I think I somehow messed up the JSON that I originally posted. I kept trying your solution, but I think it is missing a 'properties' value that I think I accidentally wiped out when I was removing any identifying data. I just went back through and here is the full JSON. I tried to just throw a ?['properties']? in that xpath function and still can't get it working. I am so incredibly sorry, as I know this is totally my fault. I will update my original post's JSON as well..
{
"body": {
"eventUniqueId": "86",
"objectSchemaType": "Incident",
"objectEventType": "Create",
"workspaceInfo": {
"SubscriptionId": "",
"ResourceGroupName": "",
"WorkspaceName": ""
},
"workspaceId": "",
"object": {
"type": "Microsoft.SecurityInsights/Incidents",
"properties": {
"title": "Messages containing malicious entity not removed after delivery",
"description": "Messages containing a malicious entity were delivered, and we could not remove them after delivery. Manual action is required. Please remove the malicious messages for the affected users. -V1.0.0.0",
"severity": "Informational",
"status": "Closed",
"classification": "BenignPositive",
"classificationReason": "SuspiciousButExpected",
"owner": {
"objectId": null,
"email": null,
"assignedTo": null,
"userPrincipalName": null
},
"labels": [],
"firstActivityTimeUtc": "2024-03-04T15:58:16.0970996Z",
"lastActivityTimeUtc": "2024-03-04T16:00:16.0970996Z",
"lastModifiedTimeUtc": "2024-03-04T16:26:45.2328661Z",
"createdTimeUtc": "2024-03-04T16:11:35.7769838Z",
"incidentNumber": 8073,
"additionalData": {
"alertsCount": 1,
"bookmarksCount": 0,
"commentsCount": 0,
"alertProductNames": [
"Office 365 Advanced Threat Protection"
],
"tactics": [
"InitialAccess"
],
"techniques": []
},
"relatedAnalyticRuleIds": [
"/1"
],
"incidentUrl": "",
"providerName": "Azure Sentinel",
"providerIncidentId": "8073",
"alerts": [
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "SecurityAlert",
"properties": {
"systemAlertId": "63e68182-02a3-ed03-ab8e-025585d550a6",
"tactics": [
"InitialAccess"
],
"alertDisplayName": "Messages containing malicious entity not removed after delivery",
"description": "Messages containing a malicious entity were delivered, and we could not remove them after delivery. Manual action is required. Please remove the malicious messages for the affected users. -V1.0.0.0",
"confidenceLevel": "Unknown",
"severity": "Medium",
"vendorName": "Microsoft",
"productName": "Office 365 Advanced Threat Protection",
"alertType": "663e723a-4a74-47d9-9690-9638f0d496af",
"processingEndTime": "2024-03-05T01:59:21.0833333Z",
"status": "Resolved",
"endTimeUtc": "2024-03-04T16:00:16.0970996Z",
"startTimeUtc": "2024-03-04T15:58:16.0970996Z",
"timeGenerated": "2024-03-05T02:06:55.7894068Z",
"providerAlertId": "ccbbcc42-236f-1433-3a00-08dc3c64018a",
"alertLink": "https://security.m76f17528b",
"resourceIdentifiers": [
{
"type": "LogAnalytics",
"workspaceId": ""
}
],
"additionalData": {
"IncidentId": "25901",
"OriginSource": "Microsoft 365 defender",
"Category": "InitialAccess",
"DetectionSource": "microsoftDefenderForOffice365",
"DetectorId": "663e723a-4a74-47d9-9690-9638f0d496af",
"LastUpdated": "3/5/2024 1:59:21 AM",
"ProcessedBySentinel": "True",
"Alert generation status": "Full alert created",
"AssignedTo": "@domain.com",
