{"allTime":{"count":62,"items":[{"ruleId":"CMD_INJECTION","hitCount":3088},{"ruleId":"SSRF_ADVANCED","hitCount":925},{"ruleId":"CROSS_TOOL_ACCESS","hitCount":400},{"ruleId":"A2A_CROSS_AGENT_INJECT","hitCount":305},{"ruleId":"A2A_DATA_LEAK","hitCount":300},{"ruleId":"CRYPTO_THEFT","hitCount":280},{"ruleId":"THREAT_CHAIN_SYSTEM_COMPROMISE","hitCount":246},{"ruleId":"A2A_TASK_HIJACK","hitCount":219},{"ruleId":"REVERSE_SHELL","hitCount":214},{"ruleId":"SHELL_EXEC","hitCount":214},{"ruleId":"SSRF_PATTERN","hitCount":155},{"ruleId":"PRIVILEGE_ESC","hitCount":144},{"ruleId":"THREAT_CHAIN_DATA_EXFILTRATION","hitCount":138},{"ruleId":"INTENT_SECURITY_DISABLE_INTENT","hitCount":133},{"ruleId":"THREAT_CHAIN_PERSISTENCE_WITH_THEFT","hitCount":109},{"ruleId":"RESOURCE_ABUSE","hitCount":81},{"ruleId":"CRED_ENV_READ","hitCount":59},{"ruleId":"AGENT_MEMORY_MOD","hitCount":55},{"ruleId":"ENV_RECON","hitCount":48},{"ruleId":"THREAT_CHAIN_AGENT_MANIPULATION","hitCount":41},{"ruleId":"XSS_INJECTION","hitCount":37},{"ruleId":"NET_SUSPICIOUS","hitCount":33},{"ruleId":"INDIRECT_PROMPT_INJECT","hitCount":30},{"ruleId":"A2A_CAPABILITY_ABUSE","hitCount":29},{"ruleId":"THREAT_CHAIN_COMMAND_AND_CONTROL","hitCount":28},{"ruleId":"TOOL_SHADOW","hitCount":28},{"ruleId":"INSECURE_CRYPTO","hitCount":28},{"ruleId":"FS_WRITE","hitCount":28},{"ruleId":"STRUCT_READ_EXFIL","hitCount":27},{"ruleId":"THREAT_CHAIN_CREDENTIAL_OBFUSCATION","hitCount":25},{"ruleId":"THREAT_CHAIN_SESSION_HIJACKING","hitCount":25},{"ruleId":"TIME_BOMB","hitCount":25},{"ruleId":"TOOL_POISONING","hitCount":23},{"ruleId":"DATA_EXFIL","hitCount":23},{"ruleId":"MCP_SCHEMA_POISON","hitCount":23},{"ruleId":"TOKEN_STEAL","hitCount":22},{"ruleId":"PERSISTENCE","hitCount":20},{"ruleId":"URL_SUSPICIOUS","hitCount":19},{"ruleId":"SUPPLY_CHAIN","hitCount":19},{"ruleId":"THREAT_CHAIN_DROPPER_BEHAVIOR","hitCount":17},{"ruleId":"PATH_TRAVERSAL","hitCount":15},{"ruleId":"URL_RAW_IP","hitCount":14},{"ruleId":"THREAT_CHAIN_STAGED_EXFILTRATION","hitCount":14},{"ruleId":"ENV_INJECTION","hitCount":12},{"ruleId":"INVISIBLE_UNICODE_RAW","hitCount":12},{"ruleId":"PROMPT_INJECT","hitCount":7},{"ruleId":"INTENT_MALWARE_INSTALL_INTENT","hitCount":7},{"ruleId":"REGEX_DOS","hitCount":7},{"ruleId":"DNS_REBIND","hitCount":6},{"ruleId":"EXFIL_COVERT","hitCount":5},{"ruleId":"INVISIBLE_TEXT","hitCount":5},{"ruleId":"A2A_AGENT_IMPERSONATION","hitCount":4},{"ruleId":"INTENT_READ_AND_EXFILTRATE_INTENT","hitCount":4},{"ruleId":"CONTAINER_ESCAPE","hitCount":3},{"ruleId":"INTENT_DESTRUCTIVE_INTENT","hitCount":2},{"ruleId":"OBFUSCATION","hitCount":2},{"ruleId":"INTENT_CREDENTIAL_FORWARDING_INTENT","hitCount":1},{"ruleId":"BASE64_HIDDEN_HIDDEN_DESTRUCTIVE_COMMAND","hitCount":1},{"ruleId":"SQL_INJECTION","hitCount":1},{"ruleId":"BASE64_HIDDEN_HIDDEN_CODE_EXECUTION","hitCount":1},{"ruleId":"INTENT_EXPLICIT_EXFILTRATION","hitCount":1},{"ruleId":"THREAT_CHAIN_OBFUSCATED_EXECUTION","hitCount":1}]},"today":{"count":0,"items":[]}}