{"timestamp":"2023-10-12T14:32:00Z","event_type":"software_installation","host_ip":"192.168.5.14","username":"jdoe","software_name":"AccountingPro Update","file_hash":"5f4dcc3b5aa765d61d8327deb882cf99","file_path":"C:\\Program Files\\AccountingPro\\update.exe","attacker_ip":"203.0.113.45","process_id":5678,"criticality":"medium","description":"Installation of suspicious software update detected on host 192.168.5.14 by user jdoe. The software was downloaded from a malicious source associated with RTM Group."}