"Classification": "truePositive"
},
"friendlyName": "Messages containing malicious entity not removed after delivery"
}
}
],
"bookmarks": [],
"relatedEntities": [
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Account",
"properties": {
"accountName": "first last",
"ntDomain": "fwmrpc",
"upnSuffix": "domain.com",
"isDomainJoined": true,
"displayName": "first last",
"dnsDomain": "domain",
"additionalData": {
"UserPrincipalName": "first_last@domain.com",
"AccountName": "first_last",
"DomainName": "fwmrpc",
},
"friendlyName": "first last"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Mailbox",
"properties": {
"mailboxPrimaryAddress": "first_last@domain.com",
"displayName": "first last",
"upn": "first_last@domain.com",
"friendlyName": "first_last@domain.com"
}
},
{
"type": "Microsoft.SecurityInsights/Entities",
"kind": "MailMessage",
"properties": {
"fileEntityIds": [],
"recipient": "first_last@domain.com",
"urls": [
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5mYWNlYm9vay5jb20vcGcvU3BhcnRhbi92aWRlb3Mv/s9v69557bff",
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5pbnN0YWdyYW0uY29tL3NwYXJ0YW4v/s4l20867c71",
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3R3aXR0ZXIuY29tL1NwYXJ0YW5SYWNl/s0p08fc9dd7",
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy55b3V0dWJlLmNvbS91c2VyL1NwYXJ0YW5SYWNlVHViZQ/s3sf8b36e95",
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5pbnN0YWdyYW0uY29tL3JlYWxqb2VkZXNlbmEv/sbp3151f7ac",
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5saW5rZWRpbi5jb20vaW4vam9zZXBoZGVzZW5hLw/s3r28101907",
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3JhY2Uuc3BhcnRhbi5jb20vZW4vcGFnZXMvdGhlLXNwYXJ0YW4tYXBw/qP19nbD0xJTJhNWRoNGVkJTJhX2djbF9hdyUyYVIwTk1MakUzTURreE1qazFOREV1UTJwM1MwTkJhVUV3VUhWMVFtaENjMFZwZDBGVE4yWnpUbVpTU0ZkVVVuTm5Va04yU2xocmJWUm9lV3hZVVVnNFYySjRZVlV6TXpsYWNEUnhVRTVXUTFOdk5XeHphRVJoVjJNMmNHSlNiME16T1hkUlFYWkVYMEozUlEuLiUyYV9nY2xfYXUlMmFNVGszTnpFek16WXhOQzR4TnpBM01EZ3pNakV4JTJhX2dhJTJhTVRjek5qUTBNRFV6Tnk0eE56QTRORGMzTmpReiUyYV9nYV82UkxaOTBWMDgzJTJhTVRjd09URXpPVFUzTlM0M0xqRXVNVGN3T1RFME1qQTRNeTR3TGpBdU1BLi4lMmFfZnBsYyUyYU1IRjRkWEpyU1haM1ZqbHBhWEpKZW1OVU0yRXpNV1UwT1RGRGJIRktVMFkzU3pCNGNYbDRjRTVaYVZOWFowOHlPSGRGUVZOTGJXOVZPRlIxTjNSemJsUktRbk5PU1hGUWJGZGFPRVpNWkZGUFRXNU1NWGc0UzNGeGVYTllTa1ZDVVZOcFZtaHJNalJaZVVGWlVXeHdZVFJVWmpjd1V6RnFlbTVPYTA1bkpUTkVKVE5FJnV0bV90ZXJtPXJjciZ1dG1fY29udGVudD1yYWNlJnV0bV9zb3VyY2U9emV0YSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbiZidF9lZT1tMkZEd1lvRHNlUnZBZjRMb2t5cmV0cXZLelhOOGlJaG9QREZzVTdoWGVoJTJGTiUyQkdMYTV6SGRnRXpTcFJKNXhSbSZidF90cz0xNzA5NTY0ODg0ODcy/s2h01c7743c",
"https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3JhY2Uuc3BhcnRhbi5jb20vZW4vcGFnZXMvdGhlLXNwYXJ0YW4tYXBw/qP3V0bV90ZXJtPXJjciZ1dG1fY29udGVudD1yYWNlJnV0bV9zb3VyY2U9emV0YSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbiZidF9lZT1tMkZEd1lvRHNlUnZBZjRMb2t5cmV0cXZLelhOOGlJaG9QREZzVTdoWGVoJTJGTiUyQkdMYTV6SGRnRXpTcFJKNXhSbSZidF90cz0xNzA5NTY0ODg0ODcy/s1u0220b7ef",
"https://e.sr.spartan.com/click?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",
"https://e.sr.spartan.com/click?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",
"https://www.facebook.com/pg/Spartan/videos/%EF%BF%BD%EF%BF%BDo%EF%BF%BD%EF%BF%BDy",
