{
  "id": "example-id",
  "deviceid": "131304",
  "profile": "Badge Reader",
  "source_zone": "internal",
  "destination_zone": "external",
  "applications": [
    "office365"
  ],
  "services": [
    "example-services_item",
    "example-services_item"
  ],
  "action": "alert",
  "confidence": 6.42,
  "description": "Allowed detected investigation allowed policy activity activity firewall endpoint investigation violation detected."
}