{"playbook_version":2,"checkedArtifacts":["ip-203.0.113.45","ip-192.168.1.25","domain-http://malic","artifact_1","artifact_2"],"selectedActions":["isolate_host","block_ip","block_hash","reset_credentials","collect_forensics","escalate"],"verdict":"true_positive","conclusion":"INVESTIGATION EXECUTIVE SUMMARY\n===============================\nDATE: 3/4/2026, 2:45:49 AM\nALERT: Spear Phishing Email Detected [OP: Operation Desert Mirage]\nVERDICT: TRUE POSITIVE\n\nKEY FINDINGS (5)\n----------------\n- [IP] 203.0.113.45\n- [IP] 192.168.1.25\n- [DOMAIN] http://maliciousdomain.com/securelogin\n- [EMAIL] finance.partner@maliciousdomain.com\n- [HASH] d41d8cd98f00b204e9800998ecf8427e\n\nCONTAINMENT PROTOCOLS DEPLOYED (0)\n------------------------------\n(No active containment measures)\n\nANALYSIS\n--------\nInvestigation concluded based on verified telemetry and playbook protocols. All identified threats have been neutralized or escalated as per standard operating procedure.\n\nSIGNED: Amadou MANE","submitted_at":"2026-03-04T01:46:47.206Z"}