"https://www.instagram.com/spartan/%EF%BF%BD%EF%BF%BD%25%EF%BF%BDO:",
"https://twitter.com/SpartanRace%EF%BF%BD%EF%BF%BD)",
"https://www.youtube.com/user/SpartanRaceTube%0F%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDo~",
"https://www.instagram.com/realjoedesena/%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%5Eu",
"https://www.linkedin.com/in/josephdesena/%0F%EF%BF%BD%DE%BD%EF%BF%BD%EF%BF%BDM",
"https://race.spartan.com/en/pages/the-spartan-app%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDv%EF%BF%BD%EF%BF%BD%12S&%13VF%EF%BF%BDFVBS&%15%EF%BF%BDv6%EF%BF%BD%EF%BF%BD%17rS&%15#%04%EF%BF%BD%EF%BF%BD%C6%A4S4%EF%BF%BDF%EF%BF%BD%EF%BF%BD%D6%A6%EF%BF%BD%14%EF%BF%BDDWU%13'%0353%04%EF%BF%BD&%15TWuT%EF%BF%BDc%15%16%D6%8463%05g%06C%04eD%EF%BF%BD%25%EF%BF%BD%EF%BF%BDF%D5%A554fEUV%EF%BF%BD%EF%BF%BD%EF%BF%BDV%EF%BF%BD%EF%BF%BD%256%C6%87&%25e&%EF%BF%BDUw%EF%BF%BD%EF%BF%BDUVsEc$%EF%BF%BDE%EF%BF%BDeW%EF%BF%BD%D7%A6%EF%BF%BD%164E'%EF%BF%BDTSUu%13%14%EF%BF%BDd%EF%BF%BDw%EF%BF%BD%EF%BF%BD%14U&%EF%BF%BDc$%EF%BF%BD&4t%EF%BF%BD6#%04%D7%A4%EF%BF%BD%EF%BF%BDE%25%15%EF%BF%BD%EF%BF%BDU%EF%BF%BD%04%EF%BF%BD5%25%12%EF%BF%BD%EF%BF%BDS&%15%EF%BF%BDv6%EF%BF%BD%EF%BF%BD%17RS&%14%EF%BF%BDF%EF%BF%BD4%EF%BF%BDW%EF%BF%BD%D7%A5%EF%BF%BD%EF%BF%BD%EF%BF%BD3G%EF%BF%BD%EF%BF%BD%134%EF%BF%BDFw%EF%BF%BD%D6%A4W%EF%BF%BDS&%15%EF%BF%BDv%12S&%14%EF%BF%BDF7%EF%BF%BD%EF%BF%BD%13%04%EF%BF%BDEW%EF%BF%BD%EF%BF%BDG%EF%BF%BD%EF%BF%BD%13D%EF%BF%BDF34%EF%BF%BD%17%EF%BF%BDS&%15%EF%BF%BDv%15%EF%BF%BDe$%C5%A3%EF%BF%BD%05c%03%EF%BF%BD2S&%14%EF%BF%BDF7t%EF%BF%BDDW%EF%BF%BD%EF%BF%BDES4%EF%BF%BD3C4%C6%A4WT%EF%BF%BDF7t%EF%BF%BDDS%04%D6%A4%13D%D7%93Gt%C6%A4%17T%EF%BF%BD%12%EF%BF%BD%EF%BF%BDS&%15%EF%BF%BDg%06%EF%BF%BD2S&%14%D4%84cFE%EF%BF%BD%EF%BF%BD%255%EF%BF%BD%EF%BF%BD5f%EF%BF%BD%EF%BF%BD%06%15%EF%BF%BD%EF%BF%BD%EF%BF%BDV%EF%BF%BD%EF%BF%BDT%EF%BF%BD$W%EF%BF%BD%EF%BF%BDuS%04%EF%BF%BDDdF$%EF%BF%BDd%EF%BF%BDS%05%EF%BF%BD57%EF%BF%BD#F5%EF%BF%BD%EF%BF%BDF4SU%EF%BF%BD%15d%E5%85%A3%03%EF%BF%BD%EF%BF%BD%EF%BF%BDDe%15d%EF%BF%BD%EF%BF%BD%25s%EF%BF%BDd%EF%BF%BDe#%14%EF%BF%BD5'%EF%BF%BD&%EF%BF%BD$%EF%BF%BD%16%EF%BF%BD%EF%BF%BD%EF%BF%BD5%EF%BF%BDe%16$fF%14%EF%BF%BDU%EF%BF%BD%D5%A4de%05EsT%EF%BF%BD%D5%86sE34g%EF%BF%BDU%EF%BF%BD%EF%BF%BD6%EF%BF%BDd5Ud%EF%BF%BD%05f%D6%87$%D6%A5%25%EF%BF%BDUTe%EF%BF%BDUw%EF%BF%BDu%EF%BF%BDE%25U%EF%BF%BD%EF%BF%BD7uW%EF%BF%BDg%16V%EF%BF%BDT%EF%BF%BD%13%03V%EF%BF%BDD%EF%BF%BDT%EF%BF%BDD%EF%BF%BDRgWF%EF%BF%BD%EF%BF%BDFW&%EF%BF%BD%EF%BF%BD&7%22gWF%EF%BF%BD%EF%BF%BD6%E",
"https://race.spartan.com/en/pages/the-spartan-app%EF%BF%BD%EF%BF%BD%EF%BF%BDWF%EF%BF%BD%EF%BF%BDFW&%EF%BF%BD%EF%BF%BD&7%22gWF%EF%BF%BD%EF%BF%BD6%EF%BF%BD%EF%BF%BDFV%EF%BF%BDC%EF%BF%BD&%166RgWF%EF%BF%BD%EF%BF%BD6%EF%BF%BDW&6S%D7%A6WF%12gWF%EF%BF%BD%EF%BF%BD%EF%BF%BDVF%EF%BF%BDV%EF%BF%BD%EF%BF%BDV%EF%BF%BD%16%EF%BF%BD%EF%BF%BDgWF%EF%BF%BD%EF%BF%BD6%16%EF%BF%BD%06%16%EF%BF%BDv%EF%BF%BDf'E%EF%BF%BDVS%EF%BF%BD%EF%BF%BD$dGu%EF%BF%BD%EF%BF%BDG6U'd%16cD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD&WG%17d%EF%BF%BD%EF%BF%BD%EF%BF%BD%E3%86%94%EF%BF%BD%EF%BF%BD%EF%BF%BD%04Dg5Sv%EF%BF%BD%EF%BF%BDV%EF%BF%BDS$d%EF%BF%BDS$$t%EF%BF%BD%13W%EF%BF%BD%EF%BF%BDFtW%EF%BF%BD7%05$%EF%BF%BDW%EF%BF%BD&%EF%BF%BDf'E%EF%BF%BDG3%EF%BF%BD%13s%03%EF%BF%BDScC%EF%BF%BD%EF%BF%BDC%EF%BF%BDs/%EF%BF%BD%EF%BF%BD%EF%BF%BD6%EF%BF%BDF%EF%BF%BDy",
