{
  "analysts": [
    {
      "id": 1,
      "first_name": "Roy",
      "last_name": "Effertz",
      "email": "roy.effertz7@example.org",
      "tier": "tier2",
      "shift": "evening"
    },
    {
      "id": 2,
      "first_name": "Jerome",
      "last_name": "Huels",
      "email": "jerome_huels29@example.net",
      "tier": "tier1",
      "shift": "evening"
    },
    {
      "id": 3,
      "first_name": "Sophia",
      "last_name": "McClure",
      "email": "sophia.mcclure34@example.com",
      "tier": "tier1",
      "shift": "day"
    },
    {
      "id": 4,
      "first_name": "Heidi",
      "last_name": "Crooks-McKenzie",
      "email": "heidi.crooks-mckenzie@example.com",
      "tier": "tier2",
      "shift": "night"
    },
    {
      "id": 5,
      "first_name": "Stan",
      "last_name": "Jakubowski",
      "email": "stan_jakubowski@example.com",
      "tier": "tier1",
      "shift": "evening"
    },
    {
      "id": 6,
      "first_name": "Yvonne",
      "last_name": "Bailey",
      "email": "yvonne.bailey41@example.com",
      "tier": "tier2",
      "shift": "day"
    },
    {
      "id": 7,
      "first_name": "Ida",
      "last_name": "Fritsch",
      "email": "ida_fritsch34@example.org",
      "tier": "tier1",
      "shift": "evening"
    },
    {
      "id": 8,
      "first_name": "Gonzalo",
      "last_name": "Kshlerin",
      "email": "gonzalo.kshlerin@example.net",
      "tier": "tier1",
      "shift": "day"
    },
    {
      "id": 9,
      "first_name": "Faith",
      "last_name": "Boyer-Torp",
      "email": "faith_boyer-torp13@example.net",
      "tier": "tier2",
      "shift": "night"
    },
    {
      "id": 10,
      "first_name": "Joshua",
      "last_name": "Smitham",
      "email": "joshua.smitham@example.org",
      "tier": "tier2",
      "shift": "night"
    },
    {
      "id": 11,
      "first_name": "Meghan",
      "last_name": "Wilkinson",
      "email": "meghan_wilkinson@example.net",
      "tier": "tier1",
      "shift": "evening"
    },
    {
      "id": 12,
      "first_name": "Rocky",
      "last_name": "Raynor",
      "email": "rocky_raynor@example.net",
      "tier": "tier1",
      "shift": "day"
    },
    {
      "id": 13,
      "first_name": "Ubaldo",
      "last_name": "Ondricka",
      "email": "ubaldo_ondricka@example.org",
      "tier": "tier2",
      "shift": "night"
    },
    {
      "id": 14,
      "first_name": "Karlie",
      "last_name": "Hickle",
      "email": "karlie_hickle@example.com",
      "tier": "tier1",
      "shift": "day"
    },
    {
      "id": 15,
      "first_name": "Coy",
      "last_name": "Wisoky",
      "email": "coy.wisoky@example.net",
      "tier": "tier2",
      "shift": "day"
    },
    {
      "id": 16,
      "first_name": "Irvin",
      "last_name": "Cormier",
      "email": "irvin.cormier@example.net",
      "tier": "tier1",
      "shift": "evening"
    }
  ],
  "detection_rules": [
    {
      "id": 1,
      "rule_code": "DR-4709",
      "name": "DNS to rare domain",
      "source_tool": "edr",
      "default_severity": "medium"
    },
    {
      "id": 2,
      "rule_code": "DR-0245",
      "name": "Phishing link clicked",
      "source_tool": "siem",
      "default_severity": "low"
    },
    {
      "id": 3,
      "rule_code": "DR-0103",
      "name": "Rare parent-child process",
      "source_tool": "ids",
      "default_severity": "critical"
    },
    {
      "id": 4,
      "rule_code": "DR-4999",
      "name": "Brute-force logon burst",
      "source_tool": "email_gateway",
      "default_severity": "low"
    },
    {
      "id": 5,
      "rule_code": "DR-4076",
      "name": "Brute-force logon burst",
      "source_tool": "cloud_audit",
      "default_severity": "low"
    },
    {
      "id": 6,
      "rule_code": "DR-1921",
      "name": "New admin account",
      "source_tool": "cloud_audit",
      "default_severity": "high"
    },
    {
      "id": 7,
      "rule_code": "DR-9415",
      "name": "Data egress spike",
      "source_tool": "siem",
      "default_severity": "medium"
    },
    {
      "id": 8,
      "rule_code": "DR-3324",
      "name": "Port scan from host",
      "source_tool": "edr",
      "default_severity": "low"
    },
    {
      "id": 9,
      "rule_code": "DR-4410",
      "name": "Malware signature match",
      "source_tool": "cloud_audit",
      "default_severity": "low"
    },
    {
      "id": 10,
      "rule_code": "DR-9831",
      "name": "DNS to rare domain",
      "source_tool": "ids",
      "default_severity": "medium"
    },
    {
      "id": 11,
      "rule_code": "DR-4567",
      "name": "Privileged group change",
      "source_tool": "siem",
      "default_severity": "low"
    },
    {
      "id": 12,
      "rule_code": "DR-3044",
      "name": "Impossible travel sign-in",
      "source_tool": "siem",
      "default_severity": "medium"
    },
    {
      "id": 13,
      "rule_code": "DR-4742",
      "name": "Phishing link clicked",
      "source_tool": "ids",
      "default_severity": "medium"
    },
    {
      "id": 14,
      "rule_code": "DR-2939",
      "name": "Brute-force logon burst",
      "source_tool": "siem",
      "default_severity": "medium"
    },
    {
      "id": 15,
      "rule_code": "DR-5145",
      "name": "Rare parent-child process",
      "source_tool": "siem",
      "default_severity": "medium"
    },
    {
      "id": 16,
      "rule_code": "DR-0396",
      "name": "Disabled account sign-in",
      "source_tool": "cloud_audit",
      "default_severity": "medium"
    },
    {
      "id": 17,
      "rule_code": "DR-3960",
      "name": "Port scan from host",
      "source_tool": "siem",
      "default_severity": "medium"
    },
    {
      "id": 18,
      "rule_code": "DR-4443",
      "name": "DNS to rare domain",
      "source_tool": "email_gateway",
      "default_severity": "medium"
    }
  ],
  "alerts": [
    {
      "id": 1,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-60747",
      "source_ip": "198.51.100.232",
      "raised_at": "2025-07-23 08:54:53",
      "verdict": "false_positive"
    },
    {
      "id": 2,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-32487",
      "source_ip": "198.51.100.118",
      "raised_at": "2025-08-08 13:53:21",
      "verdict": "false_positive"
    },
    {
      "id": 3,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-17781",
      "source_ip": "192.0.2.249",
      "raised_at": "2025-08-22 06:09:35",
      "verdict": "benign"
    },
    {
      "id": 4,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-79085",
      "source_ip": "198.51.100.53",
      "raised_at": "2025-08-30 07:26:08",
      "verdict": "false_positive"
    },
    {
      "id": 5,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-36120",
      "source_ip": "203.0.113.196",
      "raised_at": "2025-07-01 16:14:29",
      "verdict": "false_positive"
    },
    {
      "id": 6,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-28768",
      "source_ip": "203.0.113.201",
      "raised_at": "2025-08-04 02:05:35",
      "verdict": "benign"
    },
    {
      "id": 7,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-23175",
      "source_ip": "192.0.2.170",
      "raised_at": "2025-08-22 23:46:03",
      "verdict": "false_positive"
    },
    {
      "id": 8,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-36323",
      "source_ip": "198.51.100.85",
      "raised_at": "2025-08-02 05:26:51",
      "verdict": "false_positive"
    },
    {
      "id": 9,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-54102",
      "source_ip": "198.51.100.213",
      "raised_at": "2025-08-16 08:53:09",
      "verdict": "benign"
    },
    {
      "id": 10,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-29304",
      "source_ip": "198.51.100.177",
      "raised_at": "2025-07-28 17:41:29",
      "verdict": "false_positive"
    },
    {
      "id": 11,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-91237",
      "source_ip": "203.0.113.170",
      "raised_at": "2025-08-12 23:31:10",
      "verdict": "false_positive"
    },
    {
      "id": 12,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-53808",
      "source_ip": "192.0.2.189",
      "raised_at": "2025-08-14 20:41:48",
      "verdict": "benign"
    },
    {
      "id": 13,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-16896",
      "source_ip": "203.0.113.197",
      "raised_at": "2025-08-12 05:08:18",
      "verdict": "true_positive"
    },
    {
      "id": 14,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-31568",
      "source_ip": "203.0.113.203",
      "raised_at": "2025-08-23 05:06:41",
      "verdict": "benign"
    },
    {
      "id": 15,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-77090",
      "source_ip": "198.51.100.250",
      "raised_at": "2025-07-28 18:13:45",
      "verdict": "benign"
    },
    {
      "id": 16,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-50252",
      "source_ip": "192.0.2.223",
      "raised_at": "2025-08-19 04:53:05",
      "verdict": "false_positive"
    },
    {
      "id": 17,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-60756",
      "source_ip": "203.0.113.121",
      "raised_at": "2025-07-13 08:38:33",
      "verdict": "true_positive"
    },
    {
      "id": 18,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-76755",
      "source_ip": "203.0.113.189",
      "raised_at": "2025-07-04 09:09:29",
      "verdict": "false_positive"
    },
    {
      "id": 19,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-73302",
      "source_ip": "192.0.2.119",
      "raised_at": "2025-09-04 05:05:45",
      "verdict": "benign"
    },
    {
      "id": 20,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-28964",
      "source_ip": "192.0.2.148",
      "raised_at": "2025-07-14 14:49:26",
      "verdict": "benign"
    },
    {
      "id": 21,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-07105",
      "source_ip": "203.0.113.37",
      "raised_at": "2025-07-15 23:37:55",
      "verdict": "benign"
    },
    {
      "id": 22,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-46306",
      "source_ip": "203.0.113.49",
      "raised_at": "2025-09-05 17:11:20",
      "verdict": "false_positive"
    },
    {
      "id": 23,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-97646",
      "source_ip": "192.0.2.78",
      "raised_at": "2025-08-04 12:30:42",
      "verdict": "true_positive"
    },
    {
      "id": 24,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-09526",
      "source_ip": "198.51.100.100",
      "raised_at": "2025-09-05 08:23:53",
      "verdict": "false_positive"
    },
    {
      "id": 25,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-95369",
      "source_ip": "192.0.2.222",
      "raised_at": "2025-09-21 12:17:00",
      "verdict": "benign"
    },
    {
      "id": 26,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-66877",
      "source_ip": "203.0.113.195",
      "raised_at": "2025-09-04 09:41:23",
      "verdict": "true_positive"
    },
    {
      "id": 27,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-55462",
      "source_ip": "192.0.2.209",
      "raised_at": "2025-08-30 06:16:53",
      "verdict": "false_positive"
    },
    {
      "id": 28,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-05325",
      "source_ip": "198.51.100.39",
      "raised_at": "2025-08-15 13:59:21",
      "verdict": "benign"
    },
    {
      "id": 29,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-14141",
      "source_ip": "192.0.2.198",
      "raised_at": "2025-09-07 00:10:44",
      "verdict": "true_positive"
    },
    {
      "id": 30,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-30128",
      "source_ip": "203.0.113.103",
      "raised_at": "2025-07-08 03:46:35",
      "verdict": "true_positive"
    },
    {
      "id": 31,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-10444",
      "source_ip": "198.51.100.212",
      "raised_at": "2025-08-04 18:58:25",
      "verdict": "false_positive"
    },
    {
      "id": 32,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-31739",
      "source_ip": "192.0.2.132",
      "raised_at": "2025-09-11 09:45:12",
      "verdict": "benign"
    },
    {
      "id": 33,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-16695",
      "source_ip": "192.0.2.56",
      "raised_at": "2025-07-26 01:34:34",
      "verdict": "benign"
    },
    {
      "id": 34,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-44026",
      "source_ip": "203.0.113.14",
      "raised_at": "2025-09-29 13:41:54",
      "verdict": "benign"
    },
    {
      "id": 35,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-20992",
      "source_ip": "203.0.113.13",
      "raised_at": "2025-09-09 19:01:08",
      "verdict": "benign"
    },
    {
      "id": 36,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-99166",
      "source_ip": "198.51.100.221",
      "raised_at": "2025-07-28 07:28:34",
      "verdict": "benign"
    },
    {
      "id": 37,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-23822",
      "source_ip": "198.51.100.84",
      "raised_at": "2025-08-24 18:25:51",
      "verdict": "false_positive"
    },
    {
      "id": 38,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-52645",
      "source_ip": "192.0.2.42",
      "raised_at": "2025-08-27 16:59:16",
      "verdict": "true_positive"
    },
    {
      "id": 39,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-90358",
      "source_ip": "203.0.113.154",
      "raised_at": "2025-08-28 04:09:50",
      "verdict": "true_positive"
    },
    {
      "id": 40,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-60581",
      "source_ip": "203.0.113.41",
      "raised_at": "2025-07-23 06:20:20",
      "verdict": "true_positive"
    },
    {
      "id": 41,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-55146",
      "source_ip": "198.51.100.148",
      "raised_at": "2025-08-10 16:15:45",
      "verdict": "true_positive"
    },
    {
      "id": 42,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-38293",
      "source_ip": "198.51.100.71",
      "raised_at": "2025-08-12 11:50:10",
      "verdict": "false_positive"
    },
    {
      "id": 43,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-60007",
      "source_ip": "192.0.2.229",
      "raised_at": "2025-07-28 13:13:21",
      "verdict": "benign"
    },
    {
      "id": 44,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-21571",
      "source_ip": "203.0.113.40",
      "raised_at": "2025-09-02 06:49:34",
      "verdict": "true_positive"
    },
    {
      "id": 45,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-60913",
      "source_ip": "192.0.2.48",
      "raised_at": "2025-07-26 14:27:13",
      "verdict": "true_positive"
    },
    {
      "id": 46,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-96869",
      "source_ip": "203.0.113.51",
      "raised_at": "2025-07-09 16:21:55",
      "verdict": "true_positive"
    },
    {
      "id": 47,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-58269",
      "source_ip": "198.51.100.214",
      "raised_at": "2025-07-22 20:31:20",
      "verdict": "false_positive"
    },
    {
      "id": 48,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-51120",
      "source_ip": "192.0.2.60",
      "raised_at": "2025-08-28 04:01:26",
      "verdict": "benign"
    },
    {
      "id": 49,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-17159",
      "source_ip": "203.0.113.248",
      "raised_at": "2025-07-24 15:41:07",
      "verdict": "benign"
    },
    {
      "id": 50,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-29033",
      "source_ip": "192.0.2.189",
      "raised_at": "2025-08-21 06:07:44",
      "verdict": "benign"
    },
    {
      "id": 51,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-22230",
      "source_ip": "198.51.100.228",
      "raised_at": "2025-08-06 19:59:31",
      "verdict": "false_positive"
    },
    {
      "id": 52,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-04034",
      "source_ip": "192.0.2.182",
      "raised_at": "2025-08-09 14:42:07",
      "verdict": "false_positive"
    },
    {
      "id": 53,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-61041",
      "source_ip": "192.0.2.42",
      "raised_at": "2025-09-27 08:48:56",
      "verdict": "benign"
    },
    {
      "id": 54,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-22792",
      "source_ip": "192.0.2.197",
      "raised_at": "2025-08-29 12:05:05",
      "verdict": "true_positive"
    },
    {
      "id": 55,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-59417",
      "source_ip": "192.0.2.59",
      "raised_at": "2025-07-07 22:50:42",
      "verdict": "false_positive"
    },
    {
      "id": 56,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-58847",
      "source_ip": "192.0.2.127",
      "raised_at": "2025-07-28 10:13:10",
      "verdict": "benign"
    },
    {
      "id": 57,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-38655",
      "source_ip": "203.0.113.28",
      "raised_at": "2025-08-28 17:27:34",
      "verdict": "false_positive"
    },
    {
      "id": 58,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-95400",
      "source_ip": "198.51.100.162",
      "raised_at": "2025-09-28 11:22:31",
      "verdict": "false_positive"
    },
    {
      "id": 59,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-73621",
      "source_ip": "192.0.2.77",
      "raised_at": "2025-08-05 05:30:41",
      "verdict": "true_positive"
    },
    {
      "id": 60,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-80452",
      "source_ip": "198.51.100.252",
      "raised_at": "2025-07-08 08:49:21",
      "verdict": "false_positive"
    },
    {
      "id": 61,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-98530",
      "source_ip": "192.0.2.237",
      "raised_at": "2025-07-16 17:02:48",
      "verdict": "false_positive"
    },
    {
      "id": 62,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-44822",
      "source_ip": "203.0.113.76",
      "raised_at": "2025-09-13 02:46:44",
      "verdict": "true_positive"
    },
    {
      "id": 63,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-91365",
      "source_ip": "198.51.100.250",
      "raised_at": "2025-07-12 04:24:41",
      "verdict": "false_positive"
    },
    {
      "id": 64,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-11648",
      "source_ip": "192.0.2.7",
      "raised_at": "2025-09-13 22:47:09",
      "verdict": "false_positive"
    },
    {
      "id": 65,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-45487",
      "source_ip": "203.0.113.220",
      "raised_at": "2025-08-31 13:34:12",
      "verdict": "benign"
    },
    {
      "id": 66,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-96090",
      "source_ip": "198.51.100.151",
      "raised_at": "2025-08-21 01:58:43",
      "verdict": "true_positive"
    },
    {
      "id": 67,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-75062",
      "source_ip": "203.0.113.188",
      "raised_at": "2025-07-31 18:05:07",
      "verdict": "true_positive"
    },
    {
      "id": 68,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-88419",
      "source_ip": "203.0.113.186",
      "raised_at": "2025-07-25 01:17:23",
      "verdict": "false_positive"
    },
    {
      "id": 69,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-76364",
      "source_ip": "203.0.113.54",
      "raised_at": "2025-07-15 01:20:02",
      "verdict": "false_positive"
    },
    {
      "id": 70,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-74222",
      "source_ip": "198.51.100.89",
      "raised_at": "2025-09-20 23:11:39",
      "verdict": "false_positive"
    },
    {
      "id": 71,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-05313",
      "source_ip": "192.0.2.95",
      "raised_at": "2025-09-25 08:56:48",
      "verdict": "true_positive"
    },
    {
      "id": 72,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-31384",
      "source_ip": "198.51.100.47",
      "raised_at": "2025-08-09 00:11:28",
      "verdict": "benign"
    },
    {
      "id": 73,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-06875",
      "source_ip": "203.0.113.5",
      "raised_at": "2025-08-27 09:12:25",
      "verdict": "false_positive"
    },
    {
      "id": 74,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-76368",
      "source_ip": "203.0.113.39",
      "raised_at": "2025-08-15 14:38:24",
      "verdict": "true_positive"
    },
    {
      "id": 75,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-82397",
      "source_ip": "203.0.113.156",
      "raised_at": "2025-08-06 04:15:12",
      "verdict": "true_positive"
    },
    {
      "id": 76,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-79109",
      "source_ip": "192.0.2.131",
      "raised_at": "2025-07-23 21:50:06",
      "verdict": "true_positive"
    },
    {
      "id": 77,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-65282",
      "source_ip": "203.0.113.82",
      "raised_at": "2025-07-18 13:07:34",
      "verdict": "true_positive"
    },
    {
      "id": 78,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-80110",
      "source_ip": "198.51.100.17",
      "raised_at": "2025-07-09 18:14:10",
      "verdict": "benign"
    },
    {
      "id": 79,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-44499",
      "source_ip": "203.0.113.151",
      "raised_at": "2025-08-16 22:07:38",
      "verdict": "false_positive"
    },
    {
      "id": 80,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-93055",
      "source_ip": "192.0.2.148",
      "raised_at": "2025-08-12 05:33:52",
      "verdict": "false_positive"
    },
    {
      "id": 81,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-51922",
      "source_ip": "198.51.100.26",
      "raised_at": "2025-08-16 06:33:04",
      "verdict": "false_positive"
    },
    {
      "id": 82,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-31581",
      "source_ip": "192.0.2.205",
      "raised_at": "2025-07-18 10:55:02",
      "verdict": "false_positive"
    },
    {
      "id": 83,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-48627",
      "source_ip": "198.51.100.237",
      "raised_at": "2025-09-30 06:29:11",
      "verdict": "false_positive"
    },
    {
      "id": 84,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-74672",
      "source_ip": "203.0.113.84",
      "raised_at": "2025-07-29 22:01:42",
      "verdict": "true_positive"
    },
    {
      "id": 85,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-13476",
      "source_ip": "198.51.100.148",
      "raised_at": "2025-09-01 05:18:04",
      "verdict": "false_positive"
    },
    {
      "id": 86,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-55639",
      "source_ip": "198.51.100.249",
      "raised_at": "2025-08-13 11:02:34",
      "verdict": "benign"
    },
    {
      "id": 87,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-67025",
      "source_ip": "203.0.113.228",
      "raised_at": "2025-09-22 06:53:58",
      "verdict": "true_positive"
    },
    {
      "id": 88,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-10092",
      "source_ip": "203.0.113.13",
      "raised_at": "2025-09-02 00:35:55",
      "verdict": "false_positive"
    },
    {
      "id": 89,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-09757",
      "source_ip": "198.51.100.17",
      "raised_at": "2025-07-01 17:32:06",
      "verdict": "true_positive"
    },
    {
      "id": 90,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-86980",
      "source_ip": "203.0.113.124",
      "raised_at": "2025-08-31 21:08:09",
      "verdict": "benign"
    },
    {
      "id": 91,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-45313",
      "source_ip": "203.0.113.107",
      "raised_at": "2025-09-19 08:58:47",
      "verdict": "false_positive"
    },
    {
      "id": 92,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-52979",
      "source_ip": "198.51.100.148",
      "raised_at": "2025-07-16 11:30:59",
      "verdict": "benign"
    },
    {
      "id": 93,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-81292",
      "source_ip": "203.0.113.148",
      "raised_at": "2025-08-12 12:52:34",
      "verdict": "benign"
    },
    {
      "id": 94,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-35205",
      "source_ip": "198.51.100.188",
      "raised_at": "2025-07-31 09:36:24",
      "verdict": "false_positive"
    },
    {
      "id": 95,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-14779",
      "source_ip": "203.0.113.234",
      "raised_at": "2025-07-29 09:05:51",
      "verdict": "false_positive"
    },
    {
      "id": 96,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-72417",
      "source_ip": "192.0.2.40",
      "raised_at": "2025-08-15 08:25:46",
      "verdict": "benign"
    },
    {
      "id": 97,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-14666",
      "source_ip": "192.0.2.151",
      "raised_at": "2025-07-06 18:44:47",
      "verdict": "true_positive"
    },
    {
      "id": 98,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-48356",
      "source_ip": "203.0.113.205",
      "raised_at": "2025-08-22 12:08:11",
      "verdict": "benign"
    },
    {
      "id": 99,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-11000",
      "source_ip": "203.0.113.188",
      "raised_at": "2025-09-09 23:28:45",
      "verdict": "true_positive"
    },
    {
      "id": 100,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-58790",
      "source_ip": "198.51.100.199",
      "raised_at": "2025-07-12 19:25:21",
      "verdict": "false_positive"
    },
    {
      "id": 101,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-68577",
      "source_ip": "192.0.2.70",
      "raised_at": "2025-09-19 08:46:44",
      "verdict": "false_positive"
    },
    {
      "id": 102,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-51701",
      "source_ip": "198.51.100.128",
      "raised_at": "2025-08-23 23:18:49",
      "verdict": "false_positive"
    },
    {
      "id": 103,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-72487",
      "source_ip": "192.0.2.89",
      "raised_at": "2025-08-14 10:20:18",
      "verdict": "true_positive"
    },
    {
      "id": 104,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-17538",
      "source_ip": "198.51.100.137",
      "raised_at": "2025-09-20 01:13:48",
      "verdict": "benign"
    },
    {
      "id": 105,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-48724",
      "source_ip": "192.0.2.241",
      "raised_at": "2025-09-14 15:24:46",
      "verdict": "false_positive"
    },
    {
      "id": 106,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-83519",
      "source_ip": "192.0.2.130",
      "raised_at": "2025-07-05 06:43:12",
      "verdict": "benign"
    },
    {
      "id": 107,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-91348",
      "source_ip": "203.0.113.240",
      "raised_at": "2025-09-12 11:40:30",
      "verdict": "false_positive"
    },
    {
      "id": 108,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-67748",
      "source_ip": "192.0.2.6",
      "raised_at": "2025-08-27 16:20:12",
      "verdict": "benign"
    },
    {
      "id": 109,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-74154",
      "source_ip": "192.0.2.64",
      "raised_at": "2025-08-02 18:41:27",
      "verdict": "false_positive"
    },
    {
      "id": 110,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-41137",
      "source_ip": "192.0.2.213",
      "raised_at": "2025-09-16 11:41:56",
      "verdict": "benign"
    },
    {
      "id": 111,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-72020",
      "source_ip": "198.51.100.241",
      "raised_at": "2025-07-03 19:29:13",
      "verdict": "false_positive"
    },
    {
      "id": 112,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-43518",
      "source_ip": "203.0.113.120",
      "raised_at": "2025-09-17 15:50:13",
      "verdict": "true_positive"
    },
    {
      "id": 113,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-35992",
      "source_ip": "198.51.100.166",
      "raised_at": "2025-08-01 05:06:42",
      "verdict": "true_positive"
    },
    {
      "id": 114,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-60945",
      "source_ip": "198.51.100.151",
      "raised_at": "2025-08-28 06:04:25",
      "verdict": "true_positive"
    },
    {
      "id": 115,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-82820",
      "source_ip": "192.0.2.76",
      "raised_at": "2025-08-02 08:55:26",
      "verdict": "false_positive"
    },
    {
      "id": 116,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-37954",
      "source_ip": "203.0.113.207",
      "raised_at": "2025-09-14 01:41:43",
      "verdict": "false_positive"
    },
    {
      "id": 117,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-17530",
      "source_ip": "192.0.2.72",
      "raised_at": "2025-07-19 02:50:39",
      "verdict": "benign"
    },
    {
      "id": 118,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-91171",
      "source_ip": "198.51.100.82",
      "raised_at": "2025-09-27 00:10:21",
      "verdict": "false_positive"
    },
    {
      "id": 119,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-62655",
      "source_ip": "203.0.113.141",
      "raised_at": "2025-09-11 19:57:54",
      "verdict": "true_positive"
    },
    {
      "id": 120,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-17133",
      "source_ip": "203.0.113.4",
      "raised_at": "2025-07-17 17:48:53",
      "verdict": "true_positive"
    },
    {
      "id": 121,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-95866",
      "source_ip": "203.0.113.113",
      "raised_at": "2025-07-23 09:38:59",
      "verdict": "benign"
    },
    {
      "id": 122,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-55969",
      "source_ip": "198.51.100.101",
      "raised_at": "2025-07-01 19:48:29",
      "verdict": "benign"
    },
    {
      "id": 123,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-84149",
      "source_ip": "198.51.100.150",
      "raised_at": "2025-07-15 10:55:28",
      "verdict": "false_positive"
    },
    {
      "id": 124,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-81216",
      "source_ip": "192.0.2.143",
      "raised_at": "2025-08-29 16:24:20",
      "verdict": "false_positive"
    },
    {
      "id": 125,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-88248",
      "source_ip": "198.51.100.69",
      "raised_at": "2025-07-29 00:46:41",
      "verdict": "benign"
    },
    {
      "id": 126,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-44597",
      "source_ip": "192.0.2.224",
      "raised_at": "2025-09-07 23:36:10",
      "verdict": "false_positive"
    },
    {
      "id": 127,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-38750",
      "source_ip": "198.51.100.10",
      "raised_at": "2025-08-27 01:14:46",
      "verdict": "false_positive"
    },
    {
      "id": 128,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-38092",
      "source_ip": "198.51.100.10",
      "raised_at": "2025-08-04 13:54:36",
      "verdict": "false_positive"
    },
    {
      "id": 129,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-85288",
      "source_ip": "198.51.100.228",
      "raised_at": "2025-09-20 20:21:47",
      "verdict": "false_positive"
    },
    {
      "id": 130,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-99771",
      "source_ip": "198.51.100.91",
      "raised_at": "2025-09-16 21:24:42",
      "verdict": "benign"
    },
    {
      "id": 131,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-29008",
      "source_ip": "198.51.100.250",
      "raised_at": "2025-09-23 04:14:18",
      "verdict": "false_positive"
    },
    {
      "id": 132,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-77686",
      "source_ip": "203.0.113.16",
      "raised_at": "2025-09-10 10:18:18",
      "verdict": "benign"
    },
    {
      "id": 133,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-62424",
      "source_ip": "203.0.113.185",
      "raised_at": "2025-08-09 07:24:50",
      "verdict": "false_positive"
    },
    {
      "id": 134,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-53906",
      "source_ip": "192.0.2.81",
      "raised_at": "2025-08-10 03:40:52",
      "verdict": "false_positive"
    },
    {
      "id": 135,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-39971",
      "source_ip": "198.51.100.214",
      "raised_at": "2025-08-14 21:20:53",
      "verdict": "benign"
    },
    {
      "id": 136,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-18925",
      "source_ip": "198.51.100.117",
      "raised_at": "2025-08-29 07:27:17",
      "verdict": "benign"
    },
    {
      "id": 137,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-32352",
      "source_ip": "192.0.2.148",
      "raised_at": "2025-08-25 08:13:15",
      "verdict": "benign"
    },
    {
      "id": 138,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-29485",
      "source_ip": "192.0.2.214",
      "raised_at": "2025-09-13 21:22:22",
      "verdict": "benign"
    },
    {
      "id": 139,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-68951",
      "source_ip": "203.0.113.139",
      "raised_at": "2025-07-11 21:03:09",
      "verdict": "false_positive"
    },
    {
      "id": 140,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-89596",
      "source_ip": "203.0.113.229",
      "raised_at": "2025-07-30 10:50:14",
      "verdict": "false_positive"
    },
    {
      "id": 141,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-84850",
      "source_ip": "198.51.100.69",
      "raised_at": "2025-08-12 08:51:07",
      "verdict": "false_positive"
    },
    {
      "id": 142,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-74061",
      "source_ip": "198.51.100.152",
      "raised_at": "2025-07-04 16:15:14",
      "verdict": "false_positive"
    },
    {
      "id": 143,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-16849",
      "source_ip": "203.0.113.101",
      "raised_at": "2025-07-13 23:30:49",
      "verdict": "benign"
    },
    {
      "id": 144,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-25508",
      "source_ip": "198.51.100.161",
      "raised_at": "2025-07-04 12:59:16",
      "verdict": "benign"
    },
    {
      "id": 145,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-88444",
      "source_ip": "203.0.113.179",
      "raised_at": "2025-07-22 03:10:41",
      "verdict": "false_positive"
    },
    {
      "id": 146,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-20922",
      "source_ip": "203.0.113.237",
      "raised_at": "2025-09-06 10:24:36",
      "verdict": "false_positive"
    },
    {
      "id": 147,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-85509",
      "source_ip": "203.0.113.25",
      "raised_at": "2025-07-16 03:02:05",
      "verdict": "false_positive"
    },
    {
      "id": 148,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-22727",
      "source_ip": "198.51.100.247",
      "raised_at": "2025-08-26 20:28:19",
      "verdict": "benign"
    },
    {
      "id": 149,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-06374",
      "source_ip": "192.0.2.163",
      "raised_at": "2025-08-02 16:36:37",
      "verdict": "true_positive"
    },
    {
      "id": 150,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-55960",
      "source_ip": "192.0.2.165",
      "raised_at": "2025-09-21 07:50:42",
      "verdict": "true_positive"
    },
    {
      "id": 151,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-66438",
      "source_ip": "203.0.113.138",
      "raised_at": "2025-08-25 05:07:01",
      "verdict": "false_positive"
    },
    {
      "id": 152,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-80945",
      "source_ip": "192.0.2.161",
      "raised_at": "2025-08-01 19:01:09",
      "verdict": "benign"
    },
    {
      "id": 153,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-56625",
      "source_ip": "198.51.100.7",
      "raised_at": "2025-09-30 00:15:47",
      "verdict": "false_positive"
    },
    {
      "id": 154,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-12488",
      "source_ip": "203.0.113.144",
      "raised_at": "2025-07-14 21:12:17",
      "verdict": "false_positive"
    },
    {
      "id": 155,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-55759",
      "source_ip": "198.51.100.112",
      "raised_at": "2025-07-22 01:29:40",
      "verdict": "false_positive"
    },
    {
      "id": 156,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-84270",
      "source_ip": "198.51.100.162",
      "raised_at": "2025-09-28 07:21:20",
      "verdict": "benign"
    },
    {
      "id": 157,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-58173",
      "source_ip": "192.0.2.153",
      "raised_at": "2025-08-29 11:19:49",
      "verdict": "benign"
    },
    {
      "id": 158,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-02244",
      "source_ip": "198.51.100.59",
      "raised_at": "2025-07-19 08:36:10",
      "verdict": "true_positive"
    },
    {
      "id": 159,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-05426",
      "source_ip": "198.51.100.44",
      "raised_at": "2025-09-27 12:45:20",
      "verdict": "benign"
    },
    {
      "id": 160,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-17186",
      "source_ip": "203.0.113.205",
      "raised_at": "2025-09-21 06:43:37",
      "verdict": "false_positive"
    },
    {
      "id": 161,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-43054",
      "source_ip": "198.51.100.152",
      "raised_at": "2025-08-16 06:21:43",
      "verdict": "false_positive"
    },
    {
      "id": 162,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-39484",
      "source_ip": "198.51.100.28",
      "raised_at": "2025-09-28 16:12:30",
      "verdict": "benign"
    },
    {
      "id": 163,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-73807",
      "source_ip": "203.0.113.70",
      "raised_at": "2025-07-31 21:13:36",
      "verdict": "false_positive"
    },
    {
      "id": 164,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-90470",
      "source_ip": "192.0.2.246",
      "raised_at": "2025-08-16 22:33:43",
      "verdict": "benign"
    },
    {
