{"playbook_version":2,"checkedArtifacts":["ip-192.168.1.101","ip-10.0.0.5","hash-5f4dcc3b","artifact_3","artifact_5"],"selectedActions":["isolate_host","block_ip","block_hash","collect_forensics","escalate"],"verdict":"true_positive","conclusion":"INVESTIGATION EXECUTIVE SUMMARY\n================================\nDATE: February 21, 2026, 11:15:46 PM\nALERT: Lateral Movement to OT Network [Operation: Iron Grid]\nVERDICT: True Positive\n\nKEY FINDINGS\n----------------\n\n    Source IP: 192.168.1.101\n    Destination IP: 10.0.0.5\n    Malicious Hash: 5f4dcc3b5aa765d61d8327deb882cf99\n    Compromised Username: jdoe\n    External IP: 203.0.113.55\n\nCONTAINMENT MEASURES IMPLEMENTED\n---------------------------------\n\n    Host Isolation\n    IP/Domain Blocking\n    File Hash Blocking\n    Forensic Data Collection\n    Escalation to Tier 3\n\nANALYSIS\n---------\nThe investigation has been concluded based on corroborated telemetry and adherence to playbook protocols. All identified threats have been effectively neutralized or escalated following standard operating procedures.\n\nSIGNED: Amadou MANE","submitted_at":"2026-02-21T22:19:53.145Z"}