{
  "behavior_metrics": [
    {
      "id": 1,
      "catalogue": "metrics-v1",
      "name": "sign_ins_per_day",
      "unit": "count",
      "watch_direction": "high"
    },
    {
      "id": 2,
      "catalogue": "metrics-v1",
      "name": "distinct_hosts_reached",
      "unit": "count",
      "watch_direction": "high"
    },
    {
      "id": 3,
      "catalogue": "metrics-v1",
      "name": "megabytes_uploaded",
      "unit": "megabytes",
      "watch_direction": "high"
    },
    {
      "id": 4,
      "catalogue": "metrics-v1",
      "name": "failed_authentications",
      "unit": "count",
      "watch_direction": "high"
    },
    {
      "id": 5,
      "catalogue": "metrics-v1",
      "name": "after_hours_actions",
      "unit": "count",
      "watch_direction": "high"
    },
    {
      "id": 6,
      "catalogue": "metrics-v1",
      "name": "privileged_commands",
      "unit": "count",
      "watch_direction": "high"
    }
  ],
  "entities": [
    {
      "id": 1,
      "entity_ref": "ENT-75803",
      "entity_type": "service_account",
      "department": "Operations",
      "first_profiled_on": "2025-02-21"
    },
    {
      "id": 2,
      "entity_ref": "ENT-50321",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-03-23"
    },
    {
      "id": 3,
      "entity_ref": "ENT-32577",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-01-22"
    },
    {
      "id": 4,
      "entity_ref": "ENT-05848",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-01-29"
    },
    {
      "id": 5,
      "entity_ref": "ENT-47781",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-01-24"
    },
    {
      "id": 6,
      "entity_ref": "ENT-51116",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-02-15"
    },
    {
      "id": 7,
      "entity_ref": "ENT-18904",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-01-25"
    },
    {
      "id": 8,
      "entity_ref": "ENT-63497",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-02-07"
    },
    {
      "id": 9,
      "entity_ref": "ENT-63324",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-03-06"
    },
    {
      "id": 10,
      "entity_ref": "ENT-96430",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-01-02"
    },
    {
      "id": 11,
      "entity_ref": "ENT-79749",
      "entity_type": "user",
      "department": "Sales",
      "first_profiled_on": "2025-03-17"
    },
    {
      "id": 12,
      "entity_ref": "ENT-35909",
      "entity_type": "service_account",
      "department": "Sales",
      "first_profiled_on": "2025-02-11"
    },
    {
      "id": 13,
      "entity_ref": "ENT-06885",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-01-24"
    },
    {
      "id": 14,
      "entity_ref": "ENT-62644",
      "entity_type": "user",
      "department": "Operations",
      "first_profiled_on": "2025-01-15"
    },
    {
      "id": 15,
      "entity_ref": "ENT-37706",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-01-22"
    },
    {
      "id": 16,
      "entity_ref": "ENT-77048",
      "entity_type": "service_account",
      "department": "Finance",
      "first_profiled_on": "2025-02-27"
    },
    {
      "id": 17,
      "entity_ref": "ENT-78367",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-01-16"
    },
    {
      "id": 18,
      "entity_ref": "ENT-78181",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-02-15"
    },
    {
      "id": 19,
      "entity_ref": "ENT-47450",
      "entity_type": "user",
      "department": "Operations",
      "first_profiled_on": "2025-03-10"
    },
    {
      "id": 20,
      "entity_ref": "ENT-42317",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-01-16"
    },
    {
      "id": 21,
      "entity_ref": "ENT-75729",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-01-06"
    },
    {
      "id": 22,
      "entity_ref": "ENT-75801",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-03-09"
    },
    {
      "id": 23,
      "entity_ref": "ENT-93344",
      "entity_type": "user",
      "department": "Legal",
      "first_profiled_on": "2025-03-13"
    },
    {
      "id": 24,
      "entity_ref": "ENT-74646",
      "entity_type": "user",
      "department": "Legal",
      "first_profiled_on": "2025-03-16"
    },
    {
      "id": 25,
      "entity_ref": "ENT-07654",
      "entity_type": "service_account",
      "department": "Sales",
      "first_profiled_on": "2025-02-23"
    },
    {
      "id": 26,
      "entity_ref": "ENT-09739",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-03-07"
    },
    {
      "id": 27,
      "entity_ref": "ENT-12403",
      "entity_type": "user",
      "department": "Finance",
      "first_profiled_on": "2025-02-06"
    },
    {
      "id": 28,
      "entity_ref": "ENT-16456",
      "entity_type": "user",
      "department": "Operations",
      "first_profiled_on": "2025-01-06"
    },
    {
      "id": 29,
      "entity_ref": "ENT-14207",
      "entity_type": "server",
      "department": "Sales",
      "first_profiled_on": "2025-01-16"
    },
    {
      "id": 30,
      "entity_ref": "ENT-44326",
      "entity_type": "server",
      "department": "IT",
      "first_profiled_on": "2025-02-12"
    },
    {
      "id": 31,
      "entity_ref": "ENT-03918",
      "entity_type": "server",
      "department": "Operations",
      "first_profiled_on": "2025-03-11"
    },
    {
      "id": 32,
      "entity_ref": "ENT-35919",
      "entity_type": "user",
      "department": "Finance",
      "first_profiled_on": "2025-03-01"
    },
    {
      "id": 33,
      "entity_ref": "ENT-90043",
      "entity_type": "user",
      "department": "Legal",
      "first_profiled_on": "2025-01-18"
    },
    {
      "id": 34,
      "entity_ref": "ENT-12893",
      "entity_type": "service_account",
      "department": "Sales",
      "first_profiled_on": "2025-02-15"
    },
    {
      "id": 35,
      "entity_ref": "ENT-84704",
      "entity_type": "user",
      "department": "IT",
      "first_profiled_on": "2025-02-16"
    },
    {
      "id": 36,
      "entity_ref": "ENT-45394",
      "entity_type": "user",
      "department": "Engineering",
      "first_profiled_on": "2025-01-06"
    },
    {
      "id": 37,
      "entity_ref": "ENT-87233",
      "entity_type": "service_account",
      "department": "IT",
      "first_profiled_on": "2025-03-14"
    },
    {
      "id": 38,
      "entity_ref": "ENT-70454",
      "entity_type": "service_account",
      "department": "Legal",
      "first_profiled_on": "2025-01-16"
    },
    {
      "id": 39,
      "entity_ref": "ENT-56476",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-02-20"
    },
    {
      "id": 40,
      "entity_ref": "ENT-07716",
      "entity_type": "service_account",
      "department": "Engineering",
      "first_profiled_on": "2025-02-20"
    }
  ],
  "baselines": [
    {
      "id": 1,
      "entity_id": 39,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": 46.46,
      "baseline_stddev": 3.55,
      "computed_on": "2025-04-19 02:30:54"
    },
    {
      "id": 2,
      "entity_id": 16,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 33,
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "computed_on": "2025-03-28 15:28:25"
    },
    {
      "id": 3,
      "entity_id": 7,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 23,
      "baseline_mean": 54.01,
      "baseline_stddev": 8.84,
      "computed_on": "2025-03-18 03:18:37"
    },
    {
      "id": 4,
      "entity_id": 24,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 26,
      "baseline_mean": 27.18,
      "baseline_stddev": 6.73,
      "computed_on": "2025-04-14 16:42:44"
    },
    {
      "id": 5,
      "entity_id": 30,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 47,
      "baseline_mean": 22.54,
      "baseline_stddev": 5.73,
      "computed_on": "2025-03-05 02:35:56"
    },
    {
      "id": 6,
      "entity_id": 16,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 28,
      "baseline_mean": 32.76,
      "baseline_stddev": 4.46,
      "computed_on": "2025-03-28 12:35:22"
    },
    {
      "id": 7,
      "entity_id": 25,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 58,
      "baseline_mean": 28.55,
      "baseline_stddev": 7.85,
      "computed_on": "2025-04-21 09:04:55"
    },
    {
      "id": 8,
      "entity_id": 7,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 30,
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "computed_on": "2025-02-27 10:02:28"
    },
    {
      "id": 9,
      "entity_id": 6,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": 26.84,
      "baseline_stddev": 3.25,
      "computed_on": "2025-03-19 02:27:28"
    },
    {
      "id": 10,
      "entity_id": 10,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 20,
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "computed_on": "2025-01-15 22:15:05"
    },
    {
      "id": 11,
      "entity_id": 33,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 59,
      "baseline_mean": 41.52,
      "baseline_stddev": 3.02,
      "computed_on": "2025-01-28 10:24:37"
    },
    {
      "id": 12,
      "entity_id": 18,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 41,
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "computed_on": "2025-04-13 10:10:44"
    },
    {
      "id": 13,
      "entity_id": 22,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 32,
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "computed_on": "2025-04-20 09:31:12"
    },
    {
      "id": 14,
      "entity_id": 4,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 45,
      "baseline_mean": 46.78,
      "baseline_stddev": 5.64,
      "computed_on": "2025-02-18 07:53:29"
    },
    {
      "id": 15,
      "entity_id": 16,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 50,
      "baseline_mean": 42.09,
      "baseline_stddev": 7.79,
      "computed_on": "2025-03-20 13:44:19"
    },
    {
      "id": 16,
      "entity_id": 5,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 27,
      "baseline_mean": 54.84,
      "baseline_stddev": 8.29,
      "computed_on": "2025-01-29 00:16:28"
    },
    {
      "id": 17,
      "entity_id": 14,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 43,
      "baseline_mean": 48,
      "baseline_stddev": 7.45,
      "computed_on": "2025-02-17 15:22:57"
    },
    {
      "id": 18,
      "entity_id": 30,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 25,
      "baseline_mean": 39.22,
      "baseline_stddev": 4.32,
      "computed_on": "2025-03-10 06:57:34"
    },
    {
      "id": 19,
      "entity_id": 3,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 29,
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "computed_on": "2025-01-27 18:22:11"
    },
    {
      "id": 20,
      "entity_id": 19,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 42,
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "computed_on": "2025-04-26 22:14:58"
    },
    {
      "id": 21,
      "entity_id": 1,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 59,
      "baseline_mean": 44.88,
      "baseline_stddev": 5.51,
      "computed_on": "2025-03-01 04:14:11"
    },
    {
      "id": 22,
      "entity_id": 35,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 39,
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "computed_on": "2025-04-02 06:20:53"
    },
    {
      "id": 23,
      "entity_id": 36,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 53,
      "baseline_mean": 32.7,
      "baseline_stddev": 8.92,
      "computed_on": "2025-03-04 02:54:44"
    },
    {
      "id": 24,
      "entity_id": 33,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 54,
      "baseline_mean": 50.31,
      "baseline_stddev": 4.67,
      "computed_on": "2025-01-21 02:53:32"
    },
    {
      "id": 25,
      "entity_id": 39,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 29,
      "baseline_mean": 43.96,
      "baseline_stddev": 4,
      "computed_on": "2025-04-07 20:52:50"
    },
    {
      "id": 26,
      "entity_id": 18,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 21,
      "baseline_mean": 16.89,
      "baseline_stddev": 7.02,
      "computed_on": "2025-03-12 22:29:44"
    },
    {
      "id": 27,
      "entity_id": 40,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 25,
      "baseline_mean": 28.42,
      "baseline_stddev": 7.59,
      "computed_on": "2025-02-24 12:23:46"
    },
    {
      "id": 28,
      "entity_id": 34,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 31,
      "baseline_mean": 31.73,
      "baseline_stddev": 7.7,
      "computed_on": "2025-03-22 15:24:20"
    },
    {
      "id": 29,
      "entity_id": 28,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 23,
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "computed_on": "2025-01-31 19:55:18"
    },
    {
      "id": 30,
      "entity_id": 18,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 18,
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "computed_on": "2025-02-27 22:43:12"
    },
    {
      "id": 31,
      "entity_id": 12,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 36,
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "computed_on": "2025-03-22 15:50:01"
    },
    {
      "id": 32,
      "entity_id": 7,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 47,
      "baseline_mean": 40.12,
      "baseline_stddev": 5.36,
      "computed_on": "2025-02-17 04:42:30"
    },
    {
      "id": 33,
      "entity_id": 30,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 17,
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "computed_on": "2025-02-19 12:50:10"
    },
    {
      "id": 34,
      "entity_id": 35,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 17,
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "computed_on": "2025-03-17 06:36:50"
    },
    {
      "id": 35,
      "entity_id": 33,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 48,
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "computed_on": "2025-02-13 19:53:40"
    },
    {
      "id": 36,
      "entity_id": 20,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 49,
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "computed_on": "2025-03-01 19:22:41"
    },
    {
      "id": 37,
      "entity_id": 19,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 30,
      "baseline_mean": 41.39,
      "baseline_stddev": 5.66,
      "computed_on": "2025-03-20 07:47:16"
    },
    {
      "id": 38,
      "entity_id": 29,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 56,
      "baseline_mean": 42.41,
      "baseline_stddev": 3.37,
      "computed_on": "2025-02-28 08:52:18"
    },
    {
      "id": 39,
      "entity_id": 5,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 26,
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "computed_on": "2025-03-04 15:16:39"
    },
    {
      "id": 40,
      "entity_id": 18,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 21,
      "baseline_mean": 45.77,
      "baseline_stddev": 8.3,
      "computed_on": "2025-02-18 19:41:19"
    },
    {
      "id": 41,
      "entity_id": 15,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 56,
      "baseline_mean": 32.62,
      "baseline_stddev": 7.61,
      "computed_on": "2025-02-12 22:53:12"
    },
    {
      "id": 42,
      "entity_id": 34,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 20,
      "baseline_mean": 46.25,
      "baseline_stddev": 3.74,
      "computed_on": "2025-03-23 22:48:29"
    },
    {
      "id": 43,
      "entity_id": 6,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 31,
      "baseline_mean": 39.67,
      "baseline_stddev": 8.45,
      "computed_on": "2025-03-16 06:24:59"
    },
    {
      "id": 44,
      "entity_id": 34,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 51,
      "baseline_mean": 59.76,
      "baseline_stddev": 4.32,
      "computed_on": "2025-04-13 18:22:06"
    },
    {
      "id": 45,
      "entity_id": 32,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 34,
      "baseline_mean": 32.31,
      "baseline_stddev": 3.18,
      "computed_on": "2025-03-14 19:59:32"
    },
    {
      "id": 46,
      "entity_id": 8,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 56,
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "computed_on": "2025-03-25 05:03:09"
    },
    {
      "id": 47,
      "entity_id": 23,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 35,
      "baseline_mean": 37.08,
      "baseline_stddev": 5.21,
      "computed_on": "2025-04-26 11:16:44"
    },
    {
      "id": 48,
      "entity_id": 34,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 59,
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "computed_on": "2025-03-28 01:42:38"
    },
    {
      "id": 49,
      "entity_id": 19,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 56,
      "baseline_mean": 37.4,
      "baseline_stddev": 4.51,
      "computed_on": "2025-04-14 12:48:02"
    },
    {
      "id": 50,
      "entity_id": 1,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 34,
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "computed_on": "2025-04-02 18:37:40"
    },
    {
      "id": 51,
      "entity_id": 11,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 51,
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "computed_on": "2025-04-01 19:13:23"
    },
    {
      "id": 52,
      "entity_id": 29,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 42,
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "computed_on": "2025-01-20 17:05:37"
    },
    {
      "id": 53,
      "entity_id": 19,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 45,
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "computed_on": "2025-03-11 01:33:47"
    },
    {
      "id": 54,
      "entity_id": 23,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 15,
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "computed_on": "2025-04-19 08:41:46"
    },
    {
      "id": 55,
      "entity_id": 32,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 45,
      "baseline_mean": 37.02,
      "baseline_stddev": 4.74,
      "computed_on": "2025-04-10 23:10:24"
    },
    {
      "id": 56,
      "entity_id": 6,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 42,
      "baseline_mean": 40.15,
      "baseline_stddev": 7.54,
      "computed_on": "2025-02-27 01:57:25"
    },
    {
      "id": 57,
      "entity_id": 8,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 26,
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "computed_on": "2025-02-09 15:21:25"
    },
    {
      "id": 58,
      "entity_id": 25,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 60,
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "computed_on": "2025-04-18 07:20:25"
    },
    {
      "id": 59,
      "entity_id": 23,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 18,
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "computed_on": "2025-03-22 01:21:23"
    },
    {
      "id": 60,
      "entity_id": 32,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 51,
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "computed_on": "2025-04-27 04:42:08"
    },
    {
      "id": 61,
      "entity_id": 2,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 43,
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "computed_on": "2025-05-06 21:27:21"
    },
    {
      "id": 62,
      "entity_id": 10,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 39,
      "baseline_mean": 34.58,
      "baseline_stddev": 4.26,
      "computed_on": "2025-02-19 23:52:26"
    },
    {
      "id": 63,
      "entity_id": 20,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 39,
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "computed_on": "2025-01-24 12:34:07"
    },
    {
      "id": 64,
      "entity_id": 27,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 52,
      "baseline_mean": 35.69,
      "baseline_stddev": 7.14,
      "computed_on": "2025-04-01 16:15:15"
    },
    {
      "id": 65,
      "entity_id": 24,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 54,
      "baseline_mean": 47.99,
      "baseline_stddev": 3.71,
      "computed_on": "2025-04-15 19:46:22"
    },
    {
      "id": 66,
      "entity_id": 14,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 53,
      "baseline_mean": 33.35,
      "baseline_stddev": 3.5,
      "computed_on": "2025-02-24 18:47:15"
    },
    {
      "id": 67,
      "entity_id": 22,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 39,
      "baseline_mean": 48.61,
      "baseline_stddev": 4.64,
      "computed_on": "2025-03-31 07:17:32"
    },
    {
      "id": 68,
      "entity_id": 33,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 48,
      "baseline_mean": 33.67,
      "baseline_stddev": 8.84,
      "computed_on": "2025-02-20 21:46:03"
    },
    {
      "id": 69,
      "entity_id": 19,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 36,
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "computed_on": "2025-05-07 01:10:08"
    },
    {
      "id": 70,
      "entity_id": 29,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 57,
      "baseline_mean": 42.29,
      "baseline_stddev": 6.47,
      "computed_on": "2025-01-18 22:01:37"
    },
    {
      "id": 71,
      "entity_id": 1,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 17,
      "baseline_mean": 45.63,
