{
  "ReverseDNS": "attacker.local",
  "CanaryName": "foo-bar",
  "Description": "Consolidated Network Port Scan",
  "CanaryPort": "443",
  "Timestamp": "2020-07-20 16:18:40 (UTC)",
  "CanaryIP": "1.1.1.1",
  "AlertType": "CanaryIncident",
  "Intro": "A portscan has been done on several of your canaries by the host 1.1.1.1.",
  "IncidentHash": "3f25fec9e18c7673dcc468800b7af0a6",
  "CanaryLocation": "dining room",
  "SourceIP": "1.1.1.1",
  "AdditionalDetails": [
    [
      "Incident",
      "Consolidated Network Port Scan"
    ],
    [
      "Source",
      "1.1.1.1"
    ],
    [
      "Targets",
      "1.0.0.1, 1.0.0.2"
    ],
    [
      "Background Context",
      "You have had 8 incidents from 1.0.0.1 previously."
    ]
  ],
  "CanaryID": "00000000aa8a310e"
}