Security events

{
  "event_id": "EVT-000070",
  "timestamp": "2026-09-15T08:00:00Z",
  "source": "identity",
  "event_type": "authentication",
  "action": "login",
  "outcome": "success",
  "actor": {
    "user_id": "USR-024",
    "username": "atlas.engineer.24",
    "role": "engineer"
  },
  "target": {
    "resource_id": null,
    "resource_type": "service",
    "service": "Identity Service",
    "endpoint": null
  },
  "network": {
    "source_ip": "192.0.2.34",
    "destination_ip": "198.51.100.10",
    "user_agent": "AtlasSynthetic/1.0",
    "location": "synthetic_region_a"
  },
  "device": {
    "device_id": "DEV-024",
    "trusted": true,
    "posture": "compliant"
  },
  "session": {
    "session_id": "SES-DEV-024"
  },
  "attributes": {
    "source_previously_seen": true,
    "device_previously_seen": true,
    "location_previously_seen": true
  },
  "raw": {
    "synthetic": true,
    "adapter": "identity",
    "source_event_id": "EVT-000070"
  }
}