mirror of https://github.com/zulip/zulip.git
49 lines
962 B
JSON
49 lines
962 B
JSON
{
|
|
"Token": "ew5n8gqtb82m4uegrttarn2zu",
|
|
"Intro": "A Remote Web Image Canarytoken has been triggered over web-image by the source IP 1.1.1.1.",
|
|
"Description": "Remote Web Image",
|
|
"Triggered": 37,
|
|
"AdditionalDetails": [
|
|
[
|
|
"Accept",
|
|
"image/webp,*/*"
|
|
],
|
|
[
|
|
"Accept-Encoding",
|
|
"gzip, deflate"
|
|
],
|
|
[
|
|
"Accept-Language",
|
|
"en-US,en;q=0.5"
|
|
],
|
|
[
|
|
"Background Context",
|
|
"You have had 12 incidents from 1.1.1.1 previously."
|
|
],
|
|
[
|
|
"Cache-Control",
|
|
"max-age=0"
|
|
],
|
|
[
|
|
"Connection",
|
|
"keep-alive"
|
|
],
|
|
[
|
|
"Dnt",
|
|
"1"
|
|
],
|
|
[
|
|
"Dst Port",
|
|
80
|
|
],
|
|
[
|
|
"User-Agent",
|
|
"Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0"
|
|
]
|
|
],
|
|
"Timestamp": "2020-07-20 16:33:12 (UTC)",
|
|
"Reminder": "test image",
|
|
"IncidentHash": "533395067f6d655cd19384bc6991cc0f",
|
|
"AlertType": "CanarytokenIncident"
|
|
}
|