in (DisabledParsers) )))\n , vimAuthenticationFortinetFortigate (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )))\n , vimAuthenticationVMwareESXi (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareESXi' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoPanOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack),\n , vimAuthenticationCynerioCynerio (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCynerio' in (DisabledParsers) )), pack=pack)\n};\nGeneric(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, pack=pack)\n", + "query": "let Generic=(starttime: datetime=datetime(null), endtime: datetime=datetime(null), username_has_any: dynamic = dynamic([]), targetappname_has_any: dynamic = dynamic([]), srcipaddr_has_any_prefix: dynamic = dynamic([]), srchostname_has_any: dynamic = dynamic([]), eventtype_in: dynamic = dynamic([]), eventresultdetails_in: dynamic = dynamic([]), eventresult: string = '*', pack: bool=false) {\n let DisabledParsers=materialize(_GetWatchlist('ASimDisabledParsers') | where SearchKey in ('Any', 'ExcludeimAuthentication') | extend SourceSpecificParser=column_ifexists('SourceSpecificParser','') | distinct SourceSpecificParser);\n let imAuthenticationBuiltInDisabled=toscalar('ExcludeimAuthenticationBuiltIn' in (DisabledParsers) or 'Any' in (DisabledParsers)); \n union isfuzzy=true\n vimAuthenticationEmpty\n , vimAuthenticationAADManagedIdentitySignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADManagedIdentitySignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADNonInteractiveUserSignInLogs(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADNonInteractiveUserSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationAADServicePrincipalSignInLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAADServicePrincipalSignInLogs' in (DisabledParsers) )))\n , vimAuthenticationSigninLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSigninLogs' in (DisabledParsers) )))\n , vimAuthenticationAWSCloudTrail (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled = (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationAWSCloudTrail' in (DisabledParsers) )))\n , vimAuthenticationOktaSSO (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSSO' in (DisabledParsers) )))\n , vimAuthenticationOktaSystemLogs (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaSystemLogs' in (DisabledParsers) )))\n , vimAuthenticationOktaV2 (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationOktaV2' in (DisabledParsers) )))\n , vimAuthenticationM365Defender (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationM365Defender' in (DisabledParsers) )))\n , vimAuthenticationMicrosoftWindowsEvent (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMicrosoftWindowsEvent' in (DisabledParsers) )))\n , vimAuthenticationMD4IoT (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationMD4IoT' in (DisabledParsers) )))\n , vimAuthenticationPostgreSQL (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPostgreSQL' in (DisabledParsers) )))\n , vimAuthenticationSshd (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSshd' in (DisabledParsers) )))\n , vimAuthenticationSu (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSu' in (DisabledParsers) )))\n , vimAuthenticationSudo (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSudo' in (DisabledParsers) )))\n , vimAuthenticationCiscoASA (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoASA' in (DisabledParsers) )))\n , vimAuthenticationCiscoDNAC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoDNAC' in (DisabledParsers) )))\n , vimAuthenticationCiscoMeraki (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMeraki' in (DisabledParsers) )))\n , vimAuthenticationCiscoMerakiSyslog (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoMerakiSyslog' in (DisabledParsers) )))\n , vimAuthenticationCiscoIOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoIOS' in (DisabledParsers) )))\n , vimAuthenticationCiscoISE (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISE' in (DisabledParsers) )))\n , vimAuthenticationCiscoISEAdministrator (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCiscoISEAdministrator' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationBarracudaWAF (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationBarracudaWAF' in (DisabledParsers) )))\n , vimAuthenticationVectraXDRAudit (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVectraXDRAudit' in (DisabledParsers) )))\n , vimAuthenticationGoogleWorkspace (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationGoogleWorkspace' in (DisabledParsers) )))\n , vimAuthenticationSalesforceSC (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSalesforceSC' in (DisabledParsers) )))\n , vimAuthenticationPaloAltoCortexDataLake (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoCortexDataLake' in (DisabledParsers) )))\n , vimAuthenticationSentinelOne (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationSentinelOne' in (DisabledParsers) )))\n , vimAuthenticationCrowdStrikeFalconHost (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationCrowdStrikeFalconHost' in (DisabledParsers) )))\n , vimAuthenticationVMwareCarbonBlackCloud (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )))\n , vimAuthenticationVMwareVCenter (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareCarbonBlackCloud' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationIllumioSaaSCore (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationIllumioSaaS' in (DisabledParsers) )))\n , vimAuthenticationNative (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationNative' in (DisabledParsers) )))\n , vimAuthenticationFortinetFortigate (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )))\n , vimAuthenticationVMwareESXi (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationVMwareESXi' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoPanOS (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationFortigate' in (DisabledParsers) )), pack=pack)\n , vimAuthenticationPaloAltoGlobalProtect (starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, disabled= (imAuthenticationBuiltInDisabled or('ExcludevimAuthenticationPaloAltoGlobalProtect' in (DisabledParsers) )), pack=pack)\n};\nGeneric(starttime=starttime, endtime=endtime, username_has_any=username_has_any, targetappname_has_any=targetappname_has_any, srcipaddr_has_any_prefix=srcipaddr_has_any_prefix, srchostname_has_any=srchostname_has_any, eventtype_in=eventtype_in, eventresultdetails_in=eventresultdetails_in, eventresult=eventresult, pack=pack)\n", "version": 1, "functionParameters": "starttime:datetime=datetime(null),endtime:datetime=datetime(null),username_has_any:dynamic=dynamic([]),targetappname_has_any:dynamic=dynamic([]),srcipaddr_has_any_prefix:dynamic=dynamic([]),srchostname_has_any:dynamic=dynamic([]),eventtype_in:dynamic=dynamic([]),eventresultdetails_in:dynamic=dynamic([]),eventresult:string='*',pack:bool=False" }