{"playbook_version":2,"checkedArtifacts":["ip-203.0.113.50","ip-192.168.1.45","hash-d41d8cd9","artifact_4","artifact_5"],"selectedActions":["isolate_host","block_ip","block_hash","collect_forensics","escalate"],"verdict":"true_positive","conclusion":"Subject is True Positive. The file hash is identified as Malicious. Senders IP address has been identified and is associated with malicious behavior and common phishing campaigns. Host has been quarantined. Senders IP address has been blacklisted in firewall. File hash has been blocked on all hosts. Escalated issue.","submitted_at":"2026-02-11T17:33:57.651Z"}