cyberguard-frontend-iota.vercel.app

{
  "type": "object",
  "properties": {
    "user_id": {
      "type": "string",
      "minLength": 2,
      "maxLength": 64,
      "pattern": "^[A-Za-z0-9._:-]+$",
      "description": "Target user identifier, e.g. \"USR-402\"."
    },
    "threat_type": {
      "type": "string",
      "enum": [
        "Normal",
        "Brute Force",
        "Credential Stuffing",
        "Account Takeover",
        "Account Takeover (ATO)",
        "Password Spraying",
        "Session Hijacking",
        "Anomalous Authentication",
        "Suspicious Authentication Activity"
      ],
      "description": "Threat classification for the incident."
    },
    "severity": {
      "type": "string",
      "enum": [
        "LOW",
        "MEDIUM",
        "HIGH",
        "CRITICAL"
      ],
      "description": "Assessed severity level."
    },
    "recommendations": {
      "type": "array",
      "minItems": 1,
      "maxItems": 25,
      "items": {
        "type": "string",
        "minLength": 3,
        "maxLength": 500
      },
      "description": "Non-destructive, human-authorized containment / hardening steps."
    }
  },
  "required": [
    "user_id",
    "threat_type",
    "severity",
    "recommendations"
  ],
  "additionalProperties": false
}