Loading investigation data…
WorkspaceSecurity events
SIMULATED TELEMETRY
Canonical, immutable events from four simulated sources.
| Time (UTC) | Event | Source | Actor | Resource / endpoint | Outcome |
|---|---|---|---|---|---|
| 12:04:522026-09-15 | Internal API requestEVT-001376{
"event_id": "EVT-001376",
"timestamp": "2026-09-15T12:04:52Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-009",
"username": "atlas.engineer.09",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/health"
},
"network": {
"source_ip": "192.0.2.19",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-009",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-009"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-001376"
}
} | Api gateway | atlas.engineer.09192.0.2.19 | /health | Success |
| 12:04:522026-09-15 | Account query accessed 84 recordsEVT-001410{
"event_id": "EVT-001410",
"timestamp": "2026-09-15T12:04:52Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-005",
"username": "atlas.engineer.05",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0099",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.15",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-005",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-005"
},
"attributes": {
"records_accessed": 84,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001410"
}
} | Atlas | atlas.engineer.05192.0.2.15 | /v1/accounts/positions | Success |
| 12:04:392026-09-15 | Account query accessed 56 recordsEVT-002470{
"event_id": "EVT-002470",
"timestamp": "2026-09-15T12:04:39Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-011",
"username": "atlas.engineer.11",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0095",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.21",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-011",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-011"
},
"attributes": {
"records_accessed": 56,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002470"
}
} | Atlas | atlas.engineer.11192.0.2.21 | /v1/accounts/positions | Success |
| 12:04:282026-09-15 | Internal API requestEVT-000822{
"event_id": "EVT-000822",
"timestamp": "2026-09-15T12:04:28Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-011",
"username": "atlas.engineer.11",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/positions"
},
"network": {
"source_ip": "192.0.2.21",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-011",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-011"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-000822"
}
} | Api gateway | atlas.engineer.11192.0.2.21 | /v1/positions | Success |
| 12:04:272026-09-15 | Internal API requestEVT-002702{
"event_id": "EVT-002702",
"timestamp": "2026-09-15T12:04:27Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-013",
"username": "atlas.engineer.13",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/quotes"
},
"network": {
"source_ip": "192.0.2.23",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-013",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-013"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-002702"
}
} | Api gateway | atlas.engineer.13192.0.2.23 | /v1/quotes | Success |
| 12:04:182026-09-15 | Account query accessed 5 recordsEVT-000992{
"event_id": "EVT-000992",
"timestamp": "2026-09-15T12:04:18Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-013",
"username": "atlas.engineer.13",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0050",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.23",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-013",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-013"
},
"attributes": {
"records_accessed": 5,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-000992"
}
} | Atlas | atlas.engineer.13192.0.2.23 | /v1/accounts/positions | Success |
| 12:04:142026-09-15 | Posture checkEVT-001892{
"event_id": "EVT-001892",
"timestamp": "2026-09-15T12:04:14Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-020",
"username": "atlas.engineer.20",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.30",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-020",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-020"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-001892"
}
} | Endpoint | atlas.engineer.20192.0.2.30 | Endpoint telemetry | Success |
| 12:04:112026-09-15 | Internal API requestEVT-002008{
"event_id": "EVT-002008",
"timestamp": "2026-09-15T12:04:11Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-005",
"username": "atlas.engineer.05",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/accounts"
},
"network": {
"source_ip": "192.0.2.15",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-005",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-005"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-002008"
}
} | Api gateway | atlas.engineer.05192.0.2.15 | /v1/accounts | Success |
| 12:04:052026-09-15 | Internal API requestEVT-002543{
"event_id": "EVT-002543",
"timestamp": "2026-09-15T12:04:05Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-006",
"username": "atlas.engineer.06",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/health"
},
"network": {
"source_ip": "192.0.2.16",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-006",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-006"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-002543"
}
} | Api gateway | atlas.engineer.06192.0.2.16 | /health | Success |
| 12:04:042026-09-15 | Internal API requestEVT-000212{
"event_id": "EVT-000212",
"timestamp": "2026-09-15T12:04:04Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-003",
"username": "atlas.engineer.03",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/accounts"
},
"network": {
"source_ip": "192.0.2.13",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-003",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-003"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-000212"
}
} | Api gateway | atlas.engineer.03192.0.2.13 | /v1/accounts | Success |
| 12:04:032026-09-15 | Account query accessed 34 recordsEVT-003256{
"event_id": "EVT-003256",
"timestamp": "2026-09-15T12:04:03Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-015",
"username": "atlas.engineer.15",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0014",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.25",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-015",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-015"
},
"attributes": {
"records_accessed": 34,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-003256"
}
} | Atlas | atlas.engineer.15192.0.2.25 | /v1/accounts/positions | Success |
| 12:03:572026-09-15 | Posture checkEVT-000227{
"event_id": "EVT-000227",
"timestamp": "2026-09-15T12:03:57Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-018",
"username": "atlas.engineer.18",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.28",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-018",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-018"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-000227"
}
} | Endpoint | atlas.engineer.18192.0.2.28 | Endpoint telemetry | Success |
| 12:03:242026-09-15 | Account query accessed 77 recordsEVT-002288{
"event_id": "EVT-002288",
"timestamp": "2026-09-15T12:03:24Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-013",
