[ { "model": "app.dlppolicy", "pk": 1, "fields": { "policy_set": "corporate-baseline", "name": "Payment card numbers", "detector": "digit pattern with checksum", "default_action": "block", "severity": "high" } }, { "model": "app.dlppolicy", "pk": 2, "fields": { "policy_set": "corporate-baseline", "name": "Bank account numbers", "detector": "IBAN pattern with check digits", "default_action": "warn", "severity": "medium" } }, { "model": "app.dlppolicy", "pk": 3, "fields": { "policy_set": "corporate-baseline", "name": "National ID numbers", "detector": "national ID pattern", "default_action": "block", "severity": "high" } }, { "model": "app.dlppolicy", "pk": 4, "fields": { "policy_set": "corporate-baseline", "name": "Source code", "detector": "source code classifier", "default_action": "warn", "severity": "medium" } }, { "model": "app.dlppolicy", "pk": 5, "fields": { "policy_set": "corporate-baseline", "name": "Customer list export", "detector": "record count over 500", "default_action": "warn", "severity": "medium" } }, { "model": "app.dlppolicy", "pk": 6, "fields": { "policy_set": "corporate-baseline", "name": "Health information", "detector": "medical term dictionary", "default_action": "audit only", "severity": "high" } }, { "model": "app.dlppolicy", "pk": 7, "fields": { "policy_set": "corporate-baseline", "name": "Credentials and keys", "detector": "secret and key patterns", "default_action": "block", "severity": "high" } }, { "model": "app.dlppolicy", "pk": 8, "fields": { "policy_set": "corporate-baseline", "name": "Board-confidential label", "detector": "sensitivity label in metadata", "default_action": "warn", "severity": "medium" } }, { "model": "app.employee", "pk": 1, "fields": { "first_name": "Sonny", "last_name": "Anderson", "email": "sonny.anderson@example.org", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 2, "fields": { "first_name": "Ruthie", "last_name": "Barrows-Ernser", "email": "ruthie.barrows-ernser@example.com", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 3, "fields": { "first_name": "Dagmar", "last_name": "Ward", "email": "dagmar.ward92@example.com", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 4, "fields": { "first_name": "Theo", "last_name": "Hyatt", "email": "theo_hyatt73@example.org", "department": "Finance", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 5, "fields": { "first_name": "Samir", "last_name": "Hintz", "email": "samir.hintz75@example.com", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 6, "fields": { "first_name": "Estrella", "last_name": "Moore-Auer", "email": "estrella.moore-auer32@example.org", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 7, "fields": { "first_name": "Arturo", "last_name": "Wunsch", "email": "arturo.wunsch@example.org", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 8, "fields": { "first_name": "Nancy", "last_name": "Bahringer", "email": "nancy.bahringer55@example.com", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 9, "fields": { "first_name": "Marlen", "last_name": "Haag", "email": "marlen_haag@example.com", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 10, "fields": { "first_name": "Sydnee", "last_name": "Anderson", "email": "sydnee_anderson@example.org", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 11, "fields": { "first_name": "Chanelle", "last_name": "Jacobson", "email": "chanelle.jacobson14@example.net", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 12, "fields": { "first_name": "Audra", "last_name": "Hartmann", "email": "audra_hartmann24@example.com", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 13, "fields": { "first_name": "Hilton", "last_name": "Emmerich", "email": "hilton.emmerich@example.org", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 14, "fields": { "first_name": "Okey", "last_name": "Senger", "email": "okey.senger58@example.net", "department": "Sales", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 15, "fields": { "first_name": "Jenifer", "last_name": "Mertz", "email": "jenifer.mertz@example.org", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 16, "fields": { "first_name": "Leila", "last_name": "Howell", "email": "leila_howell@example.net", "department": "Finance", "worker_type": "employee" } }, { "model": "app.employee", "pk": 17, "fields": { "first_name": "Zora", "last_name": "Hilll", "email": "zora.hilll@example.org", "department": "Marketing", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 18, "fields": { "first_name": "Gaetano", "last_name": "Daugherty", "email": "gaetano.daugherty@example.org", "department": "Sales", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 19, "fields": { "first_name": "Willard", "last_name": "Jenkins", "email": "willard.jenkins46@example.org", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 20, "fields": { "first_name": "Caden", "last_name": "Leuschke", "email": "caden_leuschke@example.org", "department": "Legal", "worker_type": "employee" } }, { "model": "app.employee", "pk": 21, "fields": { "first_name": "Cordia", "last_name": "Baumbach", "email": "cordia_baumbach67@example.com", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 22, "fields": { "first_name": "Gina", "last_name": "Howe", "email": "gina_howe@example.net", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 23, "fields": { "first_name": "Alfredo", "last_name": "Waters", "email": "alfredo_waters94@example.org", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 24, "fields": { "first_name": "Cordie", "last_name": "Wintheiser-Koch", "email": "cordie_wintheiser-koch@example.com", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 25, "fields": { "first_name": "Angelo", "last_name": "Waters", "email": "angelo.waters24@example.net", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 26, "fields": { "first_name": "Chaim", "last_name": "Morar", "email": "chaim_morar@example.com", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 27, "fields": { "first_name": "Ova", "last_name": "Bode", "email": "ova.bode95@example.com", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 28, "fields": { "first_name": "Liliana", "last_name": "Weimann", "email": "liliana.weimann96@example.net", "department": "Finance", "worker_type": "employee" } }, { "model": "app.employee", "pk": 29, "fields": { "first_name": "Amira", "last_name": "Thiel", "email": "amira.thiel@example.net", "department": "Legal", "worker_type": "employee" } }, { "model": "app.employee", "pk": 30, "fields": { "first_name": "Abe", "last_name": "Nolan-Buckridge", "email": "abe_nolan-buckridge@example.net", "department": "Marketing", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 31, "fields": { "first_name": "Carmel", "last_name": "McLaughlin", "email": "carmel.mclaughlin@example.net", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 32, "fields": { "first_name": "Alexandro", "last_name": "Mueller", "email": "alexandro.mueller@example.org", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 33, "fields": { "first_name": "Shawna", "last_name": "Schumm", "email": "shawna_schumm@example.org", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 34, "fields": { "first_name": "Rahul", "last_name": "Maggio", "email": "rahul.maggio87@example.org", "department": "Marketing", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 35, "fields": { "first_name": "Robbie", "last_name": "Stanton", "email": "robbie_stanton39@example.org", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 36, "fields": { "first_name": "Ilene", "last_name": "Jacobson", "email": "ilene.jacobson@example.net", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 37, "fields": { "first_name": "Luz", "last_name": "Dicki", "email": "luz_dicki@example.org", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 38, "fields": { "first_name": "Georgia", "last_name": "Macejkovic", "email": "georgia_macejkovic90@example.org", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 39, "fields": { "first_name": "Sherwood", "last_name": "Stokes", "email": "sherwood_stokes54@example.org", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 40, "fields": { "first_name": "Dameon", "last_name": "Wehner", "email": "dameon.wehner88@example.com", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 41, "fields": { "first_name": "Mellie", "last_name": "Halvorson", "email": "mellie_halvorson24@example.com", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 42, "fields": { "first_name": "Madonna", "last_name": "Zulauf", "email": "madonna_zulauf@example.net", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 43, "fields": { "first_name": "Amari", "last_name": "Aufderhar", "email": "amari.aufderhar14@example.com", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 44, "fields": { "first_name": "Justyn", "last_name": "McClure", "email": "justyn.mcclure@example.com", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 45, "fields": { "first_name": "Bud", "last_name": "Hoeger", "email": "bud.hoeger@example.net", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 46, "fields": { "first_name": "Brice", "last_name": "Pfannerstill", "email": "brice_pfannerstill@example.com", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 47, "fields": { "first_name": "Lyle", "last_name": "Rolfson", "email": "lyle.rolfson94@example.com", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 48, "fields": { "first_name": "Jeremy", "last_name": "Gibson", "email": "jeremy.gibson64@example.com", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 49, "fields": { "first_name": "Pierre", "last_name": "Waelchi", "email": "pierre.waelchi68@example.org", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 50, "fields": { "first_name": "Loma", "last_name": "Fadel", "email": "loma.fadel@example.com", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 51, "fields": { "first_name": "Chauncey", "last_name": "Crona-Cruickshank", "email": "chauncey.crona-cruickshank@example.com", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 52, "fields": { "first_name": "Eleanor", "last_name": "Borer", "email": "eleanor.borer55@example.org", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 53, "fields": { "first_name": "Moshe", "last_name": "Runte", "email": "moshe.runte@example.net", "department": "Legal", "worker_type": "employee" } }, { "model": "app.employee", "pk": 54, "fields": { "first_name": "Vera", "last_name": "Gislason", "email": "vera.gislason@example.com", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 55, "fields": { "first_name": "Maxime", "last_name": "Torp", "email": "maxime_torp@example.net", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 56, "fields": { "first_name": "Anjali", "last_name": "Von", "email": "anjali_von54@example.net", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 57, "fields": { "first_name": "Cooper", "last_name": "Kris", "email": "cooper.kris49@example.org", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 58, "fields": { "first_name": "Moshe", "last_name": "Johnson", "email": "moshe.johnson@example.com", "department": "Customer Success", "worker_type": "employee" } }, { "model": "app.employee", "pk": 59, "fields": { "first_name": "Michael", "last_name": "Botsford", "email": "michael_botsford@example.net", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 60, "fields": { "first_name": "Selena", "last_name": "Leuschke", "email": "selena.leuschke@example.net", "department": "Customer Success", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 61, "fields": { "first_name": "Raoul", "last_name": "Littel", "email": "raoul_littel@example.com", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 62, "fields": { "first_name": "Joesph", "last_name": "Hayes", "email": "joesph_hayes@example.net", "department": "Sales", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 63, "fields": { "first_name": "Nikko", "last_name": "Cummerata", "email": "nikko_cummerata17@example.net", "department": "Sales", "worker_type": "employee" } }, { "model": "app.employee", "pk": 64, "fields": { "first_name": "Kory", "last_name": "Corwin", "email": "kory_corwin88@example.com", "department": "Finance", "worker_type": "employee" } }, { "model": "app.employee", "pk": 65, "fields": { "first_name": "Jessie", "last_name": "Leffler", "email": "jessie_leffler@example.org", "department": "Sales", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 66, "fields": { "first_name": "Chasity", "last_name": "Robel", "email": "chasity.robel@example.com", "department": "Finance", "worker_type": "employee" } }, { "model": "app.employee", "pk": 67, "fields": { "first_name": "Todd", "last_name": "Legros", "email": "todd_legros5@example.org", "department": "Marketing", "worker_type": "employee" } }, { "model": "app.employee", "pk": 68, "fields": { "first_name": "Nikki", "last_name": "Rogahn", "email": "nikki_rogahn@example.org", "department": "Sales", "worker_type": "contractor" } }, { "model": "app.employee", "pk": 69, "fields": { "first_name": "Deion", "last_name": "Halvorson-Ferry", "email": "deion_halvorson-ferry@example.net", "department": "Engineering", "worker_type": "employee" } }, { "model": "app.employee", "pk": 70, "fields": { "first_name": "Allan", "last_name": "Funk", "email": "allan.funk91@example.com", "department": "Customer Success", "worker_type": "contractor" } }, { "model": "app.incident", "pk": 1, "fields": { "employee": 47, "policy": 3, "occurred_at": "2026-08-22T11:08:40Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6804", "file_type": "txt", "match_count": 63, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-31T23:59:54Z" } }, { "model": "app.incident", "pk": 2, "fields": { "employee": 8, "policy": 7, "occurred_at": "2026-08-27T10:21:06Z", "channel": "external email", "recipient_domain": "partner876.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 251, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-04T01:24:41Z" } }, { "model": "app.incident", "pk": 3, "fields": { "employee": 13, "policy": 8, "occurred_at": "2026-09-27T19:45:40Z", "channel": "external email", "recipient_domain": "partner375.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 366, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-09-30T16:57:04Z" } }, { "model": "app.incident", "pk": 4, "fields": { "employee": 69, "policy": 1, "occurred_at": "2026-08-11T10:34:07Z", "channel": "external email", "recipient_domain": "partner732.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 34, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-13T14:00:57Z" } }, { "model": "app.incident", "pk": 5, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-08-01T14:09:22Z", "channel": "external email", "recipient_domain": "partner602.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 301, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 6, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-08-06T12:19:25Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 452, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-07T10:52:34Z" } }, { "model": "app.incident", "pk": 7, "fields": { "employee": 33, "policy": 6, "occurred_at": "2026-08-18T11:34:20Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 23, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-21T05:00:12Z" } }, { "model": "app.incident", "pk": 8, "fields": { "employee": 52, "policy": 1, "occurred_at": "2026-09-18T15:55:39Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 38, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-21T09:27:03Z" } }, { "model": "app.incident", "pk": 9, "fields": { "employee": 63, "policy": 8, "occurred_at": "2026-07-07T10:12:18Z", "channel": "external email", "recipient_domain": "partner091.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 624, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-13T04:44:11Z" } }, { "model": "app.incident", "pk": 10, "fields": { "employee": 40, "policy": 1, "occurred_at": "2026-09-03T10:44:57Z", "channel": "external email", "recipient_domain": "partner378.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 316, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-10T06:54:53Z" } }, { "model": "app.incident", "pk": 11, "fields": { "employee": 30, "policy": 5, "occurred_at": "2026-09-30T14:03:51Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 62, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 12, "fields": { "employee": 50, "policy": 5, "occurred_at": "2026-07-31T15:37:46Z", "channel": "chat message", "recipient_domain": "partner886.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 445, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-07-31T22:01:06Z" } }, { "model": "app.incident", "pk": 13, "fields": { "employee": 52, "policy": 4, "occurred_at": "2026-08-31T15:38:28Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1215", "file_type": "zip", "match_count": 604, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-09-08T12:45:42Z" } }, { "model": "app.incident", "pk": 14, "fields": { "employee": 3, "policy": 2, "occurred_at": "2026-08-27T17:40:07Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6056", "file_type": "xlsx", "match_count": 333, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, user coached", "closed_at": "2026-09-03T16:20:15Z" } }, { "model": "app.incident", "pk": 15, "fields": { "employee": 18, "policy": 5, "occurred_at": "2026-09-13T18:58:23Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "zip", "match_count": 54, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-19T23:20:54Z" } }, { "model": "app.incident", "pk": 16, "fields": { "employee": 44, "policy": 4, "occurred_at": "2026-09-13T09:43:56Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1842", "file_type": "txt", "match_count": 101, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-18T13:20:28Z" } }, { "model": "app.incident", "pk": 17, "fields": { "employee": 9, "policy": 3, "occurred_at": "2026-07-27T20:52:27Z", "channel": "chat message", "recipient_domain": "partner044.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 288, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 18, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-09-23T10:46:56Z", "channel": "external email", "recipient_domain": "partner483.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 151, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 19, "fields": { "employee": 21, "policy": 4, "occurred_at": "2026-09-25T12:11:13Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 554, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-10-05T12:01:31Z" } }, { "model": "app.incident", "pk": 20, "fields": { "employee": 10, "policy": 4, "occurred_at": "2026-07-19T12:25:39Z", "channel": "external email", "recipient_domain": "partner338.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 128, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-27T01:32:55Z" } }, { "model": "app.incident", "pk": 21, "fields": { "employee": 14, "policy": 6, "occurred_at": "2026-09-22T09:17:56Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 66, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-10-01T20:20:35Z" } }, { "model": "app.incident", "pk": 22, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-04T11:58:34Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "docx", "match_count": 242, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-07T13:40:10Z" } }, { "model": "app.incident", "pk": 23, "fields": { "employee": 45, "policy": 6, "occurred_at": "2026-08-02T13:44:20Z", "channel": "external email", "recipient_domain": "partner015.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 48, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-06T00:09:01Z" } }, { "model": "app.incident", "pk": 24, "fields": { "employee": 7, "policy": 6, "occurred_at": "2026-08-27T15:01:48Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 282, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-28T18:21:43Z" } }, { "model": "app.incident", "pk": 25, "fields": { "employee": 42, "policy": 2, "occurred_at": "2026-07-15T17:57:16Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 416, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-21T16:49:51Z" } }, { "model": "app.incident", "pk": 26, "fields": { "employee": 23, "policy": 1, "occurred_at": "2026-09-14T13:47:02Z", "channel": "external email", "recipient_domain": "partner312.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 492, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 27, "fields": { "employee": 27, "policy": 7, "occurred_at": "2026-09-26T17:08:13Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 254, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-30T18:23:45Z" } }, { "model": "app.incident", "pk": 28, "fields": { "employee": 50, "policy": 5, "occurred_at": "2026-09-06T08:02:09Z", "channel": "external email", "recipient_domain": "partner093.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 13, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-13T13:23:44Z" } }, { "model": "app.incident", "pk": 29, "fields": { "employee": 56, "policy": 8, "occurred_at": "2026-09-14T10:02:09Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 11, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 30, "fields": { "employee": 22, "policy": 3, "occurred_at": "2026-07-16T15:04:52Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "csv", "match_count": 388, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-19T06:53:13Z" } }, { "model": "app.incident", "pk": 31, "fields": { "employee": 22, "policy": 2, "occurred_at": "2026-07-29T13:13:57Z", "channel": "external email", "recipient_domain": "partner620.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 197, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "false positive", "closed_at": "2026-07-30T14:56:40Z" } }, { "model": "app.incident", "pk": 32, "fields": { "employee": 19, "policy": 3, "occurred_at": "2026-09-24T11:43:17Z", "channel": "external email", "recipient_domain": "partner417.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 32, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-26T05:01:15Z" } }, { "model": "app.incident", "pk": 33, "fields": { "employee": 9, "policy": 3, "occurred_at": "2026-07-27T08:19:49Z", "channel": "chat message", "recipient_domain": "partner296.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 139, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-05T08:25:48Z" } }, { "model": "app.incident", "pk": 34, "fields": { "employee": 59, "policy": 4, "occurred_at": "2026-09-18T18:59:30Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 289, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "closed, business need", "closed_at": "2026-09-25T16:21:32Z" } }, { "model": "app.incident", "pk": 35, "fields": { "employee": 55, "policy": 3, "occurred_at": "2026-08-24T09:15:50Z", "channel": "external email", "recipient_domain": "partner876.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 196, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-01T13:22:03Z" } }, { "model": "app.incident", "pk": 36, "fields": { "employee": 63, "policy": 8, "occurred_at": "2026-08-09T10:52:16Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 238, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, user coached", "closed_at": "2026-08-12T23:01:12Z" } }, { "model": "app.incident", "pk": 37, "fields": { "employee": 2, "policy": 2, "occurred_at": "2026-07-21T13:35:33Z", "channel": "external email", "recipient_domain": "partner275.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 8, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-07-26T00:17:11Z" } }, { "model": "app.incident", "pk": 38, "fields": { "employee": 3, "policy": 4, "occurred_at": "2026-09-09T06:57:19Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 130, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 39, "fields": { "employee": 63, "policy": 4, "occurred_at": "2026-07-13T11:01:28Z", "channel": "external email", "recipient_domain": "partner925.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 466, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-18T23:01:08Z" } }, { "model": "app.incident", "pk": 40, "fields": { "employee": 6, "policy": 1, "occurred_at": "2026-09-30T15:10:02Z", "channel": "chat message", "recipient_domain": "partner126.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 223, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-10-05T17:08:42Z" } }, { "model": "app.incident", "pk": 41, "fields": { "employee": 10, "policy": 2, "occurred_at": "2026-07-12T16:41:48Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 157, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-15T16:56:37Z" } }, { "model": "app.incident", "pk": 42, "fields": { "employee": 70, "policy": 5, "occurred_at": "2026-07-25T14:50:50Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9947", "file_type": "zip", "match_count": 23, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 43, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-09-27T17:02:47Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "zip", "match_count": 668, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-10-02T11:01:07Z" } }, { "model": "app.incident", "pk": 44, "fields": { "employee": 27, "policy": 5, "occurred_at": "2026-08-09T14:50:38Z", "channel": "chat message", "recipient_domain": "partner358.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 88, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-14T21:34:48Z" } }, { "model": "app.incident", "pk": 45, "fields": { "employee": 55, "policy": 4, "occurred_at": "2026-07-01T10:13:54Z", "channel": "external email", "recipient_domain": "partner743.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 78, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-07-03T23:38:55Z" } }, { "model": "app.incident", "pk": 46, "fields": { "employee": 25, "policy": 1, "occurred_at": "2026-08-25T16:02:54Z", "channel": "external email", "recipient_domain": "partner210.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 662, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-25T23:33:45Z" } }, { "model": "app.incident", "pk": 47, "fields": { "employee": 9, "policy": 4, "occurred_at": "2026-08-24T08:53:05Z", "channel": "external email", "recipient_domain": "partner322.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 285, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 48, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-08-20T13:08:05Z", "channel": "external email", "recipient_domain": "partner178.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 205, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-23T13:36:29Z" } }, { "model": "app.incident", "pk": 49, "fields": { "employee": 53, "policy": 6, "occurred_at": "2026-09-10T16:43:39Z", "channel": "chat message", "recipient_domain": "partner481.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 99, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-18T15:32:49Z" } }, { "model": "app.incident", "pk": 50, "fields": { "employee": 65, "policy": 4, "occurred_at": "2026-07-12T11:13:27Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "xlsx", "match_count": 176, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, escalated", "closed_at": "2026-07-12T20:22:26Z" } }, { "model": "app.incident", "pk": 51, "fields": { "employee": 45, "policy": 8, "occurred_at": "2026-08-21T14:30:37Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 84, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-30T20:21:23Z" } }, { "model": "app.incident", "pk": 52, "fields": { "employee": 9, "policy": 5, "occurred_at": "2026-09-13T08:01:10Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 14, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-14T23:51:33Z" } }, { "model": "app.incident", "pk": 53, "fields": { "employee": 14, "policy": 4, "occurred_at": "2026-08-08T16:35:48Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 152, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-08T17:57:55Z" } }, { "model": "app.incident", "pk": 54, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-07-12T16:29:09Z", "channel": "external email", "recipient_domain": "partner056.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 168, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-22T09:40:02Z" } }, { "model": "app.incident", "pk": 55, "fields": { "employee": 2, "policy": 8, "occurred_at": "2026-08-27T14:35:26Z", "channel": "external email", "recipient_domain": "partner578.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 53, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 56, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-08-29T14:08:28Z", "channel": "external email", "recipient_domain": "partner335.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 2, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-03T13:44:01Z" } }, { "model": "app.incident", "pk": 57, "fields": { "employee": 8, "policy": 6, "occurred_at": "2026-07-05T09:42:15Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 219, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-06T13:45:48Z" } }, { "model": "app.incident", "pk": 58, "fields": { "employee": 16, "policy": 6, "occurred_at": "2026-09-27T07:48:19Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 408, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 59, "fields": { "employee": 18, "policy": 6, "occurred_at": "2026-09-08T17:15:37Z", "channel": "external email", "recipient_domain": "partner984.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 164, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 60, "fields": { "employee": 6, "policy": 2, "occurred_at": "2026-08-03T12:44:55Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 142, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-10T13:35:19Z" } }, { "model": "app.incident", "pk": 61, "fields": { "employee": 2, "policy": 6, "occurred_at": "2026-08-06T09:18:58Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 597, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-09T18:53:35Z" } }, { "model": "app.incident", "pk": 62, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-09-13T15:43:08Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-8780", "file_type": "zip", "match_count": 509, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-22T06:27:00Z" } }, { "model": "app.incident", "pk": 63, "fields": { "employee": 21, "policy": 1, "occurred_at": "2026-08-02T15:43:14Z", "channel": "external email", "recipient_domain": "partner427.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 108, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-12T14:02:51Z" } }, { "model": "app.incident", "pk": 64, "fields": { "employee": 49, "policy": 1, "occurred_at": "2026-08-30T14:59:42Z", "channel": "external email", "recipient_domain": "partner012.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 489, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-04T04:59:13Z" } }, { "model": "app.incident", "pk": 65, "fields": { "employee": 24, "policy": 2, "occurred_at": "2026-07-06T07:24:33Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "docx", "match_count": 792, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-06T07:41:33Z" } }, { "model": "app.incident", "pk": 66, "fields": { "employee": 52, "policy": 2, "occurred_at": "2026-08-05T18:44:11Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3889", "file_type": "docx", "match_count": 622, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-15T11:54:31Z" } }, { "model": "app.incident", "pk": 67, "fields": { "employee": 58, "policy": 8, "occurred_at": "2026-07-12T08:13:35Z", "channel": "external email", "recipient_domain": "partner245.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 665, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-14T16:50:46Z" } }, { "model": "app.incident", "pk": 68, "fields": { "employee": 39, "policy": 6, "occurred_at": "2026-08-01T16:11:20Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5060", "file_type": "txt", "match_count": 49, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-05T06:34:21Z" } }, { "model": "app.incident", "pk": 69, "fields": { "employee": 43, "policy": 4, "occurred_at": "2026-09-22T17:54:42Z", "channel": "chat message", "recipient_domain": "partner764.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 209, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-09-30T04:21:44Z" } }, { "model": "app.incident", "pk": 70, "fields": { "employee": 52, "policy": 4, "occurred_at": "2026-07-13T16:54:10Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "txt", "match_count": 377, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 71, "fields": { "employee": 12, "policy": 1, "occurred_at": "2026-08-29T09:18:03Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 689, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-02T03:04:29Z" } }, { "model": "app.incident", "pk": 72, "fields": { "employee": 48, "policy": 7, "occurred_at": "2026-08-30T10:54:53Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 6, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-05T10:07:05Z" } }, { "model": "app.incident", "pk": 73, "fields": { "employee": 13, "policy": 5, "occurred_at": "2026-08-23T15:06:41Z", "channel": "chat message", "recipient_domain": "partner377.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 265, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-29T09:05:00Z" } }, { "model": "app.incident", "pk": 74, "fields": { "employee": 64, "policy": 2, "occurred_at": "2026-09-06T16:57:29Z", "channel": "external email", "recipient_domain": "partner063.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 113, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 75, "fields": { "employee": 55, "policy": 5, "occurred_at": "2026-09-08T09:40:06Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9557", "file_type": "txt", "match_count": 41, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, user coached", "closed_at": "2026-09-11T11:49:10Z" } }, { "model": "app.incident", "pk": 76, "fields": { "employee": 26, "policy": 2, "occurred_at": "2026-07-08T14:19:02Z", "channel": "external email", "recipient_domain": "partner082.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 116, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 77, "fields": { "employee": 14, "policy": 4, "occurred_at": "2026-08-30T14:27:24Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "pdf", "match_count": 227, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-07T05:07:07Z" } }, { "model": "app.incident", "pk": 78, "fields": { "employee": 32, "policy": 8, "occurred_at": "2026-08-24T16:49:16Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 365, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 79, "fields": { "employee": 8, "policy": 3, "occurred_at": "2026-08-24T10:11:43Z", "channel": "external email", "recipient_domain": "partner561.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 700, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-30T13:12:08Z" } }, { "model": "app.incident", "pk": 80, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-08-24T19:20:41Z", "channel": "chat message", "recipient_domain": "partner511.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 695, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-08-31T14:54:45Z" } }, { "model": "app.incident", "pk": 81, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-06T06:42:34Z", "channel": "external email", "recipient_domain": "partner581.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 55, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-15T09:26:49Z" } }, { "model": "app.incident", "pk": 82, "fields": { "employee": 7, "policy": 4, "occurred_at": "2026-08-04T20:45:24Z", "channel": "external email", "recipient_domain": "partner657.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 66, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-08-06T04:21:05Z" } }, { "model": "app.incident", "pk": 83, "fields": { "employee": 37, "policy": 5, "occurred_at": "2026-09-11T16:46:40Z", "channel": "chat message", "recipient_domain": "partner351.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 230, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-09-13T22:41:43Z" } }, { "model": "app.incident", "pk": 84, "fields": { "employee": 52, "policy": 2, "occurred_at": "2026-08-05T14:46:10Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "zip", "match_count": 163, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-08-06T22:18:45Z" } }, { "model": "app.incident", "pk": 85, "fields": { "employee": 29, "policy": 1, "occurred_at": "2026-07-08T12:11:43Z", "channel": "external email", "recipient_domain": "partner500.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 115, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 86, "fields": { "employee": 48, "policy": 7, "occurred_at": "2026-09-06T10:34:30Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 19, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-09T00:49:56Z" } }, { "model": "app.incident", "pk": 87, "fields": { "employee": 16, "policy": 6, "occurred_at": "2026-07-23T18:25:01Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 719, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-29T09:36:08Z" } }, { "model": "app.incident", "pk": 88, "fields": { "employee": 2, "policy": 7, "occurred_at": "2026-07-20T16:43:40Z", "channel": "chat message", "recipient_domain": "partner568.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 366, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-23T00:33:15Z" } }, { "model": "app.incident", "pk": 89, "fields": { "employee": 24, "policy": 7, "occurred_at": "2026-08-01T16:41:43Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9972", "file_type": "txt", "match_count": 599, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 90, "fields": { "employee": 61, "policy": 1, "occurred_at": "2026-08-30T12:12:18Z", "channel": "external email", "recipient_domain": "partner705.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 13, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-08T00:57:35Z" } }, { "model": "app.incident", "pk": 91, "fields": { "employee": 55, "policy": 7, "occurred_at": "2026-09-02T16:09:24Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1282", "file_type": "csv", "match_count": 81, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-12T02:31:26Z" } }, { "model": "app.incident", "pk": 92, "fields": { "employee": 56, "policy": 7, "occurred_at": "2026-09-09T11:19:46Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1593", "file_type": "csv", "match_count": 193, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-14T19:31:36Z" } }, { "model": "app.incident", "pk": 93, "fields": { "employee": 5, "policy": 8, "occurred_at": "2026-08-09T13:44:33Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "txt", "match_count": 507, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-08-15T22:33:41Z" } }, { "model": "app.incident", "pk": 94, "fields": { "employee": 68, "policy": 3, "occurred_at": "2026-09-01T11:36:58Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 182, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-05T04:10:44Z" } }, { "model": "app.incident", "pk": 95, "fields": { "employee": 50, "policy": 4, "occurred_at": "2026-09-24T15:01:15Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "xlsx", "match_count": 25, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-10-02T06:33:38Z" } }, { "model": "app.incident", "pk": 96, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-09-20T17:40:52Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9286", "file_type": "docx", "match_count": 619, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 97, "fields": { "employee": 11, "policy": 5, "occurred_at": "2026-09-29T12:50:14Z", "channel": "external email", "recipient_domain": "partner077.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 12, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-10-06T05:47:15Z" } }, { "model": "app.incident", "pk": 98, "fields": { "employee": 30, "policy": 4, "occurred_at": "2026-07-10T12:42:22Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "docx", "match_count": 735, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-18T20:44:55Z" } }, { "model": "app.incident", "pk": 99, "fields": { "employee": 7, "policy": 5, "occurred_at": "2026-09-10T16:00:23Z", "channel": "chat message", "recipient_domain": "partner687.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 248, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-09-10T18:24:40Z" } }, { "model": "app.incident", "pk": 100, "fields": { "employee": 32, "policy": 6, "occurred_at": "2026-07-16T11:32:00Z", "channel": "external email", "recipient_domain": "partner154.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 175, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-22T11:27:26Z" } }, { "model": "app.incident", "pk": 101, "fields": { "employee": 35, "policy": 3, "occurred_at": "2026-08-13T09:08:33Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "docx", "match_count": 437, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-17T15:56:25Z" } }, { "model": "app.incident", "pk": 102, "fields": { "employee": 4, "policy": 1, "occurred_at": "2026-07-24T08:47:23Z", "channel": "chat message", "recipient_domain": "partner190.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 188, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-25T07:55:14Z" } }, { "model": "app.incident", "pk": 103, "fields": { "employee": 62, "policy": 7, "occurred_at": "2026-08-11T17:45:46Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7623", "file_type": "csv", "match_count": 720, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-20T20:26:06Z" } }, { "model": "app.incident", "pk": 104, "fields": { "employee": 13, "policy": 1, "occurred_at": "2026-09-11T20:25:58Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "pdf", "match_count": 177, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-12T16:51:17Z" } }, { "model": "app.incident", "pk": 105, "fields": { "employee": 60, "policy": 6, "occurred_at": "2026-09-07T15:15:33Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9460", "file_type": "xlsx", "match_count": 790, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-17T02:47:52Z" } }, { "model": "app.incident", "pk": 106, "fields": { "employee": 5, "policy": 2, "occurred_at": "2026-08-03T17:31:32Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4578", "file_type": "csv", "match_count": 177, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-05T15:04:26Z" } }, { "model": "app.incident", "pk": 107, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-09-02T16:21:45Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "xlsx", "match_count": 69, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-11T17:39:15Z" } }, { "model": "app.incident", "pk": 108, "fields": { "employee": 45, "policy": 6, "occurred_at": "2026-09-15T16:33:13Z", "channel": "external email", "recipient_domain": "partner993.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 748, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-21T22:23:53Z" } }, { "model": "app.incident", "pk": 109, "fields": { "employee": 10, "policy": 8, "occurred_at": "2026-09-21T17:50:30Z", "channel": "chat message", "recipient_domain": "partner401.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 6, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, user coached", "closed_at": "2026-09-24T11:37:03Z" } }, { "model": "app.incident", "pk": 110, "fields": { "employee": 4, "policy": 4, "occurred_at": "2026-07-01T15:39:28Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 710, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-02T13:17:24Z" } }, { "model": "app.incident", "pk": 111, "fields": { "employee": 14, "policy": 8, "occurred_at": "2026-08-21T15:32:11Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 529, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 112, "fields": { "employee": 26, "policy": 1, "occurred_at": "2026-09-08T14:14:01Z", "channel": "external email", "recipient_domain": "partner701.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 14, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 113, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-08-19T14:36:00Z", "channel": "external email", "recipient_domain": "partner455.