      "id": 165,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-99274",
      "source_ip": "192.0.2.250",
      "raised_at": "2025-07-19 04:06:18",
      "verdict": "false_positive"
    },
    {
      "id": 166,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-23809",
      "source_ip": "198.51.100.107",
      "raised_at": "2025-09-02 12:18:38",
      "verdict": "false_positive"
    },
    {
      "id": 167,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-35521",
      "source_ip": "203.0.113.226",
      "raised_at": "2025-09-24 02:57:28",
      "verdict": "false_positive"
    },
    {
      "id": 168,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-26176",
      "source_ip": "192.0.2.65",
      "raised_at": "2025-09-14 11:55:53",
      "verdict": "false_positive"
    },
    {
      "id": 169,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-42563",
      "source_ip": "203.0.113.252",
      "raised_at": "2025-09-02 16:25:16",
      "verdict": "false_positive"
    },
    {
      "id": 170,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-27047",
      "source_ip": "203.0.113.123",
      "raised_at": "2025-08-28 23:53:54",
      "verdict": "true_positive"
    },
    {
      "id": 171,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-90954",
      "source_ip": "203.0.113.95",
      "raised_at": "2025-09-22 18:51:33",
      "verdict": "false_positive"
    },
    {
      "id": 172,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-80972",
      "source_ip": "203.0.113.228",
      "raised_at": "2025-07-12 17:13:28",
      "verdict": "false_positive"
    },
    {
      "id": 173,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-20635",
      "source_ip": "203.0.113.146",
      "raised_at": "2025-08-28 23:18:25",
      "verdict": "benign"
    },
    {
      "id": 174,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-27163",
      "source_ip": "203.0.113.113",
      "raised_at": "2025-09-11 20:00:21",
      "verdict": "benign"
    },
    {
      "id": 175,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-20592",
      "source_ip": "203.0.113.140",
      "raised_at": "2025-08-17 05:16:46",
      "verdict": "false_positive"
    },
    {
      "id": 176,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-55039",
      "source_ip": "198.51.100.242",
      "raised_at": "2025-07-17 15:37:44",
      "verdict": "benign"
    },
    {
      "id": 177,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-77860",
      "source_ip": "198.51.100.171",
      "raised_at": "2025-09-10 05:20:05",
      "verdict": "benign"
    },
    {
      "id": 178,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-29233",
      "source_ip": "198.51.100.216",
      "raised_at": "2025-09-05 02:48:47",
      "verdict": "false_positive"
    },
    {
      "id": 179,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-23166",
      "source_ip": "198.51.100.80",
      "raised_at": "2025-07-15 17:11:05",
      "verdict": "false_positive"
    },
    {
      "id": 180,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-12441",
      "source_ip": "203.0.113.253",
      "raised_at": "2025-09-26 14:37:16",
      "verdict": "true_positive"
    },
    {
      "id": 181,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-70644",
      "source_ip": "192.0.2.125",
      "raised_at": "2025-09-22 12:31:07",
      "verdict": "benign"
    },
    {
      "id": 182,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-60511",
      "source_ip": "192.0.2.31",
      "raised_at": "2025-08-02 15:07:19",
      "verdict": "benign"
    },
    {
      "id": 183,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-79611",
      "source_ip": "192.0.2.224",
      "raised_at": "2025-07-17 01:10:50",
      "verdict": "false_positive"
    },
    {
      "id": 184,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-59748",
      "source_ip": "198.51.100.100",
      "raised_at": "2025-08-01 07:19:24",
      "verdict": "false_positive"
    },
    {
      "id": 185,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-41787",
      "source_ip": "198.51.100.100",
      "raised_at": "2025-07-04 08:59:55",
      "verdict": "false_positive"
    },
    {
      "id": 186,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-16648",
      "source_ip": "203.0.113.26",
      "raised_at": "2025-09-01 20:55:45",
      "verdict": "false_positive"
    },
    {
      "id": 187,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-60462",
      "source_ip": "198.51.100.231",
      "raised_at": "2025-09-28 18:40:36",
      "verdict": "false_positive"
    },
    {
      "id": 188,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-50957",
      "source_ip": "203.0.113.213",
      "raised_at": "2025-07-18 03:47:04",
      "verdict": "true_positive"
    },
    {
      "id": 189,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-53508",
      "source_ip": "198.51.100.232",
      "raised_at": "2025-08-31 01:49:07",
      "verdict": "true_positive"
    },
    {
      "id": 190,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-65420",
      "source_ip": "198.51.100.237",
      "raised_at": "2025-07-08 10:48:59",
      "verdict": "true_positive"
    },
    {
      "id": 191,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-52779",
      "source_ip": "192.0.2.1",
      "raised_at": "2025-09-03 19:50:47",
      "verdict": "benign"
    },
    {
      "id": 192,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-59202",
      "source_ip": "203.0.113.129",
      "raised_at": "2025-08-31 02:08:39",
      "verdict": "false_positive"
    },
    {
      "id": 193,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-45494",
      "source_ip": "198.51.100.101",
      "raised_at": "2025-07-16 21:55:24",
      "verdict": "benign"
    },
    {
      "id": 194,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-84430",
      "source_ip": "203.0.113.48",
      "raised_at": "2025-08-26 14:06:25",
      "verdict": "benign"
    },
    {
      "id": 195,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-47908",
      "source_ip": "203.0.113.14",
      "raised_at": "2025-09-03 20:35:38",
      "verdict": "true_positive"
    },
    {
      "id": 196,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-45033",
      "source_ip": "203.0.113.196",
      "raised_at": "2025-08-28 12:02:35",
      "verdict": "true_positive"
    },
    {
      "id": 197,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-48616",
      "source_ip": "198.51.100.65",
      "raised_at": "2025-07-03 22:55:24",
      "verdict": "false_positive"
    },
    {
      "id": 198,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-83733",
      "source_ip": "192.0.2.5",
      "raised_at": "2025-07-21 01:35:14",
      "verdict": "benign"
    },
    {
      "id": 199,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-03166",
      "source_ip": "203.0.113.194",
      "raised_at": "2025-07-06 03:13:45",
      "verdict": "false_positive"
    },
    {
      "id": 200,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-64894",
      "source_ip": "203.0.113.72",
      "raised_at": "2025-08-26 07:43:01",
      "verdict": "true_positive"
    },
    {
      "id": 201,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-74717",
      "source_ip": "198.51.100.156",
      "raised_at": "2025-07-26 08:53:56",
      "verdict": "false_positive"
    },
    {
      "id": 202,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-83981",
      "source_ip": "203.0.113.30",
      "raised_at": "2025-08-09 05:38:20",
      "verdict": "benign"
    },
    {
      "id": 203,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-91508",
      "source_ip": "192.0.2.145",
      "raised_at": "2025-09-22 00:32:38",
      "verdict": "true_positive"
    },
    {
      "id": 204,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-62333",
      "source_ip": "203.0.113.80",
      "raised_at": "2025-08-10 05:53:03",
      "verdict": "false_positive"
    },
    {
      "id": 205,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-27829",
      "source_ip": "198.51.100.167",
      "raised_at": "2025-07-23 14:06:21",
      "verdict": "benign"
    },
    {
      "id": 206,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-54192",
      "source_ip": "198.51.100.86",
      "raised_at": "2025-09-01 09:48:22",
      "verdict": "true_positive"
    },
    {
      "id": 207,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-69907",
      "source_ip": "198.51.100.236",
      "raised_at": "2025-07-13 17:41:06",
      "verdict": "false_positive"
    },
    {
      "id": 208,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-74985",
      "source_ip": "198.51.100.186",
      "raised_at": "2025-07-19 06:14:24",
      "verdict": "benign"
    },
    {
      "id": 209,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-56102",
      "source_ip": "192.0.2.125",
      "raised_at": "2025-08-05 15:48:41",
      "verdict": "true_positive"
    },
    {
      "id": 210,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-59998",
      "source_ip": "203.0.113.186",
      "raised_at": "2025-09-08 23:22:54",
      "verdict": "benign"
    },
    {
      "id": 211,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-31267",
      "source_ip": "203.0.113.112",
      "raised_at": "2025-07-28 21:52:07",
      "verdict": "false_positive"
    },
    {
      "id": 212,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-86497",
      "source_ip": "198.51.100.110",
      "raised_at": "2025-08-14 21:38:48",
      "verdict": "true_positive"
    },
    {
      "id": 213,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-33364",
      "source_ip": "192.0.2.157",
      "raised_at": "2025-09-22 11:13:06",
      "verdict": "false_positive"
    },
    {
      "id": 214,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-03444",
      "source_ip": "198.51.100.29",
      "raised_at": "2025-09-20 04:47:38",
      "verdict": "false_positive"
    },
    {
      "id": 215,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-74629",
      "source_ip": "203.0.113.4",
      "raised_at": "2025-07-27 07:34:03",
      "verdict": "false_positive"
    },
    {
      "id": 216,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-11267",
      "source_ip": "198.51.100.200",
      "raised_at": "2025-09-01 07:07:02",
      "verdict": "true_positive"
    },
    {
      "id": 217,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-89293",
      "source_ip": "192.0.2.106",
      "raised_at": "2025-08-23 12:12:04",
      "verdict": "false_positive"
    },
    {
      "id": 218,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-46191",
      "source_ip": "203.0.113.161",
      "raised_at": "2025-07-11 03:38:45",
      "verdict": "benign"
    },
    {
      "id": 219,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-28109",
      "source_ip": "203.0.113.224",
      "raised_at": "2025-07-07 15:37:28",
      "verdict": "true_positive"
    },
    {
      "id": 220,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-72829",
      "source_ip": "203.0.113.117",
      "raised_at": "2025-09-10 07:33:51",
      "verdict": "benign"
    },
    {
      "id": 221,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-36937",
      "source_ip": "198.51.100.35",
      "raised_at": "2025-07-08 17:59:54",
      "verdict": "false_positive"
    },
    {
      "id": 222,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-49766",
      "source_ip": "198.51.100.149",
      "raised_at": "2025-07-25 17:29:16",
      "verdict": "true_positive"
    },
    {
      "id": 223,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-35564",
      "source_ip": "198.51.100.247",
      "raised_at": "2025-09-08 22:25:54",
      "verdict": "benign"
    },
    {
      "id": 224,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-70044",
      "source_ip": "203.0.113.140",
      "raised_at": "2025-07-09 21:02:45",
      "verdict": "false_positive"
    },
    {
      "id": 225,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-72815",
      "source_ip": "198.51.100.227",
      "raised_at": "2025-07-01 08:08:42",
      "verdict": "false_positive"
    },
    {
      "id": 226,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-96860",
      "source_ip": "203.0.113.38",
      "raised_at": "2025-07-11 16:35:20",
      "verdict": "benign"
    },
    {
      "id": 227,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-10671",
      "source_ip": "198.51.100.135",
      "raised_at": "2025-07-04 13:21:00",
      "verdict": "false_positive"
    },
    {
      "id": 228,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-72127",
      "source_ip": "198.51.100.150",
      "raised_at": "2025-08-27 08:19:42",
      "verdict": "false_positive"
    },
    {
      "id": 229,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-79848",
      "source_ip": "203.0.113.154",
      "raised_at": "2025-07-22 07:27:51",
      "verdict": "false_positive"
    },
    {
      "id": 230,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-49225",
      "source_ip": "192.0.2.217",
      "raised_at": "2025-09-21 12:37:39",
      "verdict": "false_positive"
    },
    {
      "id": 231,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-37802",
      "source_ip": "192.0.2.44",
      "raised_at": "2025-08-22 19:29:24",
      "verdict": "false_positive"
    },
    {
      "id": 232,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-06502",
      "source_ip": "198.51.100.114",
      "raised_at": "2025-08-12 13:02:05",
      "verdict": "true_positive"
    },
    {
      "id": 233,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-29343",
      "source_ip": "198.51.100.86",
      "raised_at": "2025-07-19 21:13:18",
      "verdict": "benign"
    },
    {
      "id": 234,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-28990",
      "source_ip": "198.51.100.209",
      "raised_at": "2025-07-28 16:14:52",
      "verdict": "false_positive"
    },
    {
      "id": 235,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-56714",
      "source_ip": "203.0.113.246",
      "raised_at": "2025-09-28 18:20:52",
      "verdict": "false_positive"
    },
    {
      "id": 236,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-66367",
      "source_ip": "203.0.113.92",
      "raised_at": "2025-07-08 00:16:40",
      "verdict": "benign"
    },
    {
      "id": 237,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-86767",
      "source_ip": "203.0.113.4",
      "raised_at": "2025-08-28 11:40:34",
      "verdict": "true_positive"
    },
    {
      "id": 238,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-99646",
      "source_ip": "192.0.2.114",
      "raised_at": "2025-09-08 05:17:19",
      "verdict": "benign"
    },
    {
      "id": 239,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-00511",
      "source_ip": "198.51.100.38",
      "raised_at": "2025-07-20 17:58:03",
      "verdict": "benign"
    },
    {
      "id": 240,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-80182",
      "source_ip": "203.0.113.98",
      "raised_at": "2025-09-14 18:57:25",
      "verdict": "benign"
    },
    {
      "id": 241,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-76545",
      "source_ip": "198.51.100.75",
      "raised_at": "2025-08-17 21:48:22",
      "verdict": "benign"
    },
    {
      "id": 242,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-14884",
      "source_ip": "203.0.113.57",
      "raised_at": "2025-09-24 12:51:04",
      "verdict": "true_positive"
    },
    {
      "id": 243,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-36347",
      "source_ip": "192.0.2.150",
      "raised_at": "2025-07-22 10:21:45",
      "verdict": "false_positive"
    },
    {
      "id": 244,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-01979",
      "source_ip": "203.0.113.36",
      "raised_at": "2025-07-05 01:04:17",
      "verdict": "true_positive"
    },
    {
      "id": 245,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-15071",
      "source_ip": "198.51.100.32",
      "raised_at": "2025-09-10 19:29:33",
      "verdict": "true_positive"
    },
    {
      "id": 246,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-41433",
      "source_ip": "198.51.100.222",
      "raised_at": "2025-08-15 05:04:08",
      "verdict": "benign"
    },
    {
      "id": 247,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-39793",
      "source_ip": "203.0.113.246",
      "raised_at": "2025-08-31 08:43:36",
      "verdict": "true_positive"
    },
    {
      "id": 248,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-78975",
      "source_ip": "203.0.113.114",
      "raised_at": "2025-07-09 15:45:02",
      "verdict": "false_positive"
    },
    {
      "id": 249,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-36538",
      "source_ip": "192.0.2.33",
      "raised_at": "2025-07-19 06:47:17",
      "verdict": "true_positive"
    },
    {
      "id": 250,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-37445",
      "source_ip": "192.0.2.145",
      "raised_at": "2025-07-07 12:57:22",
      "verdict": "false_positive"
    },
    {
      "id": 251,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-80821",
      "source_ip": "198.51.100.149",
      "raised_at": "2025-09-01 12:02:42",
      "verdict": "benign"
    },
    {
      "id": 252,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-42344",
      "source_ip": "203.0.113.26",
      "raised_at": "2025-07-24 05:40:59",
      "verdict": "benign"
    },
    {
      "id": 253,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-97639",
      "source_ip": "203.0.113.50",
      "raised_at": "2025-07-02 13:45:00",
      "verdict": "true_positive"
    },
    {
      "id": 254,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-35764",
      "source_ip": "198.51.100.186",
      "raised_at": "2025-09-04 07:36:41",
      "verdict": "false_positive"
    },
    {
      "id": 255,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-36519",
      "source_ip": "192.0.2.111",
      "raised_at": "2025-07-24 04:48:08",
      "verdict": "true_positive"
    },
    {
      "id": 256,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-82046",
      "source_ip": "198.51.100.224",
      "raised_at": "2025-07-09 19:21:34",
      "verdict": "false_positive"
    },
    {
      "id": 257,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-88962",
      "source_ip": "203.0.113.140",
      "raised_at": "2025-08-18 18:02:52",
      "verdict": "false_positive"
    },
    {
      "id": 258,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-55416",
      "source_ip": "203.0.113.51",
      "raised_at": "2025-09-27 13:07:58",
      "verdict": "benign"
    },
    {
      "id": 259,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-49875",
      "source_ip": "192.0.2.207",
      "raised_at": "2025-07-08 22:07:21",
      "verdict": "true_positive"
    },
    {
      "id": 260,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-26744",
      "source_ip": "198.51.100.92",
      "raised_at": "2025-08-09 01:20:59",
      "verdict": "true_positive"
    },
    {
      "id": 261,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-64029",
      "source_ip": "192.0.2.41",
      "raised_at": "2025-09-05 10:12:29",
      "verdict": "false_positive"
    },
    {
      "id": 262,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-70388",
      "source_ip": "192.0.2.225",
      "raised_at": "2025-07-22 02:01:50",
      "verdict": "true_positive"
    },
    {
      "id": 263,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-54376",
      "source_ip": "203.0.113.56",
      "raised_at": "2025-08-31 00:37:45",
      "verdict": "false_positive"
    },
    {
      "id": 264,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-39173",
      "source_ip": "203.0.113.212",
      "raised_at": "2025-07-11 03:31:38",
      "verdict": "false_positive"
    },
    {
      "id": 265,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-30981",
      "source_ip": "198.51.100.241",
      "raised_at": "2025-08-08 15:15:49",
      "verdict": "false_positive"
    },
    {
      "id": 266,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-50843",
      "source_ip": "198.51.100.192",
      "raised_at": "2025-07-10 17:30:58",
      "verdict": "false_positive"
    },
    {
      "id": 267,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-21511",
      "source_ip": "192.0.2.182",
      "raised_at": "2025-08-09 21:27:08",
      "verdict": "true_positive"
    },
    {
      "id": 268,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-32092",
      "source_ip": "203.0.113.15",
      "raised_at": "2025-09-16 22:25:36",
      "verdict": "true_positive"
    },
    {
      "id": 269,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-51724",
      "source_ip": "198.51.100.209",
      "raised_at": "2025-08-17 01:13:51",
      "verdict": "benign"
    },
    {
      "id": 270,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-83411",
      "source_ip": "192.0.2.168",
      "raised_at": "2025-09-05 08:34:29",
      "verdict": "false_positive"
    },
    {
      "id": 271,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-33597",
      "source_ip": "198.51.100.105",
      "raised_at": "2025-08-25 14:18:34",
      "verdict": "benign"
    },
    {
      "id": 272,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-14673",
      "source_ip": "198.51.100.212",
      "raised_at": "2025-08-27 13:39:29",
      "verdict": "true_positive"
    },
    {
      "id": 273,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-96661",
      "source_ip": "192.0.2.174",
      "raised_at": "2025-09-21 00:19:31",
      "verdict": "true_positive"
    },
    {
      "id": 274,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-70223",
      "source_ip": "203.0.113.80",
      "raised_at": "2025-08-16 03:06:08",
      "verdict": "true_positive"
    },
    {
      "id": 275,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-74703",
      "source_ip": "192.0.2.233",
      "raised_at": "2025-07-10 22:34:57",
      "verdict": "false_positive"
    },
    {
      "id": 276,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-68237",
      "source_ip": "198.51.100.38",
      "raised_at": "2025-09-09 11:52:17",
      "verdict": "false_positive"
    },
    {
      "id": 277,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-49215",
      "source_ip": "198.51.100.87",
      "raised_at": "2025-08-17 10:33:55",
      "verdict": "benign"
    },
    {
      "id": 278,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-90419",
      "source_ip": "198.51.100.144",
      "raised_at": "2025-09-22 23:06:32",
      "verdict": "benign"
    },
    {
      "id": 279,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-28900",
      "source_ip": "203.0.113.51",
      "raised_at": "2025-07-13 15:50:39",
      "verdict": "false_positive"
    },
    {
      "id": 280,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-81714",
      "source_ip": "203.0.113.178",
      "raised_at": "2025-08-26 22:46:31",
      "verdict": "benign"
    },
    {
      "id": 281,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-16056",
      "source_ip": "192.0.2.206",
      "raised_at": "2025-08-30 07:34:52",
      "verdict": "false_positive"
    },
    {
      "id": 282,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-22617",
      "source_ip": "198.51.100.100",
      "raised_at": "2025-08-14 05:28:09",
      "verdict": "benign"
    },
    {
      "id": 283,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-74625",
      "source_ip": "203.0.113.208",
      "raised_at": "2025-07-19 04:58:55",
      "verdict": "false_positive"
    },
    {
      "id": 284,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-53092",
      "source_ip": "198.51.100.168",
      "raised_at": "2025-09-07 20:49:56",
      "verdict": "false_positive"
    },
    {
      "id": 285,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-54880",
      "source_ip": "203.0.113.168",
      "raised_at": "2025-08-27 22:19:27",
      "verdict": "benign"
    },
    {
      "id": 286,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-62621",
      "source_ip": "203.0.113.162",
      "raised_at": "2025-07-18 03:22:49",
      "verdict": "false_positive"
    },
    {
      "id": 287,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-52993",
      "source_ip": "198.51.100.11",
      "raised_at": "2025-08-07 18:53:51",
      "verdict": "false_positive"
    },
    {
      "id": 288,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-61483",
      "source_ip": "203.0.113.229",
      "raised_at": "2025-09-13 19:49:33",
      "verdict": "benign"
    },
    {
      "id": 289,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-66090",
      "source_ip": "192.0.2.122",
      "raised_at": "2025-07-12 18:04:04",
      "verdict": "benign"
    },
    {
      "id": 290,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-30307",
      "source_ip": "198.51.100.191",
      "raised_at": "2025-09-04 22:18:55",
      "verdict": "true_positive"
    },
    {
      "id": 291,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-48555",
      "source_ip": "198.51.100.168",
      "raised_at": "2025-09-11 14:59:15",
      "verdict": "benign"
    },
    {
      "id": 292,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-64473",
      "source_ip": "198.51.100.114",
      "raised_at": "2025-07-11 13:15:49",
      "verdict": "true_positive"
    },
    {
      "id": 293,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-13995",
      "source_ip": "198.51.100.154",
      "raised_at": "2025-08-15 15:45:07",
      "verdict": "true_positive"
    },
    {
      "id": 294,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-65686",
      "source_ip": "192.0.2.17",
      "raised_at": "2025-08-18 21:45:31",
      "verdict": "true_positive"
    },
    {
      "id": 295,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-53600",
      "source_ip": "203.0.113.209",
      "raised_at": "2025-08-15 22:34:08",
      "verdict": "benign"
    },
    {
      "id": 296,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-16860",
      "source_ip": "203.0.113.164",
      "raised_at": "2025-07-12 09:17:32",
      "verdict": "false_positive"
    },
    {
      "id": 297,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-02804",
      "source_ip": "192.0.2.169",
      "raised_at": "2025-08-02 09:09:00",
      "verdict": "true_positive"
    },
    {
      "id": 298,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-54355",
      "source_ip": "198.51.100.244",
      "raised_at": "2025-09-09 11:08:00",
      "verdict": "false_positive"
    },
    {
      "id": 299,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-03822",
      "source_ip": "203.0.113.126",
      "raised_at": "2025-07-15 16:14:02",
      "verdict": "benign"
    },
    {
      "id": 300,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-41977",
      "source_ip": "203.0.113.107",
      "raised_at": "2025-09-12 23:34:58",
      "verdict": "benign"
    },
    {
      "id": 301,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-15025",
      "source_ip": "203.0.113.134",
      "raised_at": "2025-08-29 19:53:53",
      "verdict": "true_positive"
    },
    {
      "id": 302,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-33030",
      "source_ip": "192.0.2.36",
      "raised_at": "2025-09-27 05:52:41",
      "verdict": "benign"
    },
    {
      "id": 303,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-31127",
      "source_ip": "198.51.100.200",
      "raised_at": "2025-08-28 03:11:07",
      "verdict": "false_positive"
    },
    {
      "id": 304,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-10737",
      "source_ip": "203.0.113.241",
      "raised_at": "2025-07-12 06:41:40",
      "verdict": "false_positive"
    },
    {
      "id": 305,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-74656",
      "source_ip": "198.51.100.140",
      "raised_at": "2025-07-31 00:50:47",
      "verdict": "false_positive"
    },
    {
      "id": 306,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-49330",
      "source_ip": "192.0.2.211",
      "raised_at": "2025-07-30 17:55:07",
      "verdict": "false_positive"
    },
    {
      "id": 307,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-88758",
      "source_ip": "203.0.113.176",
      "raised_at": "2025-08-07 07:17:34",
      "verdict": "true_positive"
    },
    {
      "id": 308,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-56356",
      "source_ip": "192.0.2.107",
      "raised_at": "2025-09-13 01:20:18",
      "verdict": "false_positive"
    },
    {
      "id": 309,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-71683",
      "source_ip": "192.0.2.36",
      "raised_at": "2025-08-23 13:31:35",
      "verdict": "false_positive"
    },
    {
      "id": 310,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-29299",
      "source_ip": "192.0.2.182",
      "raised_at": "2025-09-11 15:28:54",
      "verdict": "false_positive"
    },
    {
      "id": 311,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-78355",
      "source_ip": "192.0.2.94",
      "raised_at": "2025-09-05 21:46:12",
      "verdict": "benign"
    },
    {
      "id": 312,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-67011",
      "source_ip": "192.0.2.42",
      "raised_at": "2025-07-01 19:54:25",
      "verdict": "false_positive"
    },
    {
      "id": 313,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-99312",
      "source_ip": "203.0.113.192",
      "raised_at": "2025-08-02 15:12:38",
      "verdict": "false_positive"
    },
    {
      "id": 314,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-17876",
      "source_ip": "203.0.113.20",
      "raised_at": "2025-08-04 05:23:10",
      "verdict": "benign"
    },
    {
      "id": 315,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-83330",
      "source_ip": "203.0.113.76",
      "raised_at": "2025-08-28 18:30:57",
      "verdict": "false_positive"
    },
    {
      "id": 316,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-51839",
      "source_ip": "198.51.100.32",
      "raised_at": "2025-07-11 16:23:54",
      "verdict": "false_positive"
    },
    {
      "id": 317,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-34467",
      "source_ip": "192.0.2.189",
      "raised_at": "2025-07-31 20:28:13",
      "verdict": "benign"
    },
    {
      "id": 318,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-77248",
      "source_ip": "203.0.113.60",
      "raised_at": "2025-08-11 21:16:49",
      "verdict": "false_positive"
    },
    {
      "id": 319,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-75681",
      "source_ip": "198.51.100.212",
      "raised_at": "2025-07-01 20:07:34",
      "verdict": "benign"
    },
    {
      "id": 320,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-28540",
      "source_ip": "198.51.100.103",
      "raised_at": "2025-09-13 15:11:28",
      "verdict": "false_positive"
    },
    {
      "id": 321,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-24949",
      "source_ip": "198.51.100.227",
      "raised_at": "2025-09-26 01:20:21",
      "verdict": "false_positive"
    },
    {
      "id": 322,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-06199",
      "source_ip": "203.0.113.178",
      "raised_at": "2025-09-20 03:15:21",
      "verdict": "false_positive"
    },
    {
      "id": 323,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-73019",
      "source_ip": "192.0.2.112",
      "raised_at": "2025-08-26 19:44:57",
      "verdict": "benign"
    },
    {
      "id": 324,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-80772",
      "source_ip": "198.51.100.86",
      "raised_at": "2025-09-05 22:23:58",
      "verdict": "false_positive"
    },
    {
      "id": 325,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-84638",
      "source_ip": "192.0.2.59",
      "raised_at": "2025-08-15 18:03:21",
      "verdict": "benign"
    },
    {
      "id": 326,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-07023",
      "source_ip": "198.51.100.29",
      "raised_at": "2025-09-10 00:47:20",
      "verdict": "benign"
    },
    {
      "id": 327,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-44330",
      "source_ip": "203.0.113.104",
      "raised_at": "2025-08-11 07:03:59",
      "verdict": "true_positive"
    },
    {
      "id": 328,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-94545",
      "source_ip": "192.0.2.71",
      "raised_at": "2025-09-23 23:42:37",
      "verdict": "false_positive"
    },
    {
      "id": 329,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-00297",
      "source_ip": "203.0.113.96",
      "raised_at": "2025-07-13 14:04:36",
      "verdict": "true_positive"
    },
    {
      "id": 330,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-06462",
      "source_ip": "198.51.100.140",
      "raised_at": "2025-08-28 09:04:26",
      "verdict": "true_positive"
    },
    {
      "id": 331,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-51423",
      "source_ip": "192.0.2.14",
      "raised_at": "2025-09-06 21:19:51",
      "verdict": "benign"
    },
    {
      "id": 332,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-53866",
      "source_ip": "198.51.100.140",
      "raised_at": "2025-07-15 05:14:22",
      "verdict": "true_positive"
    },
    {
      "id": 333,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-92719",
      "source_ip": "198.51.100.87",
      "raised_at": "2025-08-24 00:11:06",
      "verdict": "false_positive"
    },
    {
      "id": 334,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-53493",
      "source_ip": "198.51.100.137",
      "raised_at": "2025-07-17 01:19:56",
      "verdict": "benign"
    },
    {
      "id": 335,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-98263",
      "source_ip": "192.0.2.80",
      "raised_at": "2025-08-06 15:04:21",
      "verdict": "benign"
    },
    {
      "id": 336,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-20743",
      "source_ip": "192.0.2.197",
      "raised_at": "2025-07-10 04:59:15",
      "verdict": "benign"
    },
    {
      "id": 337,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-49622",
      "source_ip": "203.0.113.167",
      "raised_at": "2025-09-20 12:26:42",
      "verdict": "false_positive"
    },
    {
      "id": 338,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-12553",
      "source_ip": "198.51.100.68",
      "raised_at": "2025-07-03 15:36:39",
      "verdict": "benign"
    },
    {
      "id": 339,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-01237",
      "source_ip": "192.0.2.33",
      "raised_at": "2025-07-30 22:21:22",
      "verdict": "false_positive"
    },
    {
      "id": 340,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-14569",
      "source_ip": "198.51.100.141",
      "raised_at": "2025-09-02 01:00:41",
      "verdict": "false_positive"
    },
    {
      "id": 341,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-57720",
      "source_ip": "203.0.113.240",
      "raised_at": "2025-07-31 22:46:49",
      "verdict": "benign"
    },
    {
      "id": 342,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-49433",
      "source_ip": "203.0.113.33",
      "raised_at": "2025-07-06 00:44:13",
      "verdict": "false_positive"
    },
    {
      "id": 343,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-90309",
      "source_ip": "198.51.100.11",
      "raised_at": "2025-09-05 08:43:58",
      "verdict": "false_positive"
    },
    {
      "id": 344,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-51515",
      "source_ip": "192.0.2.143",
      "raised_at": "2025-09-08 00:23:48",
      "verdict": "benign"
    },
    {
      "id": 345,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-44768",
      "source_ip": "192.0.2.11",
      "raised_at": "2025-08-24 22:39:11",
      "verdict": "false_positive"
    },
    {
      "id": 346,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-35394",
      "source_ip": "192.0.2.254",
      "raised_at": "2025-08-28 12:12:45",
      "verdict": "false_positive"
    },
    {
      "id": 347,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-59454",
      "source_ip": "203.0.113.150",
      "raised_at": "2025-09-05 08:37:04",
      "verdict": "benign"
    },
    {
      "id": 348,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-81103",
      "source_ip": "203.0.113.231",
      "raised_at": "2025-09-25 19:44:25",
      "verdict": "false_positive"
    },
    {
      "id": 349,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-05073",
      "source_ip": "203.0.113.185",
      "raised_at": "2025-07-28 17:27:24",
      "verdict": "true_positive"
    },
    {
      "id": 350,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-44764",
      "source_ip": "203.0.113.239",
      "raised_at": "2025-09-07 14:07:33",
      "verdict": "benign"
    },
    {
      "id": 351,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-76682",
      "source_ip": "203.0.113.132",
      "raised_at": "2025-09-30 07:00:34",
      "verdict": "false_positive"
    },
    {
      "id": 352,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-54067",
      "source_ip": "198.51.100.53",
      "raised_at": "2025-09-05 04:20:48",
      "verdict": "false_positive"
    },
    {
      "id": 353,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-99039",
      "source_ip": "203.0.113.134",
      "raised_at": "2025-08-25 12:36:50",
      "verdict": "benign"
    },
    {
      "id": 354,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-86181",
      "source_ip": "203.0.113.82",
      "raised_at": "2025-07-08 02:41:14",
      "verdict": "benign"
    },
    {
      "id": 355,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-27033",
      "source_ip": "192.0.2.185",
      "raised_at": "2025-09-23 00:54:53",
      "verdict": "false_positive"
    },
    {
      "id": 356,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-86865",
      "source_ip": "192.0.2.95",
      "raised_at": "2025-08-27 13:40:48",
      "verdict": "false_positive"
    },
    {
      "id": 357,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-04198",
      "source_ip": "203.0.113.228",
      "raised_at": "2025-07-28 05:14:54",
