Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "668ae498-8868-4e6e-8640-39289d5b3f9d", "record_id": "flaws_cloudtrail:0000000:668ae498-8868-4e6e-8640-39289d5b3f9d", "row_index": 0, "timestamp": "2018-09-27T11:22:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "668ae498-8868-4e6e-8640-39289d5b3f9d", "eventTime": "2018-09-27T11:22:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nsW1YbB0KzR3+cG8prt5iAKMcU4URay7Y8XbuMpN4pBVGwQ1h4ogdrTLpaZ9CqbusGMwCE9ciLD0qs6bVZEdwg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b5c3832-0d5b-4c7d-9108-0d9eddc304b2", "record_id": "flaws_cloudtrail:0000001:1b5c3832-0d5b-4c7d-9108-0d9eddc304b2", "row_index": 1, "timestamp": "2018-09-27T11:22:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b5c3832-0d5b-4c7d-9108-0d9eddc304b2", "eventTime": "2018-09-27T11:22:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RN7wDWoI+cgst36E0Yk65rtdOhkZZjsDNFvr8lCmnzgfXfterRSOeJgqOxZvav2aGnvjjHAYpjQ6aH05ofMtfA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48f19257-c8cb-44d3-9aaf-5f077e39ac28", "record_id": "flaws_cloudtrail:0000002:48f19257-c8cb-44d3-9aaf-5f077e39ac28", "row_index": 2, "timestamp": "2018-09-27T11:22:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48f19257-c8cb-44d3-9aaf-5f077e39ac28", "eventTime": "2018-09-27T11:22:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "MuJgcD8rHd9M6Y0YxjSyh9aiC83G4DIzeOTNCjhHK+UqdXKvyGjA4TekN2HQYu7NRyQL1emKAuGy1UE1RFRtjw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5fbb489-56f7-4010-8616-dfedbf4e07db", "record_id": "flaws_cloudtrail:0000003:b5fbb489-56f7-4010-8616-dfedbf4e07db", "row_index": 3, "timestamp": "2018-09-27T11:22:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5fbb489-56f7-4010-8616-dfedbf4e07db", "eventTime": "2018-09-27T11:22:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/vTVF5cOvfLLe76PfsnWhRQoHcP3vg81Jts5/WUkzNMh+byGlJ4nZaX+cUFu2uZ9ZIjF3ozLr+VKbUfL912g6w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e76c4dc-59cc-4151-9df3-73d0fc07d516", "record_id": "flaws_cloudtrail:0000004:6e76c4dc-59cc-4151-9df3-73d0fc07d516", "row_index": 4, "timestamp": "2018-09-27T11:22:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e76c4dc-59cc-4151-9df3-73d0fc07d516", "eventTime": "2018-09-27T11:22:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "C7CqBJNmRfJi5dTWWO+Kv6I245duk2qtemXicHKpZjny8XYG5Goym1l1hcy9e/jGzl5S4Vm5QEZUhIcno4FSQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c6606e1-f798-41bc-8679-28ae77529fae", "record_id": "flaws_cloudtrail:0000005:6c6606e1-f798-41bc-8679-28ae77529fae", "row_index": 5, "timestamp": "2018-09-27T11:22:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c6606e1-f798-41bc-8679-28ae77529fae", "eventTime": "2018-09-27T11:22:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DjE3NZXUYTGly/Y0tgQis8pLRYzTNR5Iyckq0S6hVXjKANuJ3XDAs0fLMdxP0MoXYx1lH/feNoh2hiW3zEeSTA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "896604b1-b41e-4542-861c-0e6e8f963324", "record_id": "flaws_cloudtrail:0000006:896604b1-b41e-4542-861c-0e6e8f963324", "row_index": 6, "timestamp": "2018-09-27T11:22:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "896604b1-b41e-4542-861c-0e6e8f963324", "eventTime": "2018-09-27T11:22:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b01f4fec-70c6-4b60-9530-6ad423e35d2c", "record_id": "flaws_cloudtrail:0000007:b01f4fec-70c6-4b60-9530-6ad423e35d2c", "row_index": 7, "timestamp": "2018-09-27T11:22:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b01f4fec-70c6-4b60-9530-6ad423e35d2c", "eventTime": "2018-09-27T11:22:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "R4ZScLBjAqeKM+4LXqsnAQeIRLDioGrZ3PtZcwasUU06jWAIMT/iAi2UxFryfCxy6fluAEoGTJx0J0UQp+CALg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57a8b8fd-b92b-49b7-9cb1-fc18be3fe802", "record_id": "flaws_cloudtrail:0000008:57a8b8fd-b92b-49b7-9cb1-fc18be3fe802", "row_index": 8, "timestamp": "2018-09-27T11:22:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57a8b8fd-b92b-49b7-9cb1-fc18be3fe802", "eventTime": "2018-09-27T11:22:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YMs68X6OO9Ai6iHaHnrHZg4J9AYTKw9c00AWOR/+zqX8ntmkgsh9hid5jfAC7x+x5bMmbba8tpXu5OycfS8DCQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8aa6b144-acb7-4c6b-bd41-89838e39607b", "record_id": "flaws_cloudtrail:0000009:8aa6b144-acb7-4c6b-bd41-89838e39607b", "row_index": 9, "timestamp": "2018-09-27T11:22:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8aa6b144-acb7-4c6b-bd41-89838e39607b", "eventTime": "2018-09-27T11:22:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "mjCwuJEJ9QZwVaL82mdSXh14tcuV0ox8lJ7fmvOCMagY9wvfa6ekGpzH61JCKJQp4IgP+gdaxNmt5kMgPYDTvA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da39eba4-bab1-4e69-94c1-c897378d5dd38", "record_id": "flaws_cloudtrail:0000010:da39eba4-bab1-4e69-94c1-c897378d5dd38", "row_index": 10, "timestamp": "2018-09-27T11:22:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da39eba4-bab1-4e69-94c1-c897378d5dd38", "eventTime": "2018-09-27T11:22:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "idhiJ0G0NxfQlOnE29KIVb3LtasyRNp9XP8IyssHBWy9qd3uPR6enqabxT2ScHrC0wkB68xLZMpMcZZd8ocrHA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "980cc789-9d81-4363-ac56-30415edbe093", "record_id": "flaws_cloudtrail:0000011:980cc789-9d81-4363-ac56-30415edbe093", "row_index": 11, "timestamp": "2018-09-27T11:22:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "980cc789-9d81-4363-ac56-30415edbe093", "eventTime": "2018-09-27T11:22:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qHUGEfSSFf9nt4RoRN1DthqLwoxpSSbH7uBSWUJy2+d7nuj2j88djtDUb2ajIP6YBoJKXjvGxNTRVLRgEsgasw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e80e5450-a745-4657-84c7-2e187619c23", "record_id": "flaws_cloudtrail:0000012:e80e5450-a745-4657-84c7-2e187619c23", "row_index": 12, "timestamp": "2018-09-27T11:22:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e80e5450-a745-4657-84c7-2e187619c23", "eventTime": "2018-09-27T11:22:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4OGQeC7aQjt6CDsI6lHbXKCwsj/9Avgzy/TgJWBtqFdv5aSNLoKzU/qAsFjUdP4p7AmCPaz67mnrbeLPaneqdQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "532d9bd7-68c1-4ba8-9529-572dfa0f722f", "record_id": "flaws_cloudtrail:0000013:532d9bd7-68c1-4ba8-9529-572dfa0f722f", "row_index": 13, "timestamp": "2018-09-27T11:22:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "532d9bd7-68c1-4ba8-9529-572dfa0f722f", "eventTime": "2018-09-27T11:22:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nsiqEnKVFDLwLc3EJLjBTyOyT81fb4WBlMNoKwnxB6Tqm6Lifva6jlk5rdlxrsfG0VAvpcUKuiuhvQOmyCZ2pQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46a17353-fbbc-4e31-88b4-875ea398b4fd", "record_id": "flaws_cloudtrail:0000014:46a17353-fbbc-4e31-88b4-875ea398b4fd", "row_index": 14, "timestamp": "2018-09-27T11:22:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46a17353-fbbc-4e31-88b4-875ea398b4fd", "eventTime": "2018-09-27T11:22:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "FIHEz6jwyqmRzoXm/4hGDUI/OPPEgLSXCIMklSj4qzbh8JfIdeCABHRSDEpr/zlAI2iLczP+3geHwdnLvr5dmA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15ef4aa7-0277-4776-9221-b7628e445ec6", "record_id": "flaws_cloudtrail:0000015:15ef4aa7-0277-4776-9221-b7628e445ec6", "row_index": 15, "timestamp": "2018-09-27T11:22:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15ef4aa7-0277-4776-9221-b7628e445ec6", "eventTime": "2018-09-27T11:22:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "fp4Unoj/2BvThFuxle0RTMrzrxo5IoBnJq15+7SF6zzdZTqc/ETEVtAgQSQ9tDnCIrv1fh3oFiiu4+GBhLKINg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96d6a4d7-2b9b-4776-8cf2-37eaa110084e", "record_id": "flaws_cloudtrail:0000016:96d6a4d7-2b9b-4776-8cf2-37eaa110084e", "row_index": 16, "timestamp": "2018-09-27T11:22:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96d6a4d7-2b9b-4776-8cf2-37eaa110084e", "eventTime": "2018-09-27T11:22:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "SzCVK6IpoKqtDBUVsFVHFgbJWQxrguz/BI1ytR2X+hni8Beb/EmEefReBDuJfHKdtV1x+hkO0PqrKJoH3gv9mg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee5bc4da-cb0e-44e5-936d-14880e87b6f8", "record_id": "flaws_cloudtrail:0000017:ee5bc4da-cb0e-44e5-936d-14880e87b6f8", "row_index": 17, "timestamp": "2018-09-27T11:22:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee5bc4da-cb0e-44e5-936d-14880e87b6f8", "eventTime": "2018-09-27T11:22:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "I47FjcmhRe1j4GLZNEcwSLpBh1PA0cWQIYDvjaMdvuqDSA4GcHts3Q9GkgV3I5QyHhbTcmUXh5vtzYftxUu7uQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca6f2c48-cba1-4158-8902-f544f6bd5505", "record_id": "flaws_cloudtrail:0000018:ca6f2c48-cba1-4158-8902-f544f6bd5505", "row_index": 18, "timestamp": "2018-09-27T11:22:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca6f2c48-cba1-4158-8902-f544f6bd5505", "eventTime": "2018-09-27T11:22:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "fhiqtVyd2YqqJaxOGlfjEMvkBMlMRHjborV9vBXASFFzCCIOh3moMagCcVnSwTBOPqDNIwM2BKACJBxn8j/oLA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8d310de-238d-4fd6-a767-0e70da54e969", "record_id": "flaws_cloudtrail:0000019:e8d310de-238d-4fd6-a767-0e70da54e969", "row_index": 19, "timestamp": "2018-09-27T11:22:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8d310de-238d-4fd6-a767-0e70da54e969", "eventTime": "2018-09-27T11:22:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Tz2R8YHBi5Z1fZqInG6lNpk+V0hhhBLCkYIJ0G1chZrVlBIh5Z/Xe5qOUdYjP5DXCBzV2GS4eGtPBLpAdrVgJw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4726bc4d-9921-40ec-9b7c-17e653d921f9", "record_id": "flaws_cloudtrail:0000020:4726bc4d-9921-40ec-9b7c-17e653d921f9", "row_index": 20, "timestamp": "2018-09-27T11:22:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4726bc4d-9921-40ec-9b7c-17e653d921f9", "eventTime": "2018-09-27T11:22:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "7LsJTazNItczptz6kYnUvzeOA9LGHZWCtHBl+q3IcL5xWARxlvYsUYV4VWtfrGrpEPWWYTALTZ3cf15tvtSXEA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dd99c40-5ca3-458b-9cbe-561e3f8f815c", "record_id": "flaws_cloudtrail:0000021:9dd99c40-5ca3-458b-9cbe-561e3f8f815c", "row_index": 21, "timestamp": "2018-09-27T11:22:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dd99c40-5ca3-458b-9cbe-561e3f8f815c", "eventTime": "2018-09-27T11:22:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Y58+ZZUKaGQOVU3KfZ1XDT6L2UBlHXwANek33OnutJ2bsTWpO19/LQW5roxWFiEKaoB34ldQiJ9swL/iHNUzFg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60c50e0d-09b2-44e0-8b70-2f4cae636cf1", "record_id": "flaws_cloudtrail:0000022:60c50e0d-09b2-44e0-8b70-2f4cae636cf1", "row_index": 22, "timestamp": "2018-09-27T11:22:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60c50e0d-09b2-44e0-8b70-2f4cae636cf1", "eventTime": "2018-09-27T11:22:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "sKqlHP8n4qLvtPBTh3Y9sdsc80jy9A8MJulaOFn671kF/vA9oiLNZ1QWRFxs+8xziykKi5SvUr2unWiokt1PSw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f6571ea-d2cf-4480-9247-3d1a4fa038cd", "record_id": "flaws_cloudtrail:0000023:3f6571ea-d2cf-4480-9247-3d1a4fa038cd", "row_index": 23, "timestamp": "2018-09-27T11:22:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f6571ea-d2cf-4480-9247-3d1a4fa038cd", "eventTime": "2018-09-27T11:22:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/FcBFnuBM3DOK5POKeuKHAJQQMBKSAIc75VtW/E/LeyaTcBSoe3plmn8jl9Xm4Ldt7DvHomTP1MSb0LYgTFXGQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d810e0b-92b2-49e7-b696-413acfca1a99", "record_id": "flaws_cloudtrail:0000024:0d810e0b-92b2-49e7-b696-413acfca1a99", "row_index": 24, "timestamp": "2018-09-27T11:22:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d810e0b-92b2-49e7-b696-413acfca1a99", "eventTime": "2018-09-27T11:22:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "2U9OSi2T4xlfs9e+2V6aO52lmb11DS8yzqQp7uYswi9cvwsq1U35xXjyH7n1pR3ExX6plemTDGNzYIoq34EH3g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2dc3d8f-2035-4130-b7c1-1064e3c1f9ab", "record_id": "flaws_cloudtrail:0000025:a2dc3d8f-2035-4130-b7c1-1064e3c1f9ab", "row_index": 25, "timestamp": "2018-09-27T11:22:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2dc3d8f-2035-4130-b7c1-1064e3c1f9ab", "eventTime": "2018-09-27T11:22:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Hue47iSW4iVsNXQK3HC9C0xASWYkwz5pFIjmy/toTjoL7AwGQnY1fY64eSahm0+z7+m6EU9aWLYcPCUn8eaXkQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "299496-c039-4e8c-a71a-ed630f5f8a8d", "record_id": "flaws_cloudtrail:0000026:299496-c039-4e8c-a71a-ed630f5f8a8d", "row_index": 26, "timestamp": "2018-09-27T11:22:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "299496-c039-4e8c-a71a-ed630f5f8a8d", "eventTime": "2018-09-27T11:22:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "kVhI1NBjj8pdTTV/pM17wQ+bQir89ph8x1B85li3TLjv8B7Su16KEV//fQYYF1Rj73dQOdXzs25dHAaYwSCuaQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53521e62-75d9-4290-8dcd-88da98fee613", "record_id": "flaws_cloudtrail:0000027:53521e62-75d9-4290-8dcd-88da98fee613", "row_index": 27, "timestamp": "2018-09-27T11:22:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53521e62-75d9-4290-8dcd-88da98fee613", "eventTime": "2018-09-27T11:22:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7b5220a-8fa5-4ce3-95a7-109df439fb73", "record_id": "flaws_cloudtrail:0000028:e7b5220a-8fa5-4ce3-95a7-109df439fb73", "row_index": 28, "timestamp": "2018-09-27T11:22:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7b5220a-8fa5-4ce3-95a7-109df439fb73", "eventTime": "2018-09-27T11:22:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "xPKYiG1Od5zv7qnkyemlJq92Z3AOVRtIG6BqWTQIRhGJXXti0XU3q5qrlfdG0CnVn/pcG1/ZrvE6eUqcK9NrvA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3930b1a8-e0a9-4894-b8ba-4aadedc7247c", "record_id": "flaws_cloudtrail:0000029:3930b1a8-e0a9-4894-b8ba-4aadedc7247c", "row_index": 29, "timestamp": "2018-09-27T11:22:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3930b1a8-e0a9-4894-b8ba-4aadedc7247c", "eventTime": "2018-09-27T11:22:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "oFM59yPvoJt6j2PbSx34Vyz5DyVA2TBHniIJiYiCRJFyfi/VilTy2CVLDuHPjl4F5pbRuNjp3tptXes0Zk3/8A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314d6687-fc51-42df-9dba-ef752b4d8725", "record_id": "flaws_cloudtrail:0000030:314d6687-fc51-42df-9dba-ef752b4d8725", "row_index": 30, "timestamp": "2018-09-27T11:22:31Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314d6687-fc51-42df-9dba-ef752b4d8725", "eventTime": "2018-09-27T11:22:31Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Z4HtNxbSAKeqhrHqVhjBC+Ca2FQbgkq4ckaRrXoCXmKpaCmsPNci1zZXvIG6TOAAXny8OKnpaQ5i/7HPmpjLZw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a133724-4dec-46ec-9732-547f5d85ef9a", "record_id": "flaws_cloudtrail:0000031:a133724-4dec-46ec-9732-547f5d85ef9a", "row_index": 31, "timestamp": "2018-09-27T11:22:31Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a133724-4dec-46ec-9732-547f5d85ef9a", "eventTime": "2018-09-27T11:22:31Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "0Iu9QTOxnQ7D8M+4w/k6lM/cYGN565+1sZmy4f6YF929NvfuUA2X5+8QugJr+QnnYigVJ5lRAu8MU/EhQv+c4w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b7c551-836c-4016-a4ad-22acac5cf35a", "record_id": "flaws_cloudtrail:0000032:65b7c551-836c-4016-a4ad-22acac5cf35a", "row_index": 32, "timestamp": "2018-09-27T11:22:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b7c551-836c-4016-a4ad-22acac5cf35a", "eventTime": "2018-09-27T11:22:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iwu/0CaugnJMFJ/AD+FtK1uIuMHAg8+hKkZCjlCbnZ0BphwLTx5zjK+qnpSHyWihg+FGxEGK5934zym0jFuirg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b4b96f4-3760-4410-8c18-062d21ba8667", "record_id": "flaws_cloudtrail:0000033:4b4b96f4-3760-4410-8c18-062d21ba8667", "row_index": 33, "timestamp": "2018-09-27T11:22:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b4b96f4-3760-4410-8c18-062d21ba8667", "eventTime": "2018-09-27T11:22:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "samRdFz1HZwT6ZOtwB9cyiY6lnNYdH6nwbo/ZDivVWWno1tzsKS87EsSdTudeWM44jQojEuSVkSq5YjxgwH41w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4d0b667-7bc9-4789-be51-2527ae0dbb68", "record_id": "flaws_cloudtrail:0000034:e4d0b667-7bc9-4789-be51-2527ae0dbb68", "row_index": 34, "timestamp": "2018-09-27T11:22:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4d0b667-7bc9-4789-be51-2527ae0dbb68", "eventTime": "2018-09-27T11:22:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "F7xy2mtE6mcDFFkkJLihN0XsC9EP+1mTExDqtjXrOphLof9G6cafjcp2vBTnagM3c9qDAR9degZk81nJPQORog=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "276562ae5-a4ab-4867-b8c1-f1d528bee9a5", "record_id": "flaws_cloudtrail:0000035:276562ae5-a4ab-4867-b8c1-f1d528bee9a5", "row_index": 35, "timestamp": "2018-09-27T11:22:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "276562ae5-a4ab-4867-b8c1-f1d528bee9a5", "eventTime": "2018-09-27T11:22:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tkHgac5/AhtF+Avt4nFkKo/V7nsG/kM0LRj/LouVTt84ziv6yQJ4yMI7WbzuFHCU8T59/gH2fVpXKzBJbYASVA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f12d5ac2-a6e5-487c-a0cb-a71317c90631", "record_id": "flaws_cloudtrail:0000036:f12d5ac2-a6e5-487c-a0cb-a71317c90631", "row_index": 36, "timestamp": "2018-09-27T11:22:35Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f12d5ac2-a6e5-487c-a0cb-a71317c90631", "eventTime": "2018-09-27T11:22:35Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "jxaPFQWq3KMdojHhAhp+TKsrQIcgbgyaTqY3Hhq2dPxwLttwnB8y7Wm5suNnCfiFtb2ET9DuwfsjVgqKdzioww=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ce96cec-ef7e-42af-b256-deae04d41153", "record_id": "flaws_cloudtrail:0000037:4ce96cec-ef7e-42af-b256-deae04d41153", "row_index": 37, "timestamp": "2018-09-27T11:22:35Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ce96cec-ef7e-42af-b256-deae04d41153", "eventTime": "2018-09-27T11:22:35Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Q/EX8PKjdD7erzoBYD85LRHvmpbduk7YRvX/4Tx9NLiNkaLmZ+kAhWsw4GrF2ywbgBGJCQjJw33kOtexKwXKdA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08930-0d86-4cc3-81bf-bdeaca77ed6a", "record_id": "flaws_cloudtrail:0000038:08930-0d86-4cc3-81bf-bdeaca77ed6a", "row_index": 38, "timestamp": "2018-09-27T11:22:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08930-0d86-4cc3-81bf-bdeaca77ed6a", "eventTime": "2018-09-27T11:22:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "jJ+cEqsS/aMv4E8vi/AI5166XeryHdUt0JiZqrBGVs4KQGTcs92VL+hoby02Rr4sw/NaLnJbft3Ry/zWUbB+pA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00773-32b3-4ad7-9022-a326596df", "record_id": "flaws_cloudtrail:0000039:00773-32b3-4ad7-9022-a326596df", "row_index": 39, "timestamp": "2018-09-27T11:22:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00773-32b3-4ad7-9022-a326596df", "eventTime": "2018-09-27T11:22:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "uKCX4KuXDzLzY2Dy27D7iXGkJK8Xjgei4DJWNBT1ex/HSWooCFA+r4hcW6jpTigvkkPA7Jv8Yq4Kwyyw0l5T2Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "185abe55-4719-4c0e-9927-df00b8fc9842", "record_id": "flaws_cloudtrail:0000040:185abe55-4719-4c0e-9927-df00b8fc9842", "row_index": 40, "timestamp": "2018-09-27T11:22:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "185abe55-4719-4c0e-9927-df00b8fc9842", "eventTime": "2018-09-27T11:22:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iUS9rcNjSN9M3sPiJrX749+7HtXXS6ytmRzPV3WGdPFBYnBYJRmRec1E1cdG8xEBNyeqX2lNmeRHbaczS1A3OA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4de31032-be3e-4c9c-92aa-3e8c7aa461bc", "record_id": "flaws_cloudtrail:0000041:4de31032-be3e-4c9c-92aa-3e8c7aa461bc", "row_index": 41, "timestamp": "2018-09-27T11:22:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4de31032-be3e-4c9c-92aa-3e8c7aa461bc", "eventTime": "2018-09-27T11:22:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600c25ab-de26-45d9-b2f2-5ae94c4bdce7", "record_id": "flaws_cloudtrail:0000042:600c25ab-de26-45d9-b2f2-5ae94c4bdce7", "row_index": 42, "timestamp": "2018-09-27T11:22:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600c25ab-de26-45d9-b2f2-5ae94c4bdce7", "eventTime": "2018-09-27T11:22:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "7VFfPRt1A57tpHkuAbZOgG9r7HBShzLRYrESQhU3DUCy1ALBiwGQE9crOLX/vbEn3YXfau1PXuWY3ISp3Os8Ag=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90d2e6c9-0453-4da0-b5a8-7a90f4e1a9da", "record_id": "flaws_cloudtrail:0000043:90d2e6c9-0453-4da0-b5a8-7a90f4e1a9da", "row_index": 43, "timestamp": "2018-09-27T11:22:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90d2e6c9-0453-4da0-b5a8-7a90f4e1a9da", "eventTime": "2018-09-27T11:22:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZjzyIVgbfgSOYYpPj8IMuIscHpq21jscOwLzqceK6NmtmsHBFn97jH94eKqw+SPVcqphG1/mAYGBwnf5fXv9ow=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9dbab9f-e250-4dbc-b7b7-d0ae492cf2b7", "record_id": "flaws_cloudtrail:0000044:d9dbab9f-e250-4dbc-b7b7-d0ae492cf2b7", "row_index": 44, "timestamp": "2018-09-27T11:22:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9dbab9f-e250-4dbc-b7b7-d0ae492cf2b7", "eventTime": "2018-09-27T11:22:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Z5oHq8GawFAyw1FF4hW6aUDAMJy/ZAk4T4y7c7HQet993KoETqUvNOSf++o7y86mqJsK55f397vZdVYQ5hwwiw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40166a-271d-457c-aaf1-914a441de06e", "record_id": "flaws_cloudtrail:0000045:40166a-271d-457c-aaf1-914a441de06e", "row_index": 45, "timestamp": "2018-09-27T11:22:40Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40166a-271d-457c-aaf1-914a441de06e", "eventTime": "2018-09-27T11:22:40Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qQ/qXRXuAYYacK+byxOXF0sItZMnumF1vNWhCljsipgnUGj5xjl2X02Ra4ve0CmLLeBGjrI0cpgpFnbzRKUFXg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a3b6def-ec49-4847-b322-053ddddb838d", "record_id": "flaws_cloudtrail:0000046:2a3b6def-ec49-4847-b322-053ddddb838d", "row_index": 46, "timestamp": "2018-09-27T11:22:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a3b6def-ec49-4847-b322-053ddddb838d", "eventTime": "2018-09-27T11:22:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4zmmsTOVj6VQYoppvrtfHtFmy644/kwLLRo/Gf2hg903AFLCuFtVLoAMW3mzzY85jai2jV2nRB3s6s4y/9yp8g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c982f257-514b-424a-9475-008b9cd5e417", "record_id": "flaws_cloudtrail:0000047:c982f257-514b-424a-9475-008b9cd5e417", "row_index": 47, "timestamp": "2018-09-27T11:22:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c982f257-514b-424a-9475-008b9cd5e417", "eventTime": "2018-09-27T11:22:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EGGimmMVr5Puaooz176pN1t6EhpdG0tP6+j2Zpml8CzY5l5tk+WVHcf5ucq+XNVGl7hzQG6Xy5WKcKO37nmg2g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8950f43a-d339-4262-b370-1518cf971879", "record_id": "flaws_cloudtrail:0000048:8950f43a-d339-4262-b370-1518cf971879", "row_index": 48, "timestamp": "2018-09-27T11:22:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8950f43a-d339-4262-b370-1518cf971879", "eventTime": "2018-09-27T11:22:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/x+katTUIRF917Dt3l4Xbavy/liU5qoF/SKcWhJX933VWsPdImA47nsQ/Zw+h85ZIecm/SwljWn2xD8RqrKHBQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f71c22b-65fa-496a-bc8a-cf60b5ae49da", "record_id": "flaws_cloudtrail:0000049:0f71c22b-65fa-496a-bc8a-cf60b5ae49da", "row_index": 49, "timestamp": "2018-09-27T11:22:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f71c22b-65fa-496a-bc8a-cf60b5ae49da", "eventTime": "2018-09-27T11:22:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "uFV8v93Zq5UHHIa9jBoTaGi2nAu+Y/1qTByWYF3uiuqNl5idfPh3XUgsedOPhvPO/FoEvFrUWbsZeeZM9FqXJQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e010335af-fb18-4568-8dcf-371e9d36e78b", "record_id": "flaws_cloudtrail:0000050:e010335af-fb18-4568-8dcf-371e9d36e78b", "row_index": 50, "timestamp": "2018-09-27T11:22:48Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e010335af-fb18-4568-8dcf-371e9d36e78b", "eventTime": "2018-09-27T11:22:48Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "J0PzkDZHs8UN20N4RPdTw+Z/oWIihoa05Tpg8aCZa0z7mEWEpI/5MsCjEtwexJM+fpMljJ66VTx7vurLNOJSwg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "755c3615-3355-40e6-ac24-aaf9791fb721", "record_id": "flaws_cloudtrail:0000051:755c3615-3355-40e6-ac24-aaf9791fb721", "row_index": 51, "timestamp": "2018-09-27T11:22:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "755c3615-3355-40e6-ac24-aaf9791fb721", "eventTime": "2018-09-27T11:22:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "yQrqebph5mNU8Ef293f0Fee6axQDWuI8qUBPkOuGSe6VLUHv0esmxHm9WGZ0iqXAP9GYzzVh+Ho6pJetQX0H8Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbc7ab3e-4914-49c4-be0a-26759c3df044", "record_id": "flaws_cloudtrail:0000052:fbc7ab3e-4914-49c4-be0a-26759c3df044", "row_index": 52, "timestamp": "2018-09-27T11:22:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbc7ab3e-4914-49c4-be0a-26759c3df044", "eventTime": "2018-09-27T11:22:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "82Xgm7N20iGR3P1JY7CElDkaxOYUxSDgOsoH2Wh+s6b3Jx7Zb4D81gPlX6DF59MPZX9FwLgdwEj24RDbOKjOgw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b30b673a-1ca0-45b6-bbbe-f0fd748acdb2", "record_id": "flaws_cloudtrail:0000053:b30b673a-1ca0-45b6-bbbe-f0fd748acdb2", "row_index": 53, "timestamp": "2018-09-27T11:22:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b30b673a-1ca0-45b6-bbbe-f0fd748acdb2", "eventTime": "2018-09-27T11:22:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6acdc73-7c42-4367-95e1-84a51d40a95e", "record_id": "flaws_cloudtrail:0000054:a6acdc73-7c42-4367-95e1-84a51d40a95e", "row_index": 54, "timestamp": "2018-09-27T11:22:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6acdc73-7c42-4367-95e1-84a51d40a95e", "eventTime": "2018-09-27T11:22:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "bW6/fcKZAIBFshsYpJMJjRUm3aMMm3dVwppbT9l3jGl45+t1ti7t4gv5a3CI6Vt304/c4yVz+kXC9ZEu7n2Syw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14ea38df-be65-4cdf-a7dc-75fd17814c25", "record_id": "flaws_cloudtrail:0000055:14ea38df-be65-4cdf-a7dc-75fd17814c25", "row_index": 55, "timestamp": "2018-09-27T11:22:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14ea38df-be65-4cdf-a7dc-75fd17814c25", "eventTime": "2018-09-27T11:22:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "BqCk9SoY1wO6o+HW26rz4zJoEJV5ib4xe/P6kd5YPp/bv5opr2e59q54YbrzM3jKF5yk99zkIL+5sFd5JGnLzQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c43f3c5-f7e2-4e35-b26d-80cf16987bf6", "record_id": "flaws_cloudtrail:0000056:5c43f3c5-f7e2-4e35-b26d-80cf16987bf6", "row_index": 56, "timestamp": "2018-09-27T11:22:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c43f3c5-f7e2-4e35-b26d-80cf16987bf6", "eventTime": "2018-09-27T11:22:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "pEpGCNJPH/Dk7cGA1VAioXxl2VExPjjDfnkElhi6RKdahxmz0hmxeuzaf01BG4ryi0MNLpX8DcWbgO6SWOCegQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f95c284-efb1-4706-aac3-2a5b4d21a755", "record_id": "flaws_cloudtrail:0000057:5f95c284-efb1-4706-aac3-2a5b4d21a755", "row_index": 57, "timestamp": "2018-09-27T11:22:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f95c284-efb1-4706-aac3-2a5b4d21a755", "eventTime": "2018-09-27T11:22:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "p9JYsatT2mN2fsDjFCwAYt6wdzoxzZRM4V39C02zCazcN3w3RzxJuw1iEJcfT1NTi61hCHDPkwdZI7BIL3yCuQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c6126be-d58f-45e3-aeb8-e94aada164e7", "record_id": "flaws_cloudtrail:0000058:5c6126be-d58f-45e3-aeb8-e94aada164e7", "row_index": 58, "timestamp": "2018-09-27T11:22:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c6126be-d58f-45e3-aeb8-e94aada164e7", "eventTime": "2018-09-27T11:22:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZChbSGSKNDtbsw73j8rRBlYDo2dqcJUYeJEno4KWQBqtIXJLo+IuAUg2g7qw9nVOn8Qy0slAEHR6JC+56EBdcA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5881caa3-4a02-4d2d-ac91-9fb8f831516a", "record_id": "flaws_cloudtrail:0000059:5881caa3-4a02-4d2d-ac91-9fb8f831516a", "row_index": 59, "timestamp": "2018-09-27T11:22:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5881caa3-4a02-4d2d-ac91-9fb8f831516a", "eventTime": "2018-09-27T11:22:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "MNIViu6OQinBLtZLZ/cSd/zsyCGaZwjcBinL7FfTvOWXyJ+u1xp/7aKiKZbuUjGfxTOG/Yw8ZxskTAa7m47IpA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "969b5c23-4ed9-4330-bc30-2ff15ce0dd18", "record_id": "flaws_cloudtrail:0000060:969b5c23-4ed9-4330-bc30-2ff15ce0dd18", "row_index": 60, "timestamp": "2018-09-27T11:22:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "969b5c23-4ed9-4330-bc30-2ff15ce0dd18", "eventTime": "2018-09-27T11:22:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50ae97e8-a305-4d7d-ac6c-03e205c4a4c6", "record_id": "flaws_cloudtrail:0000061:50ae97e8-a305-4d7d-ac6c-03e205c4a4c6", "row_index": 61, "timestamp": "2018-09-27T11:22:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50ae97e8-a305-4d7d-ac6c-03e205c4a4c6", "eventTime": "2018-09-27T11:22:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Ww05RGAUXiGp7CPevoQfzeHvfxzDcflSEf0ouuOxiVoPtbWSBHhxb7JjPxecwXoNYbVmYEraDB2r3MRMShObJQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64e1ef3-8dae-4017-bff1-3f45daeb1030", "record_id": "flaws_cloudtrail:0000062:e64e1ef3-8dae-4017-bff1-3f45daeb1030", "row_index": 62, "timestamp": "2018-09-27T11:22:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64e1ef3-8dae-4017-bff1-3f45daeb1030", "eventTime": "2018-09-27T11:22:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "V3P7Xx1Qj31Gq0geA0BvHt6RGneDZPB09eHCyovks6ooH88TQLDx1PGL+JDJ6XzlTklEkKYIQwv7ZfjO+D09PQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e5ae2cc-3691-4537-87c3-0e5ef0b7c001", "record_id": "flaws_cloudtrail:0000063:1e5ae2cc-3691-4537-87c3-0e5ef0b7c001", "row_index": 63, "timestamp": "2018-09-27T11:22:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e5ae2cc-3691-4537-87c3-0e5ef0b7c001", "eventTime": "2018-09-27T11:22:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DE+21fxEWm3IO38eqK6vM0s46Zb++Fz8suZiQhjV0owRIKm3f3ssP0YEAO3SCJ3nWorbqO+lRK3++44e1+JaLA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "572462e5-7dbd-4723-ba33-14685e299662", "record_id": "flaws_cloudtrail:0000064:572462e5-7dbd-4723-ba33-14685e299662", "row_index": 64, "timestamp": "2018-09-27T11:22:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "572462e5-7dbd-4723-ba33-14685e299662", "eventTime": "2018-09-27T11:22:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "GMDCeD4cdUR5OFFSJLIY0C+M1Mg3S2JJukbxnTNgBHTUhVjvzaCEwHlmChdYZa2fY/jJsCpNUuEPDh0eYQLzZQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a156b09b-c6dc-4989-a66e-5ad96b0f6c3b", "record_id": "flaws_cloudtrail:0000065:a156b09b-c6dc-4989-a66e-5ad96b0f6c3b", "row_index": 65, "timestamp": "2018-09-27T11:22:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a156b09b-c6dc-4989-a66e-5ad96b0f6c3b", "eventTime": "2018-09-27T11:22:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "b8UKjw4sIJ8qUajobIG2O4ciAHsqtFDEUC+mvES5mFkHQLeOseK3VpJB5ULC4Q++SGtOe66EGAwlyFNpAT7CkA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d37270-9399-47ce-99b7-c89a690e21d3", "record_id": "flaws_cloudtrail:0000066:d37270-9399-47ce-99b7-c89a690e21d3", "row_index": 66, "timestamp": "2018-09-27T11:22:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d37270-9399-47ce-99b7-c89a690e21d3", "eventTime": "2018-09-27T11:22:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8n4UKnNozM42teL5gpzS9uyR6R/hKQ0iT8E/c2GaTFTVqaZYVusEOw9i5Q1l04Qy45YCoLk5NH3ve6LShTo/yg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef1a6030-50df-4913-b054-fffb598b491a", "record_id": "flaws_cloudtrail:0000067:ef1a6030-50df-4913-b054-fffb598b491a", "row_index": 67, "timestamp": "2018-09-27T11:22:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef1a6030-50df-4913-b054-fffb598b491a", "eventTime": "2018-09-27T11:22:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iU4xg3xYBGPaBs+VdRtlVeCwyZg9OH3BydffhaDXoubo5Do4yeOfxcgaC0VRBmfw34l82wqaOw/JLig3A/kpxg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa3ad215-899b-4ff3-8c1e-a1574635d8c8", "record_id": "flaws_cloudtrail:0000068:aa3ad215-899b-4ff3-8c1e-a1574635d8c8", "row_index": 68, "timestamp": "2018-09-27T11:22:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa3ad215-899b-4ff3-8c1e-a1574635d8c8", "eventTime": "2018-09-27T11:22:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "+ohOOA5p8d04KUeQm2dygEZzF0r5i3idMmO1DrHRYb2DlrfpJujUUm+pmIfUZfbyZPu1PEf3CoHzbvzpMIkSLA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5236e99-04c8-4717-b97c-13a6af8b3efd", "record_id": "flaws_cloudtrail:0000069:a5236e99-04c8-4717-b97c-13a6af8b3efd", "row_index": 69, "timestamp": "2018-09-27T11:22:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5236e99-04c8-4717-b97c-13a6af8b3efd", "eventTime": "2018-09-27T11:22:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "E6OKQXIN+oA3N6QUSYbK4TIQOnaqrLoLaQRILMoU9N0Yv1jtfaGVygRE6ktM7amQM7CpuCIGHJ/6WGmolMjJDQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d26b6cb6-d709-4805-9b35-c49fe2f004848", "record_id": "flaws_cloudtrail:0000070:d26b6cb6-d709-4805-9b35-c49fe2f004848", "row_index": 70, "timestamp": "2018-09-27T11:22:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d26b6cb6-d709-4805-9b35-c49fe2f004848", "eventTime": "2018-09-27T11:22:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "bMsBVcTr4vF6eAeOtkM+Pas+h3y76gC/0h2kqy+mP4t2DTlee2KhlHCiHsalSRRGEg8Eq15BmN+7IT8Xtaxwmg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80cb48dd-fcc0-40ab-8657-8463afdc6ae8", "record_id": "flaws_cloudtrail:0000071:80cb48dd-fcc0-40ab-8657-8463afdc6ae8", "row_index": 71, "timestamp": "2018-09-27T11:22:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80cb48dd-fcc0-40ab-8657-8463afdc6ae8", "eventTime": "2018-09-27T11:22:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44bc164e-0f6d-49db-96e2-63fbcc86edf7", "record_id": "flaws_cloudtrail:0000072:44bc164e-0f6d-49db-96e2-63fbcc86edf7", "row_index": 72, "timestamp": "2018-09-27T11:23:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44bc164e-0f6d-49db-96e2-63fbcc86edf7", "eventTime": "2018-09-27T11:23:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "BscaXYuleOKTKIrU54r5YWDZduhPywfLs38qbI0P2ChGrW01uCtAJ2qth11MHnLsSaPgUnWYwDIoBT+qlEiwlA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9306e9ac-5583-4c99-acab-7619efef48d8", "record_id": "flaws_cloudtrail:0000073:9306e9ac-5583-4c99-acab-7619efef48d8", "row_index": 73, "timestamp": "2018-09-27T11:23:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9306e9ac-5583-4c99-acab-7619efef48d8", "eventTime": "2018-09-27T11:23:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "trk6360iZHXb3I5g5HSFGX57MY3HqFkGK2YtjaYCH8W2+v4NpobOjrqvAjXwogqNDbovOxoohqc367HlZfki3w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4edc91a7-8e88-40fa-b4aa-d56becf18eb9", "record_id": "flaws_cloudtrail:0000074:4edc91a7-8e88-40fa-b4aa-d56becf18eb9", "row_index": 74, "timestamp": "2018-09-27T11:23:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4edc91a7-8e88-40fa-b4aa-d56becf18eb9", "eventTime": "2018-09-27T11:23:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Nn7APBjFOCMr5BJNYmC9rFjql9pKh5tyI+MnvGYnsuGJqp6Ojb+QKH27iaqbo5uh71ye8MfD6YPBqs/IG2sZLg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fae67ec-8120-4b94-a168-a3a189aa152a", "record_id": "flaws_cloudtrail:0000075:5fae67ec-8120-4b94-a168-a3a189aa152a", "row_index": 75, "timestamp": "2018-09-27T11:23:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fae67ec-8120-4b94-a168-a3a189aa152a", "eventTime": "2018-09-27T11:23:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "aZpP7byNHVZVx4R/MVTSRjIez1LU8DGy9PDTHKP8p+nsBx9OTiOqzCSVVnqLYWdCkng4anwzYJ1xPCPBuxvwXA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e290c02-f506-4be3-96b1-983b0e16553a", "record_id": "flaws_cloudtrail:0000076:8e290c02-f506-4be3-96b1-983b0e16553a", "row_index": 76, "timestamp": "2018-09-27T11:23:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e290c02-f506-4be3-96b1-983b0e16553a", "eventTime": "2018-09-27T11:23:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "oknvm3wcriFNo00cNuykBe2TDnd8WCnbPqPRmCXVeCSmhkVkWjCk5YuDDT5WEYS68BeOy5FQ8u6k9ZoZnLhkiA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b39ccda-5f79-4866-8cf2-73964e5e1", "record_id": "flaws_cloudtrail:0000077:0b39ccda-5f79-4866-8cf2-73964e5e1", "row_index": 77, "timestamp": "2018-09-27T11:23:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b39ccda-5f79-4866-8cf2-73964e5e1", "eventTime": "2018-09-27T11:23:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/QNga0TqwtSA2wq2eJmPz5loD1bCHzUOfEM486k0cOzN0BZAs0q/aFm5lTuuL1pAd26KWzBUUPXKkMJZl9aW6g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85074c-2852-417b-8c36-37c913ceb701", "record_id": "flaws_cloudtrail:0000078:85074c-2852-417b-8c36-37c913ceb701", "row_index": 78, "timestamp": "2018-09-27T11:23:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85074c-2852-417b-8c36-37c913ceb701", "eventTime": "2018-09-27T11:23:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "2np0mAqxeR17XbqwE3kjpvuM5Be5hMHkMjofgabpgAtY8sOPLDyf2qp+rLAaW68t4m74JYKZm+/dS9PBZWi9Sg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d1edfa6-5753-4f71-ae06-6dfae418b2b8", "record_id": "flaws_cloudtrail:0000079:6d1edfa6-5753-4f71-ae06-6dfae418b2b8", "row_index": 79, "timestamp": "2018-09-27T11:23:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d1edfa6-5753-4f71-ae06-6dfae418b2b8", "eventTime": "2018-09-27T11:23:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VfwQWKzbVMk9ftAkd86Z4TvKe5OT5Q63xuVRZQGNfFI7IAfSZXBD6fxa66/7xueojGbbz5SpwizpBfOLG443eA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60e041777-cf97-4e0a-91ac-705eecd46a16", "record_id": "flaws_cloudtrail:0000080:60e041777-cf97-4e0a-91ac-705eecd46a16", "row_index": 80, "timestamp": "2018-09-27T11:23:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60e041777-cf97-4e0a-91ac-705eecd46a16", "eventTime": "2018-09-27T11:23:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "pZnzht5mgyNh7EZg3Jka8IwvThy36qlDjVcmATjkzEarDy6Ml5oAmDR2mQ7UDSwZs/2Bl5w4lMn7rlnTgCA/qA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc29b229-8e96-418f-8a40-3ebd603180c42", "record_id": "flaws_cloudtrail:0000081:fc29b229-8e96-418f-8a40-3ebd603180c42", "row_index": 81, "timestamp": "2018-09-27T11:23:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc29b229-8e96-418f-8a40-3ebd603180c42", "eventTime": "2018-09-27T11:23:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/MGgHtlPSWoBWat6AGc7FRYZRPd/CcRxmkx9c1TdaKyoNxxFN9qMGI0sZvz//l944iF8rOKKHtXEWVlST/SxQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4d35a62-ef9f-4e50-b2a9-72d8050df550", "record_id": "flaws_cloudtrail:0000082:f4d35a62-ef9f-4e50-b2a9-72d8050df550", "row_index": 82, "timestamp": "2018-09-27T11:23:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4d35a62-ef9f-4e50-b2a9-72d8050df550", "eventTime": "2018-09-27T11:23:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9EnlrTz5s/+ZxwM944Kcesoh1gN02/vBEvb2RCOPAadGmb/rFs57Hs6K49Dl2FTW93npB2AVmBm7tGZGNFch0w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fa2b0f3-634e-4711-8ae9-8ea76d5673c1", "record_id": "flaws_cloudtrail:0000083:8fa2b0f3-634e-4711-8ae9-8ea76d5673c1", "row_index": 83, "timestamp": "2018-09-27T11:23:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fa2b0f3-634e-4711-8ae9-8ea76d5673c1", "eventTime": "2018-09-27T11:23:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "OnHjEaLjR5syDAjZxwGr+pd1hEJKtmxNBVS6XuV9r9A7tK6g3ZsimiTNmkG0m5qFZ1yEWibYSccY6n8Q8C2jow=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45f42138-f450-41c5-b604-37e3545ffce4", "record_id": "flaws_cloudtrail:0000084:45f42138-f450-41c5-b604-37e3545ffce4", "row_index": 84, "timestamp": "2018-09-27T11:23:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45f42138-f450-41c5-b604-37e3545ffce4", "eventTime": "2018-09-27T11:23:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "S9u0VuGGS3efvE4NQV/9zCCH6AQC7weoVTxl18x88SgL0AZDL+ixMBBZ0Lwj/wsKaWM9liPw66xOi+ILc+hWXg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28f8116e-b224-479c-84b7-019155b12c9c1", "record_id": "flaws_cloudtrail:0000085:28f8116e-b224-479c-84b7-019155b12c9c1", "row_index": 85, "timestamp": "2018-09-27T11:23:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28f8116e-b224-479c-84b7-019155b12c9c1", "eventTime": "2018-09-27T11:23:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "88GxNxuSh1na8TR8JhJiLWr3CPeBtDcp9z8klKMvVjsX0WxsxXf5YqO2Uew6P9TEaPpiW41FX7zUiAUU+P2lKA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abee309a-1333-4ddc-846f-51fc4b8911a5", "record_id": "flaws_cloudtrail:0000086:abee309a-1333-4ddc-846f-51fc4b8911a5", "row_index": 86, "timestamp": "2018-09-27T11:23:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abee309a-1333-4ddc-846f-51fc4b8911a5", "eventTime": "2018-09-27T11:23:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "2VZHDJZMgxxbpN5eZgFhOnnT2zWs3vJ91/9GtKJH2cKvL/Hmk8Q81lAIG+J1RxmMqhEc6jc0FBChuWj6RHt2Nw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8dbabe0a-f647-4c3f-bb56-dded515b826e", "record_id": "flaws_cloudtrail:0000087:8dbabe0a-f647-4c3f-bb56-dded515b826e", "row_index": 87, "timestamp": "2018-09-27T11:23:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8dbabe0a-f647-4c3f-bb56-dded515b826e", "eventTime": "2018-09-27T11:23:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "v67Rwda7gecmXl61pS7IfZiu7n4dgALQ2aW2iEUT8XmZHMSOpEtzuj4s7+7Xl/shvul0FcC3ZHTU2MwSjRQc1Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25d461dc-3e3e-4723-a6a2-bf421639f54", "record_id": "flaws_cloudtrail:0000088:25d461dc-3e3e-4723-a6a2-bf421639f54", "row_index": 88, "timestamp": "2018-09-27T11:23:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25d461dc-3e3e-4723-a6a2-bf421639f54", "eventTime": "2018-09-27T11:23:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "6tjNDVsOPitX3ZxHfT2ZkvH6zjndt9wMlr3Gan0XbESRDZMBZW4sGc0/XRbFBJJv8O7UK6cO4iaeL/BxRVZBCg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0244b9b-8798-4746-9135-cd0c28b9500a", "record_id": "flaws_cloudtrail:0000089:d0244b9b-8798-4746-9135-cd0c28b9500a", "row_index": 89, "timestamp": "2018-09-27T11:23:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0244b9b-8798-4746-9135-cd0c28b9500a", "eventTime": "2018-09-27T11:23:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tOPvgCRit6N9wiYH8EF1pCOt0BTA7uw5KGmKG5Wyr5bdtKY+wp9YIlhrXSa6HIpL0orVpx5eczFBSE9w6SN3YQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2278ecc7-0aa7-45e0-8272-2c0ce2962fc9", "record_id": "flaws_cloudtrail:0000090:2278ecc7-0aa7-45e0-8272-2c0ce2962fc9", "row_index": 90, "timestamp": "2018-09-27T11:23:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2278ecc7-0aa7-45e0-8272-2c0ce2962fc9", "eventTime": "2018-09-27T11:23:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "OtOhuKzWecBDw1GsdlSge3tSYjZ2VXnuCoDC6sfnr9vlYUU5aGbzyQm0ZyUv6nawlh5J0Rw5IHBYC3Kp+tiMXQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aadf5c78-b238-46cb-b365-fd6ebda34f52", "record_id": "flaws_cloudtrail:0000091:aadf5c78-b238-46cb-b365-fd6ebda34f52", "row_index": 91, "timestamp": "2018-09-27T11:23:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aadf5c78-b238-46cb-b365-fd6ebda34f52", "eventTime": "2018-09-27T11:23:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "c3h45P2RbflUTPCP/TF8WQxBfo56b8m/QDfqEcxyvgrmpBQGLAsJBiPvXCWuwsmEmqz31nXZ95TXchvCdzBQYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44f564b5-57fc-49e7-8638-a85fa6315dc0", "record_id": "flaws_cloudtrail:0000092:44f564b5-57fc-49e7-8638-a85fa6315dc0", "row_index": 92, "timestamp": "2018-09-27T11:23:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44f564b5-57fc-49e7-8638-a85fa6315dc0", "eventTime": "2018-09-27T11:23:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EVW9/8XEYZaSQy6b4j/LpJz7jThyolArAeWkcWNpHipBnyV6MBoKynxK3RWZc6y6Y+67tCeaOhVpxQjyFJfWjw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a1dacf-fbda-4350-9907-525f0a0292ab", "record_id": "flaws_cloudtrail:0000093:60a1dacf-fbda-4350-9907-525f0a0292ab", "row_index": 93, "timestamp": "2018-09-27T11:23:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a1dacf-fbda-4350-9907-525f0a0292ab", "eventTime": "2018-09-27T11:23:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "MKQZgOu2m4WQFZ1YrQs5nfFb2mKVFAxh2V2EwpEgHSyEK1JrPnedQG+avLXcepvB/tixnds7fhOx7uPrreX9AQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e164c8a7-3ac6-4937-a1e2-77f6a772be1e", "record_id": "flaws_cloudtrail:0000094:e164c8a7-3ac6-4937-a1e2-77f6a772be1e", "row_index": 94, "timestamp": "2018-09-27T11:23:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e164c8a7-3ac6-4937-a1e2-77f6a772be1e", "eventTime": "2018-09-27T11:23:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tOALZZsyjAzqw5wgmwuPEUgLp0NQmcRf7dgm6IT9HlSADqqmBAtGQcP+n2beNzZvfsW4ENGVmJSt6Re7zBQ9gQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efe52916-ce62-4f68-a411-f7f2a239e75e", "record_id": "flaws_cloudtrail:0000095:efe52916-ce62-4f68-a411-f7f2a239e75e", "row_index": 95, "timestamp": "2018-09-27T11:23:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efe52916-ce62-4f68-a411-f7f2a239e75e", "eventTime": "2018-09-27T11:23:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "pujZmx0E01mlSRGO7c1Xvarf9bSX+ja3i5cfe77UzLVCrPSTEFg6jHXVOald3sCkNjjK/L4TPOtAi+TBF5p+HQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f169a26-6dd5-4aa8-87bf-b4945d45d143", "record_id": "flaws_cloudtrail:0000096:4f169a26-6dd5-4aa8-87bf-b4945d45d143", "row_index": 96, "timestamp": "2018-09-27T11:23:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f169a26-6dd5-4aa8-87bf-b4945d45d143", "eventTime": "2018-09-27T11:23:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "oOGsKJGmRRb+TGJAdr1N0It+RYiNrR625qfyUkSlB709RSwED+olfKGWCmpRkwArJmJVDZsJxtvoOVO5+caXbg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf932194-a1c1-414a-988d-0ef1085e5350", "record_id": "flaws_cloudtrail:0000097:bcf932194-a1c1-414a-988d-0ef1085e5350", "row_index": 97, "timestamp": "2018-09-27T11:23:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf932194-a1c1-414a-988d-0ef1085e5350", "eventTime": "2018-09-27T11:23:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "OW8cE2MrnBmpNXX86jRoWiaH5HyC+OghetxjvV3IUBfLx1MNKH7hoQGLO9TxZZ+4FDaBB7AQ86tVeflvBGp94A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e62daa2-8cae-46ed-b35c-7fcb7afe2160", "record_id": "flaws_cloudtrail:0000098:0e62daa2-8cae-46ed-b35c-7fcb7afe2160", "row_index": 98, "timestamp": "2018-09-27T11:23:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e62daa2-8cae-46ed-b35c-7fcb7afe2160", "eventTime": "2018-09-27T11:23:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "TwnvY21bp4p+o2YniorXQdYitNkQEpoLi1HJ8hFhoAieJCe8SIShugdRQYk8WqHL8kAssHEtWDdy9Nj6i53VSw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b93ca2cd-63cd-418f-9d4b-c34f0d911040", "record_id": "flaws_cloudtrail:0000099:b93ca2cd-63cd-418f-9d4b-c34f0d911040", "row_index": 99, "timestamp": "2018-09-27T11:23:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b93ca2cd-63cd-418f-9d4b-c34f0d911040", "eventTime": "2018-09-27T11:23:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9t/fp4qNPVrGW96h3kj6RjcUFhLKWdAjVC9cbvsHjp21sx91Y29ELmzFhbh0KoPIIXBR6/LgiMGoL3xf+yDTGQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c37a816-3f16-4541-96bc-b02d4e9e8d12", "record_id": "flaws_cloudtrail:0000100:3c37a816-3f16-4541-96bc-b02d4e9e8d12", "row_index": 100, "timestamp": "2018-09-27T11:23:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c37a816-3f16-4541-96bc-b02d4e9e8d12", "eventTime": "2018-09-27T11:23:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "2a+snngxp78MWy1+qr+ilsTcfl6HEu1AAbkY2WYD8PN8NSxTcPpMrpJHYAY4Fw5qvgSfSBQB+Tq21fYwlXbBOA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "532bf617-e9de-47fd-817c-df31f0e6dcdc", "record_id": "flaws_cloudtrail:0000101:532bf617-e9de-47fd-817c-df31f0e6dcdc", "row_index": 101, "timestamp": "2018-09-27T11:24:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "532bf617-e9de-47fd-817c-df31f0e6dcdc", "eventTime": "2018-09-27T11:24:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "csMu8xPk8GDFO7gRT8V7bLMhHvBRnpxZcgLJWbt+bpIppesk9TAga+2BWRucJ1N0xe59xI3fV7xL5EkCqwt1fQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f8c763-13cd-4c7e-8f18-3d5d072f9326", "record_id": "flaws_cloudtrail:0000102:c4f8c763-13cd-4c7e-8f18-3d5d072f9326", "row_index": 102, "timestamp": "2018-09-27T11:24:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f8c763-13cd-4c7e-8f18-3d5d072f9326", "eventTime": "2018-09-27T11:24:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "0q9Y27GAQzXlkR5OICGIyRmeWr/hg8Y6FurT5pGYKG+23xHjVHIeX0NsvSkxxDVS5Bd27ivDxqF09aJPWCg5Lg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cd191ce-37e1-41eb-be87-b24ae8b0559a", "record_id": "flaws_cloudtrail:0000103:1cd191ce-37e1-41eb-be87-b24ae8b0559a", "row_index": 103, "timestamp": "2018-09-27T11:24:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cd191ce-37e1-41eb-be87-b24ae8b0559a", "eventTime": "2018-09-27T11:24:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "pHS0Ly6r1FyMCUx9GswqnXfwoWqT/VB531TJGM0KibmS/NaSOL0VSTEnT7grj9XjoQDKmTaEOOCey0mpU7FF7A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "125ec274-c934-4f7f-9eb0-620901c78a2", "record_id": "flaws_cloudtrail:0000104:125ec274-c934-4f7f-9eb0-620901c78a2", "row_index": 104, "timestamp": "2018-09-27T11:24:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "125ec274-c934-4f7f-9eb0-620901c78a2", "eventTime": "2018-09-27T11:24:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nWOTLV0q2PfxflaC7g1ROEY63zLXlTRR9artMis5m1bG96yzfMa0+h/GUhP5uWVJcuWY6W7vh2r+1lItjCe9DQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac528d90-776d-4ec2-8ea5-b21e77331adf", "record_id": "flaws_cloudtrail:0000105:ac528d90-776d-4ec2-8ea5-b21e77331adf", "row_index": 105, "timestamp": "2018-09-27T11:24:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac528d90-776d-4ec2-8ea5-b21e77331adf", "eventTime": "2018-09-27T11:24:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e728345f-5d05-4982-b64a-2075da25550d", "record_id": "flaws_cloudtrail:0000106:1e728345f-5d05-4982-b64a-2075da25550d", "row_index": 106, "timestamp": "2018-09-27T11:24:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e728345f-5d05-4982-b64a-2075da25550d", "eventTime": "2018-09-27T11:24:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "CKj8b2jFsHyQDPvA5Gjg0KYhSekxE3jS+ZQLguqGnqnvknEaT1LbBq9Hfk4qi4PZbRiGyO340hHcE5H+Rrh0+A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a0d7f4c-6ebd-448e-97e8-45b3479f9c99", "record_id": "flaws_cloudtrail:0000107:0a0d7f4c-6ebd-448e-97e8-45b3479f9c99", "row_index": 107, "timestamp": "2018-09-27T11:24:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a0d7f4c-6ebd-448e-97e8-45b3479f9c99", "eventTime": "2018-09-27T11:24:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "niwJ6GUX8Vqr9AuUfeZLSRL0l6PitplFgg4qWwCBilZy+FDDXtCzFdswA+J0ZE7JjuW2YVhcdtgzRz+EZj0wgA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0c48936-5778-49df-a61a-073b8389a41a", "record_id": "flaws_cloudtrail:0000108:d0c48936-5778-49df-a61a-073b8389a41a", "row_index": 108, "timestamp": "2018-09-27T11:24:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0c48936-5778-49df-a61a-073b8389a41a", "eventTime": "2018-09-27T11:24:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "7V4Pz6cqy0xzyyQVcARwOGJJJmsD15hRAAZM2Y/43M2xyKF6SpJETPdUBf51SQKoP+WCgDShjvBehcy2g2tfoQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b3a7d98-8aba-49b2-a22e-6eedbc0ae4a3", "record_id": "flaws_cloudtrail:0000109:6b3a7d98-8aba-49b2-a22e-6eedbc0ae4a3", "row_index": 109, "timestamp": "2018-09-27T11:24:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b3a7d98-8aba-49b2-a22e-6eedbc0ae4a3", "eventTime": "2018-09-27T11:24:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "fw5PqDyh2wp+Gtl8lo0Z9AancQt5zXXfMfyEvZQw50N9CAuV408vT7euAXKy0Dgs+vjyJNSechlviv+JcfUmvA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9174f4dc-d8af-46f4-945c-cc9ca71c083b", "record_id": "flaws_cloudtrail:0000110:9174f4dc-d8af-46f4-945c-cc9ca71c083b", "row_index": 110, "timestamp": "2018-09-27T11:24:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9174f4dc-d8af-46f4-945c-cc9ca71c083b", "eventTime": "2018-09-27T11:24:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "g+gup8xgZCV+d8m1zKtKG+WismRqUiIn14uY7+BfV4wQTitN+ZB6ahBhf7oT0BmibQNZOqbTI+I2SvApXum0Cw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af61d0b3-5104-4250-8108-37d0582e0b25", "record_id": "flaws_cloudtrail:0000111:af61d0b3-5104-4250-8108-37d0582e0b25", "row_index": 111, "timestamp": "2018-09-27T11:24:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af61d0b3-5104-4250-8108-37d0582e0b25", "eventTime": "2018-09-27T11:24:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b56f5213-0416-4275-926d-e92d2c821e86", "record_id": "flaws_cloudtrail:0000112:b56f5213-0416-4275-926d-e92d2c821e86", "row_index": 112, "timestamp": "2018-09-27T11:24:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b56f5213-0416-4275-926d-e92d2c821e86", "eventTime": "2018-09-27T11:24:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "dNzVkpSXP7HCydCAhTmeAmAYAn3HTCGjPwbEFrMKlr6Aa7JFWXZutiTM1/QsWVztcIO3J8e/wQtqQOcGEQH2gQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd83e72b-1797-4e0b-9e95-3515a4f25a2c", "record_id": "flaws_cloudtrail:0000113:cd83e72b-1797-4e0b-9e95-3515a4f25a2c", "row_index": 113, "timestamp": "2018-09-27T11:24:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd83e72b-1797-4e0b-9e95-3515a4f25a2c", "eventTime": "2018-09-27T11:24:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "yX1Bwhr6O3/v1uA2vziXYaITSyZdrslMEb2eDn8HCjGXMnIj/pri09NJw4OXjsjHKZbEGBwcHQ8Qn9+UbXK7ng=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "989f3f14-2927-4163-a8e8-42c848523cc9", "record_id": "flaws_cloudtrail:0000114:989f3f14-2927-4163-a8e8-42c848523cc9", "row_index": 114, "timestamp": "2018-09-27T11:24:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "989f3f14-2927-4163-a8e8-42c848523cc9", "eventTime": "2018-09-27T11:24:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "WflBvDFzLzLJbOIWCv03VfvspcM1m0FuUm6kE7ZaKEaAnKG940wuxPGnj2nSY7apOHjlHEXsXleY1v1UAUSD3g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5101b30-dc99-4889-8dfe-9ba803c9ab81", "record_id": "flaws_cloudtrail:0000115:c5101b30-dc99-4889-8dfe-9ba803c9ab81", "row_index": 115, "timestamp": "2018-09-27T11:24:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5101b30-dc99-4889-8dfe-9ba803c9ab81", "eventTime": "2018-09-27T11:24:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "sXUup8axWCeRKaJwgkYlrbrYwcxnYEXIefkMzPUAPF7QyE4nHWQNGdlhJDPx3mZESZFrdlwAcl3zistsE02jrg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1fb021e-3f46-418d-b6b9-73671da3602", "record_id": "flaws_cloudtrail:0000116:f1fb021e-3f46-418d-b6b9-73671da3602", "row_index": 116, "timestamp": "2018-09-27T11:24:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1fb021e-3f46-418d-b6b9-73671da3602", "eventTime": "2018-09-27T11:24:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "czQ6NAUl2xODYuxzrKM02LvIu1vTITaWUdXCbW5udxKInbQbDxTY8+ZSrETBWpFNsTRoSvliLNVFRJp8acYYxQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce6be79c-0270-44ae-a6fc-71939c3d8c45", "record_id": "flaws_cloudtrail:0000117:ce6be79c-0270-44ae-a6fc-71939c3d8c45", "row_index": 117, "timestamp": "2018-09-27T11:24:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce6be79c-0270-44ae-a6fc-71939c3d8c45", "eventTime": "2018-09-27T11:24:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d1e6638-acd7-49a3-bbab-dfb53cb0731a", "record_id": "flaws_cloudtrail:0000118:9d1e6638-acd7-49a3-bbab-dfb53cb0731a", "row_index": 118, "timestamp": "2018-09-27T11:24:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d1e6638-acd7-49a3-bbab-dfb53cb0731a", "eventTime": "2018-09-27T11:24:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZM9wdZ49nKmzl0WFdXAtXIWlTUyiYAHIPt9QXFn7sNTJf/NG46cgGj+8eYvCql40qeQbJ+eJ8wZaVnWkmtrUPQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de31c05-9bfc-4d9e-9654-1f93e772a103", "record_id": "flaws_cloudtrail:0000119:6de31c05-9bfc-4d9e-9654-1f93e772a103", "row_index": 119, "timestamp": "2018-09-27T11:24:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de31c05-9bfc-4d9e-9654-1f93e772a103", "eventTime": "2018-09-27T11:24:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "UmVoj0tlemxndI9VeMN/aLPT0x+ZwC3YPOQDTWPHq13wAugo2XP0GyftPA9WhDPXcjLks8MBS0kBAxmjPhDssQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ea857bc-03a8-4613-ad60-314ace43ac3c", "record_id": "flaws_cloudtrail:0000120:7ea857bc-03a8-4613-ad60-314ace43ac3c", "row_index": 120, "timestamp": "2018-09-27T11:24:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ea857bc-03a8-4613-ad60-314ace43ac3c", "eventTime": "2018-09-27T11:24:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Fo3KgQxPBcAc/dh7cSWbEpn5ijVMRbzBbkrfw7yZYl0MuA4KMLJ5HjDfLwVIAfKngM4kRB7XLjiwuNlBAoDxQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e65a12bc-b56f-4eef-8858-3071dcb89151", "record_id": "flaws_cloudtrail:0000121:e65a12bc-b56f-4eef-8858-3071dcb89151", "row_index": 121, "timestamp": "2018-09-27T11:24:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e65a12bc-b56f-4eef-8858-3071dcb89151", "eventTime": "2018-09-27T11:24:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "mAqnkq3vrzI2fO4iPgvdNaZ56G/68D5LdRQaZ9K5kPkETPOn/p/Z7RoF/F8BY7qc/dDhvfgRizplPLDFUjOZgg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16469a8e-8252-4006-8b01-c25644a0f", "record_id": "flaws_cloudtrail:0000122:16469a8e-8252-4006-8b01-c25644a0f", "row_index": 122, "timestamp": "2018-09-27T11:24:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16469a8e-8252-4006-8b01-c25644a0f", "eventTime": "2018-09-27T11:24:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "733868de-1660-4b1c-bde8-634a93c82fb4", "record_id": "flaws_cloudtrail:0000123:733868de-1660-4b1c-bde8-634a93c82fb4", "row_index": 123, "timestamp": "2018-09-27T11:24:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "733868de-1660-4b1c-bde8-634a93c82fb4", "eventTime": "2018-09-27T11:24:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iY/RtLXNMvLX1NWc9S+9PqXFBa1Be47azObRbrdnjuUYrItxjv3yydnZg0+gGz6rt9Lpbx6he/m5o6rGE8cEnQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a0a48f9-4232-4c0a-b656-6b5098ba79e4", "record_id": "flaws_cloudtrail:0000124:8a0a48f9-4232-4c0a-b656-6b5098ba79e4", "row_index": 124, "timestamp": "2018-09-27T11:24:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a0a48f9-4232-4c0a-b656-6b5098ba79e4", "eventTime": "2018-09-27T11:24:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "TOPKvDS8q15MbzGBxFnMwZAiXPDWptnhHQEfabRrGgcvz4syPT8PHtcPyjm9xU9xnvaMuLDrfV+2tibjKhehiw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b073a0c4-fb9e-49d6-be59-f29453dc", "record_id": "flaws_cloudtrail:0000125:b073a0c4-fb9e-49d6-be59-f29453dc", "row_index": 125, "timestamp": "2018-09-27T11:24:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b073a0c4-fb9e-49d6-be59-f29453dc", "eventTime": "2018-09-27T11:24:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gADN26CfRkExIsAYKG+AJQIcCloeuYxBj5tdsuAVXGJ0i5pkhGqxgccaNscRItR3b33w5yAQzNdQZSpY/DeSnQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f07fa080-0c83-472d-92c5-084b644c2e6a", "record_id": "flaws_cloudtrail:0000126:f07fa080-0c83-472d-92c5-084b644c2e6a", "row_index": 126, "timestamp": "2018-09-27T11:24:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f07fa080-0c83-472d-92c5-084b644c2e6a", "eventTime": "2018-09-27T11:24:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "M2yyjOojsmy4rMrFu5xELRhGQWgSlKjXkNikYWR48mgYZJ+KzdqVhtaOmgQSgo/f9XL8e0zvesBclSbOM9X0aA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f2272ec-0b4c-45e6-acab-7d183d6fa707", "record_id": "flaws_cloudtrail:0000127:7f2272ec-0b4c-45e6-acab-7d183d6fa707", "row_index": 127, "timestamp": "2018-09-27T11:24:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f2272ec-0b4c-45e6-acab-7d183d6fa707", "eventTime": "2018-09-27T11:24:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RvsrxjBE4gzrrm9gLjPla2FPHWuTY+ff/vpHDZJs4hUA4d5Fs4Yzwu4LOabVMudAr5lf+vAvSgXg3/wp8L5pBA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7cba696-9f73-4d07-a473-51a4178ff421", "record_id": "flaws_cloudtrail:0000128:a7cba696-9f73-4d07-a473-51a4178ff421", "row_index": 128, "timestamp": "2018-09-27T11:24:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7cba696-9f73-4d07-a473-51a4178ff421", "eventTime": "2018-09-27T11:24:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "SVx8zYk5uIhuP7BFBZZgihMfklEcTlXg9D1V3DrrDWVPoL259hWqfBU0g5E5dIp6mF3unI3ECOW6R7Z9LluMqQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58d8f63d-b3ee-406a-a5e2-eb5b456cc2b9", "record_id": "flaws_cloudtrail:0000129:58d8f63d-b3ee-406a-a5e2-eb5b456cc2b9", "row_index": 129, "timestamp": "2018-09-27T11:24:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58d8f63d-b3ee-406a-a5e2-eb5b456cc2b9", "eventTime": "2018-09-27T11:24:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tM1OpxHorvCA51LFZmMUX56P6PwMMz+OP1mrTfxK2eWSmfzFVZCn1RtgNpVn/JgmSlzvubSALw15IYn9nRq2Aw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ff4781-40d4-479b-8f15-80de4aabeeeb", "record_id": "flaws_cloudtrail:0000130:01ff4781-40d4-479b-8f15-80de4aabeeeb", "row_index": 130, "timestamp": "2018-09-27T11:24:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ff4781-40d4-479b-8f15-80de4aabeeeb", "eventTime": "2018-09-27T11:24:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8VkykdUJNU7g6WKJAYAxVjSLvZPQY/Bvj0VgwJsDdD8l/pDYqaFwOG0VvzyYkmN4y9DTX9KvT5FYZ+B8kYsesg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c98b9f5-c96a-4079-8928-55bcabfd283c", "record_id": "flaws_cloudtrail:0000131:9c98b9f5-c96a-4079-8928-55bcabfd283c", "row_index": 131, "timestamp": "2018-09-27T11:24:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c98b9f5-c96a-4079-8928-55bcabfd283c", "eventTime": "2018-09-27T11:24:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d9ca9b7-6454-47ca-bb15-6b9c10b0e39c", "record_id": "flaws_cloudtrail:0000132:1d9ca9b7-6454-47ca-bb15-6b9c10b0e39c", "row_index": 132, "timestamp": "2018-09-27T11:24:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d9ca9b7-6454-47ca-bb15-6b9c10b0e39c", "eventTime": "2018-09-27T11:24:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "WZ+NbRkYFA2JkIvYYjA7xHi0oRnQJjtO7GEroZFwEh/d4mJ/AKqk5H2Jw9mU5LUASeY4Uo/MKYQlVCXsgjyuoQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58466f53-870d-40e9-866d-c9a782c5cd95", "record_id": "flaws_cloudtrail:0000133:58466f53-870d-40e9-866d-c9a782c5cd95", "row_index": 133, "timestamp": "2018-09-27T11:24:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58466f53-870d-40e9-866d-c9a782c5cd95", "eventTime": "2018-09-27T11:24:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VS/tLrQJqSidrbQVXigIhtU4wRFctkSmh8Fy8vP1Xckd1yRwkapvG1OLUBd6m6Mj96H/uuKmR/OX8RAE3w4BCw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d6c52c-d502-4c51-aecc-c6c708c934b9", "record_id": "flaws_cloudtrail:0000134:b0d6c52c-d502-4c51-aecc-c6c708c934b9", "row_index": 134, "timestamp": "2018-09-27T11:24:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d6c52c-d502-4c51-aecc-c6c708c934b9", "eventTime": "2018-09-27T11:24:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "XnkBwHkneXXhptjP383TlT42IbeZJH6DAfAEbBCXbRj1DJZL0E4XYb2ZBqKvl0wUJjHSXeJQhJgPc/hU8p6P/Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f34baf5d-04a1-4e74-ab65-f44810", "record_id": "flaws_cloudtrail:0000135:f34baf5d-04a1-4e74-ab65-f44810", "row_index": 135, "timestamp": "2018-09-27T11:24:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f34baf5d-04a1-4e74-ab65-f44810", "eventTime": "2018-09-27T11:24:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZZH+RpwpJy1wIDD05oLACOL8YA5UmydwSlZmMyMU6IlJoLsHlpt3kDPOxtcFk5HXA+ieb20N8bXxm+clhce4gw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e5fdf01-d188-4201-bb36-d5e75fa6da54", "record_id": "flaws_cloudtrail:0000136:8e5fdf01-d188-4201-bb36-d5e75fa6da54", "row_index": 136, "timestamp": "2018-09-27T11:24:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e5fdf01-d188-4201-bb36-d5e75fa6da54", "eventTime": "2018-09-27T11:24:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qCk+XI+LWCTCMwWn+4sAF2mwDMLLMl4IgYrvusILWrQjR9p5lr7W11FkTcVuKbALMp7hdnuCyxk8VBNYP4wdlw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b04a9914-16ae-4230-941c-1601a00da7e4", "record_id": "flaws_cloudtrail:0000137:b04a9914-16ae-4230-941c-1601a00da7e4", "row_index": 137, "timestamp": "2018-09-27T11:24:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b04a9914-16ae-4230-941c-1601a00da7e4", "eventTime": "2018-09-27T11:24:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4tmmZYfCeqx00iJx4qdfRUOL/NIPsnzzMRmmce+zGE86Q+fZ5RDZafceIPQH8dlcycMVta3YWQ3L/DbDw5V++g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e974da29-36b3-4283-ae6a-0385184ca257", "record_id": "flaws_cloudtrail:0000138:e974da29-36b3-4283-ae6a-0385184ca257", "row_index": 138, "timestamp": "2018-09-27T11:24:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e974da29-36b3-4283-ae6a-0385184ca257", "eventTime": "2018-09-27T11:24:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IgLRlvubEX92/ZJ7TRj3raJ7pUTyPEE2fmstLm8Jy357hNfjWJ4zClJQEx+2PUyKjqJc5YKCkdqGKFTENqmtSQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0758a44-26ba-4a74-9fa8-616561fcb8878", "record_id": "flaws_cloudtrail:0000139:b0758a44-26ba-4a74-9fa8-616561fcb8878", "row_index": 139, "timestamp": "2018-09-27T11:24:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0758a44-26ba-4a74-9fa8-616561fcb8878", "eventTime": "2018-09-27T11:24:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ql0GW9IAJz3M9dgIpRvjNp2y9fNpUu31JUMVWT2PPF6BJYwMS9xmTCJqlZ8/IwSu881Q8Sqd7rcHYmhEzSfLBA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b199f21-9ff5-4278-a508-4cf2e8a7d5d4", "record_id": "flaws_cloudtrail:0000140:4b199f21-9ff5-4278-a508-4cf2e8a7d5d4", "row_index": 140, "timestamp": "2018-09-27T11:24:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b199f21-9ff5-4278-a508-4cf2e8a7d5d4", "eventTime": "2018-09-27T11:24:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ciEcsWakXn8DhqgvtJSVFDqiUplXCntJUXAQRPvROgYSzrBtlR4u/UYOrCIljGceoKF+OPQMiE6Ha1ryfHAwxg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cdfc7b8-6ff6-4dba-8342-955ec53f0992", "record_id": "flaws_cloudtrail:0000141:0cdfc7b8-6ff6-4dba-8342-955ec53f0992", "row_index": 141, "timestamp": "2018-09-27T11:24:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cdfc7b8-6ff6-4dba-8342-955ec53f0992", "eventTime": "2018-09-27T11:24:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "I2VUivYZDQLnlSvev05cNE5IepSsP9IF7qprt7bppvYYee45IArmzM39whHqbzLjMK5M8P2R+8HTrm2fi6oLZA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15c6a2ac-49eb-4442-8cb3-7dbf5eaa2a80", "record_id": "flaws_cloudtrail:0000142:15c6a2ac-49eb-4442-8cb3-7dbf5eaa2a80", "row_index": 142, "timestamp": "2018-09-27T11:24:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15c6a2ac-49eb-4442-8cb3-7dbf5eaa2a80", "eventTime": "2018-09-27T11:24:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VDoMLKm+3VC1hhxhYXLhOeop9p+IjLRrrXisdrKVlGuqvt5yd0bm0L8mefRBae8FipeW5xcw6woFrZfsXcXPpQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3af0052-ca26-455d-99a0-ca5ad8bb04b7", "record_id": "flaws_cloudtrail:0000143:e3af0052-ca26-455d-99a0-ca5ad8bb04b7", "row_index": 143, "timestamp": "2018-09-27T11:24:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3af0052-ca26-455d-99a0-ca5ad8bb04b7", "eventTime": "2018-09-27T11:24:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/UBxBJikH5H92yNHHS6piPZk8cz2L3YpfZUDdVt+oeWTJDTNiXl66ihUFDy6UGZhhi0V7tUxoK69dvUY783Uvg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e842684-066a-4ea5-b6fd-9da4fc2f0b01", "record_id": "flaws_cloudtrail:0000144:31e842684-066a-4ea5-b6fd-9da4fc2f0b01", "row_index": 144, "timestamp": "2018-09-27T11:24:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e842684-066a-4ea5-b6fd-9da4fc2f0b01", "eventTime": "2018-09-27T11:24:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EI7FJLjwKepYtbJwxHjCnc38hp/JbKf3MlB985msRERDqYxtjhQZSG3WTvFo0q1bdrYCsw7YXvdBmkTNV7pjPQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "533914ce7-8baa-4f4c-b9cd-6499dc6e8d8b", "record_id": "flaws_cloudtrail:0000145:533914ce7-8baa-4f4c-b9cd-6499dc6e8d8b", "row_index": 145, "timestamp": "2018-09-27T11:24:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "533914ce7-8baa-4f4c-b9cd-6499dc6e8d8b", "eventTime": "2018-09-27T11:24:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "z7yJWGBPY10RCAIxpUxKQHW32My+pAoUkvvzzyGrTGxfFYTCfEOMU3YXoG8Cj5Iv9tIMa/8wFnQtL5QKLAooxQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ebd4849-cd30-4924-b61a-47f8e24b5fc2", "record_id": "flaws_cloudtrail:0000146:6ebd4849-cd30-4924-b61a-47f8e24b5fc2", "row_index": 146, "timestamp": "2018-09-27T11:24:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ebd4849-cd30-4924-b61a-47f8e24b5fc2", "eventTime": "2018-09-27T11:24:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "BY0vvw/tCoGzuV5h316mzQwNhrplmZwzNtGyqab2kl3yK1Mpn3PVlqE3aCAi1iArBwJPTLS0xTX1sL2zXrbEtA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e7728e6-f421-4000-8d35-84905e69aac", "record_id": "flaws_cloudtrail:0000147:5e7728e6-f421-4000-8d35-84905e69aac", "row_index": 147, "timestamp": "2018-09-27T11:24:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e7728e6-f421-4000-8d35-84905e69aac", "eventTime": "2018-09-27T11:24:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "upLogoSrhBeXa8dmMkvgAo1cS3ltmx8vl+E5753IUVoVx8+0S+kzu5qUaIRWcEXjLZaDoXGGx1sqNtyLxQegQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "560fabd8-bd42-453d-8ab1-bf2aa5117c41", "record_id": "flaws_cloudtrail:0000148:560fabd8-bd42-453d-8ab1-bf2aa5117c41", "row_index": 148, "timestamp": "2018-09-27T11:24:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "560fabd8-bd42-453d-8ab1-bf2aa5117c41", "eventTime": "2018-09-27T11:24:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gGQNd0YhMwVPDu7Y3Q5eNlwCAfR9NrT2Cb/BUU2XBbh1GKz/H7pWPCs9MYeaHysTQnp80R4DE3fUKTvpP0kwmw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eed72a8f-3311-477e-8012-e8931c4340b3", "record_id": "flaws_cloudtrail:0000149:eed72a8f-3311-477e-8012-e8931c4340b3", "row_index": 149, "timestamp": "2018-09-27T11:24:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eed72a8f-3311-477e-8012-e8931c4340b3", "eventTime": "2018-09-27T11:24:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3Qfl0xi8jCIm+53zblV4Xbs34KBWF+Mv+AfDBp6JWHNfPKZ/9CFs4RTVq5MbuRByqQbIl1pHMCloRhTXZwY/uA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32d9c8c8-7f8e-4d48-917e-04357b1ee48b", "record_id": "flaws_cloudtrail:0000150:32d9c8c8-7f8e-4d48-917e-04357b1ee48b", "row_index": 150, "timestamp": "2018-09-27T11:24:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32d9c8c8-7f8e-4d48-917e-04357b1ee48b", "eventTime": "2018-09-27T11:24:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "dBPhwyG/zLSTcKJQegbTtTUuctZ2V1J2IcpLExswW71IZg+EFCeeBMmL01wRVW8u/x3iwo4bv7xsMvVijc6XbA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "273faa20-8818-4d50-a738-fa7c2fb16d2e", "record_id": "flaws_cloudtrail:0000151:273faa20-8818-4d50-a738-fa7c2fb16d2e", "row_index": 151, "timestamp": "2018-09-27T11:24:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "273faa20-8818-4d50-a738-fa7c2fb16d2e", "eventTime": "2018-09-27T11:24:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "5aeiDNy+b3UPfH2+cYxSBt7MSOm03z+cKG33K7fGk6Zc3Ej0qWDL2DZIT8ImYOdJRCT3iQjHtcRL8+h5W863MQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3a930b-36b7-4bdc-bdff-d8955832fda7", "record_id": "flaws_cloudtrail:0000152:1b3a930b-36b7-4bdc-bdff-d8955832fda7", "row_index": 152, "timestamp": "2018-09-27T11:24:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3a930b-36b7-4bdc-bdff-d8955832fda7", "eventTime": "2018-09-27T11:24:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "cw97MVK9aYwtD8nEBsk38B9d6Kon77RyRS8AVhVw0CR1nSucJqQxRYpPIkzIrEMQhe0/6iktuAPE5F1WEBu4rw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ce4c75e-ee66-42ac-8fbd-450d370e2707", "record_id": "flaws_cloudtrail:0000153:7ce4c75e-ee66-42ac-8fbd-450d370e2707", "row_index": 153, "timestamp": "2018-09-27T11:24:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ce4c75e-ee66-42ac-8fbd-450d370e2707", "eventTime": "2018-09-27T11:24:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3CWmT3gpVn1JEACG2YuQway3p7qXbNv5cpxmQpszFoEu6EmmWzCICDDLoQMPR9F+8d7s9WBf6fhpp/BL7VEG9w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e9838f9-1391-4edb-b7d3-aea8ecf375b0", "record_id": "flaws_cloudtrail:0000154:4e9838f9-1391-4edb-b7d3-aea8ecf375b0", "row_index": 154, "timestamp": "2018-09-27T11:24:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e9838f9-1391-4edb-b7d3-aea8ecf375b0", "eventTime": "2018-09-27T11:24:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "203f2488-7b40-4696-9a01-71cbfc0712fc", "record_id": "flaws_cloudtrail:0000155:203f2488-7b40-4696-9a01-71cbfc0712fc", "row_index": 155, "timestamp": "2018-09-27T11:24:30Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3EDR81TEPX7F7KY7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.89.202.51", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 513, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "203f2488-7b40-4696-9a01-71cbfc0712fc", "eventTime": "2018-09-27T11:24:30Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.89.202.51", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3EDR81TEPX7F7KY7", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd30691e-67f4-44fd-bddb-b91ade98ad39", "record_id": "flaws_cloudtrail:0000156:bd30691e-67f4-44fd-bddb-b91ade98ad39", "row_index": 156, "timestamp": "2018-09-27T11:24:31Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd30691e-67f4-44fd-bddb-b91ade98ad39", "eventTime": "2018-09-27T11:24:31Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "awf8q85i5ccHCRZMUj2KTV61RXliVvuByRlsvF6QmAWxeKsyQSQjp8PFMjh8F54HW/lur3bPi1IGFPdvcUXexQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "031738c-1aaf-4bad-a5c2-69d306a7e7e4", "record_id": "flaws_cloudtrail:0000157:031738c-1aaf-4bad-a5c2-69d306a7e7e4", "row_index": 157, "timestamp": "2018-09-27T11:24:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "031738c-1aaf-4bad-a5c2-69d306a7e7e4", "eventTime": "2018-09-27T11:24:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "w94poH9QxmqQEGosFkb2IFqWVuCtfahkuSMgAlF9FMdSM9SsiWUdRi2un3udy+NC7m90/I+R+IDc/PCLLzy7eQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6763b526-edf4-41f3-8eae-2e819dc437e6", "record_id": "flaws_cloudtrail:0000158:6763b526-edf4-41f3-8eae-2e819dc437e6", "row_index": 158, "timestamp": "2018-09-27T11:24:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6763b526-edf4-41f3-8eae-2e819dc437e6", "eventTime": "2018-09-27T11:24:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YpQKVBnSv8JU40AipFbYklMLwHvdOAXplsyOSg66pQghMzs2a/qyLGj4KPzXa/hOj25pP2FnrmIJAW/M1gE0cQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84c4e78b-12e3-4e0b-bbdc-c23b44a95e35", "record_id": "flaws_cloudtrail:0000159:84c4e78b-12e3-4e0b-bbdc-c23b44a95e35", "row_index": 159, "timestamp": "2018-09-27T11:24:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84c4e78b-12e3-4e0b-bbdc-c23b44a95e35", "eventTime": "2018-09-27T11:24:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nNNGzzjz6dchDTac6UB99d2Rev5RMSeOJI651RzfnkUEUQRrsE15BzqCXZEiVEbIjsOByqv0CQbX+B6eEx3Jcg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6b4ef7f-9b28-4090-93c8-4d5cc32f4281", "record_id": "flaws_cloudtrail:0000160:c6b4ef7f-9b28-4090-93c8-4d5cc32f4281", "row_index": 160, "timestamp": "2018-09-27T11:24:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6b4ef7f-9b28-4090-93c8-4d5cc32f4281", "eventTime": "2018-09-27T11:24:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "jwepyww996heR61iFdL0l654M+U1NLva1wiOy2H/Z5hJ/o5qUCpzslMak5AwUl8nsvuyVaQZgdu1cXnKBbRLTA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b5e6b71-dd86-41ec-9905-ab4bc5bb49eb", "record_id": "flaws_cloudtrail:0000161:5b5e6b71-dd86-41ec-9905-ab4bc5bb49eb", "row_index": 161, "timestamp": "2018-09-27T11:24:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b5e6b71-dd86-41ec-9905-ab4bc5bb49eb", "eventTime": "2018-09-27T11:24:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "xEDCO3G7eEVPmt9fnNtiQZNWYuSxGGTFBcXlx029pkHVlAhoGUuhrpvCRDU2PQ+kaEbJ625COsv29HOip0ZglA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aab32e6-d603-4505-9be2-5a28878f93cd", "record_id": "flaws_cloudtrail:0000162:2aab32e6-d603-4505-9be2-5a28878f93cd", "row_index": 162, "timestamp": "2018-09-27T11:24:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aab32e6-d603-4505-9be2-5a28878f93cd", "eventTime": "2018-09-27T11:24:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d896cd27-a97a-44a6-8606-4a415bc719fa", "record_id": "flaws_cloudtrail:0000163:d896cd27-a97a-44a6-8606-4a415bc719fa", "row_index": 163, "timestamp": "2018-09-27T11:24:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d896cd27-a97a-44a6-8606-4a415bc719fa", "eventTime": "2018-09-27T11:24:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "dglsApWHHB7mcquMhxgxjdlpwUn9zrTVxj6v55UV2evk+eAHbCoTl1pva4Z5DJg4mOb3w1SOxqi8VJStLbNNKA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f251513a-3eb8-411c-9649-492f6894e31c", "record_id": "flaws_cloudtrail:0000164:f251513a-3eb8-411c-9649-492f6894e31c", "row_index": 164, "timestamp": "2018-09-27T11:24:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f251513a-3eb8-411c-9649-492f6894e31c", "eventTime": "2018-09-27T11:24:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "MSGkjZQBPjACiwC04WD/DTgi++NT7HzMi/wOEGp6x5sCBIuq1TRj6ssMyx6ieQxj/meFbNq68ymslXWozmjnTg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97938f5-cbea-4b55-9c8f-d73a7ac452b0", "record_id": "flaws_cloudtrail:0000165:97938f5-cbea-4b55-9c8f-d73a7ac452b0", "row_index": 165, "timestamp": "2018-09-27T11:24:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97938f5-cbea-4b55-9c8f-d73a7ac452b0", "eventTime": "2018-09-27T11:24:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "f8NoXtyv1PR8Iz/CFhSvv5PB8pc+bozJ6LS0V3b7WLMuUrCM3B95bnvua/xkq1FHuJ0axkKiBjww7IcjtxNp3w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fac10968-2c05-4c44-8d7e-4b1d06ee049c", "record_id": "flaws_cloudtrail:0000166:fac10968-2c05-4c44-8d7e-4b1d06ee049c", "row_index": 166, "timestamp": "2018-09-27T11:24:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fac10968-2c05-4c44-8d7e-4b1d06ee049c", "eventTime": "2018-09-27T11:24:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "V/vx15HOKK7zlVdBegy5RrOOEfxNpvnXV2aSP7EY/hBl2HJDTf0+FIbbkuzJbFZ/GmiegB+Jsp6N5hU6sFswlw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee071c46-1ba8-4241-bfa6-5f05f598c71d", "record_id": "flaws_cloudtrail:0000167:ee071c46-1ba8-4241-bfa6-5f05f598c71d", "row_index": 167, "timestamp": "2018-09-27T11:24:37Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee071c46-1ba8-4241-bfa6-5f05f598c71d", "eventTime": "2018-09-27T11:24:37Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "fcuGXRyoSeGqTgCH4BP2z8Gxx++OjTuCUufLqa0BcE/hhIChbSCpUaONv389A6k1ONG1eK9HZDhc+N6oEP0cvg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe5ae2f9-9fe2-4e72-aa9a-677b326ef11f", "record_id": "flaws_cloudtrail:0000168:fe5ae2f9-9fe2-4e72-aa9a-677b326ef11f", "row_index": 168, "timestamp": "2018-09-27T11:24:37Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe5ae2f9-9fe2-4e72-aa9a-677b326ef11f", "eventTime": "2018-09-27T11:24:37Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZkpWq7zpiN56i9ssLrtIPGdVto3ILCzoL3p2tiV2LVijHi8MtWMIdQufq8wT2qi60jMunf8c+wD8j4Tako41Lw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc73721-0fef-45d9-996c-e0d3823ecd4a", "record_id": "flaws_cloudtrail:0000169:fc73721-0fef-45d9-996c-e0d3823ecd4a", "row_index": 169, "timestamp": "2018-09-27T11:24:37Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc73721-0fef-45d9-996c-e0d3823ecd4a", "eventTime": "2018-09-27T11:24:37Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9XFCF26nHfqTOmYDDwv+wd0y6GsQmYnzq4G7ANynq8ahIpSOArICDNoRSHL+JruWaszMwmX9cnMREtkhQmZc5w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b575d63-1d5f-447c-8de6-8f7670e48d5a", "record_id": "flaws_cloudtrail:0000170:5b575d63-1d5f-447c-8de6-8f7670e48d5a", "row_index": 170, "timestamp": "2018-09-27T11:24:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b575d63-1d5f-447c-8de6-8f7670e48d5a", "eventTime": "2018-09-27T11:24:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4afnXKWcuhBkAAZU12QU/bDNYJnwGOnrHuxCEZm0k706IEwf/o7LMxUd8No4WR5EyZbJVoTfvU8Al5FV0jXM1w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fda5c48-6215-4c24-9181-c4ce47cb089f", "record_id": "flaws_cloudtrail:0000171:8fda5c48-6215-4c24-9181-c4ce47cb089f", "row_index": 171, "timestamp": "2018-09-27T11:24:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fda5c48-6215-4c24-9181-c4ce47cb089f", "eventTime": "2018-09-27T11:24:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "OA8XgrWCJwdZB5GrjtWO26Ztp+DPHFPIOlGmtxRivTKc0o+UtFkpKp8W9Ud8uumDghwe00nludkBQMRt5IIhcA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1fad18-9786-4f28-82a2-d5e46f1e88cf", "record_id": "flaws_cloudtrail:0000172:fb1fad18-9786-4f28-82a2-d5e46f1e88cf", "row_index": 172, "timestamp": "2018-09-27T11:24:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1fad18-9786-4f28-82a2-d5e46f1e88cf", "eventTime": "2018-09-27T11:24:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "G8xJn3wy2mfI6HhfO+vR+sMsGBKNtUHX566Y5gfihuFYhstmFtCwOeyzNvcbkOor8vYW+c79oFeZ/zL2u4VeLA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd52400a-6904-4230-b8bc-554ba48283ec", "record_id": "flaws_cloudtrail:0000173:fd52400a-6904-4230-b8bc-554ba48283ec", "row_index": 173, "timestamp": "2018-09-27T11:24:40Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd52400a-6904-4230-b8bc-554ba48283ec", "eventTime": "2018-09-27T11:24:40Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "v3m76u3NW+Z9801PScryrKVd9gR/WrcxbqzFa3W5n3tDl7EWa13y5SklAhoUIUN8wR9psAUapcSmxI8dAKKe7w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec59b4c6-3a52-423b-8a2a-51047d994464", "record_id": "flaws_cloudtrail:0000174:ec59b4c6-3a52-423b-8a2a-51047d994464", "row_index": 174, "timestamp": "2018-09-27T11:24:40Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec59b4c6-3a52-423b-8a2a-51047d994464", "eventTime": "2018-09-27T11:24:40Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LSN4sy0RF3lEuh8FHleTLc3l8qW+0kJJfz+mXxDxeRXYQNFcJDDZFPRKQZenn9lYjxXu6P5kn2NcUkoznZkDgQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "083e8742-a366-4aaa-946c-49c0a3449b1f", "record_id": "flaws_cloudtrail:0000175:083e8742-a366-4aaa-946c-49c0a3449b1f", "row_index": 175, "timestamp": "2018-09-27T11:24:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "083e8742-a366-4aaa-946c-49c0a3449b1f", "eventTime": "2018-09-27T11:24:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "aire5yVGnpCEI+lFpW9pbAe4GdYMc4L6f/r2Dbhasy63YaoNAGPYXyMiowk0EVJeVAOSkN9mKektJiadA3jNLQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbf04226-2789-4603-a6d5-2dd6be4a33e7", "record_id": "flaws_cloudtrail:0000176:dbf04226-2789-4603-a6d5-2dd6be4a33e7", "row_index": 176, "timestamp": "2018-09-27T11:24:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbf04226-2789-4603-a6d5-2dd6be4a33e7", "eventTime": "2018-09-27T11:24:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "kAgvYuESwzreJCaGuZWbe2IQbgVZ1bGECDyxd4O9EVhJepECHfdyjthvom0ZZtS+iq2KNnR+tGVcfYW2zE0djQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dd8edde-f5b4-4b68-a9ff-60c04139fb61", "record_id": "flaws_cloudtrail:0000177:5dd8edde-f5b4-4b68-a9ff-60c04139fb61", "row_index": 177, "timestamp": "2018-09-27T11:24:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dd8edde-f5b4-4b68-a9ff-60c04139fb61", "eventTime": "2018-09-27T11:24:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "x6sr01/AQadTHg4hOdIu+hnXYnXO01DCge/uBlvMz5B76rJoj8ob8N39DLDY8S3c0wMrkk2IsG4jHu6MQncQgQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "128eac00-2355-48b1-a984-891408b8fe04", "record_id": "flaws_cloudtrail:0000178:128eac00-2355-48b1-a984-891408b8fe04", "row_index": 178, "timestamp": "2018-09-27T11:24:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "128eac00-2355-48b1-a984-891408b8fe04", "eventTime": "2018-09-27T11:24:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "pcYgudKkVL/2R2E7tRPmoWE9NKxPV9V9dwijS4lJvMDoc7WU7UYlZ9tpvONrrWEigGa/86aPxXVRJW5GJcymmA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b41e9673-b9e1-424a-9aa7-626fbce857071", "record_id": "flaws_cloudtrail:0000179:b41e9673-b9e1-424a-9aa7-626fbce857071", "row_index": 179, "timestamp": "2018-09-27T11:24:43Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b41e9673-b9e1-424a-9aa7-626fbce857071", "eventTime": "2018-09-27T11:24:43Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "E6CGC56o65+EmEszE9la7VbdY8K7SdhdA874pUjsQjYF79QquxtpoCDrKr1HeEPFXsORrt0c+qP4PflDUAfLqg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f059899b-f345-4240-a6df-8c7ffe1ecb4b", "record_id": "flaws_cloudtrail:0000180:f059899b-f345-4240-a6df-8c7ffe1ecb4b", "row_index": 180, "timestamp": "2018-09-27T11:24:43Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f059899b-f345-4240-a6df-8c7ffe1ecb4b", "eventTime": "2018-09-27T11:24:43Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gEiE/SryOGEEsQMPHlQVQSnZw/j88i5c3h2vm1+82lze2ygTGFKFcINNA2m4LtHcBC8wnEpuqlcFz8kdTny7DA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54abc9cc-2b7d-40ae-88eb-78131c8f375f", "record_id": "flaws_cloudtrail:0000181:54abc9cc-2b7d-40ae-88eb-78131c8f375f", "row_index": 181, "timestamp": "2018-09-27T11:24:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54abc9cc-2b7d-40ae-88eb-78131c8f375f", "eventTime": "2018-09-27T11:24:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "SHGxZCyqwVkCxikhXJhx65wfDAGruL3R52cRcFcsSBJmnxfY4bV44vHRnsBAG4fP9KlAYDp87kuLUVO6nQYb6g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e08138-ed35-4b9f-9a10-e6556e52a7c6", "record_id": "flaws_cloudtrail:0000182:e08138-ed35-4b9f-9a10-e6556e52a7c6", "row_index": 182, "timestamp": "2018-09-27T11:24:45Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e08138-ed35-4b9f-9a10-e6556e52a7c6", "eventTime": "2018-09-27T11:24:45Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iWEFS0pxd3YOPrsbhnLsAd4hLQv5zkWTT2KGJAKEdkbD1grOx9wSxPB3WY+7GkqlyemWoi5M83PkX1KF9nN/cw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b987790-5a40-456a-8a60-d8a7f754fa57", "record_id": "flaws_cloudtrail:0000183:b987790-5a40-456a-8a60-d8a7f754fa57", "row_index": 183, "timestamp": "2018-09-27T11:24:45Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b987790-5a40-456a-8a60-d8a7f754fa57", "eventTime": "2018-09-27T11:24:45Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "QNkkVukaZ3y6+slAfFmy2AYzj+lMtdLtsXUh1jaAG4bK5LbadaHRUjP9Nbjb02wWigyFdLd8MtRrI/GItFIR9A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19af17be-f158-4dcc-b709-3bea38e5a360", "record_id": "flaws_cloudtrail:0000184:19af17be-f158-4dcc-b709-3bea38e5a360", "row_index": 184, "timestamp": "2018-09-27T11:24:46Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19af17be-f158-4dcc-b709-3bea38e5a360", "eventTime": "2018-09-27T11:24:46Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "A3DtbwR8BDKRbsb0t3NAeY1eQbrXtisTRzFwZRkaBK9+YsCV5oAtuGDGV9sK9WEW0M1xHIPm1FDsLj5N/DwHqw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "565ed3dc-87f1-4392-8973-2c5384bb0531", "record_id": "flaws_cloudtrail:0000185:565ed3dc-87f1-4392-8973-2c5384bb0531", "row_index": 185, "timestamp": "2018-09-27T11:24:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "565ed3dc-87f1-4392-8973-2c5384bb0531", "eventTime": "2018-09-27T11:24:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eC3dmvODbvntwB+eSFtmwyaAyULsFRa/V2QEbbydI/URYrBSj8DxE6Vt0GLY5pqXmoNRIckiVvSus+yjBf7hwg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82b150c1-44f9-4f9d-a2e6-76e378c824ce", "record_id": "flaws_cloudtrail:0000186:82b150c1-44f9-4f9d-a2e6-76e378c824ce", "row_index": 186, "timestamp": "2018-09-27T11:24:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82b150c1-44f9-4f9d-a2e6-76e378c824ce", "eventTime": "2018-09-27T11:24:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DpPMcyG68jhcp6DBhgh5eUOL6882iaUzYUhG/nggvIkgBoNR8wtbNnC7yqHN8G6beJWAJDL5F7iMuWsfkYKa5w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ad50b35-1191-4ef9-b82c-c4ca95136168", "record_id": "flaws_cloudtrail:0000187:2ad50b35-1191-4ef9-b82c-c4ca95136168", "row_index": 187, "timestamp": "2018-09-27T11:24:48Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ad50b35-1191-4ef9-b82c-c4ca95136168", "eventTime": "2018-09-27T11:24:48Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EbyFgandV4wPUFTfxyC8BfNW1YWCKQBH9i9O63MNfr9gKbYHwJtVN7Fge0+NYCs43CKiwbCog7F3W8W73LqJ+A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e0a0778-8007-4dd6-ad1a-00d0c87bb1ff", "record_id": "flaws_cloudtrail:0000188:4e0a0778-8007-4dd6-ad1a-00d0c87bb1ff", "row_index": 188, "timestamp": "2018-09-27T11:24:48Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e0a0778-8007-4dd6-ad1a-00d0c87bb1ff", "eventTime": "2018-09-27T11:24:48Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "PSt//OtsQBUf27+qZJEHPxX2Big+lHYmqZplLh9G+uFmFuO34QjD7RrHnH4kMh2dn8hYxolTuoa+p49/Th7HPg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dad1f509-7f29-4e10-aca0-cd189467f2f69", "record_id": "flaws_cloudtrail:0000189:dad1f509-7f29-4e10-aca0-cd189467f2f69", "row_index": 189, "timestamp": "2018-09-27T11:24:48Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dad1f509-7f29-4e10-aca0-cd189467f2f69", "eventTime": "2018-09-27T11:24:48Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZjuWdQ6D+z1Av1Fo8dB8khQXikRLIzAkNiG8LE1kdzyvTaNnppXgN6Xyg63KyAEPuZ0c8AISA26YwZPhnlVvPw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "461280d6f-1497-4c2d-b0cf-9fd18d7975fe", "record_id": "flaws_cloudtrail:0000190:461280d6f-1497-4c2d-b0cf-9fd18d7975fe", "row_index": 190, "timestamp": "2018-09-27T11:24:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "461280d6f-1497-4c2d-b0cf-9fd18d7975fe", "eventTime": "2018-09-27T11:24:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bc417b1-3d9b-456a-8660-69d6d3efd29f", "record_id": "flaws_cloudtrail:0000191:9bc417b1-3d9b-456a-8660-69d6d3efd29f", "row_index": 191, "timestamp": "2018-09-27T11:24:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bc417b1-3d9b-456a-8660-69d6d3efd29f", "eventTime": "2018-09-27T11:24:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "oTcaKVZ1DoC0nhPeLcgFBEf/C2bjcGewwNFGfqtoW9iyJ+pFSkhi5CzwKn3DrDzFJT7goCfOlAlVgeN04yJgtw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dec100801-25f0-4720-bb02-c8f252cde03e", "record_id": "flaws_cloudtrail:0000192:dec100801-25f0-4720-bb02-c8f252cde03e", "row_index": 192, "timestamp": "2018-09-27T11:24:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dec100801-25f0-4720-bb02-c8f252cde03e", "eventTime": "2018-09-27T11:24:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "flWLDuCv67TXXRpjf0PPuMeFRLVo0YWpoNAYMHdYH6I3ZDSioUQolCJnjP65IwnwV98vall1blbw5wne59Wm9w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ecbc949-70f4-48b2-a4fd-818cc4e70630", "record_id": "flaws_cloudtrail:0000193:1ecbc949-70f4-48b2-a4fd-818cc4e70630", "row_index": 193, "timestamp": "2018-09-27T11:24:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ecbc949-70f4-48b2-a4fd-818cc4e70630", "eventTime": "2018-09-27T11:24:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "l8qVgOxcI1RJUw0R+fnLvfyErwNFKJUCgA5o5CZBd5a52B1M5N2gKsvzsYkiTepVlUgQ+SI4kzSnGCqsYWlzPg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ead94d1-da4b-43b8-b1ba-83541c20f338", "record_id": "flaws_cloudtrail:0000194:0ead94d1-da4b-43b8-b1ba-83541c20f338", "row_index": 194, "timestamp": "2018-09-27T11:24:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ead94d1-da4b-43b8-b1ba-83541c20f338", "eventTime": "2018-09-27T11:24:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "SUi56x/g7B34mW62nqbM9AWNlNJSwu+Hdi4/XSnsnrwDD40pGZxJbqAiZ0iXYR16Jln5/ZdZzLA3urnUt0Ucpw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f90806-0e58-49ad-afde-bff05987dc7e", "record_id": "flaws_cloudtrail:0000195:f90806-0e58-49ad-afde-bff05987dc7e", "row_index": 195, "timestamp": "2018-09-27T11:24:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f90806-0e58-49ad-afde-bff05987dc7e", "eventTime": "2018-09-27T11:24:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Liu4p4hZbIZsOcJfZaFdLB5DxnBLeHkAVX88i48rFj7VB5McFxnxdNeLch4bYVyJ9+QeXqd4a0El9Q0Jbg/qXw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "294f4535-7a61-408f-b7cc-9a6ff2c2ea63", "record_id": "flaws_cloudtrail:0000196:294f4535-7a61-408f-b7cc-9a6ff2c2ea63", "row_index": 196, "timestamp": "2018-09-27T11:24:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "294f4535-7a61-408f-b7cc-9a6ff2c2ea63", "eventTime": "2018-09-27T11:24:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ezlKNR3apCMlHoGHNqkRpf9ROdbddcEbB+QUolG6KozHUD0xTxDly6xCDVBoRvDcz3/ZTHuOyiV5bmqDH2dHVA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5348b66d-daa8-4953-be2e-98a6d188d7d0", "record_id": "flaws_cloudtrail:0000197:5348b66d-daa8-4953-be2e-98a6d188d7d0", "row_index": 197, "timestamp": "2018-09-27T11:24:54Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5348b66d-daa8-4953-be2e-98a6d188d7d0", "eventTime": "2018-09-27T11:24:54Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "zJVfc4VBxPSJ/GofoVrkAJoHzKDQ5ukocHx9FYjVKH2Y2Dq9L6pQKGkHhbfJqk+xCr4skpqyiI+LcEhuPCpczg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ffd2731-e48f-499c-849c-6b9afbbc34a6", "record_id": "flaws_cloudtrail:0000198:6ffd2731-e48f-499c-849c-6b9afbbc34a6", "row_index": 198, "timestamp": "2018-09-27T11:24:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ffd2731-e48f-499c-849c-6b9afbbc34a6", "eventTime": "2018-09-27T11:24:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "mfi99CXuyQE3xa8Yj/Rrl9vWKEgYrUtGxoGaAMCyXUAHOHaniLJiMb+wBYeBT03bcwgbMaH+PyGrI/kxReOXIw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30be6a03-ea22-4eb7-a071-a5b5b21510", "record_id": "flaws_cloudtrail:0000199:30be6a03-ea22-4eb7-a071-a5b5b21510", "row_index": 199, "timestamp": "2018-09-27T11:24:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30be6a03-ea22-4eb7-a071-a5b5b21510", "eventTime": "2018-09-27T11:24:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YM8V3nmxagxSQhRAXygCq6XAThet8xXpi8Hhca1mKYiOnw17YL/oS8WKrO2CNxlzE2CZvbxB6aNzUFUiK9Af8Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "872c944c-bcb8-4486-badf-26b6d213c03f", "record_id": "flaws_cloudtrail:0000200:872c944c-bcb8-4486-badf-26b6d213c03f", "row_index": 200, "timestamp": "2018-09-27T11:24:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "872c944c-bcb8-4486-badf-26b6d213c03f", "eventTime": "2018-09-27T11:24:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "XwRQLRomclBLFoNCgaraxAXfyzCI2HIW9uKLCjAKJ8u3mPiqfR1Gm6EWAZZwRv4Ca4bHdD5nnqS8dZKR7p2o6A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f00b947f-e4b5-4526-bfcd-b50778c5fcad", "record_id": "flaws_cloudtrail:0000201:f00b947f-e4b5-4526-bfcd-b50778c5fcad", "row_index": 201, "timestamp": "2018-09-27T11:24:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f00b947f-e4b5-4526-bfcd-b50778c5fcad", "eventTime": "2018-09-27T11:24:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "i0orIi/3MvFhfkGiOoDbXAnhZl5Ff5xIdhpiuDd048jNuKUKqz42qJ2jJSXmIMyBtNRvWRqnMPvdYrzTMuGGMg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77dd3ed2-f3a7-48d1-889a-12a5ee046006", "record_id": "flaws_cloudtrail:0000202:77dd3ed2-f3a7-48d1-889a-12a5ee046006", "row_index": 202, "timestamp": "2018-09-27T11:24:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77dd3ed2-f3a7-48d1-889a-12a5ee046006", "eventTime": "2018-09-27T11:24:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "zG2L0TQIpn02xzbXlgSP/lAVsm5qBol5EVNYQE+BelFBBAC+XP2Oh66EgqgS9nnWOHZTROQ6kbWm6PVRZ0KR3w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9287dfa4-8bbb-4342-99af-48deaafac751", "record_id": "flaws_cloudtrail:0000203:9287dfa4-8bbb-4342-99af-48deaafac751", "row_index": 203, "timestamp": "2018-09-27T11:24:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9287dfa4-8bbb-4342-99af-48deaafac751", "eventTime": "2018-09-27T11:24:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RgfqVdtlmESSIgmTyBSOl26DOl21bG2T5iTaIGTttJVAxc/W5MlMw3qd/nu4eU6OqvvterB0BJ6W1z4Eyas26g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77e787b2-9d93-4797-81ba-08c0f9d2e7d4", "record_id": "flaws_cloudtrail:0000204:77e787b2-9d93-4797-81ba-08c0f9d2e7d4", "row_index": 204, "timestamp": "2018-09-27T11:24:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77e787b2-9d93-4797-81ba-08c0f9d2e7d4", "eventTime": "2018-09-27T11:24:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tY8AjoZ9tjfxtx41u9veOmIk0QVHvuYMHUJ4dCCABov6TM0hR+3JPGC0sLzmQh+RfFWe3xii6UMIhB2LJ3/9wQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48a65a93-ba90-4c83-84e4-4ea5823f2c85", "record_id": "flaws_cloudtrail:0000205:48a65a93-ba90-4c83-84e4-4ea5823f2c85", "row_index": 205, "timestamp": "2018-09-27T11:24:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48a65a93-ba90-4c83-84e4-4ea5823f2c85", "eventTime": "2018-09-27T11:24:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "6GnaJ09849xpI/4LdZqCgM3dv8YW8GToYrbOBtoGgrWoFxrEXS35D5QBezTFFbBxSXZWrAuuXzZXz8l6qPc63w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0d40a13-44c6-4b94-ac71-cc076fb98a51", "record_id": "flaws_cloudtrail:0000206:b0d40a13-44c6-4b94-ac71-cc076fb98a51", "row_index": 206, "timestamp": "2018-09-27T11:25:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0d40a13-44c6-4b94-ac71-cc076fb98a51", "eventTime": "2018-09-27T11:25:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "FuIISOuiJQb/1MemaV49LSYQj/4sxA3qH+o+gRKC0wBfVbyDNB1ojCOlAnrdG4iOFXpSuESxRF7NR/bRCQ1F6w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eedad172-f396-407b-a08b-729d68a9f807", "record_id": "flaws_cloudtrail:0000207:eedad172-f396-407b-a08b-729d68a9f807", "row_index": 207, "timestamp": "2018-09-27T11:25:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eedad172-f396-407b-a08b-729d68a9f807", "eventTime": "2018-09-27T11:25:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "KYxZsLFMehh42KBAreTJMAAugpa2jB/r3NP3gS7C26/IRzD4k+oYlpEewKtUKYRdfQlixLvncH8Oybt4Ui/qFQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2677a5f6-8a56-4312-bfd8-e0ae9d04c42e", "record_id": "flaws_cloudtrail:0000208:2677a5f6-8a56-4312-bfd8-e0ae9d04c42e", "row_index": 208, "timestamp": "2018-09-27T11:25:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2677a5f6-8a56-4312-bfd8-e0ae9d04c42e", "eventTime": "2018-09-27T11:25:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "G6A8zNYhU20aMbxDjyBUSUDLNrwVb3u4EhWeh2FK/NpFOmT/dpswXAtzTbI/7084BredZdnKXzY60jwdhv1zoQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bb4e48-5993-4d73-87bc-c15ab4aa820b", "record_id": "flaws_cloudtrail:0000209:f2bb4e48-5993-4d73-87bc-c15ab4aa820b", "row_index": 209, "timestamp": "2018-09-27T11:25:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bb4e48-5993-4d73-87bc-c15ab4aa820b", "eventTime": "2018-09-27T11:25:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "h6AAUbTuNyh5bdOQMpOUbJON3lKeBtjjpr/wWDWdoejYuI3tECNfHHnQ7zX9lNAICdX/VJzhUlDdhXNz21Blug=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9901f62-30f5-4294-ae67-86595a5e6", "record_id": "flaws_cloudtrail:0000210:e9901f62-30f5-4294-ae67-86595a5e6", "row_index": 210, "timestamp": "2018-09-27T11:25:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9901f62-30f5-4294-ae67-86595a5e6", "eventTime": "2018-09-27T11:25:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "528P1UcyIg3faOJRohfrThqqf/Ub9e1bVy1YL5NoRNosUrKJt7j/nyer2aG3caFPe8Qqh5k/mVm0hpf2zhSagQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c7d36e8-8e27-4b09-b2de-3e2cae9df9d2", "record_id": "flaws_cloudtrail:0000211:9c7d36e8-8e27-4b09-b2de-3e2cae9df9d2", "row_index": 211, "timestamp": "2018-09-27T11:25:02Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3EDR81TEPX7F7KY7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.89.202.51", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 542, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c7d36e8-8e27-4b09-b2de-3e2cae9df9d2", "eventTime": "2018-09-27T11:25:02Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.89.202.51", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3EDR81TEPX7F7KY7", "userName": "Level6"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6b795d0-2c23-447e-b894-d8cacb5238ee", "record_id": "flaws_cloudtrail:0000212:a6b795d0-2c23-447e-b894-d8cacb5238ee", "row_index": 212, "timestamp": "2018-09-27T11:25:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6b795d0-2c23-447e-b894-d8cacb5238ee", "eventTime": "2018-09-27T11:25:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/Z165IH67s9seNMxDElZUHh9Nw9WMTskAl//5syQjn4MUuFdvMjBZTrlhWjIAG2EoEA7O5Gg7KkWZ8i3An8Vtw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc1adfe2-d81e-4106-aa05-3bbb77ffadc1", "record_id": "flaws_cloudtrail:0000213:bc1adfe2-d81e-4106-aa05-3bbb77ffadc1", "row_index": 213, "timestamp": "2018-09-27T11:25:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc1adfe2-d81e-4106-aa05-3bbb77ffadc1", "eventTime": "2018-09-27T11:25:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "+1JtPAHL/nEMIhexQSUDeeD5g6Zje1lZlyeDHfuyvORFXAQ6sfwDeHdAtAnAFWzBKsGe2FeXEpU0i8DgjzQdwA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b0c9b92-7964-41d4-b6c9-037c82f4004b", "record_id": "flaws_cloudtrail:0000214:9b0c9b92-7964-41d4-b6c9-037c82f4004b", "row_index": 214, "timestamp": "2018-09-27T11:25:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b0c9b92-7964-41d4-b6c9-037c82f4004b", "eventTime": "2018-09-27T11:25:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "lSKV1/JSVt9erztPxyVejAannDUbOjWmbjiHFn/kK0PErNNPug9XL17owat9Ka7sQG94LeJ9B1z1751UJKVedQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c55b64ca-fcb7-4579-b160-e3d9f88450", "record_id": "flaws_cloudtrail:0000215:c55b64ca-fcb7-4579-b160-e3d9f88450", "row_index": 215, "timestamp": "2018-09-27T11:25:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c55b64ca-fcb7-4579-b160-e3d9f88450", "eventTime": "2018-09-27T11:25:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "M3Nx/FVeQ8xxvnB3QMIzEMLaDQzwqbWtJjZM3Y4DI34T4nQ/fzcf5NVvXbOV0eoPGeeBA4YpXvmVnze3A+3RpQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf7f8aa-a383-4f58-a0fc-b323c838770a", "record_id": "flaws_cloudtrail:0000216:fdf7f8aa-a383-4f58-a0fc-b323c838770a", "row_index": 216, "timestamp": "2018-09-27T11:25:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf7f8aa-a383-4f58-a0fc-b323c838770a", "eventTime": "2018-09-27T11:25:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f190589eb-4e97-493f-9f45-197ff29d09d4", "record_id": "flaws_cloudtrail:0000217:f190589eb-4e97-493f-9f45-197ff29d09d4", "row_index": 217, "timestamp": "2018-09-27T11:25:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f190589eb-4e97-493f-9f45-197ff29d09d4", "eventTime": "2018-09-27T11:25:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "T3vN3snyulna/d2aplSt5xnBCWrkpdylN7ZUXTil5SnxHxi060cEefXzgGx4LhUMasqE7i04JlRduxHoRIWqSg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fca9a25-26f5-4f68-9afe-078eb68ef892", "record_id": "flaws_cloudtrail:0000218:1fca9a25-26f5-4f68-9afe-078eb68ef892", "row_index": 218, "timestamp": "2018-09-27T11:25:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fca9a25-26f5-4f68-9afe-078eb68ef892", "eventTime": "2018-09-27T11:25:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EJaey8z/Al4XX0yHDybNPDCOBp3PH/95FvnhIaPCB+UUXYl+kuBXSxZFm+ZH1GDYTdiY4w2YV+swBEG8CZDOrQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d981ebc8-d748-42bf-8639-2834d52d5aed", "record_id": "flaws_cloudtrail:0000219:d981ebc8-d748-42bf-8639-2834d52d5aed", "row_index": 219, "timestamp": "2018-09-27T11:25:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d981ebc8-d748-42bf-8639-2834d52d5aed", "eventTime": "2018-09-27T11:25:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "OpvLvYBio2PAxWMVozViQ3cheAZimO+KdjW3h271H9LA8KrTZ5zoYAQoyCitgWv15FX3L3p07AzsvIoydU8JTQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3172b822-71ff-46e1-826c-481263dbacd1", "record_id": "flaws_cloudtrail:0000220:3172b822-71ff-46e1-826c-481263dbacd1", "row_index": 220, "timestamp": "2018-09-27T11:25:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3172b822-71ff-46e1-826c-481263dbacd1", "eventTime": "2018-09-27T11:25:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/tiH6ugq1Kfj1tQ7JtiywUTRxj9zl0RFTy+6gXmqlYX8o0tsp5Th+JgIi7FPADY/+hvbEWLvbfzfY4qwRtWFxg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ec635c3-d052-4416-8935-4cde91ac02a5", "record_id": "flaws_cloudtrail:0000221:7ec635c3-d052-4416-8935-4cde91ac02a5", "row_index": 221, "timestamp": "2018-09-27T11:25:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ec635c3-d052-4416-8935-4cde91ac02a5", "eventTime": "2018-09-27T11:25:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Q6PaRlyAJ9/Xdf1ducY+SNtfrJ5KjE68WL1VYwSPTKrfL5xp794lFEMwTKayHsnm7k6edqlOG8Bvhj5uD+B+CQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbb75bfb-2cf1-45b4-8687-3a25e41b2708", "record_id": "flaws_cloudtrail:0000222:cbb75bfb-2cf1-45b4-8687-3a25e41b2708", "row_index": 222, "timestamp": "2018-09-27T11:25:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbb75bfb-2cf1-45b4-8687-3a25e41b2708", "eventTime": "2018-09-27T11:25:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "GQGM2Jgl76U7F+vQe/4CKz02dQB39xG5tFG/KGRLe//rRBl3WBJzO4E4nyrUqkhzOYio2reeNY+8uakRJCTvJw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a22a4387-7ecc-4026-9536-1c986f2cdece", "record_id": "flaws_cloudtrail:0000223:a22a4387-7ecc-4026-9536-1c986f2cdece", "row_index": 223, "timestamp": "2018-09-27T11:25:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a22a4387-7ecc-4026-9536-1c986f2cdece", "eventTime": "2018-09-27T11:25:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "x6ZagnywAL62Joo19W8o3BkFQajIXx+3DRIOc2PjZ9vqsg/h3fBzBq8pae0n4r2xO2qIwDOdeFt0vd2NrFkKcw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "811375d-d3b9-4d32-90d2-ce329b9aff9e", "record_id": "flaws_cloudtrail:0000224:811375d-d3b9-4d32-90d2-ce329b9aff9e", "row_index": 224, "timestamp": "2018-09-27T11:25:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "811375d-d3b9-4d32-90d2-ce329b9aff9e", "eventTime": "2018-09-27T11:25:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "97m32NKffNtZxggwYYOaq6xVgBgu0tFltFs/zpYGEYy5Uc3bTfRmK48ogpw+WpvW2/ncI95vL6byuVY2kTNPzg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9b3e505-e2ff-4803-bc5b-e5d18f34e75e", "record_id": "flaws_cloudtrail:0000225:b9b3e505-e2ff-4803-bc5b-e5d18f34e75e", "row_index": 225, "timestamp": "2018-09-27T11:25:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9b3e505-e2ff-4803-bc5b-e5d18f34e75e", "eventTime": "2018-09-27T11:25:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nURRb3y68MsMEv90YKtJJPWChv4wCpwkpORJXMDXX5VRsJ9sDLkDIZ2TV7gOAzcg0rhmsaWW/pq73axSn5BzhQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57eb1a8c-d276-427d-b4d2-2e058c77dd7a", "record_id": "flaws_cloudtrail:0000226:57eb1a8c-d276-427d-b4d2-2e058c77dd7a", "row_index": 226, "timestamp": "2018-09-27T11:25:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57eb1a8c-d276-427d-b4d2-2e058c77dd7a", "eventTime": "2018-09-27T11:25:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "FxNUPdU+Tm3NQAxTpL5Vr9gZhw4njAQdJsL1tt59EeWUdi2+vxokXf8g9V4e45seNWbuCuRHLumwV7aTAiblQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5690a32f-4552-41b5-b19f-3d07fb07f5fb", "record_id": "flaws_cloudtrail:0000227:5690a32f-4552-41b5-b19f-3d07fb07f5fb", "row_index": 227, "timestamp": "2018-09-27T11:25:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5690a32f-4552-41b5-b19f-3d07fb07f5fb", "eventTime": "2018-09-27T11:25:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "kF3BDNj/rey2DI0tsj/XdTOnyJDuLPaavjiXn8IPBdvt3Rr/e2HY6HAxE3P6ZBvw7SJchZD/zi/wKqRWJdkq8A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a32c18d5-5cc9-49a7-9138-a56df518894a", "record_id": "flaws_cloudtrail:0000228:a32c18d5-5cc9-49a7-9138-a56df518894a", "row_index": 228, "timestamp": "2018-09-27T11:25:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a32c18d5-5cc9-49a7-9138-a56df518894a", "eventTime": "2018-09-27T11:25:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "efn3hrW6si1fQFBBeUv82pbCp9Kdh65R9JmUgcPXWv4PWuqJdfklElWhgtI6JS7HQg1q/42UFHttFhKLQtnOOg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14747d4f-712c-4013-b229-9be0a17a028c", "record_id": "flaws_cloudtrail:0000229:14747d4f-712c-4013-b229-9be0a17a028c", "row_index": 