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 17, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-19T20:56:32Z" } }, { "model": "app.incident", "pk": 114, "fields": { "employee": 29, "policy": 5, "occurred_at": "2026-07-24T13:50:34Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4337", "file_type": "csv", "match_count": 121, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "closed, business need", "closed_at": "2026-07-28T00:44:40Z" } }, { "model": "app.incident", "pk": 115, "fields": { "employee": 22, "policy": 8, "occurred_at": "2026-08-13T04:40:35Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "py", "match_count": 17, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-18T15:42:10Z" } }, { "model": "app.incident", "pk": 116, "fields": { "employee": 22, "policy": 6, "occurred_at": "2026-07-15T13:59:01Z", "channel": "external email", "recipient_domain": "partner027.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 183, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 117, "fields": { "employee": 22, "policy": 2, "occurred_at": "2026-08-30T10:05:47Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 80, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "false positive", "closed_at": "2026-09-06T23:41:16Z" } }, { "model": "app.incident", "pk": 118, "fields": { "employee": 8, "policy": 5, "occurred_at": "2026-08-07T12:53:55Z", "channel": "chat message", "recipient_domain": "partner299.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 13, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-08T18:17:53Z" } }, { "model": "app.incident", "pk": 119, "fields": { "employee": 30, "policy": 6, "occurred_at": "2026-07-29T16:45:38Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "csv", "match_count": 667, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 120, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-07-02T13:29:12Z", "channel": "external email", "recipient_domain": "partner543.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 355, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-11T12:25:16Z" } }, { "model": "app.incident", "pk": 121, "fields": { "employee": 19, "policy": 5, "occurred_at": "2026-08-26T11:55:10Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 86, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-08-31T22:14:37Z" } }, { "model": "app.incident", "pk": 122, "fields": { "employee": 69, "policy": 4, "occurred_at": "2026-07-05T15:53:59Z", "channel": "chat message", "recipient_domain": "partner023.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 422, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-07-14T18:45:40Z" } }, { "model": "app.incident", "pk": 123, "fields": { "employee": 68, "policy": 8, "occurred_at": "2026-08-26T13:06:10Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5211", "file_type": "xlsx", "match_count": 29, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-08-28T08:31:29Z" } }, { "model": "app.incident", "pk": 124, "fields": { "employee": 5, "policy": 7, "occurred_at": "2026-09-01T12:45:10Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 352, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-06T16:13:30Z" } }, { "model": "app.incident", "pk": 125, "fields": { "employee": 16, "policy": 6, "occurred_at": "2026-08-20T11:49:54Z", "channel": "chat message", "recipient_domain": "partner670.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 560, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-21T06:02:55Z" } }, { "model": "app.incident", "pk": 126, "fields": { "employee": 7, "policy": 4, "occurred_at": "2026-08-01T14:49:00Z", "channel": "external email", "recipient_domain": "partner816.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 649, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-09T20:22:32Z" } }, { "model": "app.incident", "pk": 127, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-07-19T17:09:04Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 782, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-21T13:33:25Z" } }, { "model": "app.incident", "pk": 128, "fields": { "employee": 32, "policy": 5, "occurred_at": "2026-08-11T11:31:35Z", "channel": "external email", "recipient_domain": "partner365.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 479, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-16T10:25:23Z" } }, { "model": "app.incident", "pk": 129, "fields": { "employee": 3, "policy": 7, "occurred_at": "2026-09-19T21:08:38Z", "channel": "chat message", "recipient_domain": "partner800.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 165, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-29T04:18:38Z" } }, { "model": "app.incident", "pk": 130, "fields": { "employee": 4, "policy": 1, "occurred_at": "2026-08-11T12:18:13Z", "channel": "external email", "recipient_domain": "partner975.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 54, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-19T14:27:55Z" } }, { "model": "app.incident", "pk": 131, "fields": { "employee": 48, "policy": 7, "occurred_at": "2026-09-26T15:28:22Z", "channel": "chat message", "recipient_domain": "partner798.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 70, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-26T18:34:55Z" } }, { "model": "app.incident", "pk": 132, "fields": { "employee": 51, "policy": 7, "occurred_at": "2026-07-14T14:20:52Z", "channel": "external email", "recipient_domain": "partner136.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 18, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 133, "fields": { "employee": 9, "policy": 2, "occurred_at": "2026-07-10T15:31:50Z", "channel": "external email", "recipient_domain": "partner827.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 2, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 134, "fields": { "employee": 33, "policy": 5, "occurred_at": "2026-08-31T16:54:19Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 41, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-05T03:33:53Z" } }, { "model": "app.incident", "pk": 135, "fields": { "employee": 60, "policy": 2, "occurred_at": "2026-07-11T17:18:13Z", "channel": "external email", "recipient_domain": "partner250.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 263, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 136, "fields": { "employee": 55, "policy": 7, "occurred_at": "2026-09-21T14:12:08Z", "channel": "external email", "recipient_domain": "partner717.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 558, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 137, "fields": { "employee": 10, "policy": 1, "occurred_at": "2026-09-07T10:50:24Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 133, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-17T01:52:38Z" } }, { "model": "app.incident", "pk": 138, "fields": { "employee": 23, "policy": 3, "occurred_at": "2026-08-19T12:28:02Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4056", "file_type": "docx", "match_count": 21, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 139, "fields": { "employee": 65, "policy": 4, "occurred_at": "2026-08-16T14:28:27Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 425, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-22T10:50:44Z" } }, { "model": "app.incident", "pk": 140, "fields": { "employee": 10, "policy": 2, "occurred_at": "2026-08-18T12:48:29Z", "channel": "chat message", "recipient_domain": "partner820.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 474, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 141, "fields": { "employee": 69, "policy": 7, "occurred_at": "2026-09-24T11:41:01Z", "channel": "external email", "recipient_domain": "partner913.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 339, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-30T00:55:42Z" } }, { "model": "app.incident", "pk": 142, "fields": { "employee": 19, "policy": 3, "occurred_at": "2026-08-21T10:15:37Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-2151", "file_type": "zip", "match_count": 153, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-27T13:43:54Z" } }, { "model": "app.incident", "pk": 143, "fields": { "employee": 38, "policy": 5, "occurred_at": "2026-08-29T15:04:58Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 47, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-05T19:43:28Z" } }, { "model": "app.incident", "pk": 144, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-07-18T15:23:33Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 214, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "closed, business need", "closed_at": "2026-07-23T11:34:30Z" } }, { "model": "app.incident", "pk": 145, "fields": { "employee": 44, "policy": 2, "occurred_at": "2026-09-23T11:07:21Z", "channel": "external email", "recipient_domain": "partner793.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 751, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-09-29T02:03:47Z" } }, { "model": "app.incident", "pk": 146, "fields": { "employee": 31, "policy": 4, "occurred_at": "2026-08-06T19:25:02Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 4, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-06T21:09:22Z" } }, { "model": "app.incident", "pk": 147, "fields": { "employee": 11, "policy": 2, "occurred_at": "2026-07-25T08:00:10Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 296, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "closed, business need", "closed_at": "2026-07-30T16:27:47Z" } }, { "model": "app.incident", "pk": 148, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-07-18T12:54:05Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 96, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 149, "fields": { "employee": 55, "policy": 4, "occurred_at": "2026-07-14T17:22:11Z", "channel": "external email", "recipient_domain": "partner242.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 62, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-19T21:02:16Z" } }, { "model": "app.incident", "pk": 150, "fields": { "employee": 13, "policy": 8, "occurred_at": "2026-07-29T16:38:10Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3681", "file_type": "xlsx", "match_count": 232, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-30T07:26:35Z" } }, { "model": "app.incident", "pk": 151, "fields": { "employee": 33, "policy": 5, "occurred_at": "2026-09-20T18:24:03Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4636", "file_type": "csv", "match_count": 16, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-09-26T12:24:46Z" } }, { "model": "app.incident", "pk": 152, "fields": { "employee": 8, "policy": 3, "occurred_at": "2026-09-05T10:46:36Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 373, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-08T20:34:19Z" } }, { "model": "app.incident", "pk": 153, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-07-19T10:30:49Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 372, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-07-28T15:59:43Z" } }, { "model": "app.incident", "pk": 154, "fields": { "employee": 8, "policy": 4, "occurred_at": "2026-09-04T13:58:50Z", "channel": "chat message", "recipient_domain": "partner001.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 71, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 155, "fields": { "employee": 12, "policy": 3, "occurred_at": "2026-07-16T09:47:30Z", "channel": "external email", "recipient_domain": "partner500.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 162, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 156, "fields": { "employee": 52, "policy": 7, "occurred_at": "2026-09-05T17:21:49Z", "channel": "external email", "recipient_domain": "partner782.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 46, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-08T22:24:02Z" } }, { "model": "app.incident", "pk": 157, "fields": { "employee": 3, "policy": 6, "occurred_at": "2026-09-26T16:56:23Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6429", "file_type": "py", "match_count": 616, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-10-03T16:22:16Z" } }, { "model": "app.incident", "pk": 158, "fields": { "employee": 3, "policy": 3, "occurred_at": "2026-08-01T15:46:12Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 81, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 159, "fields": { "employee": 48, "policy": 7, "occurred_at": "2026-07-13T14:19:10Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 477, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-23T07:55:44Z" } }, { "model": "app.incident", "pk": 160, "fields": { "employee": 22, "policy": 5, "occurred_at": "2026-08-02T09:00:58Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 2, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-02T21:59:39Z" } }, { "model": "app.incident", "pk": 161, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-07-10T09:44:41Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 8, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-19T03:00:30Z" } }, { "model": "app.incident", "pk": 162, "fields": { "employee": 7, "policy": 7, "occurred_at": "2026-07-13T20:38:02Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6608", "file_type": "pdf", "match_count": 145, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-15T08:18:27Z" } }, { "model": "app.incident", "pk": 163, "fields": { "employee": 62, "policy": 1, "occurred_at": "2026-09-14T09:48:11Z", "channel": "external email", "recipient_domain": "partner964.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 592, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-17T13:07:36Z" } }, { "model": "app.incident", "pk": 164, "fields": { "employee": 29, "policy": 5, "occurred_at": "2026-08-12T09:56:46Z", "channel": "chat message", "recipient_domain": "partner675.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 292, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-18T04:21:29Z" } }, { "model": "app.incident", "pk": 165, "fields": { "employee": 44, "policy": 8, "occurred_at": "2026-07-03T12:21:40Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 437, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 166, "fields": { "employee": 54, "policy": 8, "occurred_at": "2026-07-28T15:34:14Z", "channel": "external email", "recipient_domain": "partner106.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 378, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 167, "fields": { "employee": 22, "policy": 2, "occurred_at": "2026-08-26T18:57:35Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "zip", "match_count": 747, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-01T05:15:23Z" } }, { "model": "app.incident", "pk": 168, "fields": { "employee": 24, "policy": 8, "occurred_at": "2026-08-05T16:31:18Z", "channel": "chat message", "recipient_domain": "partner291.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 447, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-07T18:19:27Z" } }, { "model": "app.incident", "pk": 169, "fields": { "employee": 7, "policy": 7, "occurred_at": "2026-09-07T13:54:32Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 89, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-14T06:02:31Z" } }, { "model": "app.incident", "pk": 170, "fields": { "employee": 2, "policy": 3, "occurred_at": "2026-09-01T14:30:10Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5510", "file_type": "zip", "match_count": 31, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-05T14:59:11Z" } }, { "model": "app.incident", "pk": 171, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-07-03T16:20:47Z", "channel": "chat message", "recipient_domain": "partner459.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 268, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 172, "fields": { "employee": 3, "policy": 3, "occurred_at": "2026-07-09T10:52:56Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 25, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-11T16:36:06Z" } }, { "model": "app.incident", "pk": 173, "fields": { "employee": 66, "policy": 1, "occurred_at": "2026-09-08T11:09:32Z", "channel": "external email", "recipient_domain": "partner386.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 167, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 174, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-07-19T11:06:04Z", "channel": "external email", "recipient_domain": "partner396.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 80, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 175, "fields": { "employee": 13, "policy": 6, "occurred_at": "2026-08-09T07:23:57Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "txt", "match_count": 486, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-09T15:21:57Z" } }, { "model": "app.incident", "pk": 176, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-08-16T15:29:53Z", "channel": "external email", "recipient_domain": "partner095.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 665, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 177, "fields": { "employee": 49, "policy": 8, "occurred_at": "2026-09-30T13:20:29Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 12, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-10-10T11:54:05Z" } }, { "model": "app.incident", "pk": 178, "fields": { "employee": 20, "policy": 6, "occurred_at": "2026-09-02T17:24:01Z", "channel": "external email", "recipient_domain": "partner583.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 508, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-11T10:16:20Z" } }, { "model": "app.incident", "pk": 179, "fields": { "employee": 38, "policy": 1, "occurred_at": "2026-09-05T17:39:14Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 9, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-11T22:37:41Z" } }, { "model": "app.incident", "pk": 180, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-28T14:43:25Z", "channel": "external email", "recipient_domain": "partner184.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 9, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-29T19:40:29Z" } }, { "model": "app.incident", "pk": 181, "fields": { "employee": 56, "policy": 3, "occurred_at": "2026-08-07T14:54:12Z", "channel": "chat message", "recipient_domain": "partner024.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 649, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-10T10:29:48Z" } }, { "model": "app.incident", "pk": 182, "fields": { "employee": 44, "policy": 2, "occurred_at": "2026-09-11T11:15:53Z", "channel": "chat message", "recipient_domain": "partner945.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 167, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-20T08:17:56Z" } }, { "model": "app.incident", "pk": 183, "fields": { "employee": 8, "policy": 6, "occurred_at": "2026-08-24T20:57:53Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "docx", "match_count": 2, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 184, "fields": { "employee": 50, "policy": 8, "occurred_at": "2026-09-17T13:03:06Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4909", "file_type": "pdf", "match_count": 221, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 185, "fields": { "employee": 61, "policy": 5, "occurred_at": "2026-09-26T10:41:55Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "py", "match_count": 207, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "confirmed, escalated", "closed_at": "2026-09-30T15:09:23Z" } }, { "model": "app.incident", "pk": 186, "fields": { "employee": 8, "policy": 8, "occurred_at": "2026-08-28T15:12:52Z", "channel": "external email", "recipient_domain": "partner683.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 29, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-07T11:19:25Z" } }, { "model": "app.incident", "pk": 187, "fields": { "employee": 41, "policy": 8, "occurred_at": "2026-09-11T11:22:18Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 671, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-20T06:09:52Z" } }, { "model": "app.incident", "pk": 188, "fields": { "employee": 3, "policy": 5, "occurred_at": "2026-09-13T12:50:42Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6701", "file_type": "csv", "match_count": 22, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-09-15T04:07:16Z" } }, { "model": "app.incident", "pk": 189, "fields": { "employee": 50, "policy": 1, "occurred_at": "2026-08-07T08:59:10Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7760", "file_type": "zip", "match_count": 1, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-10T10:50:10Z" } }, { "model": "app.incident", "pk": 190, "fields": { "employee": 23, "policy": 2, "occurred_at": "2026-07-31T14:29:48Z", "channel": "chat message", "recipient_domain": "partner089.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 20, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, user coached", "closed_at": "2026-08-06T15:26:30Z" } }, { "model": "app.incident", "pk": 191, "fields": { "employee": 37, "policy": 4, "occurred_at": "2026-09-07T09:40:29Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 37, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "false positive", "closed_at": "2026-09-08T08:21:49Z" } }, { "model": "app.incident", "pk": 192, "fields": { "employee": 35, "policy": 6, "occurred_at": "2026-07-03T16:33:31Z", "channel": "chat message", "recipient_domain": "partner816.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 22, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 193, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-09-21T16:19:46Z", "channel": "chat message", "recipient_domain": "partner224.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 148, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-27T23:29:45Z" } }, { "model": "app.incident", "pk": 194, "fields": { "employee": 67, "policy": 6, "occurred_at": "2026-07-22T17:12:32Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 65, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-26T21:01:04Z" } }, { "model": "app.incident", "pk": 195, "fields": { "employee": 64, "policy": 6, "occurred_at": "2026-08-24T17:50:00Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 168, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-31T14:21:52Z" } }, { "model": "app.incident", "pk": 196, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-08-08T11:30:15Z", "channel": "chat message", "recipient_domain": "partner747.