User_Suspended_Office 365_Azure_Active_Directory

Event

User Suspended (Update user)

SK4 unified event:
Connector/Service

Office 365/Azure Active Directory

SK4 Version:

2.3.85

Created Date:

Mon Nov 19 2018 14:06:28 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:16:02 GMT+0000 (Coordinated Universal Time)

Category

User Management

Description

The user has been suspended in Active Directory.

Search query

cef_vendor="skyformation" cef_name="user-suspended" destinationServiceName="Office 365" sourceServiceName="AzureActiveDirectory"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources