[
  {
    "ts": "03/19/2026 01:55:04",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "2904",
      "level": 7,
      "desc": "Dpkg (Debian Package) half configured."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 01:55:06",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "2904",
      "level": 7,
      "desc": "Dpkg (Debian Package) half configured."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 01:55:14",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "2902",
      "level": 7,
      "desc": "New dpkg (Debian Package) installed."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 01:55:14",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "2904",
      "level": 7,
      "desc": "Dpkg (Debian Package) half configured."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 01:55:14",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "2902",
      "level": 7,
      "desc": "New dpkg (Debian Package) installed."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 01:55:14",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "2904",
      "level": 7,
      "desc": "Dpkg (Debian Package) half configured."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 01:55:16",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "2902",
      "level": 7,
      "desc": "New dpkg (Debian Package) installed."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 02:02:52",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "23505",
      "level": 10,
      "desc": "CVE-2024-5138 affects snapd"
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 04:49:57",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "550",
      "level": 7,
      "desc": "Integrity checksum changed."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 04:49:58",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "550",
      "level": 7,
      "desc": "Integrity checksum changed."
    },
    "has_srcip": false
  },
  {
    "ts": "03/19/2026 04:49:59",
    "agent": "[REDACTED_HOST]",
    "rule": {
      "id": "550",
      "level": 7,
      "desc": "Integrity checksum changed."
    },
    "has_srcip": false
  }
]