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 356, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-17T21:16:33Z" } }, { "model": "app.incident", "pk": 197, "fields": { "employee": 49, "policy": 8, "occurred_at": "2026-07-13T08:28:03Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 632, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 198, "fields": { "employee": 21, "policy": 6, "occurred_at": "2026-09-11T06:32:36Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-2660", "file_type": "csv", "match_count": 624, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 199, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-07-16T15:06:01Z", "channel": "chat message", "recipient_domain": "partner208.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 254, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, user coached", "closed_at": "2026-07-18T11:11:11Z" } }, { "model": "app.incident", "pk": 200, "fields": { "employee": 17, "policy": 7, "occurred_at": "2026-07-24T11:58:44Z", "channel": "external email", "recipient_domain": "partner278.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 516, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 201, "fields": { "employee": 5, "policy": 5, "occurred_at": "2026-09-02T12:00:26Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 184, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 202, "fields": { "employee": 50, "policy": 2, "occurred_at": "2026-07-24T13:01:21Z", "channel": "chat message", "recipient_domain": "partner675.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 794, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "closed, business need", "closed_at": "2026-08-02T15:42:43Z" } }, { "model": "app.incident", "pk": 203, "fields": { "employee": 14, "policy": 3, "occurred_at": "2026-07-03T20:01:59Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-8359", "file_type": "pdf", "match_count": 304, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-06T05:55:54Z" } }, { "model": "app.incident", "pk": 204, "fields": { "employee": 5, "policy": 5, "occurred_at": "2026-08-18T17:14:20Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "docx", "match_count": 478, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-28T04:38:01Z" } }, { "model": "app.incident", "pk": 205, "fields": { "employee": 20, "policy": 4, "occurred_at": "2026-07-06T14:58:19Z", "channel": "chat message", "recipient_domain": "partner452.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 1, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-14T02:53:53Z" } }, { "model": "app.incident", "pk": 206, "fields": { "employee": 22, "policy": 2, "occurred_at": "2026-09-06T17:01:24Z", "channel": "chat message", "recipient_domain": "partner741.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 734, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-16T16:18:54Z" } }, { "model": "app.incident", "pk": 207, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-08-10T13:40:02Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 430, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 208, "fields": { "employee": 69, "policy": 4, "occurred_at": "2026-08-24T16:14:47Z", "channel": "external email", "recipient_domain": "partner676.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 676, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 209, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-09-28T17:12:40Z", "channel": "external email", "recipient_domain": "partner408.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 63, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 210, "fields": { "employee": 11, "policy": 7, "occurred_at": "2026-08-01T14:58:56Z", "channel": "external email", "recipient_domain": "partner564.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 48, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 211, "fields": { "employee": 12, "policy": 4, "occurred_at": "2026-09-09T21:10:40Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "py", "match_count": 13, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 212, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-08-17T16:32:20Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 182, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-21T08:23:12Z" } }, { "model": "app.incident", "pk": 213, "fields": { "employee": 9, "policy": 8, "occurred_at": "2026-07-15T17:35:27Z", "channel": "external email", "recipient_domain": "partner999.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 354, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 214, "fields": { "employee": 34, "policy": 2, "occurred_at": "2026-09-18T11:16:03Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "zip", "match_count": 114, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 215, "fields": { "employee": 33, "policy": 2, "occurred_at": "2026-08-03T09:45:43Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6701", "file_type": "csv", "match_count": 299, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 216, "fields": { "employee": 45, "policy": 2, "occurred_at": "2026-07-02T19:50:23Z", "channel": "external email", "recipient_domain": "partner355.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 478, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 217, "fields": { "employee": 42, "policy": 4, "occurred_at": "2026-07-26T15:19:07Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6882", "file_type": "txt", "match_count": 93, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-07-27T19:34:02Z" } }, { "model": "app.incident", "pk": 218, "fields": { "employee": 29, "policy": 8, "occurred_at": "2026-09-26T11:12:44Z", "channel": "chat message", "recipient_domain": "partner813.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 100, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-27T17:33:52Z" } }, { "model": "app.incident", "pk": 219, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-15T10:33:23Z", "channel": "external email", "recipient_domain": "partner721.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 91, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 220, "fields": { "employee": 42, "policy": 6, "occurred_at": "2026-07-31T11:04:37Z", "channel": "external email", "recipient_domain": "partner863.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 97, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-08T01:16:18Z" } }, { "model": "app.incident", "pk": 221, "fields": { "employee": 3, "policy": 3, "occurred_at": "2026-08-17T09:09:19Z", "channel": "chat message", "recipient_domain": "partner756.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 583, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-20T02:20:32Z" } }, { "model": "app.incident", "pk": 222, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-08-13T12:33:17Z", "channel": "external email", "recipient_domain": "partner255.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 16, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 223, "fields": { "employee": 10, "policy": 8, "occurred_at": "2026-09-27T11:08:53Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 173, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-09-29T21:23:58Z" } }, { "model": "app.incident", "pk": 224, "fields": { "employee": 3, "policy": 1, "occurred_at": "2026-07-02T09:16:06Z", "channel": "chat message", "recipient_domain": "partner462.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 42, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-04T05:45:43Z" } }, { "model": "app.incident", "pk": 225, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-07-07T14:46:41Z", "channel": "chat message", "recipient_domain": "partner873.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 38, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 226, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-08-28T17:53:26Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 600, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-04T14:16:15Z" } }, { "model": "app.incident", "pk": 227, "fields": { "employee": 17, "policy": 8, "occurred_at": "2026-07-14T14:26:17Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9273", "file_type": "txt", "match_count": 14, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 228, "fields": { "employee": 49, "policy": 2, "occurred_at": "2026-08-29T18:59:43Z", "channel": "external email", "recipient_domain": "partner343.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 105, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 229, "fields": { "employee": 17, "policy": 4, "occurred_at": "2026-09-25T09:05:02Z", "channel": "external email", "recipient_domain": "partner378.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 13, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-27T11:21:24Z" } }, { "model": "app.incident", "pk": 230, "fields": { "employee": 68, "policy": 7, "occurred_at": "2026-09-11T15:26:18Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "xlsx", "match_count": 208, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-15T04:43:47Z" } }, { "model": "app.incident", "pk": 231, "fields": { "employee": 19, "policy": 5, "occurred_at": "2026-07-25T08:00:09Z", "channel": "external email", "recipient_domain": "partner270.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 21, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-25T15:05:15Z" } }, { "model": "app.incident", "pk": 232, "fields": { "employee": 19, "policy": 3, "occurred_at": "2026-07-23T15:03:43Z", "channel": "chat message", "recipient_domain": "partner639.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 2, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-25T04:59:48Z" } }, { "model": "app.incident", "pk": 233, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-09-30T11:34:00Z", "channel": "chat message", "recipient_domain": "partner267.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 349, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-10-02T00:01:40Z" } }, { "model": "app.incident", "pk": 234, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-08-18T01:30:08Z", "channel": "chat message", "recipient_domain": "partner059.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 768, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-25T07:16:59Z" } }, { "model": "app.incident", "pk": 235, "fields": { "employee": 41, "policy": 6, "occurred_at": "2026-09-13T13:19:31Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 765, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-17T14:33:19Z" } }, { "model": "app.incident", "pk": 236, "fields": { "employee": 62, "policy": 5, "occurred_at": "2026-07-18T13:55:31Z", "channel": "chat message", "recipient_domain": "partner927.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 19, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-27T01:24:17Z" } }, { "model": "app.incident", "pk": 237, "fields": { "employee": 63, "policy": 5, "occurred_at": "2026-08-01T10:43:23Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 19, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-10T22:17:15Z" } }, { "model": "app.incident", "pk": 238, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-09-13T11:14:58Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 774, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-13T17:31:55Z" } }, { "model": "app.incident", "pk": 239, "fields": { "employee": 19, "policy": 7, "occurred_at": "2026-07-21T15:43:36Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5277", "file_type": "xlsx", "match_count": 300, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-28T00:09:11Z" } }, { "model": "app.incident", "pk": 240, "fields": { "employee": 62, "policy": 3, "occurred_at": "2026-08-24T13:15:31Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "csv", "match_count": 121, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-28T06:58:43Z" } }, { "model": "app.incident", "pk": 241, "fields": { "employee": 44, "policy": 1, "occurred_at": "2026-09-09T13:25:14Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 108, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 242, "fields": { "employee": 3, "policy": 1, "occurred_at": "2026-07-20T10:45:12Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 155, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 243, "fields": { "employee": 2, "policy": 8, "occurred_at": "2026-09-22T17:24:42Z", "channel": "external email", "recipient_domain": "partner591.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 141, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 244, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-09-11T17:48:46Z", "channel": "external email", "recipient_domain": "partner027.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 1, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-09-18T23:11:05Z" } }, { "model": "app.incident", "pk": 245, "fields": { "employee": 59, "policy": 8, "occurred_at": "2026-07-05T15:11:43Z", "channel": "external email", "recipient_domain": "partner936.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 361, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "confirmed, escalated", "closed_at": "2026-07-05T17:43:30Z" } }, { "model": "app.incident", "pk": 246, "fields": { "employee": 2, "policy": 3, "occurred_at": "2026-07-28T11:26:48Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "csv", "match_count": 15, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-31T17:32:44Z" } }, { "model": "app.incident", "pk": 247, "fields": { "employee": 32, "policy": 7, "occurred_at": "2026-07-12T09:18:47Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3652", "file_type": "csv", "match_count": 345, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-18T14:09:54Z" } }, { "model": "app.incident", "pk": 248, "fields": { "employee": 20, "policy": 5, "occurred_at": "2026-07-23T10:52:11Z", "channel": "external email", "recipient_domain": "partner971.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 103, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-30T03:55:05Z" } }, { "model": "app.incident", "pk": 249, "fields": { "employee": 4, "policy": 4, "occurred_at": "2026-09-06T08:58:57Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6177", "file_type": "csv", "match_count": 317, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "closed, business need", "closed_at": "2026-09-06T12:14:20Z" } }, { "model": "app.incident", "pk": 250, "fields": { "employee": 6, "policy": 3, "occurred_at": "2026-07-21T16:50:01Z", "channel": "external email", "recipient_domain": "partner953.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 9, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 251, "fields": { "employee": 16, "policy": 3, "occurred_at": "2026-08-29T14:51:32Z", "channel": "chat message", "recipient_domain": "partner566.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 702, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-03T11:37:50Z" } }, { "model": "app.incident", "pk": 252, "fields": { "employee": 34, "policy": 4, "occurred_at": "2026-09-18T08:57:07Z", "channel": "chat message", "recipient_domain": "partner020.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 117, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-09-22T15:41:59Z" } }, { "model": "app.incident", "pk": 253, "fields": { "employee": 23, "policy": 2, "occurred_at": "2026-09-04T15:01:50Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 31, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 254, "fields": { "employee": 40, "policy": 2, "occurred_at": "2026-07-20T13:56:08Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 547, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-07-21T07:28:39Z" } }, { "model": "app.incident", "pk": 255, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-07-05T19:58:06Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 703, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 256, "fields": { "employee": 41, "policy": 5, "occurred_at": "2026-09-17T15:42:42Z", "channel": "chat message", "recipient_domain": "partner427.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 691, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 257, "fields": { "employee": 19, "policy": 2, "occurred_at": "2026-09-06T09:18:18Z", "channel": "external email", "recipient_domain": "partner114.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 712, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-09-06T10:50:03Z" } }, { "model": "app.incident", "pk": 258, "fields": { "employee": 60, "policy": 8, "occurred_at": "2026-08-16T15:24:57Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-2284", "file_type": "csv", "match_count": 794, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-25T07:05:45Z" } }, { "model": "app.incident", "pk": 259, "fields": { "employee": 70, "policy": 5, "occurred_at": "2026-09-04T02:28:55Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4018", "file_type": "csv", "match_count": 754, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-07T08:13:00Z" } }, { "model": "app.incident", "pk": 260, "fields": { "employee": 61, "policy": 3, "occurred_at": "2026-08-28T12:28:10Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 228, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-03T11:15:24Z" } }, { "model": "app.incident", "pk": 261, "fields": { "employee": 45, "policy": 8, "occurred_at": "2026-09-24T19:25:38Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 5, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 262, "fields": { "employee": 10, "policy": 4, "occurred_at": "2026-08-04T10:05:02Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "txt", "match_count": 95, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-09T02:35:16Z" } }, { "model": "app.incident", "pk": 263, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-07-14T12:30:11Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 722, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-16T20:58:45Z" } }, { "model": "app.incident", "pk": 264, "fields": { "employee": 37, "policy": 2, "occurred_at": "2026-08-17T17:31:09Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 183, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-27T11:33:15Z" } }, { "model": "app.incident", "pk": 265, "fields": { "employee": 31, "policy": 7, "occurred_at": "2026-07-23T14:33:58Z", "channel": "external email", "recipient_domain": "partner646.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 200, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-27T10:08:26Z" } }, { "model": "app.incident", "pk": 266, "fields": { "employee": 69, "policy": 1, "occurred_at": "2026-08-12T17:25:46Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1244", "file_type": "pdf", "match_count": 497, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-15T23:19:28Z" } }, { "model": "app.incident", "pk": 267, "fields": { "employee": 4, "policy": 8, "occurred_at": "2026-09-26T14:50:43Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "docx", "match_count": 30, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, user coached", "closed_at": "2026-10-04T21:55:15Z" } }, { "model": "app.incident", "pk": 268, "fields": { "employee": 38, "policy": 1, "occurred_at": "2026-09-11T13:22:27Z", "channel": "external email", "recipient_domain": "partner317.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 379, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-19T05:05:58Z" } }, { "model": "app.incident", "pk": 269, "fields": { "employee": 6, "policy": 3, "occurred_at": "2026-07-22T12:22:21Z", "channel": "external email", "recipient_domain": "partner410.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 260, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-30T08:29:00Z" } }, { "model": "app.incident", "pk": 270, "fields": { "employee": 6, "policy": 1, "occurred_at": "2026-09-25T12:02:48Z", "channel": "external email", "recipient_domain": "partner329.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 113, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-10-03T07:33:35Z" } }, { "model": "app.incident", "pk": 271, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-09-22T15:26:37Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 656, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "false positive", "closed_at": "2026-09-22T22:27:49Z" } }, { "model": "app.incident", "pk": 272, "fields": { "employee": 5, "policy": 7, "occurred_at": "2026-08-14T16:15:11Z", "channel": "external email", "recipient_domain": "partner358.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 1, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-20T05:02:35Z" } }, { "model": "app.incident", "pk": 273, "fields": { "employee": 67, "policy": 8, "occurred_at": "2026-07-25T12:38:38Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 168, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-07-27T04:59:20Z" } }, { "model": "app.incident", "pk": 274, "fields": { "employee": 12, "policy": 2, "occurred_at": "2026-08-22T09:29:24Z", "channel": "external email", "recipient_domain": "partner808.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 76, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 275, "fields": { "employee": 24, "policy": 2, "occurred_at": "2026-07-02T13:20:30Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 147, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "false positive", "closed_at": "2026-07-12T10:09:18Z" } }, { "model": "app.incident", "pk": 276, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-29T14:50:22Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 4, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-10-08T16:07:04Z" } }, { "model": "app.incident", "pk": 277, "fields": { "employee": 41, "policy": 1, "occurred_at": "2026-09-05T15:15:18Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7661", "file_type": "csv", "match_count": 482, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-08T03:03:34Z" } }, { "model": "app.incident", "pk": 278, "fields": { "employee": 35, "policy": 1, "occurred_at": "2026-07-31T16:41:38Z", "channel": "external email", "recipient_domain": "partner936.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 12, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-05T22:24:09Z" } }, { "model": "app.incident", "pk": 279, "fields": { "employee": 6, "policy": 2, "occurred_at": "2026-09-26T14:34:40Z", "channel": "external email", "recipient_domain": "partner801.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 162, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-09-27T17:44:23Z" } }, { "model": "app.incident", "pk": 280, "fields": { "employee": 7, "policy": 3, "occurred_at": "2026-08-27T10:36:55Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 8, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-30T22:42:19Z" } }, { "model": "app.incident", "pk": 281, "fields": { "employee": 34, "policy": 7, "occurred_at": "2026-09-17T10:06:17Z", "channel": "external email", "recipient_domain": "partner903.