      "verdict": "benign"
    },
    {
      "id": 358,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-16933",
      "source_ip": "192.0.2.140",
      "raised_at": "2025-09-03 23:03:01",
      "verdict": "true_positive"
    },
    {
      "id": 359,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-72434",
      "source_ip": "192.0.2.64",
      "raised_at": "2025-07-24 08:51:10",
      "verdict": "false_positive"
    },
    {
      "id": 360,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-91436",
      "source_ip": "192.0.2.244",
      "raised_at": "2025-08-10 17:35:11",
      "verdict": "true_positive"
    },
    {
      "id": 361,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-40193",
      "source_ip": "203.0.113.31",
      "raised_at": "2025-09-24 10:16:22",
      "verdict": "true_positive"
    },
    {
      "id": 362,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-26740",
      "source_ip": "192.0.2.50",
      "raised_at": "2025-09-15 16:26:03",
      "verdict": "true_positive"
    },
    {
      "id": 363,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-11838",
      "source_ip": "203.0.113.192",
      "raised_at": "2025-08-11 17:13:42",
      "verdict": "benign"
    },
    {
      "id": 364,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-65454",
      "source_ip": "203.0.113.251",
      "raised_at": "2025-09-07 05:10:00",
      "verdict": "false_positive"
    },
    {
      "id": 365,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-70844",
      "source_ip": "203.0.113.193",
      "raised_at": "2025-07-25 06:33:40",
      "verdict": "true_positive"
    },
    {
      "id": 366,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-69241",
      "source_ip": "192.0.2.81",
      "raised_at": "2025-09-05 17:13:22",
      "verdict": "true_positive"
    },
    {
      "id": 367,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-95899",
      "source_ip": "198.51.100.145",
      "raised_at": "2025-09-18 22:36:50",
      "verdict": "benign"
    },
    {
      "id": 368,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-79294",
      "source_ip": "198.51.100.168",
      "raised_at": "2025-09-07 17:16:45",
      "verdict": "benign"
    },
    {
      "id": 369,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-88510",
      "source_ip": "198.51.100.50",
      "raised_at": "2025-09-23 01:33:14",
      "verdict": "false_positive"
    },
    {
      "id": 370,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-53139",
      "source_ip": "198.51.100.115",
      "raised_at": "2025-09-22 07:53:37",
      "verdict": "benign"
    },
    {
      "id": 371,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-05347",
      "source_ip": "192.0.2.197",
      "raised_at": "2025-09-22 20:41:14",
      "verdict": "benign"
    },
    {
      "id": 372,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-36163",
      "source_ip": "192.0.2.140",
      "raised_at": "2025-07-14 08:39:55",
      "verdict": "true_positive"
    },
    {
      "id": 373,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-16598",
      "source_ip": "198.51.100.136",
      "raised_at": "2025-09-17 05:38:48",
      "verdict": "false_positive"
    },
    {
      "id": 374,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-34008",
      "source_ip": "198.51.100.191",
      "raised_at": "2025-09-29 01:57:30",
      "verdict": "false_positive"
    },
    {
      "id": 375,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-05530",
      "source_ip": "203.0.113.252",
      "raised_at": "2025-08-16 20:35:55",
      "verdict": "benign"
    },
    {
      "id": 376,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-86563",
      "source_ip": "203.0.113.130",
      "raised_at": "2025-09-11 17:37:07",
      "verdict": "benign"
    },
    {
      "id": 377,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-43948",
      "source_ip": "203.0.113.150",
      "raised_at": "2025-07-05 08:18:51",
      "verdict": "false_positive"
    },
    {
      "id": 378,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-08684",
      "source_ip": "198.51.100.84",
      "raised_at": "2025-08-28 05:06:12",
      "verdict": "benign"
    },
    {
      "id": 379,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-35470",
      "source_ip": "203.0.113.159",
      "raised_at": "2025-08-04 04:18:58",
      "verdict": "true_positive"
    },
    {
      "id": 380,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-59587",
      "source_ip": "192.0.2.7",
      "raised_at": "2025-08-22 03:13:13",
      "verdict": "false_positive"
    },
    {
      "id": 381,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-72062",
      "source_ip": "198.51.100.174",
      "raised_at": "2025-08-05 02:12:16",
      "verdict": "true_positive"
    },
    {
      "id": 382,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-12641",
      "source_ip": "192.0.2.18",
      "raised_at": "2025-09-23 03:10:06",
      "verdict": "false_positive"
    },
    {
      "id": 383,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-51488",
      "source_ip": "203.0.113.10",
      "raised_at": "2025-07-21 04:41:22",
      "verdict": "false_positive"
    },
    {
      "id": 384,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-48089",
      "source_ip": "203.0.113.139",
      "raised_at": "2025-08-14 22:03:07",
      "verdict": "false_positive"
    },
    {
      "id": 385,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-51165",
      "source_ip": "198.51.100.160",
      "raised_at": "2025-07-27 06:11:25",
      "verdict": "benign"
    },
    {
      "id": 386,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-49994",
      "source_ip": "203.0.113.164",
      "raised_at": "2025-08-10 08:54:10",
      "verdict": "true_positive"
    },
    {
      "id": 387,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-57616",
      "source_ip": "192.0.2.87",
      "raised_at": "2025-08-26 10:45:19",
      "verdict": "false_positive"
    },
    {
      "id": 388,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-40104",
      "source_ip": "198.51.100.60",
      "raised_at": "2025-09-11 23:15:37",
      "verdict": "true_positive"
    },
    {
      "id": 389,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-86982",
      "source_ip": "198.51.100.8",
      "raised_at": "2025-08-29 00:03:32",
      "verdict": "benign"
    },
    {
      "id": 390,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-63571",
      "source_ip": "198.51.100.225",
      "raised_at": "2025-08-08 15:01:45",
      "verdict": "true_positive"
    },
    {
      "id": 391,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-18797",
      "source_ip": "192.0.2.17",
      "raised_at": "2025-07-20 00:13:50",
      "verdict": "benign"
    },
    {
      "id": 392,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-79749",
      "source_ip": "203.0.113.39",
      "raised_at": "2025-08-23 18:59:52",
      "verdict": "benign"
    },
    {
      "id": 393,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-23354",
      "source_ip": "203.0.113.8",
      "raised_at": "2025-09-18 21:24:23",
      "verdict": "false_positive"
    },
    {
      "id": 394,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-60252",
      "source_ip": "192.0.2.28",
      "raised_at": "2025-08-14 22:03:10",
      "verdict": "benign"
    },
    {
      "id": 395,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-55782",
      "source_ip": "198.51.100.131",
      "raised_at": "2025-07-06 01:02:11",
      "verdict": "benign"
    },
    {
      "id": 396,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-49898",
      "source_ip": "198.51.100.212",
      "raised_at": "2025-08-16 23:22:46",
      "verdict": "benign"
    },
    {
      "id": 397,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-93612",
      "source_ip": "192.0.2.210",
      "raised_at": "2025-08-18 18:34:50",
      "verdict": "false_positive"
    },
    {
      "id": 398,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-53762",
      "source_ip": "203.0.113.122",
      "raised_at": "2025-07-13 21:51:14",
      "verdict": "benign"
    },
    {
      "id": 399,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-36578",
      "source_ip": "198.51.100.23",
      "raised_at": "2025-08-06 20:05:00",
      "verdict": "false_positive"
    },
    {
      "id": 400,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-06516",
      "source_ip": "198.51.100.117",
      "raised_at": "2025-09-02 18:05:09",
      "verdict": "false_positive"
    },
    {
      "id": 401,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-31008",
      "source_ip": "203.0.113.125",
      "raised_at": "2025-08-23 04:30:38",
      "verdict": "false_positive"
    },
    {
      "id": 402,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-91181",
      "source_ip": "192.0.2.187",
      "raised_at": "2025-07-27 18:17:19",
      "verdict": "true_positive"
    },
    {
      "id": 403,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-72631",
      "source_ip": "198.51.100.31",
      "raised_at": "2025-09-09 20:13:00",
      "verdict": "true_positive"
    },
    {
      "id": 404,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-92077",
      "source_ip": "203.0.113.101",
      "raised_at": "2025-09-08 23:34:19",
      "verdict": "benign"
    },
    {
      "id": 405,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-04340",
      "source_ip": "198.51.100.158",
      "raised_at": "2025-08-30 13:38:47",
      "verdict": "benign"
    },
    {
      "id": 406,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-00400",
      "source_ip": "198.51.100.193",
      "raised_at": "2025-08-16 19:27:01",
      "verdict": "false_positive"
    },
    {
      "id": 407,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-15518",
      "source_ip": "198.51.100.132",
      "raised_at": "2025-07-14 20:02:00",
      "verdict": "true_positive"
    },
    {
      "id": 408,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-09121",
      "source_ip": "203.0.113.19",
      "raised_at": "2025-07-04 09:32:21",
      "verdict": "benign"
    },
    {
      "id": 409,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-09100",
      "source_ip": "203.0.113.145",
      "raised_at": "2025-09-30 11:08:14",
      "verdict": "false_positive"
    },
    {
      "id": 410,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-20865",
      "source_ip": "192.0.2.151",
      "raised_at": "2025-08-05 10:28:19",
      "verdict": "benign"
    },
    {
      "id": 411,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-10145",
      "source_ip": "203.0.113.52",
      "raised_at": "2025-07-09 15:37:04",
      "verdict": "benign"
    },
    {
      "id": 412,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-54797",
      "source_ip": "203.0.113.87",
      "raised_at": "2025-08-26 08:15:57",
      "verdict": "true_positive"
    },
    {
      "id": 413,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-62454",
      "source_ip": "192.0.2.141",
      "raised_at": "2025-08-08 10:27:25",
      "verdict": "true_positive"
    },
    {
      "id": 414,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-87598",
      "source_ip": "192.0.2.249",
      "raised_at": "2025-08-16 16:29:15",
      "verdict": "false_positive"
    },
    {
      "id": 415,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-39199",
      "source_ip": "192.0.2.22",
      "raised_at": "2025-08-27 14:56:01",
      "verdict": "false_positive"
    },
    {
      "id": 416,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-04385",
      "source_ip": "198.51.100.89",
      "raised_at": "2025-08-19 05:19:21",
      "verdict": "true_positive"
    },
    {
      "id": 417,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-59386",
      "source_ip": "192.0.2.5",
      "raised_at": "2025-09-20 01:11:42",
      "verdict": "false_positive"
    },
    {
      "id": 418,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-60734",
      "source_ip": "198.51.100.200",
      "raised_at": "2025-07-10 10:01:22",
      "verdict": "true_positive"
    },
    {
      "id": 419,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-68076",
      "source_ip": "203.0.113.54",
      "raised_at": "2025-09-24 23:28:28",
      "verdict": "false_positive"
    },
    {
      "id": 420,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-14694",
      "source_ip": "192.0.2.145",
      "raised_at": "2025-09-14 03:02:06",
      "verdict": "benign"
    },
    {
      "id": 421,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-04452",
      "source_ip": "192.0.2.94",
      "raised_at": "2025-08-03 05:37:06",
      "verdict": "benign"
    },
    {
      "id": 422,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-22514",
      "source_ip": "192.0.2.204",
      "raised_at": "2025-07-12 01:21:55",
      "verdict": "benign"
    },
    {
      "id": 423,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-06133",
      "source_ip": "203.0.113.169",
      "raised_at": "2025-07-03 08:18:21",
      "verdict": "benign"
    },
    {
      "id": 424,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-20548",
      "source_ip": "203.0.113.34",
      "raised_at": "2025-09-08 08:01:30",
      "verdict": "false_positive"
    },
    {
      "id": 425,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-80611",
      "source_ip": "203.0.113.2",
      "raised_at": "2025-08-25 16:06:47",
      "verdict": "benign"
    },
    {
      "id": 426,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-98133",
      "source_ip": "192.0.2.31",
      "raised_at": "2025-07-17 06:14:49",
      "verdict": "false_positive"
    },
    {
      "id": 427,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-59687",
      "source_ip": "192.0.2.68",
      "raised_at": "2025-09-11 14:06:44",
      "verdict": "benign"
    },
    {
      "id": 428,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-90453",
      "source_ip": "198.51.100.11",
      "raised_at": "2025-09-12 08:19:03",
      "verdict": "false_positive"
    },
    {
      "id": 429,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-23153",
      "source_ip": "198.51.100.113",
      "raised_at": "2025-07-21 14:00:13",
      "verdict": "benign"
    },
    {
      "id": 430,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-13478",
      "source_ip": "198.51.100.140",
      "raised_at": "2025-09-07 18:14:54",
      "verdict": "benign"
    },
    {
      "id": 431,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-26492",
      "source_ip": "198.51.100.2",
      "raised_at": "2025-08-05 11:14:11",
      "verdict": "false_positive"
    },
    {
      "id": 432,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-64516",
      "source_ip": "198.51.100.105",
      "raised_at": "2025-07-30 13:16:51",
      "verdict": "true_positive"
    },
    {
      "id": 433,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-11910",
      "source_ip": "203.0.113.180",
      "raised_at": "2025-07-10 20:44:56",
      "verdict": "true_positive"
    },
    {
      "id": 434,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-15408",
      "source_ip": "198.51.100.80",
      "raised_at": "2025-08-30 19:29:19",
      "verdict": "false_positive"
    },
    {
      "id": 435,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-09820",
      "source_ip": "198.51.100.84",
      "raised_at": "2025-09-10 07:22:03",
      "verdict": "benign"
    },
    {
      "id": 436,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-52632",
      "source_ip": "198.51.100.165",
      "raised_at": "2025-07-05 00:34:02",
      "verdict": "false_positive"
    },
    {
      "id": 437,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-24950",
      "source_ip": "192.0.2.197",
      "raised_at": "2025-07-05 14:55:29",
      "verdict": "false_positive"
    },
    {
      "id": 438,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-66943",
      "source_ip": "198.51.100.74",
      "raised_at": "2025-09-16 22:37:08",
      "verdict": "benign"
    },
    {
      "id": 439,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-25981",
      "source_ip": "192.0.2.12",
      "raised_at": "2025-08-18 08:35:18",
      "verdict": "true_positive"
    },
    {
      "id": 440,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-43777",
      "source_ip": "198.51.100.28",
      "raised_at": "2025-07-03 22:15:41",
      "verdict": "true_positive"
    },
    {
      "id": 441,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-23042",
      "source_ip": "192.0.2.68",
      "raised_at": "2025-08-06 00:13:33",
      "verdict": "false_positive"
    },
    {
      "id": 442,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-29515",
      "source_ip": "192.0.2.62",
      "raised_at": "2025-09-21 18:37:46",
      "verdict": "false_positive"
    },
    {
      "id": 443,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-78259",
      "source_ip": "192.0.2.139",
      "raised_at": "2025-07-15 08:26:07",
      "verdict": "false_positive"
    },
    {
      "id": 444,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-17182",
      "source_ip": "192.0.2.143",
      "raised_at": "2025-09-21 23:39:38",
      "verdict": "benign"
    },
    {
      "id": 445,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-02468",
      "source_ip": "203.0.113.226",
      "raised_at": "2025-07-13 18:51:03",
      "verdict": "false_positive"
    },
    {
      "id": 446,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-61553",
      "source_ip": "203.0.113.18",
      "raised_at": "2025-07-25 18:11:54",
      "verdict": "false_positive"
    },
    {
      "id": 447,
      "rule_id": 15,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-00585",
      "source_ip": "192.0.2.230",
      "raised_at": "2025-08-03 23:09:50",
      "verdict": "false_positive"
    },
    {
      "id": 448,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-55817",
      "source_ip": "192.0.2.66",
      "raised_at": "2025-08-24 19:16:24",
      "verdict": "false_positive"
    },
    {
      "id": 449,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-97672",
      "source_ip": "192.0.2.231",
      "raised_at": "2025-09-17 21:39:31",
      "verdict": "false_positive"
    },
    {
      "id": 450,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-18656",
      "source_ip": "203.0.113.50",
      "raised_at": "2025-08-03 04:24:45",
      "verdict": "false_positive"
    },
    {
      "id": 451,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-70822",
      "source_ip": "192.0.2.137",
      "raised_at": "2025-07-22 21:35:18",
      "verdict": "true_positive"
    },
    {
      "id": 452,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-41484",
      "source_ip": "198.51.100.84",
      "raised_at": "2025-08-12 18:51:08",
      "verdict": "true_positive"
    },
    {
      "id": 453,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-93889",
      "source_ip": "198.51.100.142",
      "raised_at": "2025-09-24 01:40:31",
      "verdict": "benign"
    },
    {
      "id": 454,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-22018",
      "source_ip": "198.51.100.178",
      "raised_at": "2025-07-19 18:04:45",
      "verdict": "true_positive"
    },
    {
      "id": 455,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-56919",
      "source_ip": "203.0.113.251",
      "raised_at": "2025-08-09 13:19:03",
      "verdict": "benign"
    },
    {
      "id": 456,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-03418",
      "source_ip": "198.51.100.148",
      "raised_at": "2025-09-20 05:00:30",
      "verdict": "false_positive"
    },
    {
      "id": 457,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-93384",
      "source_ip": "198.51.100.180",
      "raised_at": "2025-08-01 00:43:52",
      "verdict": "false_positive"
    },
    {
      "id": 458,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-36552",
      "source_ip": "192.0.2.58",
      "raised_at": "2025-08-19 11:51:10",
      "verdict": "false_positive"
    },
    {
      "id": 459,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-05091",
      "source_ip": "192.0.2.174",
      "raised_at": "2025-09-30 20:21:49",
      "verdict": "false_positive"
    },
    {
      "id": 460,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-52741",
      "source_ip": "192.0.2.131",
      "raised_at": "2025-08-29 09:05:02",
      "verdict": "benign"
    },
    {
      "id": 461,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-55333",
      "source_ip": "192.0.2.16",
      "raised_at": "2025-07-13 18:09:22",
      "verdict": "true_positive"
    },
    {
      "id": 462,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-05852",
      "source_ip": "192.0.2.150",
      "raised_at": "2025-08-17 05:25:58",
      "verdict": "benign"
    },
    {
      "id": 463,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-47520",
      "source_ip": "203.0.113.173",
      "raised_at": "2025-07-16 11:49:02",
      "verdict": "true_positive"
    },
    {
      "id": 464,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-17093",
      "source_ip": "198.51.100.132",
      "raised_at": "2025-07-07 07:35:25",
      "verdict": "true_positive"
    },
    {
      "id": 465,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-75709",
      "source_ip": "192.0.2.109",
      "raised_at": "2025-07-11 01:43:59",
      "verdict": "true_positive"
    },
    {
      "id": 466,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-80652",
      "source_ip": "192.0.2.47",
      "raised_at": "2025-07-02 22:21:31",
      "verdict": "false_positive"
    },
    {
      "id": 467,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-61684",
      "source_ip": "203.0.113.64",
      "raised_at": "2025-07-11 14:43:23",
      "verdict": "false_positive"
    },
    {
      "id": 468,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-00843",
      "source_ip": "198.51.100.211",
      "raised_at": "2025-08-19 20:41:06",
      "verdict": "benign"
    },
    {
      "id": 469,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-09656",
      "source_ip": "192.0.2.4",
      "raised_at": "2025-09-22 09:13:42",
      "verdict": "false_positive"
    },
    {
      "id": 470,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-05015",
      "source_ip": "192.0.2.122",
      "raised_at": "2025-07-18 00:59:10",
      "verdict": "true_positive"
    },
    {
      "id": 471,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-15697",
      "source_ip": "198.51.100.98",
      "raised_at": "2025-08-22 01:22:35",
      "verdict": "false_positive"
    },
    {
      "id": 472,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-42036",
      "source_ip": "198.51.100.134",
      "raised_at": "2025-08-04 03:36:56",
      "verdict": "benign"
    },
    {
      "id": 473,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-64839",
      "source_ip": "198.51.100.231",
      "raised_at": "2025-07-10 20:33:26",
      "verdict": "true_positive"
    },
    {
      "id": 474,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-44085",
      "source_ip": "192.0.2.217",
      "raised_at": "2025-09-19 07:17:12",
      "verdict": "false_positive"
    },
    {
      "id": 475,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-35955",
      "source_ip": "198.51.100.197",
      "raised_at": "2025-09-17 11:18:02",
      "verdict": "benign"
    },
    {
      "id": 476,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-90679",
      "source_ip": "203.0.113.208",
      "raised_at": "2025-08-10 04:15:37",
      "verdict": "false_positive"
    },
    {
      "id": 477,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-36350",
      "source_ip": "192.0.2.203",
      "raised_at": "2025-08-18 02:30:48",
      "verdict": "false_positive"
    },
    {
      "id": 478,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-70138",
      "source_ip": "203.0.113.22",
      "raised_at": "2025-08-13 18:27:54",
      "verdict": "true_positive"
    },
    {
      "id": 479,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-46275",
      "source_ip": "192.0.2.242",
      "raised_at": "2025-07-04 22:34:52",
      "verdict": "benign"
    },
    {
      "id": 480,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-95132",
      "source_ip": "192.0.2.213",
      "raised_at": "2025-08-23 20:15:55",
      "verdict": "false_positive"
    },
    {
      "id": 481,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-06545",
      "source_ip": "192.0.2.231",
      "raised_at": "2025-07-28 12:34:46",
      "verdict": "benign"
    },
    {
      "id": 482,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-72249",
      "source_ip": "198.51.100.50",
      "raised_at": "2025-09-30 02:32:29",
      "verdict": "false_positive"
    },
    {
      "id": 483,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-31866",
      "source_ip": "203.0.113.57",
      "raised_at": "2025-07-30 00:00:20",
      "verdict": "true_positive"
    },
    {
      "id": 484,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-34502",
      "source_ip": "198.51.100.204",
      "raised_at": "2025-09-21 05:26:21",
      "verdict": "benign"
    },
    {
      "id": 485,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-65455",
      "source_ip": "192.0.2.74",
      "raised_at": "2025-09-22 12:06:20",
      "verdict": "false_positive"
    },
    {
      "id": 486,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-13253",
      "source_ip": "203.0.113.186",
      "raised_at": "2025-07-16 21:22:44",
      "verdict": "true_positive"
    },
    {
      "id": 487,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-00806",
      "source_ip": "198.51.100.2",
      "raised_at": "2025-08-12 16:56:05",
      "verdict": "false_positive"
    },
    {
      "id": 488,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "critical",
      "asset_type": "network",
      "asset_ref": "ASSET-09011",
      "source_ip": "192.0.2.241",
      "raised_at": "2025-09-20 16:20:53",
      "verdict": "benign"
    },
    {
      "id": 489,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-97910",
      "source_ip": "198.51.100.82",
      "raised_at": "2025-07-03 07:02:01",
      "verdict": "true_positive"
    },
    {
      "id": 490,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-13082",
      "source_ip": "192.0.2.92",
      "raised_at": "2025-09-05 19:04:56",
      "verdict": "true_positive"
    },
    {
      "id": 491,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-26429",
      "source_ip": "192.0.2.207",
      "raised_at": "2025-08-28 01:43:23",
      "verdict": "false_positive"
    },
    {
      "id": 492,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-34760",
      "source_ip": "198.51.100.192",
      "raised_at": "2025-08-04 04:49:28",
      "verdict": "false_positive"
    },
    {
      "id": 493,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-76795",
      "source_ip": "203.0.113.121",
      "raised_at": "2025-07-07 09:29:11",
      "verdict": "benign"
    },
    {
      "id": 494,
      "rule_id": 11,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-40793",
      "source_ip": "203.0.113.187",
      "raised_at": "2025-08-15 03:22:06",
      "verdict": "false_positive"
    },
    {
      "id": 495,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-51844",
      "source_ip": "192.0.2.187",
      "raised_at": "2025-09-29 16:28:50",
      "verdict": "benign"
    },
    {
      "id": 496,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-33070",
      "source_ip": "198.51.100.125",
      "raised_at": "2025-09-01 17:35:09",
      "verdict": "benign"
    },
    {
      "id": 497,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-92234",
      "source_ip": "198.51.100.157",
      "raised_at": "2025-08-13 17:44:21",
      "verdict": "false_positive"
    },
    {
      "id": 498,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-33903",
      "source_ip": "203.0.113.67",
      "raised_at": "2025-07-14 16:30:19",
      "verdict": "false_positive"
    },
    {
      "id": 499,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-07512",
      "source_ip": "198.51.100.219",
      "raised_at": "2025-07-22 19:48:29",
      "verdict": "false_positive"
    },
    {
      "id": 500,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "critical",
      "asset_type": "account",
      "asset_ref": "ASSET-81858",
      "source_ip": "198.51.100.49",
      "raised_at": "2025-09-18 09:53:40",
      "verdict": "false_positive"
    },
    {
      "id": 501,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-98790",
      "source_ip": "198.51.100.246",
      "raised_at": "2025-09-21 22:00:59",
      "verdict": "false_positive"
    },
    {
      "id": 502,
      "rule_id": 10,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-26572",
      "source_ip": "192.0.2.13",
      "raised_at": "2025-07-21 22:53:55",
      "verdict": "benign"
    },
    {
      "id": 503,
      "rule_id": 5,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-22876",
      "source_ip": "198.51.100.112",
      "raised_at": "2025-08-24 03:24:06",
      "verdict": "true_positive"
    },
    {
      "id": 504,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "critical",
      "asset_type": "host",
      "asset_ref": "ASSET-10573",
      "source_ip": "203.0.113.39",
      "raised_at": "2025-09-07 16:29:04",
      "verdict": "benign"
    },
    {
      "id": 505,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-46087",
      "source_ip": "203.0.113.233",
      "raised_at": "2025-09-13 06:57:49",
      "verdict": "benign"
    },
    {
      "id": 506,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-17270",
      "source_ip": "198.51.100.127",
      "raised_at": "2025-07-16 06:16:00",
      "verdict": "true_positive"
    },
    {
      "id": 507,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-92642",
      "source_ip": "198.51.100.122",
      "raised_at": "2025-09-02 23:08:46",
      "verdict": "false_positive"
    },
    {
      "id": 508,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-59985",
      "source_ip": "192.0.2.93",
      "raised_at": "2025-08-27 14:09:34",
      "verdict": "false_positive"
    },
    {
      "id": 509,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-89293",
      "source_ip": "198.51.100.240",
      "raised_at": "2025-07-05 20:00:13",
      "verdict": "benign"
    },
    {
      "id": 510,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-86079",
      "source_ip": "192.0.2.12",
      "raised_at": "2025-07-02 13:52:04",
      "verdict": "benign"
    },
    {
      "id": 511,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-71096",
      "source_ip": "198.51.100.163",
      "raised_at": "2025-08-29 13:58:25",
      "verdict": "benign"
    },
    {
      "id": 512,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-65332",
      "source_ip": "203.0.113.53",
      "raised_at": "2025-09-02 06:25:10",
      "verdict": "benign"
    },
    {
      "id": 513,
      "rule_id": 12,
      "source_tool": "siem",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-55029",
      "source_ip": "192.0.2.204",
      "raised_at": "2025-07-14 15:45:12",
      "verdict": "benign"
    },
    {
      "id": 514,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-86416",
      "source_ip": "198.51.100.246",
      "raised_at": "2025-09-08 21:40:26",
      "verdict": "true_positive"
    },
    {
      "id": 515,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-57585",
      "source_ip": "192.0.2.54",
      "raised_at": "2025-08-11 05:30:15",
      "verdict": "false_positive"
    },
    {
      "id": 516,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-41483",
      "source_ip": "203.0.113.11",
      "raised_at": "2025-09-28 07:36:06",
      "verdict": "false_positive"
    },
    {
      "id": 517,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-73890",
      "source_ip": "203.0.113.140",
      "raised_at": "2025-07-10 05:22:48",
      "verdict": "false_positive"
    },
    {
      "id": 518,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-68214",
      "source_ip": "198.51.100.6",
      "raised_at": "2025-08-17 01:44:35",
      "verdict": "benign"
    },
    {
      "id": 519,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-67137",
      "source_ip": "192.0.2.182",
      "raised_at": "2025-09-30 15:39:36",
      "verdict": "benign"
    },
    {
      "id": 520,
      "rule_id": 4,
      "source_tool": "email_gateway",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-70613",
      "source_ip": "198.51.100.82",
      "raised_at": "2025-09-30 06:06:50",
      "verdict": "false_positive"
    },
    {
      "id": 521,
      "rule_id": 13,
      "source_tool": "ids",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-34837",
      "source_ip": "203.0.113.155",
      "raised_at": "2025-08-14 00:49:40",
      "verdict": "benign"
    },
    {
      "id": 522,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-54003",
      "source_ip": "198.51.100.198",
      "raised_at": "2025-09-01 03:19:35",
      "verdict": "true_positive"
    },
    {
      "id": 523,
      "rule_id": 18,
      "source_tool": "email_gateway",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-10424",
      "source_ip": "203.0.113.116",
      "raised_at": "2025-08-16 18:52:24",
      "verdict": "false_positive"
    },
    {
      "id": 524,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-25284",
      "source_ip": "192.0.2.184",
      "raised_at": "2025-09-23 08:33:14",
      "verdict": "false_positive"
    },
    {
      "id": 525,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-93454",
      "source_ip": "198.51.100.202",
      "raised_at": "2025-08-27 18:48:39",
      "verdict": "false_positive"
    },
    {
      "id": 526,
      "rule_id": 1,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-80559",
      "source_ip": "203.0.113.6",
      "raised_at": "2025-08-13 07:46:14",
      "verdict": "benign"
    },
    {
      "id": 527,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-35757",
      "source_ip": "198.51.100.53",
      "raised_at": "2025-09-20 16:17:20",
      "verdict": "benign"
    },
    {
      "id": 528,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-00242",
      "source_ip": "192.0.2.79",
      "raised_at": "2025-08-29 06:19:54",
      "verdict": "benign"
    },
    {
      "id": 529,
      "rule_id": 14,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-44625",
      "source_ip": "203.0.113.238",
      "raised_at": "2025-08-19 06:20:57",
      "verdict": "true_positive"
    },
    {
      "id": 530,
      "rule_id": 17,
      "source_tool": "siem",
      "severity": "high",
      "asset_type": "account",
      "asset_ref": "ASSET-92326",
      "source_ip": "198.51.100.99",
      "raised_at": "2025-09-15 18:43:37",
      "verdict": "false_positive"
    },
    {
      "id": 531,
      "rule_id": 7,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-13566",
      "source_ip": "203.0.113.121",
      "raised_at": "2025-08-03 09:15:19",
      "verdict": "benign"
    },
    {
      "id": 532,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-60464",
      "source_ip": "192.0.2.154",
      "raised_at": "2025-08-28 15:02:30",
      "verdict": "true_positive"
    },
    {
      "id": 533,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-80094",
      "source_ip": "203.0.113.144",
      "raised_at": "2025-09-03 06:38:48",
      "verdict": "false_positive"
    },
    {
      "id": 534,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "account",
      "asset_ref": "ASSET-07423",
      "source_ip": "198.51.100.32",
      "raised_at": "2025-07-10 07:34:45",
      "verdict": "true_positive"
    },
    {
      "id": 535,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-74642",
      "source_ip": "198.51.100.235",
      "raised_at": "2025-07-12 05:44:51",
      "verdict": "false_positive"
    },
    {
      "id": 536,
      "rule_id": 2,
      "source_tool": "siem",
      "severity": "medium",
      "asset_type": "network",
      "asset_ref": "ASSET-44279",
      "source_ip": "198.51.100.203",
      "raised_at": "2025-09-23 07:13:02",
      "verdict": "benign"
    },
    {
      "id": 537,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "account",
      "asset_ref": "ASSET-81976",
      "source_ip": "192.0.2.98",
      "raised_at": "2025-09-11 11:57:40",
      "verdict": "false_positive"
    },
    {
      "id": 538,
      "rule_id": 3,
      "source_tool": "ids",
      "severity": "low",
      "asset_type": "network",
      "asset_ref": "ASSET-23737",
      "source_ip": "203.0.113.251",
      "raised_at": "2025-07-22 23:52:14",
      "verdict": "false_positive"
    },
    {
      "id": 539,
      "rule_id": 16,
      "source_tool": "cloud_audit",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-59861",
      "source_ip": "203.0.113.232",
      "raised_at": "2025-09-24 17:58:12",
      "verdict": "false_positive"
    },
    {
      "id": 540,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "low",
      "asset_type": "host",
      "asset_ref": "ASSET-78762",
      "source_ip": "192.0.2.147",
      "raised_at": "2025-09-01 14:00:43",
      "verdict": "false_positive"
    },
    {
      "id": 541,
      "rule_id": 6,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "network",
      "asset_ref": "ASSET-49802",
      "source_ip": "198.51.100.153",
      "raised_at": "2025-07-08 22:05:39",
      "verdict": "benign"
    },
    {
      "id": 542,
      "rule_id": 8,
      "source_tool": "edr",
      "severity": "medium",
      "asset_type": "host",
      "asset_ref": "ASSET-50431",
      "source_ip": "192.0.2.106",
      "raised_at": "2025-09-22 01:35:10",
      "verdict": "benign"
    },
    {
      "id": 543,
      "rule_id": 9,
      "source_tool": "cloud_audit",
      "severity": "high",
      "asset_type": "host",
      "asset_ref": "ASSET-24402",
      "source_ip": "192.0.2.112",
      "raised_at": "2025-09-13 00:00:32",
      "verdict": "false_positive"
    }
  ],
  "alert_transitions": [
    {
      "id": 1,
      "alert_id": 32,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-12 00:36:50",
      "note": "The document was rejected — repeat case, no further action."