"https://race.spartan.com/en/race/detail/8100/overview%0F%EF%BF%BD?utm_term=rcr&utm_content=race&utm_source=zeta&utm_medium=email&utm_campaign&bt_ee=m2FDwYoDseRvAf4LokyretqvKzXN8iIhoPDFsU7hXeh%2FN%2BGLa5zHdgEzSpRJ5xRm&bt_ts=1709564884872%EF%BF%BD%EF%BF%BDb%EF%BF%BD%7Fw%EF%BF%BDM",
"https://race.spartan.com/en/race/detail/8086/overview%0F%EF%BF%BD?utm_term=rcr&utm_content=race&utm_source=zeta&utm_medium=email&utm_campaign&bt_ee=m2FDwYoDseRvAf4LokyretqvKzXN8iIhoPDFsU7hXeh%2FN%2BGLa5zHdgEzSpRJ5xRm&bt_ts=1709564884872%EF%BF%BD%EF%BF%BD'%D3%96%EF%BF%BDy"
],
"threats": [
"ZapPhish",
"HighConfPhish"
],
"p1Sender": "bounce-sp3-zh_srspartan_nmban03042024c1186524b1-h-2bcac3b570=2@sr.spartan.com",
"p1SenderDomain": "sr.spartan.com",
"senderIP": "96.47.26.130",
"p2Sender": "spartan@sr.spartan.com",
"p2SenderDisplayName": "Spartan",
"p2SenderDomain": "sr.spartan.com",
"receiveDate": "2024-03-04T15:13:01Z",
"networkMessageId": "e1f5a456-514b-42d4-67f0-08dc3c5d9182",
"internetMessageId": "<mid-1709564884870bb66e83e0de2@sr.spartan.com>",
"subject": "Spartan training programs + open Championship Heats!",
"antispamDirection": "Unknown",
"deliveryAction": "Blocked",
"language": "en",
"threatDetectionMethods": [
"FingerPrintMatch"
],
"friendlyName": "e1f5a456-514b-42d4-67f0-08dc3c5d9182"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Ip",
"properties": {
"address": "96.47.26.130",
"friendlyName": "96.47.26.130"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "MailCluster",
"properties": {
"networkMessageIds": [
"e1f5a456-514b-42d4-67f0-08dc3c5d9182",
"cce3cc5c-bdfd-4a1d-073e-08dc3c5d68ec"
],
"query": "( (( (BodyFingerprintBin1:\"3024025351\") ) AND ( (P2SenderDomain:\"sr.spartan.com\") ) AND ( (ContentType: 1) )) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:PhishEdu) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:SecOps))",
"mailCount": 4,
"additionalData": {
"ClusterBy": "BodyFingerprintBin1;P2SenderDomain;ContentType",
"ClusterByValue": "3024025351;sr.spartan.com;1",
"Urn": "urn:MailClusterEntity:9ea40b90f9ff6877395817d1319ed0ab"
},
"friendlyName": "urn:MailClusterEntity:9ea40b90f9ff6877395817d1319ed0ab"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "MailCluster",
"properties": {
"networkMessageIds": [
"e1f5a456-514b-42d4-67f0-08dc3c5d9182",
"cce3cc5c-bdfd-4a1d-073e-08dc3c5d68ec"
],
"query": "( (( (Subject:\"Spartan training programs + open Championship Heats!\") ) AND ( (SenderIp:\"96.47.26.130\") ) AND ( (AntispamDirection:\"1\") ) AND ( (ContentType: 1) )) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:PhishEdu) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:SecOps))",
"mailCount": 4,
"additionalData": {
"ClusterBy": "Subject;SenderIp;AntispamDirection;ContentType",
"ClusterByValue": "Spartan training programs + open Championship Heats!;96.47.26.130;1;1",
"Urn": "urn:MailClusterEntity:add6021c0a6e3be8fe849dd607ddfc8a"
},
"friendlyName": "urn:MailClusterEntity:add6021c0a6e3be8fe849dd607ddfc8a"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "MailCluster",
"properties": {
"networkMessageIds": [
"e1f5a456-514b-42d4-67f0-08dc3c5d9182",
"cce3cc5c-bdfd-4a1d-073e-08dc3c5d68ec"
],
