{"profiles":[{"schema_version":"0.1","run":{"profile_id":"019dbaa3-3630-7fab-ad46-147ea069ede1","run_id":"24839438820","repository":"jadoonf/npm-analysis-feed","github_web_origin":"https://github.com","workflow":"Garnet: Exact Version Matrix","job":"profile-version","runner_os":"Linux","runner_arch":"X64","actor":"jadoonf","start_time":"2026-04-23T13:59:11.645899Z","end_time":"2026-04-23T13:59:11.645899Z","commit_sha":"dd4e0efabfc88306dc8151aa9b0176121308ac17","ref":"refs/heads/main","agent_id":"99a40e46-89f9-4202-870b-0e999302ccdf"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"104.16.1.34","result":"attention","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"pwsh","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","pwsh"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"python3.13","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","dash","bash","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"140.82.112.24","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.112.24","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"github.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"140.82.112.3","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"api.github.com","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"140.82.112.6","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"glb-2a3c35-public-internal.githubapp.com","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"hosted-compute-request-orchestrator-prod-iad-01","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"140.82.113.24","process":"provjobd1735206114","ancestry":["systemd","hosted-compute-agent","sudo","provjobd1735206114"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.24","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"169.254.169.254","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir"],"protocol":"TCP","remote_address":"169.254.169.254","result":"attention"},{"domain":"release-assets.githubusercontent.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"185.199.110.133","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Fastly, Inc.","org":"GitHub, Inc","asname":"FASTLY"}},{"domain":"dc.applicationinsights.azure.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"dc.applicationinsights.microsoft.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"dc.services.visualstudio.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"dc.trafficmanager.net","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"gig-ai-g-prod-westus2-2-app-v4-tag.westus2","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"gig-ai-prod-westus2-global.trafficmanager","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"global.in.ai.monitor.azure.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"global.in.ai.privatelink.monitor.azure.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"westus2-global.in.applicationinsights.azure","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"azcliprod.blob.core.windows.net","process":"python3.13","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","dash","bash","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"57.150.61.65","result":"pass","remote_geo_info":{"latitude":37.783,"longitude":-122.417,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Microsoft Corporation","org":"Microsoft Azure Cloud - Storage (westus)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"blob.sjc20prdstr45a.store.core.windows.net","process":"python3.13","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","dash","bash","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"57.150.61.65","result":"pass","remote_geo_info":{"latitude":37.783,"longitude":-122.417,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Microsoft Corporation","org":"Microsoft Azure Cloud - Storage (westus)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"audit.checkmarx.cx","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"94.154.172.43","result":"attention","remote_geo_info":{"latitude":-4.62113,"longitude":55.4522,"continent":"Africa","continent_code":"AF","country":"Seychelles","country_code":"SC","region":"16","region_name":"La Rivière Anglaise","city":"Victoria","isp":"IP Vendetta Inc.","org":"IP Vendetta Inc","asname":"ipvendettainc"}}],"total_domains":22,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"PASS","details":"No domains matched known bad lists","evidence":[]}],"telemetry":{"total_events":13,"total_connections":13,"unique_domains":19},"score":{"source":"jibril","severity":75,"severity_level":"high","confidence":1},"workload_identity":null,"filesystem":null,"execution":null}],"count":1,"profile":{"schema_version":"0.1","run":{"profile_id":"019dbaa3-3630-7fab-ad46-147ea069ede1","run_id":"24839438820","repository":"jadoonf/npm-analysis-feed","github_web_origin":"https://github.com","workflow":"Garnet: Exact Version Matrix","job":"profile-version","runner_os":"Linux","runner_arch":"X64","actor":"jadoonf","start_time":"2026-04-23T13:59:11.645899Z","end_time":"2026-04-23T13:59:11.645899Z","commit_sha":"dd4e0efabfc88306dc8151aa9b0176121308ac17","ref":"refs/heads/main","agent_id":"99a40e46-89f9-4202-870b-0e999302ccdf"},"egress":{"unique_domains":[{"domain":"registry.npmjs.org","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"104.16.1.34","result":"attention","remote_geo_info":{"latitude":43.6532,"longitude":-79.3832,"continent":"North America","continent_code":"NA","country":"Canada","country_code":"CA","region":"ON","region_name":"Ontario","city":"Toronto","isp":"Cloudflare, Inc.","org":"Cloudflare, Inc.","asname":"CLOUDFLARENET"}},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"pwsh","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","pwsh"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"python3.13","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","dash","bash","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"localhost","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","interpreter_shell_spawn","tracking_domain_access"],"protocol":"UDP","remote_address":"127.0.0.53","result":"attention"},{"domain":"140.82.112.24","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.112.24","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"github.