{"timestamp":"2023-10-21T14:32:00Z","event_id":"HRW-2023-1059","user":"john.doe@organization.org","internal_ip":"192.168.4.23","external_ip":"203.0.113.45","malware_hash":"e99a18c428cb38d5f260853678922e03","filename":"spyware_report.docx","action":"Data Exfiltration","description":"The spyware was used to gather sensitive information on human rights activities, compromising the privacy of involved individuals.","indicators":[{"type":"ip","value":"203.0.113.45","description":"External command and control server associated with attack"},{"type":"hash","value":"e99a18c428cb38d5f260853678922e03","description":"Malware sample used in the operation"},{"type":"filename","value":"spyware_report.docx","description":"File containing exfiltrated data"},{"type":"username","value":"john.doe@organization.org","description":"Compromised user account"}]}