229, "timestamp": "2018-09-27T11:25:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14747d4f-712c-4013-b229-9be0a17a028c", "eventTime": "2018-09-27T11:25:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RAlgoNb00Bt4Zkgr6gZFWht3U6av3MYTEeyOft0WBdP/kcDxVL3qFHZKNFEvMobK1PDjovm7trnU/c0qzbxyOg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63e7464e-afb6-4663-8db6-411f2f11412", "record_id": "flaws_cloudtrail:0000230:63e7464e-afb6-4663-8db6-411f2f11412", "row_index": 230, "timestamp": "2018-09-27T11:25:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63e7464e-afb6-4663-8db6-411f2f11412", "eventTime": "2018-09-27T11:25:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "agdlLlHBJuRwsIqL5U+HhW7ir1f23N9hbjre3h0ux7C3KzqvInZfkgrMwZjQ6pApEDZO45lzHm3MR4SjYJfgWw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31972-e1de-4e6f-9e4e-9d359d9acb21", "record_id": "flaws_cloudtrail:0000231:31972-e1de-4e6f-9e4e-9d359d9acb21", "row_index": 231, "timestamp": "2018-09-27T11:25:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31972-e1de-4e6f-9e4e-9d359d9acb21", "eventTime": "2018-09-27T11:25:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RHyEK3ic1F7FfvY/YuyYm1gaLQTmy/wAkGROHVf5CyqXk12oi0I1LYumNCOyGlslhW8ukPnfH6dgnRDnbAUraw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8cfc309-0a42-4e22-b2f9-0944a311694b4", "record_id": "flaws_cloudtrail:0000232:f8cfc309-0a42-4e22-b2f9-0944a311694b4", "row_index": 232, "timestamp": "2018-09-27T11:25:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8cfc309-0a42-4e22-b2f9-0944a311694b4", "eventTime": "2018-09-27T11:25:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "hRWtMTWXgLN0fpHV7xTEkKvnOXGqK1KkINWctuhpN3L30SSA7oPFmkd4c2OdkmFm6G4JN4QjEQrsVwpfyAdXZw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31e3a588-f33c-4dac-a6e8-2210a88985ba", "record_id": "flaws_cloudtrail:0000233:31e3a588-f33c-4dac-a6e8-2210a88985ba", "row_index": 233, "timestamp": "2018-09-27T11:25:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31e3a588-f33c-4dac-a6e8-2210a88985ba", "eventTime": "2018-09-27T11:25:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gdk4Yr1DoPh33UYLJNJU9bRqtT6VuSVWU18VY05nFfD+mbktvN8o5btv/1Ozce4iFy0TVNvuk/R/6fLkYFGnfA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6ece06-2d59-47ae-b259-28744bb076964", "record_id": "flaws_cloudtrail:0000234:4b6ece06-2d59-47ae-b259-28744bb076964", "row_index": 234, "timestamp": "2018-09-27T11:25:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6ece06-2d59-47ae-b259-28744bb076964", "eventTime": "2018-09-27T11:25:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "507436b69-1d51-4145-be1e-92ecd9107a72", "record_id": "flaws_cloudtrail:0000235:507436b69-1d51-4145-be1e-92ecd9107a72", "row_index": 235, "timestamp": "2018-09-27T11:25:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "507436b69-1d51-4145-be1e-92ecd9107a72", "eventTime": "2018-09-27T11:25:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "NivlK8rvq7y+v3+MnT22BvLLbrBIFoL8JfaXaAj3vI5of6tdqDJysnJ2mP8c3MqrTs1KUQFBIBHvSuq/ejBK6g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4196a170-a9c7-4765-b9db-33312646d918", "record_id": "flaws_cloudtrail:0000236:4196a170-a9c7-4765-b9db-33312646d918", "row_index": 236, "timestamp": "2018-09-27T11:25:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4196a170-a9c7-4765-b9db-33312646d918", "eventTime": "2018-09-27T11:25:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "0olackskXT1C2/kOpLpaKIrtgtWdTK9DwHZ5DDxz1Cd6zGGriIxpff+qCuau0rR0b8vFE+H0xpX4vpNtY/vq6Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96b7b2de-eb0e-49d3-a2bc-3c186b611eed", "record_id": "flaws_cloudtrail:0000237:96b7b2de-eb0e-49d3-a2bc-3c186b611eed", "row_index": 237, "timestamp": "2018-09-27T11:25:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96b7b2de-eb0e-49d3-a2bc-3c186b611eed", "eventTime": "2018-09-27T11:25:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qr20eaxAk1lSWlChQD4gkLiq7WpTdNesZ/dB7DON6qPvQ9IM9elZRmOjepwZSv20l/hSrmLU2SM8tP4PoY7zgQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c73df157-c21d-4fec-abcc-c5e2a9c23380", "record_id": "flaws_cloudtrail:0000238:c73df157-c21d-4fec-abcc-c5e2a9c23380", "row_index": 238, "timestamp": "2018-09-27T11:25:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c73df157-c21d-4fec-abcc-c5e2a9c23380", "eventTime": "2018-09-27T11:25:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/V/pr1UojhhzldUKn+gmg8iNGJ/vmmxyHvEcRnLzvepowIJyHfq4y9RIIsSivquVsNqa4H3hwMm0d7bxQTWHMQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "134976b60-f531-4ee8-bcc3-d9e1c970fc08", "record_id": "flaws_cloudtrail:0000239:134976b60-f531-4ee8-bcc3-d9e1c970fc08", "row_index": 239, "timestamp": "2018-09-27T11:25:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "134976b60-f531-4ee8-bcc3-d9e1c970fc08", "eventTime": "2018-09-27T11:25:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "vfS8jFiyW0mLZ3h2E4mBTRdKG2hEaOlWuY66P387fj873KRwmwkXAiX1llUpkYtYl0VXEM2E6GMTzOdsK5Qv+w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7c79ce-6cbf-442c-8d67-40727b9fbb4", "record_id": "flaws_cloudtrail:0000240:3e7c79ce-6cbf-442c-8d67-40727b9fbb4", "row_index": 240, "timestamp": "2018-09-27T11:25:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7c79ce-6cbf-442c-8d67-40727b9fbb4", "eventTime": "2018-09-27T11:25:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "L7h67wo6r9Ca47fD9PM6YDdg0/R/iMW/nVs7sk+OkC5+Fp5GrKgv7To45vXrHpCHMJ5XWoOW/WnsdAb18+x9vg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e63d088f-b059-48af-8e73-30d8a93b5a96", "record_id": "flaws_cloudtrail:0000241:e63d088f-b059-48af-8e73-30d8a93b5a96", "row_index": 241, "timestamp": "2018-09-27T11:25:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e63d088f-b059-48af-8e73-30d8a93b5a96", "eventTime": "2018-09-27T11:25:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "JkksXHBEroWaFnI8pZkz6howRxxhkmcAA6CaQLmoioFBDoemTJm3+6wNkSCTyTdS5i456qPlbKOHKJf7SQkJqg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b628c71c-b6e8-444a-8271-6e6e045e5343", "record_id": "flaws_cloudtrail:0000242:b628c71c-b6e8-444a-8271-6e6e045e5343", "row_index": 242, "timestamp": "2018-09-27T11:25:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b628c71c-b6e8-444a-8271-6e6e045e5343", "eventTime": "2018-09-27T11:25:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8dW1snYUnop64pJyzi8LvEW0IQj8E4HlV/AIuQ4CYXn8Ma2YJNRbIxj8YDcjK1B/9blw7g1HX8iB88L/pykU+A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e31eabe4-3b12-4915-929f-bc0e00d776b8", "record_id": "flaws_cloudtrail:0000243:e31eabe4-3b12-4915-929f-bc0e00d776b8", "row_index": 243, "timestamp": "2018-09-27T11:25:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e31eabe4-3b12-4915-929f-bc0e00d776b8", "eventTime": "2018-09-27T11:25:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "bkcmqhCTPboj+jPz3OfXxoKX5VfTWdAbZl/P4yRUfFtLQllQNVNqa7OhA9XnKOWyEL1WCMegPIywU1kDhUVUpA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e00553c5-fcf6-4d6f-8102-79b9e80f267e", "record_id": "flaws_cloudtrail:0000244:e00553c5-fcf6-4d6f-8102-79b9e80f267e", "row_index": 244, "timestamp": "2018-09-27T11:25:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e00553c5-fcf6-4d6f-8102-79b9e80f267e", "eventTime": "2018-09-27T11:25:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "wHF0cgCbCPBHsMQ5IVRUbIbYdAj2v+LsdkWglkGQtSW5WkQ5evANHc2gE0TvAwOCU64ym6BnZUUy/Fq5vVCWug=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e34d653-4381-4388-9847-c3c8bfbe2cad", "record_id": "flaws_cloudtrail:0000245:7e34d653-4381-4388-9847-c3c8bfbe2cad", "row_index": 245, "timestamp": "2018-09-27T11:25:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e34d653-4381-4388-9847-c3c8bfbe2cad", "eventTime": "2018-09-27T11:25:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9UP0wrOjQrKkcmVI5umwlEdUZouQ9FathbVQqP1qOLo="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8449a2f-ab55-44c3-bc6c-bd70b394b5dd", "record_id": "flaws_cloudtrail:0000246:c8449a2f-ab55-44c3-bc6c-bd70b394b5dd", "row_index": 246, "timestamp": "2018-09-27T11:26:54Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3EDR81TEPX7F7KY7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.89.202.51", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 562, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8449a2f-ab55-44c3-bc6c-bd70b394b5dd", "eventTime": "2018-09-27T11:26:54Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.89.202.51", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3EDR81TEPX7F7KY7", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d85a25c-abb6-4c8e-8d1a-1f0e1728103f", "record_id": "flaws_cloudtrail:0000247:3d85a25c-abb6-4c8e-8d1a-1f0e1728103f", "row_index": 247, "timestamp": "2018-09-27T11:27:10Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "[aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d85a25c-abb6-4c8e-8d1a-1f0e1728103f", "eventTime": "2018-09-27T11:27:10Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "[aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "731bb73e-2095-4c1a-ba9b-f729ccab71ca", "record_id": "flaws_cloudtrail:0000248:731bb73e-2095-4c1a-ba9b-f729ccab71ca", "row_index": 248, "timestamp": "2018-09-27T11:27:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "731bb73e-2095-4c1a-ba9b-f729ccab71ca", "eventTime": "2018-09-27T11:27:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62201e9-493e-4e40-8057-c025ac5ddc28", "record_id": "flaws_cloudtrail:0000249:62201e9-493e-4e40-8057-c025ac5ddc28", "row_index": 249, "timestamp": "2018-09-27T11:27:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62201e9-493e-4e40-8057-c025ac5ddc28", "eventTime": "2018-09-27T11:27:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "cyJy4ognmIXX89qUetDU36CUd/TN5uS2MxViBPRjKtSMgDxQmQVY/KzLeb9xjHUJOdGrsvc/L16ngsUZBa483Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a924cb4-2d2b-440a-888e-eff549ad187a", "record_id": "flaws_cloudtrail:0000250:8a924cb4-2d2b-440a-888e-eff549ad187a", "row_index": 250, "timestamp": "2018-09-27T11:27:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a924cb4-2d2b-440a-888e-eff549ad187a", "eventTime": "2018-09-27T11:27:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3TNj8OAMlbfRKCXRV/NJKKecULtHVoR3/xsStFN/dZYtfneYbkhg6VYe5poc8lG5YUkyCAo+K9s8+EJ8k14QAw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aba56aa3-b203-4bd1-810c-eaeccaae0865", "record_id": "flaws_cloudtrail:0000251:aba56aa3-b203-4bd1-810c-eaeccaae0865", "row_index": 251, "timestamp": "2018-09-27T11:27:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aba56aa3-b203-4bd1-810c-eaeccaae0865", "eventTime": "2018-09-27T11:27:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Ycc9PKAVlImQEKdEI7s8QMN7jvfUGd/BzA82nFfUyQopvZBEUhmKzTdoRd7FAoTQ/SOEPbFvymtlxpnlr1H1jw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89c547ac-4154-4601-bf05-64a28bd4551f", "record_id": "flaws_cloudtrail:0000252:89c547ac-4154-4601-bf05-64a28bd4551f", "row_index": 252, "timestamp": "2018-09-27T11:27:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89c547ac-4154-4601-bf05-64a28bd4551f", "eventTime": "2018-09-27T11:27:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "syTmK6WSy7eCjzODgx+tLXbkRVOc9YvKyEpIJ6ohcc10RLO7cLD4jHByb32v53qM1hqygQwRE5SYH/c5ZW4X7A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae00f4e3-3412-43c9-8ca7-eacdedbe290c", "record_id": "flaws_cloudtrail:0000253:ae00f4e3-3412-43c9-8ca7-eacdedbe290c", "row_index": 253, "timestamp": "2018-09-27T11:27:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae00f4e3-3412-43c9-8ca7-eacdedbe290c", "eventTime": "2018-09-27T11:27:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "WHpRlQd6wvjb9vjjOn6+9+/o82OTF/VKB2Z/7LV9QV5gKD3iG/8GEmXaN+Ghi0sVBwZzJBofsCd2nN3h421vFQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e11d03d-b74c-4b9c-9341-c7a4fcf3b320", "record_id": "flaws_cloudtrail:0000254:0e11d03d-b74c-4b9c-9341-c7a4fcf3b320", "row_index": 254, "timestamp": "2018-09-27T11:27:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e11d03d-b74c-4b9c-9341-c7a4fcf3b320", "eventTime": "2018-09-27T11:27:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b69aed0-88c9-4f12-869e-b66968d7cee1", "record_id": "flaws_cloudtrail:0000255:3b69aed0-88c9-4f12-869e-b66968d7cee1", "row_index": 255, "timestamp": "2018-09-27T11:27:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b69aed0-88c9-4f12-869e-b66968d7cee1", "eventTime": "2018-09-27T11:27:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qjiNHETOG2JzdWc7+KGXZ+imAqX4q2F/gmqntxTEA8SsRdSVsaOkmiSycfNpPh/MYmJ52Rxy/VrfvEnzpFJluQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3983a28b-9803-4eb6-a9a4-50738f07a77", "record_id": "flaws_cloudtrail:0000256:3983a28b-9803-4eb6-a9a4-50738f07a77", "row_index": 256, "timestamp": "2018-09-27T11:27:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3983a28b-9803-4eb6-a9a4-50738f07a77", "eventTime": "2018-09-27T11:27:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gcVf2sLSQ8g2utbqENAf+9NJpLPTA8PU00HHyOOVA/H3at0YRSYiLZuWLeOHEPsutKLmd0sp74ijcTnsX8jRPQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b68a86d1-6caf-49de-8ca8-498eff79929", "record_id": "flaws_cloudtrail:0000257:b68a86d1-6caf-49de-8ca8-498eff79929", "row_index": 257, "timestamp": "2018-09-27T11:27:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b68a86d1-6caf-49de-8ca8-498eff79929", "eventTime": "2018-09-27T11:27:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "I3dl7SMH4FUMilwWqT36vJYfkRpajBCFaP7OV8Fla/zOzYaBswSFZYTwxgqY+ZSyDBejP0ChaHkVXZFtfYVOUw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "870ae8b9-cf10-4d9f-8ed8-a5dec4a03bbb", "record_id": "flaws_cloudtrail:0000258:870ae8b9-cf10-4d9f-8ed8-a5dec4a03bbb", "row_index": 258, "timestamp": "2018-09-27T11:27:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "870ae8b9-cf10-4d9f-8ed8-a5dec4a03bbb", "eventTime": "2018-09-27T11:27:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "XneK95D5GmW2X4tc2LP8oTvLd9XvnEunOIitgL2MIAmj0NP1U6BaOqtnq7w3AQK14UECz8AHtZOQT7+UQ+LbQw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25d29af-ed7a-40a7-885f-f3bd27d13ed2", "record_id": "flaws_cloudtrail:0000259:f25d29af-ed7a-40a7-885f-f3bd27d13ed2", "row_index": 259, "timestamp": "2018-09-27T11:27:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25d29af-ed7a-40a7-885f-f3bd27d13ed2", "eventTime": "2018-09-27T11:27:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a209b74-4fb9-49cd-87eb-9c0df309b4f7", "record_id": "flaws_cloudtrail:0000260:0a209b74-4fb9-49cd-87eb-9c0df309b4f7", "row_index": 260, "timestamp": "2018-09-27T11:27:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a209b74-4fb9-49cd-87eb-9c0df309b4f7", "eventTime": "2018-09-27T11:27:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZKHGgs4Z6QHf6yUzvJXq3b4v3YlFweoaz1HT9muzSllsTRJVcUsA/T0uy7sQjN9/dKc64y6iizwMgiek2fQojA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e5078e4-f38a-4e59-8b46-4abe566d16bd", "record_id": "flaws_cloudtrail:0000261:9e5078e4-f38a-4e59-8b46-4abe566d16bd", "row_index": 261, "timestamp": "2018-09-27T11:27:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e5078e4-f38a-4e59-8b46-4abe566d16bd", "eventTime": "2018-09-27T11:27:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "zRtgs8wUzw6KnucvdvIHekWCNH74YMV0GOKo2RaiDAedmUU0ZODbJiv7aPlK6cuBX/KBwsRYL0/cU3LuZEhL5w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad039008-4f8e-4f0d-8e6a-2a6c2ea5efe0", "record_id": "flaws_cloudtrail:0000262:ad039008-4f8e-4f0d-8e6a-2a6c2ea5efe0", "row_index": 262, "timestamp": "2018-09-27T11:27:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad039008-4f8e-4f0d-8e6a-2a6c2ea5efe0", "eventTime": "2018-09-27T11:27:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iQBPnBBBCwZwZ0mgRjKVqHCvHrdz0LKD9UphmzDm4tK1lzxDcufeS64v4OQr5buOX59sbw1p1Wf3DAzpe1o8Hw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54813bf-3438-4cda-ae5a-28372a50efce", "record_id": "flaws_cloudtrail:0000263:c54813bf-3438-4cda-ae5a-28372a50efce", "row_index": 263, "timestamp": "2018-09-27T11:27:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54813bf-3438-4cda-ae5a-28372a50efce", "eventTime": "2018-09-27T11:27:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a759c62-ba7d-4c7c-b6cd-a5a532e4f945", "record_id": "flaws_cloudtrail:0000264:9a759c62-ba7d-4c7c-b6cd-a5a532e4f945", "row_index": 264, "timestamp": "2018-09-27T11:27:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a759c62-ba7d-4c7c-b6cd-a5a532e4f945", "eventTime": "2018-09-27T11:27:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "cJ4TfqbG9hbyW2dUWJTWxPeUUCuPbDW1SIfqIXFcQIKtkg7UF2Ucl+v4plzAGxHTpORyF69sDEIBoZi6NRXRlQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f888ce8e-99b5-499c-9703-26fbdfec83d8", "record_id": "flaws_cloudtrail:0000265:f888ce8e-99b5-499c-9703-26fbdfec83d8", "row_index": 265, "timestamp": "2018-09-27T11:27:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f888ce8e-99b5-499c-9703-26fbdfec83d8", "eventTime": "2018-09-27T11:27:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Ip8jDebCAu/InpDMD157AQKaEGvXVYYZocYEr8lYDbirV4JS3BEa6bzqJnDnrz6jZZyt5e696rUeFyP5RuYYIQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328b6e56-e217-485e-9e7b-c7cf16c85425", "record_id": "flaws_cloudtrail:0000266:328b6e56-e217-485e-9e7b-c7cf16c85425", "row_index": 266, "timestamp": "2018-09-27T11:27:35Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328b6e56-e217-485e-9e7b-c7cf16c85425", "eventTime": "2018-09-27T11:27:35Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "QbmQKdOVEYG2cjUbtQx0dd2z9jblfIN2X2EzavHeyYs8p5VYyqKsybF2oS96kNQ370UTojgwnB8KmcJMqTKDew=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c63fded6-61ec-4378-a36f-149b235650c2", "record_id": "flaws_cloudtrail:0000267:c63fded6-61ec-4378-a36f-149b235650c2", "row_index": 267, "timestamp": "2018-09-27T11:27:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c63fded6-61ec-4378-a36f-149b235650c2", "eventTime": "2018-09-27T11:27:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "2m3jOdn0CpiUsQCQzsvKK0J63EYG6YPXtByBMOpBtX8jaRKaKOxMLzgEV3erak5eb20ZlZzBFbZJh2nPr89D/A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17cbbabe-c83c-42d0-ac5f-24e95bf4537a", "record_id": "flaws_cloudtrail:0000268:17cbbabe-c83c-42d0-ac5f-24e95bf4537a", "row_index": 268, "timestamp": "2018-09-27T11:27:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17cbbabe-c83c-42d0-ac5f-24e95bf4537a", "eventTime": "2018-09-27T11:27:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "oeLPtR3pjIT9C2dI0DLW1l6j5N/jpda3okh2nDFA3nDYojpZIouTvCdYoTh2Rn2EAhQXdxqeX4+hwi6qTWGAbw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "574882f-0b32-4d0f-863d-67c3dfebec90", "record_id": "flaws_cloudtrail:0000269:574882f-0b32-4d0f-863d-67c3dfebec90", "row_index": 269, "timestamp": "2018-09-27T11:27:37Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "574882f-0b32-4d0f-863d-67c3dfebec90", "eventTime": "2018-09-27T11:27:37Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "JH66pfE6dVlPGDqvbOMLEuQKwWyeSRL8ZPAP57wIQQNjVVu+yMv9hydAmjNxMOpbHhf8FXG2EPs8DdLYwxucjQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0eb637d-48b3-46af-acc6-a2135a1d355d", "record_id": "flaws_cloudtrail:0000270:c0eb637d-48b3-46af-acc6-a2135a1d355d", "row_index": 270, "timestamp": "2018-09-27T11:27:37Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0eb637d-48b3-46af-acc6-a2135a1d355d", "eventTime": "2018-09-27T11:27:37Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "CZGZEKGfm1jUW5Rb8sbq6GkeS7PxhQzPwJ03H/4AMGbWiuO/kkscqjGH1+hsuKo6fdD/kd8fbwhanEHXZFLSAA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a00dd20-7b6f-4ae7-a1b2-c986fd486598", "record_id": "flaws_cloudtrail:0000271:7a00dd20-7b6f-4ae7-a1b2-c986fd486598", "row_index": 271, "timestamp": "2018-09-27T11:27:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a00dd20-7b6f-4ae7-a1b2-c986fd486598", "eventTime": "2018-09-27T11:27:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HzgrT0IZugX6R8hlT1VesQKB2QraCcv6rYm8RUXnl/jvpUZ8R5SlW/Lg77I+N71lc0xnLGTyaAkbeMx218Zaww=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "612001e-5d78-4649-a6ff-3b31a4daeccc", "record_id": "flaws_cloudtrail:0000272:612001e-5d78-4649-a6ff-3b31a4daeccc", "row_index": 272, "timestamp": "2018-09-27T11:27:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "612001e-5d78-4649-a6ff-3b31a4daeccc", "eventTime": "2018-09-27T11:27:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "1r1IRintcjhSg7mriRt42XrYaVVJcO9jBzxYtxybAUEC8WGs7SkNfmdyCxJTufK7piNGibvthV1QHwTuoRetpQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d58e4467-3b36-4e68-b89b-c87538992f48", "record_id": "flaws_cloudtrail:0000273:d58e4467-3b36-4e68-b89b-c87538992f48", "row_index": 273, "timestamp": "2018-09-27T11:27:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d58e4467-3b36-4e68-b89b-c87538992f48", "eventTime": "2018-09-27T11:27:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gr0zKD3wXgZ1d1ishI16FBzIwD33O/Wxk3KY+Ebof81vgAKcZSMJAV6kg130w0ErQCSrFK1XN4SXNidWwfcVSw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53a762169-119b-4a6d-a06e-c8f99d22a4f4", "record_id": "flaws_cloudtrail:0000274:53a762169-119b-4a6d-a06e-c8f99d22a4f4", "row_index": 274, "timestamp": "2018-09-27T11:27:40Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53a762169-119b-4a6d-a06e-c8f99d22a4f4", "eventTime": "2018-09-27T11:27:40Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tfe1JhdZSPilVNxhHY1CbHLOeFq0+xHv7PmQYUb5Y/Kt/TouhO1Rs9yp5Dedbs4GJ3KqLKa9+3FlpBZ7ug+16Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db235b76-0f63-48f7-ae3c-99ca1086dd8e", "record_id": "flaws_cloudtrail:0000275:db235b76-0f63-48f7-ae3c-99ca1086dd8e", "row_index": 275, "timestamp": "2018-09-27T11:27:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db235b76-0f63-48f7-ae3c-99ca1086dd8e", "eventTime": "2018-09-27T11:27:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "TZiMHoJUOP6K1M1qk6nFG46FaOeDKBLGiqqEUp2c7PVSWud+2YAb0RxO++spRjdXuF+tn3cjXqp7eC1mgP17yg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f6c78e4-5733-4bc0-b252-027dc5147d3f", "record_id": "flaws_cloudtrail:0000276:3f6c78e4-5733-4bc0-b252-027dc5147d3f", "row_index": 276, "timestamp": "2018-09-27T11:27:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f6c78e4-5733-4bc0-b252-027dc5147d3f", "eventTime": "2018-09-27T11:27:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "QXtI1NJZr/A65mCRhzI9G1xNa1gkK90TlWS5C79yfYtpvbb+pZqLL0SnR8D22WGByopNZNcvqOruStDoGzJ0WQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f2aa89d-de54-4230-bbfd-9a7cd57cc142", "record_id": "flaws_cloudtrail:0000277:7f2aa89d-de54-4230-bbfd-9a7cd57cc142", "row_index": 277, "timestamp": "2018-09-27T11:27:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f2aa89d-de54-4230-bbfd-9a7cd57cc142", "eventTime": "2018-09-27T11:27:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3B+f3A5fXdumPOP8MZXeUekIoUAeFdcImaYK4+BIN7Bq3XKQ76OZ3MhqxrCuvS6KLfFHWn5i3NjLOvAabqmf8Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "819da77c-f729-4398-8f80-d2975b7a2c87", "record_id": "flaws_cloudtrail:0000278:819da77c-f729-4398-8f80-d2975b7a2c87", "row_index": 278, "timestamp": "2018-09-27T11:27:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "819da77c-f729-4398-8f80-d2975b7a2c87", "eventTime": "2018-09-27T11:27:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EY9MkBu0bEZzg/a6Pry+RFhZyL+28Qu/4L9cKci0HRxjRNzKqbjfAryIh0TffyJScey72lhSCHsli/wWtoBVfg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd16ed42-76ff-4ed1-911d-5ce39d8c38fc", "record_id": "flaws_cloudtrail:0000279:cd16ed42-76ff-4ed1-911d-5ce39d8c38fc", "row_index": 279, "timestamp": "2018-09-27T11:27:43Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd16ed42-76ff-4ed1-911d-5ce39d8c38fc", "eventTime": "2018-09-27T11:27:43Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "2Fxx+gjlAOxl4jJGnsV3KaKp300cmk98KtgozvbiunWT4WoTFWq+rqZsYGy+jsr34533WY9Ne/BptUXcNQDiWg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78dfce79-48a6-42d9-862f-4175039179bf", "record_id": "flaws_cloudtrail:0000280:78dfce79-48a6-42d9-862f-4175039179bf", "row_index": 280, "timestamp": "2018-09-27T11:27:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78dfce79-48a6-42d9-862f-4175039179bf", "eventTime": "2018-09-27T11:27:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "UpHPfzdSAOs6Bb4LcrndF+Gkuc4w4iwmasKSmI3LeCl8hA+AiuIE1N/SfJL8RMo5SvvzdpAz3x0ZxdyP6PNwQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d871eb0d-fa72-4c6d-a295-3cdb1daf51c8", "record_id": "flaws_cloudtrail:0000281:d871eb0d-fa72-4c6d-a295-3cdb1daf51c8", "row_index": 281, "timestamp": "2018-09-27T11:27:45Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d871eb0d-fa72-4c6d-a295-3cdb1daf51c8", "eventTime": "2018-09-27T11:27:45Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "hn9QhtkaObjaws3C0FVSIuJlv+1fK/8lN/LIDu6nCBUuGGAYaZmLcJ4/plj2Wf3fOwgMK465hU1CaTzsdHi2hQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9d2d86e-ee8f-46ba-a25f-a15e24fb2972", "record_id": "flaws_cloudtrail:0000282:c9d2d86e-ee8f-46ba-a25f-a15e24fb2972", "row_index": 282, "timestamp": "2018-09-27T11:27:45Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9d2d86e-ee8f-46ba-a25f-a15e24fb2972", "eventTime": "2018-09-27T11:27:45Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "GxGrdKy5PF4cbb8uZHkKTdFeqBkdDl0Td9RijGwwTDG5DKLQeK6P3mN46lNf13x4Ys4O0fuR7U/wjq72DzXKCA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4aab9b3-9707-4e68-80df-d673ab79d984", "record_id": "flaws_cloudtrail:0000283:c4aab9b3-9707-4e68-80df-d673ab79d984", "row_index": 283, "timestamp": "2018-09-27T11:27:45Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4aab9b3-9707-4e68-80df-d673ab79d984", "eventTime": "2018-09-27T11:27:45Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "uOg887IWfvkv8DetRqEbnGNbwex2DXuBfSx9tUe5/V2C/Zf4SE5BffTKOzKESqis4+L8wbOA8/hhoDSYYcp+cQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "309bb21f-c071-45d1-9884-050e798f4d4e", "record_id": "flaws_cloudtrail:0000284:309bb21f-c071-45d1-9884-050e798f4d4e", "row_index": 284, "timestamp": "2018-09-27T11:27:46Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "309bb21f-c071-45d1-9884-050e798f4d4e", "eventTime": "2018-09-27T11:27:46Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qOHr27VsRkff7dPmIh2M+UB7DFe742ZTRBvgvIE85lkYH0LrmBokJb+imVnEM2tgGyE5DVbrd/RYlFyYtM3TUQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76a68ac9-e0f0-4296-9c02-fc0d196e6f3b", "record_id": "flaws_cloudtrail:0000285:76a68ac9-e0f0-4296-9c02-fc0d196e6f3b", "row_index": 285, "timestamp": "2018-09-27T11:27:46Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76a68ac9-e0f0-4296-9c02-fc0d196e6f3b", "eventTime": "2018-09-27T11:27:46Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "700082-6e8d-45b5-a202-253b06ed92a1", "record_id": "flaws_cloudtrail:0000286:700082-6e8d-45b5-a202-253b06ed92a1", "row_index": 286, "timestamp": "2018-09-27T11:27:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "700082-6e8d-45b5-a202-253b06ed92a1", "eventTime": "2018-09-27T11:27:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "7S0DgTRKlvDsfd58NWDLAFiBppRonJFrXrt7YC9hg1MtQF0wpXCkO5Y2fnYdhD8jcMeWEM8T8frdy08NsiqIjA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee354a4a-17db-4bf7-9e3e-ccb43b734655", "record_id": "flaws_cloudtrail:0000287:ee354a4a-17db-4bf7-9e3e-ccb43b734655", "row_index": 287, "timestamp": "2018-09-27T11:27:48Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee354a4a-17db-4bf7-9e3e-ccb43b734655", "eventTime": "2018-09-27T11:27:48Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ffxV5SXGa/yFGU3WNEOYunQqUDrZo3rFNPRQfy5XnrIm9mjK2pa58QPqSR9JBGAugmEMlfQkZdCLSba/3NAHWw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "519099e-1f0d-482b-be84-20adea2f6d5a", "record_id": "flaws_cloudtrail:0000288:519099e-1f0d-482b-be84-20adea2f6d5a", "row_index": 288, "timestamp": "2018-09-27T11:27:48Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "519099e-1f0d-482b-be84-20adea2f6d5a", "eventTime": "2018-09-27T11:27:48Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IY0B40E2XAgQPbN2H1N020v1C7k4me3QVFyd9aX9VO2e05HqIInP1NYuwuA5jFUylTAMFpFkgCzkYV2ECvBO5A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f6a06df-453c-43a3-bd81-07c390f6ea16", "record_id": "flaws_cloudtrail:0000289:6f6a06df-453c-43a3-bd81-07c390f6ea16", "row_index": 289, "timestamp": "2018-09-27T11:27:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f6a06df-453c-43a3-bd81-07c390f6ea16", "eventTime": "2018-09-27T11:27:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Q0dtJ+ifI2c7FzBQ+yHeVCPr/Ca+R1eROfTMsrK/mueZwFYHaTxWxz94CBtq9/CTdXUmy6C13yBN3tg2G1CT+g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "337abeef-84dc-4b22-8bfd-ad4af7685ff6", "record_id": "flaws_cloudtrail:0000290:337abeef-84dc-4b22-8bfd-ad4af7685ff6", "row_index": 290, "timestamp": "2018-09-27T11:27:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "337abeef-84dc-4b22-8bfd-ad4af7685ff6", "eventTime": "2018-09-27T11:27:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "oyJ0M3WNQ+aoMl3mnCcsMmalxKmLAoK/fbPsaMoSO09c97C/8oJzq15yQkXy/ttum+quBLlY0abDcO6we8wUtQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbec81b4-f5b2-4b53-a150-d16a101b1b33", "record_id": "flaws_cloudtrail:0000291:dbec81b4-f5b2-4b53-a150-d16a101b1b33", "row_index": 291, "timestamp": "2018-09-27T11:27:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbec81b4-f5b2-4b53-a150-d16a101b1b33", "eventTime": "2018-09-27T11:27:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "lXkNPnY4+/sbRryNO3Ly+WrFAQwgnfEhCymu0jmCnyJ0lszmAlBglK0nENzQ6czuOdP/hd3/m2BABsajT/LmEw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bd8c507-9a00-40a9-bcd7-0cea2fab35a3", "record_id": "flaws_cloudtrail:0000292:6bd8c507-9a00-40a9-bcd7-0cea2fab35a3", "row_index": 292, "timestamp": "2018-09-27T11:27:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bd8c507-9a00-40a9-bcd7-0cea2fab35a3", "eventTime": "2018-09-27T11:27:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "KUBZ8BQKzCRIaHOsTkF4Am5mU6WvbM0JlP3zHKWWNdKb+OFQPq+QBc6J/mT9bw5rhz5azIogPtxwDTL9x2BQGw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "654512-6c09-48c2-a01b-9fc3e061571b", "record_id": "flaws_cloudtrail:0000293:654512-6c09-48c2-a01b-9fc3e061571b", "row_index": 293, "timestamp": "2018-09-27T11:27:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "654512-6c09-48c2-a01b-9fc3e061571b", "eventTime": "2018-09-27T11:27:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZxLSPVIr9TImvcGSCGbs3PgEhlxpm7cMeL/4s0OyQUtaDI+Y944096hcPQdVJk//G2aSXCohcHD+ouegmk3veCg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a57a4123-249b-4d95-a8af-8bd247006edb", "record_id": "flaws_cloudtrail:0000294:a57a4123-249b-4d95-a8af-8bd247006edb", "row_index": 294, "timestamp": "2018-09-27T11:27:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a57a4123-249b-4d95-a8af-8bd247006edb", "eventTime": "2018-09-27T11:27:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4l1EKYRqTAh1dwyLuzoCITbtvMrhyQDeDLioK+xXG4BXXryKT3LMgfMO4vN7ooH362ftDbI13H/abPgYggzy6Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c0ac9d-ffcf-4ec7-bbc7-f7e0019c130c", "record_id": "flaws_cloudtrail:0000295:c5c0ac9d-ffcf-4ec7-bbc7-f7e0019c130c", "row_index": 295, "timestamp": "2018-09-27T11:27:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c0ac9d-ffcf-4ec7-bbc7-f7e0019c130c", "eventTime": "2018-09-27T11:27:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "q1qbv3icnHPDaly0woa4QYh0HDIUJM012W7ixgcCX2gikU6bk4DqRCtc9eHmuPLVPvdtrbnkaEJwfqggBUDUyA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4b24ecf-8094-49fb-9f9d-3e1fa8d35b30", "record_id": "flaws_cloudtrail:0000296:e4b24ecf-8094-49fb-9f9d-3e1fa8d35b30", "row_index": 296, "timestamp": "2018-09-27T11:27:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4b24ecf-8094-49fb-9f9d-3e1fa8d35b30", "eventTime": "2018-09-27T11:27:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HDl0YnQQpUAeQg6GZnPoTnoTTrOD63cVLdcOqDzNAV/6YmA6VTM90fcQijiluJTBB81/125/AyP+kQSO9MauNQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a6f7b15-de31-4ace-836d-c03308735b5c", "record_id": "flaws_cloudtrail:0000297:1a6f7b15-de31-4ace-836d-c03308735b5c", "row_index": 297, "timestamp": "2018-09-27T11:27:54Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a6f7b15-de31-4ace-836d-c03308735b5c", "eventTime": "2018-09-27T11:27:54Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "rBpuaVJyxxkAuk5BAD0rRdV0PrlkDE39IHFA/2m6oy0/33uiPHUAnIRl3640BQLb5r8QsINIjNw6F9KQIXeTRg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08a7800f-87fd-4ca4-bb3c-e4f1d11e2498", "record_id": "flaws_cloudtrail:0000298:08a7800f-87fd-4ca4-bb3c-e4f1d11e2498", "row_index": 298, "timestamp": "2018-09-27T11:27:54Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08a7800f-87fd-4ca4-bb3c-e4f1d11e2498", "eventTime": "2018-09-27T11:27:54Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "fSMncC4jKwDnWffYfNo6n1aHC/h8IRLdJ0CQ5opqxzcFa6a7JxqWTbhrjwvYyqTlkWzvnWDwI9wSoDDNcl9hRA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7312f5d-0c8d-4423-8c51-734004aacbd9", "record_id": "flaws_cloudtrail:0000299:b7312f5d-0c8d-4423-8c51-734004aacbd9", "row_index": 299, "timestamp": "2018-09-27T11:27:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7312f5d-0c8d-4423-8c51-734004aacbd9", "eventTime": "2018-09-27T11:27:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "WNLk6aWXWeMTegalTEIplC2w7opcMerfZCs8GFHjo/quV5BURsfgerXNFB56lPsHq3H0AdUnVjtgmiDfvARLTA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19f68772-6d8e-4cc3-b17f-e202c607f867", "record_id": "flaws_cloudtrail:0000300:19f68772-6d8e-4cc3-b17f-e202c607f867", "row_index": 300, "timestamp": "2018-09-27T11:27:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19f68772-6d8e-4cc3-b17f-e202c607f867", "eventTime": "2018-09-27T11:27:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/peOn5yCQpz+WO1PU1isdsM+DNm7NMe2L21gRVYEO/2OkBCbSjUOgaISha5h4oy/aZubj1RakUbWfMIvW/te3g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90bf20ac-b5ca-4823-bf56-83a94b8ff20b", "record_id": "flaws_cloudtrail:0000301:90bf20ac-b5ca-4823-bf56-83a94b8ff20b", "row_index": 301, "timestamp": "2018-09-27T11:27:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90bf20ac-b5ca-4823-bf56-83a94b8ff20b", "eventTime": "2018-09-27T11:27:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "aNV4pGwhxUhkv7O0cWvrRSIB1WgTf9n5u44nMWPvscwQOlGNHLexunwY4gsNRyKwsBNwPJPvQua5nj0D98Ef+Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8f51436-0923-45ad-bd9d-1defc24c7787", "record_id": "flaws_cloudtrail:0000302:c8f51436-0923-45ad-bd9d-1defc24c7787", "row_index": 302, "timestamp": "2018-09-27T11:27:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8f51436-0923-45ad-bd9d-1defc24c7787", "eventTime": "2018-09-27T11:27:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "USyjKkbMRRNYHOkBax7WqeCixDKN26GT9MkCg37j7KjtO9HotLK4LQJwHOr+nQSuFUbe8JTZZlDZTuZXYrVVDQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "253298c5b-0041-45fa-8fef-6f5cee9bc21b", "record_id": "flaws_cloudtrail:0000303:253298c5b-0041-45fa-8fef-6f5cee9bc21b", "row_index": 303, "timestamp": "2018-09-27T11:27:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "253298c5b-0041-45fa-8fef-6f5cee9bc21b", "eventTime": "2018-09-27T11:27:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "1SzNDk4WJvOEbhkF/8Z56VP7Zr+b+A1VOdr45qeUcinjuY0ATKRy3QiPRfupaUHHMgBCYa6cFujMRiMEezhtvw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdaeaeb5-f546-4cc1-a0f3-6c90cc1e37c2", "record_id": "flaws_cloudtrail:0000304:cdaeaeb5-f546-4cc1-a0f3-6c90cc1e37c2", "row_index": 304, "timestamp": "2018-09-27T11:27:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdaeaeb5-f546-4cc1-a0f3-6c90cc1e37c2", "eventTime": "2018-09-27T11:27:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ibSWJfj9iSp4dlHmV2FjSofYuPBnHJOoDSrkl9BwstWjwN4MZMth9a4WYtoSg27h+UvX74q5JnGMyGWxeM3IcA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d377c723-91e3-4796-a85a-275b42dca9bf", "record_id": "flaws_cloudtrail:0000305:d377c723-91e3-4796-a85a-275b42dca9bf", "row_index": 