    },
    {
      "id": 2,
      "alert_id": 117,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-20 12:48:22",
      "note": "The request was rescheduled — incomplete case, no further action."
    },
    {
      "id": 3,
      "alert_id": 340,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-02 15:39:55",
      "note": "The account owner confirmed the details and the document was rejected."
    },
    {
      "id": 4,
      "alert_id": 353,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-08-26 13:10:17",
      "note": "The reviewer confirmed the details and the shipment was confirmed."
    },
    {
      "id": 5,
      "alert_id": 64,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-14 00:25:32",
      "note": "The payment was escalated after a minor check."
    },
    {
      "id": 6,
      "alert_id": 300,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-14 11:13:08",
      "note": "The team confirmed the details and the order was reviewed."
    },
    {
      "id": 7,
      "alert_id": 537,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-12 16:12:25",
      "note": "An operator reported an urgent issue; the record was reopened."
    },
    {
      "id": 8,
      "alert_id": 240,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-16 08:08:49",
      "note": "A repeat record was escalated the same day."
    },
    {
      "id": 9,
      "alert_id": 43,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-29 10:24:04",
      "note": "The supplier asked for a change and the transfer was resolved."
    },
    {
      "id": 10,
      "alert_id": 202,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-09 15:39:35",
      "note": "Flagged as automatic. The reviewer confirmed the request."
    },
    {
      "id": 11,
      "alert_id": 49,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-07-26 11:20:52",
      "note": "No response from the reviewer, so the account was escalated."
    },
    {
      "id": 12,
      "alert_id": 165,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-20 21:18:51",
      "note": "The account owner confirmed the details and the report was replaced."
    },
    {
      "id": 13,
      "alert_id": 258,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-29 01:41:53",
      "note": "A routine follow-up: the shipment was completed."
    },
    {
      "id": 14,
      "alert_id": 531,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-03 14:41:01",
      "note": "A duplicate follow-up: the refund was approved."
    },
    {
      "id": 15,
      "alert_id": 277,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-19 04:20:01",
      "note": "The reviewer reported an incomplete issue; the request was confirmed."
    },
    {
      "id": 16,
      "alert_id": 250,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-09 09:01:22",
      "note": "The customer reported an urgent issue; the invoice was replaced."
    },
    {
      "id": 17,
      "alert_id": 444,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-22 01:41:02",
      "note": "The session was completed after a late check."
    },
    {
      "id": 18,
      "alert_id": 240,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-17 10:38:53",
      "note": "Flagged as partial. The team reviewed the request."
    },
    {
      "id": 19,
      "alert_id": 177,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-11 07:06:45",
      "note": "A duplicate delivery was resolved the same day."
    },
    {
      "id": 20,
      "alert_id": 223,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-09 19:37:35",
      "note": "The appointment was cancelled — standard case, no further action."
    },
    {
      "id": 21,
      "alert_id": 209,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-05 19:37:30",
      "note": "Flagged as routine. The courier closed the shipment."
    },
    {
      "id": 22,
      "alert_id": 326,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-10 17:50:53",
      "note": "The record was escalated following a late review."
    },
    {
      "id": 23,
      "alert_id": 256,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-10 06:38:57",
      "note": "The courier confirmed the details and the ticket was updated."
    },
    {
      "id": 24,
      "alert_id": 237,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-28 23:30:16",
      "note": "Support reported a manual issue; the claim was completed."
    },
    {
      "id": 25,
      "alert_id": 163,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-01 09:08:36",
      "note": "The courier asked for a change and the request was confirmed."
    },
    {
      "id": 26,
      "alert_id": 276,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-10 19:00:05",
      "note": "The shipment was updated after a routine check."
    },
    {
      "id": 27,
      "alert_id": 522,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-02 19:48:19",
      "note": "The supplier confirmed the details and the refund was cancelled."
    },
    {
      "id": 28,
      "alert_id": 247,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-01 14:30:31",
      "note": "An operator reported a late issue; the invoice was escalated."
    },
    {
      "id": 29,
      "alert_id": 47,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-23 04:41:54",
      "note": "The courier asked for a change and the refund was rejected."
    },
    {
      "id": 30,
      "alert_id": 338,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-05 08:41:56",
      "note": "The session was confirmed following a minor review."
    },
    {
      "id": 31,
      "alert_id": 166,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-09-03 07:22:12",
      "note": "An unusual follow-up: the request was updated."
    },
    {
      "id": 32,
      "alert_id": 79,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-17 04:56:34",
      "note": "The account owner reported a late issue; the item was rescheduled."
    },
    {
      "id": 33,
      "alert_id": 414,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-18 10:44:25",
      "note": "The reviewer reported a repeat issue; the invoice was updated."
    },
    {
      "id": 34,
      "alert_id": 83,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-30 21:56:42",
      "note": "The courier confirmed the details and the record was approved."
    },
    {
      "id": 35,
      "alert_id": 401,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-23 21:12:34",
      "note": "A duplicate payment was refunded the same day."
    },
    {
      "id": 36,
      "alert_id": 29,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-07 04:19:45",
      "note": "Flagged as duplicate. The supplier reviewed the invoice."
    },
    {
      "id": 37,
      "alert_id": 84,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-30 03:15:43",
      "note": "The order was approved after a partial check."
    },
    {
      "id": 38,
      "alert_id": 489,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-05 05:41:09",
      "note": "The session was reopened following an incomplete review."
    },
    {
      "id": 39,
      "alert_id": 313,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-03 11:40:42",
      "note": "The customer reported a manual issue; the refund was cancelled."
    },
    {
      "id": 40,
      "alert_id": 360,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-12 12:09:43",
      "note": "The supplier asked for a change and the appointment was rescheduled."
    },
    {
      "id": 41,
      "alert_id": 208,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-19 12:15:49",
      "note": "The payment was replaced after a late check."
    },
    {
      "id": 42,
      "alert_id": 67,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-01 14:04:53",
      "note": "A standard follow-up: the ticket was reviewed."
    },
    {
      "id": 43,
      "alert_id": 175,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-17 23:54:20",
      "note": "The supplier asked for a change and the transfer was rejected."
    },
    {
      "id": 44,
      "alert_id": 535,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-12 12:19:41",
      "note": "The invoice was escalated after a partial check."
    },
    {
      "id": 45,
      "alert_id": 22,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-07 08:06:23",
      "note": "The report was completed — late case, no further action."
    },
    {
      "id": 46,
      "alert_id": 128,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-06 03:58:17",
      "note": "The account owner reported a manual issue; the invoice was updated."
    },
    {
      "id": 47,
      "alert_id": 316,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-12 10:49:22",
      "note": "Flagged as minor. The team approved the ticket."
    },
    {
      "id": 48,
      "alert_id": 431,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-06 11:48:41",
      "note": "Flagged as incomplete. An operator confirmed the account."
    },
    {
      "id": 49,
      "alert_id": 75,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-06 13:51:34",
      "note": "Flagged as duplicate. The supplier approved the request."
    },
    {
      "id": 50,
      "alert_id": 211,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-30 21:31:07",
      "note": "A standard invoice was escalated the same day."
    },
    {
      "id": 51,
      "alert_id": 396,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-18 11:18:34",
      "note": "The account owner reported a duplicate issue; the payment was reviewed."
    },
    {
      "id": 52,
      "alert_id": 466,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-03 19:52:36",
      "note": "The refund was replaced following a late review."
    },
    {
      "id": 53,
      "alert_id": 424,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-09 02:52:39",
      "note": "The invoice was updated after an unusual check."
    },
    {
      "id": 54,
      "alert_id": 523,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-18 10:54:42",
      "note": "The delivery was cancelled — late case, no further action."
    },
    {
      "id": 55,
      "alert_id": 344,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-09 22:58:43",
      "note": "No response from the supplier, so the booking was reopened."
    },
    {
      "id": 56,
      "alert_id": 26,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-04 19:51:59",
      "note": "Flagged as repeat. An operator refunded the ticket."
    },
    {
      "id": 57,
      "alert_id": 69,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-15 11:46:22",
      "note": "Flagged as standard. Support completed the booking."
    },
    {
      "id": 58,
      "alert_id": 373,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-17 11:06:35",
      "note": "Flagged as repeat. The customer approved the appointment."
    },
    {
      "id": 59,
      "alert_id": 87,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-23 19:33:52",
      "note": "No response from the courier, so the appointment was approved."
    },
    {
      "id": 60,
      "alert_id": 96,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-17 01:26:24",
      "note": "An operator confirmed the details and the request was refunded."
    },
    {
      "id": 61,
      "alert_id": 460,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-30 13:02:52",
      "note": "The customer confirmed the details and the request was closed."
    },
    {
      "id": 62,
      "alert_id": 120,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-17 23:33:26",
      "note": "No response from the team, so the appointment was completed."
    },
    {
      "id": 63,
      "alert_id": 532,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-28 18:27:55",
      "note": "The team asked for a change and the booking was closed."
    },
    {
      "id": 64,
      "alert_id": 253,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-02 23:58:41",
      "note": "The team reported an automatic issue; the refund was completed."
    },
    {
      "id": 65,
      "alert_id": 336,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-10 13:52:16",
      "note": "No response from the customer, so the record was replaced."
    },
    {
      "id": 66,
      "alert_id": 258,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-30 10:40:34",
      "note": "The refund was delayed following a manual review."
    },
    {
      "id": 67,
      "alert_id": 189,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-01 12:57:42",
      "note": "The refund was closed following a minor review."
    },
    {
      "id": 68,
      "alert_id": 319,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-02 07:15:50",
      "note": "No response from the courier, so the account was updated."
    },
    {
      "id": 69,
      "alert_id": 55,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-08 04:05:46",
      "note": "The courier asked for a change and the invoice was closed."
    },
    {
      "id": 70,
      "alert_id": 51,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-07 04:50:55",
      "note": "Flagged as partial. The customer refunded the booking."
    },
    {
      "id": 71,
      "alert_id": 204,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-11 03:23:01",
      "note": "The shipment was refunded after an urgent check."
    },
    {
      "id": 72,
      "alert_id": 273,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-09-21 21:48:10",
      "note": "An operator confirmed the details and the delivery was approved."
    },
    {
      "id": 73,
      "alert_id": 409,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-30 20:19:04",
      "note": "The refund was cancelled following a partial review."
    },
    {
      "id": 74,
      "alert_id": 87,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-09-23 20:57:16",
      "note": "The customer confirmed the details and the item was reviewed."
    },
    {
      "id": 75,
      "alert_id": 444,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-09-23 15:07:04",
      "note": "Flagged as partial. The account owner rejected the report."
    },
    {
      "id": 76,
      "alert_id": 63,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-12 06:06:55",
      "note": "The transfer was approved following a manual review."
    },
    {
      "id": 77,
      "alert_id": 170,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-30 17:23:15",
      "note": "The payment was replaced following an automatic review."
    },
    {
      "id": 78,
      "alert_id": 425,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-25 23:20:12",
      "note": "The appointment was replaced — partial case, no further action."
    },
    {
      "id": 79,
      "alert_id": 98,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-23 19:47:45",
      "note": "The session was completed following a duplicate review."
    },
    {
      "id": 80,
      "alert_id": 358,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-05 13:36:10",
      "note": "The refund was resolved after an automatic check."
    },
    {
      "id": 81,
      "alert_id": 420,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-15 06:19:40",
      "note": "Flagged as manual. The supplier delayed the document."
    },
    {
      "id": 82,
      "alert_id": 528,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-30 05:45:17",
      "note": "No response from an operator, so the session was replaced."
    },
    {
      "id": 83,
      "alert_id": 29,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-08 20:16:16",
      "note": "The courier confirmed the details and the claim was completed."
    },
    {
      "id": 84,
      "alert_id": 368,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-08 07:10:06",
      "note": "The session was approved — automatic case, no further action."
    },
    {
      "id": 85,
      "alert_id": 230,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-22 08:36:14",
      "note": "The transfer was processed — repeat case, no further action."
    },
    {
      "id": 86,
      "alert_id": 417,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-21 17:06:47",
      "note": "The supplier asked for a change and the refund was cancelled."
    },
    {
      "id": 87,
      "alert_id": 352,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-05 19:27:40",
      "note": "A manual follow-up: the account was reviewed."
    },
    {
      "id": 88,
      "alert_id": 396,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-20 09:35:28",
      "note": "The payment was escalated after an urgent check."
    },
    {
      "id": 89,
      "alert_id": 16,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-20 15:12:12",
      "note": "The account owner confirmed the details and the item was approved."
    },
    {
      "id": 90,
      "alert_id": 449,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-19 16:43:46",
      "note": "An operator confirmed the details and the shipment was rescheduled."
    },
    {
      "id": 91,
      "alert_id": 146,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-07 23:18:44",
      "note": "Support asked for a change and the request was updated."
    },
    {
      "id": 92,
      "alert_id": 288,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-14 11:47:42",
      "note": "A repeat ticket was updated the same day."
    },
    {
      "id": 93,
      "alert_id": 244,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-05 12:08:39",
      "note": "A manual follow-up: the session was processed."
    },
    {
      "id": 94,
      "alert_id": 318,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-12 04:56:54",
      "note": "Support asked for a change and the account was reviewed."
    },
    {
      "id": 95,
      "alert_id": 189,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-09-01 13:52:37",
      "note": "The team asked for a change and the delivery was reviewed."
    },
    {
      "id": 96,
      "alert_id": 422,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-13 13:45:44",
      "note": "The supplier confirmed the details and the item was reviewed."
    },
    {
      "id": 97,
      "alert_id": 159,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-28 22:45:33",
      "note": "No response from the team, so the report was replaced."
    },
    {
      "id": 98,
      "alert_id": 216,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-02 11:24:23",
      "note": "No response from the team, so the invoice was completed."
    },
    {
      "id": 99,
      "alert_id": 395,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-06 05:22:27",
      "note": "The session was escalated following an automatic review."
    },
    {
      "id": 100,
      "alert_id": 62,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-14 12:19:58",
      "note": "A manual follow-up: the payment was rejected."
    },
    {
      "id": 101,
      "alert_id": 229,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-23 22:01:09",
      "note": "A partial refund was rescheduled the same day."
    },
    {
      "id": 102,
      "alert_id": 119,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-13 08:57:07",
      "note": "Flagged as repeat. The account owner approved the shipment."
    },
    {
      "id": 103,
      "alert_id": 436,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-06 11:09:39",
      "note": "A standard follow-up: the refund was confirmed."
    },
    {
      "id": 104,
      "alert_id": 127,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-27 14:42:15",
      "note": "The claim was approved — unusual case, no further action."
    },
    {
      "id": 105,
      "alert_id": 202,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-08-09 21:02:51",
      "note": "The claim was approved following a partial review."
    },
    {
      "id": 106,
      "alert_id": 131,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-24 23:52:08",
      "note": "An unusual request was resolved the same day."
    },
    {
      "id": 107,
      "alert_id": 482,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-30 11:42:07",
      "note": "The transfer was cancelled following a repeat review."
    },
    {
      "id": 108,
      "alert_id": 190,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-07-09 12:22:22",
      "note": "Support asked for a change and the session was rejected."
    },
    {
      "id": 109,
      "alert_id": 369,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-23 01:39:48",
      "note": "No response from the account owner, so the document was updated."
    },
    {
      "id": 110,
      "alert_id": 146,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-09 18:34:44",
      "note": "The customer confirmed the details and the account was completed."
    },
    {
      "id": 111,
      "alert_id": 480,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-23 23:48:31",
      "note": "The report was confirmed — routine case, no further action."
    },
    {
      "id": 112,
      "alert_id": 142,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-05 04:32:49",
      "note": "The document was confirmed after a late check."
    },
    {
      "id": 113,
      "alert_id": 392,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-24 00:34:28",
      "note": "The shipment was reviewed following a routine review."
    },
    {
      "id": 114,
      "alert_id": 195,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-04 02:15:09",
      "note": "No response from the team, so the report was closed."
    },
    {
      "id": 115,
      "alert_id": 343,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-05 08:53:35",
      "note": "The team confirmed the details and the shipment was processed."
    },
    {
      "id": 116,
      "alert_id": 383,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-21 21:22:57",
      "note": "A routine payment was reviewed the same day."
    },
    {
      "id": 117,
      "alert_id": 224,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-11 12:14:18",
      "note": "The request was updated following a late review."
    },
    {
      "id": 118,
      "alert_id": 98,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-08-24 08:59:06",
      "note": "The account owner asked for a change and the account was reviewed."
    },
    {
      "id": 119,
      "alert_id": 199,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-06 17:31:59",
      "note": "A duplicate follow-up: the account was approved."
    },
    {
      "id": 120,
      "alert_id": 235,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-29 07:07:10",
      "note": "Flagged as repeat. The customer refunded the shipment."
    },
    {
      "id": 121,
      "alert_id": 190,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-07-11 07:38:16",
      "note": "A repeat follow-up: the shipment was escalated."
    },
    {
      "id": 122,
      "alert_id": 439,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-20 06:47:47",
      "note": "The ticket was processed following a repeat review."
    },
    {
      "id": 123,
      "alert_id": 125,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-29 07:04:39",
      "note": "A repeat follow-up: the shipment was replaced."
    },
    {
      "id": 124,
      "alert_id": 31,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-05 00:32:08",
      "note": "Flagged as standard. The account owner cancelled the refund."
    },
    {
      "id": 125,
      "alert_id": 470,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-07-18 23:30:54",
      "note": "No response from the reviewer, so the item was updated."
    },
    {
      "id": 126,
      "alert_id": 420,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-15 19:57:13",
      "note": "A partial payment was rejected the same day."
    },
    {
      "id": 127,
      "alert_id": 459,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-30 23:21:42",
      "note": "The transfer was closed after an urgent check."
    },
    {
      "id": 128,
      "alert_id": 106,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-05 07:00:43",
      "note": "The ticket was escalated after an automatic check."
    },
    {
      "id": 129,
      "alert_id": 122,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-02 07:58:54",
      "note": "No response from the customer, so the report was resolved."
    },
    {
      "id": 130,
      "alert_id": 5,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-03 07:07:05",
      "note": "The record was updated following a repeat review."
    },
    {
      "id": 131,
      "alert_id": 388,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-12 04:23:14",
      "note": "The report was closed — late case, no further action."
    },
    {
      "id": 132,
      "alert_id": 480,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-08-25 08:12:35",
      "note": "A standard follow-up: the request was escalated."
    },
    {
      "id": 133,
      "alert_id": 314,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-05 21:57:42",
      "note": "Flagged as incomplete. The account owner refunded the claim."
    },
    {
      "id": 134,
      "alert_id": 537,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-12 19:13:22",
      "note": "The appointment was rescheduled after an unusual check."
    },
    {
      "id": 135,
      "alert_id": 49,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-07-27 19:20:34",
      "note": "An urgent follow-up: the payment was resolved."
    },
    {
      "id": 136,
      "alert_id": 336,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-07-11 11:54:44",
      "note": "The reviewer reported a late issue; the session was updated."
    },
    {
      "id": 137,
      "alert_id": 383,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-22 14:51:40",
      "note": "A standard follow-up: the payment was closed."
    },
    {
      "id": 138,
      "alert_id": 371,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-23 14:17:25",
      "note": "A duplicate follow-up: the transfer was confirmed."
    },
    {
      "id": 139,
      "alert_id": 297,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-04 03:42:17",
      "note": "The payment was replaced — minor case, no further action."
    },
    {
      "id": 140,
      "alert_id": 209,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-07 12:45:28",
      "note": "The claim was reopened following a duplicate review."
    },
    {
      "id": 141,
      "alert_id": 160,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-22 22:53:18",
      "note": "A routine follow-up: the booking was replaced."
    },
    {
      "id": 142,
      "alert_id": 105,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-16 11:10:35",
      "note": "An automatic account was resolved the same day."
    },
    {
      "id": 143,
      "alert_id": 396,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 16,
      "changed_at": "2025-08-22 04:21:19",
      "note": "The customer confirmed the details and the booking was approved."
    },
    {
      "id": 144,
      "alert_id": 260,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-10 15:38:46",
      "note": "The customer reported an automatic issue; the ticket was reopened."
    },
    {
      "id": 145,
      "alert_id": 329,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-15 05:23:55",
      "note": "No response from the reviewer, so the record was reviewed."
    },
    {
      "id": 146,
      "alert_id": 107,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-13 23:35:17",
      "note": "The courier reported a partial issue; the payment was escalated."
    },
    {
      "id": 147,
      "alert_id": 432,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-07-31 10:44:21",
      "note": "A repeat item was closed the same day."
    },
    {
      "id": 148,
      "alert_id": 142,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-05 05:01:09",
      "note": "The courier confirmed the details and the payment was resolved."
    },
    {
      "id": 149,
      "alert_id": 155,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-23 20:26:59",
      "note": "The supplier asked for a change and the item was reopened."
    },
    {
      "id": 150,
      "alert_id": 313,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-08-05 08:54:59",
      "note": "The request was replaced following a standard review."
    },
    {
      "id": 151,
      "alert_id": 312,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-03 19:14:57",
      "note": "The customer asked for a change and the invoice was reopened."
    },
    {
      "id": 152,
      "alert_id": 264,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-11 05:01:31",
      "note": "Flagged as standard. The customer escalated the report."
    },
    {
      "id": 153,
      "alert_id": 228,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-28 09:38:40",
      "note": "A repeat follow-up: the session was resolved."
    },
    {
      "id": 154,
      "alert_id": 538,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-24 22:25:49",
      "note": "Flagged as automatic. Support cancelled the request."
    },
    {
      "id": 155,
      "alert_id": 277,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-08-19 06:36:16",
      "note": "The report was processed following a minor review."
    },
    {
      "id": 156,
      "alert_id": 25,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-23 07:14:43",
      "note": "No response from an operator, so the ticket was processed."
    },
    {
      "id": 157,
      "alert_id": 286,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-19 19:05:19",
      "note": "The supplier confirmed the details and the claim was delayed."
    },
    {
      "id": 158,
      "alert_id": 279,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-14 11:36:35",
      "note": "An unusual session was approved the same day."
    },
    {
      "id": 159,
      "alert_id": 79,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-08-17 16:57:39",
      "note": "The supplier reported an urgent issue; the item was confirmed."
    },
    {
      "id": 160,
      "alert_id": 189,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-09-03 11:33:12",
      "note": "The delivery was closed — standard case, no further action."
    },
    {
      "id": 161,
      "alert_id": 191,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-05 07:49:41",
      "note": "The account was delayed after a routine check."
    },
    {
      "id": 162,
      "alert_id": 326,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-09-11 05:53:51",
      "note": "The claim was reviewed — routine case, no further action."
    },
    {
      "id": 163,
      "alert_id": 110,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-17 11:10:25",
      "note": "The document was reviewed — minor case, no further action."
    },
    {
      "id": 164,
      "alert_id": 104,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-21 14:56:58",
      "note": "The payment was refunded after a manual check."
    },
    {
      "id": 165,
      "alert_id": 536,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-24 12:42:40",
      "note": "The appointment was refunded — unusual case, no further action."
    },
    {
      "id": 166,
      "alert_id": 181,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-22 18:36:36",
      "note": "An unusual invoice was escalated the same day."
    },
    {
      "id": 167,
      "alert_id": 88,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-03 00:52:34",
      "note": "The supplier asked for a change and the invoice was updated."
    },
    {
      "id": 168,
      "alert_id": 334,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-18 00:37:48",
      "note": "Flagged as urgent. The customer escalated the account."
    },
    {
      "id": 169,
      "alert_id": 315,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-30 12:48:55",
      "note": "An urgent invoice was completed the same day."
    },
    {
      "id": 170,
      "alert_id": 325,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-15 21:21:47",
      "note": "Support asked for a change and the claim was resolved."
    },
    {
      "id": 171,
      "alert_id": 392,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-08-25 02:49:42",
      "note": "The supplier reported a duplicate issue; the payment was closed."
    },
    {
      "id": 172,
      "alert_id": 81,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-16 11:38:57",
      "note": "No response from the supplier, so the account was approved."
    },
    {
      "id": 173,
      "alert_id": 322,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-20 16:55:46",
      "note": "Flagged as urgent. The account owner completed the invoice."
    },
    {
      "id": 174,
      "alert_id": 321,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-26 15:43:56",
      "note": "The team asked for a change and the payment was closed."
    },
    {
      "id": 175,
      "alert_id": 419,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-26 05:36:02",
      "note": "The booking was approved — urgent case, no further action."
    },
    {
      "id": 176,
      "alert_id": 346,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-28 22:09:16",
      "note": "The account was cancelled — partial case, no further action."
    },
    {
      "id": 177,
      "alert_id": 470,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-19 01:00:23",
      "note": "No response from the supplier, so the appointment was reopened."
    },
    {
      "id": 178,
      "alert_id": 34,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-29 15:30:52",
      "note": "A minor ticket was refunded the same day."
    },
    {
      "id": 179,
      "alert_id": 53,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-28 14:56:59",
      "note": "Flagged as incomplete. The team rejected the report."
    },
    {
      "id": 180,
      "alert_id": 126,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-09 10:58:08",
      "note": "The supplier confirmed the details and the ticket was delayed."
    },
    {
      "id": 181,
      "alert_id": 344,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-09-10 13:22:44",
      "note": "Flagged as manual. An operator reviewed the session."
    },
    {
      "id": 182,
      "alert_id": 417,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-09-22 12:58:07",
      "note": "An operator confirmed the details and the booking was rescheduled."
    },
    {
      "id": 183,
      "alert_id": 430,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-09 05:31:05",
      "note": "The refund was refunded — repeat case, no further action."
    },
    {
      "id": 184,
      "alert_id": 470,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-07-20 03:28:41",
      "note": "Support reported a duplicate issue; the refund was rescheduled."
    },
    {
      "id": 185,
      "alert_id": 276,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-09-11 04:17:17",
      "note": "No response from the team, so the ticket was confirmed."
    },
    {
      "id": 186,
      "alert_id": 342,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-06 20:41:22",
      "note": "The reviewer asked for a change and the transfer was approved."
