Skip to content

Instantly share code, notes, and snippets.

@corymacd
Created August 22, 2022 15:44
Show Gist options
  • Save corymacd/72198e0dbd6d0f17d703a0527aab15e9 to your computer and use it in GitHub Desktop.
Save corymacd/72198e0dbd6d0f17d703a0527aab15e9 to your computer and use it in GitHub Desktop.
{
"records": [
{
"time": "2022-07-05T18:47:59.8811720Z",
"systemId": "aa0d07f1-f15d-4df8-b816-de17ab7ffcf6",
"macAddress": "000D3A6D2E0E",
"category": "NetworkSecurityGroupFlowEvent",
"resourceId": "/SUBSCRIPTIONS/l/RESOURCEGROUPS/ENGINEERING/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/TEST-NSG",
"operationName": "NetworkSecurityGroupFlowEvents",
"properties": {
"Version": 2,
"flows": [
{
"rule": "DefaultRule_DenyAllInBound",
"flows": [
{
"mac": "000D3A6D2E0E",
"flowTuples": [
"1657046821,205.210.31.158,10.0.0.4,54171,68,T,I,D,B,,,,",
"1657046822,45.164.23.148,10.0.0.4,11360,23,T,I,D,B,,,,",
"1657046830,113.26.229.0,10.0.0.4,2594,23,T,I,D,B,,,,",
"1657046832,45.164.23.148,10.0.0.4,11360,23,T,I,D,B,,,,",
"1657046833,5.188.87.3,10.0.0.4,56299,10050,T,I,D,B,,,,",
"1657046840,89.248.165.81,10.0.0.4,44592,16597,T,I,D,B,,,,",
"1657046851,50.116.51.179,10.0.0.4,61000,990,T,I,D,B,,,,",
"1657046862,38.127.85.37,10.0.0.4,45502,520,U,I,D,B,,,,",
"1657046867,136.144.41.128,10.0.0.4,58761,22252,T,I,D,B,,,,",
"1657046868,162.142.125.86,10.0.0.4,34148,52881,T,I,D,B,,,,",
"1657046870,38.127.85.37,10.0.0.4,45502,41,T,I,D,B,,,,",
"1657046873,185.156.73.57,10.0.0.4,59210,16583,T,I,D,B,,,,",
"1657046875,205.210.31.158,10.0.0.4,61161,135,T,I,D,B,,,,"
]
}
]
},
{
"rule": "UserRule_HTTP",
"flows": [
{
"mac": "000D3A6D2E0E",
"flowTuples": [
"1657046821,20.51.106.231,10.0.0.4,55092,80,T,I,A,B,,,,",
"1657046831,20.51.106.231,10.0.0.4,55112,80,T,I,A,B,,,,",
"1657046841,20.51.106.231,10.0.0.4,55132,80,T,I,A,B,,,,",
"1657046851,20.51.106.231,10.0.0.4,55150,80,T,I,A,B,,,,",
"1657046861,20.51.106.231,10.0.0.4,55168,80,T,I,A,B,,,,",
"1657046871,20.51.106.231,10.0.0.4,55178,80,T,I,A,B,,,,"
]
}
]
}
]
}
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment