64898b2c79
Some checks failed
Code scanning / CodeQL (push) Failing after 15s
Zulip production suite / Ubuntu 22.04 production build (push) Failing after 26s
Zulip production suite / Debian 12 production install with custom db name and user (push) Has been skipped
Zulip production suite / Ubuntu 22.04 production install and PostgreSQL upgrade with pgroonga (push) Has been skipped
Zulip production suite / Ubuntu 24.04 production install (push) Has been skipped
Zulip production suite / Ubuntu 26.04 production install (push) Has been skipped
Zulip production suite / Debian 13 production install (push) Has been skipped
Zulip production suite / 7.0 Version Upgrade (push) Has been skipped
Zulip production suite / 8.0 Version Upgrade (push) Has been skipped
Zulip production suite / 6.0 Version Upgrade (push) Has been skipped
Zulip production suite / 10.0 Version Upgrade (push) Has been skipped
Zulip production suite / 9.0 Version Upgrade (push) Has been skipped
Zulip production suite / 12.0 Version Upgrade (push) Has been skipped
Zulip production suite / 11.0 Version Upgrade (push) Has been skipped
GitHub Actions Security Analysis with zizmor / zizmor (push) Failing after 3s
Zulip CI / Debian 12 (Python 3.11, backend + documentation) (push) Failing after 26s
Zulip CI / Ubuntu 22.04 (Python 3.10, backend + frontend) (push) Failing after 3s
Zulip CI / Ubuntu 24.04 (Python 3.12, backend) (push) Failing after 25s
Zulip CI / Ubuntu 26.04 (Python 3.14, backend) (push) Failing after 25s
Zulip CI / Debian 13 (Python 3.13, backend) (push) Failing after 28s
Zulip production suite / Required jobs (push) Has been cancelled
Zulip CI / Required jobs (push) Has been cancelled
API Documentation Update Check / check-feature-level-updated (push) Has been cancelled
API Documentation Update Check / notify-if-api-docs-changed (push) Has been cancelled
41 lines
847 B
JSON
41 lines
847 B
JSON
{
|
|
"Token": "dbwx4d68flwh2u5zku56nogu6",
|
|
"Intro": "A MS Word .docx Document Canarytoken has been triggered over doc-msword by the source IP 1.1.1.1.",
|
|
"Description": "MS Word .docx Document",
|
|
"Triggered": 5,
|
|
"AdditionalDetails": [
|
|
[
|
|
"Accept",
|
|
"*/*"
|
|
],
|
|
[
|
|
"Accept-Encoding",
|
|
"gzip, deflate"
|
|
],
|
|
[
|
|
"Accept-Language",
|
|
"en-gb"
|
|
],
|
|
[
|
|
"Background Context",
|
|
"You have had 21 incidents from 1.1.1.1 previously."
|
|
],
|
|
[
|
|
"Connection",
|
|
"keep-alive"
|
|
],
|
|
[
|
|
"Dst Port",
|
|
80
|
|
],
|
|
[
|
|
"User-Agent",
|
|
"Mozilla/4.0 (compatible; ms-office; MSOffice 16)"
|
|
]
|
|
],
|
|
"Timestamp": "2020-07-20 14:40:15 (UTC)",
|
|
"Reminder": "test document",
|
|
"IncidentHash": "db6f9b5528c6c6c385cb3bb63f5949c8",
|
|
"AlertType": "CanarytokenIncident"
|
|
}
|