      "baseline_stddev": 8.74,
      "computed_on": "2025-03-24 06:06:20"
    },
    {
      "id": 72,
      "entity_id": 13,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 43,
      "baseline_mean": 42.65,
      "baseline_stddev": 5.51,
      "computed_on": "2025-03-06 12:57:57"
    },
    {
      "id": 73,
      "entity_id": 21,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 55,
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "computed_on": "2025-01-07 15:35:52"
    },
    {
      "id": 74,
      "entity_id": 12,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 32,
      "baseline_mean": 49.44,
      "baseline_stddev": 3.24,
      "computed_on": "2025-03-31 20:09:11"
    },
    {
      "id": 75,
      "entity_id": 9,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 40,
      "baseline_mean": 22.05,
      "baseline_stddev": 6.18,
      "computed_on": "2025-04-19 13:05:48"
    },
    {
      "id": 76,
      "entity_id": 38,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 53,
      "baseline_mean": 48.32,
      "baseline_stddev": 5.99,
      "computed_on": "2025-03-06 20:11:08"
    },
    {
      "id": 77,
      "entity_id": 22,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 40,
      "baseline_mean": 34.6,
      "baseline_stddev": 4.88,
      "computed_on": "2025-05-04 19:47:12"
    },
    {
      "id": 78,
      "entity_id": 34,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 58,
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "computed_on": "2025-04-06 16:27:45"
    },
    {
      "id": 79,
      "entity_id": 26,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 58,
      "baseline_mean": 52.5,
      "baseline_stddev": 5.32,
      "computed_on": "2025-04-18 04:51:55"
    },
    {
      "id": 80,
      "entity_id": 29,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 15,
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "computed_on": "2025-01-21 23:35:53"
    },
    {
      "id": 81,
      "entity_id": 21,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 41,
      "baseline_mean": 29.58,
      "baseline_stddev": 7.02,
      "computed_on": "2025-02-09 15:31:13"
    },
    {
      "id": 82,
      "entity_id": 4,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 47,
      "baseline_mean": 35.14,
      "baseline_stddev": 4.45,
      "computed_on": "2025-03-22 16:52:40"
    },
    {
      "id": 83,
      "entity_id": 11,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 36,
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "computed_on": "2025-03-22 00:18:25"
    },
    {
      "id": 84,
      "entity_id": 26,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 29,
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "computed_on": "2025-05-04 00:20:26"
    },
    {
      "id": 85,
      "entity_id": 11,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 29,
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "computed_on": "2025-05-02 18:17:37"
    },
    {
      "id": 86,
      "entity_id": 21,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 39,
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "computed_on": "2025-01-27 14:13:24"
    },
    {
      "id": 87,
      "entity_id": 27,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 36,
      "baseline_mean": 37.79,
      "baseline_stddev": 7.87,
      "computed_on": "2025-02-06 03:52:06"
    },
    {
      "id": 88,
      "entity_id": 2,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 33,
      "baseline_mean": 21.65,
      "baseline_stddev": 5.31,
      "computed_on": "2025-05-09 03:11:24"
    },
    {
      "id": 89,
      "entity_id": 17,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 26,
      "baseline_mean": 33.27,
      "baseline_stddev": 3,
      "computed_on": "2025-03-09 06:13:39"
    },
    {
      "id": 90,
      "entity_id": 3,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 55,
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "computed_on": "2025-01-29 01:26:00"
    },
    {
      "id": 91,
      "entity_id": 17,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "computed_on": "2025-03-06 04:56:55"
    },
    {
      "id": 92,
      "entity_id": 37,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 18,
      "baseline_mean": 42.06,
      "baseline_stddev": 5.96,
      "computed_on": "2025-04-20 20:06:11"
    },
    {
      "id": 93,
      "entity_id": 27,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 45,
      "baseline_mean": 35.09,
      "baseline_stddev": 4.82,
      "computed_on": "2025-02-11 11:56:10"
    },
    {
      "id": 94,
      "entity_id": 2,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 39,
      "baseline_mean": 35.9,
      "baseline_stddev": 6.88,
      "computed_on": "2025-04-28 08:15:27"
    },
    {
      "id": 95,
      "entity_id": 14,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 18,
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "computed_on": "2025-02-15 04:11:32"
    },
    {
      "id": 96,
      "entity_id": 37,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 44,
      "baseline_mean": 55.62,
      "baseline_stddev": 4.46,
      "computed_on": "2025-04-18 16:01:14"
    },
    {
      "id": 97,
      "entity_id": 9,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 41,
      "baseline_mean": 31.22,
      "baseline_stddev": 7.04,
      "computed_on": "2025-04-16 09:28:21"
    },
    {
      "id": 98,
      "entity_id": 18,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 50,
      "baseline_mean": 39.59,
      "baseline_stddev": 6.53,
      "computed_on": "2025-03-21 16:52:47"
    },
    {
      "id": 99,
      "entity_id": 8,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 26,
      "baseline_mean": 27.83,
      "baseline_stddev": 3.59,
      "computed_on": "2025-02-24 07:59:55"
    },
    {
      "id": 100,
      "entity_id": 33,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 55,
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "computed_on": "2025-02-25 09:04:36"
    },
    {
      "id": 101,
      "entity_id": 1,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 39,
      "baseline_mean": 52.7,
      "baseline_stddev": 8.21,
      "computed_on": "2025-03-03 14:29:41"
    },
    {
      "id": 102,
      "entity_id": 20,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 40,
      "baseline_mean": 25.02,
      "baseline_stddev": 3.88,
      "computed_on": "2025-03-14 03:43:14"
    },
    {
      "id": 103,
      "entity_id": 13,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 29,
      "baseline_mean": 34.81,
      "baseline_stddev": 6.22,
      "computed_on": "2025-02-01 09:29:18"
    },
    {
      "id": 104,
      "entity_id": 2,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 32,
      "baseline_mean": 27.59,
      "baseline_stddev": 8.27,
      "computed_on": "2025-04-11 12:24:27"
    },
    {
      "id": 105,
      "entity_id": 8,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 22,
      "baseline_mean": 36.37,
      "baseline_stddev": 7.35,
      "computed_on": "2025-03-22 12:06:42"
    },
    {
      "id": 106,
      "entity_id": 31,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 19,
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "computed_on": "2025-04-30 02:03:07"
    },
    {
      "id": 107,
      "entity_id": 30,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 54,
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "computed_on": "2025-02-22 23:53:14"
    },
    {
      "id": 108,
      "entity_id": 23,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 43,
      "baseline_mean": 52.02,
      "baseline_stddev": 4.88,
      "computed_on": "2025-04-23 10:16:40"
    },
    {
      "id": 109,
      "entity_id": 36,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 54,
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "computed_on": "2025-03-01 07:18:22"
    },
    {
      "id": 110,
      "entity_id": 40,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 54,
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "computed_on": "2025-03-08 00:09:45"
    },
    {
      "id": 111,
      "entity_id": 22,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 30,
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "computed_on": "2025-03-18 00:23:35"
    },
    {
      "id": 112,
      "entity_id": 17,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 35,
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "computed_on": "2025-03-09 02:28:07"
    },
    {
      "id": 113,
      "entity_id": 40,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 57,
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "computed_on": "2025-03-10 02:12:31"
    },
    {
      "id": 114,
      "entity_id": 28,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 18,
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "computed_on": "2025-01-17 03:10:06"
    },
    {
      "id": 115,
      "entity_id": 7,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 50,
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "computed_on": "2025-02-02 03:46:43"
    },
    {
      "id": 116,
      "entity_id": 24,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 17,
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "computed_on": "2025-04-20 14:21:13"
    },
    {
      "id": 117,
      "entity_id": 22,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 32,
      "baseline_mean": 31.93,
      "baseline_stddev": 6.91,
      "computed_on": "2025-05-04 20:06:20"
    },
    {
      "id": 118,
      "entity_id": 20,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 57,
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "computed_on": "2025-02-05 01:38:14"
    },
    {
      "id": 119,
      "entity_id": 32,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 33,
      "baseline_mean": 40.07,
      "baseline_stddev": 8.34,
      "computed_on": "2025-03-01 19:10:50"
    },
    {
      "id": 120,
      "entity_id": 37,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 27,
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "computed_on": "2025-04-25 05:49:13"
    },
    {
      "id": 121,
      "entity_id": 27,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 17,
      "baseline_mean": 47.44,
      "baseline_stddev": 3.9,
      "computed_on": "2025-03-22 20:23:11"
    },
    {
      "id": 122,
      "entity_id": 7,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 30,
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "computed_on": "2025-03-05 04:11:27"
    },
    {
      "id": 123,
      "entity_id": 24,
      "metric_id": 2,
      "metric_name": "distinct_hosts_reached",
      "training_days": 31,
      "baseline_mean": 32.39,
      "baseline_stddev": 6.06,
      "computed_on": "2025-03-19 19:52:54"
    },
    {
      "id": 124,
      "entity_id": 37,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 37,
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "computed_on": "2025-03-16 12:03:56"
    },
    {
      "id": 125,
      "entity_id": 15,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 38,
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "computed_on": "2025-01-31 03:26:26"
    },
    {
      "id": 126,
      "entity_id": 35,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 59,
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "computed_on": "2025-02-24 11:28:09"
    },
    {
      "id": 127,
      "entity_id": 16,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 17,
      "baseline_mean": 39.14,
      "baseline_stddev": 5.9,
      "computed_on": "2025-03-21 05:33:11"
    },
    {
      "id": 128,
      "entity_id": 5,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 47,
      "baseline_mean": 36.7,
      "baseline_stddev": 8.88,
      "computed_on": "2025-03-02 06:43:47"
    },
    {
      "id": 129,
      "entity_id": 31,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 27,
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "computed_on": "2025-04-28 00:45:16"
    },
    {
      "id": 130,
      "entity_id": 12,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 29,
      "baseline_mean": 46.54,
      "baseline_stddev": 5.21,
      "computed_on": "2025-03-07 00:29:30"
    },
    {
      "id": 131,
      "entity_id": 4,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 58,
      "baseline_mean": 41.94,
      "baseline_stddev": 3.32,
      "computed_on": "2025-03-09 05:21:35"
    },
    {
      "id": 132,
      "entity_id": 27,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 24,
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "computed_on": "2025-03-01 18:00:51"
    },
    {
      "id": 133,
      "entity_id": 39,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 44,
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "computed_on": "2025-02-26 19:15:34"
    },
    {
      "id": 134,
      "entity_id": 38,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 48,
      "baseline_mean": 47.29,
      "baseline_stddev": 7.94,
      "computed_on": "2025-01-29 03:33:52"
    },
    {
      "id": 135,
      "entity_id": 9,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 28,
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "computed_on": "2025-04-26 20:54:04"
    },
    {
      "id": 136,
      "entity_id": 6,
      "metric_id": 3,
      "metric_name": "megabytes_uploaded",
      "training_days": 49,
      "baseline_mean": 33.91,
      "baseline_stddev": 6.69,
      "computed_on": "2025-03-08 12:06:13"
    },
    {
      "id": 137,
      "entity_id": 5,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 46,
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "computed_on": "2025-01-27 18:44:32"
    },
    {
      "id": 138,
      "entity_id": 25,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 19,
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "computed_on": "2025-04-14 23:01:37"
    },
    {
      "id": 139,
      "entity_id": 17,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 38,
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "computed_on": "2025-01-19 01:05:20"
    },
    {
      "id": 140,
      "entity_id": 20,
      "metric_id": 1,
      "metric_name": "sign_ins_per_day",
      "training_days": 41,
      "baseline_mean": 52.16,
      "baseline_stddev": 5.98,
      "computed_on": "2025-03-11 22:34:54"
    },
    {
      "id": 141,
      "entity_id": 23,
      "metric_id": 6,
      "metric_name": "privileged_commands",
      "training_days": 33,
      "baseline_mean": 53.45,
      "baseline_stddev": 4.83,
      "computed_on": "2025-05-04 13:54:39"
    },
    {
      "id": 142,
      "entity_id": 6,
      "metric_id": 4,
      "metric_name": "failed_authentications",
      "training_days": 28,
      "baseline_mean": 37.68,
      "baseline_stddev": 6.37,
      "computed_on": "2025-03-24 19:14:42"
    },
    {
      "id": 143,
      "entity_id": 11,
      "metric_id": 5,
      "metric_name": "after_hours_actions",
      "training_days": 28,
      "baseline_mean": 42.06,
      "baseline_stddev": 4.27,
      "computed_on": "2025-04-28 19:22:41"
    }
  ],
  "daily_observations": [
    {
      "id": 1,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": 5.81,
      "metric_value": 37.05,
      "observed_on": "2025-05-01"
    },
    {
      "id": 2,
      "baseline_id": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 44.88,
      "baseline_stddev": 5.51,
      "deviation": -0.17,
      "metric_value": 44.71,
      "observed_on": "2025-05-01"
    },
    {
      "id": 3,
      "baseline_id": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "deviation": 2.61,
      "metric_value": 48.22,
      "observed_on": "2025-05-01"
    },
    {
      "id": 4,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": 4.47,
      "metric_value": 45.5,
      "observed_on": "2025-05-01"
    },
    {
      "id": 5,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": 7.67,
      "metric_value": 31.92,
      "observed_on": "2025-05-01"
    },
    {
      "id": 6,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": -1.01,
      "metric_value": 29.45,
      "observed_on": "2025-05-01"
    },
    {
      "id": 7,
      "baseline_id": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.61,
      "baseline_stddev": 4.64,
      "deviation": -19.78,
      "metric_value": 28.83,
      "observed_on": "2025-05-01"
    },
    {
      "id": 8,
      "baseline_id": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "deviation": 3.74,
      "metric_value": 51.9,
      "observed_on": "2025-05-01"
    },
    {
      "id": 9,
      "baseline_id": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "deviation": 12.24,
      "metric_value": 37.68,
      "observed_on": "2025-05-01"
    },
    {
      "id": 10,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": -11.62,
      "metric_value": 34.9,
      "observed_on": "2025-05-01"
    },
    {
      "id": 11,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": -0.29,
      "metric_value": 34.34,
      "observed_on": "2025-05-01"
    },
    {
      "id": 12,
      "baseline_id": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.63,
      "baseline_stddev": 8.74,
      "deviation": 4.31,
      "metric_value": 49.94,
      "observed_on": "2025-05-01"
    },
    {
      "id": 13,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": -14.84,
      "metric_value": 30.28,
      "observed_on": "2025-05-01"
    },
    {
      "id": 14,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": -7.9,
      "metric_value": 45.94,
      "observed_on": "2025-05-01"
    },
    {
      "id": 15,
      "baseline_id": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": 31.73,
      "baseline_stddev": 7.7,
      "deviation": 2.62,
      "metric_value": 34.35,
      "observed_on": "2025-05-01"
    },
    {
      "id": 16,
      "baseline_id": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 33.91,
      "baseline_stddev": 6.69,
      "deviation": 15.4,
      "metric_value": 49.31,
      "observed_on": "2025-05-01"
    },
    {
      "id": 17,
      "baseline_id": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.07,
      "baseline_stddev": 8.34,
      "deviation": 8.03,
      "metric_value": 48.1,
      "observed_on": "2025-05-01"
    },
    {
      "id": 18,
      "baseline_id": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": 22.05,
      "baseline_stddev": 6.18,
      "deviation": -1.15,
      "metric_value": 20.9,
      "observed_on": "2025-05-01"
    },
    {
      "id": 19,
      "baseline_id": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "deviation": -0.36,
      "metric_value": 51.64,
      "observed_on": "2025-05-01"
    },
    {
      "id": 20,
      "baseline_id": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.65,
      "baseline_stddev": 5.51,
      "deviation": 14.54,
      "metric_value": 57.19,
      "observed_on": "2025-05-01"
    },
    {
      "id": 21,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": 2.82,
      "metric_value": 36.64,
      "observed_on": "2025-05-01"
    },
    {
      "id": 22,
      "baseline_id": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.37,
      "baseline_stddev": 7.35,
      "deviation": 0.02,
      "metric_value": 36.39,
      "observed_on": "2025-05-01"
    },
    {
      "id": 23,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": -4.11,
      "metric_value": 41.01,
      "observed_on": "2025-05-02"
    },
    {
      "id": 24,
      "baseline_id": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "deviation": 7.16,
      "metric_value": 32.6,
      "observed_on": "2025-05-02"
    },
    {
      "id": 25,
      "baseline_id": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.02,
      "baseline_stddev": 4.74,
      "deviation": -1.78,
      "metric_value": 35.24,
      "observed_on": "2025-05-01"
    },
    {
      "id": 26,
      "baseline_id": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.67,
      "baseline_stddev": 8.45,
      "deviation": -4.79,
      "metric_value": 34.88,
      "observed_on": "2025-05-01"
    },
    {
      "id": 27,
      "baseline_id": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "deviation": 5.37,
      "metric_value": 44.8,
      "observed_on": "2025-05-01"
    },
    {
      "id": 28,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": 0.9,
      "metric_value": 37.13,
      "observed_on": "2025-05-01"
    },
    {
      "id": 29,
      "baseline_id": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": 27.59,
      "baseline_stddev": 8.27,
      "deviation": -2.8,
      "metric_value": 24.79,
      "observed_on": "2025-05-01"
    },
    {
      "id": 30,
      "baseline_id": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": 31.73,
      "baseline_stddev": 7.7,
      "deviation": 9.6,
      "metric_value": 41.33,
      "observed_on": "2025-05-02"
    },
    {
      "id": 31,
      "baseline_id": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "deviation": -8,
      "metric_value": 31.34,
      "observed_on": "2025-05-01"
    },
    {
      "id": 32,
      "baseline_id": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "deviation": -6.22,
      "metric_value": 13.58,
      "observed_on": "2025-05-01"
    },
    {
      "id": 33,
      "baseline_id": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.54,