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 308, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-17T23:33:37Z" } }, { "model": "app.incident", "pk": 282, "fields": { "employee": 2, "policy": 8, "occurred_at": "2026-07-22T15:56:57Z", "channel": "external email", "recipient_domain": "partner789.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 14, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-30T21:15:21Z" } }, { "model": "app.incident", "pk": 283, "fields": { "employee": 15, "policy": 7, "occurred_at": "2026-09-20T10:42:43Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 214, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 284, "fields": { "employee": 4, "policy": 3, "occurred_at": "2026-08-10T14:36:19Z", "channel": "chat message", "recipient_domain": "partner240.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 227, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-11T06:19:23Z" } }, { "model": "app.incident", "pk": 285, "fields": { "employee": 40, "policy": 4, "occurred_at": "2026-07-01T12:48:56Z", "channel": "chat message", "recipient_domain": "partner127.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 365, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-03T00:46:16Z" } }, { "model": "app.incident", "pk": 286, "fields": { "employee": 2, "policy": 7, "occurred_at": "2026-09-02T12:54:27Z", "channel": "external email", "recipient_domain": "partner261.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 330, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-04T06:14:41Z" } }, { "model": "app.incident", "pk": 287, "fields": { "employee": 2, "policy": 5, "occurred_at": "2026-08-09T12:32:39Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 183, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-08-15T10:18:28Z" } }, { "model": "app.incident", "pk": 288, "fields": { "employee": 4, "policy": 2, "occurred_at": "2026-08-20T11:56:17Z", "channel": "external email", "recipient_domain": "partner068.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 599, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-26T13:13:26Z" } }, { "model": "app.incident", "pk": 289, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-08-01T08:45:06Z", "channel": "external email", "recipient_domain": "partner366.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 15, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-02T04:45:04Z" } }, { "model": "app.incident", "pk": 290, "fields": { "employee": 64, "policy": 5, "occurred_at": "2026-08-07T09:06:52Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 371, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 291, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-08-22T09:54:02Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3413", "file_type": "zip", "match_count": 338, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-09-01T08:36:37Z" } }, { "model": "app.incident", "pk": 292, "fields": { "employee": 50, "policy": 2, "occurred_at": "2026-09-12T16:14:47Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1795", "file_type": "xlsx", "match_count": 334, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "false positive", "closed_at": "2026-09-16T17:05:04Z" } }, { "model": "app.incident", "pk": 293, "fields": { "employee": 3, "policy": 3, "occurred_at": "2026-09-06T16:55:10Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "pdf", "match_count": 10, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-11T04:21:23Z" } }, { "model": "app.incident", "pk": 294, "fields": { "employee": 9, "policy": 8, "occurred_at": "2026-07-10T14:18:55Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 1, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 295, "fields": { "employee": 33, "policy": 5, "occurred_at": "2026-07-14T17:14:13Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 49, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "confirmed, user coached", "closed_at": "2026-07-23T09:17:54Z" } }, { "model": "app.incident", "pk": 296, "fields": { "employee": 48, "policy": 2, "occurred_at": "2026-07-01T11:59:48Z", "channel": "chat message", "recipient_domain": "partner160.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 331, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-05T06:02:37Z" } }, { "model": "app.incident", "pk": 297, "fields": { "employee": 10, "policy": 1, "occurred_at": "2026-09-17T10:54:10Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-2955", "file_type": "xlsx", "match_count": 309, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-22T04:04:11Z" } }, { "model": "app.incident", "pk": 298, "fields": { "employee": 2, "policy": 8, "occurred_at": "2026-08-01T14:54:19Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 274, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 299, "fields": { "employee": 23, "policy": 7, "occurred_at": "2026-07-09T08:43:14Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6395", "file_type": "xlsx", "match_count": 277, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-12T07:55:36Z" } }, { "model": "app.incident", "pk": 300, "fields": { "employee": 48, "policy": 3, "occurred_at": "2026-08-22T19:49:59Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 448, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-01T19:47:47Z" } }, { "model": "app.incident", "pk": 301, "fields": { "employee": 47, "policy": 8, "occurred_at": "2026-07-11T08:08:44Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 605, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-11T16:39:45Z" } }, { "model": "app.incident", "pk": 302, "fields": { "employee": 55, "policy": 4, "occurred_at": "2026-08-29T08:25:03Z", "channel": "chat message", "recipient_domain": "partner789.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 71, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, escalated", "closed_at": "2026-09-07T08:13:52Z" } }, { "model": "app.incident", "pk": 303, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-07-07T19:41:38Z", "channel": "external email", "recipient_domain": "partner498.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 28, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-07-08T10:35:55Z" } }, { "model": "app.incident", "pk": 304, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-08-13T09:38:07Z", "channel": "external email", "recipient_domain": "partner954.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 12, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-22T13:30:44Z" } }, { "model": "app.incident", "pk": 305, "fields": { "employee": 41, "policy": 7, "occurred_at": "2026-07-01T14:27:07Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 424, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-02T08:25:53Z" } }, { "model": "app.incident", "pk": 306, "fields": { "employee": 9, "policy": 8, "occurred_at": "2026-09-25T17:18:52Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 333, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "confirmed, user coached", "closed_at": "2026-09-25T18:06:58Z" } }, { "model": "app.incident", "pk": 307, "fields": { "employee": 22, "policy": 4, "occurred_at": "2026-08-29T15:37:01Z", "channel": "chat message", "recipient_domain": "partner906.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 225, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-04T20:59:48Z" } }, { "model": "app.incident", "pk": 308, "fields": { "employee": 34, "policy": 2, "occurred_at": "2026-07-20T13:11:39Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 3, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 309, "fields": { "employee": 3, "policy": 7, "occurred_at": "2026-07-29T15:48:19Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 144, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-04T14:25:18Z" } }, { "model": "app.incident", "pk": 310, "fields": { "employee": 9, "policy": 1, "occurred_at": "2026-09-21T10:26:18Z", "channel": "chat message", "recipient_domain": "partner324.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 211, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-22T11:23:51Z" } }, { "model": "app.incident", "pk": 311, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-07-16T14:23:27Z", "channel": "external email", "recipient_domain": "partner840.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 1, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "confirmed, user coached", "closed_at": "2026-07-26T00:06:58Z" } }, { "model": "app.incident", "pk": 312, "fields": { "employee": 10, "policy": 6, "occurred_at": "2026-07-31T09:08:10Z", "channel": "chat message", "recipient_domain": "partner189.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 4, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-10T06:41:12Z" } }, { "model": "app.incident", "pk": 313, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-08-25T08:43:14Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 191, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-03T13:13:08Z" } }, { "model": "app.incident", "pk": 314, "fields": { "employee": 35, "policy": 8, "occurred_at": "2026-09-07T12:05:27Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6817", "file_type": "pdf", "match_count": 53, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-15T10:08:10Z" } }, { "model": "app.incident", "pk": 315, "fields": { "employee": 52, "policy": 5, "occurred_at": "2026-09-18T10:08:28Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 66, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-24T04:06:07Z" } }, { "model": "app.incident", "pk": 316, "fields": { "employee": 5, "policy": 4, "occurred_at": "2026-07-01T19:28:01Z", "channel": "external email", "recipient_domain": "partner791.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 573, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 317, "fields": { "employee": 5, "policy": 1, "occurred_at": "2026-07-13T18:41:35Z", "channel": "external email", "recipient_domain": "partner706.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 30, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-16T15:04:14Z" } }, { "model": "app.incident", "pk": 318, "fields": { "employee": 17, "policy": 2, "occurred_at": "2026-07-26T10:45:39Z", "channel": "external email", "recipient_domain": "partner657.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 359, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "closed, business need", "closed_at": "2026-08-03T23:22:13Z" } }, { "model": "app.incident", "pk": 319, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-08-15T10:35:03Z", "channel": "external email", "recipient_domain": "partner663.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 303, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-21T15:22:29Z" } }, { "model": "app.incident", "pk": 320, "fields": { "employee": 67, "policy": 4, "occurred_at": "2026-07-21T11:13:28Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-2816", "file_type": "pdf", "match_count": 22, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 321, "fields": { "employee": 9, "policy": 3, "occurred_at": "2026-08-24T09:15:04Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 235, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-31T22:28:25Z" } }, { "model": "app.incident", "pk": 322, "fields": { "employee": 21, "policy": 8, "occurred_at": "2026-08-10T16:48:23Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-8753", "file_type": "docx", "match_count": 310, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-16T16:26:35Z" } }, { "model": "app.incident", "pk": 323, "fields": { "employee": 47, "policy": 3, "occurred_at": "2026-08-09T10:07:01Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7613", "file_type": "xlsx", "match_count": 57, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-18T07:02:42Z" } }, { "model": "app.incident", "pk": 324, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-08-14T06:56:38Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 685, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-19T04:16:54Z" } }, { "model": "app.incident", "pk": 325, "fields": { "employee": 24, "policy": 6, "occurred_at": "2026-09-23T09:12:45Z", "channel": "external email", "recipient_domain": "partner410.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 508, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-24T20:38:40Z" } }, { "model": "app.incident", "pk": 326, "fields": { "employee": 30, "policy": 5, "occurred_at": "2026-09-02T14:16:32Z", "channel": "external email", "recipient_domain": "partner017.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 67, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 327, "fields": { "employee": 9, "policy": 8, "occurred_at": "2026-07-07T10:33:00Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 335, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, escalated", "closed_at": "2026-07-10T07:30:03Z" } }, { "model": "app.incident", "pk": 328, "fields": { "employee": 10, "policy": 4, "occurred_at": "2026-09-04T20:40:16Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7253", "file_type": "xlsx", "match_count": 780, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 329, "fields": { "employee": 4, "policy": 3, "occurred_at": "2026-09-07T10:00:14Z", "channel": "external email", "recipient_domain": "partner986.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 460, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-13T18:40:22Z" } }, { "model": "app.incident", "pk": 330, "fields": { "employee": 38, "policy": 2, "occurred_at": "2026-09-08T13:45:12Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 6, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-10T22:17:33Z" } }, { "model": "app.incident", "pk": 331, "fields": { "employee": 12, "policy": 5, "occurred_at": "2026-07-15T09:14:22Z", "channel": "external email", "recipient_domain": "partner085.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 1, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 332, "fields": { "employee": 3, "policy": 7, "occurred_at": "2026-08-09T11:59:25Z", "channel": "chat message", "recipient_domain": "partner932.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 782, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-11T22:19:41Z" } }, { "model": "app.incident", "pk": 333, "fields": { "employee": 13, "policy": 3, "occurred_at": "2026-08-28T17:42:46Z", "channel": "chat message", "recipient_domain": "partner204.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 19, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-04T18:10:19Z" } }, { "model": "app.incident", "pk": 334, "fields": { "employee": 12, "policy": 3, "occurred_at": "2026-07-19T11:49:04Z", "channel": "chat message", "recipient_domain": "partner217.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 706, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-27T17:44:14Z" } }, { "model": "app.incident", "pk": 335, "fields": { "employee": 37, "policy": 4, "occurred_at": "2026-08-23T12:01:14Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 613, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-29T06:47:16Z" } }, { "model": "app.incident", "pk": 336, "fields": { "employee": 47, "policy": 5, "occurred_at": "2026-07-17T10:30:56Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 126, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-23T21:06:08Z" } }, { "model": "app.incident", "pk": 337, "fields": { "employee": 11, "policy": 6, "occurred_at": "2026-09-21T16:18:33Z", "channel": "external email", "recipient_domain": "partner719.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 7, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-26T20:36:31Z" } }, { "model": "app.incident", "pk": 338, "fields": { "employee": 8, "policy": 7, "occurred_at": "2026-08-20T08:45:21Z", "channel": "external email", "recipient_domain": "partner003.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 119, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-25T08:36:27Z" } }, { "model": "app.incident", "pk": 339, "fields": { "employee": 34, "policy": 1, "occurred_at": "2026-08-23T16:48:15Z", "channel": "external email", "recipient_domain": "partner779.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 201, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-27T03:23:13Z" } }, { "model": "app.incident", "pk": 340, "fields": { "employee": 3, "policy": 2, "occurred_at": "2026-09-21T14:27:57Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 4, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-28T07:18:22Z" } }, { "model": "app.incident", "pk": 341, "fields": { "employee": 32, "policy": 6, "occurred_at": "2026-09-29T15:13:25Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 440, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-30T14:42:21Z" } }, { "model": "app.incident", "pk": 342, "fields": { "employee": 2, "policy": 3, "occurred_at": "2026-08-26T11:20:52Z", "channel": "external email", "recipient_domain": "partner300.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 677, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-28T05:35:09Z" } }, { "model": "app.incident", "pk": 343, "fields": { "employee": 55, "policy": 2, "occurred_at": "2026-08-17T16:04:10Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 94, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 344, "fields": { "employee": 30, "policy": 5, "occurred_at": "2026-08-02T14:58:12Z", "channel": "external email", "recipient_domain": "partner754.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 299, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-04T23:56:25Z" } }, { "model": "app.incident", "pk": 345, "fields": { "employee": 36, "policy": 4, "occurred_at": "2026-07-31T13:00:36Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-0526", "file_type": "csv", "match_count": 7, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 346, "fields": { "employee": 27, "policy": 6, "occurred_at": "2026-08-13T11:32:26Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 559, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-23T02:31:52Z" } }, { "model": "app.incident", "pk": 347, "fields": { "employee": 31, "policy": 5, "occurred_at": "2026-09-08T13:30:29Z", "channel": "external email", "recipient_domain": "partner919.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 82, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-09-13T00:10:33Z" } }, { "model": "app.incident", "pk": 348, "fields": { "employee": 33, "policy": 4, "occurred_at": "2026-08-15T16:09:12Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 710, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-19T06:59:49Z" } }, { "model": "app.incident", "pk": 349, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-08-18T15:33:19Z", "channel": "chat message", "recipient_domain": "partner055.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 7, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-08-21T21:52:58Z" } }, { "model": "app.incident", "pk": 350, "fields": { "employee": 66, "policy": 5, "occurred_at": "2026-08-27T12:36:35Z", "channel": "external email", "recipient_domain": "partner931.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 1, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-09-04T10:18:21Z" } }, { "model": "app.incident", "pk": 351, "fields": { "employee": 10, "policy": 1, "occurred_at": "2026-08-20T13:43:27Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 665, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-21T05:06:32Z" } }, { "model": "app.incident", "pk": 352, "fields": { "employee": 51, "policy": 1, "occurred_at": "2026-07-03T15:54:23Z", "channel": "chat message", "recipient_domain": "partner702.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 3, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-04T15:14:57Z" } }, { "model": "app.incident", "pk": 353, "fields": { "employee": 4, "policy": 4, "occurred_at": "2026-09-06T15:20:02Z", "channel": "chat message", "recipient_domain": "partner250.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 411, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-09-07T14:03:03Z" } }, { "model": "app.incident", "pk": 354, "fields": { "employee": 44, "policy": 7, "occurred_at": "2026-09-27T16:55:19Z", "channel": "external email", "recipient_domain": "partner825.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 93, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-10-06T22:11:55Z" } }, { "model": "app.incident", "pk": 355, "fields": { "employee": 13, "policy": 7, "occurred_at": "2026-07-02T13:27:27Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 114, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-09T14:09:26Z" } }, { "model": "app.incident", "pk": 356, "fields": { "employee": 19, "policy": 5, "occurred_at": "2026-07-11T09:21:25Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "xlsx", "match_count": 41, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 357, "fields": { "employee": 62, "policy": 7, "occurred_at": "2026-07-09T12:35:45Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "txt", "match_count": 337, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-14T02:30:11Z" } }, { "model": "app.incident", "pk": 358, "fields": { "employee": 6, "policy": 6, "occurred_at": "2026-07-20T08:41:12Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "zip", "match_count": 612, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-28T20:34:10Z" } }, { "model": "app.incident", "pk": 359, "fields": { "employee": 31, "policy": 6, "occurred_at": "2026-09-12T10:43:30Z", "channel": "chat message", "recipient_domain": "partner115.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 86, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 360, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-02T13:46:04Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3568", "file_type": "docx", "match_count": 206, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-08T21:22:02Z" } }, { "model": "app.incident", "pk": 361, "fields": { "employee": 66, "policy": 6, "occurred_at": "2026-07-07T16:42:31Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "pdf", "match_count": 796, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 362, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-09-23T15:26:42Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-8654", "file_type": "docx", "match_count": 653, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 363, "fields": { "employee": 60, "policy": 1, "occurred_at": "2026-08-14T20:47:00Z", "channel": "external email", "recipient_domain": "partner290.