Trace aavqrgsl

{"results":[{"id":"ob_1162","label":"credential search result 1","score":0.04},{"id":"ob_1665","label":"credential search result 2","score":0.71}]}

{"results":[]}

{"error":{"type":"not_found","message":"credential__get_incident failed transiently"}}

{"error":{"type":"upstream_5xx","message":"credential__get_incident failed transiently"}}

{"item":{"id":"ob_1884","status":"active","seats":3}}

{"item":{"id":"ob_1763","status":"active","seats":2}}

{"item":{"id":"ob_1069","status":"updated","incident_ids":["ob_1884","ob_1763"],"analysis_type":"attack_pattern","include_mitre_mapping":true,"include_recommendations":true}}

{"item":{"id":"ob_1010","status":"updated","hunt_query":"credential_exfiltration OR password_dump OR mimikatz OR lsass","data_sources":["endpoint","network"],"lookback_hours":24,"include_context":true}}

{"created":{"id":"ob_1314","name":"High-Risk Credential Targets","watch_type":"privileged_systems","indicators":["ob_1884","ob_1763"],"description":"Monitoring systems involved in recent credential exfiltration incidents","alert_threshold":"any_match"}}

{"item":{"id":"ob_1847","status":"investigating","alert_id":"ob_1665","priority":"high","notes":"High-score credential exfiltration alert requiring immediate investigation based on analysis results"}}

{"item":{"id":"ob_1742","status":"updated","incident_id":"ob_1884","containment_actions":["isolate_endpoint","revoke_tokens"],"scope":"single_asset","justification":"Automated containment for active credential exfiltration incident with 3 affected seats","approval_required":false}}

{"item":{"id":"ob_1831","status":"updated","case_id":"ob_1069","evidence_types":["log_files","file_artifacts","memory_dumps"],"format":"json","chain_of_custody":true,"encryption_required":true}}

{"item":{"id":"ob_1849","status":"investigating","alert_id":"ob_1162","priority":"medium","notes":"Lower-score credential alert being investigated as part of comprehensive incident response"}}

{"created":{"id":"ob_1642","name":"Secondary Credential Threats","watch_type":"user_accounts","indicators":["ob_1162","ob_1665"],"description":"Monitoring user accounts associated with credential exfiltration alerts for ongoing threat activity","alert_threshold":"multiple_matches"}}

{"item":{"id":"ob_1181","status":"updated","incident_ids":["ob_1884","ob_1763"],"analysis_type":"impact_assessment","include_mitre_mapping":true,"include_recommendations":true}}

{"error":{"type":"permission_denied","message":"credential__hunt_indicators failed transiently"}}

{"error":{"type":"not_found","message":"credential__hunt_indicators failed transiently"}}

{"item":{"id":"ob_1280","status":"updated","incident_id":"ob_1763","containment_actions":["isolate_endpoint","disable_account"],"scope":"single_asset","justification":"Automated containment for second active credential exfiltration incident with 2 affected seats","approval_required":false}}

{"error":{"type":"not_found","message":"credential__hunt_indicators failed transiently"}}

{"item":{"id":"ob_1073","status":"updated","case_id":"ob_1181","evidence_types":["log_files","file_artifacts","memory_dumps","network_captures"],"format":"json","chain_of_custody":true,"encryption_required":true}}

{"item":{"id":"ob_1069","status":"updated","hunt_query":"credential_theft OR password_extraction OR token_theft","data_sources":["endpoint","network"],"lookback_hours":48,"include_context":true}}

{"created":{"id":"ob_1010","name":"Comprehensive Credential Monitoring","watch_type":"credential_stores","indicators":["ob_1884","ob_1763","ob_1162","ob_1665"],"description":"Complete monitoring of all credential-related incidents and alerts for comprehensive threat detection","alert_threshold":"any_match","expiry_days":60}}

{"results":[{"id":"ob_1831","label":"credential search result 1","score":0.77},{"id":"ob_1650","label":"credential search result 2","score":0.94},{"id":"ob_1085","label":"credential search result 3","score":0.88}]}

{"results":[{"id":"ob_1875","label":"credential list result 1","score":0.09},{"id":"ob_1176","label":"credential list result 2","score":0.92}]}