{"allTime":{"count":63,"items":[{"ruleId":"CMD_INJECTION","hitCount":4195},{"ruleId":"SSRF_ADVANCED","hitCount":1132},{"ruleId":"CROSS_TOOL_ACCESS","hitCount":476},{"ruleId":"SSRF_PATTERN","hitCount":433},{"ruleId":"CRYPTO_THEFT","hitCount":424},{"ruleId":"A2A_CROSS_AGENT_INJECT","hitCount":388},{"ruleId":"A2A_DATA_LEAK","hitCount":377},{"ruleId":"NET_SUSPICIOUS","hitCount":324},{"ruleId":"A2A_TASK_HIJACK","hitCount":285},{"ruleId":"SHELL_EXEC","hitCount":273},{"ruleId":"THREAT_CHAIN_SYSTEM_COMPROMISE","hitCount":268},{"ruleId":"REVERSE_SHELL","hitCount":214},{"ruleId":"THREAT_CHAIN_DATA_EXFILTRATION","hitCount":190},{"ruleId":"RESOURCE_ABUSE","hitCount":184},{"ruleId":"THREAT_CHAIN_PERSISTENCE_WITH_THEFT","hitCount":168},{"ruleId":"INTENT_SECURITY_DISABLE_INTENT","hitCount":145},{"ruleId":"PRIVILEGE_ESC","hitCount":144},{"ruleId":"A2A_CAPABILITY_ABUSE","hitCount":96},{"ruleId":"MCP_SCHEMA_POISON","hitCount":96},{"ruleId":"THREAT_CHAIN_AGENT_MANIPULATION","hitCount":77},{"ruleId":"AGENT_MEMORY_MOD","hitCount":64},{"ruleId":"CRED_ENV_READ","hitCount":63},{"ruleId":"ENV_RECON","hitCount":58},{"ruleId":"INSECURE_CRYPTO","hitCount":41},{"ruleId":"XSS_INJECTION","hitCount":41},{"ruleId":"TOOL_SHADOW","hitCount":35},{"ruleId":"INDIRECT_PROMPT_INJECT","hitCount":31},{"ruleId":"THREAT_CHAIN_COMMAND_AND_CONTROL","hitCount":29},{"ruleId":"TIME_BOMB","hitCount":29},{"ruleId":"FS_WRITE","hitCount":28},{"ruleId":"STRUCT_READ_EXFIL","hitCount":27},{"ruleId":"THREAT_CHAIN_CREDENTIAL_OBFUSCATION","hitCount":27},{"ruleId":"PATH_TRAVERSAL","hitCount":27},{"ruleId":"TOKEN_STEAL","hitCount":26},{"ruleId":"THREAT_CHAIN_SESSION_HIJACKING","hitCount":25},{"ruleId":"TOOL_POISONING","hitCount":25},{"ruleId":"DATA_EXFIL","hitCount":23},{"ruleId":"SUPPLY_CHAIN","hitCount":22},{"ruleId":"PERSISTENCE","hitCount":20},{"ruleId":"URL_SUSPICIOUS","hitCount":19},{"ruleId":"THREAT_CHAIN_DROPPER_BEHAVIOR","hitCount":18},{"ruleId":"THREAT_CHAIN_STAGED_EXFILTRATION","hitCount":15},{"ruleId":"URL_RAW_IP","hitCount":14},{"ruleId":"INVISIBLE_UNICODE_RAW","hitCount":13},{"ruleId":"ENV_INJECTION","hitCount":12},{"ruleId":"EXFIL_COVERT","hitCount":10},{"ruleId":"INTENT_MALWARE_INSTALL_INTENT","hitCount":8},{"ruleId":"PROMPT_INJECT","hitCount":7},{"ruleId":"REGEX_DOS","hitCount":7},{"ruleId":"CONTAINER_ESCAPE","hitCount":7},{"ruleId":"DNS_REBIND","hitCount":6},{"ruleId":"INTENT_DESTRUCTIVE_INTENT","hitCount":6},{"ruleId":"INVISIBLE_TEXT","hitCount":5},{"ruleId":"A2A_AGENT_IMPERSONATION","hitCount":5},{"ruleId":"INTENT_READ_AND_EXFILTRATE_INTENT","hitCount":4},{"ruleId":"JWT_VULN","hitCount":3},{"ruleId":"OBFUSCATION","hitCount":2},{"ruleId":"SQL_INJECTION","hitCount":1},{"ruleId":"INTENT_CREDENTIAL_FORWARDING_INTENT","hitCount":1},{"ruleId":"BASE64_HIDDEN_HIDDEN_CODE_EXECUTION","hitCount":1},{"ruleId":"THREAT_CHAIN_OBFUSCATED_EXECUTION","hitCount":1},{"ruleId":"INTENT_EXPLICIT_EXFILTRATION","hitCount":1},{"ruleId":"BASE64_HIDDEN_HIDDEN_DESTRUCTIVE_COMMAND","hitCount":1}]},"today":{"count":0,"items":[]}}