      "baseline_stddev": 5.21,
      "deviation": 4.73,
      "metric_value": 51.27,
      "observed_on": "2025-05-01"
    },
    {
      "id": 34,
      "baseline_id": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "deviation": 11.26,
      "metric_value": 59.09,
      "observed_on": "2025-05-01"
    },
    {
      "id": 35,
      "baseline_id": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.58,
      "baseline_stddev": 4.26,
      "deviation": -0.16,
      "metric_value": 34.42,
      "observed_on": "2025-05-01"
    },
    {
      "id": 36,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": -12.15,
      "metric_value": 25.74,
      "observed_on": "2025-05-01"
    },
    {
      "id": 37,
      "baseline_id": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": 31.73,
      "baseline_stddev": 7.7,
      "deviation": 3.13,
      "metric_value": 34.86,
      "observed_on": "2025-05-03"
    },
    {
      "id": 38,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": 3.63,
      "metric_value": 43.86,
      "observed_on": "2025-05-01"
    },
    {
      "id": 39,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": -11.38,
      "metric_value": 18.94,
      "observed_on": "2025-05-01"
    },
    {
      "id": 40,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": -12.31,
      "metric_value": 41.53,
      "observed_on": "2025-05-02"
    },
    {
      "id": 41,
      "baseline_id": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "deviation": 2.29,
      "metric_value": 54.89,
      "observed_on": "2025-05-01"
    },
    {
      "id": 42,
      "baseline_id": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "deviation": -5.36,
      "metric_value": 27.07,
      "observed_on": "2025-05-01"
    },
    {
      "id": 43,
      "baseline_id": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": 37.08,
      "baseline_stddev": 5.21,
      "deviation": 2.28,
      "metric_value": 39.36,
      "observed_on": "2025-05-01"
    },
    {
      "id": 44,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": 0.6,
      "metric_value": 28.35,
      "observed_on": "2025-05-01"
    },
    {
      "id": 45,
      "baseline_id": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "deviation": -3.17,
      "metric_value": 28.37,
      "observed_on": "2025-05-01"
    },
    {
      "id": 46,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": -4.89,
      "metric_value": 42.25,
      "observed_on": "2025-05-01"
    },
    {
      "id": 47,
      "baseline_id": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": 33.67,
      "baseline_stddev": 8.84,
      "deviation": -6.78,
      "metric_value": 26.89,
      "observed_on": "2025-05-01"
    },
    {
      "id": 48,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": 6.56,
      "metric_value": 40.73,
      "observed_on": "2025-05-01"
    },
    {
      "id": 49,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": 2.84,
      "metric_value": 56.68,
      "observed_on": "2025-05-03"
    },
    {
      "id": 50,
      "baseline_id": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": 28.55,
      "baseline_stddev": 7.85,
      "deviation": 3.85,
      "metric_value": 32.4,
      "observed_on": "2025-05-01"
    },
    {
      "id": 51,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": 6.31,
      "metric_value": 53.45,
      "observed_on": "2025-05-02"
    },
    {
      "id": 52,
      "baseline_id": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.68,
      "baseline_stddev": 6.37,
      "deviation": -4.65,
      "metric_value": 33.03,
      "observed_on": "2025-05-01"
    },
    {
      "id": 53,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": -1.42,
      "metric_value": 34.81,
      "observed_on": "2025-05-02"
    },
    {
      "id": 54,
      "baseline_id": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.29,
      "baseline_stddev": 7.94,
      "deviation": -5.13,
      "metric_value": 42.16,
      "observed_on": "2025-05-01"
    },
    {
      "id": 55,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": 1.94,
      "metric_value": 39.95,
      "observed_on": "2025-05-01"
    },
    {
      "id": 56,
      "baseline_id": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": 22.05,
      "baseline_stddev": 6.18,
      "deviation": -9.93,
      "metric_value": 12.12,
      "observed_on": "2025-05-02"
    },
    {
      "id": 57,
      "baseline_id": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "deviation": 5.01,
      "metric_value": 44.35,
      "observed_on": "2025-05-02"
    },
    {
      "id": 58,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": -13.15,
      "metric_value": 35.45,
      "observed_on": "2025-05-01"
    },
    {
      "id": 59,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": -9.32,
      "metric_value": 18.43,
      "observed_on": "2025-05-02"
    },
    {
      "id": 60,
      "baseline_id": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 32.39,
      "baseline_stddev": 6.06,
      "deviation": -1.01,
      "metric_value": 31.38,
      "observed_on": "2025-05-01"
    },
    {
      "id": 61,
      "baseline_id": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": 33.67,
      "baseline_stddev": 8.84,
      "deviation": 0.34,
      "metric_value": 34.01,
      "observed_on": "2025-05-02"
    },
    {
      "id": 62,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": -3.42,
      "metric_value": 60.14,
      "observed_on": "2025-05-01"
    },
    {
      "id": 63,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": 3.45,
      "metric_value": 46.32,
      "observed_on": "2025-05-01"
    },
    {
      "id": 64,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": -6.12,
      "metric_value": 39,
      "observed_on": "2025-05-03"
    },
    {
      "id": 65,
      "baseline_id": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "deviation": -1.06,
      "metric_value": 38.28,
      "observed_on": "2025-05-03"
    },
    {
      "id": 66,
      "baseline_id": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.14,
      "baseline_stddev": 4.45,
      "deviation": 17.65,
      "metric_value": 52.79,
      "observed_on": "2025-05-01"
    },
    {
      "id": 67,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": -1.92,
      "metric_value": 45.97,
      "observed_on": "2025-05-01"
    },
    {
      "id": 68,
      "baseline_id": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 59.76,
      "baseline_stddev": 4.32,
      "deviation": -7.26,
      "metric_value": 52.5,
      "observed_on": "2025-05-01"
    },
    {
      "id": 69,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": 4.83,
      "metric_value": 47.7,
      "observed_on": "2025-05-02"
    },
    {
      "id": 70,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": -1.26,
      "metric_value": 37.03,
      "observed_on": "2025-05-01"
    },
    {
      "id": 71,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": -8.24,
      "metric_value": 27.5,
      "observed_on": "2025-05-01"
    },
    {
      "id": 72,
      "baseline_id": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": 45.77,
      "baseline_stddev": 8.3,
      "deviation": 3.78,
      "metric_value": 49.55,
      "observed_on": "2025-05-01"
    },
    {
      "id": 73,
      "baseline_id": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": 50.31,
      "baseline_stddev": 4.67,
      "deviation": -8.02,
      "metric_value": 42.29,
      "observed_on": "2025-05-01"
    },
    {
      "id": 74,
      "baseline_id": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.44,
      "baseline_stddev": 3.9,
      "deviation": -15.9,
      "metric_value": 31.54,
      "observed_on": "2025-05-01"
    },
    {
      "id": 75,
      "baseline_id": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": 31.73,
      "baseline_stddev": 7.7,
      "deviation": 3.79,
      "metric_value": 35.52,
      "observed_on": "2025-05-04"
    },
    {
      "id": 76,
      "baseline_id": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": 31.73,
      "baseline_stddev": 7.7,
      "deviation": -7.62,
      "metric_value": 24.11,
      "observed_on": "2025-05-05"
    },
    {
      "id": 77,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": -5.09,
      "metric_value": 32.87,
      "observed_on": "2025-05-01"
    },
    {
      "id": 78,
      "baseline_id": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 42.29,
      "baseline_stddev": 6.47,
      "deviation": 1.63,
      "metric_value": 43.92,
      "observed_on": "2025-05-01"
    },
    {
      "id": 79,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": -0.92,
      "metric_value": 31.97,
      "observed_on": "2025-05-01"
    },
    {
      "id": 80,
      "baseline_id": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "deviation": -0.81,
      "metric_value": 31.34,
      "observed_on": "2025-05-01"
    },
    {
      "id": 81,
      "baseline_id": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "deviation": -5.41,
      "metric_value": 42.69,
      "observed_on": "2025-05-01"
    },
    {
      "id": 82,
      "baseline_id": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": 21.65,
      "baseline_stddev": 5.31,
      "deviation": -6.89,
      "metric_value": 14.76,
      "observed_on": "2025-05-01"
    },
    {
      "id": 83,
      "baseline_id": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "deviation": -5.29,
      "metric_value": 40.32,
      "observed_on": "2025-05-02"
    },
    {
      "id": 84,
      "baseline_id": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.15,
      "baseline_stddev": 7.54,
      "deviation": 1.3,
      "metric_value": 41.45,
      "observed_on": "2025-05-01"
    },
    {
      "id": 85,
      "baseline_id": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "deviation": -18.58,
      "metric_value": 15.97,
      "observed_on": "2025-05-01"
    },
    {
      "id": 86,
      "baseline_id": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "deviation": 5.16,
      "metric_value": 36.7,
      "observed_on": "2025-05-02"
    },
    {
      "id": 87,
      "baseline_id": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.99,
      "baseline_stddev": 3.71,
      "deviation": -13.96,
      "metric_value": 34.03,
      "observed_on": "2025-05-01"
    },
    {
      "id": 88,
      "baseline_id": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "deviation": -7.5,
      "metric_value": 40.6,
      "observed_on": "2025-05-02"
    },
    {
      "id": 89,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": 3.25,
      "metric_value": 49.77,
      "observed_on": "2025-05-02"
    },
    {
      "id": 90,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": -4.67,
      "metric_value": 57.23,
      "observed_on": "2025-05-01"
    },
    {
      "id": 91,
      "baseline_id": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 37.4,
      "baseline_stddev": 4.51,
      "deviation": -10.19,
      "metric_value": 27.21,
      "observed_on": "2025-05-01"
    },
    {
      "id": 92,
      "baseline_id": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.15,
      "baseline_stddev": 7.54,
      "deviation": -1.53,
      "metric_value": 38.62,
      "observed_on": "2025-05-02"
    },
    {
      "id": 93,
      "baseline_id": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "deviation": 13.02,
      "metric_value": 45.17,
      "observed_on": "2025-05-02"
    },
    {
      "id": 94,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": 7.63,
      "metric_value": 38.09,
      "observed_on": "2025-05-02"
    },
    {
      "id": 95,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": 2.05,
      "metric_value": 34.56,
      "observed_on": "2025-05-01"
    },
    {
      "id": 96,
      "baseline_id": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.65,
      "baseline_stddev": 5.51,
      "deviation": -8.28,
      "metric_value": 34.37,
      "observed_on": "2025-05-02"
    },
    {
      "id": 97,
      "baseline_id": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.67,
      "baseline_stddev": 8.45,
      "deviation": -6.06,
      "metric_value": 33.61,
      "observed_on": "2025-05-02"
    },
    {
      "id": 98,
      "baseline_id": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.22,
      "baseline_stddev": 7.04,
      "deviation": 1.02,
      "metric_value": 32.24,
      "observed_on": "2025-05-01"
    },
    {
      "id": 99,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": -0.22,
      "metric_value": 30.24,
      "observed_on": "2025-05-03"
    },
    {
      "id": 100,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": 5.61,
      "metric_value": 43.5,
      "observed_on": "2025-05-02"
    },
    {
      "id": 101,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": -3.22,
      "metric_value": 31.93,
      "observed_on": "2025-05-01"
    },
    {
      "id": 102,
      "baseline_id": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": 28.55,
      "baseline_stddev": 7.85,
      "deviation": -13.32,
      "metric_value": 15.23,
      "observed_on": "2025-05-02"
    },
    {
      "id": 103,
      "baseline_id": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "deviation": 4.94,
      "metric_value": 49.25,
      "observed_on": "2025-05-01"
    },
    {
      "id": 104,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": -4.11,
      "metric_value": 57.79,
      "observed_on": "2025-05-02"
    },
    {
      "id": 105,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": -10.91,
      "metric_value": 35.61,
      "observed_on": "2025-05-03"
    },
    {
      "id": 106,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": -7.37,
      "metric_value": 21.56,
      "observed_on": "2025-05-01"
    },
    {
      "id": 107,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": 11.79,
      "metric_value": 45.52,
      "observed_on": "2025-05-01"
    },
    {
      "id": 108,
      "baseline_id": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": 46.78,
      "baseline_stddev": 5.64,
      "deviation": 4.07,
      "metric_value": 50.85,
      "observed_on": "2025-05-01"
    },
    {
      "id": 109,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": -13.18,
      "metric_value": 17.14,
      "observed_on": "2025-05-02"
    },
    {
      "id": 110,
      "baseline_id": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.58,
      "baseline_stddev": 4.26,
      "deviation": 9.46,
      "metric_value": 44.04,
      "observed_on": "2025-05-02"
    },
    {
      "id": 111,
      "baseline_id": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": 16.89,
      "baseline_stddev": 7.02,
      "deviation": -3.31,
      "metric_value": 13.58,
      "observed_on": "2025-05-01"
    },
    {
      "id": 112,
      "baseline_id": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.01,
      "baseline_stddev": 8.84,
      "deviation": 3.86,
      "metric_value": 57.87,
      "observed_on": "2025-05-01"
    },
    {
      "id": 113,
      "baseline_id": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": 27.59,
      "baseline_stddev": 8.27,
      "deviation": -8.54,
      "metric_value": 19.05,
      "observed_on": "2025-05-02"
    },
    {
      "id": 114,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": -1.26,
      "metric_value": 22.99,
      "observed_on": "2025-05-02"
    },
    {
      "id": 115,
      "baseline_id": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.09,
      "baseline_stddev": 4.82,
      "deviation": 2.6,
      "metric_value": 37.69,
      "observed_on": "2025-05-01"
    },
    {
      "id": 116,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": -0.72,
      "metric_value": 29.6,
      "observed_on": "2025-05-03"
    },
    {
      "id": 117,
      "baseline_id": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.67,
      "baseline_stddev": 8.45,
      "deviation": 2.65,
      "metric_value": 42.32,
      "observed_on": "2025-05-03"
    },
    {
      "id": 118,
      "baseline_id": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.63,
      "baseline_stddev": 8.74,
      "deviation": -4.89,
      "metric_value": 40.74,
      "observed_on": "2025-05-02"
    },
    {
      "id": 119,
      "baseline_id": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": 27.18,
      "baseline_stddev": 6.73,
      "deviation": -7.17,
      "metric_value": 20.01,
      "observed_on": "2025-05-01"
    },
    {
      "id": 120,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": -4.17,
      "metric_value": 36.06,
      "observed_on": "2025-05-02"
    },
    {
      "id": 121,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": 11.97,
      "metric_value": 45.7,
      "observed_on": "2025-05-02"
    },
    {
      "id": 122,
      "baseline_id": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "deviation": -6.68,
      "metric_value": 29.88,
      "observed_on": "2025-05-01"
    },
    {
      "id": 123,
      "baseline_id": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "deviation": 2.98,
      "metric_value": 28.42,
      "observed_on": "2025-05-03"
    },
    {
      "id": 124,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": -4.97,
      "metric_value": 58.59,
      "observed_on": "2025-05-02"
    },
    {
      "id": 125,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": -12.82,
      "metric_value": 20.91,
      "observed_on": "2025-05-03"
    },
    {
      "id": 126,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": -0.37,
      "metric_value": 48.23,
      "observed_on": "2025-05-02"
    },
    {
      "id": 127,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": -4.2,
      "metric_value": 42.29,
      "observed_on": "2025-05-01"
    },
    {
      "id": 128,
      "baseline_id": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": 50.31,
      "baseline_stddev": 4.67,
      "deviation": -3.63,
      "metric_value": 46.68,
      "observed_on": "2025-05-02"
    },
    {
      "id": 129,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": 5.32,
      "metric_value": 38.21,
      "observed_on": "2025-05-02"
    },
    {
      "id": 130,
      "baseline_id": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": 37.08,
      "baseline_stddev": 5.21,
      "deviation": -2.25,
      "metric_value": 34.83,
      "observed_on": "2025-05-02"
    },
    {
      "id": 131,
      "baseline_id": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "deviation": -4.45,
      "metric_value": 44.56,
      "observed_on": "2025-05-01"
    },
    {
      "id": 132,
      "baseline_id": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.5,
      "baseline_stddev": 5.32,
      "deviation": 4.57,
      "metric_value": 57.07,
      "observed_on": "2025-05-01"
    },
    {
      "id": 133,
      "baseline_id": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.12,
      "baseline_stddev": 5.36,
      "deviation": 2.51,
      "metric_value": 42.63,
      "observed_on": "2025-05-01"
    },
    {
      "id": 134,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": 6.07,
      "metric_value": 48.29,
      "observed_on": "2025-05-01"
    },
    {
      "id": 135,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": -2.68,
      "metric_value": 32.47,
      "observed_on": "2025-05-02"
    },
    {
      "id": 136,
      "baseline_id": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 26.84,
      "baseline_stddev": 3.25,
      "deviation": 1.79,
      "metric_value": 28.63,
      "observed_on": "2025-05-01"
    },
    {
      "id": 137,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": -5.48,
      "metric_value": 20.07,
      "observed_on": "2025-05-01"
    },
    {
      "id": 138,
      "baseline_id": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 42.29,
      "baseline_stddev": 6.47,
      "deviation": -0.72,
      "metric_value": 41.57,
      "observed_on": "2025-05-02"
    },
    {
      "id": 139,
      "baseline_id": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": 43.96,
      "baseline_stddev": 4,
      "deviation": -3.7,
      "metric_value": 40.26,
      "observed_on": "2025-05-01"
    },
    {
      "id": 140,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": -2.82,
      "metric_value": 29.69,
      "observed_on": "2025-05-02"
    },
    {
      "id": 141,
      "baseline_id": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": 21.65,
      "baseline_stddev": 5.31,
      "deviation": -7.51,
      "metric_value": 14.14,
      "observed_on": "2025-05-02"
    },
    {
      "id": 142,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": 10.44,
      "metric_value": 72.34,
      "observed_on": "2025-05-03"
    },
    {
      "id": 143,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": 16.62,
      "metric_value": 40.87,
      "observed_on": "2025-05-03"
    },
    {
      "id": 144,
      "baseline_id": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.27,
      "baseline_stddev": 3,
      "deviation": 7.32,
      "metric_value": 40.59,
      "observed_on": "2025-05-01"
    },
    {
      "id": 145,
      "baseline_id": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 39.59,
      "baseline_stddev": 6.53,
      "deviation": 11.22,
      "metric_value": 50.81,
      "observed_on": "2025-05-01"