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 506, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-20T04:58:00Z" } }, { "model": "app.incident", "pk": 364, "fields": { "employee": 23, "policy": 2, "occurred_at": "2026-07-16T13:30:44Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 2, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-07-24T20:38:31Z" } }, { "model": "app.incident", "pk": 365, "fields": { "employee": 11, "policy": 6, "occurred_at": "2026-07-08T17:05:52Z", "channel": "external email", "recipient_domain": "partner023.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 2, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-14T03:11:18Z" } }, { "model": "app.incident", "pk": 366, "fields": { "employee": 11, "policy": 8, "occurred_at": "2026-09-01T11:09:33Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 65, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-02T00:38:35Z" } }, { "model": "app.incident", "pk": 367, "fields": { "employee": 55, "policy": 8, "occurred_at": "2026-09-10T10:00:12Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 221, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, user coached", "closed_at": "2026-09-12T12:53:46Z" } }, { "model": "app.incident", "pk": 368, "fields": { "employee": 28, "policy": 8, "occurred_at": "2026-09-16T14:05:36Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 562, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 369, "fields": { "employee": 5, "policy": 5, "occurred_at": "2026-07-01T10:19:08Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 85, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-07-11T02:22:42Z" } }, { "model": "app.incident", "pk": 370, "fields": { "employee": 11, "policy": 8, "occurred_at": "2026-08-30T13:46:00Z", "channel": "external email", "recipient_domain": "partner623.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 2, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 371, "fields": { "employee": 15, "policy": 7, "occurred_at": "2026-08-28T11:27:01Z", "channel": "chat message", "recipient_domain": "partner294.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 144, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-30T21:05:57Z" } }, { "model": "app.incident", "pk": 372, "fields": { "employee": 44, "policy": 7, "occurred_at": "2026-09-20T18:50:39Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4687", "file_type": "xlsx", "match_count": 10, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-26T22:36:16Z" } }, { "model": "app.incident", "pk": 373, "fields": { "employee": 7, "policy": 5, "occurred_at": "2026-07-16T12:01:03Z", "channel": "external email", "recipient_domain": "partner659.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 1, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-18T05:10:01Z" } }, { "model": "app.incident", "pk": 374, "fields": { "employee": 2, "policy": 3, "occurred_at": "2026-09-07T15:42:14Z", "channel": "external email", "recipient_domain": "partner204.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 1, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-14T16:13:49Z" } }, { "model": "app.incident", "pk": 375, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-09-22T07:46:06Z", "channel": "external email", "recipient_domain": "partner455.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 441, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-27T11:18:49Z" } }, { "model": "app.incident", "pk": 376, "fields": { "employee": 23, "policy": 7, "occurred_at": "2026-07-21T12:00:43Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 128, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-24T22:06:41Z" } }, { "model": "app.incident", "pk": 377, "fields": { "employee": 2, "policy": 5, "occurred_at": "2026-07-10T13:57:54Z", "channel": "external email", "recipient_domain": "partner006.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 326, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "closed, business need", "closed_at": "2026-07-16T21:25:21Z" } }, { "model": "app.incident", "pk": 378, "fields": { "employee": 32, "policy": 3, "occurred_at": "2026-09-04T17:50:11Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "zip", "match_count": 1, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-10T16:13:34Z" } }, { "model": "app.incident", "pk": 379, "fields": { "employee": 4, "policy": 5, "occurred_at": "2026-08-16T09:05:01Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "zip", "match_count": 96, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 380, "fields": { "employee": 4, "policy": 1, "occurred_at": "2026-09-22T15:02:58Z", "channel": "chat message", "recipient_domain": "partner571.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 7, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 381, "fields": { "employee": 12, "policy": 6, "occurred_at": "2026-07-14T18:36:10Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-8800", "file_type": "xlsx", "match_count": 156, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-20T21:12:04Z" } }, { "model": "app.incident", "pk": 382, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-08-09T09:25:23Z", "channel": "external email", "recipient_domain": "partner340.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 160, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "false positive", "closed_at": "2026-08-16T00:33:59Z" } }, { "model": "app.incident", "pk": 383, "fields": { "employee": 27, "policy": 3, "occurred_at": "2026-08-27T09:10:26Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "csv", "match_count": 531, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-05T23:10:49Z" } }, { "model": "app.incident", "pk": 384, "fields": { "employee": 51, "policy": 6, "occurred_at": "2026-08-17T11:41:12Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 576, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 385, "fields": { "employee": 31, "policy": 2, "occurred_at": "2026-09-07T11:17:55Z", "channel": "external email", "recipient_domain": "partner846.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 505, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 386, "fields": { "employee": 2, "policy": 8, "occurred_at": "2026-08-29T10:59:44Z", "channel": "external email", "recipient_domain": "partner144.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 42, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, escalated", "closed_at": "2026-08-30T15:15:33Z" } }, { "model": "app.incident", "pk": 387, "fields": { "employee": 3, "policy": 4, "occurred_at": "2026-07-03T12:18:33Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 664, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-06T02:26:19Z" } }, { "model": "app.incident", "pk": 388, "fields": { "employee": 63, "policy": 7, "occurred_at": "2026-09-24T09:54:06Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "xlsx", "match_count": 479, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-10-02T16:25:36Z" } }, { "model": "app.incident", "pk": 389, "fields": { "employee": 41, "policy": 7, "occurred_at": "2026-08-03T12:00:39Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 320, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-03T21:28:45Z" } }, { "model": "app.incident", "pk": 390, "fields": { "employee": 33, "policy": 3, "occurred_at": "2026-09-05T11:08:55Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 2, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-10T14:21:31Z" } }, { "model": "app.incident", "pk": 391, "fields": { "employee": 17, "policy": 6, "occurred_at": "2026-08-07T12:19:23Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "zip", "match_count": 181, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-15T19:29:01Z" } }, { "model": "app.incident", "pk": 392, "fields": { "employee": 11, "policy": 2, "occurred_at": "2026-09-10T13:15:10Z", "channel": "external email", "recipient_domain": "partner181.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 580, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-16T11:30:24Z" } }, { "model": "app.incident", "pk": 393, "fields": { "employee": 18, "policy": 7, "occurred_at": "2026-07-10T09:06:49Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3633", "file_type": "xlsx", "match_count": 658, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-14T02:30:43Z" } }, { "model": "app.incident", "pk": 394, "fields": { "employee": 6, "policy": 2, "occurred_at": "2026-09-13T13:44:16Z", "channel": "external email", "recipient_domain": "partner353.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 321, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-15T01:31:43Z" } }, { "model": "app.incident", "pk": 395, "fields": { "employee": 4, "policy": 3, "occurred_at": "2026-08-08T15:58:41Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5483", "file_type": "xlsx", "match_count": 58, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-09T19:30:50Z" } }, { "model": "app.incident", "pk": 396, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-09-24T12:52:30Z", "channel": "external email", "recipient_domain": "partner981.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 203, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 397, "fields": { "employee": 5, "policy": 3, "occurred_at": "2026-09-20T14:38:44Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 771, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-23T15:32:05Z" } }, { "model": "app.incident", "pk": 398, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-08-20T19:51:13Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 99, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-29T02:24:31Z" } }, { "model": "app.incident", "pk": 399, "fields": { "employee": 10, "policy": 5, "occurred_at": "2026-08-16T09:34:42Z", "channel": "external email", "recipient_domain": "partner570.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 68, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "confirmed, user coached", "closed_at": "2026-08-23T10:48:32Z" } }, { "model": "app.incident", "pk": 400, "fields": { "employee": 45, "policy": 1, "occurred_at": "2026-07-24T12:12:10Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 109, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-03T07:09:13Z" } }, { "model": "app.incident", "pk": 401, "fields": { "employee": 6, "policy": 1, "occurred_at": "2026-08-21T21:59:41Z", "channel": "external email", "recipient_domain": "partner886.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 58, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-28T02:02:55Z" } }, { "model": "app.incident", "pk": 402, "fields": { "employee": 28, "policy": 7, "occurred_at": "2026-09-15T09:49:01Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 376, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-15T11:25:44Z" } }, { "model": "app.incident", "pk": 403, "fields": { "employee": 56, "policy": 3, "occurred_at": "2026-07-29T09:35:52Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 39, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-05T11:00:00Z" } }, { "model": "app.incident", "pk": 404, "fields": { "employee": 34, "policy": 5, "occurred_at": "2026-08-23T17:48:24Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 102, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 405, "fields": { "employee": 69, "policy": 7, "occurred_at": "2026-09-01T13:10:19Z", "channel": "external email", "recipient_domain": "partner150.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 461, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-07T10:27:56Z" } }, { "model": "app.incident", "pk": 406, "fields": { "employee": 2, "policy": 8, "occurred_at": "2026-07-13T10:47:11Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 1, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-22T15:13:58Z" } }, { "model": "app.incident", "pk": 407, "fields": { "employee": 5, "policy": 5, "occurred_at": "2026-09-16T12:44:41Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-8847", "file_type": "xlsx", "match_count": 103, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 408, "fields": { "employee": 4, "policy": 2, "occurred_at": "2026-07-05T15:43:57Z", "channel": "external email", "recipient_domain": "partner686.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 56, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-14T01:59:25Z" } }, { "model": "app.incident", "pk": 409, "fields": { "employee": 21, "policy": 4, "occurred_at": "2026-08-13T10:40:08Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 243, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-22T02:33:36Z" } }, { "model": "app.incident", "pk": 410, "fields": { "employee": 2, "policy": 4, "occurred_at": "2026-07-14T11:13:49Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 77, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-07-14T21:44:42Z" } }, { "model": "app.incident", "pk": 411, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-08-13T09:11:04Z", "channel": "chat message", "recipient_domain": "partner798.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 468, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-08-20T14:53:09Z" } }, { "model": "app.incident", "pk": 412, "fields": { "employee": 4, "policy": 3, "occurred_at": "2026-09-16T15:18:34Z", "channel": "external email", "recipient_domain": "partner522.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 51, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-19T22:40:46Z" } }, { "model": "app.incident", "pk": 413, "fields": { "employee": 3, "policy": 2, "occurred_at": "2026-08-11T20:20:22Z", "channel": "external email", "recipient_domain": "partner468.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 58, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-08-21T19:00:14Z" } }, { "model": "app.incident", "pk": 414, "fields": { "employee": 11, "policy": 7, "occurred_at": "2026-09-27T11:35:07Z", "channel": "chat message", "recipient_domain": "partner695.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 56, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-27T17:28:07Z" } }, { "model": "app.incident", "pk": 415, "fields": { "employee": 17, "policy": 7, "occurred_at": "2026-08-04T08:51:22Z", "channel": "external email", "recipient_domain": "partner895.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 513, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-12T17:49:35Z" } }, { "model": "app.incident", "pk": 416, "fields": { "employee": 37, "policy": 6, "occurred_at": "2026-08-31T16:51:51Z", "channel": "external email", "recipient_domain": "partner507.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 603, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-02T10:17:20Z" } }, { "model": "app.incident", "pk": 417, "fields": { "employee": 50, "policy": 7, "occurred_at": "2026-08-22T12:57:55Z", "channel": "external email", "recipient_domain": "partner863.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 640, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-28T13:36:03Z" } }, { "model": "app.incident", "pk": 418, "fields": { "employee": 61, "policy": 8, "occurred_at": "2026-07-27T10:30:33Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "xlsx", "match_count": 67, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "closed, business need", "closed_at": "2026-07-28T16:46:55Z" } }, { "model": "app.incident", "pk": 419, "fields": { "employee": 15, "policy": 4, "occurred_at": "2026-09-18T15:44:25Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1468", "file_type": "xlsx", "match_count": 468, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "confirmed, user coached", "closed_at": "2026-09-23T22:32:41Z" } }, { "model": "app.incident", "pk": 420, "fields": { "employee": 43, "policy": 5, "occurred_at": "2026-08-02T09:41:45Z", "channel": "external email", "recipient_domain": "partner287.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 274, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-08-11T21:57:13Z" } }, { "model": "app.incident", "pk": 421, "fields": { "employee": 40, "policy": 2, "occurred_at": "2026-08-10T17:41:11Z", "channel": "external email", "recipient_domain": "partner016.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 534, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "confirmed, user coached", "closed_at": "2026-08-20T08:28:58Z" } }, { "model": "app.incident", "pk": 422, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-08-08T10:24:04Z", "channel": "external email", "recipient_domain": "partner171.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 27, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-13T13:26:59Z" } }, { "model": "app.incident", "pk": 423, "fields": { "employee": 11, "policy": 7, "occurred_at": "2026-09-13T13:37:45Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "zip", "match_count": 4, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-21T23:41:14Z" } }, { "model": "app.incident", "pk": 424, "fields": { "employee": 44, "policy": 6, "occurred_at": "2026-07-03T12:41:04Z", "channel": "external email", "recipient_domain": "partner849.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 5, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 425, "fields": { "employee": 3, "policy": 4, "occurred_at": "2026-07-19T13:23:29Z", "channel": "external email", "recipient_domain": "partner007.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 5, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 426, "fields": { "employee": 6, "policy": 2, "occurred_at": "2026-07-21T19:29:37Z", "channel": "external email", "recipient_domain": "partner808.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 1, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-28T04:05:37Z" } }, { "model": "app.incident", "pk": 427, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-07-29T13:33:44Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-2230", "file_type": "docx", "match_count": 46, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-03T04:28:41Z" } }, { "model": "app.incident", "pk": 428, "fields": { "employee": 6, "policy": 1, "occurred_at": "2026-08-30T11:54:32Z", "channel": "external email", "recipient_domain": "partner096.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 180, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-07T10:50:21Z" } }, { "model": "app.incident", "pk": 429, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-08-17T14:21:45Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 506, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-08-18T15:53:09Z" } }, { "model": "app.incident", "pk": 430, "fields": { "employee": 70, "policy": 7, "occurred_at": "2026-07-04T10:52:36Z", "channel": "external email", "recipient_domain": "partner478.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 651, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-06T01:49:29Z" } }, { "model": "app.incident", "pk": 431, "fields": { "employee": 2, "policy": 1, "occurred_at": "2026-08-27T10:37:22Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "py", "match_count": 27, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 432, "fields": { "employee": 22, "policy": 8, "occurred_at": "2026-09-01T15:06:24Z", "channel": "external email", "recipient_domain": "partner165.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 751, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-09-06T01:19:14Z" } }, { "model": "app.incident", "pk": 433, "fields": { "employee": 13, "policy": 1, "occurred_at": "2026-07-26T17:29:03Z", "channel": "external email", "recipient_domain": "partner646.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 92, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-26T17:30:37Z" } }, { "model": "app.incident", "pk": 434, "fields": { "employee": 30, "policy": 5, "occurred_at": "2026-08-21T15:27:15Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 15, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-31T13:45:58Z" } }, { "model": "app.incident", "pk": 435, "fields": { "employee": 17, "policy": 3, "occurred_at": "2026-07-07T17:16:17Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 672, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 436, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-02T14:25:58Z", "channel": "external email", "recipient_domain": "partner150.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 178, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 437, "fields": { "employee": 33, "policy": 4, "occurred_at": "2026-08-21T11:32:57Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-8423", "file_type": "zip", "match_count": 286, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-26T09:47:29Z" } }, { "model": "app.incident", "pk": 438, "fields": { "employee": 4, "policy": 5, "occurred_at": "2026-09-06T13:54:18Z", "channel": "external email", "recipient_domain": "partner853.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 25, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 439, "fields": { "employee": 62, "policy": 1, "occurred_at": "2026-07-11T15:44:12Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 13, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 440, "fields": { "employee": 8, "policy": 1, "occurred_at": "2026-08-02T09:10:59Z", "channel": "external email", "recipient_domain": "partner718.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 160, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-11T02:24:32Z" } }, { "model": "app.incident", "pk": 441, "fields": { "employee": 59, "policy": 4, "occurred_at": "2026-07-25T09:35:58Z", "channel": "external email", "recipient_domain": "partner579.