Files
AWatch-rus/configs/security/security-finding.example.json
T
igor04091968 757fd3125d
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s
Add shadow security finding inbox
2026-07-01 06:12:08 +03:00

22 lines
628 B
JSON

{
"ts": "2026-06-25T10:00:00Z",
"host": "HOST-EXAMPLE",
"user": "user-example",
"ip": "10.10.20.42",
"department": "demo",
"state": "suspected_infected",
"severity": "critical",
"confidence": "high",
"score": 95,
"source": "hayabusa",
"rule_id": "demo-sigma-critical",
"rule_title": "Demo high-confidence suspicious workstation",
"summary": "Demo finding for Security Finding Inbox validation.",
"recommended_action": "windows_firewall_quarantine",
"management_channel_checked": true,
"evidence_ref": "demo://hayabusa/HOST-EXAMPLE/demo-sigma-critical",
"metadata": {
"sample": "true"
}
}