    },
    {
      "id": 146,
      "baseline_id": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "deviation": -10.5,
      "metric_value": 21.93,
      "observed_on": "2025-05-02"
    },
    {
      "id": 147,
      "baseline_id": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "deviation": -5.01,
      "metric_value": 43.15,
      "observed_on": "2025-05-02"
    },
    {
      "id": 148,
      "baseline_id": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "deviation": 3.66,
      "metric_value": 56.26,
      "observed_on": "2025-05-02"
    },
    {
      "id": 149,
      "baseline_id": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.5,
      "baseline_stddev": 5.32,
      "deviation": 10.4,
      "metric_value": 62.9,
      "observed_on": "2025-05-02"
    },
    {
      "id": 150,
      "baseline_id": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.35,
      "baseline_stddev": 3.5,
      "deviation": -4.71,
      "metric_value": 28.64,
      "observed_on": "2025-05-01"
    },
    {
      "id": 151,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": 3.1,
      "metric_value": 35.61,
      "observed_on": "2025-05-03"
    },
    {
      "id": 152,
      "baseline_id": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "deviation": 0.74,
      "metric_value": 48.51,
      "observed_on": "2025-05-01"
    },
    {
      "id": 153,
      "baseline_id": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 29.58,
      "baseline_stddev": 7.02,
      "deviation": 1.07,
      "metric_value": 30.65,
      "observed_on": "2025-05-01"
    },
    {
      "id": 154,
      "baseline_id": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "deviation": -3.26,
      "metric_value": 28.89,
      "observed_on": "2025-05-03"
    },
    {
      "id": 155,
      "baseline_id": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": 22.05,
      "baseline_stddev": 6.18,
      "deviation": 1.28,
      "metric_value": 23.33,
      "observed_on": "2025-05-03"
    },
    {
      "id": 156,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": 0.86,
      "metric_value": 28.16,
      "observed_on": "2025-05-01"
    },
    {
      "id": 157,
      "baseline_id": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.63,
      "baseline_stddev": 8.74,
      "deviation": -8.41,
      "metric_value": 37.22,
      "observed_on": "2025-05-03"
    },
    {
      "id": 158,
      "baseline_id": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 22.54,
      "baseline_stddev": 5.73,
      "deviation": 0.92,
      "metric_value": 23.46,
      "observed_on": "2025-05-01"
    },
    {
      "id": 159,
      "baseline_id": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": 35.69,
      "baseline_stddev": 7.14,
      "deviation": 3.83,
      "metric_value": 39.52,
      "observed_on": "2025-05-01"
    },
    {
      "id": 160,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": 1.8,
      "metric_value": 35.97,
      "observed_on": "2025-05-02"
    },
    {
      "id": 161,
      "baseline_id": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.09,
      "baseline_stddev": 7.79,
      "deviation": 6.28,
      "metric_value": 48.37,
      "observed_on": "2025-05-01"
    },
    {
      "id": 162,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": -6.75,
      "metric_value": 39.74,
      "observed_on": "2025-05-02"
    },
    {
      "id": 163,
      "baseline_id": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "deviation": -2.26,
      "metric_value": 50.67,
      "observed_on": "2025-05-01"
    },
    {
      "id": 164,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": 5.87,
      "metric_value": 43.88,
      "observed_on": "2025-05-02"
    },
    {
      "id": 165,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": -0.54,
      "metric_value": 63.02,
      "observed_on": "2025-05-03"
    },
    {
      "id": 166,
      "baseline_id": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.31,
      "baseline_stddev": 3.18,
      "deviation": -1.63,
      "metric_value": 30.68,
      "observed_on": "2025-05-01"
    },
    {
      "id": 167,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": 4.18,
      "metric_value": 42.45,
      "observed_on": "2025-05-01"
    },
    {
      "id": 168,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": 12.82,
      "metric_value": 54.52,
      "observed_on": "2025-05-01"
    },
    {
      "id": 169,
      "baseline_id": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "deviation": -5.46,
      "metric_value": 40.15,
      "observed_on": "2025-05-03"
    },
    {
      "id": 170,
      "baseline_id": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "deviation": 1.22,
      "metric_value": 48.99,
      "observed_on": "2025-05-02"
    },
    {
      "id": 171,
      "baseline_id": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "deviation": 4.98,
      "metric_value": 52.81,
      "observed_on": "2025-05-02"
    },
    {
      "id": 172,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": -6.22,
      "metric_value": 41.67,
      "observed_on": "2025-05-02"
    },
    {
      "id": 173,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": -10.82,
      "metric_value": 30.61,
      "observed_on": "2025-05-01"
    },
    {
      "id": 174,
      "baseline_id": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.27,
      "baseline_stddev": 3,
      "deviation": -3.22,
      "metric_value": 30.05,
      "observed_on": "2025-05-02"
    },
    {
      "id": 175,
      "baseline_id": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 26.84,
      "baseline_stddev": 3.25,
      "deviation": 12.61,
      "metric_value": 39.45,
      "observed_on": "2025-05-02"
    },
    {
      "id": 176,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": 6.58,
      "metric_value": 44.59,
      "observed_on": "2025-05-03"
    },
    {
      "id": 177,
      "baseline_id": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "deviation": 4.48,
      "metric_value": 36.91,
      "observed_on": "2025-05-03"
    },
    {
      "id": 178,
      "baseline_id": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": 35.69,
      "baseline_stddev": 7.14,
      "deviation": 10.21,
      "metric_value": 45.9,
      "observed_on": "2025-05-02"
    },
    {
      "id": 179,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": 2.26,
      "metric_value": 48.78,
      "observed_on": "2025-05-04"
    },
    {
      "id": 180,
      "baseline_id": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "deviation": -11.96,
      "metric_value": 27.38,
      "observed_on": "2025-05-04"
    },
    {
      "id": 181,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": 0.78,
      "metric_value": 43,
      "observed_on": "2025-05-02"
    },
    {
      "id": 182,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": -2.11,
      "metric_value": 53.45,
      "observed_on": "2025-05-01"
    },
    {
      "id": 183,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": -2.07,
      "metric_value": 39.36,
      "observed_on": "2025-05-02"
    },
    {
      "id": 184,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": 1.36,
      "metric_value": 32.6,
      "observed_on": "2025-05-02"
    },
    {
      "id": 185,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": -2.15,
      "metric_value": 45.58,
      "observed_on": "2025-05-01"
    },
    {
      "id": 186,
      "baseline_id": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "deviation": 10.79,
      "metric_value": 47.35,
      "observed_on": "2025-05-02"
    },
    {
      "id": 187,
      "baseline_id": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": 27.59,
      "baseline_stddev": 8.27,
      "deviation": -1.02,
      "metric_value": 26.57,
      "observed_on": "2025-05-03"
    },
    {
      "id": 188,
      "baseline_id": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.01,
      "baseline_stddev": 8.84,
      "deviation": -10.83,
      "metric_value": 43.18,
      "observed_on": "2025-05-02"
    },
    {
      "id": 189,
      "baseline_id": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.02,
      "baseline_stddev": 3.88,
      "deviation": 2.89,
      "metric_value": 27.91,
      "observed_on": "2025-05-01"
    },
    {
      "id": 190,
      "baseline_id": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 48.32,
      "baseline_stddev": 5.99,
      "deviation": -12.77,
      "metric_value": 35.55,
      "observed_on": "2025-05-01"
    },
    {
      "id": 191,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": -2.69,
      "metric_value": 45.91,
      "observed_on": "2025-05-03"
    },
    {
      "id": 192,
      "baseline_id": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "deviation": 5.04,
      "metric_value": 36.58,
      "observed_on": "2025-05-03"
    },
    {
      "id": 193,
      "baseline_id": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": 27.18,
      "baseline_stddev": 6.73,
      "deviation": 15.88,
      "metric_value": 43.06,
      "observed_on": "2025-05-02"
    },
    {
      "id": 194,
      "baseline_id": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": 32.62,
      "baseline_stddev": 7.61,
      "deviation": 11.57,
      "metric_value": 44.19,
      "observed_on": "2025-05-01"
    },
    {
      "id": 195,
      "baseline_id": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.29,
      "baseline_stddev": 7.94,
      "deviation": 16.57,
      "metric_value": 63.86,
      "observed_on": "2025-05-02"
    },
    {
      "id": 196,
      "baseline_id": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 22.54,
      "baseline_stddev": 5.73,
      "deviation": -6.46,
      "metric_value": 16.08,
      "observed_on": "2025-05-02"
    },
    {
      "id": 197,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": -6.44,
      "metric_value": 42.16,
      "observed_on": "2025-05-04"
    },
    {
      "id": 198,
      "baseline_id": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 39.59,
      "baseline_stddev": 6.53,
      "deviation": -3.47,
      "metric_value": 36.12,
      "observed_on": "2025-05-02"
    },
    {
      "id": 199,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": 0.39,
      "metric_value": 48.87,
      "observed_on": "2025-05-01"
    },
    {
      "id": 200,
      "baseline_id": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 44.88,
      "baseline_stddev": 5.51,
      "deviation": -15.16,
      "metric_value": 29.72,
      "observed_on": "2025-05-02"
    },
    {
      "id": 201,
      "baseline_id": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": 43.96,
      "baseline_stddev": 4,
      "deviation": 2.78,
      "metric_value": 46.74,
      "observed_on": "2025-05-02"
    },
    {
      "id": 202,
      "baseline_id": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.65,
      "baseline_stddev": 5.51,
      "deviation": 1.9,
      "metric_value": 44.55,
      "observed_on": "2025-05-03"
    },
    {
      "id": 203,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": 5.91,
      "metric_value": 57.22,
      "observed_on": "2025-05-01"
    },
    {
      "id": 204,
      "baseline_id": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.22,
      "baseline_stddev": 7.04,
      "deviation": -2.84,
      "metric_value": 28.38,
      "observed_on": "2025-05-02"
    },
    {
      "id": 205,
      "baseline_id": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": 22.05,
      "baseline_stddev": 6.18,
      "deviation": -14.22,
      "metric_value": 7.83,
      "observed_on": "2025-05-04"
    },
    {
      "id": 206,
      "baseline_id": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": 45.77,
      "baseline_stddev": 8.3,
      "deviation": 1.76,
      "metric_value": 47.53,
      "observed_on": "2025-05-02"
    },
    {
      "id": 207,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": 5.79,
      "metric_value": 39.52,
      "observed_on": "2025-05-04"
    },
    {
      "id": 208,
      "baseline_id": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": 46.78,
      "baseline_stddev": 5.64,
      "deviation": 8.35,
      "metric_value": 55.13,
      "observed_on": "2025-05-02"
    },
    {
      "id": 209,
      "baseline_id": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.68,
      "baseline_stddev": 6.37,
      "deviation": 15.44,
      "metric_value": 53.12,
      "observed_on": "2025-05-02"
    },
    {
      "id": 210,
      "baseline_id": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": 39.14,
      "baseline_stddev": 5.9,
      "deviation": 2.29,
      "metric_value": 41.43,
      "observed_on": "2025-05-01"
    },
    {
      "id": 211,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": -8.78,
      "metric_value": 37.74,
      "observed_on": "2025-05-05"
    },
    {
      "id": 212,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": -0.34,
      "metric_value": 41.88,
      "observed_on": "2025-05-03"
    },
    {
      "id": 213,
      "baseline_id": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "deviation": -1.23,
      "metric_value": 46.54,
      "observed_on": "2025-05-03"
    },
    {
      "id": 214,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": 4.71,
      "metric_value": 39.86,
      "observed_on": "2025-05-03"
    },
    {
      "id": 215,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": 4.54,
      "metric_value": 26.4,
      "observed_on": "2025-05-01"
    },
    {
      "id": 216,
      "baseline_id": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 29.58,
      "baseline_stddev": 7.02,
      "deviation": 3.2,
      "metric_value": 32.78,
      "observed_on": "2025-05-02"
    },
    {
      "id": 217,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": -11.07,
      "metric_value": 17.86,
      "observed_on": "2025-05-02"
    },
    {
      "id": 218,
      "baseline_id": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.14,
      "baseline_stddev": 4.45,
      "deviation": -14.12,
      "metric_value": 21.02,
      "observed_on": "2025-05-02"
    },
    {
      "id": 219,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": 5.62,
      "metric_value": 50.74,
      "observed_on": "2025-05-04"
    },
    {
      "id": 220,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": 0.61,
      "metric_value": 31.07,
      "observed_on": "2025-05-04"
    },
    {
      "id": 221,
      "baseline_id": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.02,
      "baseline_stddev": 4.88,
      "deviation": -3.7,
      "metric_value": 48.32,
      "observed_on": "2025-05-01"
    },
    {
      "id": 222,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": -1.82,
      "metric_value": 25.93,
      "observed_on": "2025-05-03"
    },
    {
      "id": 223,
      "baseline_id": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 48.32,
      "baseline_stddev": 5.99,
      "deviation": 8.52,
      "metric_value": 56.84,
      "observed_on": "2025-05-02"
    },
    {
      "id": 224,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": -2.66,
      "metric_value": 43.83,
      "observed_on": "2025-05-03"
    },
    {
      "id": 225,
      "baseline_id": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "deviation": 8.64,
      "metric_value": 61.24,
      "observed_on": "2025-05-03"
    },
    {
      "id": 226,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": -10.92,
      "metric_value": 23.71,
      "observed_on": "2025-05-02"
    },
    {
      "id": 227,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": 0.12,
      "metric_value": 53.96,
      "observed_on": "2025-05-04"
    },
    {
      "id": 228,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": -3.39,
      "metric_value": 22.16,
      "observed_on": "2025-05-02"
    },
    {
      "id": 229,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": 1.37,
      "metric_value": 42.4,
      "observed_on": "2025-05-02"
    },
    {
      "id": 230,
      "baseline_id": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "deviation": 3.06,
      "metric_value": 22.86,
      "observed_on": "2025-05-02"
    },
    {
      "id": 231,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": 8.49,
      "metric_value": 64.05,
      "observed_on": "2025-05-02"
    },
    {
      "id": 232,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": -1.42,
      "metric_value": 39.79,
      "observed_on": "2025-05-01"
    },
    {
      "id": 233,
      "baseline_id": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.79,
      "baseline_stddev": 7.87,
      "deviation": 15.16,
      "metric_value": 52.95,
      "observed_on": "2025-05-01"
    },
    {
      "id": 234,
      "baseline_id": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.6,
      "baseline_stddev": 4.88,
      "deviation": -2.23,
      "metric_value": 32.37,
      "observed_on": "2025-05-01"
    },
    {
      "id": 235,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": -0.7,
      "metric_value": 27.05,
      "observed_on": "2025-05-04"
    },
    {
      "id": 236,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": 11.12,
      "metric_value": 56.24,
      "observed_on": "2025-05-05"
    },
    {
      "id": 237,
      "baseline_id": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.02,
      "baseline_stddev": 4.74,
      "deviation": -0.4,
      "metric_value": 36.62,
      "observed_on": "2025-05-02"
    },
    {
      "id": 238,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": 0.76,
      "metric_value": 38.72,
      "observed_on": "2025-05-02"
    },
    {
      "id": 239,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": -4.65,
      "metric_value": 29.37,
      "observed_on": "2025-05-01"
    },
    {
      "id": 240,
      "baseline_id": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": 48,
      "baseline_stddev": 7.45,
      "deviation": -0.35,
      "metric_value": 47.65,
      "observed_on": "2025-05-01"
    },
    {
      "id": 241,
      "baseline_id": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.61,
      "baseline_stddev": 4.64,
      "deviation": 7.07,
      "metric_value": 55.68,
      "observed_on": "2025-05-02"
    },
    {
      "id": 242,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": -2.79,
      "metric_value": 32.95,
      "observed_on": "2025-05-02"
    },
    {
      "id": 243,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": 11.15,
      "metric_value": 57.67,
      "observed_on": "2025-05-06"
    },
    {
      "id": 244,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": -4.54,
      "metric_value": 28.35,
      "observed_on": "2025-05-03"
    },
    {
      "id": 245,
      "baseline_id": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.52,
      "baseline_stddev": 3.02,
      "deviation": 0.07,
      "metric_value": 41.59,
      "observed_on": "2025-05-01"
    },
    {
      "id": 246,
      "baseline_id": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.6,
      "baseline_stddev": 4.88,
      "deviation": 5.49,
      "metric_value": 40.09,
      "observed_on": "2025-05-02"
    },
    {
      "id": 247,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": -3.79,
      "metric_value": 31.36,
      "observed_on": "2025-05-04"
    },
    {
      "id": 248,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": 2.91,
      "metric_value": 51.39,
      "observed_on": "2025-05-02"
    },
    {
      "id": 249,
      "baseline_id": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "deviation": 2.46,
      "metric_value": 50.62,
      "observed_on": "2025-05-03"
    },
    {
      "id": 250,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": 9,
      "metric_value": 60.31,
      "observed_on": "2025-05-02"
    },
    {
      "id": 251,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": 7.74,
      "metric_value": 45.7,
      "observed_on": "2025-05-03"
    },
    {
      "id": 252,
      "baseline_id": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.65,
      "baseline_stddev": 5.51,
      "deviation": 4.24,
      "metric_value": 46.89,
      "observed_on": "2025-05-04"
    },
    {
      "id": 253,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": -1.56,
      "metric_value": 38.67,
      "observed_on": "2025-05-03"
    },
    {
      "id": 254,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": -5.63,
      "metric_value": 56.27,
      "observed_on": "2025-05-04"
    },
    {
      "id": 255,
      "baseline_id": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.99,
      "baseline_stddev": 3.71,
      "deviation": -4.36,
      "metric_value": 43.63,
      "observed_on": "2025-05-02"
    },
    {
      "id": 256,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": -4.75,
      "metric_value": 43.73,
      "observed_on": "2025-05-03"
    },
    {
      "id": 257,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": 2.08,
      "metric_value": 36.1,
      "observed_on": "2025-05-02"
    },
    {
      "id": 258,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": 1.59,
      "metric_value": 29.34,
      "observed_on": "2025-05-05"
    },
    {
      "id": 259,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": 1.36,
      "metric_value": 35.53,
      "observed_on": "2025-05-03"
