List Security Event

{
  "query": {
    "time": {
      "_type": "GreaterThan",
      "value": "2026-01-01T00:00:00.000Z"
    }
  },
  "select": {
    "projectId": true,
    "primaryEntityId": true,
    "primaryEntityType": true
  },
  "sort": {
    "time": "DESC"
  },
  "groupBy": {
    "projectId": true
  }
}

{
  "data": [
    {
      "projectId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
      "primaryEntityId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
      "primaryEntityType": "Example text value",
      "time": "example_value",
      "eventUid": "Example text value",
      "categoryUid": 42,
      "categoryName": "Example text value",
      "classUid": 42,
      "className": "Example text value",
      "activityName": "Example text value",
      "severityId": 42,
      "severityName": "Example text value",
      "statusName": "Example text value",
      "message": "Example text value",
      "vendorName": "Example text value",
      "productName": "Example text value",
      "ruleId": "Example text value",
      "ruleName": "Example text value",
      "mitreTactics": [
        "item1",
        "item2",
        "item3"
      ],
      "mitreTechniques": [
        "item1",
        "item2",
        "item3"
      ],
      "principalUser": "Example text value",
      "principalHost": "Example text value",
      "principalIp": "Example text value",
      "principalProcess": "Example text value",
      "processName": "Example text value",
      "processPath": "Example text value",
      "processCommandLine": "Example text value",
      "parentProcessName": "Example text value",
      "parentProcessPath": "Example text value",
      "parentProcessCommandLine": "Example text value",
      "targetUser": "Example text value",
      "targetHost": "Example text value",
      "targetIp": "Example text value",
      "targetPort": 42,
      "targetResource": "Example text value",
      "observables": [
        "item1",
        "item2",
        "item3"
      ],
      "traceId": "Example text value",
      "spanId": "Example text value",
      "sessionId": "Example text value",
      "requestOutcome": "Example text value",
      "attributes": "example_value",
      "attributeKeys": [
        "item1",
        "item2",
        "item3"
      ]
    }
  ]
}