    },
    {
      "id": 187,
      "alert_id": 94,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-01 17:57:05",
      "note": "An urgent request was approved the same day."
    },
    {
      "id": 188,
      "alert_id": 195,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-09-05 00:45:21",
      "note": "Support reported an incomplete issue; the payment was completed."
    },
    {
      "id": 189,
      "alert_id": 55,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-09 20:29:43",
      "note": "The reviewer reported an unusual issue; the invoice was confirmed."
    },
    {
      "id": 190,
      "alert_id": 50,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-21 23:24:21",
      "note": "Support asked for a change and the request was refunded."
    },
    {
      "id": 191,
      "alert_id": 223,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-11 07:10:50",
      "note": "The supplier reported a standard issue; the refund was processed."
    },
    {
      "id": 192,
      "alert_id": 46,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-11 12:06:19",
      "note": "Flagged as partial. The customer rescheduled the payment."
    },
    {
      "id": 193,
      "alert_id": 505,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-15 05:58:32",
      "note": "Support asked for a change and the account was approved."
    },
    {
      "id": 194,
      "alert_id": 525,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-29 17:36:30",
      "note": "Flagged as minor. An operator escalated the request."
    },
    {
      "id": 195,
      "alert_id": 418,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-11 03:58:20",
      "note": "An urgent delivery was cancelled the same day."
    },
    {
      "id": 196,
      "alert_id": 119,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-09-14 13:01:04",
      "note": "The supplier reported an urgent issue; the report was delayed."
    },
    {
      "id": 197,
      "alert_id": 378,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-28 09:45:04",
      "note": "The request was cancelled following a partial review."
    },
    {
      "id": 198,
      "alert_id": 246,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-15 16:54:10",
      "note": "The delivery was delayed — urgent case, no further action."
    },
    {
      "id": 199,
      "alert_id": 130,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-18 15:17:36",
      "note": "Support asked for a change and the transfer was cancelled."
    },
    {
      "id": 200,
      "alert_id": 291,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-13 01:14:30",
      "note": "No response from support, so the report was cancelled."
    },
    {
      "id": 201,
      "alert_id": 160,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-09-24 17:26:58",
      "note": "An unusual follow-up: the account was delayed."
    },
    {
      "id": 202,
      "alert_id": 351,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-30 09:55:53",
      "note": "No response from the team, so the order was rescheduled."
    },
    {
      "id": 203,
      "alert_id": 297,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-08-04 13:46:53",
      "note": "The customer reported an incomplete issue; the transfer was completed."
    },
    {
      "id": 204,
      "alert_id": 219,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-08 19:50:18",
      "note": "The delivery was confirmed following an urgent review."
    },
    {
      "id": 205,
      "alert_id": 329,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-16 23:51:59",
      "note": "The transfer was escalated following an urgent review."
    },
    {
      "id": 206,
      "alert_id": 16,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-08-20 18:39:37",
      "note": "Flagged as partial. The supplier approved the shipment."
    },
    {
      "id": 207,
      "alert_id": 365,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-27 01:00:04",
      "note": "An unusual report was refunded the same day."
    },
    {
      "id": 208,
      "alert_id": 85,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-01 12:02:03",
      "note": "The transfer was refunded following a repeat review."
    },
    {
      "id": 209,
      "alert_id": 201,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-27 01:38:42",
      "note": "Flagged as automatic. The account owner rescheduled the record."
    },
    {
      "id": 210,
      "alert_id": 510,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-04 05:14:36",
      "note": "The session was rescheduled following a routine review."
    },
    {
      "id": 211,
      "alert_id": 474,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-20 23:33:02",
      "note": "The item was reviewed — manual case, no further action."
    },
    {
      "id": 212,
      "alert_id": 449,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-09-20 10:54:42",
      "note": "No response from the supplier, so the delivery was approved."
    },
    {
      "id": 213,
      "alert_id": 317,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-08-02 15:10:04",
      "note": "A routine follow-up: the ticket was processed."
    },
    {
      "id": 214,
      "alert_id": 277,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-08-20 11:35:35",
      "note": "The account owner confirmed the details and the request was processed."
    },
    {
      "id": 215,
      "alert_id": 21,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-17 14:26:34",
      "note": "No response from the courier, so the refund was refunded."
    },
    {
      "id": 216,
      "alert_id": 309,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-25 00:35:02",
      "note": "The booking was updated after a standard check."
    },
    {
      "id": 217,
      "alert_id": 362,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-15 16:30:51",
      "note": "An urgent request was updated the same day."
    },
    {
      "id": 218,
      "alert_id": 42,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-13 05:11:37",
      "note": "The customer confirmed the details and the order was updated."
    },
    {
      "id": 219,
      "alert_id": 232,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-14 05:08:27",
      "note": "The supplier confirmed the details and the record was rejected."
    },
    {
      "id": 220,
      "alert_id": 511,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-30 12:51:12",
      "note": "The invoice was resolved — unusual case, no further action."
    },
    {
      "id": 221,
      "alert_id": 376,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-11 20:11:36",
      "note": "No response from the reviewer, so the invoice was processed."
    },
    {
      "id": 222,
      "alert_id": 117,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-07-21 05:31:00",
      "note": "A standard follow-up: the item was approved."
    },
    {
      "id": 223,
      "alert_id": 388,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-09-13 23:39:14",
      "note": "A standard follow-up: the refund was rejected."
    },
    {
      "id": 224,
      "alert_id": 217,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-23 14:08:10",
      "note": "The account owner reported an automatic issue; the order was approved."
    },
    {
      "id": 225,
      "alert_id": 195,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-09-06 03:57:20",
      "note": "The delivery was reviewed after an urgent check."
    },
    {
      "id": 226,
      "alert_id": 108,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-28 05:10:27",
      "note": "A minor follow-up: the record was completed."
    },
    {
      "id": 227,
      "alert_id": 364,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-09 03:22:32",
      "note": "The supplier reported a repeat issue; the claim was completed."
    },
    {
      "id": 228,
      "alert_id": 512,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-02 15:17:11",
      "note": "The customer asked for a change and the account was escalated."
    },
    {
      "id": 229,
      "alert_id": 252,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-07-24 18:33:21",
      "note": "The refund was completed following a partial review."
    },
    {
      "id": 230,
      "alert_id": 311,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-07 10:40:27",
      "note": "A standard request was closed the same day."
    },
    {
      "id": 231,
      "alert_id": 134,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-10 06:22:34",
      "note": "The shipment was processed following a repeat review."
    },
    {
      "id": 232,
      "alert_id": 448,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-25 23:44:39",
      "note": "The reviewer reported a routine issue; the ticket was processed."
    },
    {
      "id": 233,
      "alert_id": 291,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-09-14 18:55:46",
      "note": "An operator reported an automatic issue; the ticket was approved."
    },
    {
      "id": 234,
      "alert_id": 519,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-10-01 11:03:42",
      "note": "Flagged as duplicate. The customer delayed the ticket."
    },
    {
      "id": 235,
      "alert_id": 426,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-17 22:12:03",
      "note": "The booking was reviewed — urgent case, no further action."
    },
    {
      "id": 236,
      "alert_id": 19,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-06 05:04:23",
      "note": "A late transfer was escalated the same day."
    },
    {
      "id": 237,
      "alert_id": 119,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-09-16 13:03:33",
      "note": "The shipment was rejected following a standard review."
    },
    {
      "id": 238,
      "alert_id": 64,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-09-14 17:32:10",
      "note": "The payment was updated — urgent case, no further action."
    },
    {
      "id": 239,
      "alert_id": 22,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-07 21:50:26",
      "note": "A repeat record was completed the same day."
    },
    {
      "id": 240,
      "alert_id": 256,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-11 03:50:28",
      "note": "The supplier reported an urgent issue; the order was replaced."
    },
    {
      "id": 241,
      "alert_id": 206,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-09-01 23:56:24",
      "note": "A manual refund was escalated the same day."
    },
    {
      "id": 242,
      "alert_id": 161,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-17 08:30:57",
      "note": "The account was closed after an incomplete check."
    },
    {
      "id": 243,
      "alert_id": 19,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-09-06 13:18:38",
      "note": "No response from the courier, so the ticket was closed."
    },
    {
      "id": 244,
      "alert_id": 432,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-08-01 01:14:57",
      "note": "The shipment was rejected — late case, no further action."
    },
    {
      "id": 245,
      "alert_id": 467,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-11 21:00:11",
      "note": "Flagged as routine. The reviewer escalated the record."
    },
    {
      "id": 246,
      "alert_id": 509,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-05 20:11:41",
      "note": "The courier asked for a change and the appointment was rescheduled."
    },
    {
      "id": 247,
      "alert_id": 394,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-16 21:14:01",
      "note": "A repeat follow-up: the request was approved."
    },
    {
      "id": 248,
      "alert_id": 102,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-25 01:28:12",
      "note": "The claim was completed — duplicate case, no further action."
    },
    {
      "id": 249,
      "alert_id": 359,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-25 01:21:31",
      "note": "The team confirmed the details and the document was resolved."
    },
    {
      "id": 250,
      "alert_id": 278,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-23 09:57:44",
      "note": "A duplicate follow-up: the booking was completed."
    },
    {
      "id": 251,
      "alert_id": 85,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-09-02 13:45:46",
      "note": "The delivery was cancelled after an automatic check."
    },
    {
      "id": 252,
      "alert_id": 289,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-07-13 05:03:27",
      "note": "No response from the account owner, so the record was closed."
    },
    {
      "id": 253,
      "alert_id": 203,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-22 05:39:21",
      "note": "An operator confirmed the details and the refund was rescheduled."
    },
    {
      "id": 254,
      "alert_id": 220,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-11 11:32:02",
      "note": "The payment was replaced — incomplete case, no further action."
    },
    {
      "id": 255,
      "alert_id": 14,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-23 12:40:35",
      "note": "An incomplete follow-up: the refund was reviewed."
    },
    {
      "id": 256,
      "alert_id": 440,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-05 10:47:55",
      "note": "The customer asked for a change and the claim was updated."
    },
    {
      "id": 257,
      "alert_id": 60,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-08 14:51:34",
      "note": "The report was reviewed — duplicate case, no further action."
    },
    {
      "id": 258,
      "alert_id": 295,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-17 04:31:11",
      "note": "The session was closed after a minor check."
    },
    {
      "id": 259,
      "alert_id": 148,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-28 12:27:20",
      "note": "No response from the reviewer, so the transfer was completed."
    },
    {
      "id": 260,
      "alert_id": 247,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-01 23:17:25",
      "note": "The team asked for a change and the payment was reviewed."
    },
    {
      "id": 261,
      "alert_id": 516,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-29 04:12:21",
      "note": "An automatic follow-up: the item was confirmed."
    },
    {
      "id": 262,
      "alert_id": 242,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-25 02:16:53",
      "note": "The appointment was reviewed after a duplicate check."
    },
    {
      "id": 263,
      "alert_id": 333,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-25 14:35:26",
      "note": "The ticket was completed — unusual case, no further action."
    },
    {
      "id": 264,
      "alert_id": 509,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-07-07 04:27:27",
      "note": "The reviewer confirmed the details and the session was resolved."
    },
    {
      "id": 265,
      "alert_id": 257,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-19 13:15:42",
      "note": "The document was processed following a duplicate review."
    },
    {
      "id": 266,
      "alert_id": 172,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-13 03:02:30",
      "note": "A manual follow-up: the order was resolved."
    },
    {
      "id": 267,
      "alert_id": 120,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-19 11:09:02",
      "note": "No response from the team, so the session was cancelled."
    },
    {
      "id": 268,
      "alert_id": 126,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-09-10 09:00:13",
      "note": "An incomplete follow-up: the report was rejected."
    },
    {
      "id": 269,
      "alert_id": 110,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-09-18 00:49:02",
      "note": "A standard ticket was rejected the same day."
    },
    {
      "id": 270,
      "alert_id": 55,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-07-10 04:36:04",
      "note": "Flagged as partial. The team rescheduled the booking."
    },
    {
      "id": 271,
      "alert_id": 255,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-26 04:37:55",
      "note": "No response from the team, so the invoice was processed."
    },
    {
      "id": 272,
      "alert_id": 486,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-18 02:14:40",
      "note": "The team reported an incomplete issue; the booking was delayed."
    },
    {
      "id": 273,
      "alert_id": 354,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-09 07:16:32",
      "note": "The appointment was processed — manual case, no further action."
    },
    {
      "id": 274,
      "alert_id": 48,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-29 05:24:37",
      "note": "The supplier reported an unusual issue; the order was reviewed."
    },
    {
      "id": 275,
      "alert_id": 125,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-07-30 08:38:17",
      "note": "A routine record was reopened the same day."
    },
    {
      "id": 276,
      "alert_id": 375,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-18 08:14:00",
      "note": "The payment was closed after a repeat check."
    },
    {
      "id": 277,
      "alert_id": 395,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-07-06 09:08:52",
      "note": "The refund was rejected following a partial review."
    },
    {
      "id": 278,
      "alert_id": 252,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-07-26 04:56:05",
      "note": "Support confirmed the details and the record was delayed."
    },
    {
      "id": 279,
      "alert_id": 304,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-07-12 22:55:47",
      "note": "The request was completed — late case, no further action."
    },
    {
      "id": 280,
      "alert_id": 526,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-15 01:09:05",
      "note": "The session was delayed after an unusual check."
    },
    {
      "id": 281,
      "alert_id": 454,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-20 02:44:48",
      "note": "An incomplete follow-up: the record was completed."
    },
    {
      "id": 282,
      "alert_id": 25,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-23 10:12:59",
      "note": "The customer reported a routine issue; the report was refunded."
    },
    {
      "id": 283,
      "alert_id": 225,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-02 15:47:38",
      "note": "No response from the account owner, so the report was closed."
    },
    {
      "id": 284,
      "alert_id": 385,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-28 11:35:08",
      "note": "Support confirmed the details and the appointment was confirmed."
    },
    {
      "id": 285,
      "alert_id": 283,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-20 13:06:21",
      "note": "The customer asked for a change and the report was confirmed."
    },
    {
      "id": 286,
      "alert_id": 262,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-22 04:03:58",
      "note": "The booking was delayed after an urgent check."
    },
    {
      "id": 287,
      "alert_id": 99,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-11 19:38:15",
      "note": "The appointment was delayed — manual case, no further action."
    },
    {
      "id": 288,
      "alert_id": 18,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-06 06:56:52",
      "note": "The supplier asked for a change and the refund was processed."
    },
    {
      "id": 289,
      "alert_id": 320,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-15 08:27:44",
      "note": "An urgent follow-up: the ticket was rejected."
    },
    {
      "id": 290,
      "alert_id": 306,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-01 12:39:53",
      "note": "An urgent request was approved the same day."
    },
    {
      "id": 291,
      "alert_id": 416,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-21 00:25:43",
      "note": "The courier confirmed the details and the booking was rescheduled."
    },
    {
      "id": 292,
      "alert_id": 263,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-31 01:35:51",
      "note": "An incomplete follow-up: the account was reviewed."
    },
    {
      "id": 293,
      "alert_id": 308,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-13 03:33:33",
      "note": "An automatic follow-up: the invoice was reopened."
    },
    {
      "id": 294,
      "alert_id": 47,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-24 10:26:27",
      "note": "The reviewer reported a partial issue; the shipment was confirmed."
    },
    {
      "id": 295,
      "alert_id": 423,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-04 22:36:33",
      "note": "The courier asked for a change and the report was delayed."
    },
    {
      "id": 296,
      "alert_id": 132,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-10 13:21:14",
      "note": "A duplicate payment was processed the same day."
    },
    {
      "id": 297,
      "alert_id": 24,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-07 06:02:22",
      "note": "The ticket was completed after a partial check."
    },
    {
      "id": 298,
      "alert_id": 335,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-07 14:52:50",
      "note": "No response from the customer, so the claim was reviewed."
    },
    {
      "id": 299,
      "alert_id": 221,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-10 12:04:54",
      "note": "The appointment was replaced following an unusual review."
    },
    {
      "id": 300,
      "alert_id": 265,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-09 14:20:40",
      "note": "The customer asked for a change and the request was rescheduled."
    },
    {
      "id": 301,
      "alert_id": 329,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-07-17 07:30:10",
      "note": "The appointment was rejected — standard case, no further action."
    },
    {
      "id": 302,
      "alert_id": 204,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-08-12 02:48:53",
      "note": "The request was refunded after an urgent check."
    },
    {
      "id": 303,
      "alert_id": 185,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-04 22:45:32",
      "note": "Flagged as repeat. The team updated the order."
    },
    {
      "id": 304,
      "alert_id": 393,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-20 00:12:34",
      "note": "The reviewer asked for a change and the document was confirmed."
    },
    {
      "id": 305,
      "alert_id": 210,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-09 07:25:26",
      "note": "The reviewer reported a routine issue; the report was updated."
    },
    {
      "id": 306,
      "alert_id": 192,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-31 22:23:34",
      "note": "A routine follow-up: the delivery was processed."
    },
    {
      "id": 307,
      "alert_id": 42,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-08-13 06:49:31",
      "note": "The item was escalated after an automatic check."
    },
    {
      "id": 308,
      "alert_id": 406,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-18 00:04:51",
      "note": "Support asked for a change and the ticket was rejected."
    },
    {
      "id": 309,
      "alert_id": 46,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-11 14:40:05",
      "note": "The session was escalated after a late check."
    },
    {
      "id": 310,
      "alert_id": 278,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-09-24 02:20:59",
      "note": "The item was escalated after a routine check."
    },
    {
      "id": 311,
      "alert_id": 371,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-25 13:38:53",
      "note": "A repeat follow-up: the payment was reopened."
    },
    {
      "id": 312,
      "alert_id": 334,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-07-18 08:37:43",
      "note": "Flagged as minor. An operator refunded the booking."
    },
    {
      "id": 313,
      "alert_id": 510,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-04 17:30:01",
      "note": "An operator confirmed the details and the refund was delayed."
    },
    {
      "id": 314,
      "alert_id": 50,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-08-23 04:18:22",
      "note": "The team asked for a change and the payment was escalated."
    },
    {
      "id": 315,
      "alert_id": 4,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-01 01:49:33",
      "note": "Flagged as unusual. The account owner closed the transfer."
    },
    {
      "id": 316,
      "alert_id": 45,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-27 01:23:40",
      "note": "A duplicate follow-up: the payment was cancelled."
    },
    {
      "id": 317,
      "alert_id": 526,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-15 08:08:10",
      "note": "No response from an operator, so the report was reviewed."
    },
    {
      "id": 318,
      "alert_id": 234,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-28 20:22:25",
      "note": "The courier confirmed the details and the booking was replaced."
    },
    {
      "id": 319,
      "alert_id": 2,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-09 15:23:06",
      "note": "No response from the account owner, so the document was updated."
    },
    {
      "id": 320,
      "alert_id": 533,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-09-05 02:55:45",
      "note": "No response from the supplier, so the report was approved."
    },
    {
      "id": 321,
      "alert_id": 261,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-06 03:02:11",
      "note": "The session was delayed — manual case, no further action."
    },
    {
      "id": 322,
      "alert_id": 273,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-09-23 14:44:56",
      "note": "A late follow-up: the invoice was resolved."
    },
    {
      "id": 323,
      "alert_id": 291,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-09-15 08:59:36",
      "note": "The customer confirmed the details and the item was confirmed."
    },
    {
      "id": 324,
      "alert_id": 437,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-07 11:09:53",
      "note": "The courier confirmed the details and the shipment was reviewed."
    },
    {
      "id": 325,
      "alert_id": 311,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-09-09 09:58:23",
      "note": "The request was completed — late case, no further action."
    },
    {
      "id": 326,
      "alert_id": 513,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-15 01:48:07",
      "note": "No response from the customer, so the record was delayed."
    },
    {
      "id": 327,
      "alert_id": 67,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-08-02 02:38:37",
      "note": "Flagged as minor. The team completed the record."
    },
    {
      "id": 328,
      "alert_id": 227,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-06 07:35:41",
      "note": "A late appointment was resolved the same day."
    },
    {
      "id": 329,
      "alert_id": 211,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-07-30 21:55:14",
      "note": "The courier confirmed the details and the session was closed."
    },
    {
      "id": 330,
      "alert_id": 310,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-12 13:44:09",
      "note": "The account owner confirmed the details and the payment was confirmed."
    },
    {
      "id": 331,
      "alert_id": 328,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-25 03:09:13",
      "note": "The courier confirmed the details and the session was confirmed."
    },
    {
      "id": 332,
      "alert_id": 497,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-14 15:28:24",
      "note": "The transfer was processed following a minor review."
    },
    {
      "id": 333,
      "alert_id": 245,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-11 21:59:50",
      "note": "The account was cancelled following a repeat review."
    },
    {
      "id": 334,
      "alert_id": 489,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-07-07 00:06:35",
      "note": "The session was confirmed — incomplete case, no further action."
    },
    {
      "id": 335,
      "alert_id": 517,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-10 22:19:20",
      "note": "Flagged as unusual. The team confirmed the invoice."
    },
    {
      "id": 336,
      "alert_id": 194,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-08-26 18:06:53",
      "note": "A late claim was rescheduled the same day."
    },
    {
      "id": 337,
      "alert_id": 430,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-09-10 02:06:50",
      "note": "An automatic item was escalated the same day."
    },
    {
      "id": 338,
      "alert_id": 340,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-03 04:53:47",
      "note": "The team confirmed the details and the item was resolved."
    },
    {
      "id": 339,
      "alert_id": 219,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-07-10 06:39:42",
      "note": "An operator confirmed the details and the refund was reopened."
    },
    {
      "id": 340,
      "alert_id": 503,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-24 08:19:48",
      "note": "An unusual follow-up: the shipment was completed."
    },
    {
      "id": 341,
      "alert_id": 219,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-07-12 00:11:12",
      "note": "Support asked for a change and the record was cancelled."
    },
    {
      "id": 342,
      "alert_id": 201,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-07-28 11:09:37",
      "note": "The account owner asked for a change and the shipment was reviewed."
    },
    {
      "id": 343,
      "alert_id": 290,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-05 12:41:44",
      "note": "The account owner reported a minor issue; the shipment was delayed."
    },
    {
      "id": 344,
      "alert_id": 101,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-20 16:16:59",
      "note": "An operator asked for a change and the claim was escalated."
    },
    {
      "id": 345,
      "alert_id": 238,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-09 13:33:48",
      "note": "An urgent follow-up: the account was confirmed."
    },
    {
      "id": 346,
      "alert_id": 204,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-08-13 03:03:11",
      "note": "The reviewer reported a manual issue; the request was updated."
    },
    {
      "id": 347,
      "alert_id": 7,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-23 14:37:50",
      "note": "No response from the supplier, so the booking was delayed."
    },
    {
      "id": 348,
      "alert_id": 49,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-07-29 15:47:16",
      "note": "The delivery was cancelled — duplicate case, no further action."
    },
    {
      "id": 349,
      "alert_id": 412,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-28 04:31:09",
      "note": "Support asked for a change and the account was escalated."
    },
    {
      "id": 350,
      "alert_id": 354,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-07-10 13:08:36",
      "note": "The delivery was rejected after a repeat check."
    },
    {
      "id": 351,
      "alert_id": 379,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-04 23:03:26",
      "note": "An urgent request was rejected the same day."
    },
    {
      "id": 352,
      "alert_id": 468,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-20 00:33:56",
      "note": "A routine transfer was completed the same day."
    },
    {
      "id": 353,
      "alert_id": 64,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-09-16 13:00:50",
      "note": "A minor follow-up: the record was rescheduled."
    },
    {
      "id": 354,
      "alert_id": 193,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-18 17:50:38",
      "note": "No response from the courier, so the appointment was rescheduled."
    },
    {
      "id": 355,
      "alert_id": 103,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-16 00:49:10",
      "note": "A repeat follow-up: the session was completed."
    },
    {
      "id": 356,
      "alert_id": 407,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-16 11:50:48",
      "note": "An operator reported a standard issue; the delivery was updated."
    },
    {
      "id": 357,
      "alert_id": 91,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-20 21:03:13",
      "note": "The invoice was replaced following a routine review."
    },
    {
      "id": 358,
      "alert_id": 431,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-07 16:15:16",
      "note": "The account owner reported a manual issue; the session was delayed."
    },
    {
      "id": 359,
      "alert_id": 89,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-03 04:54:57",
      "note": "The customer reported a partial issue; the refund was rescheduled."
    },
    {
      "id": 360,
      "alert_id": 508,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-28 04:51:46",
      "note": "A routine follow-up: the booking was escalated."
    },
    {
      "id": 361,
      "alert_id": 146,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-09-09 20:43:59",
      "note": "The account owner asked for a change and the session was refunded."
    },
    {
      "id": 362,
      "alert_id": 73,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-27 23:47:21",
      "note": "Flagged as duplicate. The customer closed the request."
    },
    {
      "id": 363,
      "alert_id": 54,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-30 12:39:57",
      "note": "Support reported a standard issue; the account was approved."
    },
    {
      "id": 364,
      "alert_id": 254,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-05 07:39:35",
      "note": "The invoice was reopened — duplicate case, no further action."
    },
    {
      "id": 365,
      "alert_id": 145,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-07-23 08:44:43",
      "note": "The supplier confirmed the details and the transfer was closed."
    },
    {
      "id": 366,
      "alert_id": 381,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-06 17:41:56",
      "note": "A routine follow-up: the refund was updated."
    },
    {
      "id": 367,
      "alert_id": 284,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-08 01:47:48",
      "note": "The supplier reported a manual issue; the transfer was escalated."
    },
    {
      "id": 368,
      "alert_id": 316,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-07-13 18:11:57",
      "note": "An urgent request was rejected the same day."
    },
    {
      "id": 369,
      "alert_id": 503,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-08-25 08:59:46",
      "note": "An urgent order was escalated the same day."
    },
    {
      "id": 370,
      "alert_id": 112,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-17 20:40:45",
      "note": "A repeat shipment was approved the same day."
    },
    {
      "id": 371,
      "alert_id": 534,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-12 03:56:52",
      "note": "The claim was reopened after a manual check."
    },
    {
      "id": 372,
      "alert_id": 254,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-09-06 07:40:39",
      "note": "The claim was refunded after an unusual check."
    },
    {
      "id": 373,
      "alert_id": 168,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-14 14:19:58",
      "note": "The ticket was resolved after a standard check."
    },
    {
      "id": 374,
      "alert_id": 296,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-13 02:22:20",
      "note": "A standard delivery was completed the same day."
    },
    {
      "id": 375,
      "alert_id": 36,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-30 06:00:38",
      "note": "The delivery was approved — repeat case, no further action."
    },
    {
      "id": 376,
      "alert_id": 11,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-13 08:18:17",
      "note": "No response from the customer, so the request was reviewed."
    },
    {
      "id": 377,
      "alert_id": 366,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-06 07:56:19",
      "note": "The payment was rescheduled — repeat case, no further action."
    },
    {
      "id": 378,
      "alert_id": 218,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-11 12:06:58",
      "note": "No response from support, so the shipment was reopened."
    },
    {
      "id": 379,
      "alert_id": 227,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-08 00:50:29",
      "note": "Flagged as automatic. The team approved the delivery."
    },
    {
      "id": 380,
      "alert_id": 210,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-09-11 07:06:49",
      "note": "The appointment was rescheduled after a duplicate check."
    },
    {
      "id": 381,
      "alert_id": 452,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-13 07:02:25",
      "note": "Support confirmed the details and the transfer was cancelled."
    },
    {
      "id": 382,
      "alert_id": 180,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-28 12:05:13",
      "note": "The team reported a repeat issue; the payment was delayed."
    },
    {
      "id": 383,
      "alert_id": 110,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-09-19 23:14:57",
      "note": "No response from the customer, so the shipment was updated."
    },
    {
      "id": 384,
      "alert_id": 179,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-16 21:31:25",
      "note": "No response from the reviewer, so the item was cancelled."
    },
    {
      "id": 385,
      "alert_id": 411,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-07-10 21:53:07",
      "note": "The order was replaced following an unusual review."
    },
    {
      "id": 386,
      "alert_id": 338,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-07-06 15:23:14",
      "note": "The session was resolved — standard case, no further action."
    },
    {
      "id": 387,
      "alert_id": 167,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-26 02:18:37",
      "note": "The request was replaced after a standard check."
    },
    {
      "id": 388,
      "alert_id": 37,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-25 09:16:53",
      "note": "An automatic record was escalated the same day."
    },
    {
      "id": 389,
      "alert_id": 200,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-26 13:41:12",
      "note": "The refund was escalated — repeat case, no further action."
    },
    {
      "id": 390,
      "alert_id": 529,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-20 05:35:41",
      "note": "The ticket was confirmed — automatic case, no further action."
    },
    {
      "id": 391,
      "alert_id": 285,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-28 05:36:27",
      "note": "The order was approved — standard case, no further action."
    },
    {
      "id": 392,
      "alert_id": 405,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-30 15:40:44",
      "note": "Support asked for a change and the shipment was resolved."
    },
    {
      "id": 393,
      "alert_id": 153,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-10-02 00:13:08",
      "note": "The refund was resolved following a late review."
    },
    {
      "id": 394,
      "alert_id": 445,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-14 16:49:51",
      "note": "The reviewer reported a minor issue; the account was approved."
    },
    {
      "id": 395,
      "alert_id": 499,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-24 12:53:39",
      "note": "Support asked for a change and the payment was processed."
    },
    {
      "id": 396,
      "alert_id": 420,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-09-16 20:04:14",
      "note": "No response from an operator, so the shipment was escalated."
    },
    {
      "id": 397,
      "alert_id": 334,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-07-19 13:41:50",
      "note": "The appointment was completed after a repeat check."
    },
    {
      "id": 398,
      "alert_id": 160,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-09-25 20:21:57",
      "note": "The supplier confirmed the details and the transfer was resolved."
    },
    {
      "id": 399,
      "alert_id": 140,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-01 00:50:55",
      "note": "The invoice was rejected after an automatic check."
    },
    {
      "id": 400,
      "alert_id": 26,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-04 20:59:43",
      "note": "A routine follow-up: the order was delayed."
    },
    {
      "id": 401,
      "alert_id": 196,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-30 11:06:31",
      "note": "No response from an operator, so the booking was delayed."
    },
    {
      "id": 402,
      "alert_id": 187,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-29 18:52:28",
      "note": "The supplier confirmed the details and the account was escalated."
    },
    {
      "id": 403,
      "alert_id": 157,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-30 14:48:33",
      "note": "Flagged as minor. The account owner cancelled the delivery."
    },
    {
      "id": 404,
      "alert_id": 405,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-31 12:01:07",
      "note": "No response from the customer, so the shipment was rescheduled."
    },
    {
      "id": 405,
      "alert_id": 220,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-13 04:14:59",
      "note": "An automatic ticket was cancelled the same day."
    },
    {
      "id": 406,
      "alert_id": 313,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-08-07 07:04:36",
      "note": "An operator confirmed the details and the delivery was updated."
    },
    {
      "id": 407,
      "alert_id": 278,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 16,
      "changed_at": "2025-09-25 16:28:00",
      "note": "The team asked for a change and the account was approved."
    },
    {
      "id": 408,
      "alert_id": 217,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-08-24 04:41:39",
      "note": "The supplier confirmed the details and the booking was updated."
    },
    {
      "id": 409,
      "alert_id": 365,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-27 21:36:51",
      "note": "The ticket was reviewed after a duplicate check."
    },
    {
      "id": 410,
      "alert_id": 389,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-29 01:54:53",
      "note": "No response from the team, so the shipment was escalated."
