{
    "@odata.context": "https://graph.microsoft.com/beta/$metadata#security/alerts_v2/$entity",
    "id": "<removed>",
    "providerAlertId": "<removed>",
    "incidentId": "<removed>",
    "status": "new",
    "severity": "low",
    "classification": null,
    "determination": null,
    "serviceSource": "microsoftDataLossPrevention",
    "detectionSource": "microsoftDataLossPrevention",
    "detectorId": "<removed>",
    "tenantId": "<removed>",
    "title": "<removed>",
    "description": "",
    "recommendedActions": "",
    "category": "Exfiltration",
    "assignedTo": null,
    "alertWebUrl": "https://security.microsoft.com/alerts/<removed>?tid=<removed>",
    "incidentWebUrl": "https://security.microsoft.com/incidents/<removed>?tid=<removed>",
    "actorDisplayName": null,
    "threatDisplayName": null,
    "threatFamilyName": null,
    "mitreTechniques": [],
    "createdDateTime": "2022-12-21T13:42:24.1920745Z",
    "lastUpdateDateTime": "2022-12-21T14:46:31.17Z",
    "resolvedDateTime": null,
    "firstActivityDateTime": "2022-12-21T13:38:00Z",
    "lastActivityDateTime": "2022-12-21T13:39:00Z",
    "comments": [],
    "evidence": [
        {
            "@odata.type": "#microsoft.graph.security.deviceEvidence",
            "createdDateTime": "2022-12-21T13:42:45.9733333Z",
            "verdict": "unknown",
            "remediationStatus": "none",
            "remediationStatusDetails": null,
            "roles": [],
            "tags": [],
            "firstSeenDateTime": null,
            "mdeDeviceId": null,
            "azureAdDeviceId": null,
            "deviceDnsName": "<removed>",
            "osPlatform": null,
            "osBuild": null,
            "version": null,
            "healthStatus": null,
            "riskScore": null,
            "rbacGroupId": null,
            "rbacGroupName": null,
            "onboardingStatus": null,
            "defenderAvStatus": null,
            "vmMetadata": null,
            "loggedOnUsers": []
        },
        {
            "@odata.type": "#microsoft.graph.security.userEvidence",
            "createdDateTime": "2022-12-21T13:42:45.9733333Z",
            "verdict": "unknown",
            "remediationStatus": "none",
            "remediationStatusDetails": null,
            "roles": [],
            "tags": [],
            "userAccount": {
                "accountName": "<removed>",
                "domainName": "<removed>",
                "userSid": "<removed>",
                "azureAdUserId": "<removed>",
                "userPrincipalName": "<removed>"
            }
        },
        {
            "@odata.type": "#microsoft.graph.security.fileEvidence",
            "createdDateTime": "2022-12-21T13:42:45.9733333Z",
            "verdict": "unknown",
            "remediationStatus": "none",
            "remediationStatusDetails": null,
            "roles": [],
            "tags": [],
            "detectionStatus": null,
            "mdeDeviceId": "<removed>",
            "fileDetails": {
                "sha1": null,
                "sha256": null,
                "fileName": "",
                "filePath": "https:\\stackoverflow.com",
                "fileSize": null,
                "filePublisher": null,
                "signer": null,
                "issuer": null
            }
        },
        {
            "@odata.type": "#microsoft.graph.security.ipEvidence",
            "createdDateTime": "2022-12-21T13:42:45.9733333Z",
            "verdict": "suspicious",
            "remediationStatus": "none",
            "remediationStatusDetails": null,
            "roles": [],
            "tags": [],
            "ipAddress": "<removed>",
            "countryLetterCode": null
        }
    ]
}