Trace gxn74dp2

{"results":[]}

{"item":{"id":"ob_1652","status":"updated","metric_types":["policy_violations","risk_scores","user_activity"],"time_range":"last_24h","include_trends":true}}

{"item":{"id":"ob_1004","status":"updated","hunt_query":"unusual_access_patterns OR high_risk_behavior","lookback_period":"24h","risk_threshold":70}}

{"results":[{"id":"ob_1305","label":"data list result 1","score":0.98}]}

{"item":{"id":"ob_1867","status":"updated","query":"risk_score:>80 OR anomaly_detected:true","time_range":"last_24h","limit":50}}

{"item":{"id":"ob_1107","status":"active","seats":2}}

{"item":{"id":"ob_1346","status":"updated","scan_scope":["ob_1305"],"scan_type":"targeted","sensitivity_patterns":["ssn","credit_card","email","phone"],"classification_threshold":0.8}}

{"item":{"id":"ob_1656","status":"updated","anomaly_id":"ob_1004","analysis_depth":"detailed","include_user_baseline":true,"include_peer_comparison":true}}

{"item":{"id":"ob_1030","status":"updated","asset_id":"ob_1305","asset_type":"dataset","classification_level":"confidential","sensitivity_labels":["pii"],"justification":"Based on sensitive data scan results showing SSN, credit card, email, and phone patterns detected"}}

{"created":{"id":"ob_1335","title":"High-Risk Access Anomaly Detected","description":"Anomalous access patterns detected for user ob_1305 with high risk score and sensitive data exposure","severity":"high","incident_type":"unauthorized_access","source_event_ids":["ob_1004","ob_1867"],"affected_resources":["ob_1305"]}}

{"item":{"id":"ob_1045","status":"updated","violation_id":"ob_1335","remediation_action":"require_mfa","justification":"High-risk anomalous access detected with sensitive PII exposure requires immediate MFA enforcement","execute_immediately":true,"notify_stakeholders":true},"padding":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"}

{"item":{"id":"ob_1028","status":"updated","user_id":"ob_1305","resource_id":"ob_1305","permission_level":"read","business_justification":"Temporary restricted access pending security review of anomalous behavior","access_type":"temporary","require_mfa":true,"expiration_date":"2024-01-15T23:59:59Z"}}

{"item":{"id":"ob_1505","status":"investigating","violation_id":"ob_1335","assignee_id":"security_team","resolution_notes":"Incident created for high-risk anomaly, MFA enforced, temporary access restrictions applied","notify_stakeholders":true,"remediation_actions":["technical_control","access_revoked"]}}

{"item":{"id":"ob_1590","status":"updated","metric_types":["policy_violations","risk_scores","data_exposure"],"time_range":"last_7d","group_by":["user_role","data_classification"],"include_trends":true}}

{"item":{"id":"ob_1306","status":"active","seats":3}}

{"results":[{"id":"ob_1765","label":"data list result 1","score":0.51},{"id":"ob_1498","label":"data list result 2","score":0.23}]}

{"item":{"id":"ob_1543","status":"active","seats":4}}

{"item":{"id":"ob_1655","status":"updated","anomaly_id":"ob_1498","analysis_depth":"detailed","include_user_baseline":true,"include_peer_comparison":true}}

{"created":{"id":"ob_1678","title":"Multiple High-Risk Policy Violations Under Investigation","description":"Additional high-risk policy violations identified requiring immediate attention based on ongoing security investigation","severity":"high","incident_type":"policy_violation","source_event_ids":["ob_1765","ob_1498"],"affected_resources":["ob_1765","ob_1498"],"containment_actions":["access_monitoring","enhanced_logging"]}}

{"item":{"id":"ob_1319","status":"updated","violation_id":"ob_1765","remediation_action":"notify_manager","justification":"High-risk user profile requires management notification and enhanced monitoring based on investigation findings","execute_immediately":true,"notify_stakeholders":true,"create_ticket":true}}

{"item":{"id":"ob_1836","status":"investigating","violation_id":"ob_1678","assignee_id":"security_team","resolution_notes":"New incident created for multiple high-risk violations, management notifications sent, enhanced monitoring activated","notify_stakeholders":true,"remediation_actions":["technical_control","user_training"]}}

{"item":{"id":"ob_1463","status":"updated","scan_scope":["ob_1765","ob_1498"],"scan_type":"targeted","sensitivity_patterns":["ssn","credit_card","pii","phi"],"classification_threshold":0.8,"notify_on_completion":true}}

{"item":{"id":"ob_1317","status":"updated","asset_id":"ob_1765","asset_type":"dataset","classification_level":"restricted","sensitivity_labels":["pii","phi"],"justification":"High-risk violation detected with sensitive data patterns requiring restricted classification and enhanced controls","auto_apply_inheritance":true}}

{"item":{"id":"ob_1012","status":"updated","user_id":"ob_1498","resource_id":"ob_1498","permission_level":"read","business_justification":"Temporary restricted access pending completion of security investigation and anomaly analysis","access_type":"temporary","require_mfa":true,"expiration_date":"2024-01-20T23:59:59Z"}}