    },
    {
      "id": 411,
      "alert_id": 468,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-08-21 15:51:45",
      "note": "No response from the team, so the shipment was confirmed."
    },
    {
      "id": 412,
      "alert_id": 268,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-17 19:45:48",
      "note": "The refund was confirmed following a minor review."
    },
    {
      "id": 413,
      "alert_id": 182,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-03 01:36:52",
      "note": "The customer reported a manual issue; the record was rescheduled."
    },
    {
      "id": 414,
      "alert_id": 450,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-04 20:08:06",
      "note": "No response from support, so the document was approved."
    },
    {
      "id": 415,
      "alert_id": 469,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-09-22 16:10:59",
      "note": "The account was confirmed after a partial check."
    },
    {
      "id": 416,
      "alert_id": 524,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-24 23:50:59",
      "note": "The item was refunded following a repeat review."
    },
    {
      "id": 417,
      "alert_id": 454,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-20 20:08:52",
      "note": "The item was resolved following a standard review."
    },
    {
      "id": 418,
      "alert_id": 391,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-21 14:07:11",
      "note": "The invoice was rejected — partial case, no further action."
    },
    {
      "id": 419,
      "alert_id": 216,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-09-03 00:39:39",
      "note": "Flagged as incomplete. The account owner reopened the claim."
    },
    {
      "id": 420,
      "alert_id": 103,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-08-17 06:08:52",
      "note": "A manual follow-up: the refund was resolved."
    },
    {
      "id": 421,
      "alert_id": 494,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-15 14:56:29",
      "note": "Support reported a manual issue; the shipment was confirmed."
    },
    {
      "id": 422,
      "alert_id": 441,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-07 17:35:00",
      "note": "The team confirmed the details and the account was approved."
    },
    {
      "id": 423,
      "alert_id": 68,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-26 04:10:41",
      "note": "The session was reviewed following a minor review."
    },
    {
      "id": 424,
      "alert_id": 74,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-17 13:24:05",
      "note": "Flagged as incomplete. The supplier rescheduled the account."
    },
    {
      "id": 425,
      "alert_id": 212,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-16 18:47:34",
      "note": "The account owner reported a manual issue; the item was rejected."
    },
    {
      "id": 426,
      "alert_id": 219,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 10,
      "changed_at": "2025-07-13 18:09:42",
      "note": "No response from the reviewer, so the session was resolved."
    },
    {
      "id": 427,
      "alert_id": 375,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-08-19 17:03:17",
      "note": "The courier reported a duplicate issue; the claim was replaced."
    },
    {
      "id": 428,
      "alert_id": 224,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-07-12 09:25:55",
      "note": "The account owner asked for a change and the document was completed."
    },
    {
      "id": 429,
      "alert_id": 493,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-07 22:56:05",
      "note": "The booking was reviewed following an unusual review."
    },
    {
      "id": 430,
      "alert_id": 540,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-01 22:00:58",
      "note": "The session was refunded — repeat case, no further action."
    },
    {
      "id": 431,
      "alert_id": 395,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-07-07 09:57:21",
      "note": "No response from the team, so the shipment was replaced."
    },
    {
      "id": 432,
      "alert_id": 114,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-29 09:24:52",
      "note": "The account was approved after a standard check."
    },
    {
      "id": 433,
      "alert_id": 367,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-20 10:50:10",
      "note": "Support reported an unusual issue; the session was updated."
    },
    {
      "id": 434,
      "alert_id": 20,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-16 08:47:54",
      "note": "An unusual claim was delayed the same day."
    },
    {
      "id": 435,
      "alert_id": 185,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-06 02:40:44",
      "note": "A late refund was refunded the same day."
    },
    {
      "id": 436,
      "alert_id": 40,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-24 00:11:54",
      "note": "A partial follow-up: the invoice was escalated."
    },
    {
      "id": 437,
      "alert_id": 468,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-08-23 03:59:38",
      "note": "A partial follow-up: the invoice was escalated."
    },
    {
      "id": 438,
      "alert_id": 183,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-17 07:26:55",
      "note": "The request was confirmed — unusual case, no further action."
    },
    {
      "id": 439,
      "alert_id": 241,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-17 22:53:43",
      "note": "The customer reported a duplicate issue; the appointment was cancelled."
    },
    {
      "id": 440,
      "alert_id": 196,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-30 15:42:15",
      "note": "The order was reviewed — routine case, no further action."
    },
    {
      "id": 441,
      "alert_id": 463,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-17 21:11:36",
      "note": "The shipment was escalated following an urgent review."
    },
    {
      "id": 442,
      "alert_id": 480,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-08-25 10:14:49",
      "note": "The courier reported an unusual issue; the refund was processed."
    },
    {
      "id": 443,
      "alert_id": 41,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-12 01:39:57",
      "note": "Support confirmed the details and the appointment was closed."
    },
    {
      "id": 444,
      "alert_id": 277,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-08-21 13:44:47",
      "note": "Flagged as routine. The reviewer confirmed the payment."
    },
    {
      "id": 445,
      "alert_id": 263,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-08-31 17:12:19",
      "note": "The supplier asked for a change and the appointment was approved."
    },
    {
      "id": 446,
      "alert_id": 138,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-15 17:17:28",
      "note": "A partial follow-up: the payment was rescheduled."
    },
    {
      "id": 447,
      "alert_id": 282,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-16 01:12:03",
      "note": "The supplier confirmed the details and the item was rescheduled."
    },
    {
      "id": 448,
      "alert_id": 137,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-27 00:49:27",
      "note": "An incomplete follow-up: the refund was replaced."
    },
    {
      "id": 449,
      "alert_id": 12,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-08-16 08:12:38",
      "note": "A routine follow-up: the report was refunded."
    },
    {
      "id": 450,
      "alert_id": 426,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-19 03:07:41",
      "note": "The customer reported a duplicate issue; the item was approved."
    },
    {
      "id": 451,
      "alert_id": 189,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-09-05 09:32:41",
      "note": "The report was rescheduled after an automatic check."
    },
    {
      "id": 452,
      "alert_id": 282,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-16 10:56:53",
      "note": "A late follow-up: the appointment was cancelled."
    },
    {
      "id": 453,
      "alert_id": 426,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-07-19 10:15:47",
      "note": "The appointment was closed — duplicate case, no further action."
    },
    {
      "id": 454,
      "alert_id": 378,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-08-28 14:15:21",
      "note": "A routine account was confirmed the same day."
    },
    {
      "id": 455,
      "alert_id": 153,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-10-03 10:34:44",
      "note": "The delivery was processed — incomplete case, no further action."
    },
    {
      "id": 456,
      "alert_id": 316,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-07-14 01:34:34",
      "note": "No response from the customer, so the document was completed."
    },
    {
      "id": 457,
      "alert_id": 88,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-04 09:32:38",
      "note": "An urgent payment was resolved the same day."
    },
    {
      "id": 458,
      "alert_id": 526,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-08-17 08:20:56",
      "note": "Support asked for a change and the session was resolved."
    },
    {
      "id": 459,
      "alert_id": 479,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-05 12:51:16",
      "note": "The courier asked for a change and the order was reviewed."
    },
    {
      "id": 460,
      "alert_id": 285,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-08-29 20:51:57",
      "note": "An operator reported an unusual issue; the ticket was rejected."
    },
    {
      "id": 461,
      "alert_id": 344,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-09-11 04:44:42",
      "note": "Support confirmed the details and the invoice was completed."
    },
    {
      "id": 462,
      "alert_id": 250,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-07-10 21:23:01",
      "note": "No response from the reviewer, so the document was rescheduled."
    },
    {
      "id": 463,
      "alert_id": 27,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-30 06:53:32",
      "note": "The claim was refunded after a standard check."
    },
    {
      "id": 464,
      "alert_id": 103,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-08-17 06:54:52",
      "note": "The record was processed — standard case, no further action."
    },
    {
      "id": 465,
      "alert_id": 83,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-10-02 01:43:17",
      "note": "The courier reported an incomplete issue; the session was reopened."
    },
    {
      "id": 466,
      "alert_id": 1,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-23 09:39:03",
      "note": "The customer confirmed the details and the booking was cancelled."
    },
    {
      "id": 467,
      "alert_id": 59,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-05 18:08:35",
      "note": "No response from the courier, so the session was delayed."
    },
    {
      "id": 468,
      "alert_id": 299,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-16 18:36:11",
      "note": "The report was reopened — urgent case, no further action."
    },
    {
      "id": 469,
      "alert_id": 38,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-29 02:36:01",
      "note": "The customer asked for a change and the invoice was rejected."
    },
    {
      "id": 470,
      "alert_id": 4,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-09-01 22:41:12",
      "note": "The refund was rescheduled — unusual case, no further action."
    },
    {
      "id": 471,
      "alert_id": 100,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-14 13:04:00",
      "note": "The document was resolved after a duplicate check."
    },
    {
      "id": 472,
      "alert_id": 237,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-08-29 11:11:38",
      "note": "The reviewer asked for a change and the document was processed."
    },
    {
      "id": 473,
      "alert_id": 541,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-09 17:13:08",
      "note": "The team confirmed the details and the order was reviewed."
    },
    {
      "id": 474,
      "alert_id": 541,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-10 00:36:50",
      "note": "An unusual delivery was reopened the same day."
    },
    {
      "id": 475,
      "alert_id": 490,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-06 23:08:06",
      "note": "A late follow-up: the request was processed."
    },
    {
      "id": 476,
      "alert_id": 338,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 16,
      "changed_at": "2025-07-07 22:35:29",
      "note": "The delivery was updated — automatic case, no further action."
    },
    {
      "id": 477,
      "alert_id": 542,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-22 10:26:37",
      "note": "A standard report was reopened the same day."
    },
    {
      "id": 478,
      "alert_id": 416,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-08-21 09:04:04",
      "note": "The account owner asked for a change and the order was resolved."
    },
    {
      "id": 479,
      "alert_id": 222,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-26 10:22:19",
      "note": "No response from the account owner, so the payment was cancelled."
    },
    {
      "id": 480,
      "alert_id": 415,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-28 15:50:19",
      "note": "The courier reported a standard issue; the invoice was updated."
    },
    {
      "id": 481,
      "alert_id": 287,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-09 03:54:23",
      "note": "The account was approved — minor case, no further action."
    },
    {
      "id": 482,
      "alert_id": 435,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-12 03:27:31",
      "note": "The customer asked for a change and the ticket was delayed."
    },
    {
      "id": 483,
      "alert_id": 100,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-07-15 16:35:51",
      "note": "The supplier reported an automatic issue; the transfer was reviewed."
    },
    {
      "id": 484,
      "alert_id": 119,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-09-18 09:16:39",
      "note": "The account owner confirmed the details and the invoice was confirmed."
    },
    {
      "id": 485,
      "alert_id": 480,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 8,
      "changed_at": "2025-08-25 21:15:10",
      "note": "The account owner reported an incomplete issue; the refund was resolved."
    },
    {
      "id": 486,
      "alert_id": 93,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-13 11:16:09",
      "note": "A standard follow-up: the booking was reviewed."
    },
    {
      "id": 487,
      "alert_id": 430,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-09-10 13:04:06",
      "note": "The claim was reviewed following a late review."
    },
    {
      "id": 488,
      "alert_id": 510,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-07-05 01:13:33",
      "note": "No response from the team, so the record was reopened."
    },
    {
      "id": 489,
      "alert_id": 531,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-04 05:51:08",
      "note": "An incomplete follow-up: the account was replaced."
    },
    {
      "id": 490,
      "alert_id": 301,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-31 18:37:50",
      "note": "The report was reopened — unusual case, no further action."
    },
    {
      "id": 491,
      "alert_id": 38,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-08-31 02:28:14",
      "note": "The courier reported a routine issue; the order was delayed."
    },
    {
      "id": 492,
      "alert_id": 278,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-09-26 11:07:37",
      "note": "The invoice was escalated after an automatic check."
    },
    {
      "id": 493,
      "alert_id": 73,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-08-29 16:55:06",
      "note": "The ticket was closed — urgent case, no further action."
    },
    {
      "id": 494,
      "alert_id": 15,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-28 23:09:41",
      "note": "No response from the supplier, so the appointment was completed."
    },
    {
      "id": 495,
      "alert_id": 141,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-13 00:49:13",
      "note": "An operator confirmed the details and the delivery was reviewed."
    },
    {
      "id": 496,
      "alert_id": 239,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-07-20 20:58:04",
      "note": "No response from the account owner, so the report was updated."
    },
    {
      "id": 497,
      "alert_id": 417,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-09-23 18:00:22",
      "note": "The team confirmed the details and the transfer was updated."
    },
    {
      "id": 498,
      "alert_id": 99,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-09-12 10:14:19",
      "note": "The team asked for a change and the ticket was escalated."
    },
    {
      "id": 499,
      "alert_id": 410,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-08-07 00:00:02",
      "note": "The account owner confirmed the details and the account was reopened."
    },
    {
      "id": 500,
      "alert_id": 266,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-11 11:05:38",
      "note": "The supplier asked for a change and the refund was approved."
    },
    {
      "id": 501,
      "alert_id": 38,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-08-31 12:03:02",
      "note": "An urgent follow-up: the order was rejected."
    },
    {
      "id": 502,
      "alert_id": 28,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-15 15:38:23",
      "note": "No response from the supplier, so the booking was completed."
    },
    {
      "id": 503,
      "alert_id": 391,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-22 11:12:53",
      "note": "Flagged as duplicate. The supplier replaced the report."
    },
    {
      "id": 504,
      "alert_id": 454,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-07-22 17:56:41",
      "note": "The payment was reviewed after a duplicate check."
    },
    {
      "id": 505,
      "alert_id": 207,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-14 13:37:47",
      "note": "The item was delayed — manual case, no further action."
    },
    {
      "id": 506,
      "alert_id": 445,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-16 10:27:25",
      "note": "No response from the reviewer, so the transfer was completed."
    },
    {
      "id": 507,
      "alert_id": 2,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-08-10 01:38:07",
      "note": "The team reported a routine issue; the claim was completed."
    },
    {
      "id": 508,
      "alert_id": 243,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-23 15:10:37",
      "note": "The team reported a partial issue; the order was reopened."
    },
    {
      "id": 509,
      "alert_id": 239,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-22 15:19:52",
      "note": "The item was rejected following a minor review."
    },
    {
      "id": 510,
      "alert_id": 85,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-09-04 11:55:28",
      "note": "An automatic follow-up: the ticket was rescheduled."
    },
    {
      "id": 511,
      "alert_id": 484,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-22 21:43:31",
      "note": "The appointment was replaced after an incomplete check."
    },
    {
      "id": 512,
      "alert_id": 326,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-09-12 00:09:49",
      "note": "The record was reopened following a repeat review."
    },
    {
      "id": 513,
      "alert_id": 148,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-08-29 19:32:26",
      "note": "The claim was rescheduled — incomplete case, no further action."
    },
    {
      "id": 514,
      "alert_id": 115,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-04 07:48:57",
      "note": "Flagged as standard. The account owner processed the ticket."
    },
    {
      "id": 515,
      "alert_id": 181,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-09-23 11:10:55",
      "note": "Flagged as standard. The courier completed the account."
    },
    {
      "id": 516,
      "alert_id": 447,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-04 20:34:43",
      "note": "Support asked for a change and the session was approved."
    },
    {
      "id": 517,
      "alert_id": 496,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-03 00:16:01",
      "note": "An automatic follow-up: the refund was processed."
    },
    {
      "id": 518,
      "alert_id": 490,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-09-07 21:49:27",
      "note": "An operator asked for a change and the shipment was resolved."
    },
    {
      "id": 519,
      "alert_id": 490,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-09-08 12:48:26",
      "note": "The claim was approved after a routine check."
    },
    {
      "id": 520,
      "alert_id": 339,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-01 07:16:44",
      "note": "An operator asked for a change and the session was updated."
    },
    {
      "id": 521,
      "alert_id": 311,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-09-11 06:11:51",
      "note": "The courier confirmed the details and the refund was rejected."
    },
    {
      "id": 522,
      "alert_id": 92,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-17 05:36:15",
      "note": "A late invoice was processed the same day."
    },
    {
      "id": 523,
      "alert_id": 305,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-01 18:30:58",
      "note": "The team confirmed the details and the transfer was rescheduled."
    },
    {
      "id": 524,
      "alert_id": 466,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-07-04 11:35:02",
      "note": "No response from the reviewer, so the request was rescheduled."
    },
    {
      "id": 525,
      "alert_id": 308,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-09-14 10:17:43",
      "note": "Flagged as unusual. The customer cancelled the request."
    },
    {
      "id": 526,
      "alert_id": 24,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-09-07 08:39:04",
      "note": "An incomplete record was confirmed the same day."
    },
    {
      "id": 527,
      "alert_id": 178,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-06 17:45:45",
      "note": "The account owner asked for a change and the shipment was resolved."
    },
    {
      "id": 528,
      "alert_id": 175,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-08-19 17:19:18",
      "note": "Support asked for a change and the report was reviewed."
    },
    {
      "id": 529,
      "alert_id": 114,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-30 08:52:13",
      "note": "An automatic follow-up: the request was escalated."
    },
    {
      "id": 530,
      "alert_id": 446,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-27 13:18:17",
      "note": "Flagged as repeat. An operator rescheduled the appointment."
    },
    {
      "id": 531,
      "alert_id": 513,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-07-16 02:13:03",
      "note": "The delivery was delayed after a minor check."
    },
    {
      "id": 532,
      "alert_id": 167,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-09-26 20:36:26",
      "note": "The team confirmed the details and the refund was reopened."
    },
    {
      "id": 533,
      "alert_id": 190,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-07-13 02:03:53",
      "note": "Flagged as standard. The supplier refunded the transfer."
    },
    {
      "id": 534,
      "alert_id": 461,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-14 07:58:36",
      "note": "The account was rejected following a minor review."
    },
    {
      "id": 535,
      "alert_id": 174,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-12 20:18:47",
      "note": "The team reported a manual issue; the document was confirmed."
    },
    {
      "id": 536,
      "alert_id": 37,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-26 23:30:59",
      "note": "An operator asked for a change and the booking was confirmed."
    },
    {
      "id": 537,
      "alert_id": 239,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-07-24 02:53:18",
      "note": "The refund was processed after a standard check."
    },
    {
      "id": 538,
      "alert_id": 152,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-01 21:21:02",
      "note": "The refund was rescheduled following an automatic review."
    },
    {
      "id": 539,
      "alert_id": 260,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-08-11 12:05:58",
      "note": "The shipment was approved after a repeat check."
    },
    {
      "id": 540,
      "alert_id": 2,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-08-11 14:21:14",
      "note": "An operator reported a standard issue; the document was escalated."
    },
    {
      "id": 541,
      "alert_id": 19,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-09-07 05:36:53",
      "note": "A manual follow-up: the report was confirmed."
    },
    {
      "id": 542,
      "alert_id": 391,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-07-23 02:33:14",
      "note": "The courier confirmed the details and the account was closed."
    },
    {
      "id": 543,
      "alert_id": 430,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-09-11 23:37:35",
      "note": "The customer reported a late issue; the refund was approved."
    },
    {
      "id": 544,
      "alert_id": 197,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-05 01:23:33",
      "note": "An unusual payment was rescheduled the same day."
    },
    {
      "id": 545,
      "alert_id": 23,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-05 13:31:54",
      "note": "A routine follow-up: the shipment was refunded."
    },
    {
      "id": 546,
      "alert_id": 443,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-07-16 18:35:34",
      "note": "The refund was replaced after a standard check."
    },
    {
      "id": 547,
      "alert_id": 483,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-31 14:28:05",
      "note": "The session was reviewed after a repeat check."
    },
    {
      "id": 548,
      "alert_id": 431,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-08-09 12:00:09",
      "note": "The courier asked for a change and the payment was resolved."
    },
    {
      "id": 549,
      "alert_id": 323,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-28 18:41:30",
      "note": "The account was resolved following a routine review."
    },
    {
      "id": 550,
      "alert_id": 437,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-07-08 13:24:18",
      "note": "An operator reported an urgent issue; the appointment was closed."
    },
    {
      "id": 551,
      "alert_id": 543,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-14 10:25:16",
      "note": "A minor follow-up: the refund was resolved."
    },
    {
      "id": 552,
      "alert_id": 433,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-12 17:52:23",
      "note": "The transfer was delayed after a duplicate check."
    },
    {
      "id": 553,
      "alert_id": 359,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-25 22:35:47",
      "note": "The delivery was updated after an unusual check."
    },
    {
      "id": 554,
      "alert_id": 174,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-14 15:34:59",
      "note": "The customer reported a routine issue; the booking was processed."
    },
    {
      "id": 555,
      "alert_id": 349,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-29 14:17:38",
      "note": "A repeat follow-up: the order was approved."
    },
    {
      "id": 556,
      "alert_id": 269,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-17 08:30:04",
      "note": "A late follow-up: the claim was reopened."
    },
    {
      "id": 557,
      "alert_id": 196,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 16,
      "changed_at": "2025-08-31 09:00:56",
      "note": "Flagged as routine. The team replaced the order."
    },
    {
      "id": 558,
      "alert_id": 434,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-31 08:26:09",
      "note": "Flagged as incomplete. The supplier rescheduled the payment."
    },
    {
      "id": 559,
      "alert_id": 451,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-07-23 04:13:39",
      "note": "Flagged as standard. An operator refunded the invoice."
    },
    {
      "id": 560,
      "alert_id": 294,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-20 02:25:29",
      "note": "The team asked for a change and the item was reopened."
    },
    {
      "id": 561,
      "alert_id": 308,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-09-16 02:30:12",
      "note": "Flagged as partial. An operator approved the account."
    },
    {
      "id": 562,
      "alert_id": 224,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-07-14 07:24:07",
      "note": "An operator reported a late issue; the booking was rejected."
    },
    {
      "id": 563,
      "alert_id": 447,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-05 00:27:51",
      "note": "No response from the courier, so the payment was approved."
    },
    {
      "id": 564,
      "alert_id": 445,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-07-16 12:00:02",
      "note": "The team reported a repeat issue; the order was completed."
    },
    {
      "id": 565,
      "alert_id": 30,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-10 01:20:05",
      "note": "A standard follow-up: the refund was confirmed."
    },
    {
      "id": 566,
      "alert_id": 377,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-06 20:57:08",
      "note": "The shipment was resolved following a routine review."
    },
    {
      "id": 567,
      "alert_id": 217,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-08-24 17:54:45",
      "note": "Flagged as urgent. The customer approved the item."
    },
    {
      "id": 568,
      "alert_id": 250,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-07-11 17:52:41",
      "note": "The item was updated following an automatic review."
    },
    {
      "id": 569,
      "alert_id": 382,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-24 10:30:16",
      "note": "The report was reviewed after a minor check."
    },
    {
      "id": 570,
      "alert_id": 6,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-04 17:31:41",
      "note": "An operator confirmed the details and the invoice was delayed."
    },
    {
      "id": 571,
      "alert_id": 107,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-09-15 17:34:15",
      "note": "The report was delayed after an incomplete check."
    },
    {
      "id": 572,
      "alert_id": 151,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-27 04:31:27",
      "note": "A minor refund was resolved the same day."
    },
    {
      "id": 573,
      "alert_id": 360,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-14 04:47:11",
      "note": "The customer reported an urgent issue; the appointment was escalated."
    },
    {
      "id": 574,
      "alert_id": 125,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-07-31 07:48:20",
      "note": "No response from the team, so the order was escalated."
    },
    {
      "id": 575,
      "alert_id": 370,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-22 09:49:18",
      "note": "The reviewer confirmed the details and the claim was reopened."
    },
    {
      "id": 576,
      "alert_id": 361,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-24 20:06:52",
      "note": "Support asked for a change and the ticket was delayed."
    },
    {
      "id": 577,
      "alert_id": 296,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-07-14 06:37:13",
      "note": "The account owner confirmed the details and the ticket was delayed."
    },
    {
      "id": 578,
      "alert_id": 438,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-18 13:53:10",
      "note": "The delivery was escalated after an unusual check."
    },
    {
      "id": 579,
      "alert_id": 50,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-08-24 00:02:39",
      "note": "No response from the supplier, so the order was processed."
    },
    {
      "id": 580,
      "alert_id": 225,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-07-03 23:26:00",
      "note": "The claim was resolved — incomplete case, no further action."
    },
    {
      "id": 581,
      "alert_id": 55,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 8,
      "changed_at": "2025-07-10 08:28:48",
      "note": "The session was completed — unusual case, no further action."
    },
    {
      "id": 582,
      "alert_id": 513,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-07-16 21:46:55",
      "note": "An unusual follow-up: the booking was rescheduled."
    },
    {
      "id": 583,
      "alert_id": 504,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-08 23:16:44",
      "note": "A standard shipment was completed the same day."
    },
    {
      "id": 584,
      "alert_id": 161,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-19 03:25:51",
      "note": "A duplicate item was updated the same day."
    },
    {
      "id": 585,
      "alert_id": 72,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-09 05:35:55",
      "note": "Support asked for a change and the order was replaced."
    },
    {
      "id": 586,
      "alert_id": 455,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-09 20:26:59",
      "note": "The team confirmed the details and the transfer was reviewed."
    },
    {
      "id": 587,
      "alert_id": 487,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-14 00:07:20",
      "note": "The request was delayed after an incomplete check."
    },
    {
      "id": 588,
      "alert_id": 413,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-08 17:13:12",
      "note": "An automatic booking was updated the same day."
    },
    {
      "id": 589,
      "alert_id": 50,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 6,
      "changed_at": "2025-08-24 23:27:58",
      "note": "The payment was completed following a repeat review."
    },
    {
      "id": 590,
      "alert_id": 517,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-12 12:28:42",
      "note": "A routine follow-up: the ticket was escalated."
    },
    {
      "id": 591,
      "alert_id": 238,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-09-11 08:55:04",
      "note": "Flagged as minor. The courier reviewed the request."
    },
    {
      "id": 592,
      "alert_id": 198,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-21 03:10:45",
      "note": "No response from support, so the appointment was completed."
    },
    {
      "id": 593,
      "alert_id": 227,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-07-09 21:56:25",
      "note": "A standard delivery was approved the same day."
    },
    {
      "id": 594,
      "alert_id": 381,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-08-06 18:35:36",
      "note": "No response from the account owner, so the payment was replaced."
    },
    {
      "id": 595,
      "alert_id": 185,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-07-07 12:42:13",
      "note": "No response from the customer, so the claim was replaced."
    },
    {
      "id": 596,
      "alert_id": 130,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-18 16:11:18",
      "note": "The ticket was reviewed after a repeat check."
    },
    {
      "id": 597,
      "alert_id": 57,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-29 08:48:44",
      "note": "No response from the supplier, so the payment was rescheduled."
    },
    {
      "id": 598,
      "alert_id": 117,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-07-22 23:35:20",
      "note": "No response from the supplier, so the item was resolved."
    },
    {
      "id": 599,
      "alert_id": 386,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-10 22:19:52",
      "note": "Flagged as standard. The account owner completed the booking."
    },
    {
      "id": 600,
      "alert_id": 507,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-03 08:02:19",
      "note": "Flagged as standard. The reviewer escalated the session."
    },
    {
      "id": 601,
      "alert_id": 518,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-18 19:33:55",
      "note": "A routine payment was processed the same day."
    },
    {
      "id": 602,
      "alert_id": 372,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-14 20:38:45",
      "note": "The invoice was refunded following an incomplete review."
    },
    {
      "id": 603,
      "alert_id": 386,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-08-12 05:05:51",
      "note": "An operator confirmed the details and the ticket was closed."
    },
    {
      "id": 604,
      "alert_id": 519,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-10-01 21:50:27",
      "note": "The request was refunded — manual case, no further action."
    },
    {
      "id": 605,
      "alert_id": 126,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-09-10 13:10:59",
      "note": "The account owner confirmed the details and the item was reviewed."
    },
    {
      "id": 606,
      "alert_id": 192,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-09-02 05:58:20",
      "note": "The delivery was processed after a standard check."
    },
    {
      "id": 607,
      "alert_id": 228,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-08-29 17:28:13",
      "note": "An unusual record was replaced the same day."
    },
    {
      "id": 608,
      "alert_id": 369,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-09-24 03:55:49",
      "note": "The reviewer confirmed the details and the order was confirmed."
    },
    {
      "id": 609,
      "alert_id": 190,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 2,
      "changed_at": "2025-07-14 21:16:00",
      "note": "A manual follow-up: the refund was resolved."
    },
    {
      "id": 610,
      "alert_id": 104,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-09-23 04:09:31",
      "note": "The reviewer asked for a change and the request was rejected."
    },
    {
      "id": 611,
      "alert_id": 276,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-09-12 21:11:08",
      "note": "The supplier confirmed the details and the request was updated."
    },
    {
      "id": 612,
      "alert_id": 282,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-08-18 01:19:25",
      "note": "An operator asked for a change and the document was reviewed."
    },
    {
      "id": 613,
      "alert_id": 116,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-15 13:21:49",
      "note": "An incomplete follow-up: the payment was updated."
    },
    {
      "id": 614,
      "alert_id": 138,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-09-16 21:05:26",
      "note": "Flagged as partial. The courier reopened the report."
    },
    {
      "id": 615,
      "alert_id": 427,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-11 15:55:44",
      "note": "The delivery was completed — repeat case, no further action."
    },
    {
      "id": 616,
      "alert_id": 507,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-09-04 01:39:36",
      "note": "No response from an operator, so the refund was reopened."
    },
    {
      "id": 617,
      "alert_id": 476,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-10 20:33:52",
      "note": "The shipment was delayed — late case, no further action."
    },
    {
      "id": 618,
      "alert_id": 476,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-08-11 19:38:48",
      "note": "A late follow-up: the record was escalated."
    },
    {
      "id": 619,
      "alert_id": 227,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-07-10 23:10:11",
      "note": "An operator asked for a change and the booking was rescheduled."
    },
    {
      "id": 620,
      "alert_id": 44,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-04 04:29:30",
      "note": "The order was closed following an unusual review."
    },
    {
      "id": 621,
      "alert_id": 541,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-07-11 17:48:48",
      "note": "No response from the reviewer, so the session was completed."
    },
    {
      "id": 622,
      "alert_id": 500,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-09-19 04:31:50",
      "note": "Support reported an incomplete issue; the booking was reopened."
    },
    {
      "id": 623,
      "alert_id": 249,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-20 01:03:37",
      "note": "Flagged as routine. The account owner confirmed the claim."
    },
    {
      "id": 624,
      "alert_id": 492,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-05 04:44:56",
      "note": "Flagged as manual. The team rescheduled the document."
    },
    {
      "id": 625,
      "alert_id": 153,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-10-03 12:59:04",
      "note": "The appointment was delayed after a standard check."
    },
    {
      "id": 626,
      "alert_id": 125,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-08-01 16:26:44",
      "note": "The record was approved after an incomplete check."
    },
    {
      "id": 627,
      "alert_id": 210,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-09-11 19:44:49",
      "note": "The customer reported a repeat issue; the claim was refunded."
    },
    {
      "id": 628,
      "alert_id": 1,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-23 11:45:04",
      "note": "No response from an operator, so the account was completed."
    },
    {
      "id": 629,
      "alert_id": 306,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-08-03 01:37:41",
      "note": "Support asked for a change and the invoice was updated."
    },
    {
      "id": 630,
      "alert_id": 517,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-07-12 22:07:40",
      "note": "The record was approved — manual case, no further action."
    },
    {
      "id": 631,
      "alert_id": 362,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-09-15 18:38:13",
      "note": "Support asked for a change and the document was reviewed."
    },
    {
      "id": 632,
      "alert_id": 530,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-17 07:19:06",
      "note": "Flagged as standard. Support replaced the record."
