{"playbook_version":2,"checkedArtifacts":["artifact_1","artifact_2"],"selectedActions":["block_ip"],"verdict":"true_positive","conclusion":"Dest ip: 192.168.1.50\nSource ip: 203.0.113.55\nhostname: server01\ndomain : maliciousc2.com\n\nThe ip and domain belong to C2C server and they are blocked. \n\nIt is important to analyse deeper to verify, if the connection is successful.\n","submitted_at":"2026-01-16T13:40:01.913Z"}