{"playbook_version":2,"checkedArtifacts":["artifact_1","artifact_2"],"selectedActions":["isolate_host","reset_credentials","block_ip","block_hash"],"verdict":"true_positive","conclusion":"This alert is True Positive\nDetection POWERSHELL-0012 correctly identified malicious activity, suspicious PowerShell execution and fileless malware pattern. Actions are warranted","submitted_at":"2025-12-29T21:58:29.581Z"}