Trace u9nea02z

{"results":[{"id":"ob_1276","label":"credential search result 1","score":0.65}]}

{"item":{"id":"ob_1420","status":"active","seats":4}}

{"item":{"id":"ob_1420","status":"updated","incident_ids":["ob_1420"],"analysis_type":"attack_pattern"}}

{"item":{"id":"ob_1733","status":"investigating","alert_id":"ob_1276","priority":"high","notes":"Alert triaged based on attack pattern analysis of incident ob_1420. Requires immediate investigation due to active credential exfiltration activity."}}

{"item":{"id":"ob_1619","status":"updated","hunt_query":"event_type:credential_access OR process_name:*mimikatz* OR command_line:*sekurlsa* OR network_connection:(destination_port:445 AND protocol:SMB) OR file_access:*SAM* OR registry_access:*LSA*","data_sources":["endpoint","network","identity"],"lookback_hours":24,"include_context":true}}

{"results":[]}