"username": "atlas.engineer.13",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0098",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.23",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-013",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-013"
},
"attributes": {
"records_accessed": 77,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002288"
}
} | Atlas | atlas.engineer.13192.0.2.23 | /v1/accounts/positions | Success |
| 12:03:222026-09-15 | Account query accessed 61 recordsEVT-001459{
"event_id": "EVT-001459",
"timestamp": "2026-09-15T12:03:22Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-003",
"username": "atlas.engineer.03",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0009",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.13",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-003",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-003"
},
"attributes": {
"records_accessed": 61,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001459"
}
} | Atlas | atlas.engineer.03192.0.2.13 | /v1/accounts/positions | Success |
| 12:03:142026-09-15 | Account query accessed 71 recordsEVT-001344{
"event_id": "EVT-001344",
"timestamp": "2026-09-15T12:03:14Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-015",
"username": "atlas.engineer.15",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0022",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.25",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-015",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-015"
},
"attributes": {
"records_accessed": 71,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001344"
}
} | Atlas | atlas.engineer.15192.0.2.25 | /v1/accounts/positions | Success |
| 12:03:092026-09-15 | Internal API requestEVT-003950{
"event_id": "EVT-003950",
"timestamp": "2026-09-15T12:03:09Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-005",
"username": "atlas.engineer.05",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/quotes"
},
"network": {
"source_ip": "192.0.2.15",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-005",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-005"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003950"
}
} | Api gateway | atlas.engineer.05192.0.2.15 | /v1/quotes | Success |
| 12:03:062026-09-15 | Internal API requestEVT-002897{
"event_id": "EVT-002897",
"timestamp": "2026-09-15T12:03:06Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-014",
"username": "atlas.engineer.14",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/positions"
},
"network": {
"source_ip": "192.0.2.24",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-014",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-014"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-002897"
}
} | Api gateway | atlas.engineer.14192.0.2.24 | /v1/positions | Success |
| 12:02:562026-09-15 | Internal API requestEVT-003651{
"event_id": "EVT-003651",
"timestamp": "2026-09-15T12:02:56Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-007",
"username": "atlas.engineer.07",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/quotes"
},
"network": {
"source_ip": "192.0.2.17",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-007",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-007"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003651"
}
} | Api gateway | atlas.engineer.07192.0.2.17 | /v1/quotes | Success |
| 12:02:542026-09-15 | Account query accessed 58 recordsEVT-001406{
"event_id": "EVT-001406",
"timestamp": "2026-09-15T12:02:54Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-005",
"username": "atlas.engineer.05",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0078",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.15",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-005",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-005"
},
"attributes": {
"records_accessed": 58,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001406"
}
} | Atlas | atlas.engineer.05192.0.2.15 | /v1/accounts/positions | Success |
| 12:02:542026-09-15 | Account query accessed 42 recordsEVT-002948{
"event_id": "EVT-002948",
"timestamp": "2026-09-15T12:02:54Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-003",
"username": "atlas.engineer.03",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0019",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.13",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-003",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-003"
},
"attributes": {
"records_accessed": 42,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002948"
}
} | Atlas | atlas.engineer.03192.0.2.13 | /v1/accounts/positions | Success |
| 12:02:492026-09-15 | Sign-in from a recognized deviceEVT-002478{
"event_id": "EVT-002478",
"timestamp": "2026-09-15T12:02:49Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-005",
"username": "atlas.engineer.05",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.15",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-005",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-005"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-002478"
}
} | Identity | atlas.engineer.05192.0.2.15 | Identity Service | Success |
| 12:02:462026-09-15 | Internal API requestEVT-001629{
"event_id": "EVT-001629",
"timestamp": "2026-09-15T12:02:46Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-007",
"username": "atlas.engineer.07",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/accounts"
},
"network": {
"source_ip": "192.0.2.17",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-007",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-007"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-001629"
}
} | Api gateway | atlas.engineer.07192.0.2.17 | /v1/accounts | Success |
| 12:02:412026-09-15 | Posture checkEVT-001193{
"event_id": "EVT-001193",
"timestamp": "2026-09-15T12:02:41Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-005",
"username": "atlas.engineer.05",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.15",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-005",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-005"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-001193"
}
} | Endpoint | atlas.engineer.05192.0.2.15 | Endpoint telemetry | Success |
| 12:02:392026-09-15 | Sign-in from a recognized deviceEVT-001945{
"event_id": "EVT-001945",
"timestamp": "2026-09-15T12:02:39Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-014",
"username": "atlas.engineer.14",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.24",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-014",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-014"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-001945"
}
} | Identity | atlas.engineer.14192.0.2.24 | Identity Service | Success |
| 12:02:292026-09-15 | Account query accessed 8 recordsEVT-002034{
"event_id": "EVT-002034",
"timestamp": "2026-09-15T12:02:29Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-023",
"username": "atlas.engineer.23",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0011",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.33",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-023",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-023"
},
"attributes": {
"records_accessed": 8,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002034"
}
} | Atlas | atlas.engineer.23192.0.2.33 | /v1/accounts/positions | Success |
Server-side search and pagination. Source payloads are displayed as inert text.