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 6, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "confirmed, user coached", "closed_at": "2026-07-31T06:51:37Z" } }, { "model": "app.incident", "pk": 442, "fields": { "employee": 16, "policy": 2, "occurred_at": "2026-08-22T09:08:35Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 95, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-22T19:06:56Z" } }, { "model": "app.incident", "pk": 443, "fields": { "employee": 35, "policy": 1, "occurred_at": "2026-08-07T14:44:16Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7460", "file_type": "pdf", "match_count": 466, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-10T15:41:01Z" } }, { "model": "app.incident", "pk": 444, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-09-29T15:07:12Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-0233", "file_type": "pdf", "match_count": 550, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-30T20:20:53Z" } }, { "model": "app.incident", "pk": 445, "fields": { "employee": 2, "policy": 1, "occurred_at": "2026-07-19T03:07:23Z", "channel": "external email", "recipient_domain": "partner487.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 400, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-25T04:58:48Z" } }, { "model": "app.incident", "pk": 446, "fields": { "employee": 31, "policy": 5, "occurred_at": "2026-08-20T09:33:19Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 436, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 447, "fields": { "employee": 20, "policy": 7, "occurred_at": "2026-08-03T14:23:53Z", "channel": "chat message", "recipient_domain": "partner839.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 26, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 448, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-09-13T16:22:57Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "zip", "match_count": 278, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 449, "fields": { "employee": 2, "policy": 5, "occurred_at": "2026-07-12T09:22:39Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "docx", "match_count": 637, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 450, "fields": { "employee": 61, "policy": 5, "occurred_at": "2026-09-06T13:43:04Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 289, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, escalated", "closed_at": "2026-09-09T05:18:49Z" } }, { "model": "app.incident", "pk": 451, "fields": { "employee": 60, "policy": 8, "occurred_at": "2026-08-11T12:25:31Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-0805", "file_type": "docx", "match_count": 782, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-21T00:16:25Z" } }, { "model": "app.incident", "pk": 452, "fields": { "employee": 40, "policy": 7, "occurred_at": "2026-09-19T14:40:04Z", "channel": "external email", "recipient_domain": "partner358.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 444, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-19T23:08:20Z" } }, { "model": "app.incident", "pk": 453, "fields": { "employee": 66, "policy": 8, "occurred_at": "2026-09-28T10:56:20Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 349, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-10-03T20:03:48Z" } }, { "model": "app.incident", "pk": 454, "fields": { "employee": 13, "policy": 5, "occurred_at": "2026-08-17T13:39:30Z", "channel": "chat message", "recipient_domain": "partner112.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 756, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 455, "fields": { "employee": 36, "policy": 7, "occurred_at": "2026-09-25T11:35:05Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 150, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-10-04T13:42:40Z" } }, { "model": "app.incident", "pk": 456, "fields": { "employee": 2, "policy": 6, "occurred_at": "2026-08-15T16:54:12Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "pdf", "match_count": 565, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-23T01:28:51Z" } }, { "model": "app.incident", "pk": 457, "fields": { "employee": 53, "policy": 6, "occurred_at": "2026-09-15T15:06:50Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 681, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 458, "fields": { "employee": 6, "policy": 3, "occurred_at": "2026-08-22T11:49:54Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1374", "file_type": "csv", "match_count": 583, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-01T04:12:04Z" } }, { "model": "app.incident", "pk": 459, "fields": { "employee": 53, "policy": 3, "occurred_at": "2026-08-07T14:11:01Z", "channel": "external email", "recipient_domain": "partner635.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 625, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-08T05:51:43Z" } }, { "model": "app.incident", "pk": 460, "fields": { "employee": 56, "policy": 3, "occurred_at": "2026-09-28T12:31:44Z", "channel": "external email", "recipient_domain": "partner060.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 303, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-10-06T15:31:07Z" } }, { "model": "app.incident", "pk": 461, "fields": { "employee": 7, "policy": 2, "occurred_at": "2026-07-15T11:30:58Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9779", "file_type": "xlsx", "match_count": 110, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "false positive", "closed_at": "2026-07-20T13:27:22Z" } }, { "model": "app.incident", "pk": 462, "fields": { "employee": 10, "policy": 1, "occurred_at": "2026-07-26T17:54:06Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "csv", "match_count": 538, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 463, "fields": { "employee": 63, "policy": 8, "occurred_at": "2026-09-29T17:34:26Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 340, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 464, "fields": { "employee": 37, "policy": 2, "occurred_at": "2026-09-14T14:09:24Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 33, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-20T00:46:44Z" } }, { "model": "app.incident", "pk": 465, "fields": { "employee": 9, "policy": 2, "occurred_at": "2026-09-13T18:42:40Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6498", "file_type": "docx", "match_count": 216, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-09-23T02:41:59Z" } }, { "model": "app.incident", "pk": 466, "fields": { "employee": 1, "policy": 6, "occurred_at": "2026-09-03T10:24:16Z", "channel": "external email", "recipient_domain": "partner790.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 136, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 467, "fields": { "employee": 45, "policy": 4, "occurred_at": "2026-07-09T15:56:25Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 31, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-15T03:03:25Z" } }, { "model": "app.incident", "pk": 468, "fields": { "employee": 7, "policy": 7, "occurred_at": "2026-08-01T14:40:32Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7623", "file_type": "xlsx", "match_count": 124, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-09T03:53:53Z" } }, { "model": "app.incident", "pk": 469, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-07-25T15:20:33Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 14, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-08-04T07:25:38Z" } }, { "model": "app.incident", "pk": 470, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-08-12T14:08:05Z", "channel": "external email", "recipient_domain": "partner028.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 559, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-17T03:33:48Z" } }, { "model": "app.incident", "pk": 471, "fields": { "employee": 59, "policy": 1, "occurred_at": "2026-08-24T13:14:35Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 65, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-28T13:48:23Z" } }, { "model": "app.incident", "pk": 472, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-08-16T10:34:00Z", "channel": "external email", "recipient_domain": "partner975.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 558, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-23T11:04:13Z" } }, { "model": "app.incident", "pk": 473, "fields": { "employee": 37, "policy": 8, "occurred_at": "2026-09-13T13:41:19Z", "channel": "external email", "recipient_domain": "partner397.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 475, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-16T17:04:25Z" } }, { "model": "app.incident", "pk": 474, "fields": { "employee": 12, "policy": 1, "occurred_at": "2026-09-07T14:42:19Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7959", "file_type": "csv", "match_count": 690, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-12T09:29:22Z" } }, { "model": "app.incident", "pk": 475, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-07-13T15:43:28Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 717, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 476, "fields": { "employee": 36, "policy": 4, "occurred_at": "2026-09-14T10:19:19Z", "channel": "chat message", "recipient_domain": "partner041.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 379, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, escalated", "closed_at": "2026-09-20T15:05:54Z" } }, { "model": "app.incident", "pk": 477, "fields": { "employee": 45, "policy": 3, "occurred_at": "2026-07-16T14:37:27Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "csv", "match_count": 13, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-22T00:12:28Z" } }, { "model": "app.incident", "pk": 478, "fields": { "employee": 15, "policy": 6, "occurred_at": "2026-07-20T22:28:32Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 774, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-21T07:21:51Z" } }, { "model": "app.incident", "pk": 479, "fields": { "employee": 2, "policy": 2, "occurred_at": "2026-09-27T22:01:57Z", "channel": "chat message", "recipient_domain": "partner916.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 552, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "closed, business need", "closed_at": "2026-09-28T12:21:07Z" } }, { "model": "app.incident", "pk": 480, "fields": { "employee": 23, "policy": 1, "occurred_at": "2026-08-24T07:33:57Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "xlsx", "match_count": 667, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-25T11:24:34Z" } }, { "model": "app.incident", "pk": 481, "fields": { "employee": 26, "policy": 7, "occurred_at": "2026-08-18T13:17:40Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9839", "file_type": "txt", "match_count": 1, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-27T21:04:26Z" } }, { "model": "app.incident", "pk": 482, "fields": { "employee": 9, "policy": 7, "occurred_at": "2026-07-11T16:38:57Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-9137", "file_type": "py", "match_count": 95, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-20T07:55:56Z" } }, { "model": "app.incident", "pk": 483, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-08-16T12:35:53Z", "channel": "external email", "recipient_domain": "partner703.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 326, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-17T10:27:46Z" } }, { "model": "app.incident", "pk": 484, "fields": { "employee": 12, "policy": 5, "occurred_at": "2026-08-10T15:07:16Z", "channel": "external email", "recipient_domain": "partner648.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 70, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-12T00:39:01Z" } }, { "model": "app.incident", "pk": 485, "fields": { "employee": 51, "policy": 8, "occurred_at": "2026-07-07T12:29:50Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 289, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-09T01:50:10Z" } }, { "model": "app.incident", "pk": 486, "fields": { "employee": 18, "policy": 1, "occurred_at": "2026-07-19T14:06:59Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "zip", "match_count": 329, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 487, "fields": { "employee": 43, "policy": 1, "occurred_at": "2026-09-17T15:42:10Z", "channel": "external email", "recipient_domain": "partner119.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 412, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-18T16:53:22Z" } }, { "model": "app.incident", "pk": 488, "fields": { "employee": 44, "policy": 7, "occurred_at": "2026-07-03T17:59:19Z", "channel": "external email", "recipient_domain": "partner268.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 2, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-05T18:28:32Z" } }, { "model": "app.incident", "pk": 489, "fields": { "employee": 32, "policy": 3, "occurred_at": "2026-07-30T14:04:20Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "csv", "match_count": 670, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-02T16:30:28Z" } }, { "model": "app.incident", "pk": 490, "fields": { "employee": 21, "policy": 4, "occurred_at": "2026-08-24T11:56:51Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 67, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-27T04:14:48Z" } }, { "model": "app.incident", "pk": 491, "fields": { "employee": 41, "policy": 6, "occurred_at": "2026-07-07T15:06:59Z", "channel": "external email", "recipient_domain": "partner610.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 159, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 492, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-07-19T07:29:52Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-6040", "file_type": "xlsx", "match_count": 301, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-07-23T00:40:13Z" } }, { "model": "app.incident", "pk": 493, "fields": { "employee": 11, "policy": 1, "occurred_at": "2026-07-21T13:03:24Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 46, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 494, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-09-21T12:43:23Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "csv", "match_count": 4, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-10-01T03:05:25Z" } }, { "model": "app.incident", "pk": 495, "fields": { "employee": 52, "policy": 5, "occurred_at": "2026-07-11T07:07:52Z", "channel": "external email", "recipient_domain": "partner386.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 124, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-07-12T22:14:31Z" } }, { "model": "app.incident", "pk": 496, "fields": { "employee": 17, "policy": 8, "occurred_at": "2026-09-12T10:30:31Z", "channel": "external email", "recipient_domain": "partner798.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 446, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-09-17T12:23:00Z" } }, { "model": "app.incident", "pk": 497, "fields": { "employee": 3, "policy": 6, "occurred_at": "2026-07-02T12:33:21Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 18, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 498, "fields": { "employee": 54, "policy": 3, "occurred_at": "2026-08-18T12:22:17Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4114", "file_type": "zip", "match_count": 22, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-27T10:07:28Z" } }, { "model": "app.incident", "pk": 499, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-07-21T10:30:24Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "zip", "match_count": 614, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 500, "fields": { "employee": 28, "policy": 2, "occurred_at": "2026-09-20T09:05:03Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 610, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-20T20:27:20Z" } }, { "model": "app.incident", "pk": 501, "fields": { "employee": 10, "policy": 7, "occurred_at": "2026-09-15T10:26:02Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1045", "file_type": "xlsx", "match_count": 36, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-23T02:56:05Z" } }, { "model": "app.incident", "pk": 502, "fields": { "employee": 3, "policy": 5, "occurred_at": "2026-07-09T10:27:30Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 286, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-07-19T08:14:05Z" } }, { "model": "app.incident", "pk": 503, "fields": { "employee": 6, "policy": 8, "occurred_at": "2026-09-13T16:49:14Z", "channel": "external email", "recipient_domain": "partner450.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 20, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-21T23:36:27Z" } }, { "model": "app.incident", "pk": 504, "fields": { "employee": 4, "policy": 3, "occurred_at": "2026-07-06T13:33:38Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "xlsx", "match_count": 28, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-09T17:36:06Z" } }, { "model": "app.incident", "pk": 505, "fields": { "employee": 3, "policy": 5, "occurred_at": "2026-07-17T09:37:57Z", "channel": "external email", "recipient_domain": "partner371.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 165, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, escalated", "closed_at": "2026-07-23T21:14:34Z" } }, { "model": "app.incident", "pk": 506, "fields": { "employee": 2, "policy": 4, "occurred_at": "2026-08-20T14:11:07Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-7917", "file_type": "zip", "match_count": 19, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "closed, business need", "closed_at": "2026-08-27T13:17:21Z" } }, { "model": "app.incident", "pk": 507, "fields": { "employee": 3, "policy": 4, "occurred_at": "2026-09-09T17:22:47Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 1, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 508, "fields": { "employee": 65, "policy": 3, "occurred_at": "2026-07-21T11:31:30Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-4529", "file_type": "txt", "match_count": 215, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-28T12:59:13Z" } }, { "model": "app.incident", "pk": 509, "fields": { "employee": 47, "policy": 1, "occurred_at": "2026-07-14T13:55:40Z", "channel": "external email", "recipient_domain": "partner077.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 458, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 510, "fields": { "employee": 31, "policy": 1, "occurred_at": "2026-07-13T16:42:07Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "csv", "match_count": 328, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-16T02:32:35Z" } }, { "model": "app.incident", "pk": 511, "fields": { "employee": 45, "policy": 7, "occurred_at": "2026-09-01T11:57:54Z", "channel": "external email", "recipient_domain": "partner677.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 106, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-09T08:08:16Z" } }, { "model": "app.incident", "pk": 512, "fields": { "employee": 7, "policy": 5, "occurred_at": "2026-07-12T15:31:50Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 83, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "closed, business need", "closed_at": "2026-07-22T07:26:18Z" } }, { "model": "app.incident", "pk": 513, "fields": { "employee": 38, "policy": 6, "occurred_at": "2026-07-16T17:06:48Z", "channel": "external email", "recipient_domain": "partner162.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 26, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-20T17:36:29Z" } }, { "model": "app.incident", "pk": 514, "fields": { "employee": 45, "policy": 8, "occurred_at": "2026-08-22T15:20:52Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 160, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-30T17:51:08Z" } }, { "model": "app.incident", "pk": 515, "fields": { "employee": 9, "policy": 1, "occurred_at": "2026-07-20T10:02:36Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 188, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-29T05:09:26Z" } }, { "model": "app.incident", "pk": 516, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-09-17T14:31:43Z", "channel": "external email", "recipient_domain": "partner022.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 65, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 517, "fields": { "employee": 5, "policy": 8, "occurred_at": "2026-07-07T16:31:50Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 1, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 518, "fields": { "employee": 57, "policy": 1, "occurred_at": "2026-09-14T10:24:47Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 7, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 519, "fields": { "employee": 17, "policy": 1, "occurred_at": "2026-08-26T16:54:30Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "csv", "match_count": 780, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-31T17:44:01Z" } }, { "model": "app.incident", "pk": 520, "fields": { "employee": 14, "policy": 3, "occurred_at": "2026-09-02T16:15:51Z", "channel": "chat message", "recipient_domain": "partner290.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 98, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-06T05:03:39Z" } }, { "model": "app.incident", "pk": 521, "fields": { "employee": 33, "policy": 6, "occurred_at": "2026-09-21T13:03:43Z", "channel": "external email", "recipient_domain": "partner582.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 48, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-25T02:33:17Z" } }, { "model": "app.incident", "pk": 522, "fields": { "employee": 3, "policy": 5, "occurred_at": "2026-09-02T16:25:40Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "zip", "match_count": 699, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, escalated", "closed_at": "2026-09-07T20:05:25Z" } }, { "model": "app.incident", "pk": 523, "fields": { "employee": 9, "policy": 6, "occurred_at": "2026-09-19T08:33:42Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 609, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-26T14:49:12Z" } }, { "model": "app.incident", "pk": 524, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-07-08T12:52:30Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 496, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, escalated", "closed_at": "2026-07-15T11:20:13Z" } }, { "model": "app.incident", "pk": 525, "fields": { "employee": 55, "policy": 6, "occurred_at": "2026-08-16T10:01:57Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 683, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-17T02:29:39Z" } }, { "model": "app.incident", "pk": 526, "fields": { "employee": 38, "policy": 7, "occurred_at": "2026-09-11T10:40:21Z", "channel": "external email", "recipient_domain": "partner784.