incident.json

{
  "assignees" : [ "string" ],
  "categories" : [ "Attrition" ],
  "confidence" : "High",
  "description" : "string",
  "detection_sources" : [ "string" ],
  "discovery_method" : "Agent Disclosure",
  "external_ids" : [ "string" ],
  "external_references" : [ {
    "description" : "string",
    "external_id" : "string",
    "hashes" : [ "string" ],
    "source_name" : "string",
    "url" : "string"
  } ],
  "id" : "string",
  "incident_time" : {
    "closed" : "2016-01-01T01:01:01.000Z",
    "discovered" : "2016-01-01T01:01:01.000Z",
    "opened" : "2016-01-01T01:01:01.000Z",
    "rejected" : "2016-01-01T01:01:01.000Z",
    "remediated" : "2016-01-01T01:01:01.000Z",
    "reported" : "2016-01-01T01:01:01.000Z"
  },
  "intended_effect" : "Account Takeover",
  "language" : "string",
  "meta" : {
    "keyword" : "string"
  },
  "promotion_method" : "Automated",
  "revision" : 10,
  "schema_version" : "1.3.23",
  "scores" : {
    "asset" : 10.0
  },
  "severity" : "Critical",
  "short_description" : "string",
  "source" : "string",
  "source_uri" : "string",
  "status" : "Closed",
  "tactics" : [ "string" ],
  "techniques" : [ "string" ],
  "timestamp" : "2016-01-01T01:01:01.000Z",
  "title" : "string",
  "tlp" : "green",
  "type" : "incident"
}