    },
    {
      "id": 260,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": -4.41,
      "metric_value": 35.82,
      "observed_on": "2025-05-04"
    },
    {
      "id": 261,
      "baseline_id": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.81,
      "baseline_stddev": 6.22,
      "deviation": -8.19,
      "metric_value": 26.62,
      "observed_on": "2025-05-01"
    },
    {
      "id": 262,
      "baseline_id": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": 35.69,
      "baseline_stddev": 7.14,
      "deviation": 7.87,
      "metric_value": 43.56,
      "observed_on": "2025-05-03"
    },
    {
      "id": 263,
      "baseline_id": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.52,
      "baseline_stddev": 3.02,
      "deviation": 7.55,
      "metric_value": 49.07,
      "observed_on": "2025-05-02"
    },
    {
      "id": 264,
      "baseline_id": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.02,
      "baseline_stddev": 3.88,
      "deviation": 17.27,
      "metric_value": 42.29,
      "observed_on": "2025-05-02"
    },
    {
      "id": 265,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": 6.08,
      "metric_value": 57.39,
      "observed_on": "2025-05-03"
    },
    {
      "id": 266,
      "baseline_id": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "deviation": 7.6,
      "metric_value": 60.2,
      "observed_on": "2025-05-04"
    },
    {
      "id": 267,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": 14.63,
      "metric_value": 68.47,
      "observed_on": "2025-05-05"
    },
    {
      "id": 268,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": 7.07,
      "metric_value": 45.36,
      "observed_on": "2025-05-02"
    },
    {
      "id": 269,
      "baseline_id": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.6,
      "baseline_stddev": 4.88,
      "deviation": 3.51,
      "metric_value": 38.11,
      "observed_on": "2025-05-03"
    },
    {
      "id": 270,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": 5.53,
      "metric_value": 35.85,
      "observed_on": "2025-05-04"
    },
    {
      "id": 271,
      "baseline_id": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.41,
      "baseline_stddev": 3.37,
      "deviation": -0.34,
      "metric_value": 42.07,
      "observed_on": "2025-05-01"
    },
    {
      "id": 272,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": -6.99,
      "metric_value": 40.15,
      "observed_on": "2025-05-03"
    },
    {
      "id": 273,
      "baseline_id": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": 46.78,
      "baseline_stddev": 5.64,
      "deviation": -4.22,
      "metric_value": 42.56,
      "observed_on": "2025-05-03"
    },
    {
      "id": 274,
      "baseline_id": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.7,
      "baseline_stddev": 8.92,
      "deviation": 11.39,
      "metric_value": 44.09,
      "observed_on": "2025-05-01"
    },
    {
      "id": 275,
      "baseline_id": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "deviation": -3.07,
      "metric_value": 39.54,
      "observed_on": "2025-05-01"
    },
    {
      "id": 276,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": -7.37,
      "metric_value": 22.95,
      "observed_on": "2025-05-05"
    },
    {
      "id": 277,
      "baseline_id": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.58,
      "baseline_stddev": 4.26,
      "deviation": 11.84,
      "metric_value": 46.42,
      "observed_on": "2025-05-03"
    },
    {
      "id": 278,
      "baseline_id": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "deviation": 0.57,
      "metric_value": 53.5,
      "observed_on": "2025-05-02"
    },
    {
      "id": 279,
      "baseline_id": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 46.46,
      "baseline_stddev": 3.55,
      "deviation": 10.84,
      "metric_value": 57.3,
      "observed_on": "2025-05-01"
    },
    {
      "id": 280,
      "baseline_id": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.35,
      "baseline_stddev": 3.5,
      "deviation": 9.35,
      "metric_value": 42.7,
      "observed_on": "2025-05-02"
    },
    {
      "id": 281,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": 10.01,
      "metric_value": 48.28,
      "observed_on": "2025-05-02"
    },
    {
      "id": 282,
      "baseline_id": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": 49.44,
      "baseline_stddev": 3.24,
      "deviation": -2.79,
      "metric_value": 46.65,
      "observed_on": "2025-05-01"
    },
    {
      "id": 283,
      "baseline_id": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 37.4,
      "baseline_stddev": 4.51,
      "deviation": 6.19,
      "metric_value": 43.59,
      "observed_on": "2025-05-02"
    },
    {
      "id": 284,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": 8.37,
      "metric_value": 46.26,
      "observed_on": "2025-05-03"
    },
    {
      "id": 285,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": 9.02,
      "metric_value": 56.91,
      "observed_on": "2025-05-03"
    },
    {
      "id": 286,
      "baseline_id": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "deviation": 8.19,
      "metric_value": 53.8,
      "observed_on": "2025-05-04"
    },
    {
      "id": 287,
      "baseline_id": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.09,
      "baseline_stddev": 4.82,
      "deviation": -2.55,
      "metric_value": 32.54,
      "observed_on": "2025-05-02"
    },
    {
      "id": 288,
      "baseline_id": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "deviation": -3.45,
      "metric_value": 45.56,
      "observed_on": "2025-05-02"
    },
    {
      "id": 289,
      "baseline_id": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": 33.67,
      "baseline_stddev": 8.84,
      "deviation": 1.71,
      "metric_value": 35.38,
      "observed_on": "2025-05-03"
    },
    {
      "id": 290,
      "baseline_id": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.67,
      "baseline_stddev": 8.45,
      "deviation": -8.86,
      "metric_value": 30.81,
      "observed_on": "2025-05-04"
    },
    {
      "id": 291,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": 8.59,
      "metric_value": 44.33,
      "observed_on": "2025-05-03"
    },
    {
      "id": 292,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": -1.28,
      "metric_value": 36.68,
      "observed_on": "2025-05-04"
    },
    {
      "id": 293,
      "baseline_id": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "deviation": 5.33,
      "metric_value": 53.43,
      "observed_on": "2025-05-03"
    },
    {
      "id": 294,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": 4.87,
      "metric_value": 38.69,
      "observed_on": "2025-05-02"
    },
    {
      "id": 295,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": 9.25,
      "metric_value": 36.55,
      "observed_on": "2025-05-02"
    },
    {
      "id": 296,
      "baseline_id": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "deviation": -2.68,
      "metric_value": 31.87,
      "observed_on": "2025-05-02"
    },
    {
      "id": 297,
      "baseline_id": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.61,
      "baseline_stddev": 4.64,
      "deviation": 10.38,
      "metric_value": 58.99,
      "observed_on": "2025-05-03"
    },
    {
      "id": 298,
      "baseline_id": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": 27.18,
      "baseline_stddev": 6.73,
      "deviation": 5.01,
      "metric_value": 32.19,
      "observed_on": "2025-05-03"
    },
    {
      "id": 299,
      "baseline_id": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.54,
      "baseline_stddev": 5.21,
      "deviation": 18.95,
      "metric_value": 65.49,
      "observed_on": "2025-05-02"
    },
    {
      "id": 300,
      "baseline_id": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 42.29,
      "baseline_stddev": 6.47,
      "deviation": 8.48,
      "metric_value": 50.77,
      "observed_on": "2025-05-03"
    },
    {
      "id": 301,
      "baseline_id": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 52.7,
      "baseline_stddev": 8.21,
      "deviation": -6.41,
      "metric_value": 46.29,
      "observed_on": "2025-05-01"
    },
    {
      "id": 302,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": 6.33,
      "metric_value": 68.23,
      "observed_on": "2025-05-05"
    },
    {
      "id": 303,
      "baseline_id": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "deviation": -5.12,
      "metric_value": 47.81,
      "observed_on": "2025-05-03"
    },
    {
      "id": 304,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": 3.67,
      "metric_value": 39.9,
      "observed_on": "2025-05-03"
    },
    {
      "id": 305,
      "baseline_id": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.58,
      "baseline_stddev": 4.26,
      "deviation": 3.87,
      "metric_value": 38.45,
      "observed_on": "2025-05-04"
    },
    {
      "id": 306,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": -7.67,
      "metric_value": 30.62,
      "observed_on": "2025-05-03"
    },
    {
      "id": 307,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": 10.38,
      "metric_value": 56.87,
      "observed_on": "2025-05-04"
    },
    {
      "id": 308,
      "baseline_id": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "deviation": -3.38,
      "metric_value": 44.45,
      "observed_on": "2025-05-03"
    },
    {
      "id": 309,
      "baseline_id": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 31.93,
      "baseline_stddev": 6.91,
      "deviation": -6.46,
      "metric_value": 25.47,
      "observed_on": "2025-05-01"
    },
    {
      "id": 310,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": 6.09,
      "metric_value": 47.79,
      "observed_on": "2025-05-02"
    },
    {
      "id": 311,
      "baseline_id": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "deviation": 5.81,
      "metric_value": 40.36,
      "observed_on": "2025-05-03"
    },
    {
      "id": 312,
      "baseline_id": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": 42.06,
      "baseline_stddev": 5.96,
      "deviation": -2.65,
      "metric_value": 39.41,
      "observed_on": "2025-05-01"
    },
    {
      "id": 313,
      "baseline_id": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "deviation": -1.5,
      "metric_value": 46.33,
      "observed_on": "2025-05-04"
    },
    {
      "id": 314,
      "baseline_id": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.44,
      "baseline_stddev": 3.9,
      "deviation": 1.01,
      "metric_value": 48.45,
      "observed_on": "2025-05-02"
    },
    {
      "id": 315,
      "baseline_id": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 55.62,
      "baseline_stddev": 4.46,
      "deviation": -9.9,
      "metric_value": 45.72,
      "observed_on": "2025-05-01"
    },
    {
      "id": 316,
      "baseline_id": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "deviation": 16.31,
      "metric_value": 69.24,
      "observed_on": "2025-05-04"
    },
    {
      "id": 317,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": -21.9,
      "metric_value": 12.27,
      "observed_on": "2025-05-04"
    },
    {
      "id": 318,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": 7.49,
      "metric_value": 53.98,
      "observed_on": "2025-05-05"
    },
    {
      "id": 319,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": 0.72,
      "metric_value": 45.84,
      "observed_on": "2025-05-06"
    },
    {
      "id": 320,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": 4.05,
      "metric_value": 32.98,
      "observed_on": "2025-05-03"
    },
    {
      "id": 321,
      "baseline_id": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 22.54,
      "baseline_stddev": 5.73,
      "deviation": 2.09,
      "metric_value": 24.63,
      "observed_on": "2025-05-03"
    },
    {
      "id": 322,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": 8.43,
      "metric_value": 35.73,
      "observed_on": "2025-05-03"
    },
    {
      "id": 323,
      "baseline_id": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.06,
      "baseline_stddev": 4.27,
      "deviation": -8.96,
      "metric_value": 33.1,
      "observed_on": "2025-05-01"
    },
    {
      "id": 324,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": 5.96,
      "metric_value": 43.85,
      "observed_on": "2025-05-04"
    },
    {
      "id": 325,
      "baseline_id": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 59.76,
      "baseline_stddev": 4.32,
      "deviation": 3.97,
      "metric_value": 63.73,
      "observed_on": "2025-05-02"
    },
    {
      "id": 326,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": 7.13,
      "metric_value": 42.28,
      "observed_on": "2025-05-05"
    },
    {
      "id": 327,
      "baseline_id": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.06,
      "baseline_stddev": 4.27,
      "deviation": -9.24,
      "metric_value": 32.82,
      "observed_on": "2025-05-02"
    },
    {
      "id": 328,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": -4.99,
      "metric_value": 36.22,
      "observed_on": "2025-05-02"
    },
    {
      "id": 329,
      "baseline_id": 72,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.65,
      "baseline_stddev": 5.51,
      "deviation": 4.7,
      "metric_value": 47.35,
      "observed_on": "2025-05-05"
    },
    {
      "id": 330,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": 9.74,
      "metric_value": 58.22,
      "observed_on": "2025-05-04"
    },
    {
      "id": 331,
      "baseline_id": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.31,
      "baseline_stddev": 3.18,
      "deviation": -4.18,
      "metric_value": 28.13,
      "observed_on": "2025-05-02"
    },
    {
      "id": 332,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": -2.19,
      "metric_value": 31.83,
      "observed_on": "2025-05-03"
    },
    {
      "id": 333,
      "baseline_id": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "deviation": 10.44,
      "metric_value": 30.24,
      "observed_on": "2025-05-03"
    },
    {
      "id": 334,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": -5.86,
      "metric_value": 27.96,
      "observed_on": "2025-05-03"
    },
    {
      "id": 335,
      "baseline_id": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 46.25,
      "baseline_stddev": 3.74,
      "deviation": 8.52,
      "metric_value": 54.77,
      "observed_on": "2025-05-01"
    },
    {
      "id": 336,
      "baseline_id": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": 53.45,
      "baseline_stddev": 4.83,
      "deviation": -1.64,
      "metric_value": 51.81,
      "observed_on": "2025-05-01"
    },
    {
      "id": 337,
      "baseline_id": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "deviation": -3.94,
      "metric_value": 40.37,
      "observed_on": "2025-05-02"
    },
    {
      "id": 338,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": -5.27,
      "metric_value": 42.62,
      "observed_on": "2025-05-04"
    },
    {
      "id": 339,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": -5.94,
      "metric_value": 47.9,
      "observed_on": "2025-05-06"
    },
    {
      "id": 340,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": -0.14,
      "metric_value": 35.6,
      "observed_on": "2025-05-04"
    },
    {
      "id": 341,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": 3.39,
      "metric_value": 51.28,
      "observed_on": "2025-05-05"
    },
    {
      "id": 342,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": 0.47,
      "metric_value": 38.76,
      "observed_on": "2025-05-04"
    },
    {
      "id": 343,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": -3.97,
      "metric_value": 47.34,
      "observed_on": "2025-05-04"
    },
    {
      "id": 344,
      "baseline_id": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": 53.45,
      "baseline_stddev": 4.83,
      "deviation": 9.54,
      "metric_value": 62.99,
      "observed_on": "2025-05-02"
    },
    {
      "id": 345,
      "baseline_id": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.09,
      "baseline_stddev": 7.79,
      "deviation": -4.79,
      "metric_value": 37.3,
      "observed_on": "2025-05-02"
    },
    {
      "id": 346,
      "baseline_id": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "deviation": 3.83,
      "metric_value": 40.39,
      "observed_on": "2025-05-03"
    },
    {
      "id": 347,
      "baseline_id": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 52.7,
      "baseline_stddev": 8.21,
      "deviation": 3.16,
      "metric_value": 55.86,
      "observed_on": "2025-05-02"
    },
    {
      "id": 348,
      "baseline_id": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "deviation": 2.62,
      "metric_value": 50.78,
      "observed_on": "2025-05-04"
    },
    {
      "id": 349,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": -6.84,
      "metric_value": 23.62,
      "observed_on": "2025-05-05"
    },
    {
      "id": 350,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": -2.52,
      "metric_value": 31.3,
      "observed_on": "2025-05-04"
    },
    {
      "id": 351,
      "baseline_id": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 22.54,
      "baseline_stddev": 5.73,
      "deviation": -5.46,
      "metric_value": 17.08,
      "observed_on": "2025-05-04"
    },
    {
      "id": 352,
      "baseline_id": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "deviation": -7.54,
      "metric_value": 35.07,
      "observed_on": "2025-05-02"
    },
    {
      "id": 353,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": -13.56,
      "metric_value": 42,
      "observed_on": "2025-05-03"
    },
    {
      "id": 354,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": 3.74,
      "metric_value": 25.6,
      "observed_on": "2025-05-02"
    },
    {
      "id": 355,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": -11.75,
      "metric_value": 34.77,
      "observed_on": "2025-05-07"
    },
    {
      "id": 356,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": -2.43,
      "metric_value": 38.6,
      "observed_on": "2025-05-03"
    },
    {
      "id": 357,
      "baseline_id": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 35.9,
      "baseline_stddev": 6.88,
      "deviation": -1.35,
      "metric_value": 34.55,
      "observed_on": "2025-05-01"
    },
    {
      "id": 358,
      "baseline_id": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 32.39,
      "baseline_stddev": 6.06,
      "deviation": -3.27,
      "metric_value": 29.12,
      "observed_on": "2025-05-02"
    },
    {
      "id": 359,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": 4.82,
      "metric_value": 43.11,
      "observed_on": "2025-05-05"
    },
    {
      "id": 360,
      "baseline_id": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": 37.08,
      "baseline_stddev": 5.21,
      "deviation": 0.59,
      "metric_value": 37.67,
      "observed_on": "2025-05-03"
    },
    {
      "id": 361,
      "baseline_id": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": 42.06,
      "baseline_stddev": 5.96,
      "deviation": -8.9,
      "metric_value": 33.16,
      "observed_on": "2025-05-02"
    },
    {
      "id": 362,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": 5.84,
      "metric_value": 46.87,
      "observed_on": "2025-05-04"
    },
    {
      "id": 363,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": 5.61,
      "metric_value": 54.21,
      "observed_on": "2025-05-05"
    },
    {
      "id": 364,
      "baseline_id": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.22,
      "baseline_stddev": 7.04,
      "deviation": 5.62,
      "metric_value": 36.84,
      "observed_on": "2025-05-03"
    },
    {
      "id": 365,
      "baseline_id": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.83,
      "baseline_stddev": 3.59,
      "deviation": 1.25,
      "metric_value": 29.08,
      "observed_on": "2025-05-01"
    },
    {
      "id": 366,
      "baseline_id": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 39.59,
      "baseline_stddev": 6.53,
      "deviation": 2.03,
      "metric_value": 41.62,
      "observed_on": "2025-05-03"
    },
    {
      "id": 367,
      "baseline_id": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.07,
      "baseline_stddev": 8.34,
      "deviation": -8.7,
      "metric_value": 31.37,
      "observed_on": "2025-05-02"
    },
    {
      "id": 368,
      "baseline_id": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 32.39,
      "baseline_stddev": 6.06,
      "deviation": -1.68,
      "metric_value": 30.71,
      "observed_on": "2025-05-03"
    },
    {
      "id": 369,
      "baseline_id": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": 27.59,
      "baseline_stddev": 8.27,
      "deviation": -7.09,
      "metric_value": 20.5,
      "observed_on": "2025-05-04"
    },
    {
      "id": 370,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": -14.99,
      "metric_value": 17.9,
      "observed_on": "2025-05-04"
    },
    {
      "id": 371,
      "baseline_id": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": 21.65,