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 449, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 527, "fields": { "employee": 2, "policy": 3, "occurred_at": "2026-07-10T11:47:09Z", "channel": "external email", "recipient_domain": "partner238.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 721, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-14T16:28:21Z" } }, { "model": "app.incident", "pk": 528, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-07-26T11:07:38Z", "channel": "external email", "recipient_domain": "partner433.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 372, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "false positive", "closed_at": "2026-07-31T01:26:43Z" } }, { "model": "app.incident", "pk": 529, "fields": { "employee": 50, "policy": 5, "occurred_at": "2026-07-04T18:28:00Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "py", "match_count": 56, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 530, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-09-19T11:29:48Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 2, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-22T09:03:46Z" } }, { "model": "app.incident", "pk": 531, "fields": { "employee": 64, "policy": 4, "occurred_at": "2026-08-05T15:51:04Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 69, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-08-14T12:16:25Z" } }, { "model": "app.incident", "pk": 532, "fields": { "employee": 11, "policy": 2, "occurred_at": "2026-07-18T13:13:09Z", "channel": "external email", "recipient_domain": "partner124.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 289, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-22T05:41:22Z" } }, { "model": "app.incident", "pk": 533, "fields": { "employee": 7, "policy": 5, "occurred_at": "2026-09-29T16:10:02Z", "channel": "chat message", "recipient_domain": "partner069.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 779, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-10-08T13:01:24Z" } }, { "model": "app.incident", "pk": 534, "fields": { "employee": 11, "policy": 5, "occurred_at": "2026-08-10T15:49:14Z", "channel": "external email", "recipient_domain": "partner202.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 64, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-14T22:50:28Z" } }, { "model": "app.incident", "pk": 535, "fields": { "employee": 4, "policy": 4, "occurred_at": "2026-09-02T14:11:15Z", "channel": "chat message", "recipient_domain": "partner640.example.com", "upload_site": null, "device_label": null, "file_type": "txt", "match_count": 117, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "false positive", "closed_at": "2026-09-06T20:29:43Z" } }, { "model": "app.incident", "pk": 536, "fields": { "employee": 48, "policy": 1, "occurred_at": "2026-07-30T16:44:14Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "docx", "match_count": 379, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-01T21:54:09Z" } }, { "model": "app.incident", "pk": 537, "fields": { "employee": 11, "policy": 1, "occurred_at": "2026-07-19T16:05:07Z", "channel": "external email", "recipient_domain": "partner299.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 245, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-07-22T18:12:41Z" } }, { "model": "app.incident", "pk": 538, "fields": { "employee": 63, "policy": 1, "occurred_at": "2026-09-19T12:50:31Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "docx", "match_count": 12, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-28T05:22:20Z" } }, { "model": "app.incident", "pk": 539, "fields": { "employee": 3, "policy": 6, "occurred_at": "2026-09-22T08:33:46Z", "channel": "external email", "recipient_domain": "partner057.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 606, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-10-02T08:09:28Z" } }, { "model": "app.incident", "pk": 540, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-07-12T10:43:23Z", "channel": "external email", "recipient_domain": "partner942.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 223, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-13T18:27:36Z" } }, { "model": "app.incident", "pk": 541, "fields": { "employee": 18, "policy": 2, "occurred_at": "2026-09-06T16:07:31Z", "channel": "external email", "recipient_domain": "partner094.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 719, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 542, "fields": { "employee": 1, "policy": 3, "occurred_at": "2026-09-25T18:33:58Z", "channel": "external email", "recipient_domain": "partner659.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 789, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-09-25T23:51:45Z" } }, { "model": "app.incident", "pk": 543, "fields": { "employee": 50, "policy": 6, "occurred_at": "2026-07-14T08:54:59Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 256, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-17T10:13:48Z" } }, { "model": "app.incident", "pk": 544, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-08-05T13:02:17Z", "channel": "chat message", "recipient_domain": "partner106.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 77, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-11T06:48:04Z" } }, { "model": "app.incident", "pk": 545, "fields": { "employee": 11, "policy": 6, "occurred_at": "2026-09-04T10:25:18Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 201, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-05T04:59:09Z" } }, { "model": "app.incident", "pk": 546, "fields": { "employee": 16, "policy": 7, "occurred_at": "2026-08-15T08:11:15Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 708, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-19T21:09:48Z" } }, { "model": "app.incident", "pk": 547, "fields": { "employee": 4, "policy": 1, "occurred_at": "2026-07-22T15:29:52Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 1, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-23T10:04:23Z" } }, { "model": "app.incident", "pk": 548, "fields": { "employee": 17, "policy": 5, "occurred_at": "2026-08-17T14:31:50Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3344", "file_type": "xlsx", "match_count": 57, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-21T12:22:00Z" } }, { "model": "app.incident", "pk": 549, "fields": { "employee": 1, "policy": 7, "occurred_at": "2026-08-02T11:25:59Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 672, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-05T18:40:29Z" } }, { "model": "app.incident", "pk": 550, "fields": { "employee": 3, "policy": 2, "occurred_at": "2026-07-25T18:41:12Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-0477", "file_type": "docx", "match_count": 60, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 551, "fields": { "employee": 15, "policy": 6, "occurred_at": "2026-09-24T09:17:21Z", "channel": "external email", "recipient_domain": "partner581.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 34, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-28T21:03:35Z" } }, { "model": "app.incident", "pk": 552, "fields": { "employee": 4, "policy": 8, "occurred_at": "2026-09-11T09:09:06Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 1, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 553, "fields": { "employee": 64, "policy": 6, "occurred_at": "2026-09-11T09:32:29Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5254", "file_type": "csv", "match_count": 3, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-15T19:40:26Z" } }, { "model": "app.incident", "pk": 554, "fields": { "employee": 6, "policy": 2, "occurred_at": "2026-08-11T14:34:24Z", "channel": "external email", "recipient_domain": "partner125.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 99, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "confirmed, user coached", "closed_at": "2026-08-17T03:05:44Z" } }, { "model": "app.incident", "pk": 555, "fields": { "employee": 35, "policy": 3, "occurred_at": "2026-07-20T13:29:38Z", "channel": "external email", "recipient_domain": "partner930.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 6, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-23T16:31:20Z" } }, { "model": "app.incident", "pk": 556, "fields": { "employee": 4, "policy": 3, "occurred_at": "2026-07-31T13:36:09Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 345, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-10T12:20:14Z" } }, { "model": "app.incident", "pk": 557, "fields": { "employee": 11, "policy": 3, "occurred_at": "2026-08-23T11:47:15Z", "channel": "web upload", "recipient_domain": null, "upload_site": "convert.example.net", "device_label": null, "file_type": "xlsx", "match_count": 360, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 558, "fields": { "employee": 56, "policy": 8, "occurred_at": "2026-07-24T10:39:04Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "csv", "match_count": 607, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, user coached", "closed_at": "2026-07-28T08:50:40Z" } }, { "model": "app.incident", "pk": 559, "fields": { "employee": 1, "policy": 5, "occurred_at": "2026-09-29T10:43:10Z", "channel": "web upload", "recipient_domain": null, "upload_site": "paste.example.org", "device_label": null, "file_type": "txt", "match_count": 168, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "confirmed, user coached", "closed_at": "2026-10-04T10:29:29Z" } }, { "model": "app.incident", "pk": 560, "fields": { "employee": 20, "policy": 2, "occurred_at": "2026-08-01T10:33:43Z", "channel": "external email", "recipient_domain": "partner449.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 93, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-08-04T22:53:19Z" } }, { "model": "app.incident", "pk": 561, "fields": { "employee": 38, "policy": 1, "occurred_at": "2026-09-05T12:42:04Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "docx", "match_count": 335, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-09T22:03:06Z" } }, { "model": "app.incident", "pk": 562, "fields": { "employee": 34, "policy": 5, "occurred_at": "2026-07-29T21:21:08Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 26, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 563, "fields": { "employee": 51, "policy": 4, "occurred_at": "2026-09-19T14:56:04Z", "channel": "external email", "recipient_domain": "partner473.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 323, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-09-24T02:52:37Z" } }, { "model": "app.incident", "pk": 564, "fields": { "employee": 59, "policy": 1, "occurred_at": "2026-08-07T10:43:43Z", "channel": "chat message", "recipient_domain": "partner701.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 48, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-14T13:18:24Z" } }, { "model": "app.incident", "pk": 565, "fields": { "employee": 17, "policy": 7, "occurred_at": "2026-07-27T05:27:31Z", "channel": "chat message", "recipient_domain": "partner551.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 520, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-29T09:05:28Z" } }, { "model": "app.incident", "pk": 566, "fields": { "employee": 41, "policy": 6, "occurred_at": "2026-08-18T16:57:23Z", "channel": "external email", "recipient_domain": "partner624.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 726, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-23T01:54:43Z" } }, { "model": "app.incident", "pk": 567, "fields": { "employee": 30, "policy": 7, "occurred_at": "2026-09-15T14:34:51Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "pdf", "match_count": 163, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-09-20T04:00:22Z" } }, { "model": "app.incident", "pk": 568, "fields": { "employee": 16, "policy": 6, "occurred_at": "2026-09-27T08:14:34Z", "channel": "chat message", "recipient_domain": "partner353.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 447, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-10-05T06:05:08Z" } }, { "model": "app.incident", "pk": 569, "fields": { "employee": 10, "policy": 1, "occurred_at": "2026-09-01T17:04:39Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5084", "file_type": "csv", "match_count": 482, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-05T04:41:29Z" } }, { "model": "app.incident", "pk": 570, "fields": { "employee": 5, "policy": 1, "occurred_at": "2026-08-30T13:00:19Z", "channel": "chat message", "recipient_domain": "partner523.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 726, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-31T07:58:59Z" } }, { "model": "app.incident", "pk": 571, "fields": { "employee": 33, "policy": 4, "occurred_at": "2026-08-19T18:41:54Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3398", "file_type": "pdf", "match_count": 342, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "closed, business need", "closed_at": "2026-08-25T09:15:05Z" } }, { "model": "app.incident", "pk": 572, "fields": { "employee": 21, "policy": 2, "occurred_at": "2026-08-31T14:49:59Z", "channel": "printer", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 56, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-05T03:13:10Z" } }, { "model": "app.incident", "pk": 573, "fields": { "employee": 55, "policy": 4, "occurred_at": "2026-09-20T11:38:28Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 523, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-28T08:59:03Z" } }, { "model": "app.incident", "pk": 574, "fields": { "employee": 57, "policy": 1, "occurred_at": "2026-07-07T14:24:09Z", "channel": "external email", "recipient_domain": "partner171.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 535, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-13T17:38:30Z" } }, { "model": "app.incident", "pk": 575, "fields": { "employee": 6, "policy": 1, "occurred_at": "2026-07-03T10:12:10Z", "channel": "external email", "recipient_domain": "partner825.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 490, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 576, "fields": { "employee": 16, "policy": 7, "occurred_at": "2026-09-23T15:11:42Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 69, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-25T20:15:03Z" } }, { "model": "app.incident", "pk": 577, "fields": { "employee": 45, "policy": 5, "occurred_at": "2026-08-30T10:04:49Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 65, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, escalated", "closed_at": "2026-09-02T13:19:22Z" } }, { "model": "app.incident", "pk": 578, "fields": { "employee": 24, "policy": 6, "occurred_at": "2026-08-06T13:43:22Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 395, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "confirmed, escalated", "closed_at": "2026-08-10T13:33:43Z" } }, { "model": "app.incident", "pk": 579, "fields": { "employee": 3, "policy": 1, "occurred_at": "2026-08-19T16:35:00Z", "channel": "external email", "recipient_domain": "partner447.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 716, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "closed, business need", "closed_at": "2026-08-26T20:46:45Z" } }, { "model": "app.incident", "pk": 580, "fields": { "employee": 2, "policy": 4, "occurred_at": "2026-08-18T14:11:20Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-5377", "file_type": "csv", "match_count": 54, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "false positive", "closed_at": "2026-08-18T16:19:37Z" } }, { "model": "app.incident", "pk": 581, "fields": { "employee": 1, "policy": 1, "occurred_at": "2026-09-14T11:43:15Z", "channel": "external email", "recipient_domain": "partner630.example.com", "upload_site": null, "device_label": null, "file_type": "zip", "match_count": 253, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-09-18T21:11:28Z" } }, { "model": "app.incident", "pk": 582, "fields": { "employee": 52, "policy": 3, "occurred_at": "2026-08-20T15:14:06Z", "channel": "external email", "recipient_domain": "partner143.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 183, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-25T17:05:00Z" } }, { "model": "app.incident", "pk": 583, "fields": { "employee": 30, "policy": 8, "occurred_at": "2026-07-30T08:52:20Z", "channel": "external email", "recipient_domain": "partner579.example.com", "upload_site": null, "device_label": null, "file_type": "py", "match_count": 15, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-07T09:07:41Z" } }, { "model": "app.incident", "pk": 584, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-08-31T14:37:41Z", "channel": "external email", "recipient_domain": "partner159.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 1, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "customer asked for a copy of their own data", "triage_status": "closed, business need", "closed_at": "2026-09-08T00:18:50Z" } }, { "model": "app.incident", "pk": 585, "fields": { "employee": 47, "policy": 5, "occurred_at": "2026-07-20T17:40:56Z", "channel": "cloud sync client", "recipient_domain": null, "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 450, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-07-27T17:50:30Z" } }, { "model": "app.incident", "pk": 586, "fields": { "employee": 1, "policy": 8, "occurred_at": "2026-09-22T15:23:40Z", "channel": "external email", "recipient_domain": "partner144.example.com", "upload_site": null, "device_label": null, "file_type": "pdf", "match_count": 429, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "closed, business need", "closed_at": "2026-09-28T04:45:02Z" } }, { "model": "app.incident", "pk": 587, "fields": { "employee": 13, "policy": 6, "occurred_at": "2026-07-11T15:25:44Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "docx", "match_count": 441, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 588, "fields": { "employee": 1, "policy": 2, "occurred_at": "2026-09-24T08:34:02Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "pdf", "match_count": 49, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "false positive", "closed_at": "2026-09-26T00:56:49Z" } }, { "model": "app.incident", "pk": 589, "fields": { "employee": 3, "policy": 8, "occurred_at": "2026-08-31T10:24:11Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3876", "file_type": "csv", "match_count": 292, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "it is test data, not real", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 590, "fields": { "employee": 3, "policy": 1, "occurred_at": "2026-08-06T11:39:51Z", "channel": "chat message", "recipient_domain": "partner647.example.com", "upload_site": null, "device_label": null, "file_type": "xlsx", "match_count": 704, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-08-07T22:35:45Z" } }, { "model": "app.incident", "pk": 591, "fields": { "employee": 68, "policy": 6, "occurred_at": "2026-08-03T13:41:39Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-1631", "file_type": "xlsx", "match_count": 52, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-08-05T14:46:07Z" } }, { "model": "app.incident", "pk": 592, "fields": { "employee": 53, "policy": 6, "occurred_at": "2026-07-18T10:33:56Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 759, "enforced_action": "audit only", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-22T07:03:47Z" } }, { "model": "app.incident", "pk": 593, "fields": { "employee": 1, "policy": 4, "occurred_at": "2026-07-20T12:06:21Z", "channel": "web upload", "recipient_domain": null, "upload_site": "share.example.com", "device_label": null, "file_type": "txt", "match_count": 185, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 594, "fields": { "employee": 65, "policy": 8, "occurred_at": "2026-08-01T11:09:38Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 95, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "sending to our external auditor", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 595, "fields": { "employee": 11, "policy": 4, "occurred_at": "2026-07-15T15:56:32Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-2620", "file_type": "xlsx", "match_count": 73, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "working from my personal laptop tonight", "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 596, "fields": { "employee": 41, "policy": 1, "occurred_at": "2026-07-15T11:43:00Z", "channel": "USB storage", "recipient_domain": null, "upload_site": null, "device_label": "USB-3052", "file_type": "xlsx", "match_count": 513, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "confirmed, user coached", "closed_at": "2026-07-24T07:53:14Z" } }, { "model": "app.incident", "pk": 597, "fields": { "employee": 54, "policy": 2, "occurred_at": "2026-07-06T15:42:52Z", "channel": "external email", "recipient_domain": "partner091.example.com", "upload_site": null, "device_label": null, "file_type": "csv", "match_count": 258, "enforced_action": "warn", "user_response": "proceeded with justification", "justification": "approved by my manager", "triage_status": "confirmed, user coached", "closed_at": "2026-07-10T19:05:27Z" } }, { "model": "app.incident", "pk": 598, "fields": { "employee": 56, "policy": 1, "occurred_at": "2026-07-01T11:45:05Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 135, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "false positive", "closed_at": "2026-07-09T05:25:51Z" } }, { "model": "app.incident", "pk": 599, "fields": { "employee": 27, "policy": 1, "occurred_at": "2026-08-19T23:12:15Z", "channel": "web upload", "recipient_domain": null, "upload_site": "files.example.net", "device_label": null, "file_type": "xlsx", "match_count": 117, "enforced_action": "block", "user_response": null, "justification": null, "triage_status": "new", "closed_at": null } }, { "model": "app.incident", "pk": 600, "fields": { "employee": 28, "policy": 2, "occurred_at": "2026-08-23T13:25:49Z", "channel": "external email", "recipient_domain": "partner556.example.com", "upload_site": null, "device_label": null, "file_type": "docx", "match_count": 39, "enforced_action": "warn", "user_response": "cancelled the action", "justification": null, "triage_status": "new", "closed_at": null } } ]