Files
AWatch-rus/configs/containment-finding.example.json
T
igor04091968 757fd3125d
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s
Add shadow security finding inbox
2026-07-01 06:12:08 +03:00

22 lines
500 B
JSON

{
"host": "HOST-EXAMPLE",
"host_role": "workstation",
"state": "suspected_infected",
"confidence": "high",
"signals": [
{
"source": "hayabusa",
"rule_id": "sigma-placeholder-critical",
"confidence": "critical"
},
{
"source": "velociraptor",
"rule_id": "Windows.Hayabusa.Monitoring",
"confidence": "high"
}
],
"recommended_action": "windows_firewall_quarantine",
"management_channel_checked": true,
"manual_operator_flag": false
}