"query": "( (( (Subject:\"Spartan training programs + open Championship Heats!\") ) AND ( (P2SenderDomain:\"sr.spartan.com\") ) AND ( (AntispamDirection:\"1\") ) AND ( (ContentType: 1) )) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:PhishEdu) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:SecOps))",
"mailCount": 4,
"additionalData": {
"ClusterBy": "Subject;P2SenderDomain;AntispamDirection;ContentType",
"ClusterByValue": "Spartan training programs + open Championship Heats!;sr.spartan.com;1;1",
"Urn": "urn:MailClusterEntity:47fed100ee432a121ecb8c7a792063f9"
},
"friendlyName": "urn:MailClusterEntity:47fed100ee432a121ecb8c7a792063f9"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "MailCluster",
"properties": {
"networkMessageIds": [
"e1f5a456-514b-42d4-67f0-08dc3c5d9182",
"cce3cc5c-bdfd-4a1d-073e-08dc3c5d68ec"
],
"query": "( (( (BodyFingerprintBin1:\"3024025351\") ) AND ( (SenderIp:\"96.47.26.130\") ) AND ( (ContentType: 1) )) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:PhishEdu) AND NOT(XmiInfoTenantPolicyFinalVerdictSource:SecOps))",
"mailCount": 4,
"additionalData": {
"ClusterBy": "BodyFingerprintBin1;SenderIp;ContentType",
"ClusterByValue": "3024025351;96.47.26.130;1",
"Urn": "urn:MailClusterEntity:a9ce2e5fa6a9a6c620d59af133498b43"
},
"friendlyName": "urn:MailClusterEntity:a9ce2e5fa6a9a6c620d59af133498b43"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5mYWNlYm9vay5jb20vcGcvU3BhcnRhbi92aWRlb3Mv/s9v69557bff",
"friendlyName": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5mYWNlYm9vay5jb20vcGcvU3BhcnRhbi92aWRlb3Mv/s9v69557bff"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5pbnN0YWdyYW0uY29tL3NwYXJ0YW4v/s4l20867c71",
"friendlyName": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5pbnN0YWdyYW0uY29tL3NwYXJ0YW4v/s4l20867c71"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3R3aXR0ZXIuY29tL1NwYXJ0YW5SYWNl/s0p08fc9dd7",
"friendlyName": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3R3aXR0ZXIuY29tL1NwYXJ0YW5SYWNl/s0p08fc9dd7"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy55b3V0dWJlLmNvbS91c2VyL1NwYXJ0YW5SYWNlVHViZQ/s3sf8b36e95",
"friendlyName": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy55b3V0dWJlLmNvbS91c2VyL1NwYXJ0YW5SYWNlVHViZQ/s3sf8b36e95"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5pbnN0YWdyYW0uY29tL3JlYWxqb2VkZXNlbmEv/sbp3151f7ac",
"friendlyName": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5pbnN0YWdyYW0uY29tL3JlYWxqb2VkZXNlbmEv/sbp3151f7ac"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5saW5rZWRpbi5jb20vaW4vam9zZXBoZGVzZW5hLw/s3r28101907",
"friendlyName": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3d3dy5saW5rZWRpbi5jb20vaW4vam9zZXBoZGVzZW5hLw/s3r28101907"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?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",
"friendlyName": "https://e.sr.spartan.com/click?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"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3JhY2Uuc3BhcnRhbi5jb20vZW4vcGFnZXMvdGhlLXNwYXJ0YW4tYXBw/qP3V0bV90ZXJtPXJjciZ1dG1fY29udGVudD1yYWNlJnV0bV9zb3VyY2U9emV0YSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbiZidF9lZT1tMkZEd1lvRHNlUnZBZjRMb2t5cmV0cXZLelhOOGlJaG9QREZzVTdoWGVoJTJGTiUyQkdMYTV6SGRnRXpTcFJKNXhSbSZidF90cz0xNzA5NTY0ODg0ODcy/s1u0220b7ef",
