{"timestamp":"2026-06-18T13:55:12Z","event_type":"sign_in","user":"morgan.lee@example.test","source_ip":"198.51.100.24","country":"US","device":"HR-LT-044","result":"success","mfa":"satisfied","correlation_id":"A-1001","auth_protocol":"modern"}
{"timestamp":"2026-06-18T14:01:03Z","event_type":"sign_in","user":"morgan.lee@example.test","source_ip":"203.0.113.77","country":"NL","device":"unknown","result":"failure","mfa":"not_requested","correlation_id":"A-1002","auth_protocol":"modern"}
{"timestamp":"2026-06-18T14:02:14Z","event_type":"sign_in","user":"morgan.lee@example.test","source_ip":"203.0.113.77","country":"NL","device":"unknown","result":"failure","mfa":"not_requested","correlation_id":"A-1003","auth_protocol":"modern"}
{"timestamp":"2026-06-18T14:04:09Z","event_type":"sign_in","user":"morgan.lee@example.test","source_ip":"203.0.113.77","country":"NL","device":"unknown","result":"success","mfa":"not_requested","correlation_id":"A-1004","auth_protocol":"legacy"}
{"timestamp":"2026-06-18T14:06:41Z","event_type":"mailbox_rule_created","user":"morgan.lee@example.test","source_ip":"203.0.113.77","country":"NL","device":"unknown","result":"success","rule_name":"RSS Feeds","rule_action":"move invoices to RSS Feeds and mark read","correlation_id":"A-1005"}
{"timestamp":"2026-06-18T14:07:33Z","event_type":"oauth_consent","user":"morgan.lee@example.test","source_ip":"203.0.113.77","country":"NL","device":"unknown","result":"success","application":"Document Sync Test","scopes":["Mail.Read","offline_access"],"correlation_id":"A-1006"}
{"timestamp":"2026-06-18T14:22:18Z","event_type":"sign_in","user":"alex.rivera@example.test","source_ip":"192.0.2.45","country":"US","device":"FIN-LT-021","result":"success","mfa":"satisfied","correlation_id":"A-1007","auth_protocol":"modern"}
{"timestamp":"2026-06-18T14:38:55Z","event_type":"sign_in","user":"morgan.lee@example.test","source_ip":"198.51.100.24","country":"US","device":"HR-LT-044","result":"success","mfa":"satisfied","correlation_id":"A-1008","auth_protocol":"modern"}