    },
    {
      "id": 633,
      "alert_id": 274,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-17 20:36:31",
      "note": "The request was replaced — routine case, no further action."
    },
    {
      "id": 634,
      "alert_id": 271,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-25 23:47:56",
      "note": "The customer reported an unusual issue; the delivery was closed."
    },
    {
      "id": 635,
      "alert_id": 360,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-08-14 07:56:56",
      "note": "A minor follow-up: the invoice was confirmed."
    },
    {
      "id": 636,
      "alert_id": 69,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-07-16 10:27:45",
      "note": "The team confirmed the details and the claim was rescheduled."
    },
    {
      "id": 637,
      "alert_id": 400,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-03 13:42:15",
      "note": "An operator confirmed the details and the order was reopened."
    },
    {
      "id": 638,
      "alert_id": 437,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-07-08 14:10:58",
      "note": "The courier reported a routine issue; the appointment was delayed."
    },
    {
      "id": 639,
      "alert_id": 97,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-07 00:57:49",
      "note": "The account owner asked for a change and the claim was rejected."
    },
    {
      "id": 640,
      "alert_id": 334,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 11,
      "changed_at": "2025-07-20 07:17:16",
      "note": "The account owner asked for a change and the item was completed."
    },
    {
      "id": 641,
      "alert_id": 356,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-28 06:28:08",
      "note": "The shipment was processed — late case, no further action."
    },
    {
      "id": 642,
      "alert_id": 455,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-08-10 05:57:48",
      "note": "The customer confirmed the details and the claim was rescheduled."
    },
    {
      "id": 643,
      "alert_id": 243,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-07-24 10:47:54",
      "note": "The team asked for a change and the session was processed."
    },
    {
      "id": 644,
      "alert_id": 97,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-07 05:43:19",
      "note": "No response from the reviewer, so the request was delayed."
    },
    {
      "id": 645,
      "alert_id": 175,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-08-21 15:15:20",
      "note": "A minor request was reopened the same day."
    },
    {
      "id": 646,
      "alert_id": 281,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-31 16:17:56",
      "note": "Support confirmed the details and the invoice was refunded."
    },
    {
      "id": 647,
      "alert_id": 113,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-02 14:45:37",
      "note": "The account was replaced following an automatic review."
    },
    {
      "id": 648,
      "alert_id": 209,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-08-07 16:03:16",
      "note": "The record was reopened — manual case, no further action."
    },
    {
      "id": 649,
      "alert_id": 392,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-08-26 23:31:00",
      "note": "A duplicate follow-up: the delivery was resolved."
    },
    {
      "id": 650,
      "alert_id": 293,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-17 02:20:59",
      "note": "The supplier asked for a change and the invoice was refunded."
    },
    {
      "id": 651,
      "alert_id": 212,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-08-17 20:02:00",
      "note": "The request was delayed after a duplicate check."
    },
    {
      "id": 652,
      "alert_id": 94,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-02 13:10:43",
      "note": "The reviewer confirmed the details and the order was processed."
    },
    {
      "id": 653,
      "alert_id": 369,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-09-24 06:17:54",
      "note": "The request was closed after a minor check."
    },
    {
      "id": 654,
      "alert_id": 357,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-07-29 14:48:13",
      "note": "The invoice was completed — automatic case, no further action."
    },
    {
      "id": 655,
      "alert_id": 162,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-29 14:31:09",
      "note": "No response from support, so the booking was approved."
    },
    {
      "id": 656,
      "alert_id": 441,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-09 15:52:40",
      "note": "The session was approved following a late review."
    },
    {
      "id": 657,
      "alert_id": 100,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-07-16 23:03:07",
      "note": "The team asked for a change and the request was rejected."
    },
    {
      "id": 658,
      "alert_id": 183,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-07-17 19:31:23",
      "note": "The item was reviewed — minor case, no further action."
    },
    {
      "id": 659,
      "alert_id": 511,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-09-01 04:21:15",
      "note": "The appointment was rescheduled after an urgent check."
    },
    {
      "id": 660,
      "alert_id": 196,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 13,
      "changed_at": "2025-09-01 08:53:21",
      "note": "The delivery was processed after a standard check."
    },
    {
      "id": 661,
      "alert_id": 124,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-31 00:50:40",
      "note": "The report was confirmed after a routine check."
    },
    {
      "id": 662,
      "alert_id": 498,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-07-16 12:32:44",
      "note": "An incomplete shipment was delayed the same day."
    },
    {
      "id": 663,
      "alert_id": 8,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-02 11:39:51",
      "note": "The record was completed after an automatic check."
    },
    {
      "id": 664,
      "alert_id": 335,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-08-08 02:15:46",
      "note": "No response from the courier, so the order was refunded."
    },
    {
      "id": 665,
      "alert_id": 415,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-08-29 14:02:13",
      "note": "Support confirmed the details and the claim was closed."
    },
    {
      "id": 666,
      "alert_id": 417,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-09-25 16:08:03",
      "note": "The report was reopened — automatic case, no further action."
    },
    {
      "id": 667,
      "alert_id": 345,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-25 14:07:25",
      "note": "An operator reported a repeat issue; the report was rejected."
    },
    {
      "id": 668,
      "alert_id": 243,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-07-25 08:20:49",
      "note": "The session was completed following a manual review."
    },
    {
      "id": 669,
      "alert_id": 154,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-16 11:25:58",
      "note": "The appointment was resolved after a partial check."
    },
    {
      "id": 670,
      "alert_id": 469,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-09-22 16:32:19",
      "note": "The team reported an automatic issue; the refund was reviewed."
    },
    {
      "id": 671,
      "alert_id": 507,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-09-04 09:22:58",
      "note": "The request was cancelled after an incomplete check."
    },
    {
      "id": 672,
      "alert_id": 157,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-08-30 17:36:38",
      "note": "The invoice was rejected following a late review."
    },
    {
      "id": 673,
      "alert_id": 535,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-07-14 09:09:38",
      "note": "An urgent follow-up: the delivery was completed."
    },
    {
      "id": 674,
      "alert_id": 388,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-09-14 11:52:54",
      "note": "An urgent follow-up: the transfer was closed."
    },
    {
      "id": 675,
      "alert_id": 497,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-08-16 03:20:12",
      "note": "No response from the team, so the item was replaced."
    },
    {
      "id": 676,
      "alert_id": 472,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-05 07:55:18",
      "note": "The reviewer asked for a change and the invoice was completed."
    },
    {
      "id": 677,
      "alert_id": 158,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-07-19 17:14:45",
      "note": "An incomplete follow-up: the claim was delayed."
    },
    {
      "id": 678,
      "alert_id": 15,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-29 18:52:58",
      "note": "The transfer was rejected after a minor check."
    },
    {
      "id": 679,
      "alert_id": 136,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-30 04:04:04",
      "note": "A minor follow-up: the record was updated."
    },
    {
      "id": 680,
      "alert_id": 233,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-21 17:52:15",
      "note": "A standard invoice was approved the same day."
    },
    {
      "id": 681,
      "alert_id": 404,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-10 06:29:22",
      "note": "The shipment was completed after an unusual check."
    },
    {
      "id": 682,
      "alert_id": 183,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-07-18 15:39:44",
      "note": "No response from the courier, so the order was approved."
    },
    {
      "id": 683,
      "alert_id": 225,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-07-04 18:26:47",
      "note": "Flagged as repeat. The account owner approved the invoice."
    },
    {
      "id": 684,
      "alert_id": 511,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-09-03 00:21:36",
      "note": "An urgent follow-up: the request was rescheduled."
    },
    {
      "id": 685,
      "alert_id": 145,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-07-23 19:09:27",
      "note": "Flagged as partial. The customer resolved the invoice."
    },
    {
      "id": 686,
      "alert_id": 267,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-08-10 18:38:17",
      "note": "No response from the courier, so the delivery was reviewed."
    },
    {
      "id": 687,
      "alert_id": 176,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-18 22:42:27",
      "note": "The payment was escalated — minor case, no further action."
    },
    {
      "id": 688,
      "alert_id": 521,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-15 18:24:29",
      "note": "The customer asked for a change and the invoice was cancelled."
    },
    {
      "id": 689,
      "alert_id": 415,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-08-30 05:10:18",
      "note": "A standard account was updated the same day."
    },
    {
      "id": 690,
      "alert_id": 539,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-26 08:48:23",
      "note": "The transfer was resolved — routine case, no further action."
    },
    {
      "id": 691,
      "alert_id": 252,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-07-27 00:14:27",
      "note": "The ticket was processed — repeat case, no further action."
    },
    {
      "id": 692,
      "alert_id": 291,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 13,
      "changed_at": "2025-09-16 07:58:34",
      "note": "Flagged as unusual. The customer delayed the transfer."
    },
    {
      "id": 693,
      "alert_id": 224,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 7,
      "changed_at": "2025-07-15 07:38:12",
      "note": "The invoice was rejected — incomplete case, no further action."
    },
    {
      "id": 694,
      "alert_id": 302,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-09-28 12:02:33",
      "note": "The reviewer confirmed the details and the order was completed."
    },
    {
      "id": 695,
      "alert_id": 434,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-08-31 21:11:29",
      "note": "The team reported a partial issue; the transfer was cancelled."
    },
    {
      "id": 696,
      "alert_id": 138,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 16,
      "changed_at": "2025-09-17 06:05:45",
      "note": "The shipment was processed — duplicate case, no further action."
    },
    {
      "id": 697,
      "alert_id": 240,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-09-19 07:16:45",
      "note": "The refund was rescheduled following a repeat review."
    },
    {
      "id": 698,
      "alert_id": 3,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-22 17:48:52",
      "note": "A manual refund was rejected the same day."
    },
    {
      "id": 699,
      "alert_id": 464,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-09 06:11:40",
      "note": "The report was resolved following a routine review."
    },
    {
      "id": 700,
      "alert_id": 5,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-03 22:50:36",
      "note": "An operator asked for a change and the document was escalated."
    },
    {
      "id": 701,
      "alert_id": 428,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-13 02:53:02",
      "note": "The appointment was rejected after a routine check."
    },
    {
      "id": 702,
      "alert_id": 396,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-08-22 10:27:36",
      "note": "The request was closed — standard case, no further action."
    },
    {
      "id": 703,
      "alert_id": 392,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-08-28 14:15:12",
      "note": "A partial payment was reopened the same day."
    },
    {
      "id": 704,
      "alert_id": 248,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-11 11:17:59",
      "note": "Flagged as urgent. The reviewer reviewed the request."
    },
    {
      "id": 705,
      "alert_id": 202,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-08-10 05:01:05",
      "note": "Flagged as late. Support updated the document."
    },
    {
      "id": 706,
      "alert_id": 173,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-29 12:31:53",
      "note": "The item was confirmed after an urgent check."
    },
    {
      "id": 707,
      "alert_id": 363,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-08-11 20:11:31",
      "note": "The document was updated following an unusual review."
    },
    {
      "id": 708,
      "alert_id": 399,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-07 20:55:05",
      "note": "An operator confirmed the details and the delivery was closed."
    },
    {
      "id": 709,
      "alert_id": 442,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-21 18:38:09",
      "note": "The session was approved following a late review."
    },
    {
      "id": 710,
      "alert_id": 298,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-11 00:34:23",
      "note": "The refund was confirmed — partial case, no further action."
    },
    {
      "id": 711,
      "alert_id": 161,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-08-20 14:29:34",
      "note": "Flagged as unusual. The reviewer rescheduled the item."
    },
    {
      "id": 712,
      "alert_id": 5,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-07-04 08:08:42",
      "note": "The report was closed — late case, no further action."
    },
    {
      "id": 713,
      "alert_id": 384,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-16 01:04:58",
      "note": "The appointment was cancelled — manual case, no further action."
    },
    {
      "id": 714,
      "alert_id": 236,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-09 21:28:08",
      "note": "An automatic item was replaced the same day."
    },
    {
      "id": 715,
      "alert_id": 421,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-04 11:38:04",
      "note": "A repeat session was confirmed the same day."
    },
    {
      "id": 716,
      "alert_id": 153,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 5,
      "changed_at": "2025-10-05 09:12:22",
      "note": "A routine follow-up: the refund was completed."
    },
    {
      "id": 717,
      "alert_id": 169,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-03 02:58:10",
      "note": "The claim was rescheduled — unusual case, no further action."
    },
    {
      "id": 718,
      "alert_id": 8,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-08-03 06:29:55",
      "note": "The supplier reported a duplicate issue; the booking was cancelled."
    },
    {
      "id": 719,
      "alert_id": 272,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-29 01:44:46",
      "note": "An unusual follow-up: the report was cancelled."
    },
    {
      "id": 720,
      "alert_id": 475,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-19 10:07:56",
      "note": "A late follow-up: the claim was completed."
    },
    {
      "id": 721,
      "alert_id": 151,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-08-28 05:40:22",
      "note": "Support reported an automatic issue; the request was approved."
    },
    {
      "id": 722,
      "alert_id": 120,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-07-20 04:56:10",
      "note": "Flagged as urgent. The customer approved the ticket."
    },
    {
      "id": 723,
      "alert_id": 206,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-03 15:34:20",
      "note": "No response from the team, so the order was closed."
    },
    {
      "id": 724,
      "alert_id": 72,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-11 03:44:12",
      "note": "The record was refunded — partial case, no further action."
    },
    {
      "id": 725,
      "alert_id": 234,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-07-29 23:26:03",
      "note": "A partial refund was processed the same day."
    },
    {
      "id": 726,
      "alert_id": 100,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-07-17 21:09:04",
      "note": "No response from the courier, so the transfer was refunded."
    },
    {
      "id": 727,
      "alert_id": 77,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-20 04:50:59",
      "note": "A minor delivery was refunded the same day."
    },
    {
      "id": 728,
      "alert_id": 508,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-08-30 00:22:30",
      "note": "The invoice was replaced — duplicate case, no further action."
    },
    {
      "id": 729,
      "alert_id": 164,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-18 01:48:14",
      "note": "Support reported a partial issue; the session was approved."
    },
    {
      "id": 730,
      "alert_id": 411,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-11 04:49:59",
      "note": "Flagged as unusual. An operator updated the claim."
    },
    {
      "id": 731,
      "alert_id": 15,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-07-30 04:33:22",
      "note": "The record was rejected — urgent case, no further action."
    },
    {
      "id": 732,
      "alert_id": 170,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-09-01 15:26:50",
      "note": "No response from an operator, so the item was completed."
    },
    {
      "id": 733,
      "alert_id": 98,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-08-25 09:08:15",
      "note": "The account was cancelled — unusual case, no further action."
    },
    {
      "id": 734,
      "alert_id": 150,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-22 21:06:12",
      "note": "A standard follow-up: the ticket was confirmed."
    },
    {
      "id": 735,
      "alert_id": 52,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-10 14:29:41",
      "note": "The session was delayed — unusual case, no further action."
    },
    {
      "id": 736,
      "alert_id": 71,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-26 04:35:57",
      "note": "The record was reviewed after a manual check."
    },
    {
      "id": 737,
      "alert_id": 43,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-31 05:26:40",
      "note": "The item was completed following a standard review."
    },
    {
      "id": 738,
      "alert_id": 92,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-07-19 02:14:27",
      "note": "The payment was confirmed after an incomplete check."
    },
    {
      "id": 739,
      "alert_id": 462,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-08-18 10:51:25",
      "note": "The team asked for a change and the request was replaced."
    },
    {
      "id": 740,
      "alert_id": 255,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-26 06:14:48",
      "note": "No response from the reviewer, so the ticket was approved."
    },
    {
      "id": 741,
      "alert_id": 452,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-08-14 16:20:18",
      "note": "The request was refunded after an incomplete check."
    },
    {
      "id": 742,
      "alert_id": 131,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-09-25 08:19:02",
      "note": "The appointment was approved — automatic case, no further action."
    },
    {
      "id": 743,
      "alert_id": 306,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-08-03 11:32:32",
      "note": "The order was reviewed — partial case, no further action."
    },
    {
      "id": 744,
      "alert_id": 174,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-09-15 07:00:04",
      "note": "An operator asked for a change and the item was rejected."
    },
    {
      "id": 745,
      "alert_id": 37,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-08-28 11:45:41",
      "note": "Support confirmed the details and the order was processed."
    },
    {
      "id": 746,
      "alert_id": 217,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 6,
      "changed_at": "2025-08-26 02:18:35",
      "note": "A duplicate follow-up: the transfer was delayed."
    },
    {
      "id": 747,
      "alert_id": 502,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-07-22 17:59:16",
      "note": "Flagged as manual. The courier rescheduled the transfer."
    },
    {
      "id": 748,
      "alert_id": 347,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-09-05 13:35:36",
      "note": "The account owner asked for a change and the shipment was cancelled."
    },
    {
      "id": 749,
      "alert_id": 258,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-09-30 21:41:54",
      "note": "A late claim was rejected the same day."
    },
    {
      "id": 750,
      "alert_id": 139,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-12 02:49:50",
      "note": "The supplier asked for a change and the transfer was delayed."
    },
    {
      "id": 751,
      "alert_id": 456,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-21 11:59:54",
      "note": "No response from the account owner, so the record was processed."
    },
    {
      "id": 752,
      "alert_id": 69,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-07-17 00:37:08",
      "note": "A duplicate follow-up: the appointment was replaced."
    },
    {
      "id": 753,
      "alert_id": 271,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-08-26 00:29:46",
      "note": "Support asked for a change and the session was updated."
    },
    {
      "id": 754,
      "alert_id": 260,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-08-13 10:36:29",
      "note": "The order was rejected following a routine review."
    },
    {
      "id": 755,
      "alert_id": 170,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 16,
      "changed_at": "2025-09-01 21:22:20",
      "note": "The invoice was reopened — late case, no further action."
    },
    {
      "id": 756,
      "alert_id": 35,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-11 10:35:10",
      "note": "The refund was confirmed after a manual check."
    },
    {
      "id": 757,
      "alert_id": 9,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-08-16 15:10:47",
      "note": "The claim was closed after a routine check."
    },
    {
      "id": 758,
      "alert_id": 149,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-03 02:08:52",
      "note": "Flagged as repeat. The courier rescheduled the ticket."
    },
    {
      "id": 759,
      "alert_id": 280,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-27 22:13:06",
      "note": "No response from the courier, so the record was completed."
    },
    {
      "id": 760,
      "alert_id": 457,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-01 13:27:45",
      "note": "No response from an operator, so the delivery was rescheduled."
    },
    {
      "id": 761,
      "alert_id": 341,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-02 11:25:47",
      "note": "The account owner asked for a change and the refund was reopened."
    },
    {
      "id": 762,
      "alert_id": 254,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-09-07 01:33:45",
      "note": "The booking was resolved — partial case, no further action."
    },
    {
      "id": 763,
      "alert_id": 270,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-09-07 05:28:37",
      "note": "The customer asked for a change and the claim was approved."
    },
    {
      "id": 764,
      "alert_id": 54,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-09-01 07:05:52",
      "note": "Flagged as standard. Support rejected the record."
    },
    {
      "id": 765,
      "alert_id": 2,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 8,
      "changed_at": "2025-08-12 10:05:01",
      "note": "A manual follow-up: the invoice was resolved."
    },
    {
      "id": 766,
      "alert_id": 212,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-08-18 03:30:32",
      "note": "The supplier confirmed the details and the claim was delayed."
    },
    {
      "id": 767,
      "alert_id": 255,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-07-27 05:32:44",
      "note": "An automatic follow-up: the request was refunded."
    },
    {
      "id": 768,
      "alert_id": 348,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-27 19:09:35",
      "note": "The transfer was closed — manual case, no further action."
    },
    {
      "id": 769,
      "alert_id": 111,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-05 09:22:49",
      "note": "Flagged as automatic. The account owner delayed the request."
    },
    {
      "id": 770,
      "alert_id": 237,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-08-31 05:04:12",
      "note": "The session was completed after a standard check."
    },
    {
      "id": 771,
      "alert_id": 402,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-29 01:27:59",
      "note": "No response from the courier, so the appointment was replaced."
    },
    {
      "id": 772,
      "alert_id": 312,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-07-04 07:27:05",
      "note": "A partial booking was rejected the same day."
    },
    {
      "id": 773,
      "alert_id": 198,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-21 14:01:57",
      "note": "A late claim was cancelled the same day."
    },
    {
      "id": 774,
      "alert_id": 120,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-07-21 12:07:45",
      "note": "The reviewer confirmed the details and the booking was rejected."
    },
    {
      "id": 775,
      "alert_id": 409,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-10-01 11:07:56",
      "note": "The document was processed after a manual check."
    },
    {
      "id": 776,
      "alert_id": 313,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 4,
      "changed_at": "2025-08-07 16:43:28",
      "note": "The record was cancelled after a repeat check."
    },
    {
      "id": 777,
      "alert_id": 495,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-10-01 00:10:44",
      "note": "A minor claim was closed the same day."
    },
    {
      "id": 778,
      "alert_id": 225,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-07-06 02:59:38",
      "note": "Flagged as automatic. The courier processed the record."
    },
    {
      "id": 779,
      "alert_id": 378,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-08-29 13:08:24",
      "note": "The invoice was cancelled — unusual case, no further action."
    },
    {
      "id": 780,
      "alert_id": 355,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-23 10:53:35",
      "note": "A routine appointment was rescheduled the same day."
    },
    {
      "id": 781,
      "alert_id": 369,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 14,
      "changed_at": "2025-09-25 04:22:02",
      "note": "The supplier asked for a change and the request was reopened."
    },
    {
      "id": 782,
      "alert_id": 339,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-08-01 10:41:49",
      "note": "The reviewer reported an automatic issue; the report was reviewed."
    },
    {
      "id": 783,
      "alert_id": 209,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 5,
      "changed_at": "2025-08-08 06:40:20",
      "note": "Flagged as late. The account owner updated the booking."
    },
    {
      "id": 784,
      "alert_id": 107,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-09-17 15:24:37",
      "note": "A minor claim was escalated the same day."
    },
    {
      "id": 785,
      "alert_id": 104,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-09-25 02:28:47",
      "note": "The claim was escalated following an unusual review."
    },
    {
      "id": 786,
      "alert_id": 303,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-29 16:29:23",
      "note": "The request was resolved — routine case, no further action."
    },
    {
      "id": 787,
      "alert_id": 534,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-07-13 21:49:44",
      "note": "The account owner reported a standard issue; the booking was processed."
    },
    {
      "id": 788,
      "alert_id": 211,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-07-31 06:16:29",
      "note": "A minor order was approved the same day."
    },
    {
      "id": 789,
      "alert_id": 107,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-09-19 01:43:40",
      "note": "The report was refunded — minor case, no further action."
    },
    {
      "id": 790,
      "alert_id": 13,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-14 02:05:28",
      "note": "An operator reported a manual issue; the report was escalated."
    },
    {
      "id": 791,
      "alert_id": 331,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-09-08 14:51:13",
      "note": "The delivery was rescheduled following a manual review."
    },
    {
      "id": 792,
      "alert_id": 130,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-09-19 02:32:24",
      "note": "The reviewer reported a manual issue; the record was refunded."
    },
    {
      "id": 793,
      "alert_id": 463,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-07-18 00:22:15",
      "note": "The session was completed following a routine review."
    },
    {
      "id": 794,
      "alert_id": 123,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-17 08:21:18",
      "note": "Support confirmed the details and the order was confirmed."
    },
    {
      "id": 795,
      "alert_id": 214,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-21 22:42:45",
      "note": "The invoice was confirmed — repeat case, no further action."
    },
    {
      "id": 796,
      "alert_id": 340,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-09-04 08:28:17",
      "note": "The team reported a duplicate issue; the document was refunded."
    },
    {
      "id": 797,
      "alert_id": 1,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-07-25 10:18:43",
      "note": "The courier reported a standard issue; the delivery was closed."
    },
    {
      "id": 798,
      "alert_id": 233,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-07-21 19:43:12",
      "note": "The record was rescheduled after a late check."
    },
    {
      "id": 799,
      "alert_id": 205,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-24 03:21:05",
      "note": "The reviewer confirmed the details and the request was escalated."
    },
    {
      "id": 800,
      "alert_id": 358,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-06 03:00:05",
      "note": "No response from the courier, so the record was replaced."
    },
    {
      "id": 801,
      "alert_id": 4,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-09-03 21:00:26",
      "note": "The order was rescheduled — unusual case, no further action."
    },
    {
      "id": 802,
      "alert_id": 156,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-30 01:32:17",
      "note": "Flagged as repeat. The account owner cancelled the transfer."
    },
    {
      "id": 803,
      "alert_id": 433,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-07-14 05:22:09",
      "note": "An urgent record was updated the same day."
    },
    {
      "id": 804,
      "alert_id": 449,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 6,
      "changed_at": "2025-09-22 03:03:08",
      "note": "The reviewer confirmed the details and the item was updated."
    },
    {
      "id": 805,
      "alert_id": 186,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-09-02 21:37:44",
      "note": "No response from the reviewer, so the report was cancelled."
    },
    {
      "id": 806,
      "alert_id": 83,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-10-03 22:44:04",
      "note": "The delivery was resolved after a repeat check."
    },
    {
      "id": 807,
      "alert_id": 373,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-09-19 01:26:44",
      "note": "No response from the account owner, so the payment was approved."
    },
    {
      "id": 808,
      "alert_id": 316,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 6,
      "changed_at": "2025-07-14 14:36:05",
      "note": "No response from the customer, so the ticket was rejected."
    },
    {
      "id": 809,
      "alert_id": 375,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-08-19 20:39:13",
      "note": "An operator reported a repeat issue; the delivery was confirmed."
    },
    {
      "id": 810,
      "alert_id": 336,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-07-13 05:51:29",
      "note": "The request was rejected — late case, no further action."
    },
    {
      "id": 811,
      "alert_id": 135,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-16 12:36:18",
      "note": "The order was delayed after a minor check."
    },
    {
      "id": 812,
      "alert_id": 499,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-07-24 19:03:26",
      "note": "Support confirmed the details and the account was cancelled."
    },
    {
      "id": 813,
      "alert_id": 459,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 12,
      "changed_at": "2025-10-02 09:57:45",
      "note": "Flagged as minor. The customer updated the refund."
    },
    {
      "id": 814,
      "alert_id": 330,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-30 08:02:13",
      "note": "No response from the customer, so the appointment was reopened."
    },
    {
      "id": 815,
      "alert_id": 1,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-07-27 06:39:19",
      "note": "A duplicate appointment was reopened the same day."
    },
    {
      "id": 816,
      "alert_id": 114,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 6,
      "changed_at": "2025-08-31 11:31:38",
      "note": "Flagged as partial. The team rejected the record."
    },
    {
      "id": 817,
      "alert_id": 174,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 13,
      "changed_at": "2025-09-15 11:33:39",
      "note": "The record was refunded — routine case, no further action."
    },
    {
      "id": 818,
      "alert_id": 26,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-09-05 01:24:31",
      "note": "The item was delayed after a partial check."
    },
    {
      "id": 819,
      "alert_id": 33,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-27 17:54:10",
      "note": "The request was updated — repeat case, no further action."
    },
    {
      "id": 820,
      "alert_id": 140,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-08-01 05:42:52",
      "note": "A routine booking was delayed the same day."
    },
    {
      "id": 821,
      "alert_id": 63,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-13 11:47:21",
      "note": "The report was delayed following an incomplete review."
    },
    {
      "id": 822,
      "alert_id": 424,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-09-09 09:49:08",
      "note": "Flagged as manual. The team processed the payment."
    },
    {
      "id": 823,
      "alert_id": 440,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-07-06 17:30:55",
      "note": "No response from the team, so the payment was approved."
    },
    {
      "id": 824,
      "alert_id": 159,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-29 14:26:31",
      "note": "The courier asked for a change and the booking was cancelled."
    },
    {
      "id": 825,
      "alert_id": 363,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-08-12 16:51:59",
      "note": "The reviewer asked for a change and the record was confirmed."
    },
    {
      "id": 826,
      "alert_id": 236,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-10 12:15:29",
      "note": "The ticket was cancelled after an urgent check."
    },
    {
      "id": 827,
      "alert_id": 360,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 10,
      "changed_at": "2025-08-14 10:18:28",
      "note": "The courier reported a routine issue; the shipment was completed."
    },
    {
      "id": 828,
      "alert_id": 452,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-08-16 09:37:43",
      "note": "The refund was closed — repeat case, no further action."
    },
    {
      "id": 829,
      "alert_id": 113,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-08-02 16:34:17",
      "note": "No response from support, so the booking was approved."
    },
    {
      "id": 830,
      "alert_id": 160,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 16,
      "changed_at": "2025-09-26 20:42:34",
      "note": "No response from support, so the account was processed."
    },
    {
      "id": 831,
      "alert_id": 481,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-28 12:52:47",
      "note": "A routine follow-up: the invoice was approved."
    },
    {
      "id": 832,
      "alert_id": 519,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-10-01 23:53:38",
      "note": "An automatic payment was rescheduled the same day."
    },
    {
      "id": 833,
      "alert_id": 307,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-08-08 10:05:00",
      "note": "No response from the team, so the shipment was closed."
    },
    {
      "id": 834,
      "alert_id": 514,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-10 01:06:52",
      "note": "An incomplete booking was reopened the same day."
    },
    {
      "id": 835,
      "alert_id": 433,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-07-15 02:42:35",
      "note": "Flagged as duplicate. The reviewer rescheduled the ticket."
    },
    {
      "id": 836,
      "alert_id": 73,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-08-30 12:53:03",
      "note": "An incomplete follow-up: the order was cancelled."
    },
    {
      "id": 837,
      "alert_id": 197,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-06 02:16:26",
      "note": "An urgent follow-up: the report was replaced."
    },
    {
      "id": 838,
      "alert_id": 61,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-07-18 11:31:17",
      "note": "The team asked for a change and the report was resolved."
    },
    {
      "id": 839,
      "alert_id": 129,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-21 08:05:20",
      "note": "The document was processed — minor case, no further action."
    },
    {
      "id": 840,
      "alert_id": 198,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-07-23 01:37:39",
      "note": "Flagged as minor. The supplier reviewed the account."
    },
    {
      "id": 841,
      "alert_id": 479,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-07-05 13:35:22",
      "note": "The payment was refunded — partial case, no further action."
    },
    {
      "id": 842,
      "alert_id": 51,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-08-07 16:25:15",
      "note": "A manual payment was cancelled the same day."
    },
    {
      "id": 843,
      "alert_id": 106,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-06 09:48:16",
      "note": "The customer asked for a change and the account was processed."
    },
    {
      "id": 844,
      "alert_id": 159,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-09-30 06:32:25",
      "note": "Support reported a duplicate issue; the ticket was completed."
    },
    {
      "id": 845,
      "alert_id": 40,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-07-25 16:20:36",
      "note": "The customer asked for a change and the delivery was resolved."
    },
    {
      "id": 846,
      "alert_id": 263,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-09-01 19:31:56",
      "note": "A standard transfer was rescheduled the same day."
    },
    {
      "id": 847,
      "alert_id": 99,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-09-12 19:05:44",
      "note": "No response from the courier, so the ticket was rejected."
    },
    {
      "id": 848,
      "alert_id": 205,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-07-24 12:58:06",
      "note": "An operator confirmed the details and the document was rejected."
    },
    {
      "id": 849,
      "alert_id": 183,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 14,
      "changed_at": "2025-07-20 04:16:55",
      "note": "The appointment was confirmed after an unusual check."
    },
    {
      "id": 850,
      "alert_id": 93,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-08-14 21:21:56",
      "note": "The refund was delayed — incomplete case, no further action."
    },
    {
      "id": 851,
      "alert_id": 327,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-13 01:51:42",
      "note": "A routine request was completed the same day."