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"140.82.112.3","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"api.github.com","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"140.82.112.6","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"glb-2a3c35-public-internal.githubapp.com","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"hosted-compute-request-orchestrator-prod-iad-01","process":"hosted-compute-agent","ancestry":["systemd","hosted-compute-agent"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.23","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"140.82.113.24","process":"provjobd1735206114","ancestry":["systemd","hosted-compute-agent","sudo","provjobd1735206114"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"140.82.113.24","result":"pass","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"GitHub, Inc.","org":"GitHub, Inc.","asname":"GITHUB"}},{"domain":"169.254.169.254","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir"],"protocol":"TCP","remote_address":"169.254.169.254","result":"attention"},{"domain":"release-assets.githubusercontent.com","process":"node","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"185.199.110.133","result":"attention","remote_geo_info":{"latitude":37.7823,"longitude":-122.391,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Fastly, Inc.","org":"GitHub, Inc","asname":"FASTLY"}},{"domain":"dc.applicationinsights.azure.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"dc.applicationinsights.microsoft.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"dc.services.visualstudio.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"dc.trafficmanager.net","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"gig-ai-g-prod-westus2-2-app-v4-tag.westus2","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"gig-ai-prod-westus2-global.trafficmanager","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"global.in.ai.monitor.azure.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"global.in.ai.privatelink.monitor.azure.com","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"westus2-global.in.applicationinsights.azure","process":"python3.13","ancestry":["systemd","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow","tracking_domain_access"],"protocol":"TCP","remote_address":"20.9.155.153","result":"attention","remote_geo_info":{"latitude":47.233,"longitude":-119.852,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"WA","region_name":"Washington","city":"Quincy","isp":"Microsoft Corporation","org":"Microsoft Azure Monitor (westus2)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"azcliprod.blob.core.windows.net","process":"python3.13","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","dash","bash","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"57.150.61.65","result":"pass","remote_geo_info":{"latitude":37.783,"longitude":-122.417,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Microsoft Corporation","org":"Microsoft Azure Cloud - Storage (westus)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"blob.sjc20prdstr45a.store.core.windows.net","process":"python3.13","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun","dash","bash","python3.13"],"status":"ok","reason":null,"event_ids":[],"detections":["flow"],"protocol":"TCP","remote_address":"57.150.61.65","result":"pass","remote_geo_info":{"latitude":37.783,"longitude":-122.417,"continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"CA","region_name":"California","city":"San Francisco","isp":"Microsoft Corporation","org":"Microsoft Azure Cloud - Storage (westus)","asname":"MICROSOFT-CORP-MSN-AS-BLOCK"}},{"domain":"audit.checkmarx.cx","process":"bun","ancestry":["systemd","hosted-compute-agent","Runner.Listener","Runner.Worker","bash","node","dash","node","bun"],"status":"ok","reason":null,"event_ids":[],"detections":["exec_from_unusual_dir","flow"],"protocol":"TCP","remote_address":"94.154.172.43","result":"attention","remote_geo_info":{"latitude":-4.62113,"longitude":55.4522,"continent":"Africa","continent_code":"AF","country":"Seychelles","country_code":"SC","region":"16","region_name":"La Rivière Anglaise","city":"Victoria","isp":"IP Vendetta Inc.","org":"IP Vendetta Inc","asname":"ipvendettainc"}}],"total_domains":22,"flagged_domains":0},"assertions":[{"id":"no_bad_egress_domain","result":"PASS","details":"No domains matched known bad lists","evidence":[]}],"telemetry":{"total_events":13,"total_connections":13,"unique_domains":19},"score":{"source":"jibril","severity":75,"severity_level":"high","confidence":1},"workload_identity":null,"filesystem":null,"execution":null}}