"friendlyName": "https://e.sr.spartan.com/click?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"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?EY2FzZXlfZHVrZUBmd21ldGFscy5jb20/CeyJtaWQiOiIxNzA5NTY0ODg0ODcwYmI2NmU4M2UwZGUyIiwiY3QiOiJzcGFydGFuLTNlZDQxZTJmMTc1ZDE5ODAzYTI4YzhkNWUyYWUxMGQyLTEiLCJyZCI6ImZ3bWV0YWxzLmNvbSJ9/HWkhfc3JzcGFydGFuX05NQkFOMDMwNDIwMjRjMTE4NjUyNGIxLHNwMyxodHRwczovL3JhY2Uuc3BhcnRhbi5jb20vZW4vcmFjZS9kZXRhaWwvODEwMC9vdmVydmlldw/qP3V0bV90ZXJtPXJjciZ1dG1fY29udGVudD1yYWNlJnV0bV9zb3VyY2U9emV0YSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbiZidF9lZT1tMkZEd1lvRHNlUnZBZjRMb2t5cmV0cXZLelhOOGlJaG9QREZzVTdoWGVoJTJGTiUyQkdMYTV6SGRnRXpTcFJKNXhSbSZidF90cz0xNzA5NTY0ODg0ODcy/sdi9393103d",
"friendlyName": "https://e.sr.spartan.com/click?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"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://e.sr.spartan.com/click?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",
"friendlyName": "https://e.sr.spartan.com/click?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"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://www.facebook.com/pg/Spartan/videos/%EF%BF%BD%EF%BF%BDo%EF%BF%BD%EF%BF%BDy",
"friendlyName": "https://www.facebook.com/pg/Spartan/videos/%EF%BF%BD%EF%BF%BDo%EF%BF%BD%EF%BF%BDy"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://www.instagram.com/spartan/%EF%BF%BD%EF%BF%BD%25%EF%BF%BDO:",
"friendlyName": "https://www.instagram.com/spartan/%EF%BF%BD%EF%BF%BD%25%EF%BF%BDO:"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://twitter.com/SpartanRace%EF%BF%BD%EF%BF%BD)",
"friendlyName": "https://twitter.com/SpartanRace%EF%BF%BD%EF%BF%BD)"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://www.youtube.com/user/SpartanRaceTube%0F%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDo~",
"friendlyName": "https://www.youtube.com/user/SpartanRaceTube%0F%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDo~"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://www.instagram.com/realjoedesena/%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD%5Eu",
"friendlyName": "https://www.instagram.com/realjoedesena/%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD^u"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://www.linkedin.com/in/josephdesena/%0F%EF%BF%BD%DE%BD%EF%BF%BD%EF%BF%BDM",
"friendlyName": "https://www.linkedin.com/in/josephdesena/%0F%EF%BF%BDÞ½%EF%BF%BD%EF%BF%BDM"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://race.spartan.com/en/pages/the-spartan-app%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDv%EF%BF%BD%EF%BF%BD%12S&%13VF%EF%BF%BDFVBS&%15%EF%BF%BDv6%EF%BF%BD%EF%BF%BD%17rS&%15#%04%EF%BF%BD%EF%BF%BD%C6%A4S4%EF%BF%BDF%EF%BF%BD%EF%BF%BD%D6%A6%EF%BF%BD%14%EF%BF%BDDWU%13'%0353%04%EF%BF%BD&%15TWuT%EF%BF%BDc%15%16%D6%8463%05g%06C%04eD%EF%BF%BD%25%EF%BF%BD%EF%BF%BDF%D5%A554fEUV%EF%BF%BD%EF%BF%BD%EF%BF%BDV%EF%BF%BD%EF%BF%BD%256%C6%87&%25e&%EF%BF%BDUw%EF%BF%BD%EF%BF%BDUVsEc$%EF%BF%BDE%EF%BF%BDeW%EF%BF%BD%D7%A6%EF%BF%BD%164E'%EF%BF%BDTSUu%13%14%EF%BF%BDd%EF%BF%BDw%EF%BF%BD%EF%BF%BD%14U&%EF%BF%BDc$%EF%BF%BD&4t%EF%BF%BD6#%04%D7%A4%EF%BF%BD%EF%BF%BDE%25%15%EF%BF%BD%EF%BF%BDU%EF%BF%BD%04%EF%BF%BD5%25%12%EF%BF%BD%EF%BF%BDS&%15%EF%BF%BDv6%EF%BF%BD%EF%BF%BD%17RS&%14%EF%BF%BDF%EF%BF%BD4%EF%BF%BDW%EF%BF%BD%D7%A5%EF%BF%BD%EF%BF%BD%EF%BF%BD3G%EF%BF%BD%EF%BF%BD%134%EF%BF%BDFw%EF%BF%BD%D6%A4W%EF%BF%BDS&%15%EF%BF%BDv%12S&%14%EF%BF%BDF7%EF%BF%BD%EF%BF%BD%13%04%EF%BF%BDEW%EF%BF%BD%EF%BF%BDG%EF%BF%BD%EF%BF%BD%13D%EF%BF%BDF34%EF%BF%BD%17%EF%BF%BDS&%15%EF%BF%BDv%15%EF%BF%BDe$%C5%A3%EF%BF%BD%05c%03%EF%BF%BD2S&%14%EF%BF%BDF7t%EF%BF%BDDW%EF%BF%BD%EF%BF%BDES4%EF%BF%BD3C4%C6%A4WT%EF%BF%BDF7t%EF%BF%BDDS%04%D6%A4%13D%D7%93Gt%C6%A4%17T%EF%BF%BD%12%EF%BF%BD%EF%BF%BDS&%15%EF%BF%BDg%06%EF%BF%BD2S&%14%D4%84cFE%EF%BF%BD%EF%BF%BD%255%EF%BF%BD%EF%BF%BD5f%EF%BF%BD%EF%BF%BD%06%15%EF%BF%BD%EF%BF%BD%EF%BF%BDV%EF%BF%BD%EF%BF%BDT%EF%BF%BD$W%EF%BF%BD%EF%BF%BDuS%04%EF%BF%BDDdF$%EF%BF%BDd%EF%BF%BDS%05%EF%BF%BD57%EF%BF%BD#F5%EF%BF%BD%EF%BF%BDF4SU%EF%BF%BD%15d%E5%85%A3%03%EF%BF%BD%EF%BF%BD%EF%BF%BDDe%15d%EF%BF%BD%EF%BF%BD%25s%EF%BF%BDd%EF%BF%BDe#%14%EF%BF%BD5'%EF%BF%BD&%EF%BF%BD$%EF%BF%BD%16%EF%BF%BD%EF%BF%BD%EF%BF%BD5%EF%BF%BDe%16$fF%14%EF%BF%BDU%EF%BF%BD%D5%A4de%05EsT%EF%BF%BD%D5%86sE34g%EF%BF%BDU%EF%BF%BD%EF%BF%BD6%EF%BF%BDd5Ud%EF%BF%BD%05f%D6%87$%D6%A5%25%EF%BF%BDUTe%EF%BF%BDUw%EF%BF%BDu%EF%BF%BDE%25U%EF%BF%BD%EF%BF%BD7uW%EF%BF%BDg%16V%EF%BF%BDT%EF%BF%BD%13%03V%EF%BF%BDD%EF%BF%BDT%EF%BF%BDD%EF%BF%BDRgWF%EF%BF%BD%EF%BF%BDFW&%EF%BF%BD%EF%BF%BD&7%22gWF%EF%BF%BD%EF%BF%BD6%E",
"friendlyName": "https://race.spartan.com/en/pages/the-spartan-app%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BDv%EF%BF%BD%EF%BF%BD%12S&%13VF%EF%BF%BDFVBS&%15%EF%BF%BDv6%EF%BF%BD%EF%BF%BD%17rS&%15#%04%EF%BF%BD%EF%BF%BDƤS4%EF%BF%BDF%EF%BF%BD%EF%BF%BD֦%EF%BF%BD%14%EF%BF%BDDWU%13'%0353%04%EF%BF%BD&%15TWuT%EF%BF%BDc%15%16ք63%05g%06C%04eD%EF%BF%BD%25%EF%BF%BD%EF%BF%BDFե54fEUV%EF%BF%BD%EF%BF%BD%EF%BF%BDV%EF%BF%BD%EF%BF%BD%256Ƈ&%25e&%EF%BF%BDUw%EF%BF%BD%EF%BF%BDUVsEc$%EF%BF%BDE%EF%BF%BDeW%EF%BF%BDצ%EF%BF%BD%164E'%EF%BF%BDTSUu%13%14%EF%BF%BDd%EF%BF%BDw%EF%BF%BD%EF%BF%BD%14U&%EF%BF%BDc$%EF%BF%BD&4t%EF%BF%BD6%23%04פ%EF%BF%BD%EF%BF%BDE%25%15%EF%BF%BD%EF%BF%BDU%EF%BF%BD%04%EF%BF%BD5%25%12%EF%BF%BD%EF%BF%BDS&%15%EF%BF%BDv6%EF%BF%BD%EF%BF%BD%17RS&%14%EF%BF%BDF%EF%BF%BD4%EF%BF%BDW%EF%BF%BDץ%EF%BF%BD%EF%BF%BD%EF%BF%BD3G%EF%BF%BD%EF%BF%BD%134%EF%BF%BDFw%EF%BF%BD֤W%EF%BF%BDS&%15%EF%BF%BDv%12S&%14%EF%BF%BDF7%EF%BF%BD%EF%BF%BD%13%04%EF%BF%BDEW%EF%BF%BD%EF%BF%BDG%EF%BF%BD%EF%BF%BD%13D%EF%BF%BDF34%EF%BF%BD%17%EF%BF%BDS&%15%EF%BF%BDv%15%EF%BF%BDe$ţ%EF%BF%BD%05c%03%EF%BF%BD2S&%14%EF%BF%BDF7t%EF%BF%BDDW%EF%BF%BD%EF%BF%BDES4%EF%BF%BD3C4ƤWT%EF%BF%BDF7t%EF%BF%BDDS%04֤%13DדGtƤ%17T%EF%BF%BD%12%EF%BF%BD%EF%BF%BDS&%15%EF%BF%BDg%06%EF%BF%BD2S&%14ԄcFE%EF%BF%BD%EF%BF%BD%255%EF%BF%BD%EF%BF%BD5f%EF%BF%BD%EF%BF%BD%06%15%EF%BF%BD%EF%BF%BD%EF%BF%BDV%EF%BF%BD%EF%BF%BDT%EF%BF%BD$W%EF%BF%BD%EF%BF%BDuS%04%EF%BF%BDDdF$%EF%BF%BDd%EF%BF%BDS%05%EF%BF%BD57%EF%BF%BD%23F5%EF%BF%BD%EF%BF%BDF4SU%EF%BF%BD%15d兣%03%EF%BF%BD%EF%BF%BD%EF%BF%BDDe%15d%EF%BF%BD%EF%BF%BD%25s%EF%BF%BDd%EF%BF%BDe%23%14%EF%BF%BD5'%EF%BF%BD&%EF%BF%BD$%EF%BF%BD%16%EF%BF%BD%EF%BF%BD%EF%BF%BD5%EF%BF%BDe%16$fF%14%EF%BF%BDU%EF%BF%BDդde%05EsT%EF%BF%BDՆsE34g%EF%BF%BDU%EF%BF%BD%EF%BF%BD6%EF%BF%BDd5Ud%EF%BF%BD%05fև$֥%25%EF%BF%BDUTe%EF%BF%BDUw%EF%BF%BDu%EF%BF%BDE%25U%EF%BF%BD%EF%BF%BD7uW%EF%BF%BDg%16V%EF%BF%BDT%EF%BF%BD%13%03V%EF%BF%BDD%EF%BF%BDT%EF%BF%BDD%EF%BF%BDRgWF%EF%BF%BD%EF%BF%BDFW&%EF%BF%BD%EF%BF%BD&7\"gWF%EF%BF%BD%EF%BF%BD6%25E"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://race.spartan.com/en/pages/the-spartan-app