      "baseline_stddev": 5.31,
      "deviation": -1.5,
      "metric_value": 20.15,
      "observed_on": "2025-05-03"
    },
    {
      "id": 372,
      "baseline_id": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 37.4,
      "baseline_stddev": 4.51,
      "deviation": -8.45,
      "metric_value": 28.95,
      "observed_on": "2025-05-03"
    },
    {
      "id": 373,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": 3.91,
      "metric_value": 36.42,
      "observed_on": "2025-05-04"
    },
    {
      "id": 374,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": -4.94,
      "metric_value": 22.36,
      "observed_on": "2025-05-04"
    },
    {
      "id": 375,
      "baseline_id": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "deviation": -6.85,
      "metric_value": 40.92,
      "observed_on": "2025-05-04"
    },
    {
      "id": 376,
      "baseline_id": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "deviation": -2.03,
      "metric_value": 50.57,
      "observed_on": "2025-05-05"
    },
    {
      "id": 377,
      "baseline_id": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.09,
      "baseline_stddev": 7.79,
      "deviation": -3.99,
      "metric_value": 38.1,
      "observed_on": "2025-05-03"
    },
    {
      "id": 378,
      "baseline_id": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.09,
      "baseline_stddev": 4.82,
      "deviation": -2.73,
      "metric_value": 32.36,
      "observed_on": "2025-05-03"
    },
    {
      "id": 379,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": 0.37,
      "metric_value": 45.49,
      "observed_on": "2025-05-07"
    },
    {
      "id": 380,
      "baseline_id": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 29.58,
      "baseline_stddev": 7.02,
      "deviation": -3.82,
      "metric_value": 25.76,
      "observed_on": "2025-05-03"
    },
    {
      "id": 381,
      "baseline_id": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 33.91,
      "baseline_stddev": 6.69,
      "deviation": 4.7,
      "metric_value": 38.61,
      "observed_on": "2025-05-02"
    },
    {
      "id": 382,
      "baseline_id": 28,
      "metric_name": "after_hours_actions",
      "baseline_mean": 31.73,
      "baseline_stddev": 7.7,
      "deviation": 7.74,
      "metric_value": 39.47,
      "observed_on": "2025-05-06"
    },
    {
      "id": 383,
      "baseline_id": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": 16.89,
      "baseline_stddev": 7.02,
      "deviation": 4.32,
      "metric_value": 21.21,
      "observed_on": "2025-05-02"
    },
    {
      "id": 384,
      "baseline_id": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 39.59,
      "baseline_stddev": 6.53,
      "deviation": 7.22,
      "metric_value": 46.81,
      "observed_on": "2025-05-04"
    },
    {
      "id": 385,
      "baseline_id": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 26.84,
      "baseline_stddev": 3.25,
      "deviation": 3.31,
      "metric_value": 30.15,
      "observed_on": "2025-05-03"
    },
    {
      "id": 386,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": -3.83,
      "metric_value": 39.04,
      "observed_on": "2025-05-03"
    },
    {
      "id": 387,
      "baseline_id": 98,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 39.59,
      "baseline_stddev": 6.53,
      "deviation": -2.27,
      "metric_value": 37.32,
      "observed_on": "2025-05-05"
    },
    {
      "id": 388,
      "baseline_id": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "deviation": 10.46,
      "metric_value": 42,
      "observed_on": "2025-05-04"
    },
    {
      "id": 389,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": 3.49,
      "metric_value": 38.64,
      "observed_on": "2025-05-06"
    },
    {
      "id": 390,
      "baseline_id": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "deviation": -1.66,
      "metric_value": 37.77,
      "observed_on": "2025-05-02"
    },
    {
      "id": 391,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": -0.94,
      "metric_value": 62.62,
      "observed_on": "2025-05-04"
    },
    {
      "id": 392,
      "baseline_id": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.99,
      "baseline_stddev": 3.71,
      "deviation": -3.99,
      "metric_value": 44,
      "observed_on": "2025-05-03"
    },
    {
      "id": 393,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": 2.18,
      "metric_value": 50.07,
      "observed_on": "2025-05-06"
    },
    {
      "id": 394,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": 8.87,
      "metric_value": 42.69,
      "observed_on": "2025-05-05"
    },
    {
      "id": 395,
      "baseline_id": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.54,
      "baseline_stddev": 5.21,
      "deviation": -3.54,
      "metric_value": 43,
      "observed_on": "2025-05-03"
    },
    {
      "id": 396,
      "baseline_id": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "deviation": 9.61,
      "metric_value": 41.76,
      "observed_on": "2025-05-04"
    },
    {
      "id": 397,
      "baseline_id": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "deviation": 23.05,
      "metric_value": 75.05,
      "observed_on": "2025-05-02"
    },
    {
      "id": 398,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": -0.97,
      "metric_value": 46.17,
      "observed_on": "2025-05-04"
    },
    {
      "id": 399,
      "baseline_id": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "deviation": 1.98,
      "metric_value": 47.59,
      "observed_on": "2025-05-05"
    },
    {
      "id": 400,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": 7.33,
      "metric_value": 45.34,
      "observed_on": "2025-05-04"
    },
    {
      "id": 401,
      "baseline_id": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": 33.67,
      "baseline_stddev": 8.84,
      "deviation": -4.41,
      "metric_value": 29.26,
      "observed_on": "2025-05-04"
    },
    {
      "id": 402,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": 7.06,
      "metric_value": 41.23,
      "observed_on": "2025-05-05"
    },
    {
      "id": 403,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": 4.91,
      "metric_value": 46.12,
      "observed_on": "2025-05-03"
    },
    {
      "id": 404,
      "baseline_id": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": 49.44,
      "baseline_stddev": 3.24,
      "deviation": 5.62,
      "metric_value": 55.06,
      "observed_on": "2025-05-02"
    },
    {
      "id": 405,
      "baseline_id": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.15,
      "baseline_stddev": 7.54,
      "deviation": 4.58,
      "metric_value": 44.73,
      "observed_on": "2025-05-03"
    },
    {
      "id": 406,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": -6.84,
      "metric_value": 35.38,
      "observed_on": "2025-05-04"
    },
    {
      "id": 407,
      "baseline_id": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.35,
      "baseline_stddev": 3.5,
      "deviation": -2.49,
      "metric_value": 30.86,
      "observed_on": "2025-05-03"
    },
    {
      "id": 408,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": 2,
      "metric_value": 48.49,
      "observed_on": "2025-05-06"
    },
    {
      "id": 409,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": -6.92,
      "metric_value": 33.31,
      "observed_on": "2025-05-05"
    },
    {
      "id": 410,
      "baseline_id": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.07,
      "baseline_stddev": 8.34,
      "deviation": 4.34,
      "metric_value": 44.41,
      "observed_on": "2025-05-03"
    },
    {
      "id": 411,
      "baseline_id": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "deviation": -6.36,
      "metric_value": 25.18,
      "observed_on": "2025-05-05"
    },
    {
      "id": 412,
      "baseline_id": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "deviation": 9.45,
      "metric_value": 29.25,
      "observed_on": "2025-05-04"
    },
    {
      "id": 413,
      "baseline_id": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "deviation": 0.02,
      "metric_value": 36.58,
      "observed_on": "2025-05-04"
    },
    {
      "id": 414,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": 3.59,
      "metric_value": 39.82,
      "observed_on": "2025-05-04"
    },
    {
      "id": 415,
      "baseline_id": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.84,
      "baseline_stddev": 8.29,
      "deviation": 2.08,
      "metric_value": 56.92,
      "observed_on": "2025-05-01"
    },
    {
      "id": 416,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": 3.85,
      "metric_value": 39.59,
      "observed_on": "2025-05-05"
    },
    {
      "id": 417,
      "baseline_id": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 55.62,
      "baseline_stddev": 4.46,
      "deviation": 3.44,
      "metric_value": 59.06,
      "observed_on": "2025-05-02"
    },
    {
      "id": 418,
      "baseline_id": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.02,
      "baseline_stddev": 4.88,
      "deviation": -11.14,
      "metric_value": 40.88,
      "observed_on": "2025-05-02"
    },
    {
      "id": 419,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": 10.84,
      "metric_value": 43.35,
      "observed_on": "2025-05-05"
    },
    {
      "id": 420,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": 1.36,
      "metric_value": 49.09,
      "observed_on": "2025-05-02"
    },
    {
      "id": 421,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": 1.93,
      "metric_value": 43.36,
      "observed_on": "2025-05-03"
    },
    {
      "id": 422,
      "baseline_id": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.41,
      "baseline_stddev": 3.37,
      "deviation": -2.72,
      "metric_value": 39.69,
      "observed_on": "2025-05-02"
    },
    {
      "id": 423,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": -4.92,
      "metric_value": 58.64,
      "observed_on": "2025-05-05"
    },
    {
      "id": 424,
      "baseline_id": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "deviation": 6.65,
      "metric_value": 46.08,
      "observed_on": "2025-05-03"
    },
    {
      "id": 425,
      "baseline_id": 56,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.15,
      "baseline_stddev": 7.54,
      "deviation": 7.62,
      "metric_value": 47.77,
      "observed_on": "2025-05-04"
    },
    {
      "id": 426,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": 7.82,
      "metric_value": 59.13,
      "observed_on": "2025-05-05"
    },
    {
      "id": 427,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": 2.46,
      "metric_value": 35.35,
      "observed_on": "2025-05-05"
    },
    {
      "id": 428,
      "baseline_id": 119,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.07,
      "baseline_stddev": 8.34,
      "deviation": 6.96,
      "metric_value": 47.03,
      "observed_on": "2025-05-04"
    },
    {
      "id": 429,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": -1.21,
      "metric_value": 27.72,
      "observed_on": "2025-05-04"
    },
    {
      "id": 430,
      "baseline_id": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.76,
      "baseline_stddev": 4.46,
      "deviation": 2.58,
      "metric_value": 35.34,
      "observed_on": "2025-05-01"
    },
    {
      "id": 431,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": -0.82,
      "metric_value": 37.19,
      "observed_on": "2025-05-05"
    },
    {
      "id": 432,
      "baseline_id": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": 39.14,
      "baseline_stddev": 5.9,
      "deviation": -6.56,
      "metric_value": 32.58,
      "observed_on": "2025-05-02"
    },
    {
      "id": 433,
      "baseline_id": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": 53.45,
      "baseline_stddev": 4.83,
      "deviation": 3.34,
      "metric_value": 56.79,
      "observed_on": "2025-05-03"
    },
    {
      "id": 434,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": 1.01,
      "metric_value": 29.94,
      "observed_on": "2025-05-05"
    },
    {
      "id": 435,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": 0.5,
      "metric_value": 34.52,
      "observed_on": "2025-05-04"
    },
    {
      "id": 436,
      "baseline_id": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "deviation": -1.69,
      "metric_value": 37.65,
      "observed_on": "2025-05-05"
    },
    {
      "id": 437,
      "baseline_id": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "deviation": -0.76,
      "metric_value": 43.55,
      "observed_on": "2025-05-03"
    },
    {
      "id": 438,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": 1.35,
      "metric_value": 37.09,
      "observed_on": "2025-05-06"
    },
    {
      "id": 439,
      "baseline_id": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.94,
      "baseline_stddev": 3.32,
      "deviation": -6.56,
      "metric_value": 35.38,
      "observed_on": "2025-05-01"
    },
    {
      "id": 440,
      "baseline_id": 15,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.09,
      "baseline_stddev": 7.79,
      "deviation": 2.97,
      "metric_value": 45.06,
      "observed_on": "2025-05-04"
    },
    {
      "id": 441,
      "baseline_id": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "deviation": 10.7,
      "metric_value": 59.71,
      "observed_on": "2025-05-03"
    },
    {
      "id": 442,
      "baseline_id": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.79,
      "baseline_stddev": 7.87,
      "deviation": 4.18,
      "metric_value": 41.97,
      "observed_on": "2025-05-02"
    },
    {
      "id": 443,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": 4.09,
      "metric_value": 45.79,
      "observed_on": "2025-05-03"
    },
    {
      "id": 444,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": -4.02,
      "metric_value": 38.2,
      "observed_on": "2025-05-05"
    },
    {
      "id": 445,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": -1.2,
      "metric_value": 47.4,
      "observed_on": "2025-05-06"
    },
    {
      "id": 446,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": -1.24,
      "metric_value": 32.78,
      "observed_on": "2025-05-05"
    },
    {
      "id": 447,
      "baseline_id": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": 32.62,
      "baseline_stddev": 7.61,
      "deviation": 11.39,
      "metric_value": 44.01,
      "observed_on": "2025-05-02"
    },
    {
      "id": 448,
      "baseline_id": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "deviation": -4.33,
      "metric_value": 39.98,
      "observed_on": "2025-05-04"
    },
    {
      "id": 449,
      "baseline_id": 70,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 42.29,
      "baseline_stddev": 6.47,
      "deviation": -0.66,
      "metric_value": 41.63,
      "observed_on": "2025-05-04"
    },
    {
      "id": 450,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": -3.95,
      "metric_value": 21.6,
      "observed_on": "2025-05-03"
    },
    {
      "id": 451,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": -4.5,
      "metric_value": 17.36,
      "observed_on": "2025-05-03"
    },
    {
      "id": 452,
      "baseline_id": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.06,
      "baseline_stddev": 4.27,
      "deviation": -5,
      "metric_value": 37.06,
      "observed_on": "2025-05-03"
    },
    {
      "id": 453,
      "baseline_id": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.5,
      "baseline_stddev": 5.32,
      "deviation": -2.57,
      "metric_value": 49.93,
      "observed_on": "2025-05-03"
    },
    {
      "id": 454,
      "baseline_id": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.94,
      "baseline_stddev": 3.32,
      "deviation": -2.5,
      "metric_value": 39.44,
      "observed_on": "2025-05-02"
    },
    {
      "id": 455,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": -0.97,
      "metric_value": 41.9,
      "observed_on": "2025-05-04"
    },
    {
      "id": 456,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": -6.58,
      "metric_value": 28.57,
      "observed_on": "2025-05-07"
    },
    {
      "id": 457,
      "baseline_id": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": 21.65,
      "baseline_stddev": 5.31,
      "deviation": 4.7,
      "metric_value": 26.35,
      "observed_on": "2025-05-04"
    },
    {
      "id": 458,
      "baseline_id": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "deviation": -6.3,
      "metric_value": 26.13,
      "observed_on": "2025-05-04"
    },
    {
      "id": 459,
      "baseline_id": 30,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 46.52,
      "baseline_stddev": 3.93,
      "deviation": 9.42,
      "metric_value": 55.94,
      "observed_on": "2025-05-08"
    },
    {
      "id": 460,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": -2.66,
      "metric_value": 35.23,
      "observed_on": "2025-05-05"
    },
    {
      "id": 461,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": 6.9,
      "metric_value": 48.11,
      "observed_on": "2025-05-04"
    },
    {
      "id": 462,
      "baseline_id": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.37,
      "baseline_stddev": 7.35,
      "deviation": 1.19,
      "metric_value": 37.56,
      "observed_on": "2025-05-02"
    },
    {
      "id": 463,
      "baseline_id": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 33.91,
      "baseline_stddev": 6.69,
      "deviation": 8.61,
      "metric_value": 42.52,
      "observed_on": "2025-05-03"
    },
    {
      "id": 464,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": 0.46,
      "metric_value": 32.97,
      "observed_on": "2025-05-06"
    },
    {
      "id": 465,
      "baseline_id": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.22,
      "baseline_stddev": 7.04,
      "deviation": -0.31,
      "metric_value": 30.91,
      "observed_on": "2025-05-04"
    },
    {
      "id": 466,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": 2.82,
      "metric_value": 44.25,
      "observed_on": "2025-05-04"
    },
    {
      "id": 467,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": 3.77,
      "metric_value": 42.04,
      "observed_on": "2025-05-03"
    },
    {
      "id": 468,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": -1.15,
      "metric_value": 26.15,
      "observed_on": "2025-05-05"
    },
    {
      "id": 469,
      "baseline_id": 71,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.63,
      "baseline_stddev": 8.74,
      "deviation": 2.85,
      "metric_value": 48.48,
      "observed_on": "2025-05-04"
    },
    {
      "id": 470,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": 8.54,
      "metric_value": 56.27,
      "observed_on": "2025-05-03"
    },
    {
      "id": 471,
      "baseline_id": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "deviation": 5.69,
      "metric_value": 40.24,
      "observed_on": "2025-05-04"
    },
    {
      "id": 472,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": 2.07,
      "metric_value": 43.77,
      "observed_on": "2025-05-04"
    },
    {
      "id": 473,
      "baseline_id": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.01,
      "baseline_stddev": 8.84,
      "deviation": -3.39,
      "metric_value": 50.62,
      "observed_on": "2025-05-03"
    },
    {
      "id": 474,
      "baseline_id": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": 45.77,
      "baseline_stddev": 8.3,
      "deviation": 15.12,
      "metric_value": 60.89,
      "observed_on": "2025-05-03"
    },
    {
      "id": 475,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": 8.29,
      "metric_value": 50.51,
      "observed_on": "2025-05-06"
    },
    {
      "id": 476,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": -3.74,
      "metric_value": 30.89,
      "observed_on": "2025-05-03"
    },
    {
      "id": 477,
      "baseline_id": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 22.54,
      "baseline_stddev": 5.73,
      "deviation": 0.43,
      "metric_value": 22.97,
      "observed_on": "2025-05-05"
    },
    {
      "id": 478,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": 8.81,
      "metric_value": 33.06,
      "observed_on": "2025-05-04"
    },
    {
      "id": 479,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": -0.99,
      "metric_value": 29.33,
      "observed_on": "2025-05-06"
    },
    {
      "id": 480,
      "baseline_id": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": 35.69,
      "baseline_stddev": 7.14,
      "deviation": -5.32,
      "metric_value": 30.37,
      "observed_on": "2025-05-04"
    },
    {
      "id": 481,
      "baseline_id": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.58,
      "baseline_stddev": 4.26,
      "deviation": 14.31,
      "metric_value": 48.89,
      "observed_on": "2025-05-05"
    },
    {
      "id": 482,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": -6.66,
      "metric_value": 35.56,
      "observed_on": "2025-05-07"
    },
    {
      "id": 483,
      "baseline_id": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": 39.22,
      "baseline_stddev": 4.32,
      "deviation": -11.38,
