Add shadow security finding inbox
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s
This commit is contained in:
@@ -0,0 +1,21 @@
|
||||
{
|
||||
"host": "HOST-EXAMPLE",
|
||||
"host_role": "workstation",
|
||||
"state": "suspected_infected",
|
||||
"confidence": "high",
|
||||
"signals": [
|
||||
{
|
||||
"source": "hayabusa",
|
||||
"rule_id": "sigma-placeholder-critical",
|
||||
"confidence": "critical"
|
||||
},
|
||||
{
|
||||
"source": "velociraptor",
|
||||
"rule_id": "Windows.Hayabusa.Monitoring",
|
||||
"confidence": "high"
|
||||
}
|
||||
],
|
||||
"recommended_action": "windows_firewall_quarantine",
|
||||
"management_channel_checked": true,
|
||||
"manual_operator_flag": false
|
||||
}
|
||||
Reference in New Issue
Block a user