O365 Interaction Event - Create Operation - Succeeded

{ "artifacts": [ { "name": "O365 Interaction", "label": "event", "severity": "Not applicable", "cef": { "CreationTime": "2023-10-12T07:16:42", "Id": "b5d46535-b3fa-4fa8-49a8-08dbcaf32f88", "Operation": "Create", "OrganizationId": "9495d6bb-41c2-4c58-848f-92e52cf3d640", "RecordType": 2, "ResultStatus": "Succeeded", "UserKey": "100320011511303F", "UserType": 0, "Version": 1, "Workload": "Exchange", "ClientIP": "160.178.204.192", "UserId": "@.org", "AppId": "27922004-5251-4030-b22d-91ecd9a37ea4", "ClientIPAddress": "160.178.204.192", "ClientInfoString": "Client=OutlookService;Outlook-iOS/2.0;", "ClientRequestId": "14678", "ExternalAccess": false, "InternalLogonType": 0, "LogonType": 0, "LogonUserSid": "S-1-5-21-549233060-732865783-2795668026-26623671", "MailboxGuid": "2c0449d7-7fc9-43f8-8403-b84c219e0349", "MailboxOwnerSid": "S-1-5-21-549233060-732865783-2795668026-26623671", "MailboxOwnerUPN": "@.org", "OrganizationName": "..com", "OriginatingServer": "SG2PR03MB6635 (15.20.4200.000)\r\n", "SessionId": "d1a0041a-8f6c-4b62-9d7e-37fdd1943835", "Item": { "Attachments": "image001.png (38900b), image003.jpg (61468b), image005.jpg (66145b), image010.png (39509b)", "Id": "LgAAAAAdhAMRqmYRzZvIAKoAL8RaDQBRPy4itCpTQJOdFhnC7Zr7AAKDHHBnAAAJ", "InternetMessageId": "<@...outlook.com>", "IsRecord": false, "ParentFolder": { "Id": "LgAAAAAGegYNis8oQYSfKoMHEBnzAQBRPy4itCpTQJOdFhnC7Zr7AAAAAAEPAAAB", "Path": "\Drafts" }, "Sensitivity": "817d4574-7375-4d17-b29c-6e4c6df0fcb0", "SizeInBytes": 270197, "Subject": "Re: (for your response) schedule of TD's meetings with Banks during the WBG/IMF Annual Meetings (Marrakech, 9-15 October 2023)" } } } ] }