      "metric_value": 27.84,
      "observed_on": "2025-05-01"
    },
    {
      "id": 484,
      "baseline_id": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "deviation": -2.23,
      "metric_value": 40.38,
      "observed_on": "2025-05-03"
    },
    {
      "id": 485,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": 0.98,
      "metric_value": 33.49,
      "observed_on": "2025-05-07"
    },
    {
      "id": 486,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": -1.47,
      "metric_value": 60.43,
      "observed_on": "2025-05-06"
    },
    {
      "id": 487,
      "baseline_id": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.68,
      "baseline_stddev": 6.37,
      "deviation": 13.63,
      "metric_value": 51.31,
      "observed_on": "2025-05-03"
    },
    {
      "id": 488,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": 2.09,
      "metric_value": 29.39,
      "observed_on": "2025-05-06"
    },
    {
      "id": 489,
      "baseline_id": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "deviation": -1.22,
      "metric_value": 50.78,
      "observed_on": "2025-05-03"
    },
    {
      "id": 490,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": 11,
      "metric_value": 52.03,
      "observed_on": "2025-05-05"
    },
    {
      "id": 491,
      "baseline_id": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "deviation": -3.76,
      "metric_value": 45.25,
      "observed_on": "2025-05-04"
    },
    {
      "id": 492,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": -1.29,
      "metric_value": 46.44,
      "observed_on": "2025-05-04"
    },
    {
      "id": 493,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": -3.74,
      "metric_value": 34.53,
      "observed_on": "2025-05-04"
    },
    {
      "id": 494,
      "baseline_id": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.5,
      "baseline_stddev": 5.32,
      "deviation": 1.51,
      "metric_value": 54.01,
      "observed_on": "2025-05-04"
    },
    {
      "id": 495,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": -5.83,
      "metric_value": 19.72,
      "observed_on": "2025-05-04"
    },
    {
      "id": 496,
      "baseline_id": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": 27.18,
      "baseline_stddev": 6.73,
      "deviation": 8.35,
      "metric_value": 35.53,
      "observed_on": "2025-05-04"
    },
    {
      "id": 497,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": 5.9,
      "metric_value": 44.17,
      "observed_on": "2025-05-05"
    },
    {
      "id": 498,
      "baseline_id": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "deviation": -5.59,
      "metric_value": 38.72,
      "observed_on": "2025-05-05"
    },
    {
      "id": 499,
      "baseline_id": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.02,
      "baseline_stddev": 3.88,
      "deviation": 12.1,
      "metric_value": 37.12,
      "observed_on": "2025-05-03"
    },
    {
      "id": 500,
      "baseline_id": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "deviation": -2.39,
      "metric_value": 29.76,
      "observed_on": "2025-05-05"
    },
    {
      "id": 501,
      "baseline_id": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 59.76,
      "baseline_stddev": 4.32,
      "deviation": -0.54,
      "metric_value": 59.22,
      "observed_on": "2025-05-03"
    },
    {
      "id": 502,
      "baseline_id": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.94,
      "baseline_stddev": 3.32,
      "deviation": -5.01,
      "metric_value": 36.93,
      "observed_on": "2025-05-03"
    },
    {
      "id": 503,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": -15.73,
      "metric_value": 35.58,
      "observed_on": "2025-05-06"
    },
    {
      "id": 504,
      "baseline_id": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.02,
      "baseline_stddev": 4.88,
      "deviation": -6.59,
      "metric_value": 45.43,
      "observed_on": "2025-05-03"
    },
    {
      "id": 505,
      "baseline_id": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.44,
      "baseline_stddev": 3.9,
      "deviation": -5,
      "metric_value": 42.44,
      "observed_on": "2025-05-03"
    },
    {
      "id": 506,
      "baseline_id": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "deviation": -2.67,
      "metric_value": 45.49,
      "observed_on": "2025-05-05"
    },
    {
      "id": 507,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": 2.92,
      "metric_value": 28.47,
      "observed_on": "2025-05-05"
    },
    {
      "id": 508,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": 7.67,
      "metric_value": 48.7,
      "observed_on": "2025-05-06"
    },
    {
      "id": 509,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": 2.64,
      "metric_value": 33.88,
      "observed_on": "2025-05-03"
    },
    {
      "id": 510,
      "baseline_id": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.14,
      "baseline_stddev": 4.45,
      "deviation": -14.92,
      "metric_value": 20.22,
      "observed_on": "2025-05-03"
    },
    {
      "id": 511,
      "baseline_id": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "deviation": 1.6,
      "metric_value": 45.91,
      "observed_on": "2025-05-06"
    },
    {
      "id": 512,
      "baseline_id": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "deviation": 1.16,
      "metric_value": 48.99,
      "observed_on": "2025-05-05"
    },
    {
      "id": 513,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": -9.07,
      "metric_value": 44.77,
      "observed_on": "2025-05-07"
    },
    {
      "id": 514,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": -6.18,
      "metric_value": 42.3,
      "observed_on": "2025-05-05"
    },
    {
      "id": 515,
      "baseline_id": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": 42.06,
      "baseline_stddev": 5.96,
      "deviation": -9.28,
      "metric_value": 32.78,
      "observed_on": "2025-05-03"
    },
    {
      "id": 516,
      "baseline_id": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.7,
      "baseline_stddev": 8.92,
      "deviation": 5.32,
      "metric_value": 38.02,
      "observed_on": "2025-05-02"
    },
    {
      "id": 517,
      "baseline_id": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": 28.42,
      "baseline_stddev": 7.59,
      "deviation": 6.88,
      "metric_value": 35.3,
      "observed_on": "2025-05-01"
    },
    {
      "id": 518,
      "baseline_id": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "deviation": 2.19,
      "metric_value": 41.62,
      "observed_on": "2025-05-04"
    },
    {
      "id": 519,
      "baseline_id": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": 49.44,
      "baseline_stddev": 3.24,
      "deviation": 4.73,
      "metric_value": 54.17,
      "observed_on": "2025-05-03"
    },
    {
      "id": 520,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": -0.72,
      "metric_value": 50.59,
      "observed_on": "2025-05-07"
    },
    {
      "id": 521,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": 2.51,
      "metric_value": 38.25,
      "observed_on": "2025-05-07"
    },
    {
      "id": 522,
      "baseline_id": 142,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.68,
      "baseline_stddev": 6.37,
      "deviation": 2.73,
      "metric_value": 40.41,
      "observed_on": "2025-05-04"
    },
    {
      "id": 523,
      "baseline_id": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.7,
      "baseline_stddev": 8.92,
      "deviation": -9.71,
      "metric_value": 22.99,
      "observed_on": "2025-05-03"
    },
    {
      "id": 524,
      "baseline_id": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "deviation": -12.75,
      "metric_value": 36.26,
      "observed_on": "2025-05-05"
    },
    {
      "id": 525,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": 1.73,
      "metric_value": 48.87,
      "observed_on": "2025-05-05"
    },
    {
      "id": 526,
      "baseline_id": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.83,
      "baseline_stddev": 3.59,
      "deviation": 1.5,
      "metric_value": 29.33,
      "observed_on": "2025-05-02"
    },
    {
      "id": 527,
      "baseline_id": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": 32.62,
      "baseline_stddev": 7.61,
      "deviation": -2.66,
      "metric_value": 29.96,
      "observed_on": "2025-05-03"
    },
    {
      "id": 528,
      "baseline_id": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.37,
      "baseline_stddev": 7.35,
      "deviation": 3.03,
      "metric_value": 39.4,
      "observed_on": "2025-05-03"
    },
    {
      "id": 529,
      "baseline_id": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "deviation": 0.11,
      "metric_value": 49.12,
      "observed_on": "2025-05-06"
    },
    {
      "id": 530,
      "baseline_id": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "deviation": -5.14,
      "metric_value": 40.47,
      "observed_on": "2025-05-06"
    },
    {
      "id": 531,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": 1.67,
      "metric_value": 36.82,
      "observed_on": "2025-05-08"
    },
    {
      "id": 532,
      "baseline_id": 5,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 22.54,
      "baseline_stddev": 5.73,
      "deviation": 15.1,
      "metric_value": 37.64,
      "observed_on": "2025-05-06"
    },
    {
      "id": 533,
      "baseline_id": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.84,
      "baseline_stddev": 8.29,
      "deviation": 10.64,
      "metric_value": 65.48,
      "observed_on": "2025-05-02"
    },
    {
      "id": 534,
      "baseline_id": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "deviation": -6.7,
      "metric_value": 25.73,
      "observed_on": "2025-05-05"
    },
    {
      "id": 535,
      "baseline_id": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 26.84,
      "baseline_stddev": 3.25,
      "deviation": 2.02,
      "metric_value": 28.86,
      "observed_on": "2025-05-04"
    },
    {
      "id": 536,
      "baseline_id": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.79,
      "baseline_stddev": 7.87,
      "deviation": -8.08,
      "metric_value": 29.71,
      "observed_on": "2025-05-03"
    },
    {
      "id": 537,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": 3.02,
      "metric_value": 40.91,
      "observed_on": "2025-05-06"
    },
    {
      "id": 538,
      "baseline_id": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.84,
      "baseline_stddev": 8.29,
      "deviation": 22.41,
      "metric_value": 77.25,
      "observed_on": "2025-05-03"
    },
    {
      "id": 539,
      "baseline_id": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 29.58,
      "baseline_stddev": 7.02,
      "deviation": -7.02,
      "metric_value": 22.56,
      "observed_on": "2025-05-04"
    },
    {
      "id": 540,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": 5.8,
      "metric_value": 53.69,
      "observed_on": "2025-05-07"
    },
    {
      "id": 541,
      "baseline_id": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.14,
      "baseline_stddev": 4.45,
      "deviation": -15.22,
      "metric_value": 19.92,
      "observed_on": "2025-05-04"
    },
    {
      "id": 542,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": 0.15,
      "metric_value": 36.38,
      "observed_on": "2025-05-05"
    },
    {
      "id": 543,
      "baseline_id": 62,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.58,
      "baseline_stddev": 4.26,
      "deviation": -2.59,
      "metric_value": 31.99,
      "observed_on": "2025-05-06"
    },
    {
      "id": 544,
      "baseline_id": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.41,
      "baseline_stddev": 3.37,
      "deviation": -2.4,
      "metric_value": 40.01,
      "observed_on": "2025-05-03"
    },
    {
      "id": 545,
      "baseline_id": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 46.25,
      "baseline_stddev": 3.74,
      "deviation": 0.11,
      "metric_value": 46.36,
      "observed_on": "2025-05-02"
    },
    {
      "id": 546,
      "baseline_id": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": 53.45,
      "baseline_stddev": 4.83,
      "deviation": -0.72,
      "metric_value": 52.73,
      "observed_on": "2025-05-04"
    },
    {
      "id": 547,
      "baseline_id": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.09,
      "baseline_stddev": 4.82,
      "deviation": -3.36,
      "metric_value": 31.73,
      "observed_on": "2025-05-04"
    },
    {
      "id": 548,
      "baseline_id": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": 46.78,
      "baseline_stddev": 5.64,
      "deviation": 9.43,
      "metric_value": 56.21,
      "observed_on": "2025-05-04"
    },
    {
      "id": 549,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": 15.25,
      "metric_value": 56.95,
      "observed_on": "2025-05-05"
    },
    {
      "id": 550,
      "baseline_id": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.83,
      "baseline_stddev": 3.59,
      "deviation": -0.76,
      "metric_value": 27.07,
      "observed_on": "2025-05-03"
    },
    {
      "id": 551,
      "baseline_id": 67,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.61,
      "baseline_stddev": 4.64,
      "deviation": 6.73,
      "metric_value": 55.34,
      "observed_on": "2025-05-04"
    },
    {
      "id": 552,
      "baseline_id": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": 36.7,
      "baseline_stddev": 8.88,
      "deviation": 10.22,
      "metric_value": 46.92,
      "observed_on": "2025-05-01"
    },
    {
      "id": 553,
      "baseline_id": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": 39.14,
      "baseline_stddev": 5.9,
      "deviation": -8.51,
      "metric_value": 30.63,
      "observed_on": "2025-05-03"
    },
    {
      "id": 554,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": -3.94,
      "metric_value": 28.57,
      "observed_on": "2025-05-08"
    },
    {
      "id": 555,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": 9.82,
      "metric_value": 41.06,
      "observed_on": "2025-05-04"
    },
    {
      "id": 556,
      "baseline_id": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.5,
      "baseline_stddev": 5.32,
      "deviation": 18.28,
      "metric_value": 70.78,
      "observed_on": "2025-05-05"
    },
    {
      "id": 557,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": -2.1,
      "metric_value": 26.83,
      "observed_on": "2025-05-06"
    },
    {
      "id": 558,
      "baseline_id": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.81,
      "baseline_stddev": 6.22,
      "deviation": 11.44,
      "metric_value": 46.25,
      "observed_on": "2025-05-02"
    },
    {
      "id": 559,
      "baseline_id": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.83,
      "baseline_stddev": 3.59,
      "deviation": 9.78,
      "metric_value": 37.61,
      "observed_on": "2025-05-04"
    },
    {
      "id": 560,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": -5.79,
      "metric_value": 35.64,
      "observed_on": "2025-05-05"
    },
    {
      "id": 561,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": 2.67,
      "metric_value": 43.88,
      "observed_on": "2025-05-05"
    },
    {
      "id": 562,
      "baseline_id": 64,
      "metric_name": "privileged_commands",
      "baseline_mean": 35.69,
      "baseline_stddev": 7.14,
      "deviation": 6.3,
      "metric_value": 41.99,
      "observed_on": "2025-05-05"
    },
    {
      "id": 563,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": 4.92,
      "metric_value": 66.82,
      "observed_on": "2025-05-07"
    },
    {
      "id": 564,
      "baseline_id": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.31,
      "baseline_stddev": 3.18,
      "deviation": 7.06,
      "metric_value": 39.37,
      "observed_on": "2025-05-03"
    },
    {
      "id": 565,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": 5.54,
      "metric_value": 40.17,
      "observed_on": "2025-05-04"
    },
    {
      "id": 566,
      "baseline_id": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "deviation": -0.89,
      "metric_value": 24.55,
      "observed_on": "2025-05-04"
    },
    {
      "id": 567,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": 7.63,
      "metric_value": 55.36,
      "observed_on": "2025-05-05"
    },
    {
      "id": 568,
      "baseline_id": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.09,
      "baseline_stddev": 4.82,
      "deviation": 7.6,
      "metric_value": 42.69,
      "observed_on": "2025-05-05"
    },
    {
      "id": 569,
      "baseline_id": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 29.58,
      "baseline_stddev": 7.02,
      "deviation": -1.51,
      "metric_value": 28.07,
      "observed_on": "2025-05-05"
    },
    {
      "id": 570,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": -2.36,
      "metric_value": 46.24,
      "observed_on": "2025-05-07"
    },
    {
      "id": 571,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": 3.11,
      "metric_value": 28.66,
      "observed_on": "2025-05-06"
    },
    {
      "id": 572,
      "baseline_id": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "deviation": 3.81,
      "metric_value": 29.25,
      "observed_on": "2025-05-05"
    },
    {
      "id": 573,
      "baseline_id": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.22,
      "baseline_stddev": 7.04,
      "deviation": 19.16,
      "metric_value": 50.38,
      "observed_on": "2025-05-05"
    },
    {
      "id": 574,
      "baseline_id": 111,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.89,
      "baseline_stddev": 8.41,
      "deviation": -15.6,
      "metric_value": 32.29,
      "observed_on": "2025-05-08"
    },
    {
      "id": 575,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": 0.23,
      "metric_value": 38.24,
      "observed_on": "2025-05-06"
    },
    {
      "id": 576,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": 2.31,
      "metric_value": 50.04,
      "observed_on": "2025-05-06"
    },
    {
      "id": 577,
      "baseline_id": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.12,
      "baseline_stddev": 5.36,
      "deviation": -1.01,
      "metric_value": 39.11,
      "observed_on": "2025-05-02"
    },
    {
      "id": 578,
      "baseline_id": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "deviation": -2.95,
      "metric_value": 33.61,
      "observed_on": "2025-05-05"
    },
    {
      "id": 579,
      "baseline_id": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "deviation": -4.53,
      "metric_value": 32.03,
      "observed_on": "2025-05-06"
    },
    {
      "id": 580,
      "baseline_id": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 52.7,
      "baseline_stddev": 8.21,
      "deviation": -1.14,
      "metric_value": 51.56,
      "observed_on": "2025-05-03"
    },
    {
      "id": 581,
      "baseline_id": 79,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.5,
      "baseline_stddev": 5.32,
      "deviation": 4.82,
      "metric_value": 57.32,
      "observed_on": "2025-05-06"
    },
    {
      "id": 582,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": -8.3,
      "metric_value": 13.56,
      "observed_on": "2025-05-04"
    },
    {
      "id": 583,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": 2.09,
      "metric_value": 27.64,
      "observed_on": "2025-05-07"
    },
    {
      "id": 584,
      "baseline_id": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.02,
      "baseline_stddev": 4.74,
      "deviation": -7.54,
      "metric_value": 29.48,
      "observed_on": "2025-05-03"
    },
    {
      "id": 585,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": -12.27,
      "metric_value": 18.97,
      "observed_on": "2025-05-05"
    },
    {
      "id": 586,
      "baseline_id": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.31,
      "baseline_stddev": 3.18,
      "deviation": 2.73,
      "metric_value": 35.04,
      "observed_on": "2025-05-04"
    },
    {
      "id": 587,
      "baseline_id": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.39,
      "baseline_stddev": 5.66,
      "deviation": -0.01,
      "metric_value": 41.38,
      "observed_on": "2025-05-01"
    },
    {
      "id": 588,
      "baseline_id": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "deviation": 1.92,
      "metric_value": 50.02,
      "observed_on": "2025-05-04"
    },
    {
      "id": 589,
      "baseline_id": 84,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.51,
      "baseline_stddev": 5.2,
      "deviation": -3,
      "metric_value": 29.51,
      "observed_on": "2025-05-09"
    },
    {
      "id": 590,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": 0.54,
      "metric_value": 29.47,
      "observed_on": "2025-05-07"
    },
    {
      "id": 591,
      "baseline_id": 123,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 32.39,
      "baseline_stddev": 6.06,
      "deviation": -9.24,
      "metric_value": 23.15,
      "observed_on": "2025-05-04"
    },
    {
      "id": 592,
      "baseline_id": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "deviation": -3.09,
      "metric_value": 31.46,