%EF%BF%BD%EF%BF%BD%EF%BF%BDWF%EF%BF%BD%EF%BF%BDFW&%EF%BF%BD%EF%BF%BD&7%22gWF%EF%BF%BD%EF%BF%BD6%EF%BF%BD%EF%BF%BDFV%EF%BF%BDC%EF%BF%BD&%166RgWF%EF%BF%BD%EF%BF%BD6%EF%BF%BDW&6S%D7%A6WF%12gWF%EF%BF%BD%EF%BF%BD%EF%BF%BDVF%EF%BF%BDV%EF%BF%BD%EF%BF%BDV%EF%BF%BD%16%EF%BF%BD%EF%BF%BDgWF%EF%BF%BD%EF%BF%BD6%16%EF%BF%BD%06%16%EF%BF%BDv%EF%BF%BDf'E%EF%BF%BDVS%EF%BF%BD%EF%BF%BD$dGu%EF%BF%BD%EF%BF%BDG6U'd%16cD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD&WG%17d%EF%BF%BD%EF%BF%BD%EF%BF%BD%E3%86%94%EF%BF%BD%EF%BF%BD%EF%BF%BD%04Dg5Sv%EF%BF%BD%EF%BF%BDV%EF%BF%BDS$d%EF%BF%BDS$$t%EF%BF%BD%13W%EF%BF%BD%EF%BF%BDFtW%EF%BF%BD7%05$%EF%BF%BDW%EF%BF%BD&%EF%BF%BDf'E%EF%BF%BDG3%EF%BF%BD%13s%03%EF%BF%BDScC%EF%BF%BD%EF%BF%BDC%EF%BF%BDs/%EF%BF%BD%EF%BF%BD%EF%BF%BD6%EF%BF%BDF%EF%BF%BDy",
"friendlyName": "https://race.spartan.com/en/pages/the-spartan-app%EF%BF%BD%EF%BF%BD%EF%BF%BDWF%EF%BF%BD%EF%BF%BDFW&%EF%BF%BD%EF%BF%BD&7\"gWF%EF%BF%BD%EF%BF%BD6%EF%BF%BD%EF%BF%BDFV%EF%BF%BDC%EF%BF%BD&%166RgWF%EF%BF%BD%EF%BF%BD6%EF%BF%BDW&6SצWF%12gWF%EF%BF%BD%EF%BF%BD%EF%BF%BDVF%EF%BF%BDV%EF%BF%BD%EF%BF%BDV%EF%BF%BD%16%EF%BF%BD%EF%BF%BDgWF%EF%BF%BD%EF%BF%BD6%16%EF%BF%BD%06%16%EF%BF%BDv%EF%BF%BDf'E%EF%BF%BDVS%EF%BF%BD%EF%BF%BD$dGu%EF%BF%BD%EF%BF%BDG6U'd%16cD%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD&WG%17d%EF%BF%BD%EF%BF%BD%EF%BF%BD㆔%EF%BF%BD%EF%BF%BD%EF%BF%BD%04Dg5Sv%EF%BF%BD%EF%BF%BDV%EF%BF%BDS$d%EF%BF%BDS$$t%EF%BF%BD%13W%EF%BF%BD%EF%BF%BDFtW%EF%BF%BD7%05$%EF%BF%BDW%EF%BF%BD&%EF%BF%BDf'E%EF%BF%BDG3%EF%BF%BD%13s%03%EF%BF%BDScC%EF%BF%BD%EF%BF%BDC%EF%BF%BDs/%EF%BF%BD%EF%BF%BD%EF%BF%BD6%EF%BF%BDF%EF%BF%BDy"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://race.spartan.com/en/race/detail/8100/overview%0F%EF%BF%BD?utm_term=rcr&utm_content=race&utm_source=zeta&utm_medium=email&utm_campaign&bt_ee=m2FDwYoDseRvAf4LokyretqvKzXN8iIhoPDFsU7hXeh%2FN%2BGLa5zHdgEzSpRJ5xRm&bt_ts=1709564884872%EF%BF%BD%EF%BF%BDb%EF%BF%BD%7Fw%EF%BF%BDM",
"friendlyName": "https://race.spartan.com/en/race/detail/8100/overview%0F%EF%BF%BD?utm_term=rcr&utm_content=race&utm_source=zeta&utm_medium=email&utm_campaign&bt_ee=m2FDwYoDseRvAf4LokyretqvKzXN8iIhoPDFsU7hXeh%2FN%2BGLa5zHdgEzSpRJ5xRm&bt_ts=1709564884872%EF%BF%BD%EF%BF%BDb%EF%BF%BD%7Fw%EF%BF%BDM"
}
},
{
"id":"1",
"name": "",
"type": "Microsoft.SecurityInsights/Entities",
"kind": "Url",
"properties": {
"url": "https://race.spartan.com/en/race/detail/8086/overview%0F%EF%BF%BD?utm_term=rcr&utm_content=race&utm_source=zeta&utm_medium=email&utm_campaign&bt_ee=m2FDwYoDseRvAf4LokyretqvKzXN8iIhoPDFsU7hXeh%2FN%2BGLa5zHdgEzSpRJ5xRm&bt_ts=1709564884872%EF%BF%BD%EF%BF%BD'Ó–%EF%BF%BDy",
"additionalData": {
"DetonationVerdict": "GOOD",
"DetonationFinalUrl": "https://race.spartan.com/en/race/detail/8086/overview%0F%EF%BF%BD?utm_term=rcr&utm_content=race&utm_source=zeta&utm_medium=email&utm_campaign&bt_ee=m2FDwYoDseRvAf4LokyretqvKzXN8iIhoPDFsU7hXeh%2FN%2BGLa5zHdgEzSpRJ5xRm&bt_ts=1709564884872%EF%BF%BD%EF%BF%BD'?%EF%BF%BDy"
},
"friendlyName": "https://race.spartan.com/en/race/detail/8086/overview%0F%EF%BF%BD?utm_term=rcr&utm_content=race&utm_source=zeta&utm_medium=email&utm_campaign&bt_ee=m2FDwYoDseRvAf4LokyretqvKzXN8iIhoPDFsU7hXeh%2FN%2BGLa5zHdgEzSpRJ5xRm&bt_ts=1709564884872%EF%BF%BD%EF%BF%BD'Ó–%EF%BF%BDy"
}
}
],
"comments": []
}
}
}
}
