Mappings: Zoom - Meeting Risk Alert

Input Requirements

Input	Value
Vendor	Zoom
Product	Zoom
Log Format	JSON
Event ID Regex Pattern	`meeting.risk_alert`

Record Output

Output	Value
Vendor	Zoom
Product	Zoom
Record Type	Audit

Fields Mapped

Cloud SIEM Schema Field	Original Record Key	Notes
action	event
resource	payload.object.topic
targetUser_email	payload.object.email
targetUser_userId	payload.object.id
targetUser_username	payload.object.email
user_email	payload.operator
user_userId	payload.operator_id
user_username	payload.operator