{
  "ReverseDNS": "attacker.local",
  "CanaryName": "foo-bar",
  "Description": "SSH Login Attempt",
  "CanaryPort": 22,
  "Timestamp": "2020-07-20 16:26:22 (UTC)",
  "CanaryIP": "1.1.1.1",
  "AlertType": "CanaryIncident",
  "Intro": "SSH Login Attempt has been detected against one of your Canaries (foo-bar) at 1.1.1.1.",
  "IncidentHash": "4ef51a936d05e0a6b4846378c8c38d2c",
  "CanaryLocation": "dining room",
  "SourceIP": "1.1.1.1",
  "AdditionalDetails": [
    [
      "Username",
      "foo"
    ],
    [
      "Key",
      "*******"
    ],
    [
      "Background Context",
      "You have had 9 incidents from 1.1.1.1 previously."
    ]
  ],
  "CanaryID": "00024808d6c2f7e5"
}