305, "timestamp": "2018-09-27T11:27:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d377c723-91e3-4796-a85a-275b42dca9bf", "eventTime": "2018-09-27T11:27:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8A3SP+SdKKbAgNHA8lLD6R+ZFMnxYJZcVezeO9Ofoh8OZkNuLSMSyT7L55ASnw6QiKQrYjpdYMqG6YRtgyL23A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de89e304-e335-44bf-b28d-e14201f09df9", "record_id": "flaws_cloudtrail:0000306:de89e304-e335-44bf-b28d-e14201f09df9", "row_index": 306, "timestamp": "2018-09-27T11:28:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de89e304-e335-44bf-b28d-e14201f09df9", "eventTime": "2018-09-27T11:28:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Zf02h41mqFZ/KA+ApSOkC/wNdc6W75oHjeI3Z67s0yaUdIArMjzE4AR8USPpxd6PTY7Z8JkLckYhNEGvyuCOWQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "447173d16-434e-40c7-bcc4-49305c7ae82", "record_id": "flaws_cloudtrail:0000307:447173d16-434e-40c7-bcc4-49305c7ae82", "row_index": 307, "timestamp": "2018-09-27T11:28:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "447173d16-434e-40c7-bcc4-49305c7ae82", "eventTime": "2018-09-27T11:28:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gbGXtySzAtCUJuxfIG0PvRl/yBbxjvqIUzzrM+zw1SLsyMSgmO/hEwAsxS+1QnhgOnCgcjIES1jnsATPjnZbaw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e818e84-a77f-4395-9585-f6cda7bf5807", "record_id": "flaws_cloudtrail:0000308:8e818e84-a77f-4395-9585-f6cda7bf5807", "row_index": 308, "timestamp": "2018-09-27T11:28:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e818e84-a77f-4395-9585-f6cda7bf5807", "eventTime": "2018-09-27T11:28:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "jZVzVt7GiPNi6fxHdxdORIg8qBHiIyKHg2uOcDrvrMlz7EWAMO+Z/iOyeyuo2OetWk6HN+T6fqymn7zFOCAZGQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c4d8076-2523-4df7-b9ff-7fa7fcbaad57", "record_id": "flaws_cloudtrail:0000309:3c4d8076-2523-4df7-b9ff-7fa7fcbaad57", "row_index": 309, "timestamp": "2018-09-27T11:28:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c4d8076-2523-4df7-b9ff-7fa7fcbaad57", "eventTime": "2018-09-27T11:28:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "73Rh06X8fRCj/4LjYjnbnD+ZaIjoVI3nyq4YG7PkoiHcNmNt1ZJ6jryjBFDLkhkXe5KcVRCSg7jBJrhDxBZ8OQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f364b34-d031-47c5-8100-38b4bc72484", "record_id": "flaws_cloudtrail:0000310:9f364b34-d031-47c5-8100-38b4bc72484", "row_index": 310, "timestamp": "2018-09-27T11:28:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f364b34-d031-47c5-8100-38b4bc72484", "eventTime": "2018-09-27T11:28:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "AyYpFUrWztPxIkxwHUWx5aPcXcrkUFOO0FtjiN2vHhe/5Jko1oGyU3r6Cm+zF2EYXLBMvVFIon4a2kVRdD2Aiw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a547279a-1a52-4a0e-aefb-fa9eee827341", "record_id": "flaws_cloudtrail:0000311:a547279a-1a52-4a0e-aefb-fa9eee827341", "row_index": 311, "timestamp": "2018-09-27T11:28:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a547279a-1a52-4a0e-aefb-fa9eee827341", "eventTime": "2018-09-27T11:28:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "692ee784-56e4-412e-9caa-53302eb2d40c", "record_id": "flaws_cloudtrail:0000312:692ee784-56e4-412e-9caa-53302eb2d40c", "row_index": 312, "timestamp": "2018-09-27T11:28:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "692ee784-56e4-412e-9caa-53302eb2d40c", "eventTime": "2018-09-27T11:28:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Vej3GZWf/RstWKfJ+jsfQzX1+W69SO+tN/879lfX/gIiuxwPU/KHzMW1LtlwpBkWngq1/mTYTWpOUOVHU3Jd8g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54936fce-b57d-4d79-9745-cd7c79e437ec", "record_id": "flaws_cloudtrail:0000313:54936fce-b57d-4d79-9745-cd7c79e437ec", "row_index": 313, "timestamp": "2018-09-27T11:28:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54936fce-b57d-4d79-9745-cd7c79e437ec", "eventTime": "2018-09-27T11:28:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ZHPhdFL4hbpNCMf6nS2nZx2LYI2fIWbolf2zvaPWx+CmiCQ5ZTwr0t9lweMKcX+tT4BEEtoG8tdVZfNEKtz0+g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "881d204f-6765-481a-9e93-f85033a", "record_id": "flaws_cloudtrail:0000314:881d204f-6765-481a-9e93-f85033a", "row_index": 314, "timestamp": "2018-09-27T11:28:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "881d204f-6765-481a-9e93-f85033a", "eventTime": "2018-09-27T11:28:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996fee36-e7bd-49cc-b567-9bfa56646", "record_id": "flaws_cloudtrail:0000315:996fee36-e7bd-49cc-b567-9bfa56646", "row_index": 315, "timestamp": "2018-09-27T11:28:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996fee36-e7bd-49cc-b567-9bfa56646", "eventTime": "2018-09-27T11:28:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "vVN81ntNrYvbj5ba3hrW98pP2EJcVxOEQBiUdtvoEwf3ZGnvujMhC4GbYWDSBWLhAWdFGZQ2lG64ES28JmAYog=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29c715001-015a-4e13-a5ac-286fd019df69", "record_id": "flaws_cloudtrail:0000316:29c715001-015a-4e13-a5ac-286fd019df69", "row_index": 316, "timestamp": "2018-09-27T11:28:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29c715001-015a-4e13-a5ac-286fd019df69", "eventTime": "2018-09-27T11:28:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "mGTs3Dp1VrJcA1cHTUMiQaSMrrNVdbQQt7TKXAK3D9q6Qnw+p5BfWM19IiWTzpFsdv04fDbmJHRVUZnV2qlK8A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf7065bb-6a43-470c-961f-5b24323a108b", "record_id": "flaws_cloudtrail:0000317:cf7065bb-6a43-470c-961f-5b24323a108b", "row_index": 317, "timestamp": "2018-09-27T11:28:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf7065bb-6a43-470c-961f-5b24323a108b", "eventTime": "2018-09-27T11:28:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "AO1LfkBnsZHJPU0V909dk+eh+aQASgXdVflXakrCyQTEC/l9jpT/m+RmtUkQuRuV0hiDr4LKdGenZXHSYwCUHw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b5955ab-91a6-4289-9c78-4368c30c113d", "record_id": "flaws_cloudtrail:0000318:3b5955ab-91a6-4289-9c78-4368c30c113d", "row_index": 318, "timestamp": "2018-09-27T11:28:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b5955ab-91a6-4289-9c78-4368c30c113d", "eventTime": "2018-09-27T11:28:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Jw8Mo7ictzAAf3ro/TxRW3fG8tbYDCBTz9YZ86+HhLjLNlZBK+4+vr9BDtrs1UqChvff5B55Ye3bTL9GDTQ6kQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce2c8485-2531-4721-85ac-8db635cb96b4", "record_id": "flaws_cloudtrail:0000319:ce2c8485-2531-4721-85ac-8db635cb96b4", "row_index": 319, "timestamp": "2018-09-27T11:28:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce2c8485-2531-4721-85ac-8db635cb96b4", "eventTime": "2018-09-27T11:28:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "BdaKnPJuRU6JmZfn3ZV/Hy3cwj80d/WH4SELAJ6x5XGNwOECsQwFXCg1Saxo+xaboAIokv3XbcZEw4jivZebqg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5848aa96-bc9c-4c99-86ad-5800917edd0a", "record_id": "flaws_cloudtrail:0000320:5848aa96-bc9c-4c99-86ad-5800917edd0a", "row_index": 320, "timestamp": "2018-09-27T11:28:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5848aa96-bc9c-4c99-86ad-5800917edd0a", "eventTime": "2018-09-27T11:28:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "620e3f93-0ff6-454f-8267-02c90b53ecdf", "record_id": "flaws_cloudtrail:0000321:620e3f93-0ff6-454f-8267-02c90b53ecdf", "row_index": 321, "timestamp": "2018-09-27T11:28:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "620e3f93-0ff6-454f-8267-02c90b53ecdf", "eventTime": "2018-09-27T11:28:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4gxcFghISPyb88llPDikxBCSMjkhkI22W0bUN0k2VUYCd0rdB9YZyLwJ86Kvaf6j3eaUEuzTYAK1DtQMb/zz/A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06d45ca4-22db-4376-a7d2-817bd2d861021", "record_id": "flaws_cloudtrail:0000322:06d45ca4-22db-4376-a7d2-817bd2d861021", "row_index": 322, "timestamp": "2018-09-27T11:28:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06d45ca4-22db-4376-a7d2-817bd2d861021", "eventTime": "2018-09-27T11:28:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "BllTZZaYzVgrNWUck8B8t6Vn+SL+4xJvJz1kREP0OqmaDFCRc0cYb62vMp0iTnjcnLPonRRARVq1+J+9CbK76w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b7c6cfe-75f8-45f8-bc71-58e56b03eee6", "record_id": "flaws_cloudtrail:0000323:0b7c6cfe-75f8-45f8-bc71-58e56b03eee6", "row_index": 323, "timestamp": "2018-09-27T11:28:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b7c6cfe-75f8-45f8-bc71-58e56b03eee6", "eventTime": "2018-09-27T11:28:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfb08fa7-edad-4525-9f8b-a066c28445f5", "record_id": "flaws_cloudtrail:0000324:bfb08fa7-edad-4525-9f8b-a066c28445f5", "row_index": 324, "timestamp": "2018-09-27T11:28:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfb08fa7-edad-4525-9f8b-a066c28445f5", "eventTime": "2018-09-27T11:28:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "f0+rvIse5wHUVFndm8dwMJ4ibiX6BZlTYekgZoLePuncOslDRhWPZvMTP/0bXPlBwLdyovc0JZhJ5+nkXGDSQQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd9eac9d-1775-4e67-a355-a8de38e7c786", "record_id": "flaws_cloudtrail:0000325:cd9eac9d-1775-4e67-a355-a8de38e7c786", "row_index": 325, "timestamp": "2018-09-27T11:28:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd9eac9d-1775-4e67-a355-a8de38e7c786", "eventTime": "2018-09-27T11:28:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "TYyDJlKXIeohcYjhLHrTr7lrlQHGJxiW2AUgBRuI7Pg53Ddy8u/MDDY5GoeScKJcsmKEda7eERCbP2v1rRo6lA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82c79833-2dd6-4011-a1c3-451767caa00", "record_id": "flaws_cloudtrail:0000326:82c79833-2dd6-4011-a1c3-451767caa00", "row_index": 326, "timestamp": "2018-09-27T11:28:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82c79833-2dd6-4011-a1c3-451767caa00", "eventTime": "2018-09-27T11:28:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "KBEDsILRCeaSdc3rFUBLNoVEJQ4AXFow+bLOGnEyguE8HSXIFrR1FRiQgbFOBSx4L1bKBYBiB+8DwJxkL7i/7Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93ab55fe-e0bb-4e7b-a98f-807603e05a2b", "record_id": "flaws_cloudtrail:0000327:93ab55fe-e0bb-4e7b-a98f-807603e05a2b", "row_index": 327, "timestamp": "2018-09-27T11:28:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93ab55fe-e0bb-4e7b-a98f-807603e05a2b", "eventTime": "2018-09-27T11:28:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IUhNZm54R8atwsU72rWcMUwjc64U1YJPtEE+eYmBxWPYx9ScKnLJnJaRR8ViotLsU8uN2pJNOro1GRvO/f27kw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d23e7ccd-a202-4e91-8075-d7e014ed8718", "record_id": "flaws_cloudtrail:0000328:d23e7ccd-a202-4e91-8075-d7e014ed8718", "row_index": 328, "timestamp": "2018-09-27T11:28:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d23e7ccd-a202-4e91-8075-d7e014ed8718", "eventTime": "2018-09-27T11:28:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "sZlL6iF7ceONFGNZ5A5yxLnGOwlt95DZZA6wlfACxT/aMbxvtpyAjmIW667LDSCZW9PCPTabAuKIr7tU/v7agA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae1fa2d4-b7b3-49d3-8e65-26bc93c02def", "record_id": "flaws_cloudtrail:0000329:ae1fa2d4-b7b3-49d3-8e65-26bc93c02def", "row_index": 329, "timestamp": "2018-09-27T11:28:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae1fa2d4-b7b3-49d3-8e65-26bc93c02def", "eventTime": "2018-09-27T11:28:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27a966457-90ba-4d47-a3df-33a443ae72cc", "record_id": "flaws_cloudtrail:0000330:27a966457-90ba-4d47-a3df-33a443ae72cc", "row_index": 330, "timestamp": "2018-09-27T11:28:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27a966457-90ba-4d47-a3df-33a443ae72cc", "eventTime": "2018-09-27T11:28:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "v0uG9lbnFLm5QNTxGHWcMPI0zmO0eSS2ydJiudz8pZ1H9cQBAzr0FndSW//YF5HVfom96nLMvzJ8PFQW2YC3MA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3098cb7b-bc45-47c6-a5cb-bad970b86051", "record_id": "flaws_cloudtrail:0000331:3098cb7b-bc45-47c6-a5cb-bad970b86051", "row_index": 331, "timestamp": "2018-09-27T11:28:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3098cb7b-bc45-47c6-a5cb-bad970b86051", "eventTime": "2018-09-27T11:28:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IsBA943GX0M+af9wzeVPEnAGThdbfOUKu0u8+lcpA1psD98a/gLU5kNI792b2JwDwi9Z0HsXZeTAI1pDqLwX/w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12dfc4be-0f30-445f-a689-f6803f9950c7", "record_id": "flaws_cloudtrail:0000332:12dfc4be-0f30-445f-a689-f6803f9950c7", "row_index": 332, "timestamp": "2018-09-27T11:28:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12dfc4be-0f30-445f-a689-f6803f9950c7", "eventTime": "2018-09-27T11:28:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "wa0uffGtWLIS97I8IfwiObp3QdCwcE6YQtF7gWGsfS2J0qyZiHdZrOtU9vShu87fZzXaWnyMgUnPspk6H8Bbdg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbd6ca1c-6c2f-4d04-84ca-a9c8eb2e4ea9", "record_id": "flaws_cloudtrail:0000333:cbd6ca1c-6c2f-4d04-84ca-a9c8eb2e4ea9", "row_index": 333, "timestamp": "2018-09-27T11:28:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbd6ca1c-6c2f-4d04-84ca-a9c8eb2e4ea9", "eventTime": "2018-09-27T11:28:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LDg/O47g8mAwlWnm3CPczmpgxHw+U6GvUhmR+AXbUQMPb2MjTzbegV9n3E1QwnpaZLf1J6i1AIcP+Wg3jaJlkw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d422433e-f3c6-4b86-bf91-89e1c5cae0f4", "record_id": "flaws_cloudtrail:0000334:d422433e-f3c6-4b86-bf91-89e1c5cae0f4", "row_index": 334, "timestamp": "2018-09-27T11:28:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d422433e-f3c6-4b86-bf91-89e1c5cae0f4", "eventTime": "2018-09-27T11:28:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tuk04/RS9vAg6bQXZj8PhO6+DfGimH7X05Vg4mEtN1ImhaIbPhu5pt38YAb3gPRugEG6A4UdmQpXtdTMv1+Qjw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d18fb1d-ef28-40b8-a2a2-225e76821c5", "record_id": "flaws_cloudtrail:0000335:0d18fb1d-ef28-40b8-a2a2-225e76821c5", "row_index": 335, "timestamp": "2018-09-27T11:28:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d18fb1d-ef28-40b8-a2a2-225e76821c5", "eventTime": "2018-09-27T11:28:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9xpEmkj9ACCYfYo4O509BOK1QC52jl2ay7uZJO03CFoA0+ksVqAEJhfahO8IwI1zs8mePK7ZMEG+SmvIKP8gBw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b2a6b8-9162-403b-a842-043de868e09c", "record_id": "flaws_cloudtrail:0000336:04b2a6b8-9162-403b-a842-043de868e09c", "row_index": 336, "timestamp": "2018-09-27T11:28:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b2a6b8-9162-403b-a842-043de868e09c", "eventTime": "2018-09-27T11:28:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "80ruX12ZRPZbQewN/9WfEqehqiTmevHRVcZUS/voudG+tleSsmIL/x0bx9aVyZ7DRdj1UZuEIXJE298HEoMsYQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c772cd58-cf2f-45d6-bdf6-481492bc49e6d", "record_id": "flaws_cloudtrail:0000337:c772cd58-cf2f-45d6-bdf6-481492bc49e6d", "row_index": 337, "timestamp": "2018-09-27T11:28:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c772cd58-cf2f-45d6-bdf6-481492bc49e6d", "eventTime": "2018-09-27T11:28:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "CIC1ygLqIhu2Hmhxya07VebGM1nCphxoNHlY19/QjDRpgK+FOqIAbKK5oKMwSQtGXSvK10g9kRht/4Jb4tZa2A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87aa7f12-4c43-4faa-ab1a-accef0af0e24", "record_id": "flaws_cloudtrail:0000338:87aa7f12-4c43-4faa-ab1a-accef0af0e24", "row_index": 338, "timestamp": "2018-09-27T11:28:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87aa7f12-4c43-4faa-ab1a-accef0af0e24", "eventTime": "2018-09-27T11:28:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "7i7Q5mxQP8RPxfYCIyQjJ5r8edCeWuvx4HVIdVDE9WjXe0YSCiWxLjDrrDi8l4sWX5tDSCMsfDILPh1AkrTU5A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e0a1491-25ea-4fc2-b682-4cefea9c7119", "record_id": "flaws_cloudtrail:0000339:8e0a1491-25ea-4fc2-b682-4cefea9c7119", "row_index": 339, "timestamp": "2018-09-27T11:28:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e0a1491-25ea-4fc2-b682-4cefea9c7119", "eventTime": "2018-09-27T11:28:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "S/L3xJ3JWgNGvMR5ktE4K2Xbr35VaymWtAxi76N1XYrYA5LPL5hOg80sduz2SujfhVr0ZboEDuEciafog6iQog=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdd2074e-dc8e-47bd-8e5a-43c2330ef66b", "record_id": "flaws_cloudtrail:0000340:fdd2074e-dc8e-47bd-8e5a-43c2330ef66b", "row_index": 340, "timestamp": "2018-09-27T11:28:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdd2074e-dc8e-47bd-8e5a-43c2330ef66b", "eventTime": "2018-09-27T11:28:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "CivR2tEdKI10wqT5tjvEutrqnb82C2+tyEneIZkCa44t//VleD6VtN0ameZ2ehem7MFeinJPgDLSZfHatQ/wDA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3eff4da-2f20-4658-8b6d-3be5cf7e941e", "record_id": "flaws_cloudtrail:0000341:d3eff4da-2f20-4658-8b6d-3be5cf7e941e", "row_index": 341, "timestamp": "2018-09-27T11:28:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3eff4da-2f20-4658-8b6d-3be5cf7e941e", "eventTime": "2018-09-27T11:28:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nTXzZ095K4RxN3BrOawnFxjqeygvxsgSOw62uItQxiZdzs2sHnyAvZt3HXJIY9fMUecVhKlc1NRvmt1ZQr0RuA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d376fba-3d04-4b7c-90e3-b839b809ca8d", "record_id": "flaws_cloudtrail:0000342:3d376fba-3d04-4b7c-90e3-b839b809ca8d", "row_index": 342, "timestamp": "2018-09-27T11:28:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d376fba-3d04-4b7c-90e3-b839b809ca8d", "eventTime": "2018-09-27T11:28:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "+jCgfAPQ/J5T/fae++KDSbAw3oEFFMqI0WRj7yGJKaT8mSOrnQ2VuhrT7vFJXxPFr/oLprQD6kXYBea1btc0fQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df4436ae-d5cb-469d-836b-fc01fd7c18b4", "record_id": "flaws_cloudtrail:0000343:df4436ae-d5cb-469d-836b-fc01fd7c18b4", "row_index": 343, "timestamp": "2018-09-27T11:28:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df4436ae-d5cb-469d-836b-fc01fd7c18b4", "eventTime": "2018-09-27T11:28:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9ce1337-86dd-4136-a944-f61563cf3bd", "record_id": "flaws_cloudtrail:0000344:c9ce1337-86dd-4136-a944-f61563cf3bd", "row_index": 344, "timestamp": "2018-09-27T11:28:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9ce1337-86dd-4136-a944-f61563cf3bd", "eventTime": "2018-09-27T11:28:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "WNaOwvpqx3wYe8XNvJEPoei/uitO/g+6D5egpejH934WEwpTphIxb+AhmPX9XlimB8srCjjXrQewNg/PYOxtCw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8902abe-da10-41c4-8972-6b624b6a83de", "record_id": "flaws_cloudtrail:0000345:b8902abe-da10-41c4-8972-6b624b6a83de", "row_index": 345, "timestamp": "2018-09-27T11:28:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8902abe-da10-41c4-8972-6b624b6a83de", "eventTime": "2018-09-27T11:28:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "irwp423dhsRKH11prAO0Dug/ZftphRdkaxKHVUrLJzltPG/zeDHRnrvkQjqllhMZIrUOKMr4XZdbPvCigG2xiA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12e12d89-26d6-40f7-bb30-4dee98a85e00", "record_id": "flaws_cloudtrail:0000346:12e12d89-26d6-40f7-bb30-4dee98a85e00", "row_index": 346, "timestamp": "2018-09-27T11:28:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12e12d89-26d6-40f7-bb30-4dee98a85e00", "eventTime": "2018-09-27T11:28:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "uCS6UazrVSHeu2saz0vUl15T/XIte1/IqN+pXR6k6Anp3YWzIw6sx4RyUbL3MU23U/Oxjuxh08+oPCxBDKLRQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e20f545-bb5d-41c8-acf7-12ffcdf5c63f", "record_id": "flaws_cloudtrail:0000347:2e20f545-bb5d-41c8-acf7-12ffcdf5c63f", "row_index": 347, "timestamp": "2018-09-27T11:28:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e20f545-bb5d-41c8-acf7-12ffcdf5c63f", "eventTime": "2018-09-27T11:28:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "cMK1SS/NstkhQYeUkHS7te6vtddbbGlEsVAoGGe8+CIS5J1PcBgXqIg+av/qaQ7kCbtzh+pCy+zQ0kmCtBT8mg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba72990-1811-486b-838a-59f4145f9831", "record_id": "flaws_cloudtrail:0000348:ba72990-1811-486b-838a-59f4145f9831", "row_index": 348, "timestamp": "2018-09-27T11:28:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba72990-1811-486b-838a-59f4145f9831", "eventTime": "2018-09-27T11:28:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "R3gOZsa/kfxviU4BhooRFSfQHuS36l92RbZgxyqPPPjVn/Bq9ffvis5PfOE/LINJ+imPpeaJMFK3Usp4R+nazg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ba654c2-600f-40d0-be12-a6a136536be", "record_id": "flaws_cloudtrail:0000349:3ba654c2-600f-40d0-be12-a6a136536be", "row_index": 349, "timestamp": "2018-09-27T11:28:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ba654c2-600f-40d0-be12-a6a136536be", "eventTime": "2018-09-27T11:28:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "PNxa1xJZsvq7h440jEiO5VVGMNYsxJPpUtJWXp2Y3IEYSkFKXlWBPlYf5yGKRl/MABEd9KeGEd1hsxIVg/A5Eg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10ce1236-4645-494d-9087-e265f16d4028", "record_id": "flaws_cloudtrail:0000350:10ce1236-4645-494d-9087-e265f16d4028", "row_index": 350, "timestamp": "2018-09-27T11:28:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10ce1236-4645-494d-9087-e265f16d4028", "eventTime": "2018-09-27T11:28:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "aZ1fE7zUVd8Xxqz5io0kvYhqiUvbAqP9Xk9p0yXJqTJ1OxfZuDy0faXQESa8OWSUpvL2IMzHzeXluWLag8UYPw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60ad273f-a4a6-44d1-9987-daad68a892947", "record_id": "flaws_cloudtrail:0000351:60ad273f-a4a6-44d1-9987-daad68a892947", "row_index": 351, "timestamp": "2018-09-27T11:28:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60ad273f-a4a6-44d1-9987-daad68a892947", "eventTime": "2018-09-27T11:28:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eLl4fNQwyPUIGPiOLAkP1RN0XWRJ7x9TLKVByFt+G5oU61K0DYofPKOVVcFFp1nv+7K7kWqk2DwHWCD7SzUr7A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a379e2c4-b445-40e9-8fc8-4635c55fbda6", "record_id": "flaws_cloudtrail:0000352:a379e2c4-b445-40e9-8fc8-4635c55fbda6", "row_index": 352, "timestamp": "2018-09-27T11:28:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a379e2c4-b445-40e9-8fc8-4635c55fbda6", "eventTime": "2018-09-27T11:28:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "r7omyh4evrQHBQ14jkw2LJnpMOX05RUugQ8bJnETx2KT1mcvkl4UNhwSbHEsdrGsOYSR6kSu9F2+Y12a3pZqWQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ad7891c-7a8c-4c63-a180-143597f9fd", "record_id": "flaws_cloudtrail:0000353:8ad7891c-7a8c-4c63-a180-143597f9fd", "row_index": 353, "timestamp": "2018-09-27T11:28:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ad7891c-7a8c-4c63-a180-143597f9fd", "eventTime": "2018-09-27T11:28:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "g9CKDLvz3Y0ibQ5kGIVLEQSUcV4ROVIOXR6AIXZStaPszTd208xOYSq7rrO9XRhpUocIKkflHefP5D+MZnK6xA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf2a3d1a-b75d-4c22-b4ac-de53d335df2a", "record_id": "flaws_cloudtrail:0000354:bf2a3d1a-b75d-4c22-b4ac-de53d335df2a", "row_index": 354, "timestamp": "2018-09-27T11:28:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf2a3d1a-b75d-4c22-b4ac-de53d335df2a", "eventTime": "2018-09-27T11:28:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "T26/Wm3iit47qE38nrZHuNh9WW2HWRtWzA8Yw99Ft8enPh35/nGTI41PKpVLbHF/hPCamXbKQ6U6DDwFvZ6flg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5e2585-0e25-47bf-a42f-99a534200e4f", "record_id": "flaws_cloudtrail:0000355:dc5e2585-0e25-47bf-a42f-99a534200e4f", "row_index": 355, "timestamp": "2018-09-27T11:28:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5e2585-0e25-47bf-a42f-99a534200e4f", "eventTime": "2018-09-27T11:28:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3yIdX8/srs0rIRG+WdUsaIE0WvrLkV7RI+jejCtj6VHdcTM4X2nwviXm+Z2wUCLBpaSmcCnVpii9tgeVRFAESg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfe97ae9-fd90-4b4b-815b-79f86c9a2f6b", "record_id": "flaws_cloudtrail:0000356:bfe97ae9-fd90-4b4b-815b-79f86c9a2f6b", "row_index": 356, "timestamp": "2018-09-27T11:28:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfe97ae9-fd90-4b4b-815b-79f86c9a2f6b", "eventTime": "2018-09-27T11:28:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3nbWLngRTpSF+CjdmaF8dMLnqrcmP2Xy8ovt5fhkgHPM6X5X4jADRe6xun+rSL7ofe/sdPB+sIFitZmsg0kbgw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8025bd60-6519-4f23-a6e0-4f44144bd01", "record_id": "flaws_cloudtrail:0000357:8025bd60-6519-4f23-a6e0-4f44144bd01", "row_index": 357, "timestamp": "2018-09-27T11:28:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8025bd60-6519-4f23-a6e0-4f44144bd01", "eventTime": "2018-09-27T11:28:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "375562c4-f80c-4033-8b94-754206ea6a99", "record_id": "flaws_cloudtrail:0000358:375562c4-f80c-4033-8b94-754206ea6a99", "row_index": 358, "timestamp": "2018-09-27T11:28:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "375562c4-f80c-4033-8b94-754206ea6a99", "eventTime": "2018-09-27T11:28:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "65dAVAUUgWxCYYEzi8Y9q+HSvZ2j9+ojlx6fNF7/JtbC9Mr0/Mbydjhah1Fd2IUrMUA9DtlAV4nvt5JkTLxu3w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9606d51d-a059-4df2-98ff-b0b6d4d100cc", "record_id": "flaws_cloudtrail:0000359:9606d51d-a059-4df2-98ff-b0b6d4d100cc", "row_index": 359, "timestamp": "2018-09-27T11:28:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9606d51d-a059-4df2-98ff-b0b6d4d100cc", "eventTime": "2018-09-27T11:28:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HW+4T4CsEKD1npKluY1u6wamAeKpB3+W3TlD2QVq+AwUf91BxV/DYyTMia8zUtf/YmNUJQTAbVi7LXtfV2NagQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae91d277-5878-4bda-85bd-c51e72163d99", "record_id": "flaws_cloudtrail:0000360:ae91d277-5878-4bda-85bd-c51e72163d99", "row_index": 360, "timestamp": "2018-09-27T11:28:31Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae91d277-5878-4bda-85bd-c51e72163d99", "eventTime": "2018-09-27T11:28:31Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "SlO720rO/GjPLlV7a4sZ3nupixYiRiva+5fhvmYEbEvT29mG7HkqgpGfYGZ5+x4EDrC8TAmolIdz8ZCN3DiCUQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03769ae-ee0b-4b80-ba36-4cb80fafcce4", "record_id": "flaws_cloudtrail:0000361:03769ae-ee0b-4b80-ba36-4cb80fafcce4", "row_index": 361, "timestamp": "2018-09-27T11:28:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03769ae-ee0b-4b80-ba36-4cb80fafcce4", "eventTime": "2018-09-27T11:28:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "vTAHe3LP+ilD84aQ00DwNB+uplvC9nmdyoM7J6hV7uqiEcUN/Tm8xh7NpLLyhIWlsv7k/1+TmwqzvcWRsMtJsA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f00aae3-af8f-4824-ad02-5e99cfeac12a", "record_id": "flaws_cloudtrail:0000362:3f00aae3-af8f-4824-ad02-5e99cfeac12a", "row_index": 362, "timestamp": "2018-09-27T11:28:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f00aae3-af8f-4824-ad02-5e99cfeac12a", "eventTime": "2018-09-27T11:28:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "c5Hop5JdTmwBYHZ1QekUDQBLemE2UrkDHL/c5mjDcTsYMug3XswP2KrfQ/lO5RWPMZD+8x8taj4p/pSB1AzTWQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2501d989-6dc1-4f36-b8ef-39f1452511e5", "record_id": "flaws_cloudtrail:0000363:2501d989-6dc1-4f36-b8ef-39f1452511e5", "row_index": 363, "timestamp": "2018-09-27T11:28:35Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2501d989-6dc1-4f36-b8ef-39f1452511e5", "eventTime": "2018-09-27T11:28:35Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eK8MbieSNhuK5aNY6frNQHmbcLfkPTKVXvu43GRIG2KWBLBQYbsSopJ9q8EJYajFROWaBY1oHnzNmGCjd8KmdQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e469491ba-bed1-4da3-aabc-26a9f82f3afa", "record_id": "flaws_cloudtrail:0000364:e469491ba-bed1-4da3-aabc-26a9f82f3afa", "row_index": 364, "timestamp": "2018-09-27T11:28:35Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e469491ba-bed1-4da3-aabc-26a9f82f3afa", "eventTime": "2018-09-27T11:28:35Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "GIPcjKX2/U1tmftzWgZdw4IxEznqPJS9/Qk5aKEKRTNL2sqXZR80xV/kHgROlrm+mO7/u9im63B18b6a2s1Bzw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a8e80ec-5f63-40d3-8a3b-9efe55b7214e", "record_id": "flaws_cloudtrail:0000365:4a8e80ec-5f63-40d3-8a3b-9efe55b7214e", "row_index": 365, "timestamp": "2018-09-27T11:28:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a8e80ec-5f63-40d3-8a3b-9efe55b7214e", "eventTime": "2018-09-27T11:28:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IrUZCrM6HzEoHEWeLNEZyz08NtBwU/ljNe1z1bCcRdkUH4H+drBKRdT8I3EuCr6TesYFoo1vq4PeJDNXTZPP3A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0a28cbb-5d32-41da-aa38-3d99680cc1f", "record_id": "flaws_cloudtrail:0000366:f0a28cbb-5d32-41da-aa38-3d99680cc1f", "row_index": 366, "timestamp": "2018-09-27T11:28:37Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0a28cbb-5d32-41da-aa38-3d99680cc1f", "eventTime": "2018-09-27T11:28:37Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "UyCzN//rLEJeP+3HIE/CPKpvEwccnyYd3MIxriqzAOoJK5LPkVDPgvRES3hWTXfKMBOz8SWJfJgJKDRWcmNd+A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "342a7a6a-a04e-487d-bebc-ff590a04cf67", "record_id": "flaws_cloudtrail:0000367:342a7a6a-a04e-487d-bebc-ff590a04cf67", "row_index": 367, "timestamp": "2018-09-27T11:28:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "342a7a6a-a04e-487d-bebc-ff590a04cf67", "eventTime": "2018-09-27T11:28:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "39RS83sUYH+1ZRQz2Xw7lHkkymSGBtjdRoK10xsM7tJGzX24lBoazDLS17+vpS/P0afMqpfM3lNEMg+AeWT0lA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "459ebcbf-100c-4689-83e4-6045bc941f93", "record_id": "flaws_cloudtrail:0000368:459ebcbf-100c-4689-83e4-6045bc941f93", "row_index": 368, "timestamp": "2018-09-27T11:28:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "459ebcbf-100c-4689-83e4-6045bc941f93", "eventTime": "2018-09-27T11:28:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YeyHZXyuftvwNznwcvmsNxy80lLLljWure7dD9NQAZKjlq1bbl5RYbPTN2ez8auJ0ko3nyeMv61Jv5FQ+Ge9OQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48b25f55-ab7e-4944-93b3-0e3fbd0d17af", "record_id": "flaws_cloudtrail:0000369:48b25f55-ab7e-4944-93b3-0e3fbd0d17af", "row_index": 369, "timestamp": "2018-09-27T11:28:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48b25f55-ab7e-4944-93b3-0e3fbd0d17af", "eventTime": "2018-09-27T11:28:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LamJYVZCwPrdPVP48kI4iiEtg3r3/7PReQMtWiKKf+Y8yWpMom5BwX6cU93CGaTRFjAqGobo4kjxN0hym7FdAQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "086390b8-e089-4b5e-b89d-39cef637f4d8", "record_id": "flaws_cloudtrail:0000370:086390b8-e089-4b5e-b89d-39cef637f4d8", "row_index": 370, "timestamp": "2018-09-27T11:28:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "086390b8-e089-4b5e-b89d-39cef637f4d8", "eventTime": "2018-09-27T11:28:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Rkr873YuSsyZQ7yQ1Je5bnpK77waA5PXzV9tkNqwdciABgg6UsqLCohzm4IHjIRJj+QDr7dO9xgbXfBgsSEpYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ad4d00d-d905-4d73-bb9a-7f1949daf45d", "record_id": "flaws_cloudtrail:0000371:6ad4d00d-d905-4d73-bb9a-7f1949daf45d", "row_index": 371, "timestamp": "2018-09-27T11:28:40Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ad4d00d-d905-4d73-bb9a-7f1949daf45d", "eventTime": "2018-09-27T11:28:40Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "fWcJSYvvTcrDOuD2lqO7qMuq6ZIbGUSucZviTSSBmLF/bdoQZEVUhG/YKsfLQqwhciLro1LaBnOT7FVokWA5zA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45a582a6-c72b-4071-ad3b-862aa7a90d63", "record_id": "flaws_cloudtrail:0000372:45a582a6-c72b-4071-ad3b-862aa7a90d63", "row_index": 372, "timestamp": "2018-09-27T11:28:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45a582a6-c72b-4071-ad3b-862aa7a90d63", "eventTime": "2018-09-27T11:28:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "mim/sOMPqvnkXjOFYvZ9emY7K7hSoKZj7saGKbd4By2cd8sNg5NbnE7aKHmr4E2Aoc9Di5N2u0sZeDp+/Wb0yg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61f2a7e3-c053-45ee-816b-8e09e4d4ded2", "record_id": "flaws_cloudtrail:0000373:61f2a7e3-c053-45ee-816b-8e09e4d4ded2", "row_index": 373, "timestamp": "2018-09-27T11:28:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61f2a7e3-c053-45ee-816b-8e09e4d4ded2", "eventTime": "2018-09-27T11:28:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "yJZvodU4jlPdEtVY43icELjh4MRj+GP5zIdSkCdwj50C02AAHzbi6dF2oI6jr6ROxbYTsD20tQvRaDjWuBc2Ww=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43241f3-414b-41a4-9d2d-486f7655949a", "record_id": "flaws_cloudtrail:0000374:43241f3-414b-41a4-9d2d-486f7655949a", "row_index": 374, "timestamp": "2018-09-27T11:28:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43241f3-414b-41a4-9d2d-486f7655949a", "eventTime": "2018-09-27T11:28:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffcee95c-92b3-4ea7-b8ed-e1dc0ec8934a", "record_id": "flaws_cloudtrail:0000375:ffcee95c-92b3-4ea7-b8ed-e1dc0ec8934a", "row_index": 375, "timestamp": "2018-09-27T11:28:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffcee95c-92b3-4ea7-b8ed-e1dc0ec8934a", "eventTime": "2018-09-27T11:28:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "c50jz6WQgGya2zxTkbJWZeUaS+zFJAIoVrDGWkV+nF+FD/eQIvY5kcDl9QDfzDxklSPOX+fsNobOMwYPcR3/Og=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99a11621-4242-45c4-9dec-dbb978123a87", "record_id": "flaws_cloudtrail:0000376:99a11621-4242-45c4-9dec-dbb978123a87", "row_index": 376, "timestamp": "2018-09-27T11:28:43Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99a11621-4242-45c4-9dec-dbb978123a87", "eventTime": "2018-09-27T11:28:43Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YnTKgzmV8ZWCNRgzHeiVPM2AzL7f7EJTLMWU1j4UVNoDfc/5PXhDGRFFmQYaW7Q7m+0XYsj07fzWjuE0flDSYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a78a95ad-eca0-475f-9722-56e83e11a814", "record_id": "flaws_cloudtrail:0000377:a78a95ad-eca0-475f-9722-56e83e11a814", "row_index": 377, "timestamp": "2018-09-27T11:28:43Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a78a95ad-eca0-475f-9722-56e83e11a814", "eventTime": "2018-09-27T11:28:43Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HQbtAv9mUhZ6p4HGIswaawv5OW2jFtkKzqjpGanzJdzpl0OycBQ8aRYUIFLJr+o3miXdvShfu9xdwgy72GLzAw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83cf76ca-f669-40be-87f0-e717902", "record_id": "flaws_cloudtrail:0000378:83cf76ca-f669-40be-87f0-e717902", "row_index": 378, "timestamp": "2018-09-27T11:28:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83cf76ca-f669-40be-87f0-e717902", "eventTime": "2018-09-27T11:28:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "aSWxlUIrDUu/1OpB/HNMN0SqUknp37esZ4E0SqM3q5Qe5TWc9YCBKDBpbQyq3jtj1BHfOG5RcLGXkcl7MiNrYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ef71fe-a950-4e81-89f1-653643c517bcf", "record_id": "flaws_cloudtrail:0000379:59ef71fe-a950-4e81-89f1-653643c517bcf", "row_index": 379, "timestamp": "2018-09-27T11:28:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ef71fe-a950-4e81-89f1-653643c517bcf", "eventTime": "2018-09-27T11:28:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8lMCzXDTzN86kK/AYDNhN1CYlmec+P+WMj//nnNYtAzb8RbWCyCzjTfTMCk7CAQo3puripJX1pMOVsG1Chosvg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c243f44e-395d-4202-aa81-e77771b792b3", "record_id": "flaws_cloudtrail:0000380:c243f44e-395d-4202-aa81-e77771b792b3", "row_index": 380, "timestamp": "2018-09-27T11:28:45Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c243f44e-395d-4202-aa81-e77771b792b3", "eventTime": "2018-09-27T11:28:45Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "1jgDm8bR1iH2J3xhWVTyOc2tBXFPh4avaI9p4skn5JlQ3x1Z31kAACakyfvI0yc2yy/dDLxK+3HvWwDK0IrxcQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89e93191-b23b-4de3-9c4d-e71ee1baa626", "record_id": "flaws_cloudtrail:0000381:89e93191-b23b-4de3-9c4d-e71ee1baa626", "row_index": 381, "timestamp": "2018-09-27T11:28:45Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89e93191-b23b-4de3-9c4d-e71ee1baa626", "eventTime": "2018-09-27T11:28:45Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "jTfPEs1lg2Ui3h+6vhLPgX2XtefrGG/TFAYiGEmWx84L1LDCPsVO3dEBW4jl3zzhPirQSngDpWDQJBycxfFHZw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b87f027-157b-43cd-826c-96175a66f86a", "record_id": "flaws_cloudtrail:0000382:2b87f027-157b-43cd-826c-96175a66f86a", "row_index": 