{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"https://ravenstrike.local/schemas/triage_brief.schema.json","type":"object","additionalProperties":false,"properties":{"alert":{"type":"string"},"time":{"type":"string"},"asset":{"type":"string"},"priority":{"type":"string","enum":["P1","P2","P3","P4"]},"verdict":{"type":"string","enum":["TP","FP","UNKNOWN"]},"plain_english_summary":{"type":"string"},"mitre_technique":{"type":"string"},"evidence_checklist":{"type":"array","items":{"type":"string"},"minItems":3},"if_false_positive":{"type":"string"},"if_true_positive":{"type":"string"},"pivot_queries":{"type":"array","items":{"type":"string"},"minItems":2,"maxItems":3}},"required":["alert","time","asset","priority","verdict","plain_english_summary","mitre_technique","evidence_checklist","if_false_positive","if_true_positive","pivot_queries"]}