{"playbook_version":2,"checkedArtifacts":["artifact_1","artifact_2","artifact_3"],"selectedActions":["block_ip","block_hash","reset_credentials","collect_forensics","isolate_host"],"verdict":"true_positive","conclusion":"Email abc123@example.com was reported Suspicious with Unusual email activity detected.\nIP 203.0.113.45 was reported as Malicious the IP is associated with known phishing campaigns.\nHash 3a7bd3e2360f1edb0f3b4e5c7b6e9d5a was reported Malicious there was Malware detected in attachment.\nContainment protocol consist of isolating host, block IP/Domain, block file hash, reset credentials, and collect forensics.\nVerdict is True positive","submitted_at":"2026-01-17T03:11:31.821Z"}