382, "timestamp": "2018-09-27T11:28:46Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b87f027-157b-43cd-826c-96175a66f86a", "eventTime": "2018-09-27T11:28:46Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "a5iDnqKscaQzuPZXY9ABrNWfJkUJw67YLQk4iOYVTs0Wm6lXbzd0CLju8fwA/qBUdpgzGI9RBnZzShb9PoqFrA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "024b774a-02c6-4ad8-ba65-86043b702", "record_id": "flaws_cloudtrail:0000383:024b774a-02c6-4ad8-ba65-86043b702", "row_index": 383, "timestamp": "2018-09-27T11:28:46Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "024b774a-02c6-4ad8-ba65-86043b702", "eventTime": "2018-09-27T11:28:46Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Pfd4b7uuWrKhzw9JmT7MFYYFdGdyw/AZZu6FL0t4Bs+HJkP2px2u95gKgn5WV7YAmdxvM36lVonH0OISRzzmwQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "942a3936-126d-48e7-92d6-318d16770a03", "record_id": "flaws_cloudtrail:0000384:942a3936-126d-48e7-92d6-318d16770a03", "row_index": 384, "timestamp": "2018-09-27T11:28:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "942a3936-126d-48e7-92d6-318d16770a03", "eventTime": "2018-09-27T11:28:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "skQDjIsM8RD9WQ6FfbOb8ZSkWQwqsZgLh4ID0MjaKgdN2Ck/69pjpS1RURkfuu6TiYS8N6M5eEC3l/eQbVYxgQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27096bc-29a9-47a8-a105-f936e4ecde01", "record_id": "flaws_cloudtrail:0000385:27096bc-29a9-47a8-a105-f936e4ecde01", "row_index": 385, "timestamp": "2018-09-27T11:28:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27096bc-29a9-47a8-a105-f936e4ecde01", "eventTime": "2018-09-27T11:28:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "PGU/rKotCWcJjNJEcG0P4qBWcsbVkfP4m7ejl/myj8pfvGRB29vVYYVe7KtMsgppXhhe0jkzKhtUynorDbmEhg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5a83c3b-25aa-4f84-ba40-770ca8f313e9", "record_id": "flaws_cloudtrail:0000386:a5a83c3b-25aa-4f84-ba40-770ca8f313e9", "row_index": 386, "timestamp": "2018-09-27T11:28:48Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5a83c3b-25aa-4f84-ba40-770ca8f313e9", "eventTime": "2018-09-27T11:28:48Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "emJea4YtoxCjeGbWy3PTTZImz9rxMbIeQMCAtG0SRug0ekFvqROKOHIZnBKnlcLHHWNDj+2EZrFJejvQKR3HUA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e76fa9b4-1e4f-45e1-9d74-0451eaa3b3ee", "record_id": "flaws_cloudtrail:0000387:e76fa9b4-1e4f-45e1-9d74-0451eaa3b3ee", "row_index": 387, "timestamp": "2018-09-27T11:28:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e76fa9b4-1e4f-45e1-9d74-0451eaa3b3ee", "eventTime": "2018-09-27T11:28:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qJsBZVFtOMgM7RZoOgtHv17u2cnMqPLW0U4oFt+8rMCGbBWfi2L6+1l6xBsb7N7RlfWytr4jssG6ACnaWrHFXQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2df4780-e59d-4a45-9b79-9d883669", "record_id": "flaws_cloudtrail:0000388:c2df4780-e59d-4a45-9b79-9d883669", "row_index": 388, "timestamp": "2018-09-27T11:28:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2df4780-e59d-4a45-9b79-9d883669", "eventTime": "2018-09-27T11:28:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "wz4mK+VHuFpIo2IG1O5EPtE/GT0DGqCYid7tySFze//nHEkHhz3w8xxGbFnIQY1dFb+85wavm4gmhlpf9NO/YA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b216a4e3-ee1d-4b80-9250-b6ca51658d4e", "record_id": "flaws_cloudtrail:0000389:b216a4e3-ee1d-4b80-9250-b6ca51658d4e", "row_index": 389, "timestamp": "2018-09-27T11:28:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b216a4e3-ee1d-4b80-9250-b6ca51658d4e", "eventTime": "2018-09-27T11:28:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8jEqTZo/M4TkrWwDRIxXXwQBjYDuVBc40A9IDaOZO937Th/N9H1eKEdFr+6U0cdEJKMVhMPyPu+ykxVRxfk4zw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f00f9b2f-64d9-4900-9a7c-59e716544f1c", "record_id": "flaws_cloudtrail:0000390:f00f9b2f-64d9-4900-9a7c-59e716544f1c", "row_index": 390, "timestamp": "2018-09-27T11:28:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f00f9b2f-64d9-4900-9a7c-59e716544f1c", "eventTime": "2018-09-27T11:28:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "5g7LR6AkTO+BD1/zqdom6gpxEm4pUDaGhuxZNNz3Vd+d+NgorB6K7+9dFRn8ecPorTKbNwgSoWTGCguB+RSWFw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43fe2a08-4471-417a-a043-db1357c107f8", "record_id": "flaws_cloudtrail:0000391:43fe2a08-4471-417a-a043-db1357c107f8", "row_index": 391, "timestamp": "2018-09-27T11:28:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43fe2a08-4471-417a-a043-db1357c107f8", "eventTime": "2018-09-27T11:28:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "dqd1k6lVNWd30vvBCD3iZGt8iXJZ3b0HUbZFRFqr3yvVW+Yza/+eTMMNMBwJMoHyPjetOpxORNwvdy8SHKTvKQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14a23c3f-7889-4960-b672-484a6bba4a4d", "record_id": "flaws_cloudtrail:0000392:14a23c3f-7889-4960-b672-484a6bba4a4d", "row_index": 392, "timestamp": "2018-09-27T11:28:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14a23c3f-7889-4960-b672-484a6bba4a4d", "eventTime": "2018-09-27T11:28:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "OEzrOH5+QbKud29KyyrP2Y+UkI3lJBJPqaNVlRiXohwMuP1cQBoYW/esXcnbZzcxghFB7HLveVrR6CnxwJ32gA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0893c702-7ed2-4874-af18-e56d118284d3", "record_id": "flaws_cloudtrail:0000393:0893c702-7ed2-4874-af18-e56d118284d3", "row_index": 393, "timestamp": "2018-09-27T11:28:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0893c702-7ed2-4874-af18-e56d118284d3", "eventTime": "2018-09-27T11:28:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "bVV0ytofDdoB51XyJqmWmSpimG6MjDBn7Rp50CWjtH6nxtlYkRzzdshUFERLwJvq+mBywM5VKTjkR755W8k7SA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5749cfb1-bd9e-4ce7-9485-be263eab02fe", "record_id": "flaws_cloudtrail:0000394:5749cfb1-bd9e-4ce7-9485-be263eab02fe", "row_index": 394, "timestamp": "2018-09-27T11:28:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5749cfb1-bd9e-4ce7-9485-be263eab02fe", "eventTime": "2018-09-27T11:28:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "0NOWr9+zm+2wrQz4DqHjHU2X4xed+wEx4FqPPQ0gQHZOzsCtjrvfzZJrWDbB3a1Lt2HnBCwRelrT8AuKxYW3/A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86c62381-b7bc-465d-8a8a-3ef1f65819a4", "record_id": "flaws_cloudtrail:0000395:86c62381-b7bc-465d-8a8a-3ef1f65819a4", "row_index": 395, "timestamp": "2018-09-27T11:28:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86c62381-b7bc-465d-8a8a-3ef1f65819a4", "eventTime": "2018-09-27T11:28:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gXSR3QjhVjCbF1xNJtkGHPIkk3Vb+lm3jyef7Hg7AXVjJGssF2C1NCoY9pOkAtrV98RqgX9Y3hjjrUq98TFpTg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032518be9-d2c1-4547-b3a3-329dc5a71b06", "record_id": "flaws_cloudtrail:0000396:032518be9-d2c1-4547-b3a3-329dc5a71b06", "row_index": 396, "timestamp": "2018-09-27T11:28:54Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032518be9-d2c1-4547-b3a3-329dc5a71b06", "eventTime": "2018-09-27T11:28:54Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VleJGQ8DToFVXcDcG5pDkps4X/96d0Y7hGkmUdyJsRBRToeSqLlY1SJ98FURuGM0SKcbYBtuyO1nVEvHv7jv9g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d047a26b-b5ed-4e0c-b012-17c095303c6dc", "record_id": "flaws_cloudtrail:0000397:d047a26b-b5ed-4e0c-b012-17c095303c6dc", "row_index": 397, "timestamp": "2018-09-27T11:28:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d047a26b-b5ed-4e0c-b012-17c095303c6dc", "eventTime": "2018-09-27T11:28:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "O/XW6sqSu2sBeWjgp1XfFjJaHCBkQigLByO1/Qu+DH9AF08thWB0vs49zEGnkEL73aM+doFt/+a+IU5BaAHmKA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "751a5f84-5a41-4652-9768-1da6748a6fac", "record_id": "flaws_cloudtrail:0000398:751a5f84-5a41-4652-9768-1da6748a6fac", "row_index": 398, "timestamp": "2018-09-27T11:28:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "751a5f84-5a41-4652-9768-1da6748a6fac", "eventTime": "2018-09-27T11:28:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HRqUEswHtZKbymg1lnTB/dZlyr7aZAA5rgQ6mIcGguUZWrP6HDPMNdx/WW9Jo32e07zUefanXTwhmxBm/vP9Tw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed9acdc9-8f20-42ed-94bd-c6ba5ef05868", "record_id": "flaws_cloudtrail:0000399:ed9acdc9-8f20-42ed-94bd-c6ba5ef05868", "row_index": 399, "timestamp": "2018-09-27T11:28:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed9acdc9-8f20-42ed-94bd-c6ba5ef05868", "eventTime": "2018-09-27T11:28:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "kDftD+uJmW0VQxNcxP+vj7EhMPlscngBXfoe4yacclqPjxEa7GmIXA5h2lHlTkGxqELJFGo6XCIJoN2oAhYgww=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "071ed02d-2e06-4b10-a9fb-800928bff55f", "record_id": "flaws_cloudtrail:0000400:071ed02d-2e06-4b10-a9fb-800928bff55f", "row_index": 400, "timestamp": "2018-09-27T11:28:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "071ed02d-2e06-4b10-a9fb-800928bff55f", "eventTime": "2018-09-27T11:28:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "r3tCyrd8GzPpM5Zpt5KcWzRCl3IoYhwS0SyhalVTo3oj0vEotyWy9xHBK8ZwHN1AQr6+exTVNVG/wZ3Yvge9Pg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e982f8a3-4c25-4d19-a4d2-2a83ccb8f7a6", "record_id": "flaws_cloudtrail:0000401:e982f8a3-4c25-4d19-a4d2-2a83ccb8f7a6", "row_index": 401, "timestamp": "2018-09-27T11:28:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e982f8a3-4c25-4d19-a4d2-2a83ccb8f7a6", "eventTime": "2018-09-27T11:28:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iR6ftlmBf52Vk/VtEXtT46k+a7wEP+O38gofoM9s07yIf5lFmH0wfGq50bvOPQG7d9LncLTokV+U+N4jo+o1BQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "151104-360e-4151-9a02-b20e04896", "record_id": "flaws_cloudtrail:0000402:151104-360e-4151-9a02-b20e04896", "row_index": 402, "timestamp": "2018-09-27T11:28:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "151104-360e-4151-9a02-b20e04896", "eventTime": "2018-09-27T11:28:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nuse4fili11cn3VESbPNeDb+6ig+G7i/IcnIch1MVcln12k4nIXnmWsxP9fsWHLI1Wi9FJd7+GxFEotxrBe8IQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5abe976d-cb3a-44af-8cdb-ff9e9194d4cf", "record_id": "flaws_cloudtrail:0000403:5abe976d-cb3a-44af-8cdb-ff9e9194d4cf", "row_index": 403, "timestamp": "2018-09-27T11:28:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5abe976d-cb3a-44af-8cdb-ff9e9194d4cf", "eventTime": "2018-09-27T11:28:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "dzwyJdkVnatiz0SR2h62amtn7EUb2vgwYpfePH+Q8BsuhEAC2e0zFoZvgPpkPPPmhkslClueHcOjofRDcNUHmA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "388792fb-dd95-474c-af7d-94851c9f7669", "record_id": "flaws_cloudtrail:0000404:388792fb-dd95-474c-af7d-94851c9f7669", "row_index": 404, "timestamp": "2018-09-27T11:28:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "388792fb-dd95-474c-af7d-94851c9f7669", "eventTime": "2018-09-27T11:28:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "BEqdk1J4JwV0SBnj5qvDjGxS7P/YsvksLRIi22ADwXfnYtvy5jNVcGzlpMOd/CZ4jO08Kt8HxbVRxwsBCO3VCg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccfa7ad7-ead4-481b-a8a1-a7ad96f052a2", "record_id": "flaws_cloudtrail:0000405:ccfa7ad7-ead4-481b-a8a1-a7ad96f052a2", "row_index": 405, "timestamp": "2018-09-27T11:28:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccfa7ad7-ead4-481b-a8a1-a7ad96f052a2", "eventTime": "2018-09-27T11:28:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "KGTfScd6bSN6qJGQSVFIitdkD+GEC9IhJyZPTK8/r4wJk2yVWdBDCuKxsQURvuCmFEQ0s/RlfGpEyEiJjTNKng=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c537b7b-6f5b-44da-a294-ea8ad604180", "record_id": "flaws_cloudtrail:0000406:7c537b7b-6f5b-44da-a294-ea8ad604180", "row_index": 406, "timestamp": "2018-09-27T11:28:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c537b7b-6f5b-44da-a294-ea8ad604180", "eventTime": "2018-09-27T11:28:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "v4m2cvNkN1QdO+uCSUy1pgJV9/REc87qrxHOE0GKYBPT3u8g+NkQUvk23F/f9q2zlxI4LibErlPh8AjtoHpJRQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99bd2e2-fd38-487b-bfe2-1ce44c72afd1", "record_id": "flaws_cloudtrail:0000407:f99bd2e2-fd38-487b-bfe2-1ce44c72afd1", "row_index": 407, "timestamp": "2018-09-27T11:28:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99bd2e2-fd38-487b-bfe2-1ce44c72afd1", "eventTime": "2018-09-27T11:28:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "MzArUA7T9XrgYHbMGYO3ItVdD2pOA17zoM8PGwx0O0rI+CJv24CMreyCm6j+4k4RoUny09mQdoT8U2OFXoMp1g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ab294220-b121-47a4-a406-371ece704e17", "record_id": "flaws_cloudtrail:0000408:5ab294220-b121-47a4-a406-371ece704e17", "row_index": 408, "timestamp": "2018-09-27T11:29:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ab294220-b121-47a4-a406-371ece704e17", "eventTime": "2018-09-27T11:29:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d2664e5-93f3-4166-8632-4d581be36b66", "record_id": "flaws_cloudtrail:0000409:8d2664e5-93f3-4166-8632-4d581be36b66", "row_index": 409, "timestamp": "2018-09-27T11:29:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d2664e5-93f3-4166-8632-4d581be36b66", "eventTime": "2018-09-27T11:29:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qM5m2vseSY7SxtdyHx2le1Q/xebd/upjkTiVtGL4OZR2CZORwkMlXEp7zTzCJFs+4NoCCr7RAS5EA/TLtrq8VQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ade2d6cd-136d-4e42-bb10-2781e641dd01", "record_id": "flaws_cloudtrail:0000410:ade2d6cd-136d-4e42-bb10-2781e641dd01", "row_index": 410, "timestamp": "2018-09-27T11:29:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ade2d6cd-136d-4e42-bb10-2781e641dd01", "eventTime": "2018-09-27T11:29:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "cv41oOp+pdkRS0ybCjxqmeinlwlCjoHsUjpHX6tBeibAdEZYzEDatJCMbo7CWHFdR3NGKU3fRb1z0oLHB7WEOw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3f4b3d-584a-4aae-b187-ec0d794d3acf", "record_id": "flaws_cloudtrail:0000411:6d3f4b3d-584a-4aae-b187-ec0d794d3acf", "row_index": 411, "timestamp": "2018-09-27T11:29:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3f4b3d-584a-4aae-b187-ec0d794d3acf", "eventTime": "2018-09-27T11:29:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "l77rPPRbgyzRk/bM9lgXu61ITSZT3Jt7LmFNtE8yp44Jq3A1dQs4s4SI9+uvPppJmpnVJR0AWIiyGdAT8L2xqQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5f8ca7e-7b0a-4966-b364-f0957a4e7275", "record_id": "flaws_cloudtrail:0000412:b5f8ca7e-7b0a-4966-b364-f0957a4e7275", "row_index": 412, "timestamp": "2018-09-27T11:29:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5f8ca7e-7b0a-4966-b364-f0957a4e7275", "eventTime": "2018-09-27T11:29:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "MGtsUSf+WvBR3m14Oz1IdmAdiT5sm27tELFp/1B3M93K3FY9Y0RJNTb0bZQS8p16BoxiEwBRmkGo8iHNIIs+Jg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d56b1d61-6f62-4f38-9065-dc2fdcf433194", "record_id": "flaws_cloudtrail:0000413:d56b1d61-6f62-4f38-9065-dc2fdcf433194", "row_index": 413, "timestamp": "2018-09-27T11:29:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d56b1d61-6f62-4f38-9065-dc2fdcf433194", "eventTime": "2018-09-27T11:29:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "P2XmYI37M9S0Pz+tU4dLxM9TnHJlJculvH42M82NebTFFutn3w9NtI41+Xo7J1hvXRarrBf/VPcnWd+xG85oGw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "745f093e-59dc-41b9-9cd0-59e7d17080f8", "record_id": "flaws_cloudtrail:0000414:745f093e-59dc-41b9-9cd0-59e7d17080f8", "row_index": 414, "timestamp": "2018-09-27T11:29:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "745f093e-59dc-41b9-9cd0-59e7d17080f8", "eventTime": "2018-09-27T11:29:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VDL6j39nXxwa9dSFdwI4CpnOO3sXUiuJtoYrc1T18uyCmWKsBZCvl8YefoptAwyvtsOVzf/X+/1tw/LMxw8gfw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "599fb031-dbba-4914-ae7a-4027859d0417", "record_id": "flaws_cloudtrail:0000415:599fb031-dbba-4914-ae7a-4027859d0417", "row_index": 415, "timestamp": "2018-09-27T11:29:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "599fb031-dbba-4914-ae7a-4027859d0417", "eventTime": "2018-09-27T11:29:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecf5202d-0dce-4f56-a009-96b4c0e1436c", "record_id": "flaws_cloudtrail:0000416:ecf5202d-0dce-4f56-a009-96b4c0e1436c", "row_index": 416, "timestamp": "2018-09-27T11:29:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecf5202d-0dce-4f56-a009-96b4c0e1436c", "eventTime": "2018-09-27T11:29:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "H73rUTFEJMZUAu6M6F0nGWMNzDra8Z8zxyVGjt+69ZMczaCxwpNvpIIJdP/dBKcJVPShh6FLtS07cTVNmyxE7A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d603edd-1376-44cd-a4e8-811a3c491f79", "record_id": "flaws_cloudtrail:0000417:7d603edd-1376-44cd-a4e8-811a3c491f79", "row_index": 417, "timestamp": "2018-09-27T11:29:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d603edd-1376-44cd-a4e8-811a3c491f79", "eventTime": "2018-09-27T11:29:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "T3jsVM7U9C9XqUbePT2U1aTTRI2Y4H4Sa32FD4GcvbnOKWNVc7iqLXiyMv+JV92u1YfwQ36HeUEGz6X9VeatYw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816477b4f-12b5-4bd0-942f-ce9cf1925d63", "record_id": "flaws_cloudtrail:0000418:816477b4f-12b5-4bd0-942f-ce9cf1925d63", "row_index": 418, "timestamp": "2018-09-27T11:29:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816477b4f-12b5-4bd0-942f-ce9cf1925d63", "eventTime": "2018-09-27T11:29:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "5IZOfeMvCLTbEN0DmIbswXNEs/fa+fiwEm7z2f65PEbQsOQag518dn0IJ/+Mb580SPEZa06mecR9ITvIW4Ixgw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0306dd18-fd57-49f5-8bb9-b5682a29968", "record_id": "flaws_cloudtrail:0000419:0306dd18-fd57-49f5-8bb9-b5682a29968", "row_index": 419, "timestamp": "2018-09-27T11:29:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0306dd18-fd57-49f5-8bb9-b5682a29968", "eventTime": "2018-09-27T11:29:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LvkkmxsDTJ0RaBEzxqB4UBPP60btRwZfbd9EHfKG1sXboPBbOs8B05tfcOu9o7qmqn9+RYRY4rZADuMsW9IbAQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dad2153a-8ecd-4b33-9f5c-2a7ae2e504bb", "record_id": "flaws_cloudtrail:0000420:dad2153a-8ecd-4b33-9f5c-2a7ae2e504bb", "row_index": 420, "timestamp": "2018-09-27T11:29:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dad2153a-8ecd-4b33-9f5c-2a7ae2e504bb", "eventTime": "2018-09-27T11:29:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DngqoMhv5LPQ9CDL9823YrSMhdKgXqu5bg9Wg8YrGC/dESCGtrAmJrXrxSeLUW1phO+q7o3jXiTLjdbwiUV+/Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56302cb1-87cd-4fd1-8ad0-2bde528b9032", "record_id": "flaws_cloudtrail:0000421:56302cb1-87cd-4fd1-8ad0-2bde528b9032", "row_index": 421, "timestamp": "2018-09-27T11:29:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56302cb1-87cd-4fd1-8ad0-2bde528b9032", "eventTime": "2018-09-27T11:29:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "QliHOZOrWwns5B4kRePtO9btk6UcFJs0qa6cQlt/rU7LY0iRoL/vK0Jhk9+CH2V24UVxEgjA6FfLlTaaTGarmg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "348fc74d-e95a-4b82-9a89-f3dc5e4d2033", "record_id": "flaws_cloudtrail:0000422:348fc74d-e95a-4b82-9a89-f3dc5e4d2033", "row_index": 422, "timestamp": "2018-09-27T11:29:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "348fc74d-e95a-4b82-9a89-f3dc5e4d2033", "eventTime": "2018-09-27T11:29:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "hOZo0mGMZVMniSlhR44/5r1y7ufAOjnj4YXnH2OVwZCsERegm4bvuvI/py2CgL32LjW+7JJMeAZ6cce4wmudKg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3986d9ab-15d1-4cd3-95b3-c800be2866bb", "record_id": "flaws_cloudtrail:0000423:3986d9ab-15d1-4cd3-95b3-c800be2866bb", "row_index": 423, "timestamp": "2018-09-27T11:29:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3986d9ab-15d1-4cd3-95b3-c800be2866bb", "eventTime": "2018-09-27T11:29:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "076CujxN/IQ9yQuXIxgQTy0K2zUsgn/rAPoYg6/ddpqkf5d6OMtaKkrc31UUdn07Ar6cd3G1aJa31TS8PJItYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f59c1800-3caf-4238-aeb6-5e5cc2b49e13", "record_id": "flaws_cloudtrail:0000424:f59c1800-3caf-4238-aeb6-5e5cc2b49e13", "row_index": 424, "timestamp": "2018-09-27T11:29:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f59c1800-3caf-4238-aeb6-5e5cc2b49e13", "eventTime": "2018-09-27T11:29:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3N+gXQMABe/DL1M+UzGlptEkX0Ejxy/aqvzKtbG9H1WZr2OAYnYeYUZ6V6KEphzClFlWpzhqfo/IAbzMdiTvlw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d43e4048-86b9-4ae7-a38b-9ee8e777ef68", "record_id": "flaws_cloudtrail:0000425:d43e4048-86b9-4ae7-a38b-9ee8e777ef68", "row_index": 425, "timestamp": "2018-09-27T11:29:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d43e4048-86b9-4ae7-a38b-9ee8e777ef68", "eventTime": "2018-09-27T11:29:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "a6q8no32b0P7MNE6t1BQzDh1/36zWdelUduHLhREDb9Xj9DFqxVx7mfxOgYBnfZAbRZSN9QDDN0TbFhSjPe1mw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb35a2de-69cc-4b56-b60c-a17b3c9dc1fa", "record_id": "flaws_cloudtrail:0000426:fb35a2de-69cc-4b56-b60c-a17b3c9dc1fa", "row_index": 426, "timestamp": "2018-09-27T11:29:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb35a2de-69cc-4b56-b60c-a17b3c9dc1fa", "eventTime": "2018-09-27T11:29:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "T6tfJj0ZkgKyoHPRqd3gAJxNNHMbf8MXgMFGZBge3ZbfH8yngnvOoRXcaACJZzGPmGJBMRqijExu6okDUvsImA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25905aea-a251-4a49-abf5-d56e6cd28ca6", "record_id": "flaws_cloudtrail:0000427:25905aea-a251-4a49-abf5-d56e6cd28ca6", "row_index": 427, "timestamp": "2018-09-27T11:29:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25905aea-a251-4a49-abf5-d56e6cd28ca6", "eventTime": "2018-09-27T11:29:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YiQmHccGdTwIDnFbgMErkehwRVzpzYFP4rzzHJuWkuTqlUvidMOnwa5BDsxH0nrAc0Hpa6bmqvaKhmL3ZwjJ8g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adb58bcd-6f46-455e-9332-f7cb139a2ce8", "record_id": "flaws_cloudtrail:0000428:adb58bcd-6f46-455e-9332-f7cb139a2ce8", "row_index": 428, "timestamp": "2018-09-27T11:29:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adb58bcd-6f46-455e-9332-f7cb139a2ce8", "eventTime": "2018-09-27T11:29:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "PgBAKim1zC6EaSztXRiHcr/5jQy29J23G6HoElheclMQ+LWRiMA7aWiYgVra0wAc1ItFXByWhgi96P+dxZ/gZg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e1e2e36-4d46-4224-9ac5-55ecb230973e", "record_id": "flaws_cloudtrail:0000429:5e1e2e36-4d46-4224-9ac5-55ecb230973e", "row_index": 429, "timestamp": "2018-09-27T11:29:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e1e2e36-4d46-4224-9ac5-55ecb230973e", "eventTime": "2018-09-27T11:29:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "yFeTISlX5JVPUvmwpgO5wJU7lfdWs3nLuFN1xRSc7G22dAo5AIGPukPmAmU7ATpcSWsrZ0A3ThPVOBWP0dwT0w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c5a9b11-07ec-47e8-a87b-ea7bdf35c89e", "record_id": "flaws_cloudtrail:0000430:6c5a9b11-07ec-47e8-a87b-ea7bdf35c89e", "row_index": 430, "timestamp": "2018-09-27T11:29:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c5a9b11-07ec-47e8-a87b-ea7bdf35c89e", "eventTime": "2018-09-27T11:29:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "jRvXtFCAk7I70Y9+FFSPMqlPm5/TGOuGgaVOwqdLaQFn+cH4cruM9SWEnNIcEJ4PBJnO2oguOxsDZJbP5974/Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0796b3f7-f28f-4075-af00-eb953dddc52a", "record_id": "flaws_cloudtrail:0000431:0796b3f7-f28f-4075-af00-eb953dddc52a", "row_index": 431, "timestamp": "2018-09-27T11:29:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0796b3f7-f28f-4075-af00-eb953dddc52a", "eventTime": "2018-09-27T11:29:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IA9IIDxn4ehQ70cTBDXqk+wmU4onkGaoiA9oj+Aex4YwOj/eo+WypKEODqXC8OXUrtS6O9xcTRhbci+NF2eBhQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7ca57d6-6c38-46f3-9cd3-483026a", "record_id": "flaws_cloudtrail:0000432:e7ca57d6-6c38-46f3-9cd3-483026a", "row_index": 432, "timestamp": "2018-09-27T11:29:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7ca57d6-6c38-46f3-9cd3-483026a", "eventTime": "2018-09-27T11:29:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "2mXzu0U5PbwU5CjoB1EEFrOBftc7WSKsI6MArcwJeWek9s4a51pzqi3hBQDy9KHSEm1smCxJRjFwIaRJrb85og=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e25833-2f19-4c13-88e8-1ddd0f6c5ede", "record_id": "flaws_cloudtrail:0000433:e25833-2f19-4c13-88e8-1ddd0f6c5ede", "row_index": 433, "timestamp": "2018-09-27T11:29:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e25833-2f19-4c13-88e8-1ddd0f6c5ede", "eventTime": "2018-09-27T11:29:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "lidpi3GbTHF+diq5lHK89QYYJ3MMO9dfMBD65ehq47EvNdOy4+g2I1koSL2HNBxJFGBqyd2musQMS3n7NIOsAQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d507ce8-f296-4d45-b96a-c77dd92c66b2", "record_id": "flaws_cloudtrail:0000434:3d507ce8-f296-4d45-b96a-c77dd92c66b2", "row_index": 434, "timestamp": "2018-09-27T11:29:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d507ce8-f296-4d45-b96a-c77dd92c66b2", "eventTime": "2018-09-27T11:29:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Ex/K3N6s0k2gD3sxT863tQ/zJHCYYRZQDrAXNT1D1UmxQvAaj+8jhXzXk+oIi98cbyVQXgn9SHzK62/lcJPlcA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f42b0f1-9334-47a2-bd21-3039c3c244c9", "record_id": "flaws_cloudtrail:0000435:0f42b0f1-9334-47a2-bd21-3039c3c244c9", "row_index": 435, "timestamp": "2018-09-27T11:29:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f42b0f1-9334-47a2-bd21-3039c3c244c9", "eventTime": "2018-09-27T11:29:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "W+UQz1mW8BzmXd2MJISiTSSC5IJd8qvRGR4uPpY7jxgn9BfpprkousLwOwwO6mZryqrKO6tiSBrsSBPs961Stg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b160c79-0fd6-4ef2-9bb5-33c7e81d3882", "record_id": "flaws_cloudtrail:0000436:8b160c79-0fd6-4ef2-9bb5-33c7e81d3882", "row_index": 436, "timestamp": "2018-09-27T11:29:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b160c79-0fd6-4ef2-9bb5-33c7e81d3882", "eventTime": "2018-09-27T11:29:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "zQm7zUumPiB7Jce/24qhw7Ox6FUns6GygZDG/b+Pk5C0muX37Kl7PpRryE4nOfFLrLWIALMLnDD6tLKcpMw0/A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "097980-eab7-4070-8ab3-f91fc7ab0806", "record_id": "flaws_cloudtrail:0000437:097980-eab7-4070-8ab3-f91fc7ab0806", "row_index": 437, "timestamp": "2018-09-27T11:29:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "097980-eab7-4070-8ab3-f91fc7ab0806", "eventTime": "2018-09-27T11:29:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "uULCMm8wkMd3887XeskfIa64adVEe2APX3g8THuMQgvkgJhJyTSUJH3gCWFHIV6IRP5O77W69iveIr5K8aiLiQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98043-6ddf-49bf-a720-88dbefa7a188", "record_id": "flaws_cloudtrail:0000438:98043-6ddf-49bf-a720-88dbefa7a188", "row_index": 438, "timestamp": "2018-09-27T11:29:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98043-6ddf-49bf-a720-88dbefa7a188", "eventTime": "2018-09-27T11:29:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "lJ07LhAEpiPckyBEHmF51ejnP/yOFsptG152yyLleczmNNX/3R6qO2T3tOCi3bNkZWOIiPZn/gvF0YDVjborDA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "977f62c4-ef93-427b-8a5d-3b1c98bd5176", "record_id": "flaws_cloudtrail:0000439:977f62c4-ef93-427b-8a5d-3b1c98bd5176", "row_index": 439, "timestamp": "2018-09-27T11:29:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "977f62c4-ef93-427b-8a5d-3b1c98bd5176", "eventTime": "2018-09-27T11:29:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "tqo51paXfk4BdR/yYVJRDv6AOufNQGWAzohIIFDIuny8flL+A3ureXXJYXaQypsCUrn7cPwGmS8MKa0BWHxVSA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07188e7-e5e8-40ed-bc19-4984bc405ec4", "record_id": "flaws_cloudtrail:0000440:07188e7-e5e8-40ed-bc19-4984bc405ec4", "row_index": 440, "timestamp": "2018-09-27T11:29:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07188e7-e5e8-40ed-bc19-4984bc405ec4", "eventTime": "2018-09-27T11:29:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IQpvVlFJgogc6SgNeOJaYV7cgpQmvIyk4HjvgwDa9VIQmp4gNRc6iPxM4C+TWDEsL/kx/xR5s0qgjDGpOz1g7Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9f098a-75c9-46e9-bc27-aec3e0fe44e8", "record_id": "flaws_cloudtrail:0000441:ec9f098a-75c9-46e9-bc27-aec3e0fe44e8", "row_index": 441, "timestamp": "2018-09-27T11:29:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9f098a-75c9-46e9-bc27-aec3e0fe44e8", "eventTime": "2018-09-27T11:29:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LPk8z8Tgv9LF/JiCzz2kpabLREyqVwfFmmOXwpwrPFCL9sW2hi41Xbmc4mXWaosKPL+6BDnPBmEiS6TfrZZmUw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a58880d-52e0-4210-a719-af7a5c6d961e", "record_id": "flaws_cloudtrail:0000442:a58880d-52e0-4210-a719-af7a5c6d961e", "row_index": 442, "timestamp": "2018-09-27T11:29:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a58880d-52e0-4210-a719-af7a5c6d961e", "eventTime": "2018-09-27T11:29:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nfsRWayLk1Up7DMzM1PHvdU0yRlrkBbXVuUaBUYl6K4jyG23VTBaXN5+81bczZN0buXdIrTM0V2Zrvpm32k8Nw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b453ae4-bcbe-4cf1-8f42-b4d63f7ab9e6", "record_id": "flaws_cloudtrail:0000443:6b453ae4-bcbe-4cf1-8f42-b4d63f7ab9e6", "row_index": 443, "timestamp": "2018-09-27T11:29:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b453ae4-bcbe-4cf1-8f42-b4d63f7ab9e6", "eventTime": "2018-09-27T11:29:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "j1m0SPhzhUTO4/fjXV6ClWoEweFTGcOpMfE7aI6yFCfHAAgetP10BBZJTgxPqCHXpsS1/qBBNO3ZWd9QWkM6Jg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e9ae34-b376-4ed5-8be9-ecba13eed455", "record_id": "flaws_cloudtrail:0000444:f3e9ae34-b376-4ed5-8be9-ecba13eed455", "row_index": 444, "timestamp": "2018-09-27T11:29:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e9ae34-b376-4ed5-8be9-ecba13eed455", "eventTime": "2018-09-27T11:29:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "N46q6GByFjvIVUKG9eL2pLYtSkjk8sOAHiGp+4eYgj0fXnUyXKDTztB3dEIkiq5xjKRysPSGhJM0HeLae0CM3A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3661e68b-3705-4b3b-80c5-194edbe97250", "record_id": "flaws_cloudtrail:0000445:3661e68b-3705-4b3b-80c5-194edbe97250", "row_index": 445, "timestamp": "2018-09-27T11:29:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3661e68b-3705-4b3b-80c5-194edbe97250", "eventTime": "2018-09-27T11:29:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9rzOb227zcDPobkGpeNjF9D+4aosKIYy0LKYtC0QsO/CL/CmMZ7+rO2q5udSshrouRXyQEeYPyWsma3ai+OhdA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f09b26df-b32e-46a7-94e0-b7a4f26bae4e", "record_id": "flaws_cloudtrail:0000446:f09b26df-b32e-46a7-94e0-b7a4f26bae4e", "row_index": 446, "timestamp": "2018-09-27T11:29:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f09b26df-b32e-46a7-94e0-b7a4f26bae4e", "eventTime": "2018-09-27T11:29:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "j+7gnGDGMiQCdo35zVVo1qk3xajSarHuwKh0XSAwfyAYHl1t+FkA1D6Gyxg27l+Q7u14fdofzCj3DbATUwDISw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76d709f4-19de-4b96-8989-1e536a9a26ea", "record_id": "flaws_cloudtrail:0000447:76d709f4-19de-4b96-8989-1e536a9a26ea", "row_index": 447, "timestamp": "2018-09-27T11:29:27Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76d709f4-19de-4b96-8989-1e536a9a26ea", "eventTime": "2018-09-27T11:29:27Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Io5To6RgtK12nQnO0ioC3LwiRgBQoueGer1XT/82U3JoK42rj5KZwd+pHjx5XYSp70qvtnTRd0fJpyIadVwgXg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56c9a99d-275a-4428-bb7c-c4df07d104bc", "record_id": "flaws_cloudtrail:0000448:56c9a99d-275a-4428-bb7c-c4df07d104bc", "row_index": 448, "timestamp": "2018-09-27T11:29:28Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56c9a99d-275a-4428-bb7c-c4df07d104bc", "eventTime": "2018-09-27T11:29:28Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "GozPp7PrwQD0uReDvFt3P+A7dTMtJ6aBj2/FTZTE/m9k1HBcpQzdBMbgg4UXAggOKR7sZnq14R5/NBtFkpebhQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82b346e-54cc-4a5f-bf66-609a10653d", "record_id": "flaws_cloudtrail:0000449:b82b346e-54cc-4a5f-bf66-609a10653d", "row_index": 449, "timestamp": "2018-09-27T11:29:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82b346e-54cc-4a5f-bf66-609a10653d", "eventTime": "2018-09-27T11:29:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ud+5185K8Zot10FAHMBhNEI29jgPZchAEZoYMHY4t9h/jlA/nvdv5ky9wWQ2u3A25wJtR7H0yjzHQIVby6V+Tg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c253d00b-0aa1-4d50-9727-c316447afa47d", "record_id": "flaws_cloudtrail:0000450:c253d00b-0aa1-4d50-9727-c316447afa47d", "row_index": 450, "timestamp": "2018-09-27T11:29:29Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c253d00b-0aa1-4d50-9727-c316447afa47d", "eventTime": "2018-09-27T11:29:29Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "UoWkzI0eTwBQko4nsud7Uara62O6Z6WTIGvnUhkE+sm0jhaSpqqZhm2lDR5HzZbNKZYq6Y16vlxnZ+6skXU4ow=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2e7fe7b-f0fe-495f-a15f-846bd0fe4696", "record_id": "flaws_cloudtrail:0000451:b2e7fe7b-f0fe-495f-a15f-846bd0fe4696", "row_index": 451, "timestamp": "2018-09-27T11:29:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2e7fe7b-f0fe-495f-a15f-846bd0fe4696", "eventTime": "2018-09-27T11:29:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4OISdZvmNUJJ3QuH3rY/hhrTnlGGAK/m5RyMxbfcn0qANUianRxcBLiKj/1qaiXmJtfZXZrRKefuybKLmeZgXA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65d179672-ebc5-4f71-9318-48478a2fab20", "record_id": "flaws_cloudtrail:0000452:65d179672-ebc5-4f71-9318-48478a2fab20", "row_index": 452, "timestamp": "2018-09-27T11:29:30Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65d179672-ebc5-4f71-9318-48478a2fab20", "eventTime": "2018-09-27T11:29:30Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "6gn7AwvPxwt2IjQRlOG4ZNWNCwKJViqlqOrSinf+5EK6cG7+P2jboo0eCbkI+hL3pjutCoZAsIOWorfc79aITw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb338fee-a583-4636-bc73-ed51eaab4b8b", "record_id": "flaws_cloudtrail:0000453:bb338fee-a583-4636-bc73-ed51eaab4b8b", "row_index": 453, "timestamp": "2018-09-27T11:29:31Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb338fee-a583-4636-bc73-ed51eaab4b8b", "eventTime": "2018-09-27T11:29:31Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Xqv2Tz4bkd01hfvqcg25j45v0MV2tPqSyaW1VGMjohkIii/HKO0CawEfuK/AIgfSXxhIbvdaC82BAI/x2FzHJA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "affb1358-79a8-4600-8d98-2c6bf82f5ee7", "record_id": "flaws_cloudtrail:0000454:affb1358-79a8-4600-8d98-2c6bf82f5ee7", "row_index": 454, "timestamp": "2018-09-27T11:29:31Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "affb1358-79a8-4600-8d98-2c6bf82f5ee7", "eventTime": "2018-09-27T11:29:31Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "kMcAufTePfp/5Kyht+EmPJzxl1sEak6TBc02ODvWPJYSVTc3DRHuHNBV517trnNJbKmA7OOcGhyGqFwtwpxftA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae069c24-3182-4671-8759-bd1e4fcce596", "record_id": "flaws_cloudtrail:0000455:ae069c24-3182-4671-8759-bd1e4fcce596", "row_index": 455, "timestamp": "2018-09-27T11:29:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae069c24-3182-4671-8759-bd1e4fcce596", "eventTime": "2018-09-27T11:29:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "pjQS08W+zNiK9C77AqQlZslOKJGjLPTyuqk+OZvwIQtMpXZk2IVbFrARoenVS3MqwyC+bWWHkyIpnWVqDKsP3A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "129d0d22-cc3f-4ee8-a539-ad977d3383f0", "record_id": "flaws_cloudtrail:0000456:129d0d22-cc3f-4ee8-a539-ad977d3383f0", "row_index": 456, "timestamp": "2018-09-27T11:29:32Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "129d0d22-cc3f-4ee8-a539-ad977d3383f0", "eventTime": "2018-09-27T11:29:32Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "I8LxK0+IY3uSTjdA9ezvR8xBNmBoiXY5Go461wk71yLJQgwsnx6MTRy+d95mNmTPcgLEOBVl9L6AI09n3mKBjg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c96be532-2fca-4c04-80ca-02d10a0e09c1", "record_id": "flaws_cloudtrail:0000457:c96be532-2fca-4c04-80ca-02d10a0e09c1", "row_index": 457, "timestamp": "2018-09-27T11:29:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c96be532-2fca-4c04-80ca-02d10a0e09c1", "eventTime": "2018-09-27T11:29:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "54PvQ1neVuPu8PYH008TGj4lO4DDFTLD6Iz7agNwNUVgq0PTKCljC1fcrOaJ0FSJv1r4aWXsYHgBt3HyBDPzLA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c87c290-7d1c-47e6-b233-a6b6ccc79dbf", "record_id": "flaws_cloudtrail:0000458:2c87c290-7d1c-47e6-b233-a6b6ccc79dbf", "row_index": 