    },
    {
      "id": 852,
      "alert_id": 350,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-09-08 05:38:34",
      "note": "The courier confirmed the details and the session was approved."
    },
    {
      "id": 853,
      "alert_id": 466,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-07-05 08:41:34",
      "note": "An operator reported a standard issue; the appointment was updated."
    },
    {
      "id": 854,
      "alert_id": 423,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-05 01:43:31",
      "note": "The account owner asked for a change and the appointment was replaced."
    },
    {
      "id": 855,
      "alert_id": 159,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 7,
      "changed_at": "2025-10-01 22:33:20",
      "note": "The customer asked for a change and the transfer was closed."
    },
    {
      "id": 856,
      "alert_id": 214,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-09-23 14:55:33",
      "note": "The delivery was resolved following an automatic review."
    },
    {
      "id": 857,
      "alert_id": 118,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-27 03:46:11",
      "note": "The account was processed — duplicate case, no further action."
    },
    {
      "id": 858,
      "alert_id": 491,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-29 06:25:17",
      "note": "No response from the account owner, so the invoice was replaced."
    },
    {
      "id": 859,
      "alert_id": 397,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-20 02:28:46",
      "note": "The delivery was replaced following a partial review."
    },
    {
      "id": 860,
      "alert_id": 413,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-08-08 18:16:32",
      "note": "The ticket was closed — incomplete case, no further action."
    },
    {
      "id": 861,
      "alert_id": 527,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-21 04:31:09",
      "note": "The courier reported a routine issue; the report was rejected."
    },
    {
      "id": 862,
      "alert_id": 266,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-07-12 04:51:46",
      "note": "An incomplete follow-up: the document was delayed."
    },
    {
      "id": 863,
      "alert_id": 390,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-08-09 23:14:11",
      "note": "No response from the courier, so the record was delayed."
    },
    {
      "id": 864,
      "alert_id": 429,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-07-22 19:13:59",
      "note": "Flagged as incomplete. The courier delayed the item."
    },
    {
      "id": 865,
      "alert_id": 87,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-09-25 18:58:11",
      "note": "The supplier asked for a change and the booking was delayed."
    },
    {
      "id": 866,
      "alert_id": 131,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-09-25 12:22:48",
      "note": "A partial follow-up: the report was replaced."
    },
    {
      "id": 867,
      "alert_id": 524,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-09-26 08:04:23",
      "note": "The appointment was reviewed — late case, no further action."
    },
    {
      "id": 868,
      "alert_id": 288,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-09-14 14:43:39",
      "note": "A routine follow-up: the request was replaced."
    },
    {
      "id": 869,
      "alert_id": 359,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-07-26 13:37:21",
      "note": "The invoice was refunded following a routine review."
    },
    {
      "id": 870,
      "alert_id": 132,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-09-12 06:10:27",
      "note": "Flagged as late. The supplier reviewed the shipment."
    },
    {
      "id": 871,
      "alert_id": 390,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-08-11 20:16:55",
      "note": "An urgent follow-up: the ticket was escalated."
    },
    {
      "id": 872,
      "alert_id": 471,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-08-23 07:34:59",
      "note": "Flagged as duplicate. The team replaced the order."
    },
    {
      "id": 873,
      "alert_id": 9,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-08-18 09:10:17",
      "note": "The claim was processed following a standard review."
    },
    {
      "id": 874,
      "alert_id": 391,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-07-24 15:24:43",
      "note": "The courier asked for a change and the booking was delayed."
    },
    {
      "id": 875,
      "alert_id": 525,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-30 23:51:09",
      "note": "An automatic follow-up: the report was approved."
    },
    {
      "id": 876,
      "alert_id": 5,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 13,
      "changed_at": "2025-07-05 04:38:03",
      "note": "No response from the courier, so the report was closed."
    },
    {
      "id": 877,
      "alert_id": 72,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-08-13 00:29:37",
      "note": "The account was resolved after an unusual check."
    },
    {
      "id": 878,
      "alert_id": 161,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-08-21 06:01:44",
      "note": "An operator reported a late issue; the record was reopened."
    },
    {
      "id": 879,
      "alert_id": 362,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 10,
      "changed_at": "2025-09-16 10:02:17",
      "note": "An unusual payment was reviewed the same day."
    },
    {
      "id": 880,
      "alert_id": 10,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-30 03:32:01",
      "note": "A routine follow-up: the refund was completed."
    },
    {
      "id": 881,
      "alert_id": 259,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-07-09 02:22:50",
      "note": "Flagged as automatic. An operator closed the session."
    },
    {
      "id": 882,
      "alert_id": 215,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-28 21:42:06",
      "note": "Flagged as unusual. The customer processed the appointment."
    },
    {
      "id": 883,
      "alert_id": 266,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-07-13 22:22:32",
      "note": "The customer reported an automatic issue; the record was resolved."
    },
    {
      "id": 884,
      "alert_id": 185,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 8,
      "changed_at": "2025-07-08 01:28:29",
      "note": "A manual document was updated the same day."
    },
    {
      "id": 885,
      "alert_id": 210,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 5,
      "changed_at": "2025-09-11 21:21:33",
      "note": "The reviewer asked for a change and the session was delayed."
    },
    {
      "id": 886,
      "alert_id": 92,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-07-19 13:33:30",
      "note": "The order was replaced after a late check."
    },
    {
      "id": 887,
      "alert_id": 513,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 1,
      "changed_at": "2025-07-18 17:28:36",
      "note": "The refund was resolved — partial case, no further action."
    },
    {
      "id": 888,
      "alert_id": 315,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-09-01 03:49:16",
      "note": "Flagged as standard. The team confirmed the claim."
    },
    {
      "id": 889,
      "alert_id": 263,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 10,
      "changed_at": "2025-09-02 21:00:12",
      "note": "Flagged as automatic. The team delayed the ticket."
    },
    {
      "id": 890,
      "alert_id": 192,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-09-02 22:27:55",
      "note": "A repeat follow-up: the invoice was confirmed."
    },
    {
      "id": 891,
      "alert_id": 213,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-22 12:58:56",
      "note": "An unusual booking was reopened the same day."
    },
    {
      "id": 892,
      "alert_id": 429,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-23 22:45:37",
      "note": "The request was cancelled — partial case, no further action."
    },
    {
      "id": 893,
      "alert_id": 275,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-11 17:52:36",
      "note": "A duplicate ticket was reopened the same day."
    },
    {
      "id": 894,
      "alert_id": 365,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-07-29 16:39:54",
      "note": "The account owner asked for a change and the delivery was processed."
    },
    {
      "id": 895,
      "alert_id": 192,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 13,
      "changed_at": "2025-09-03 14:48:30",
      "note": "Support confirmed the details and the shipment was replaced."
    },
    {
      "id": 896,
      "alert_id": 483,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 9,
      "changed_at": "2025-07-31 16:00:12",
      "note": "The courier asked for a change and the order was reviewed."
    },
    {
      "id": 897,
      "alert_id": 90,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-01 08:05:57",
      "note": "The payment was updated after a manual check."
    },
    {
      "id": 898,
      "alert_id": 82,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-19 07:59:34",
      "note": "Flagged as minor. An operator cancelled the appointment."
    },
    {
      "id": 899,
      "alert_id": 226,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 6,
      "changed_at": "2025-07-12 04:32:36",
      "note": "A manual follow-up: the order was escalated."
    },
    {
      "id": 900,
      "alert_id": 146,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-09-11 16:24:27",
      "note": "No response from the customer, so the account was reopened."
    },
    {
      "id": 901,
      "alert_id": 142,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 12,
      "changed_at": "2025-07-06 19:19:25",
      "note": "The courier asked for a change and the invoice was approved."
    },
    {
      "id": 902,
      "alert_id": 25,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-09-24 04:09:06",
      "note": "No response from the courier, so the appointment was updated."
    },
    {
      "id": 903,
      "alert_id": 418,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-07-12 09:06:11",
      "note": "The session was closed after an incomplete check."
    },
    {
      "id": 904,
      "alert_id": 252,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 14,
      "changed_at": "2025-07-27 03:07:41",
      "note": "The document was completed — standard case, no further action."
    },
    {
      "id": 905,
      "alert_id": 131,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 6,
      "changed_at": "2025-09-25 19:51:26",
      "note": "A late record was closed the same day."
    },
    {
      "id": 906,
      "alert_id": 329,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 11,
      "changed_at": "2025-07-19 01:24:57",
      "note": "An automatic follow-up: the appointment was escalated."
    },
    {
      "id": 907,
      "alert_id": 468,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 2,
      "changed_at": "2025-08-23 12:22:22",
      "note": "Support asked for a change and the payment was confirmed."
    },
    {
      "id": 908,
      "alert_id": 130,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-09-19 20:10:34",
      "note": "Flagged as automatic. Support reviewed the report."
    },
    {
      "id": 909,
      "alert_id": 488,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-09-21 04:17:01",
      "note": "The claim was reopened — manual case, no further action."
    },
    {
      "id": 910,
      "alert_id": 80,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-13 21:09:34",
      "note": "A partial account was reopened the same day."
    },
    {
      "id": 911,
      "alert_id": 488,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-09-22 23:56:16",
      "note": "The delivery was completed after an incomplete check."
    },
    {
      "id": 912,
      "alert_id": 429,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-07-24 23:48:56",
      "note": "The ticket was resolved — urgent case, no further action."
    },
    {
      "id": 913,
      "alert_id": 312,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-07-05 02:27:17",
      "note": "A manual invoice was reopened the same day."
    },
    {
      "id": 914,
      "alert_id": 187,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-30 21:53:57",
      "note": "An automatic follow-up: the refund was approved."
    },
    {
      "id": 915,
      "alert_id": 66,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-08-21 09:15:33",
      "note": "Flagged as duplicate. The reviewer rejected the shipment."
    },
    {
      "id": 916,
      "alert_id": 106,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-07-07 04:07:55",
      "note": "Support reported a duplicate issue; the delivery was replaced."
    },
    {
      "id": 917,
      "alert_id": 462,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-08-18 23:54:49",
      "note": "The team reported a duplicate issue; the payment was resolved."
    },
    {
      "id": 918,
      "alert_id": 95,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-30 20:27:44",
      "note": "No response from the account owner, so the item was confirmed."
    },
    {
      "id": 919,
      "alert_id": 509,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-07-08 15:09:56",
      "note": "An unusual session was resolved the same day."
    },
    {
      "id": 920,
      "alert_id": 455,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-08-12 03:19:31",
      "note": "Flagged as partial. The courier rejected the session."
    },
    {
      "id": 921,
      "alert_id": 109,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-08-03 06:49:09",
      "note": "The customer confirmed the details and the payment was processed."
    },
    {
      "id": 922,
      "alert_id": 268,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 3,
      "changed_at": "2025-09-19 16:50:40",
      "note": "No response from an operator, so the transfer was rejected."
    },
    {
      "id": 923,
      "alert_id": 81,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 16,
      "changed_at": "2025-08-17 03:54:42",
      "note": "The customer confirmed the details and the account was updated."
    },
    {
      "id": 924,
      "alert_id": 449,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 2,
      "changed_at": "2025-09-23 13:03:49",
      "note": "A manual report was confirmed the same day."
    },
    {
      "id": 925,
      "alert_id": 443,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-07-17 03:39:28",
      "note": "The report was rejected following a late review."
    },
    {
      "id": 926,
      "alert_id": 281,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-09-01 13:43:51",
      "note": "The courier reported an unusual issue; the record was refunded."
    },
    {
      "id": 927,
      "alert_id": 94,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-08-03 11:19:39",
      "note": "The payment was updated following an unusual review."
    },
    {
      "id": 928,
      "alert_id": 455,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 7,
      "changed_at": "2025-08-13 19:02:57",
      "note": "An operator asked for a change and the account was delayed."
    },
    {
      "id": 929,
      "alert_id": 362,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-09-16 23:00:38",
      "note": "The courier reported an unusual issue; the report was delayed."
    },
    {
      "id": 930,
      "alert_id": 434,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-09-02 10:21:14",
      "note": "The account owner confirmed the details and the payment was delayed."
    },
    {
      "id": 931,
      "alert_id": 102,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-08-26 21:50:04",
      "note": "A repeat follow-up: the session was replaced."
    },
    {
      "id": 932,
      "alert_id": 143,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 1,
      "changed_at": "2025-07-15 15:41:26",
      "note": "Flagged as incomplete. Support approved the report."
    },
    {
      "id": 933,
      "alert_id": 415,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 16,
      "changed_at": "2025-09-01 05:20:19",
      "note": "The reviewer reported a minor issue; the order was replaced."
    },
    {
      "id": 934,
      "alert_id": 38,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 16,
      "changed_at": "2025-09-01 14:28:53",
      "note": "The account owner asked for a change and the appointment was confirmed."
    },
    {
      "id": 935,
      "alert_id": 166,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-09-03 10:50:01",
      "note": "The order was updated following a repeat review."
    },
    {
      "id": 936,
      "alert_id": 282,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 16,
      "changed_at": "2025-08-19 07:56:01",
      "note": "An operator asked for a change and the item was confirmed."
    },
    {
      "id": 937,
      "alert_id": 117,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 14,
      "changed_at": "2025-07-24 22:46:01",
      "note": "The account owner reported an incomplete issue; the booking was approved."
    },
    {
      "id": 938,
      "alert_id": 54,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 14,
      "changed_at": "2025-09-02 21:05:05",
      "note": "A late appointment was replaced the same day."
    },
    {
      "id": 939,
      "alert_id": 445,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-07-17 17:29:04",
      "note": "A routine follow-up: the shipment was rejected."
    },
    {
      "id": 940,
      "alert_id": 138,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-09-18 12:04:36",
      "note": "The supplier confirmed the details and the request was completed."
    },
    {
      "id": 941,
      "alert_id": 262,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-07-23 01:11:12",
      "note": "The refund was delayed — automatic case, no further action."
    },
    {
      "id": 942,
      "alert_id": 212,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 6,
      "changed_at": "2025-08-18 17:39:03",
      "note": "Flagged as automatic. The supplier reviewed the record."
    },
    {
      "id": 943,
      "alert_id": 147,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 4,
      "changed_at": "2025-07-16 12:02:36",
      "note": "The booking was escalated following a duplicate review."
    },
    {
      "id": 944,
      "alert_id": 83,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-10-04 03:11:30",
      "note": "Flagged as partial. The courier closed the record."
    },
    {
      "id": 945,
      "alert_id": 465,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-12 21:39:41",
      "note": "The courier confirmed the details and the payment was approved."
    },
    {
      "id": 946,
      "alert_id": 490,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 4,
      "changed_at": "2025-09-09 16:25:28",
      "note": "An operator asked for a change and the document was refunded."
    },
    {
      "id": 947,
      "alert_id": 485,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-23 13:36:03",
      "note": "Flagged as duplicate. The account owner replaced the document."
    },
    {
      "id": 948,
      "alert_id": 271,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-08-26 20:05:29",
      "note": "The ticket was reviewed — unusual case, no further action."
    },
    {
      "id": 949,
      "alert_id": 467,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-07-12 01:51:11",
      "note": "No response from the supplier, so the booking was updated."
    },
    {
      "id": 950,
      "alert_id": 390,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-08-12 08:29:15",
      "note": "No response from an operator, so the appointment was cancelled."
    },
    {
      "id": 951,
      "alert_id": 374,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-29 13:58:07",
      "note": "The account was delayed after a minor check."
    },
    {
      "id": 952,
      "alert_id": 376,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-09-13 20:16:57",
      "note": "The appointment was closed following an urgent review."
    },
    {
      "id": 953,
      "alert_id": 296,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 7,
      "changed_at": "2025-07-15 10:05:23",
      "note": "The supplier confirmed the details and the document was cancelled."
    },
    {
      "id": 954,
      "alert_id": 458,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-08-20 02:44:56",
      "note": "The invoice was resolved — automatic case, no further action."
    },
    {
      "id": 955,
      "alert_id": 403,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-09-11 05:55:32",
      "note": "No response from the customer, so the transfer was confirmed."
    },
    {
      "id": 956,
      "alert_id": 515,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-11 17:35:50",
      "note": "The reviewer asked for a change and the ticket was confirmed."
    },
    {
      "id": 957,
      "alert_id": 380,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-08-23 02:26:46",
      "note": "The payment was delayed — incomplete case, no further action."
    },
    {
      "id": 958,
      "alert_id": 58,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-29 08:59:03",
      "note": "The transfer was refunded — partial case, no further action."
    },
    {
      "id": 959,
      "alert_id": 70,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 9,
      "changed_at": "2025-09-22 12:43:02",
      "note": "Flagged as minor. Support confirmed the item."
    },
    {
      "id": 960,
      "alert_id": 324,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-09-07 04:13:38",
      "note": "Flagged as urgent. The supplier reviewed the appointment."
    },
    {
      "id": 961,
      "alert_id": 135,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 2,
      "changed_at": "2025-08-16 18:27:01",
      "note": "A partial follow-up: the order was escalated."
    },
    {
      "id": 962,
      "alert_id": 258,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 10,
      "changed_at": "2025-10-01 05:15:58",
      "note": "The claim was processed after a duplicate check."
    },
    {
      "id": 963,
      "alert_id": 56,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-29 20:16:56",
      "note": "No response from an operator, so the request was approved."
    },
    {
      "id": 964,
      "alert_id": 268,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-09-20 12:41:37",
      "note": "Flagged as late. The supplier replaced the booking."
    },
    {
      "id": 965,
      "alert_id": 420,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 6,
      "changed_at": "2025-09-17 21:35:31",
      "note": "An automatic follow-up: the payment was delayed."
    },
    {
      "id": 966,
      "alert_id": 75,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 1,
      "changed_at": "2025-08-07 10:15:16",
      "note": "A partial account was rejected the same day."
    },
    {
      "id": 967,
      "alert_id": 85,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-09-05 04:17:03",
      "note": "A late record was completed the same day."
    },
    {
      "id": 968,
      "alert_id": 260,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 14,
      "changed_at": "2025-08-15 03:11:44",
      "note": "The order was updated — standard case, no further action."
    },
    {
      "id": 969,
      "alert_id": 383,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-07-23 14:17:19",
      "note": "An incomplete follow-up: the record was updated."
    },
    {
      "id": 970,
      "alert_id": 503,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-08-26 12:33:48",
      "note": "The request was closed following a standard review."
    },
    {
      "id": 971,
      "alert_id": 408,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-05 00:26:17",
      "note": "The account was reviewed — automatic case, no further action."
    },
    {
      "id": 972,
      "alert_id": 249,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-07-21 08:37:28",
      "note": "A duplicate follow-up: the request was completed."
    },
    {
      "id": 973,
      "alert_id": 106,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-07-07 17:18:01",
      "note": "A standard appointment was cancelled the same day."
    },
    {
      "id": 974,
      "alert_id": 78,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-11 16:49:39",
      "note": "The customer reported an automatic issue; the appointment was escalated."
    },
    {
      "id": 975,
      "alert_id": 503,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-08-27 12:54:06",
      "note": "Flagged as unusual. The reviewer cancelled the item."
    },
    {
      "id": 976,
      "alert_id": 435,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 15,
      "changed_at": "2025-09-13 19:55:32",
      "note": "A late item was closed the same day."
    },
    {
      "id": 977,
      "alert_id": 171,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 5,
      "changed_at": "2025-09-23 02:35:23",
      "note": "A standard follow-up: the appointment was rejected."
    },
    {
      "id": 978,
      "alert_id": 432,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 2,
      "changed_at": "2025-08-01 15:07:15",
      "note": "The account owner reported a standard issue; the claim was replaced."
    },
    {
      "id": 979,
      "alert_id": 299,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-07-17 14:29:07",
      "note": "The reviewer asked for a change and the document was delayed."
    },
    {
      "id": 980,
      "alert_id": 338,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 5,
      "changed_at": "2025-07-08 15:07:36",
      "note": "The transfer was completed — duplicate case, no further action."
    },
    {
      "id": 981,
      "alert_id": 39,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-08-29 17:42:44",
      "note": "The customer confirmed the details and the record was approved."
    },
    {
      "id": 982,
      "alert_id": 296,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-07-16 02:51:21",
      "note": "The order was processed — standard case, no further action."
    },
    {
      "id": 983,
      "alert_id": 479,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 13,
      "changed_at": "2025-07-06 03:29:00",
      "note": "The document was completed — routine case, no further action."
    },
    {
      "id": 984,
      "alert_id": 65,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 8,
      "changed_at": "2025-09-01 16:33:38",
      "note": "The customer asked for a change and the report was replaced."
    },
    {
      "id": 985,
      "alert_id": 333,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 7,
      "changed_at": "2025-08-27 14:12:53",
      "note": "An operator asked for a change and the report was resolved."
    },
    {
      "id": 986,
      "alert_id": 324,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 11,
      "changed_at": "2025-09-08 07:27:57",
      "note": "The appointment was confirmed after an incomplete check."
    },
    {
      "id": 987,
      "alert_id": 184,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-08-02 18:57:53",
      "note": "The courier reported an urgent issue; the ticket was processed."
    },
    {
      "id": 988,
      "alert_id": 76,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 14,
      "changed_at": "2025-07-23 22:26:43",
      "note": "The team reported a standard issue; the ticket was refunded."
    },
    {
      "id": 989,
      "alert_id": 166,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 5,
      "changed_at": "2025-09-03 16:03:53",
      "note": "No response from support, so the order was closed."
    },
    {
      "id": 990,
      "alert_id": 467,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-07-14 00:02:31",
      "note": "The courier asked for a change and the claim was escalated."
    },
    {
      "id": 991,
      "alert_id": 166,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 14,
      "changed_at": "2025-09-05 08:31:02",
      "note": "The item was resolved — automatic case, no further action."
    },
    {
      "id": 992,
      "alert_id": 398,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-15 19:13:03",
      "note": "A standard account was processed the same day."
    },
    {
      "id": 993,
      "alert_id": 231,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-23 00:28:38",
      "note": "Support reported a standard issue; the session was confirmed."
    },
    {
      "id": 994,
      "alert_id": 124,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 8,
      "changed_at": "2025-09-02 00:27:58",
      "note": "The session was rescheduled after an incomplete check."
    },
    {
      "id": 995,
      "alert_id": 104,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 4,
      "changed_at": "2025-09-26 13:45:55",
      "note": "Flagged as minor. The account owner confirmed the booking."
    },
    {
      "id": 996,
      "alert_id": 144,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-04 22:38:26",
      "note": "Flagged as routine. The reviewer reopened the invoice."
    },
    {
      "id": 997,
      "alert_id": 247,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 6,
      "changed_at": "2025-09-03 00:04:45",
      "note": "The team confirmed the details and the order was processed."
    },
    {
      "id": 998,
      "alert_id": 387,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-27 04:26:24",
      "note": "A minor account was cancelled the same day."
    },
    {
      "id": 999,
      "alert_id": 49,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 5,
      "changed_at": "2025-07-31 08:40:11",
      "note": "No response from the supplier, so the ticket was approved."
    },
    {
      "id": 1000,
      "alert_id": 284,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 4,
      "changed_at": "2025-09-09 13:28:59",
      "note": "An automatic follow-up: the shipment was rescheduled."
    },
    {
      "id": 1001,
      "alert_id": 16,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-08-21 17:33:08",
      "note": "A standard follow-up: the booking was confirmed."
    },
    {
      "id": 1002,
      "alert_id": 520,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-10-01 18:09:22",
      "note": "The order was approved after a repeat check."
    },
    {
      "id": 1003,
      "alert_id": 170,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-09-02 02:34:49",
      "note": "Flagged as duplicate. The courier escalated the refund."
    },
    {
      "id": 1004,
      "alert_id": 268,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-09-21 05:56:12",
      "note": "The order was delayed following a manual review."
    },
    {
      "id": 1005,
      "alert_id": 255,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-07-28 19:45:06",
      "note": "Support asked for a change and the item was approved."
    },
    {
      "id": 1006,
      "alert_id": 98,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 8,
      "changed_at": "2025-08-27 08:02:39",
      "note": "Flagged as manual. The customer resolved the ticket."
    },
    {
      "id": 1007,
      "alert_id": 332,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-07-15 18:07:45",
      "note": "An incomplete report was delayed the same day."
    },
    {
      "id": 1008,
      "alert_id": 133,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-08-11 01:43:33",
      "note": "A minor follow-up: the ticket was refunded."
    },
    {
      "id": 1009,
      "alert_id": 75,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 4,
      "changed_at": "2025-08-08 17:01:25",
      "note": "The team reported a routine issue; the item was confirmed."
    },
    {
      "id": 1010,
      "alert_id": 239,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 11,
      "changed_at": "2025-07-25 19:30:20",
      "note": "An incomplete appointment was resolved the same day."
    },
    {
      "id": 1011,
      "alert_id": 94,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 15,
      "changed_at": "2025-08-04 13:05:42",
      "note": "The reviewer asked for a change and the shipment was cancelled."
    },
    {
      "id": 1012,
      "alert_id": 288,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-09-16 00:41:38",
      "note": "No response from the account owner, so the refund was processed."
    },
    {
      "id": 1013,
      "alert_id": 488,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 8,
      "changed_at": "2025-09-24 15:34:16",
      "note": "The delivery was rescheduled after an incomplete check."
    },
    {
      "id": 1014,
      "alert_id": 86,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 7,
      "changed_at": "2025-08-13 14:23:35",
      "note": "The booking was refunded after a minor check."
    },
    {
      "id": 1015,
      "alert_id": 473,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 2,
      "changed_at": "2025-07-11 04:53:57",
      "note": "No response from the supplier, so the request was resolved."
    },
    {
      "id": 1016,
      "alert_id": 440,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 9,
      "changed_at": "2025-07-08 01:28:17",
      "note": "An incomplete follow-up: the appointment was refunded."
    },
    {
      "id": 1017,
      "alert_id": 4,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 8,
      "changed_at": "2025-09-04 07:03:53",
      "note": "The request was delayed following a routine review."
    },
    {
      "id": 1018,
      "alert_id": 198,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 2,
      "changed_at": "2025-07-23 08:31:19",
      "note": "The report was cancelled — routine case, no further action."
    },
    {
      "id": 1019,
      "alert_id": 176,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 14,
      "changed_at": "2025-07-19 12:20:42",
      "note": "Flagged as urgent. The account owner resolved the ticket."
    },
    {
      "id": 1020,
      "alert_id": 17,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 13,
      "changed_at": "2025-07-13 18:43:14",
      "note": "No response from the customer, so the request was approved."
    },
    {
      "id": 1021,
      "alert_id": 337,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-09-21 10:16:30",
      "note": "The booking was cancelled after a late check."
    },
    {
      "id": 1022,
      "alert_id": 453,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 15,
      "changed_at": "2025-09-24 01:57:34",
      "note": "The reviewer asked for a change and the booking was rejected."
    },
    {
      "id": 1023,
      "alert_id": 501,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-09-22 02:11:56",
      "note": "The delivery was closed — repeat case, no further action."
    },
    {
      "id": 1024,
      "alert_id": 308,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-09-16 05:47:39",
      "note": "No response from the supplier, so the record was completed."
    },
    {
      "id": 1025,
      "alert_id": 115,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 10,
      "changed_at": "2025-08-06 03:08:03",
      "note": "A repeat follow-up: the refund was confirmed."
    },
    {
      "id": 1026,
      "alert_id": 121,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 11,
      "changed_at": "2025-07-24 16:12:25",
      "note": "An urgent follow-up: the transfer was updated."
    },
    {
      "id": 1027,
      "alert_id": 29,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-09-10 12:32:52",
      "note": "The appointment was completed following a partial review."
    },
    {
      "id": 1028,
      "alert_id": 195,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 16,
      "changed_at": "2025-09-06 15:43:34",
      "note": "A minor invoice was closed the same day."
    },
    {
      "id": 1029,
      "alert_id": 292,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-07-11 20:54:34",
      "note": "An automatic invoice was reopened the same day."
    },
    {
      "id": 1030,
      "alert_id": 381,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-08-07 07:29:36",
      "note": "The record was reviewed following an unusual review."
    },
    {
      "id": 1031,
      "alert_id": 401,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 13,
      "changed_at": "2025-08-24 04:19:42",
      "note": "The courier asked for a change and the document was completed."
    },
    {
      "id": 1032,
      "alert_id": 142,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 2,
      "changed_at": "2025-07-08 01:16:48",
      "note": "An automatic follow-up: the account was refunded."
    },
    {
      "id": 1033,
      "alert_id": 139,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 5,
      "changed_at": "2025-07-12 16:27:21",
      "note": "The record was closed — incomplete case, no further action."
    },
    {
      "id": 1034,
      "alert_id": 426,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 12,
      "changed_at": "2025-07-20 09:56:38",
      "note": "A late transfer was rejected the same day."
    },
    {
      "id": 1035,
      "alert_id": 478,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-08-14 11:56:56",
      "note": "The reviewer reported an incomplete issue; the appointment was resolved."
    },
    {
      "id": 1036,
      "alert_id": 477,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 3,
      "changed_at": "2025-08-19 21:36:00",
      "note": "A standard follow-up: the delivery was resolved."
    },
    {
      "id": 1037,
      "alert_id": 110,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 3,
      "changed_at": "2025-09-19 23:40:17",
      "note": "No response from the account owner, so the shipment was rejected."
    },
    {
      "id": 1038,
      "alert_id": 20,
      "step": 2,
      "from_status": "triaging",
      "to_status": "escalated",
      "analyst_id": 6,
      "changed_at": "2025-07-17 19:02:05",
      "note": "The account was completed following a repeat review."
    },
    {
      "id": 1039,
      "alert_id": 388,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 6,
      "changed_at": "2025-09-15 17:06:35",
      "note": "An automatic follow-up: the ticket was completed."
    },
    {
      "id": 1040,
      "alert_id": 145,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 3,
      "changed_at": "2025-07-25 01:08:10",
      "note": "The item was confirmed — routine case, no further action."
    },
    {
      "id": 1041,
      "alert_id": 462,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 11,
      "changed_at": "2025-08-20 01:56:34",
      "note": "The item was cancelled following an automatic review."
    },
    {
      "id": 1042,
      "alert_id": 42,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 1,
      "changed_at": "2025-08-14 03:19:07",
      "note": "No response from support, so the booking was escalated."
    },
    {
      "id": 1043,
      "alert_id": 506,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 10,
      "changed_at": "2025-07-18 00:23:59",
      "note": "The request was escalated after a routine check."
    },
    {
      "id": 1044,
      "alert_id": 234,
      "step": 3,
      "from_status": "escalated",
      "to_status": "resolved",
      "analyst_id": 15,
      "changed_at": "2025-07-30 14:58:26",
      "note": "The booking was rescheduled after a repeat check."
    },
    {
      "id": 1045,
      "alert_id": 395,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 13,
      "changed_at": "2025-07-08 18:51:55",
      "note": "No response from the courier, so the document was resolved."
    },
    {
      "id": 1046,
      "alert_id": 454,
      "step": 4,
      "from_status": "resolved",
      "to_status": "closed",
      "analyst_id": 9,
      "changed_at": "2025-07-24 17:21:55",
      "note": "A duplicate follow-up: the order was closed."
    },
    {
      "id": 1047,
      "alert_id": 188,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 16,
      "changed_at": "2025-07-18 13:18:41",
      "note": "The supplier reported a standard issue; the order was reopened."
    },
    {
      "id": 1048,
      "alert_id": 251,
      "step": 1,
      "from_status": "new",
      "to_status": "triaging",
      "analyst_id": 12,
      "changed_at": "2025-09-01 19:34:33",
      "note": "An unusual follow-up: the appointment was rejected."
    }
  ]
}