{"playbook_version":2,"artifacts":[{"id":"artifact_1","type":"hash","value":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","is_critical":true,"osint_result":{"source":"VirusTotal","verdict":"malicious","details":"Detected by 57 AV engines"}},{"id":"artifact_2","type":"command","value":"C:\\Windows\\System32\\cmd.exe /c malicious.exe","is_critical":true,"osint_result":{"source":"Hybrid Analysis","verdict":"malicious","details":"Command used to execute known malware"}}],"expected_actions":["block_hash","isolate_host","collect_forensics"],"expected_verdict":"true_positive","expected_category":"malware","analysis_notes":"The file hash is known to be malicious, confirming the presence of malware."}