458, "timestamp": "2018-09-27T11:29:33Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c87c290-7d1c-47e6-b233-a6b6ccc79dbf", "eventTime": "2018-09-27T11:29:33Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EBjNmskWL56sO/FsXyoezrrH+T+DGpfLcP+y+ZnkG0+EwHP15jz5fjSdqqjDQR/ybJ3w/v7CTaOWigqBrnu9OA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "028c01af-f150-485f-ae20-bf690325e4704", "record_id": "flaws_cloudtrail:0000459:028c01af-f150-485f-ae20-bf690325e4704", "row_index": 459, "timestamp": "2018-09-27T11:29:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "028c01af-f150-485f-ae20-bf690325e4704", "eventTime": "2018-09-27T11:29:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Xbms3vaWaiwYMEDLp65E1aUK4Yh/FEBPj+RTrQu1Wk+yu3Ncfx5vvYrwymy6ccEQze+BDHpGX9OYfMVaSyVbww=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac4ca7d1-3c25-48c7-909d-337b4d96a70f", "record_id": "flaws_cloudtrail:0000460:ac4ca7d1-3c25-48c7-909d-337b4d96a70f", "row_index": 460, "timestamp": "2018-09-27T11:29:34Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac4ca7d1-3c25-48c7-909d-337b4d96a70f", "eventTime": "2018-09-27T11:29:34Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "v9gJxWJtdeb2GDvFMifIrTIRvRhn8kgr+TzMFQVNYqEIxP5TBaDMPc/q5h3LuCN5r/kuZ53YdJL6W/meVg5EWg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0be4e95f-0bb9-4588-8b56-77679ee140c", "record_id": "flaws_cloudtrail:0000461:0be4e95f-0bb9-4588-8b56-77679ee140c", "row_index": 461, "timestamp": "2018-09-27T11:29:35Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0be4e95f-0bb9-4588-8b56-77679ee140c", "eventTime": "2018-09-27T11:29:35Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/ACNx0FDN6+TJTbLvE4y54HhIFr6hdlaQVODvxPTmo/FzOG/KWWuNOIntu1QZajl0xrm2BwABo3ZR0vPpw49MQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "860cfe9c-c103-4378-864b-21fd1e0cb7c4", "record_id": "flaws_cloudtrail:0000462:860cfe9c-c103-4378-864b-21fd1e0cb7c4", "row_index": 462, "timestamp": "2018-09-27T11:29:35Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "860cfe9c-c103-4378-864b-21fd1e0cb7c4", "eventTime": "2018-09-27T11:29:35Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nWT1sJDuqk4opGJ7+/RUWrecfasdMwuGyKxcbrpYmqSAT0MedYCtrOfrzcMs7m7Lgs+oK5wWC16UuAK/5/DxCQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3f7ebb3-3309-43a4-8018-5b4bb6faf504", "record_id": "flaws_cloudtrail:0000463:a3f7ebb3-3309-43a4-8018-5b4bb6faf504", "row_index": 463, "timestamp": "2018-09-27T11:29:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3f7ebb3-3309-43a4-8018-5b4bb6faf504", "eventTime": "2018-09-27T11:29:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "lkWs59VITHWjUv8n6DF7oImSNJFWdsFvi9al+fBn7A9i2OooOV83rfBU/IibPd2boxaWXdbMZuvylr6YvXDYQg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba05ab05-9090-4df1-807a-e8107f53e27b", "record_id": "flaws_cloudtrail:0000464:ba05ab05-9090-4df1-807a-e8107f53e27b", "row_index": 464, "timestamp": "2018-09-27T11:29:36Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba05ab05-9090-4df1-807a-e8107f53e27b", "eventTime": "2018-09-27T11:29:36Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d0fecdc-cb92-41f5-a917-6e1739feb836", "record_id": "flaws_cloudtrail:0000465:4d0fecdc-cb92-41f5-a917-6e1739feb836", "row_index": 465, "timestamp": "2018-09-27T11:29:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d0fecdc-cb92-41f5-a917-6e1739feb836", "eventTime": "2018-09-27T11:29:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "UKIu6CuJPRRmJZAM8kGxSURpfuJKiaw8/VeBP/96dN2yKAIiZ/foVf1zvatoPRAzAehh1+GcutR8Od1+DrjHPw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f25d64b7-545d-4152-8d48-25e845896b8", "record_id": "flaws_cloudtrail:0000466:f25d64b7-545d-4152-8d48-25e845896b8", "row_index": 466, "timestamp": "2018-09-27T11:29:38Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f25d64b7-545d-4152-8d48-25e845896b8", "eventTime": "2018-09-27T11:29:38Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4+pih1yzT547AQ/sjMbiBDCZoj+MS4FNSffKPgpXBkm2yVqX1muGpnSmNgWeacUW2VDS1p10YTxUDoE01mH7qA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26daf60a-1d5b-4140-8690-985d66418d8d", "record_id": "flaws_cloudtrail:0000467:26daf60a-1d5b-4140-8690-985d66418d8d", "row_index": 467, "timestamp": "2018-09-27T11:29:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26daf60a-1d5b-4140-8690-985d66418d8d", "eventTime": "2018-09-27T11:29:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "1JLYLpUbfZNkvFXeSupPmo0OpR6o3SPFPsZovZw7f5T44KyzpKEz8syaog5/stOy0ZIiuViQ08MLfzV5TjMJ6Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df38044-2de5-44ed-8f27-a6ff0118ea08", "record_id": "flaws_cloudtrail:0000468:df38044-2de5-44ed-8f27-a6ff0118ea08", "row_index": 468, "timestamp": "2018-09-27T11:29:39Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df38044-2de5-44ed-8f27-a6ff0118ea08", "eventTime": "2018-09-27T11:29:39Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "v9ZJE3D93ld64CBVV+JbYB6G0V1N+U649Xbakzp6Y1mQGKyxDudNvYZ8ekTmd/1skf7o3yNq0EHqOdI/bnqb3A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdc5ae56-2945-405a-a719-7e658e97866e", "record_id": "flaws_cloudtrail:0000469:fdc5ae56-2945-405a-a719-7e658e97866e", "row_index": 469, "timestamp": "2018-09-27T11:29:40Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdc5ae56-2945-405a-a719-7e658e97866e", "eventTime": "2018-09-27T11:29:40Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "cGbGDO3z//o5epaT7a2K+BE/izKydiQo57iSsfHc4aMIduJUtJZ5QXLBMBj4ZOTe1K0bxjAHcovFg1ve+gRk1g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56e64e05-1e17-48b2-82d9-7dda5c94052", "record_id": "flaws_cloudtrail:0000470:56e64e05-1e17-48b2-82d9-7dda5c94052", "row_index": 470, "timestamp": "2018-09-27T11:29:40Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56e64e05-1e17-48b2-82d9-7dda5c94052", "eventTime": "2018-09-27T11:29:40Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "684514c67-33d4-4981-b20d-107acd608cad", "record_id": "flaws_cloudtrail:0000471:684514c67-33d4-4981-b20d-107acd608cad", "row_index": 471, "timestamp": "2018-09-27T11:29:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "684514c67-33d4-4981-b20d-107acd608cad", "eventTime": "2018-09-27T11:29:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3fOVfEXfZim/Egj9+t08gtLHpXFEhAVksbbYdNpKj/dhasJ7PV5rW5iCteAiy9vvma7VZjKGrRDMqqLkQTdjuw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69a031a8-f978-4b9f-8915-58c8e484a45e", "record_id": "flaws_cloudtrail:0000472:69a031a8-f978-4b9f-8915-58c8e484a45e", "row_index": 472, "timestamp": "2018-09-27T11:29:41Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69a031a8-f978-4b9f-8915-58c8e484a45e", "eventTime": "2018-09-27T11:29:41Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/zHlaf+/sxhh91TjwUr2kmzrgo0i8V8q/SLExrNtIrehEy4qZo12Bhyr92GDY5Vj/uP+LlgyuOO/pVddXgCA3A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "431cf7f2-b117-4c62-ae12-e741477bb7e3", "record_id": "flaws_cloudtrail:0000473:431cf7f2-b117-4c62-ae12-e741477bb7e3", "row_index": 473, "timestamp": "2018-09-27T11:29:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "431cf7f2-b117-4c62-ae12-e741477bb7e3", "eventTime": "2018-09-27T11:29:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "QxSIWGkzNMx3jc5JZek6bVMuo4wmIwnWVmmKVRyXPKl9JnGSKcnlDsxXKVoo+02TJQlqyB/avpAnvfzVPq44EA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec1c399a-bee4-49b8-b276-b3d1e0a1fea7", "record_id": "flaws_cloudtrail:0000474:ec1c399a-bee4-49b8-b276-b3d1e0a1fea7", "row_index": 474, "timestamp": "2018-09-27T11:29:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec1c399a-bee4-49b8-b276-b3d1e0a1fea7", "eventTime": "2018-09-27T11:29:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "onUy00FJvAus/9mNw/fhO94iNN3vkMsEjcz5TFdz7QiNEjB0QCr+zkplJU7Odsnn7M/Bml/w2sw9ymKkEag4eg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d136323-dbaa-45fb-90a5-f44383e319", "record_id": "flaws_cloudtrail:0000475:7d136323-dbaa-45fb-90a5-f44383e319", "row_index": 475, "timestamp": "2018-09-27T11:29:42Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d136323-dbaa-45fb-90a5-f44383e319", "eventTime": "2018-09-27T11:29:42Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e74bf07-af75-4a58-b102-b85155ea3f9", "record_id": "flaws_cloudtrail:0000476:5e74bf07-af75-4a58-b102-b85155ea3f9", "row_index": 476, "timestamp": "2018-09-27T11:29:43Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e74bf07-af75-4a58-b102-b85155ea3f9", "eventTime": "2018-09-27T11:29:43Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "QVav6/6WIRigAFxZq7khiNXrQlV264gHmmV8KEgl/LcH4bbqVEbIUlBmDj01C6xWyRXFTDROlIo9hpKJUrI0tA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb21533-b2b8-4494-8402-93258ca31", "record_id": "flaws_cloudtrail:0000477:fb21533-b2b8-4494-8402-93258ca31", "row_index": 477, "timestamp": "2018-09-27T11:29:43Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb21533-b2b8-4494-8402-93258ca31", "eventTime": "2018-09-27T11:29:43Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "1o/8eENCUNuW56AJ4p77ZW9d+EdA89y3q/e7fBXNFm7QUFCapKl4FSDrtlUhzWxFcQ20m9LvSp8Cd8HdMxgkcg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab19ab3-0a98-47e3-a920-7e0b78ab4044", "record_id": "flaws_cloudtrail:0000478:4ab19ab3-0a98-47e3-a920-7e0b78ab4044", "row_index": 478, "timestamp": "2018-09-27T11:29:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab19ab3-0a98-47e3-a920-7e0b78ab4044", "eventTime": "2018-09-27T11:29:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "jLP5Hve7kERL5tpoWBBDAcJgUhqt9AT/BPvgg1h+qNIRmcIFkVGU0e6ILmeaCG4vSEEflTpYv/Qo1FDugfsdYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07b5dfa8-80df-453a-aaf7-02b6bc7c1947", "record_id": "flaws_cloudtrail:0000479:07b5dfa8-80df-453a-aaf7-02b6bc7c1947", "row_index": 479, "timestamp": "2018-09-27T11:29:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07b5dfa8-80df-453a-aaf7-02b6bc7c1947", "eventTime": "2018-09-27T11:29:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VvDoFImkA9BKDcRQqnTGlfNNlf9gVsVzrxhahyrMr2l+kwGEZsqudbr072eXW2R6qMnU8i+EjQ+Ra+lFaqtUBw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a692145e9-f219-413d-8159-346788bca", "record_id": "flaws_cloudtrail:0000480:a692145e9-f219-413d-8159-346788bca", "row_index": 480, "timestamp": "2018-09-27T11:29:44Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a692145e9-f219-413d-8159-346788bca", "eventTime": "2018-09-27T11:29:44Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "738bf9fd-c14f-4cb4-b131-a64b55b4c614", "record_id": "flaws_cloudtrail:0000481:738bf9fd-c14f-4cb4-b131-a64b55b4c614", "row_index": 481, "timestamp": "2018-09-27T11:29:46Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "738bf9fd-c14f-4cb4-b131-a64b55b4c614", "eventTime": "2018-09-27T11:29:46Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8lD/ii3tUksgGml5o44XEOFmdFIR8jRArcTTT5+2fFmhxQWRg5/ek7r01NbX0Kur4yvmeQfiUGvrnsQRAeXBpQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f4743f1-2576-45a6-a6e4-e2b19084a5", "record_id": "flaws_cloudtrail:0000482:8f4743f1-2576-45a6-a6e4-e2b19084a5", "row_index": 482, "timestamp": "2018-09-27T11:29:46Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f4743f1-2576-45a6-a6e4-e2b19084a5", "eventTime": "2018-09-27T11:29:46Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "5PbwKCrnRt1qCi/HzbwS3If0a5H9dGRxgUrQ+JvAc8+wNhjxZ4irUnTxLoZxgGRYLPCoAeNJX7UdiwyeLnxxtw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1124f881-6bd2-4253-8f30-34559a40a25a", "record_id": "flaws_cloudtrail:0000483:1124f881-6bd2-4253-8f30-34559a40a25a", "row_index": 483, "timestamp": "2018-09-27T11:29:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1124f881-6bd2-4253-8f30-34559a40a25a", "eventTime": "2018-09-27T11:29:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "XJNkK2ZhXlsvt59muzlh2NQ7XXeyUDqnw0bmj0xZyDo1RpM4JyK+WUufQoCw/aU6SrFwFYu2unfOpZ59mEcjfw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f311a0cc-f294-451c-958a-5a671c65d841", "record_id": "flaws_cloudtrail:0000484:f311a0cc-f294-451c-958a-5a671c65d841", "row_index": 484, "timestamp": "2018-09-27T11:29:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f311a0cc-f294-451c-958a-5a671c65d841", "eventTime": "2018-09-27T11:29:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "N+kDZeaY8CvX0b5h6fkd0YlLlRTloxd+iBkdsW1OUk3MWrvnyMFh6iXNum1w58inEIVaRd/4PBAauWTmLxQZAQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e0bc3b7-ad5c-4ccb-b52d-dd77582f6047", "record_id": "flaws_cloudtrail:0000485:5e0bc3b7-ad5c-4ccb-b52d-dd77582f6047", "row_index": 485, "timestamp": "2018-09-27T11:29:47Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e0bc3b7-ad5c-4ccb-b52d-dd77582f6047", "eventTime": "2018-09-27T11:29:47Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2db73a03-32b7-434b-b8f7-ff186d2457d4", "record_id": "flaws_cloudtrail:0000486:2db73a03-32b7-434b-b8f7-ff186d2457d4", "row_index": 486, "timestamp": "2018-09-27T11:29:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2db73a03-32b7-434b-b8f7-ff186d2457d4", "eventTime": "2018-09-27T11:29:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Zl0qlnBxkHiA+ihlkXVRCDnyMcT/wOYD3Ha72DwP+TW08objMkTZ4d3oyHt/NudNlq+MdHDCInrCpARJa8DMMA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d0bb6c6-b886-4451-95b3-cbc7fe60784", "record_id": "flaws_cloudtrail:0000487:3d0bb6c6-b886-4451-95b3-cbc7fe60784", "row_index": 487, "timestamp": "2018-09-27T11:29:49Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d0bb6c6-b886-4451-95b3-cbc7fe60784", "eventTime": "2018-09-27T11:29:49Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "+iIRH3uu8VzTplAWxV3PDGtCgspOZUztesEqO2UjYaHzv8ONGQs3+FZHY+NpoZYFS9oFylwg6EZ1wVt6HVCSxQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d84eedac-dbb9-46b4-a0fe-5c029fd77722", "record_id": "flaws_cloudtrail:0000488:d84eedac-dbb9-46b4-a0fe-5c029fd77722", "row_index": 488, "timestamp": "2018-09-27T11:29:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d84eedac-dbb9-46b4-a0fe-5c029fd77722", "eventTime": "2018-09-27T11:29:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "kZ5EPNT5DlSGMxAXWly2++oT9GwsoYGcauRFSPXpcgSAt7gL3e93Kxdq3cf71prygbG/Q/3PjsjqVXdMTnFZlw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee200008-d8c1-4d7d-a31e-1061e7593daf", "record_id": "flaws_cloudtrail:0000489:ee200008-d8c1-4d7d-a31e-1061e7593daf", "row_index": 489, "timestamp": "2018-09-27T11:29:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee200008-d8c1-4d7d-a31e-1061e7593daf", "eventTime": "2018-09-27T11:29:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DWPpYsr/5Un3Y6tRI+o/a2FqSL4nRbpAT3bCuKe+fDzRxtAE79nwGGNv/VNC7ULdU1uYHJrn2vEiEMXIMRqxqQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ddcaf76-3b20-486a-9fa0-afa9c3e321929", "record_id": "flaws_cloudtrail:0000490:0ddcaf76-3b20-486a-9fa0-afa9c3e321929", "row_index": 490, "timestamp": "2018-09-27T11:29:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ddcaf76-3b20-486a-9fa0-afa9c3e321929", "eventTime": "2018-09-27T11:29:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4d6054d-5f8f-4222-a52c-602a457d995e", "record_id": "flaws_cloudtrail:0000491:d4d6054d-5f8f-4222-a52c-602a457d995e", "row_index": 491, "timestamp": "2018-09-27T11:29:50Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3EDR81TEPX7F7KY7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.89.202.51", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 545, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4d6054d-5f8f-4222-a52c-602a457d995e", "eventTime": "2018-09-27T11:29:50Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.89.202.51", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3EDR81TEPX7F7KY7", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2ded296-ae5b-4ba4-8ac7-52aa5a1f1637", "record_id": "flaws_cloudtrail:0000492:c2ded296-ae5b-4ba4-8ac7-52aa5a1f1637", "row_index": 492, "timestamp": "2018-09-27T11:29:52Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2ded296-ae5b-4ba4-8ac7-52aa5a1f1637", "eventTime": "2018-09-27T11:29:52Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "MHbpS9w5919umKfF25S0boRS69gUYjJttZhmxgCig9QZM4ofuUaOnZ8ONdv/WemoAiZDub6UI2Ft0XCddIF24w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93832ae-1b88-41b8-991a-9d6f6f98fe7a", "record_id": "flaws_cloudtrail:0000493:93832ae-1b88-41b8-991a-9d6f6f98fe7a", "row_index": 493, "timestamp": "2018-09-27T11:29:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93832ae-1b88-41b8-991a-9d6f6f98fe7a", "eventTime": "2018-09-27T11:29:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "1xu5z2F3EEBQ1Wlg0RIRS3vG534jLwfxPnhKrg6vNhKJuu1oMiB+DGaKxAWWGVMUpRqGn3Xa44tg5DowoxMHsg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "096963-a5e6-4d41-90c6-b0374ffa108c", "record_id": "flaws_cloudtrail:0000494:096963-a5e6-4d41-90c6-b0374ffa108c", "row_index": 494, "timestamp": "2018-09-27T11:29:54Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "096963-a5e6-4d41-90c6-b0374ffa108c", "eventTime": "2018-09-27T11:29:54Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "J6E7TEhc0D06NzeMBMRZq4Q9hsGkAidCEPptIcbvekp09p3Ajuyp9uqw1LGN5ZPLDnvTgO2Z7J5Jqkxqw6stzQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfb7f8dd-c5e1-4a36-939b-3d9f1068b054", "record_id": "flaws_cloudtrail:0000495:cfb7f8dd-c5e1-4a36-939b-3d9f1068b054", "row_index": 495, "timestamp": "2018-09-27T11:29:54Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfb7f8dd-c5e1-4a36-939b-3d9f1068b054", "eventTime": "2018-09-27T11:29:54Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/imtFY6piBSwo0arE5KPdf2X4E32jwVHrRceW5fiyn2E0wwbaF5kR9Z2gv3bVEmP8WoudHcUy3sBZA6i07ypnw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "410c13c1-95f6-419e-9359-8e0e358254a", "record_id": "flaws_cloudtrail:0000496:410c13c1-95f6-419e-9359-8e0e358254a", "row_index": 496, "timestamp": "2018-09-27T11:29:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "410c13c1-95f6-419e-9359-8e0e358254a", "eventTime": "2018-09-27T11:29:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "B5bUY701fMIjhi/P/veVdkkwI2DbvrN2ax3pSpKWYAYtFYgp8mcg9M6joVo43WfTZUqoXLrjqYvEoSwA1+c3GQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39f3636c-e4d3-4f37-bbad-f1747b0bbd06", "record_id": "flaws_cloudtrail:0000497:39f3636c-e4d3-4f37-bbad-f1747b0bbd06", "row_index": 497, "timestamp": "2018-09-27T11:29:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39f3636c-e4d3-4f37-bbad-f1747b0bbd06", "eventTime": "2018-09-27T11:29:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qXWvYsvRT3X+hdcu9dU2ZETFcTK8/U7ZBt0QIOM9/NTdYNmbFR4uugRBS6EgkP9Tniuv5cXJIkfRXL1vQwVSlQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c873cfd0-93c8-446a-8c06-318b66df0d23", "record_id": "flaws_cloudtrail:0000498:c873cfd0-93c8-446a-8c06-318b66df0d23", "row_index": 498, "timestamp": "2018-09-27T11:29:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c873cfd0-93c8-446a-8c06-318b66df0d23", "eventTime": "2018-09-27T11:29:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RPtyDdNBXqO9IQhae2DbDMIfk4BcVtwiSzVFuhQq3RLo0jaeG4ezKbJ76nQDXUalZ7Clvv7uQ88GAScNQ1mQ3g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d9e6202-b2a2-4221-bbd4-16cb9a277ac6", "record_id": "flaws_cloudtrail:0000499:4d9e6202-b2a2-4221-bbd4-16cb9a277ac6", "row_index": 499, "timestamp": "2018-09-27T11:29:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d9e6202-b2a2-4221-bbd4-16cb9a277ac6", "eventTime": "2018-09-27T11:29:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "b0Sa6KHcHcNroMSz5JyQMAPSOOr5lTY7KhavANjMg2vUodFdESv1dZnXGgrb83rsn71tmvJmfdOPQVc3ircUMw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1dd30bc1-445e-49ac-9ded-2b546983538e", "record_id": "flaws_cloudtrail:0000500:1dd30bc1-445e-49ac-9ded-2b546983538e", "row_index": 500, "timestamp": "2018-09-27T11:29:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1dd30bc1-445e-49ac-9ded-2b546983538e", "eventTime": "2018-09-27T11:29:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "wP6YDC/OgS1H6XL7C/4t5y7LBx6Yd/LLFkQ6BrrD5cs9j7FiQG2EFpAOgOMfq9s4p4QpokiTMuXsxVCZG7r9Mw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3301e9a3-0c42-4b7d-a47a-0f089390c8cf", "record_id": "flaws_cloudtrail:0000501:3301e9a3-0c42-4b7d-a47a-0f089390c8cf", "row_index": 501, "timestamp": "2018-09-27T11:29:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3301e9a3-0c42-4b7d-a47a-0f089390c8cf", "eventTime": "2018-09-27T11:29:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DqO4M9AwFao7kND9vZPW9R/tAh9QCQlfhRKNEfGrVzojHV5QPFvAfKrH1mYZSYDBL60fmAnNw02rJZIagPBgXQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5d331739-ad58-4b7b-b75d-3503a0604975", "record_id": "flaws_cloudtrail:0000502:f5d331739-ad58-4b7b-b75d-3503a0604975", "row_index": 502, "timestamp": "2018-09-27T11:29:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5d331739-ad58-4b7b-b75d-3503a0604975", "eventTime": "2018-09-27T11:29:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "klLS33bzVbwsTeuDIp4gvFCaDWg4FjzD8Xhp+V0NSHfYwOGC9ObGArnD6lBeenmQGB//ms/NnkSAsDqHkNh52A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd41703-64af-4434-b694-f925edf0cccd", "record_id": "flaws_cloudtrail:0000503:bd41703-64af-4434-b694-f925edf0cccd", "row_index": 503, "timestamp": "2018-09-27T11:30:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd41703-64af-4434-b694-f925edf0cccd", "eventTime": "2018-09-27T11:30:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "UQw2j1oQZS+DQVZelX66JaKSjmtdRHJX3zc20nuozSOcCagK4dcYlxVpXBh83U+rmwpBTGQOb+0pc4UrVOnzoA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8715ff89-14ee-4628-b48d-c651a00bc84b", "record_id": "flaws_cloudtrail:0000504:8715ff89-14ee-4628-b48d-c651a00bc84b", "row_index": 504, "timestamp": "2018-09-27T11:30:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8715ff89-14ee-4628-b48d-c651a00bc84b", "eventTime": "2018-09-27T11:30:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "+ueKOtz+lFaZEMTUXtXKdJIm04yXOGaE+TCsThevxhr6CfwgSFum/4sf8ZIuRTtKanuhf7HlH6AN25NgSquyOg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "866a2cd4-0e15-4847-8b66-e9a3f760174d", "record_id": "flaws_cloudtrail:0000505:866a2cd4-0e15-4847-8b66-e9a3f760174d", "row_index": 505, "timestamp": "2018-09-27T11:30:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "866a2cd4-0e15-4847-8b66-e9a3f760174d", "eventTime": "2018-09-27T11:30:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YYMhJEcjxn2jzHx+TM6L/l9ZgfwCxEV9mljfLhU/31IwtJsZ1dinUG4sBZiq4jTpQ7CecSZkiolgZoAyXn0sHQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ba924705-5f3d-4697-adf1-ad142756c570b", "record_id": "flaws_cloudtrail:0000506:8ba924705-5f3d-4697-adf1-ad142756c570b", "row_index": 506, "timestamp": "2018-09-27T11:30:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ba924705-5f3d-4697-adf1-ad142756c570b", "eventTime": "2018-09-27T11:30:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "pTZADSW1rUlhITUNOxpaNFKnmNRvmkizQBjA+RhRQr5AaqtkZTvU0CXhsU3UU5fk/OYB8QDSrtVaXkYjcePD+w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd7ac0d3-c645-4131-aaf8-7e13938ee36f", "record_id": "flaws_cloudtrail:0000507:bd7ac0d3-c645-4131-aaf8-7e13938ee36f", "row_index": 507, "timestamp": "2018-09-27T11:30:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd7ac0d3-c645-4131-aaf8-7e13938ee36f", "eventTime": "2018-09-27T11:30:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HkWuJa77nQ45AVE7iaMnbajgc9SEjOKze6gNOriQco5ORe0sWSmz2YM9mZwOl1Ml06wdOowYMi0aUFJgMPp/qA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "425e90f3-ab3a-45af-aca3-b38b5e070470", "record_id": "flaws_cloudtrail:0000508:425e90f3-ab3a-45af-aca3-b38b5e070470", "row_index": 508, "timestamp": "2018-09-27T11:30:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "425e90f3-ab3a-45af-aca3-b38b5e070470", "eventTime": "2018-09-27T11:30:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "6ftCkm1+1ZmQdmisaQNJL7Dipg3+Clah3SehSeKOAjSrZSojl/+3dQs2AmRrZZ4RUiNHiCUFNqDCzSen2xdHug=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b75cb62d-38fc-4579-917f-2c7184c72842", "record_id": "flaws_cloudtrail:0000509:b75cb62d-38fc-4579-917f-2c7184c72842", "row_index": 509, "timestamp": "2018-09-27T11:30:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b75cb62d-38fc-4579-917f-2c7184c72842", "eventTime": "2018-09-27T11:30:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3trS93aNaHIk/kYO6Kf+5/d8CoNAigyTJYzE+7pyNjvMa+/78CcAbrn2njUmhiCK0TNxCaoy4j6bXMyPdaY3Eg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "953fe783-4319-40ff-ab36-76762c36c0", "record_id": "flaws_cloudtrail:0000510:953fe783-4319-40ff-ab36-76762c36c0", "row_index": 510, "timestamp": "2018-09-27T11:30:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "953fe783-4319-40ff-ab36-76762c36c0", "eventTime": "2018-09-27T11:30:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "4BGmEAvcBb14KIul4rpAh9GKk38NSeMBZqu3YyWWmR78acKvXCIl6a4DgLy1gx4j1IFIMHxsvUmhgDq1ykV3/w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db12bdf8-f7ae-4f5d-af33-ce4d86cdf2be", "record_id": "flaws_cloudtrail:0000511:db12bdf8-f7ae-4f5d-af33-ce4d86cdf2be", "row_index": 511, "timestamp": "2018-09-27T11:30:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db12bdf8-f7ae-4f5d-af33-ce4d86cdf2be", "eventTime": "2018-09-27T11:30:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "6wqb6H9cVj9B1VPp7nxUV7ZYGqzdiVLlLJ26tB8xwuOCjI741taMbuEdJFR0EaXiyZkVAscEgfadO9mppP4B/A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e56ad66d-f6a0-481c-a5ae-3db3e0367274", "record_id": "flaws_cloudtrail:0000512:e56ad66d-f6a0-481c-a5ae-3db3e0367274", "row_index": 512, "timestamp": "2018-09-27T11:30:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e56ad66d-f6a0-481c-a5ae-3db3e0367274", "eventTime": "2018-09-27T11:30:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YDe3ssEs/ZHLIrqJoYAN/CaOclJOB6tam4ivSkkjYHiEWgyIIFQb4L+7q/J3fvmNHPMeaALVnqyGt4hw1jOByw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa0fd11-1cc9-4a28-afe2-636fffd321657", "record_id": "flaws_cloudtrail:0000513:7aa0fd11-1cc9-4a28-afe2-636fffd321657", "row_index": 513, "timestamp": "2018-09-27T11:30:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa0fd11-1cc9-4a28-afe2-636fffd321657", "eventTime": "2018-09-27T11:30:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HG+Yitu9qiyQFjjZGIuYO1cTJOyrPdyhqx47WKyFyYAz4SXlU4GehIn/tMh/QhOEtJkOWKlqQ/cnijhJPdK/Ew=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f11ad211-93ec-4ea7-9e23-5481da01f619", "record_id": "flaws_cloudtrail:0000514:f11ad211-93ec-4ea7-9e23-5481da01f619", "row_index": 514, "timestamp": "2018-09-27T11:30:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f11ad211-93ec-4ea7-9e23-5481da01f619", "eventTime": "2018-09-27T11:30:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6f579d6-99de-4299-a02e-643d314c89aa", "record_id": "flaws_cloudtrail:0000515:c6f579d6-99de-4299-a02e-643d314c89aa", "row_index": 515, "timestamp": "2018-09-27T11:30:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6f579d6-99de-4299-a02e-643d314c89aa", "eventTime": "2018-09-27T11:30:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "D0PtNUgyXdnoNO7ZgFGjDNLkCYClbQBrlF9R4IuCVx9AUMgFVftATHAU886slQ/566KVThKMtmGRMRRHTj3FlA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2092f667-4473-47da-9a4e-32f7f6d90790", "record_id": "flaws_cloudtrail:0000516:2092f667-4473-47da-9a4e-32f7f6d90790", "row_index": 516, "timestamp": "2018-09-27T11:30:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2092f667-4473-47da-9a4e-32f7f6d90790", "eventTime": "2018-09-27T11:30:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8xVIKqn3eDVH+g7AeTgojR2w/2jRHc5wzyCfS3sdQifzl+hjcQQoSzCll3GvWNCo3LfsckzDnADvb3fiYw71yg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "949f18ea-4f1b-4c88-9223-6833b0e11282", "record_id": "flaws_cloudtrail:0000517:949f18ea-4f1b-4c88-9223-6833b0e11282", "row_index": 517, "timestamp": "2018-09-27T11:30:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "949f18ea-4f1b-4c88-9223-6833b0e11282", "eventTime": "2018-09-27T11:30:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "AXP26QKtlnceCmMxiUpWxLO4rS73mV6PKukjZaR8P7IpITELSeXTPtxwKps0M9VJVzQwpw46wJPSa795fw51Sg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "205989d35-55d9-4221-a7ce-e9aecf5beb99", "record_id": "flaws_cloudtrail:0000518:205989d35-55d9-4221-a7ce-e9aecf5beb99", "row_index": 518, "timestamp": "2018-09-27T11:30:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "205989d35-55d9-4221-a7ce-e9aecf5beb99", "eventTime": "2018-09-27T11:30:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LXrozHC4UDBZZlt+5+kEhX0tmIF+8cziFa4EmEjnSgduXJ+KNPRTYbaNu3ZbhRlykm+owGYy5bgYGd42+lkFRA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a31dde1a-1f10-43bf-ac42-0294cac4b70b", "record_id": "flaws_cloudtrail:0000519:a31dde1a-1f10-43bf-ac42-0294cac4b70b", "row_index": 519, "timestamp": "2018-09-27T11:30:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a31dde1a-1f10-43bf-ac42-0294cac4b70b", "eventTime": "2018-09-27T11:30:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "nrLqy3G3/P2ivMcfS2fWQ+zNBmOFCfh8yvcl2TwwadJeBeE6SA01HkpDUsu89BJg42ykRH2MPka5SwQeWAFtsQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00b17a7f-e640-4202-9472-97547b1411ac", "record_id": "flaws_cloudtrail:0000520:00b17a7f-e640-4202-9472-97547b1411ac", "row_index": 520, "timestamp": "2018-09-27T11:30:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00b17a7f-e640-4202-9472-97547b1411ac", "eventTime": "2018-09-27T11:30:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DZcPWI6zVEKvF8QmtseUa5PkxH3/9ZBUGCQTtRH1aeh4mn9zeeES337VaWSKNrTrtZVEFSd4oIKVRQAmHj4jbA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c01e3af9-f64c-4b73-bd89-2f73ab9794f2", "record_id": "flaws_cloudtrail:0000521:c01e3af9-f64c-4b73-bd89-2f73ab9794f2", "row_index": 521, "timestamp": "2018-09-27T11:30:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c01e3af9-f64c-4b73-bd89-2f73ab9794f2", "eventTime": "2018-09-27T11:30:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8UTqYCoaDnEHz8kOa0IH+sZOMi61xXai3eNTt5K3izVa2Og4FtXBv9uxs4fs/VfpBwMXt3iviul/1TDUeQGxeQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93996f9f-062a-4b79-82a7-d57ca41f3611", "record_id": "flaws_cloudtrail:0000522:93996f9f-062a-4b79-82a7-d57ca41f3611", "row_index": 522, "timestamp": "2018-09-27T11:30:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93996f9f-062a-4b79-82a7-d57ca41f3611", "eventTime": "2018-09-27T11:30:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "f57g+ynW+KHzeMoVu+gpITuV8oIZeo/+hcCQ2qhP6CzqV3xrEAzmPtL3WNobsVdDQoOaxuptZOrA8qSgdz5TnQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "180bc1a4-6bd9-4582-9889-74a73910c24", "record_id": "flaws_cloudtrail:0000523:180bc1a4-6bd9-4582-9889-74a73910c24", "row_index": 523, "timestamp": "2018-09-27T11:30:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "180bc1a4-6bd9-4582-9889-74a73910c24", "eventTime": "2018-09-27T11:30:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VBfJ/iV4Cc+F9apX7XcLTD4aVnr+jT3V8qV6yTN0WCOvy/0G3kUeLI4XRU8821Hxj0qwITHmJti7hQIJWhQfSQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d0523c6-5964-4d21-a9e6-4738bd9e8d7f", "record_id": "flaws_cloudtrail:0000524:4d0523c6-5964-4d21-a9e6-4738bd9e8d7f", "row_index": 524, "timestamp": "2018-09-27T11:30:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d0523c6-5964-4d21-a9e6-4738bd9e8d7f", "eventTime": "2018-09-27T11:30:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "T0FkRHCBIn1RBGz6joqURrxm/lu4P+lXjnz1bNw6ZDCnpj0Mh6XajU/88C17fw6aloMNKznzAOQkAWaCPpFidA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c9420da-284b-44b6-a479-3e5b41dd447d", "record_id": "flaws_cloudtrail:0000525:0c9420da-284b-44b6-a479-3e5b41dd447d", "row_index": 525, "timestamp": "2018-09-27T11:30:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c9420da-284b-44b6-a479-3e5b41dd447d", "eventTime": "2018-09-27T11:30:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "xiwYdtlcNXHjiey4gbDI4t5k5jTvMpuwduUSI/PzFBs6tde55/LinvvHOnXByHXm5FG10ADe3jpMqu5xh2nZvA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e9309d7-bb4b-49f5-873d-7d2cc389708e", "record_id": "flaws_cloudtrail:0000526:1e9309d7-bb4b-49f5-873d-7d2cc389708e", "row_index": 526, "timestamp": "2018-09-27T11:30:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e9309d7-bb4b-49f5-873d-7d2cc389708e", "eventTime": "2018-09-27T11:30:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "lT8y7szJwhGvYdhq6E+iMnXdpEKFsp9joPdLEQze5eMZr182kyk4i5uPcW4XhXj7HRmmr7ctsKyV7ph6DijZKg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c426743db-64e8-4a4e-b86b-b0d7ecd72e49", "record_id": "flaws_cloudtrail:0000527:c426743db-64e8-4a4e-b86b-b0d7ecd72e49", "row_index": 527, "timestamp": "2018-09-27T11:30:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c426743db-64e8-4a4e-b86b-b0d7ecd72e49", "eventTime": "2018-09-27T11:30:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "EkmmMJHjrZLTTzP0DUDxGM4jSTnaYD0vIWwV3koUjo1lhFOWjvt0uMEjCkE5uGtJT+jq+hbEkg7FBPPG/uZJcg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7145ce2-d42d-40b0-a9a8-a5cd8a94811", "record_id": "flaws_cloudtrail:0000528:e7145ce2-d42d-40b0-a9a8-a5cd8a94811", "row_index": 528, "timestamp": "2018-09-27T11:30:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7145ce2-d42d-40b0-a9a8-a5cd8a94811", "eventTime": "2018-09-27T11:30:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "zQxogKynf/lEsfoGJu4DE96n/fC6cl74Ja4MMNevpEu7HZBA5XmmD7YqaKpPjzkD6Y1i2ePBeNzVH7XYMpggdA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c73e25f3-2038-4183-8d3b-6a763f49d94e", "record_id": "flaws_cloudtrail:0000529:c73e25f3-2038-4183-8d3b-6a763f49d94e", "row_index": 529, "timestamp": "2018-09-27T11:30:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c73e25f3-2038-4183-8d3b-6a763f49d94e", "eventTime": "2018-09-27T11:30:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "80CPjA8TxDlVgbir2qR5e+kOCKSqln9PmxTASX9xaJVrW6151cqE247diUX5/Lan46hr3yXsPfTQ/gLuiqQwYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0573ab5-e106-4155-b52a-2efea11b2d77", "record_id": "flaws_cloudtrail:0000530:d0573ab5-e106-4155-b52a-2efea11b2d77", "row_index": 530, "timestamp": "2018-09-27T11:30:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0573ab5-e106-4155-b52a-2efea11b2d77", "eventTime": "2018-09-27T11:30:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HdGNO3+4Rz6r2ZXjS1B8UGj3nvRL61DbC37Mq3yja+HX+Fio408nHukOWwlNjpwlpb7UICYs0rpJtRDHZxeUOA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff14a35e-ab44-45ad-85dc-1679c9ffeef2", "record_id": "flaws_cloudtrail:0000531:ff14a35e-ab44-45ad-85dc-1679c9ffeef2", "row_index": 531, "timestamp": "2018-09-27T11:30:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff14a35e-ab44-45ad-85dc-1679c9ffeef2", "eventTime": "2018-09-27T11:30:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qHSALpFdNM+xj0M+v9GTHAEEs7tEbxd0cBpFkehLjp0WFB1a9iAkdl2iYkAroVCZY+zhsPrIIGPAxggXX4cEqg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aceba4e5-1bc5-4324-9a37-74a4edbe048a", "record_id": "flaws_cloudtrail:0000532:aceba4e5-1bc5-4324-9a37-74a4edbe048a", "row_index": 532, "timestamp": "2018-09-27T11:30:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aceba4e5-1bc5-4324-9a37-74a4edbe048a", "eventTime": "2018-09-27T11:30:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "6zQ+uNsvD4Y4+EvuquylKB8UHgwRBXqdr5LIYtY3dgSaYkheqTk8xlh4YFijpNt1KsrzLiWxTYSG/YcWpIT7+A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89f28874-0b39-41a5-90a0-f4c40da79bb0", "record_id": "flaws_cloudtrail:0000533:89f28874-0b39-41a5-90a0-f4c40da79bb0", "row_index": 533, "timestamp": "2018-09-27T11:30:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89f28874-0b39-41a5-90a0-f4c40da79bb0", "eventTime": "2018-09-27T11:30:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gu3Eaz3LW4UcdTsJaZs/HZYNVKNl9OsOloDrhaxhzXKT6NLT6FRn8omwo1kcoPikeCppkmWvJGGQIC8pi+bSWw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cc3d441-bcf5-436b-98f4-b0fc8c8d2773", "record_id": "flaws_cloudtrail:0000534:1cc3d441-bcf5-436b-98f4-b0fc8c8d2773", "row_index": 534, "timestamp": "2018-09-27T11:30:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cc3d441-bcf5-436b-98f4-b0fc8c8d2773", "eventTime": "2018-09-27T11:30:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "uaM5h0IrjxnLpSbK2FqNDT8G1BRif2OE3aIVr4Kk26CmW8Kihoz1SYT7qV09hfkvJKPqUPsGxzsQssNqEmZO5w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "175a363a-4145-4dce-bb76-1247abc77def", "record_id": "flaws_cloudtrail:0000535:175a363a-4145-4dce-bb76-1247abc77def", "row_index": 535, "timestamp": "2018-09-27T11:30:20Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "175a363a-4145-4dce-bb76-1247abc77def", "eventTime": "2018-09-27T11:30:20Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "x7q1/iOj/LMCU69N7U/M3XWM3Anxk+oNLs4C3YcZbZKuPh6HhcvGSpV8mpymWjdpzFOmvh3igUSn/stvuH/bvw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5ab5aaf-46c8-40b7-9860-29dd415bb42a", "record_id": "flaws_cloudtrail:0000536:f5ab5aaf-46c8-40b7-9860-29dd415bb42a", "row_index": 536, "timestamp": "2018-09-27T11:30:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5ab5aaf-46c8-40b7-9860-29dd415bb42a", "eventTime": "2018-09-27T11:30:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "+u0I1BqNFGuoswUNe5f0P9sBS4q2j3vLMD3wixn9lJ/eqRu97qJ2LxP4IwRMOOSm4UdwV7Wv+MtQI5UWivrv8A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ee0ef1b-a760-4ed3-b06d-b21e87761cae", "record_id": "flaws_cloudtrail:0000537:2ee0ef1b-a760-4ed3-b06d-b21e87761cae", "row_index": 537, "timestamp": "2018-09-27T11:30:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ee0ef1b-a760-4ed3-b06d-b21e87761cae", "eventTime": "2018-09-27T11:30:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "x7pGSH91aAQ/M0LJzjh7SttFO6ICmtN19pERlF/bFlYCLyGO3cMpFT8mGIRmXVwexVVPI3c0SQADGqGc5Cio8A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "805763c2e-9d97-46bb-a206-8d5a4f5605c5", "record_id": "flaws_cloudtrail:0000538:805763c2e-9d97-46bb-a206-8d5a4f5605c5", "row_index": 538, "timestamp": "2018-09-27T11:30:21Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "805763c2e-9d97-46bb-a206-8d5a4f5605c5", "eventTime": "2018-09-27T11:30:21Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Kv8uVvqnpPfJCq/Bh2TJuZu5+OaUDBEidfEcmVsJQTj2hoKzQIhRAdxZ/pq8D51Vpnv8k/pMtMEVr5PYNvytBw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff6cdbb-4dcc-49f0-ad64-c2fea86fdc99", "record_id": "flaws_cloudtrail:0000539:cff6cdbb-4dcc-49f0-ad64-c2fea86fdc99", "row_index": 539, "timestamp": "2018-09-27T11:30:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff6cdbb-4dcc-49f0-ad64-c2fea86fdc99", "eventTime": "2018-09-27T11:30:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "UlVfFt8t4LIiiOLow+EYF1cqY0AgGDL/pSSOR1tYoUDHkPuAgEk6MFy7HmyPIs6XBEp2OZ2FrFa1OMCVAe4yaw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c212705f-3d1e-4f0d-b325-aa27dca10bfc", "record_id": "flaws_cloudtrail:0000540:c212705f-3d1e-4f0d-b325-aa27dca10bfc", "row_index": 540, "timestamp": "2018-09-27T11:30:22Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c212705f-3d1e-4f0d-b325-aa27dca10bfc", "eventTime": "2018-09-27T11:30:22Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "8DVOQevKzdFvtGCq4J0mKqB3jvfLNwXggjlFy3t4t/HAxJ0IzxTp2ql+5cOBOSzMHgzkQUEYYe2zIpF2Yz1x+g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef23406-f23c-4e7a-882a-5f8a95cec2b4", "record_id": "flaws_cloudtrail:0000541:ef23406-f23c-4e7a-882a-5f8a95cec2b4", "row_index": 541, "timestamp": "2018-09-27T11:30:23Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef23406-f23c-4e7a-882a-5f8a95cec2b4", "eventTime": "2018-09-27T11:30:23Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "3df/tPNeqrjCN+j1AZ96ag3egqsgDAALik2TqLKtA2yy5fjrdIWLBpzxjQ4iuDh2V/Hle2KLGcyDRedtOfXMSw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d6d4063-bc0a-4da7-a015-5869cfeca252", "record_id": "flaws_cloudtrail:0000542:8d6d4063-bc0a-4da7-a015-5869cfeca252", "row_index": 542, "timestamp": "2018-09-27T11:30:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d6d4063-bc0a-4da7-a015-5869cfeca252", "eventTime": "2018-09-27T11:30:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RiZ/ew5tcefMIFsBNIcXmDAmAmN+4PDmaL91WufFUWV5rwNHYCw+7LgXrClAlM0rWlB+tUGnks40EkJe1QIH7Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4710eb25-82a4-48bf-926e-e14a2408b64a", "record_id": "flaws_cloudtrail:0000543:4710eb25-82a4-48bf-926e-e14a2408b64a", "row_index": 543, "timestamp": "2018-09-27T11:30:24Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4710eb25-82a4-48bf-926e-e14a2408b64a", "eventTime": "2018-09-27T11:30:24Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "GqZY2V7GmD01iWQmtAzC8DvJEi9VTbmvTSlzsxmT5oTBWL0OjTw7k7bxQQC/DucQaOyaFjL5K3WJp3FVUx8GAA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "474856-76a2-44e7-8b03-c991943bb45b0", "record_id": "flaws_cloudtrail:0000544:474856-76a2-44e7-8b03-c991943bb45b0", "row_index": 544, "timestamp": "2018-09-27T11:30:25Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "474856-76a2-44e7-8b03-c991943bb45b0", "eventTime": "2018-09-27T11:30:25Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IvJ0IOzZI7OVzw5znCWocfF9h9F2XsF2UPFzAZOh4IZXdQNW7vwcmYRN0/kebvPMO8zle9ceq5+GsSZ6uvbLdQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82a4db98-1540-435b-8123-ba400635b", "record_id": "flaws_cloudtrail:0000545:82a4db98-1540-435b-8123-ba400635b", "row_index": 545, "timestamp": "2018-09-27T11:30:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82a4db98-1540-435b-8123-ba400635b", "eventTime": "2018-09-27T11:30:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Wd4jba5uY2grtJ35gBdr62h9X5Ob2f9l9cHZEgvf9QByjOljkJ2SNBlFKXjdnsj5sAJY7J68Ecy/aZoD6vUspg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "428c85f9-e3bd-4b1c-b8f5-58099e0b832a", "record_id": "flaws_cloudtrail:0000546:428c85f9-e3bd-4b1c-b8f5-58099e0b832a", "row_index": 546, "timestamp": "2018-09-27T11:30:26Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "428c85f9-e3bd-4b1c-b8f5-58099e0b832a", "eventTime": "2018-09-27T11:30:26Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "v6gOhP6yuOSEn/HtC8su05QNhH8kwUkgx4YAUZndS+snn1aOsjWc9FlTzllz7tyuIVDB9r+cuQHthK6q6zjNXw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c326d7b0-e833-4b63-837e-bd76471343ea", "record_id": "flaws_cloudtrail:0000547:c326d7b0-e833-4b63-837e-bd76471343ea", "row_index": 547, "timestamp": "2018-09-27T11:30:50Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c326d7b0-e833-4b63-837e-bd76471343ea", "eventTime": "2018-09-27T11:30:50Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "vUJ2Pk2I3yrp5caNgT1B3kGJE/e9vgK1jfxNTO4cBArwQElKJ0siG3cnS3dYp2TjdGrYJNUd6ZKZJIrduK/DKg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d29ac85e-593a-4cdf-9044-116a95ccb5ec", "record_id": "flaws_cloudtrail:0000548:d29ac85e-593a-4cdf-9044-116a95ccb5ec", "row_index": 548, "timestamp": "2018-09-27T11:30:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d29ac85e-593a-4cdf-9044-116a95ccb5ec", "eventTime": "2018-09-27T11:30:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YA3dUT+fXgsSqHOXtqyr7HNQ9x9WpWDY061NNuwUfwanO31tXBLQIAtKIfrTIHRVf99oR75fjoIC52OXRZMTPg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df6bfeae-0a8b-4695-90bd-88ec750ae810", "record_id": "flaws_cloudtrail:0000549:df6bfeae-0a8b-4695-90bd-88ec750ae810", "row_index": 549, "timestamp": "2018-09-27T11:30:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df6bfeae-0a8b-4695-90bd-88ec750ae810", "eventTime": "2018-09-27T11:30:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "d2aal6n+ZzrxeZbGx+omm0RFusK7iMrtZG0BcMf9PWYzi0Wa4Se4A3BiPeBdmaUT6OVSn1ZuuiwlbpTqyK4wCg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a82818c-3b91-4e69-be20-e953f5f445cc", "record_id": "flaws_cloudtrail:0000550:8a82818c-3b91-4e69-be20-e953f5f445cc", "row_index": 550, "timestamp": "2018-09-27T11:30:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a82818c-3b91-4e69-be20-e953f5f445cc", "eventTime": "2018-09-27T11:30:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "U8L5bF2SZDXE6PgQDuTDklr6lgmdpDVnJUoDMnbir/hFPnFUNcxBBLbTTDG8rSNZAc1YWwIWTZYFqeJO32CoAg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "760ed539-4aa6-468b-93c2-f094f0c684170", "record_id": "flaws_cloudtrail:0000551:760ed539-4aa6-468b-93c2-f094f0c684170", "row_index": 551, "timestamp": "2018-09-27T11:30:51Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "760ed539-4aa6-468b-93c2-f094f0c684170", "eventTime": "2018-09-27T11:30:51Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c943d90b-2aec-442b-8b75-0c05b6e16518", "record_id": "flaws_cloudtrail:0000552:c943d90b-2aec-442b-8b75-0c05b6e16518", "row_index": 552, "timestamp": "2018-09-27T11:30:53Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c943d90b-2aec-442b-8b75-0c05b6e16518", "eventTime": "2018-09-27T11:30:53Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "O7JNF1lIQvWYYNJAJzU5hQIOoTBOwq7dvlaFGkTe0wALC+IdmdI2wJYb7bFHQc4dtlGsBZTjfWucBx6IvLy5Rg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9caf2e0e-ffbe-475e-afe1-1f14e49944df", "record_id": "flaws_cloudtrail:0000553:9caf2e0e-ffbe-475e-afe1-1f14e49944df", "row_index": 553, "timestamp": "2018-09-27T11:30:54Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9caf2e0e-ffbe-475e-afe1-1f14e49944df", "eventTime": "2018-09-27T11:30:54Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "hEI6iWR/Y3d1FWE/JTEdEeTyB91CA1xYl8JUQxx6Vf49xpwBWK9Re0NVHx8CyrBKofuJH4J3CmxFI2AlETavAw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cda6736-f140-401e-83a5-ec2ad27c538c", "record_id": "flaws_cloudtrail:0000554:1cda6736-f140-401e-83a5-ec2ad27c538c", "row_index": 554, "timestamp": "2018-09-27T11:30:55Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cda6736-f140-401e-83a5-ec2ad27c538c", "eventTime": "2018-09-27T11:30:55Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "TdCV8Bv/g0DUsi67ibrOgi7l95rhmlBH6Ygii0/Gwo80kbbVpc09E+1Yjn3JusWjDiFZbURBy3ZfT75Tm2gpqA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01889a5-cacd-4052-b1a7-fb671232c7efb", "record_id": "flaws_cloudtrail:0000555:01889a5-cacd-4052-b1a7-fb671232c7efb", "row_index": 555, "timestamp": "2018-09-27T11:30:56Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01889a5-cacd-4052-b1a7-fb671232c7efb", "eventTime": "2018-09-27T11:30:56Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "F9J5EO+8tQq+3BjeYEmrreYfKPmexWzYul6DllcZLSLULho5dYv3YHTdLIhnZ9g3/JYP5oqosSjBm8fpqkn4XQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b50341d-5bf7-4377-8242-ea048174e83b8", "record_id": "flaws_cloudtrail:0000556:b50341d-5bf7-4377-8242-ea048174e83b8", "row_index": 556, "timestamp": "2018-09-27T11:30:57Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b50341d-5bf7-4377-8242-ea048174e83b8", "eventTime": "2018-09-27T11:30:57Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "w9Vk2fRorh2tbQgV++la5HlnmdvcNu9T+7+dIeRdjfQWhEfSYkyuonE2phThp76U084i8oDPsukbI3RN+CBt3Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3200fa6-6c6f-4497-bee9-1700aeb3cd7f", "record_id": "flaws_cloudtrail:0000557:f3200fa6-6c6f-4497-bee9-1700aeb3cd7f", "row_index": 557, "timestamp": "2018-09-27T11:30:58Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3200fa6-6c6f-4497-bee9-1700aeb3cd7f", "eventTime": "2018-09-27T11:30:58Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ixpQ9KTuIGDlUFHOzPUPxG5r+7ooHsFZ+/On910V/+wrFdtOxs7zENeUTU3duryJg1mLCqz8dx3CN23Sl45n2A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c433f0f-b8bb-4196-8290-0cbff5dc10e2", "record_id": "flaws_cloudtrail:0000558:0c433f0f-b8bb-4196-8290-0cbff5dc10e2", "row_index": 558, "timestamp": "2018-09-27T11:30:59Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c433f0f-b8bb-4196-8290-0cbff5dc10e2", "eventTime": "2018-09-27T11:30:59Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "eB/zT6M8sRbpCm+bJJXTyZPDIx5SRHM30XrEKASpZvZ6/IbX2WCTSDMBLkV06NI/4nQE7o/ehqrYq4qMMEqcBA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681ad45a-0ca7-43e9-af71-bbc5c1d888f7", "record_id": "flaws_cloudtrail:0000559:681ad45a-0ca7-43e9-af71-bbc5c1d888f7", "row_index": 559, "timestamp": "2018-09-27T11:31:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681ad45a-0ca7-43e9-af71-bbc5c1d888f7", "eventTime": "2018-09-27T11:31:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "WClXnFmy8oxjEwDwUhz6Jj3kAGwIbqkPHptFOXoI50UH7n4A6Kmcdyu9Ov6MMAlVvh8KvuIncUgih1RDGQHH3w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb5d3cb8-d4ab-49b9-8f19-dc2a6cfcc1bb", "record_id": "flaws_cloudtrail:0000560:fb5d3cb8-d4ab-49b9-8f19-dc2a6cfcc1bb", "row_index": 560, "timestamp": "2018-09-27T11:31:00Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb5d3cb8-d4ab-49b9-8f19-dc2a6cfcc1bb", "eventTime": "2018-09-27T11:31:00Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "RZpjMrkYOm77H5b2CGH6RfxbBTP/2q+fi9n21rDCz1s5OUbsOQ0iuQvn0/QoRUiLA4WGwFiMv7mDJZsRcXnpLA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a083456-f06d-4a01-9991-93bd28ae4b8e", "record_id": "flaws_cloudtrail:0000561:a083456-f06d-4a01-9991-93bd28ae4b8e", "row_index": 561, "timestamp": "2018-09-27T11:31:01Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a083456-f06d-4a01-9991-93bd28ae4b8e", "eventTime": "2018-09-27T11:31:01Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "HV4NbZ0MTRHX3lv/JPjxGD5+XJYJVbxGi4nw384NEtt1SgekMkMVCIHgghLGwSEcUcBa+mfF0hGPNUp7XLCrrg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb0c4562-7333-4d92-8e98-bdc563b384d1", "record_id": "flaws_cloudtrail:0000562:eb0c4562-7333-4d92-8e98-bdc563b384d1", "row_index": 562, "timestamp": "2018-09-27T11:31:02Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb0c4562-7333-4d92-8e98-bdc563b384d1", "eventTime": "2018-09-27T11:31:02Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "ecOQrd4jAo0t+g1eY3bC7+0nDqsozrugXi2EJorV5/wpCIWYGymIShnrKaZpDJxuonXRVL6lsuda/6e8EaD0xA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd8c3134-7a2c-498c-93ce-9bf89bf6206b", "record_id": "flaws_cloudtrail:0000563:dd8c3134-7a2c-498c-93ce-9bf89bf6206b", "row_index": 563, "timestamp": "2018-09-27T11:31:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd8c3134-7a2c-498c-93ce-9bf89bf6206b", "eventTime": "2018-09-27T11:31:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9hN00CgIcRDejn26fQc24nkJXKBlbGPiBk7xks0CSRf4iGTBNNngJlgQdgCu7aTX4dmJYQgKGhAmlHYrkbemvQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "138da96c-d833-4a8c-b685-c123334bbaf0", "record_id": "flaws_cloudtrail:0000564:138da96c-d833-4a8c-b685-c123334bbaf0", "row_index": 564, "timestamp": "2018-09-27T11:31:03Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "138da96c-d833-4a8c-b685-c123334bbaf0", "eventTime": "2018-09-27T11:31:03Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "DsfFm3fmL1TLc57Kc1W+Q/q2BNDjjvVM8QglLo+47Bh5eDUa16guCmRd7VVLQDjLLNpEROsO14RUCItGKk4lIQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee8d89fd-44e2-4b37-b412-47eff80782f9", "record_id": "flaws_cloudtrail:0000565:ee8d89fd-44e2-4b37-b412-47eff80782f9", "row_index": 565, "timestamp": "2018-09-27T11:31:04Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee8d89fd-44e2-4b37-b412-47eff80782f9", "eventTime": "2018-09-27T11:31:04Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "mko6SNmdqLJ5f9/kLIEE5dgjAE741Izba9v7yU9iR1+8hqhl5TeF3qZ/X1g7jBU2i8jIQy9YQPgCl1aXGeuNwQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "087f74e8-49b6-4727-97ab-09af6e32a09d", "record_id": "flaws_cloudtrail:0000566:087f74e8-49b6-4727-97ab-09af6e32a09d", "row_index": 566, "timestamp": "2018-09-27T11:31:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "087f74e8-49b6-4727-97ab-09af6e32a09d", "eventTime": "2018-09-27T11:31:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "JjylxewBtL6CZyZRcLb/CVGGuNwNqEMds+SyxAb7egNsQdG3BxttYokmkDJunX432Xouc7ehHBMcHGzsVwCggw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a9ebedf-6e6e-411e-813a-d255c137d99a", "record_id": "flaws_cloudtrail:0000567:9a9ebedf-6e6e-411e-813a-d255c137d99a", "row_index": 567, "timestamp": "2018-09-27T11:31:05Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a9ebedf-6e6e-411e-813a-d255c137d99a", "eventTime": "2018-09-27T11:31:05Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "vRdtGgh+FEdilqSVQX63kWVK8ikdWxIE0oYmBvAMN7nklgspKzQzx62VEzTjy4/lZcO6K4YFmdKhslXKMNA+9w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f191b6a2-e1dd-4975-8d0e-5f83ae640a87", "record_id": "flaws_cloudtrail:0000568:f191b6a2-e1dd-4975-8d0e-5f83ae640a87", "row_index": 568, "timestamp": "2018-09-27T11:31:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f191b6a2-e1dd-4975-8d0e-5f83ae640a87", "eventTime": "2018-09-27T11:31:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "/xWfUGwkOU6VrQrGnN0sPuty0r+BAXZE+0t9+IaPYxdu2zTaBMP6vc4wBN7QcsS5rU2LdH2OlxNkTTJ06L1YoA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68dd8904-aa5a-4313-83d5-bb95bf124103a", "record_id": "flaws_cloudtrail:0000569:68dd8904-aa5a-4313-83d5-bb95bf124103a", "row_index": 569, "timestamp": "2018-09-27T11:31:06Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68dd8904-aa5a-4313-83d5-bb95bf124103a", "eventTime": "2018-09-27T11:31:06Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "An3RxkwegZ5Mz751RF+7nOMK50wne6lKapOu726ICLP59f8MVF//wUN4zZ7e5QyddPh05T1kHaOgU9Z3xs0pWg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52324e5b-12a0-4671-b732-8fc375fda352", "record_id": "flaws_cloudtrail:0000570:52324e5b-12a0-4671-b732-8fc375fda352", "row_index": 570, "timestamp": "2018-09-27T11:31:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52324e5b-12a0-4671-b732-8fc375fda352", "eventTime": "2018-09-27T11:31:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "xfSbJAcQz1oiM3epzf3Cu6sWgyaaxPuTqLDoEu+yr52+fP+0uU5ci4Oq9L3YqhlTRLFkT0sjN8motbgUoPddbg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a31c20b5-e3da-4212-9f11-9ec439899d956", "record_id": "flaws_cloudtrail:0000571:a31c20b5-e3da-4212-9f11-9ec439899d956", "row_index": 571, "timestamp": "2018-09-27T11:31:07Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a31c20b5-e3da-4212-9f11-9ec439899d956", "eventTime": "2018-09-27T11:31:07Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "S0Xxs+G4yPENgHApdnYEnFTFtw/jjCRjswLF8QxfdFmclnd1X9ogCymXjCp5ssfgcpNfmBwe8CLbh1nGx/EpYQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915b3c24-3053-4efb-9ef2-b0042c22cc7f", "record_id": "flaws_cloudtrail:0000572:915b3c24-3053-4efb-9ef2-b0042c22cc7f", "row_index": 572, "timestamp": "2018-09-27T11:31:08Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915b3c24-3053-4efb-9ef2-b0042c22cc7f", "eventTime": "2018-09-27T11:31:08Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "opsDfSejiiTmUtzHZ2yI5fyvjt8ozdp5+CF3d1gDwIER8CHPjNRaElr7I2DHTMv4wmp4c5CVR34zWY9/1mYOIg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a5daaf3-2345-4e62-ba2b-c73064a66a7c", "record_id": "flaws_cloudtrail:0000573:4a5daaf3-2345-4e62-ba2b-c73064a66a7c", "row_index": 573, "timestamp": "2018-09-27T11:31:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a5daaf3-2345-4e62-ba2b-c73064a66a7c", "eventTime": "2018-09-27T11:31:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "7CcV3vMe0pfAEh09Y9Rv6jHovC00Jsndqg4iZIMxzWzCoU/psk0yxCOam+CaZM5E8l9IKyB1cB1IPHvZ6Cc3vw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edab0aee-d568-4a7c-b0b5-ec27980d897", "record_id": "flaws_cloudtrail:0000574:edab0aee-d568-4a7c-b0b5-ec27980d897", "row_index": 574, "timestamp": "2018-09-27T11:31:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edab0aee-d568-4a7c-b0b5-ec27980d897", "eventTime": "2018-09-27T11:31:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "KN6O8LGmGVmKlgQ4YmLZjfMtgySrCUjv41xunanRB/O5U9DDcEAEkSVLauJLG0nN6jTFvkzwDIErva38AlHSjQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eb766425-d6fc-4401-b27c-3ad1e91e8cd8", "record_id": "flaws_cloudtrail:0000575:0eb766425-d6fc-4401-b27c-3ad1e91e8cd8", "row_index": 575, "timestamp": "2018-09-27T11:31:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eb766425-d6fc-4401-b27c-3ad1e91e8cd8", "eventTime": "2018-09-27T11:31:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LePWt4I/XTaMw+0Y55y3WEzolTzegAsy8laaC3zUh6yM3OjUBDkKHsYYzQI8UFbC3l+ODCtyeJjpzr5mpJATVQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0a0aea4-d2e9-4c52-8a2b-41b7224c3bfe", "record_id": "flaws_cloudtrail:0000576:a0a0aea4-d2e9-4c52-8a2b-41b7224c3bfe", "row_index": 576, "timestamp": "2018-09-27T11:31:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0a0aea4-d2e9-4c52-8a2b-41b7224c3bfe", "eventTime": "2018-09-27T11:31:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gyWjNeUFm0QNqUi5n8d5SpbMoitfY86yCY9GdrnVu7BpJMHIILv8zIMf0HGJ9TdXbCEuaiRoABYOl3eda+0Elw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34bbde48-181d-402e-a459-68de045b334f", "record_id": "flaws_cloudtrail:0000577:34bbde48-181d-402e-a459-68de045b334f", "row_index": 577, "timestamp": "2018-09-27T11:31:11Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34bbde48-181d-402e-a459-68de045b334f", "eventTime": "2018-09-27T11:31:11Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "YN4k6YLF7GUFkrP0ezQ68dltsu4HDFaGA4HpHENizhVE1EgB6IsveKPLC/WtWLqnsoap/QC03jaWPCCEsdADKw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e5352c4-b4fc-420d-9137-841637c2710e", "record_id": "flaws_cloudtrail:0000578:3e5352c4-b4fc-420d-9137-841637c2710e", "row_index": 578, "timestamp": "2018-09-27T11:31:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e5352c4-b4fc-420d-9137-841637c2710e", "eventTime": "2018-09-27T11:31:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "IoSLAS8OyviGKqyjqKUrvwbD2/fitlaa11tjEswqiOy+ISnV49cGapggWaZ96K9p+6YPyxVm7qKoUL3xQ9AMhg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c030c2c-fe41-4977-94e6-f37507c2582c", "record_id": "flaws_cloudtrail:0000579:8c030c2c-fe41-4977-94e6-f37507c2582c", "row_index": 579, "timestamp": "2018-09-27T11:31:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c030c2c-fe41-4977-94e6-f37507c2582c", "eventTime": "2018-09-27T11:31:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "iht3DzfqQ6IURRckvXVF+kqOJcwQ8/+pTq1jbp6HkheaPuSdb5tOXZuYzPXnFkQcyJEolpl3yOUhjcLKX+JLzw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bed7ca78-32c9-42e9-9524-0645a35f85c4", "record_id": "flaws_cloudtrail:0000580:bed7ca78-32c9-42e9-9524-0645a35f85c4", "row_index": 580, "timestamp": "2018-09-27T11:31:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bed7ca78-32c9-42e9-9524-0645a35f85c4", "eventTime": "2018-09-27T11:31:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Gexycf3r+p33SAuBSOj1heQNN8QNwpl2OahAVY3golq2XMv7WUBncF6+H/1UiBNAwsYL7wv5pPID4aDHH5sFKw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "170bd493-4107-485c-947a-7d8cb0c807d5", "record_id": "flaws_cloudtrail:0000581:170bd493-4107-485c-947a-7d8cb0c807d5", "row_index": 581, "timestamp": "2018-09-27T11:31:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "170bd493-4107-485c-947a-7d8cb0c807d5", "eventTime": "2018-09-27T11:31:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "l8wo9uDvi7CTX4moLZ8kNkLQvn5VZb+TyUVSeRbWO3epfOQVyW1vxhoaeIVe6g/pDGYsJ1jl1IPTYm04xd1FRA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b7c92e4-fa38-4494-b079-650389f36c", "record_id": "flaws_cloudtrail:0000582:8b7c92e4-fa38-4494-b079-650389f36c", "row_index": 582, "timestamp": "2018-09-27T11:31:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b7c92e4-fa38-4494-b079-650389f36c", "eventTime": "2018-09-27T11:31:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "noAOcDK5kVX7igo9Zkmx6ZOFq1yuBpXLxsLaZMP1HxBkO+YUVscZsKCLtkizwhUyhiI8fco7fKyUywuANRsgCA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ecc1bf-fb9e-4341-860a-c04b0c0e8f71", "record_id": "flaws_cloudtrail:0000583:04ecc1bf-fb9e-4341-860a-c04b0c0e8f71", "row_index": 583, "timestamp": "2018-09-27T11:31:15Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ecc1bf-fb9e-4341-860a-c04b0c0e8f71", "eventTime": "2018-09-27T11:31:15Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "NlHobXTUsvIrQJvVWjysWTzwFfneMgdFeDWAf4osBZWUMmNNp5bk23j6v9zzIVldH2lxg3q6oGUJ2w/laQnSNw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38b1c563-aa31-44e9-b482-0ee4770e0eef", "record_id": "flaws_cloudtrail:0000584:38b1c563-aa31-44e9-b482-0ee4770e0eef", "row_index": 584, "timestamp": "2018-09-27T11:31:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38b1c563-aa31-44e9-b482-0ee4770e0eef", "eventTime": "2018-09-27T11:31:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "SG4Mql0ePq7qgQO0vea98YOllAqnhlEzWS5TW9XIeeJpDR+rAzVxiolFH5s9QaiTnZf0AxH778QbWC1Knw9XlQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f4b8274-f520-43df-99f0-b9fe9d28ba55", "record_id": "flaws_cloudtrail:0000585:8f4b8274-f520-43df-99f0-b9fe9d28ba55", "row_index": 585, "timestamp": "2018-09-27T11:31:16Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f4b8274-f520-43df-99f0-b9fe9d28ba55", "eventTime": "2018-09-27T11:31:16Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "gcNAPS48ecYN/VYldcq053xgzcMmarWI0Ax/NtnSfxxgnhGedy6haoe7PqjGNkRrHQ9EJutNE/UiBthtCZGWMw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "973c6ca8-1ab4-4f85-9bee-b512ca90b709", "record_id": "flaws_cloudtrail:0000586:973c6ca8-1ab4-4f85-9bee-b512ca90b709", "row_index": 586, "timestamp": "2018-09-27T11:31:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "973c6ca8-1ab4-4f85-9bee-b512ca90b709", "eventTime": "2018-09-27T11:31:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "QVyg9Pdbc7xNKP6wnZl8snV9led4X5uy/G07zev/C2aOG7HsOI6tLzIUEEp5JaUSvTT8GXpEC7Q36b3hF9Acug=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b02c818c-426e-4d38-b825-7d78d9b3ce90", "record_id": "flaws_cloudtrail:0000587:b02c818c-426e-4d38-b825-7d78d9b3ce90", "row_index": 587, "timestamp": "2018-09-27T11:31:17Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b02c818c-426e-4d38-b825-7d78d9b3ce90", "eventTime": "2018-09-27T11:31:17Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "w+geTxP2LxvEug+a4clP3ITuvVDpwppkGKCnGCQw2O1ypECGxxlljgU7B+HpSUniGcOlpBG2ETn5bIIRQrOFoQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7be3da1a-2079-47d7-984b-a1cfe4dc9d48", "record_id": "flaws_cloudtrail:0000588:7be3da1a-2079-47d7-984b-a1cfe4dc9d48", "row_index": 588, "timestamp": "2018-09-27T11:31:18Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7be3da1a-2079-47d7-984b-a1cfe4dc9d48", "eventTime": "2018-09-27T11:31:18Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "VQI3SEzcdcA4ucY5sWDon1fY++vd/TBdP+2GhzqMtSZXJAMeruoN0WvVCndJRs3i5rTox35vCEg6CHhI31W20g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e9042eb-ba75-4d8a-a7fc-d34e3e102957", "record_id": "flaws_cloudtrail:0000589:6e9042eb-ba75-4d8a-a7fc-d34e3e102957", "row_index": 589, "timestamp": "2018-09-27T11:31:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e9042eb-ba75-4d8a-a7fc-d34e3e102957", "eventTime": "2018-09-27T11:31:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "lHuvfAt0f8Xu4eFY0IvYlBM9fKIp6dPIcKGhzOzE3OMpXGPUbN9SqcAGJnAGXN8Dndgn358i2YpAu7BbDkH/YQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "236dba6a-defa-4564-9805-772a5e5700ca", "record_id": "flaws_cloudtrail:0000590:236dba6a-defa-4564-9805-772a5e5700ca", "row_index": 590, "timestamp": "2018-09-27T11:31:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "236dba6a-defa-4564-9805-772a5e5700ca", "eventTime": "2018-09-27T11:31:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "FBnpojO1cRs2C8ntDZrnpMmWOXVMBrHi/CH89HhdmbvI30FO1q98ofLThUp6jghyuMAVxWgDfsXY8/Czyz2jsA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "996f5f6c-034e-4208-aca8-b7f3dd63f5b4", "record_id": "flaws_cloudtrail:0000591:996f5f6c-034e-4208-aca8-b7f3dd63f5b4", "row_index": 591, "timestamp": "2018-09-27T11:31:19Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "996f5f6c-034e-4208-aca8-b7f3dd63f5b4", "eventTime": "2018-09-27T11:31:19Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "9UP0wrOjQrKkcmVI5umwlEdUZouQ9FathbVQqP1qOLo="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2eef654-2fc2-4fce-80c7-206463272261", "record_id": "flaws_cloudtrail:0000592:c2eef654-2fc2-4fce-80c7-206463272261", "row_index": 592, "timestamp": "2018-09-27T11:36:07Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3EDR81TEPX7F7KY7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.89.202.51", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/Level6-elevated-26"], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2eef654-2fc2-4fce-80c7-206463272261", "eventTime": "2018-09-27T11:36:07Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.89.202.51", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3EDR81TEPX7F7KY7", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/Level6-elevated-26", "roleSessionName": "Level6-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/Level6-elevated-26"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47885028-55dd-42ed-90c8-b3c47e328e3d", "record_id": "flaws_cloudtrail:0000593:47885028-55dd-42ed-90c8-b3c47e328e3d", "row_index": 593, "timestamp": "2018-09-27T11:37:11Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3EDR81TEPX7F7KY7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "169.89.202.51", "user_agent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-5437"], "raw_record_size_bytes": 632, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47885028-55dd-42ed-90c8-b3c47e328e3d", "eventTime": "2018-09-27T11:37:11Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "169.89.202.51", "userAgent": "aws-cli/2.1.24 Python/3.7.3 Linux/4.14.225 botocore/2.0.0dev45", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3EDR81TEPX7F7KY7", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-5437", "key": "reports/326.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-5437"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03452c9-b418-4c27-b831-2ff9f84ae205", "record_id": "flaws_cloudtrail:0000594:03452c9-b418-4c27-b831-2ff9f84ae205", "row_index": 594, "timestamp": "2018-09-27T11:49:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "config.amazonaws.com", "user_agent": "config.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/config-role-us-west-2"], "raw_record_size_bytes": 1946, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03452c9-b418-4c27-b831-2ff9f84ae205", "eventTime": "2018-09-27T11:49:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "config.amazonaws.com", "userAgent": "config.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "config.amazonaws.com"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "roleSessionName": "AWSConfig"}, "responseElements": {"credentials": {"accessKeyId": "ASIA51DIDO24KMATPI10", "expiration": "Sep 27, 2018 12:49:45 PM", "sessionToken": "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"}, "assumedRoleUser": {"assumedRoleId": "AROASM3HWKK95VDO4HH81:AWSConfig", "arn": "arn:aws:sts::811596193553:assumed-role/config-role-us-west-2/AWSConfig"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/config-role-us-west-2", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c94309e-f1c8-4bb0-a8d7-f292db19204b", "record_id": "flaws_cloudtrail:0000595:5c94309e-f1c8-4bb0-a8d7-f292db19204b", "row_index": 595, "timestamp": "2018-09-27T12:01:14Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1480, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c94309e-f1c8-4bb0-a8d7-f292db19204b", "eventTime": "2018-09-27T12:01:14Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA8MOHQ5CILQYWL47A", "expiration": "Sep 27, 2018 6:34:52 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa8111fc-146a-4725-a6f8-3a0c936058ea", "record_id": "flaws_cloudtrail:0000596:aa8111fc-146a-4725-a6f8-3a0c936058ea", "row_index": 596, "timestamp": "2018-09-27T12:34:09Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa8111fc-146a-4725-a6f8-3a0c936058ea", "eventTime": "2018-09-27T12:34:09Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3824df47-0613-4fbc-ba33-8e2bf173a393", "record_id": "flaws_cloudtrail:0000597:3824df47-0613-4fbc-ba33-8e2bf173a393", "row_index": 597, "timestamp": "2018-09-27T12:34:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3824df47-0613-4fbc-ba33-8e2bf173a393", "eventTime": "2018-09-27T12:34:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "W9qoRcUynhSnSF6+qkaHOXzOoJhc8cQeenAJ8p7pmAt3650/jAtcWh/CuTPEjn1Wr2RuwEZc+oExl+ZC2Esysw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b99de1ee-daab-4623-89fa-b998b9b42c3b", "record_id": "flaws_cloudtrail:0000598:b99de1ee-daab-4623-89fa-b998b9b42c3b", "row_index": 598, "timestamp": "2018-09-27T12:34:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b99de1ee-daab-4623-89fa-b998b9b42c3b", "eventTime": "2018-09-27T12:34:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "errorCode": "ThrottlingException", "errorMessage": "Rate exceeded", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdd2829f-698c-44ad-a422-f05db992f95a", "record_id": "flaws_cloudtrail:0000599:cdd2829f-698c-44ad-a422-f05db992f95a", "row_index": 599, "timestamp": "2018-09-27T12:34:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdd2829f-698c-44ad-a422-f05db992f95a", "eventTime": "2018-09-27T12:34:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "cS+p8JH7WipHETFxdp749DRp2bfJiwU3HfyxhMTgU1sl8H4QuMUc+YW8E2purIpkGlznEfPOdocgDIrgfk4ZHA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8f4082c-efe5-4d60-af2a-cbaef0425f8b", "record_id": "flaws_cloudtrail:0000600:f8f4082c-efe5-4d60-af2a-cbaef0425f8b", "row_index": 600, "timestamp": "2018-09-27T12:34:10Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 820, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8f4082c-efe5-4d60-af2a-cbaef0425f8b", "eventTime": "2018-09-27T12:34:10Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "LwIazcyrmNk2hij/+tIvDaSQHOIGg7Na2Rzo2hN9dgkmdD6FuN32OsEoR6uPoGwoWnOQ6nYznDumjxklOBmyIQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59fa6d94-bdde-4737-98c5-daf78afb685f", "record_id": "flaws_cloudtrail:0000601:59fa6d94-bdde-4737-98c5-daf78afb685f", "row_index": 601, "timestamp": "2018-09-27T12:34:12Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59fa6d94-bdde-4737-98c5-daf78afb685f", "eventTime": "2018-09-27T12:34:12Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "Hq9nr6qomxPmMPGRoHKPk++mly+LiElymCWy5vDGPVBbUwZrC1VTzawP6MO1JWBRI8G4zLneEHZ33eh6ZgOBXw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abf3bad5-cbaa-4f5f-b554-ddc8546cb0ff", "record_id": "flaws_cloudtrail:0000602:abf3bad5-cbaa-4f5f-b554-ddc8546cb0ff", "row_index": 602, "timestamp": "2018-09-27T12:34:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abf3bad5-cbaa-4f5f-b554-ddc8546cb0ff", "eventTime": "2018-09-27T12:34:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "E/R220KAkwBkVb7jjlsZVXeEY4GtQYxaCUbeKy/95KC1I4c215DOobWUK+QN2ThjYT9WRAG7c/rGL3VGJzXDnQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27db1cd7-1738-4030-9b5a-535bb7cbe092", "record_id": "flaws_cloudtrail:0000603:27db1cd7-1738-4030-9b5a-535bb7cbe092", "row_index": 603, "timestamp": "2018-09-27T12:34:13Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27db1cd7-1738-4030-9b5a-535bb7cbe092", "eventTime": "2018-09-27T12:34:13Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "dn+gDEcmndAgkXofVJJrWwnnpBlF448QZ9f+Y8xEYNnI+HkzVBw0U2UgyoFJgJGln3lfF85CIu1WGe99nnbe5Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b14bc6d7-5bcf-474e-9166-308162cb12e", "record_id": "flaws_cloudtrail:0000604:b14bc6d7-5bcf-474e-9166-308162cb12e", "row_index": 604, "timestamp": "2018-09-27T12:34:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b14bc6d7-5bcf-474e-9166-308162cb12e", "eventTime": "2018-09-27T12:34:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "A9VtYI3SM/ZGyobyhBQgrlbdHw2WhHcVniS+uHypITKy4ZfmAyeXktMLkb6vobuQcvPLXuIu0COCo1j5a2ke0Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "971e4928-7138-4cf8-8bab-066ab170c207", "record_id": "flaws_cloudtrail:0000605:971e4928-7138-4cf8-8bab-066ab170c207", "row_index": 605, "timestamp": "2018-09-27T12:34:14Z", "event_type": "LookupEvents", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "89.253.73.252", "user_agent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "971e4928-7138-4cf8-8bab-066ab170c207", "eventTime": "2018-09-27T12:34:14Z", "eventName": "LookupEvents", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "89.253.73.252", "userAgent": "aws-cli/1.16.19 Python/2.7.15+ Linux/4.18.0-kali1-amd64 botocore/1.12.9", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"nextToken": "qcmzpodfRAHWu//qlYz8nfEn5/CoN0fc4yDMNaFDFK0nAwtd+plaCKWGNVKl0SkYuTnIfwHn05/YyVoIRz1O0A=="}, "resources": []}}