      "observed_on": "2025-05-05"
    },
    {
      "id": 593,
      "baseline_id": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.99,
      "baseline_stddev": 3.71,
      "deviation": -6.76,
      "metric_value": 41.23,
      "observed_on": "2025-05-04"
    },
    {
      "id": 594,
      "baseline_id": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "deviation": 4.17,
      "metric_value": 57.1,
      "observed_on": "2025-05-05"
    },
    {
      "id": 595,
      "baseline_id": 143,
      "metric_name": "after_hours_actions",
      "baseline_mean": 42.06,
      "baseline_stddev": 4.27,
      "deviation": 7.96,
      "metric_value": 50.02,
      "observed_on": "2025-05-04"
    },
    {
      "id": 596,
      "baseline_id": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 46.46,
      "baseline_stddev": 3.55,
      "deviation": -4.97,
      "metric_value": 41.49,
      "observed_on": "2025-05-02"
    },
    {
      "id": 597,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": -0.43,
      "metric_value": 35.31,
      "observed_on": "2025-05-08"
    },
    {
      "id": 598,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": 13.74,
      "metric_value": 35.6,
      "observed_on": "2025-05-05"
    },
    {
      "id": 599,
      "baseline_id": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": 21.65,
      "baseline_stddev": 5.31,
      "deviation": -0.51,
      "metric_value": 21.14,
      "observed_on": "2025-05-05"
    },
    {
      "id": 600,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": 2.53,
      "metric_value": 40.49,
      "observed_on": "2025-05-05"
    },
    {
      "id": 601,
      "baseline_id": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.16,
      "baseline_stddev": 5.98,
      "deviation": 2.51,
      "metric_value": 54.67,
      "observed_on": "2025-05-01"
    },
    {
      "id": 602,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": 14.11,
      "metric_value": 45.35,
      "observed_on": "2025-05-06"
    },
    {
      "id": 603,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": 3.44,
      "metric_value": 45.14,
      "observed_on": "2025-05-06"
    },
    {
      "id": 604,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": -2.57,
      "metric_value": 39.13,
      "observed_on": "2025-05-07"
    },
    {
      "id": 605,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": 3.68,
      "metric_value": 37.41,
      "observed_on": "2025-05-05"
    },
    {
      "id": 606,
      "baseline_id": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": 28.42,
      "baseline_stddev": 7.59,
      "deviation": 7.74,
      "metric_value": 36.16,
      "observed_on": "2025-05-02"
    },
    {
      "id": 607,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": -1.22,
      "metric_value": 23.03,
      "observed_on": "2025-05-05"
    },
    {
      "id": 608,
      "baseline_id": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "deviation": -0.25,
      "metric_value": 19.55,
      "observed_on": "2025-05-05"
    },
    {
      "id": 609,
      "baseline_id": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.35,
      "baseline_stddev": 3.5,
      "deviation": -2.11,
      "metric_value": 31.24,
      "observed_on": "2025-05-04"
    },
    {
      "id": 610,
      "baseline_id": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "deviation": -2.28,
      "metric_value": 40.33,
      "observed_on": "2025-05-04"
    },
    {
      "id": 611,
      "baseline_id": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.27,
      "baseline_stddev": 3,
      "deviation": 1.93,
      "metric_value": 35.2,
      "observed_on": "2025-05-03"
    },
    {
      "id": 612,
      "baseline_id": 104,
      "metric_name": "after_hours_actions",
      "baseline_mean": 27.59,
      "baseline_stddev": 8.27,
      "deviation": 0.63,
      "metric_value": 28.22,
      "observed_on": "2025-05-05"
    },
    {
      "id": 613,
      "baseline_id": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": 42.06,
      "baseline_stddev": 5.96,
      "deviation": -5.18,
      "metric_value": 36.88,
      "observed_on": "2025-05-04"
    },
    {
      "id": 614,
      "baseline_id": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "deviation": 1.58,
      "metric_value": 49.35,
      "observed_on": "2025-05-05"
    },
    {
      "id": 615,
      "baseline_id": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.39,
      "baseline_stddev": 5.66,
      "deviation": -2.97,
      "metric_value": 38.42,
      "observed_on": "2025-05-02"
    },
    {
      "id": 616,
      "baseline_id": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": 39.22,
      "baseline_stddev": 4.32,
      "deviation": -3.59,
      "metric_value": 35.63,
      "observed_on": "2025-05-02"
    },
    {
      "id": 617,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": 6.33,
      "metric_value": 47.76,
      "observed_on": "2025-05-06"
    },
    {
      "id": 618,
      "baseline_id": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.6,
      "baseline_stddev": 4.88,
      "deviation": 14.48,
      "metric_value": 49.08,
      "observed_on": "2025-05-04"
    },
    {
      "id": 619,
      "baseline_id": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 35.9,
      "baseline_stddev": 6.88,
      "deviation": 6.09,
      "metric_value": 41.99,
      "observed_on": "2025-05-02"
    },
    {
      "id": 620,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": -3.96,
      "metric_value": 37.47,
      "observed_on": "2025-05-07"
    },
    {
      "id": 621,
      "baseline_id": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 35.9,
      "baseline_stddev": 6.88,
      "deviation": 5.69,
      "metric_value": 41.59,
      "observed_on": "2025-05-03"
    },
    {
      "id": 622,
      "baseline_id": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.02,
      "baseline_stddev": 4.88,
      "deviation": 8.13,
      "metric_value": 60.15,
      "observed_on": "2025-05-04"
    },
    {
      "id": 623,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": -9.59,
      "metric_value": 37.55,
      "observed_on": "2025-05-06"
    },
    {
      "id": 624,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": 0.07,
      "metric_value": 33.8,
      "observed_on": "2025-05-06"
    },
    {
      "id": 625,
      "baseline_id": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.27,
      "baseline_stddev": 3,
      "deviation": -11.12,
      "metric_value": 22.15,
      "observed_on": "2025-05-04"
    },
    {
      "id": 626,
      "baseline_id": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.16,
      "baseline_stddev": 5.98,
      "deviation": 0.62,
      "metric_value": 52.78,
      "observed_on": "2025-05-02"
    },
    {
      "id": 627,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": -14.01,
      "metric_value": 39.83,
      "observed_on": "2025-05-08"
    },
    {
      "id": 628,
      "baseline_id": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.52,
      "baseline_stddev": 3.02,
      "deviation": -19.52,
      "metric_value": 22,
      "observed_on": "2025-05-03"
    },
    {
      "id": 629,
      "baseline_id": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": 43.96,
      "baseline_stddev": 4,
      "deviation": 12.66,
      "metric_value": 56.62,
      "observed_on": "2025-05-03"
    },
    {
      "id": 630,
      "baseline_id": 110,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.43,
      "baseline_stddev": 8.8,
      "deviation": -14.32,
      "metric_value": 27.11,
      "observed_on": "2025-05-08"
    },
    {
      "id": 631,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": 8.68,
      "metric_value": 39.14,
      "observed_on": "2025-05-06"
    },
    {
      "id": 632,
      "baseline_id": 75,
      "metric_name": "privileged_commands",
      "baseline_mean": 22.05,
      "baseline_stddev": 6.18,
      "deviation": -9.58,
      "metric_value": 12.47,
      "observed_on": "2025-05-05"
    },
    {
      "id": 633,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": -2.22,
      "metric_value": 19.64,
      "observed_on": "2025-05-06"
    },
    {
      "id": 634,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": -7.38,
      "metric_value": 30.89,
      "observed_on": "2025-05-06"
    },
    {
      "id": 635,
      "baseline_id": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.31,
      "baseline_stddev": 3.18,
      "deviation": 5.13,
      "metric_value": 37.44,
      "observed_on": "2025-05-05"
    },
    {
      "id": 636,
      "baseline_id": 43,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.67,
      "baseline_stddev": 8.45,
      "deviation": 11.57,
      "metric_value": 51.24,
      "observed_on": "2025-05-05"
    },
    {
      "id": 637,
      "baseline_id": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": 39.14,
      "baseline_stddev": 5.9,
      "deviation": -7.88,
      "metric_value": 31.26,
      "observed_on": "2025-05-04"
    },
    {
      "id": 638,
      "baseline_id": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": 48,
      "baseline_stddev": 7.45,
      "deviation": 1.03,
      "metric_value": 49.03,
      "observed_on": "2025-05-02"
    },
    {
      "id": 639,
      "baseline_id": 77,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 34.6,
      "baseline_stddev": 4.88,
      "deviation": -3.89,
      "metric_value": 30.71,
      "observed_on": "2025-05-05"
    },
    {
      "id": 640,
      "baseline_id": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "deviation": 5.64,
      "metric_value": 58.57,
      "observed_on": "2025-05-06"
    },
    {
      "id": 641,
      "baseline_id": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": 43.96,
      "baseline_stddev": 4,
      "deviation": 2.24,
      "metric_value": 46.2,
      "observed_on": "2025-05-04"
    },
    {
      "id": 642,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": -6.27,
      "metric_value": 27.75,
      "observed_on": "2025-05-06"
    },
    {
      "id": 643,
      "baseline_id": 131,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.94,
      "baseline_stddev": 3.32,
      "deviation": -9.61,
      "metric_value": 32.33,
      "observed_on": "2025-05-04"
    },
    {
      "id": 644,
      "baseline_id": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "deviation": -8.28,
      "metric_value": 23.26,
      "observed_on": "2025-05-06"
    },
    {
      "id": 645,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": 6.09,
      "metric_value": 67.99,
      "observed_on": "2025-05-08"
    },
    {
      "id": 646,
      "baseline_id": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 31.93,
      "baseline_stddev": 6.91,
      "deviation": -7.59,
      "metric_value": 24.34,
      "observed_on": "2025-05-02"
    },
    {
      "id": 647,
      "baseline_id": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "deviation": 21.68,
      "metric_value": 54.11,
      "observed_on": "2025-05-06"
    },
    {
      "id": 648,
      "baseline_id": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.01,
      "baseline_stddev": 8.84,
      "deviation": -6.06,
      "metric_value": 47.95,
      "observed_on": "2025-05-04"
    },
    {
      "id": 649,
      "baseline_id": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.79,
      "baseline_stddev": 7.87,
      "deviation": -6.06,
      "metric_value": 31.73,
      "observed_on": "2025-05-04"
    },
    {
      "id": 650,
      "baseline_id": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": 16.89,
      "baseline_stddev": 7.02,
      "deviation": -4.76,
      "metric_value": 12.13,
      "observed_on": "2025-05-03"
    },
    {
      "id": 651,
      "baseline_id": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "deviation": -2.65,
      "metric_value": 36.78,
      "observed_on": "2025-05-05"
    },
    {
      "id": 652,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": -1.7,
      "metric_value": 44.79,
      "observed_on": "2025-05-07"
    },
    {
      "id": 653,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": -2.24,
      "metric_value": 36.03,
      "observed_on": "2025-05-07"
    },
    {
      "id": 654,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": -0.83,
      "metric_value": 54.73,
      "observed_on": "2025-05-04"
    },
    {
      "id": 655,
      "baseline_id": 92,
      "metric_name": "privileged_commands",
      "baseline_mean": 42.06,
      "baseline_stddev": 5.96,
      "deviation": 4.51,
      "metric_value": 46.57,
      "observed_on": "2025-05-05"
    },
    {
      "id": 656,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": 3.72,
      "metric_value": 41.61,
      "observed_on": "2025-05-07"
    },
    {
      "id": 657,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": -0.45,
      "metric_value": 26.85,
      "observed_on": "2025-05-07"
    },
    {
      "id": 658,
      "baseline_id": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.81,
      "baseline_stddev": 6.22,
      "deviation": 6.2,
      "metric_value": 41.01,
      "observed_on": "2025-05-03"
    },
    {
      "id": 659,
      "baseline_id": 12,
      "metric_name": "privileged_commands",
      "baseline_mean": 44.31,
      "baseline_stddev": 6.55,
      "deviation": 10.06,
      "metric_value": 54.37,
      "observed_on": "2025-05-07"
    },
    {
      "id": 660,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": 9.94,
      "metric_value": 51.15,
      "observed_on": "2025-05-06"
    },
    {
      "id": 661,
      "baseline_id": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.7,
      "baseline_stddev": 8.92,
      "deviation": -2.83,
      "metric_value": 29.87,
      "observed_on": "2025-05-04"
    },
    {
      "id": 662,
      "baseline_id": 138,
      "metric_name": "after_hours_actions",
      "baseline_mean": 35.15,
      "baseline_stddev": 3.71,
      "deviation": 10.76,
      "metric_value": 45.91,
      "observed_on": "2025-05-09"
    },
    {
      "id": 663,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": 2.52,
      "metric_value": 40.48,
      "observed_on": "2025-05-06"
    },
    {
      "id": 664,
      "baseline_id": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 37.4,
      "baseline_stddev": 4.51,
      "deviation": -1.12,
      "metric_value": 36.28,
      "observed_on": "2025-05-04"
    },
    {
      "id": 665,
      "baseline_id": 55,
      "metric_name": "failed_authentications",
      "baseline_mean": 37.02,
      "baseline_stddev": 4.74,
      "deviation": -11.21,
      "metric_value": 25.81,
      "observed_on": "2025-05-04"
    },
    {
      "id": 666,
      "baseline_id": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 46.25,
      "baseline_stddev": 3.74,
      "deviation": 0.69,
      "metric_value": 46.94,
      "observed_on": "2025-05-03"
    },
    {
      "id": 667,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": 3.37,
      "metric_value": 28.92,
      "observed_on": "2025-05-08"
    },
    {
      "id": 668,
      "baseline_id": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": 28.42,
      "baseline_stddev": 7.59,
      "deviation": 1.54,
      "metric_value": 29.96,
      "observed_on": "2025-05-03"
    },
    {
      "id": 669,
      "baseline_id": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": 46.78,
      "baseline_stddev": 5.64,
      "deviation": -4.94,
      "metric_value": 41.84,
      "observed_on": "2025-05-05"
    },
    {
      "id": 670,
      "baseline_id": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "deviation": -4.65,
      "metric_value": 15.15,
      "observed_on": "2025-05-06"
    },
    {
      "id": 671,
      "baseline_id": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.76,
      "baseline_stddev": 4.46,
      "deviation": -8.96,
      "metric_value": 23.8,
      "observed_on": "2025-05-02"
    },
    {
      "id": 672,
      "baseline_id": 52,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.89,
      "baseline_stddev": 4.48,
      "deviation": 11.24,
      "metric_value": 49.13,
      "observed_on": "2025-05-08"
    },
    {
      "id": 673,
      "baseline_id": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "deviation": -0.8,
      "metric_value": 47.3,
      "observed_on": "2025-05-05"
    },
    {
      "id": 674,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": 1.98,
      "metric_value": 29.73,
      "observed_on": "2025-05-06"
    },
    {
      "id": 675,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": -7.33,
      "metric_value": 41.15,
      "observed_on": "2025-05-06"
    },
    {
      "id": 676,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": -14.98,
      "metric_value": 33.5,
      "observed_on": "2025-05-07"
    },
    {
      "id": 677,
      "baseline_id": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.76,
      "baseline_stddev": 4.46,
      "deviation": 4.15,
      "metric_value": 36.91,
      "observed_on": "2025-05-03"
    },
    {
      "id": 678,
      "baseline_id": 120,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 27.3,
      "baseline_stddev": 6.75,
      "deviation": -1.1,
      "metric_value": 26.2,
      "observed_on": "2025-05-08"
    },
    {
      "id": 679,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": -1.3,
      "metric_value": 39.73,
      "observed_on": "2025-05-07"
    },
    {
      "id": 680,
      "baseline_id": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "deviation": 4.53,
      "metric_value": 52.69,
      "observed_on": "2025-05-06"
    },
    {
      "id": 681,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": 9.28,
      "metric_value": 47.24,
      "observed_on": "2025-05-07"
    },
    {
      "id": 682,
      "baseline_id": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": 39.22,
      "baseline_stddev": 4.32,
      "deviation": -8.03,
      "metric_value": 31.19,
      "observed_on": "2025-05-03"
    },
    {
      "id": 683,
      "baseline_id": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "deviation": 22.22,
      "metric_value": 70.32,
      "observed_on": "2025-05-06"
    },
    {
      "id": 684,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": 5.81,
      "metric_value": 40.44,
      "observed_on": "2025-05-05"
    },
    {
      "id": 685,
      "baseline_id": 69,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.74,
      "baseline_stddev": 3.99,
      "deviation": -8.97,
      "metric_value": 26.77,
      "observed_on": "2025-05-09"
    },
    {
      "id": 686,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": -6.08,
      "metric_value": 34.15,
      "observed_on": "2025-05-06"
    },
    {
      "id": 687,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": -1.9,
      "metric_value": 38.33,
      "observed_on": "2025-05-07"
    },
    {
      "id": 688,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": -6.02,
      "metric_value": 28,
      "observed_on": "2025-05-07"
    },
    {
      "id": 689,
      "baseline_id": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": 50.31,
      "baseline_stddev": 4.67,
      "deviation": 7.59,
      "metric_value": 57.9,
      "observed_on": "2025-05-03"
    },
    {
      "id": 690,
      "baseline_id": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": 50.31,
      "baseline_stddev": 4.67,
      "deviation": 8.12,
      "metric_value": 58.43,
      "observed_on": "2025-05-04"
    },
    {
      "id": 691,
      "baseline_id": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.02,
      "baseline_stddev": 3.88,
      "deviation": 5.21,
      "metric_value": 30.23,
      "observed_on": "2025-05-04"
    },
    {
      "id": 692,
      "baseline_id": 66,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.35,
      "baseline_stddev": 3.5,
      "deviation": 0.62,
      "metric_value": 33.97,
      "observed_on": "2025-05-05"
    },
    {
      "id": 693,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": -6.1,
      "metric_value": 28.07,
      "observed_on": "2025-05-06"
    },
    {
      "id": 694,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": -2.23,
      "metric_value": 45.5,
      "observed_on": "2025-05-07"
    },
    {
      "id": 695,
      "baseline_id": 61,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 25.55,
      "baseline_stddev": 6.65,
      "deviation": -4.94,
      "metric_value": 20.61,
      "observed_on": "2025-05-09"
    },
    {
      "id": 696,
      "baseline_id": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.39,
      "baseline_stddev": 5.66,
      "deviation": 7.94,
      "metric_value": 49.33,
      "observed_on": "2025-05-03"
    },
    {
      "id": 697,
      "baseline_id": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": 50.31,
      "baseline_stddev": 4.67,
      "deviation": -1.88,
      "metric_value": 48.43,
      "observed_on": "2025-05-05"
    },
    {
      "id": 698,
      "baseline_id": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 55.62,
      "baseline_stddev": 4.46,
      "deviation": 2.27,
      "metric_value": 57.89,
      "observed_on": "2025-05-03"
    },
    {
      "id": 699,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": 2.81,
      "metric_value": 40.82,
      "observed_on": "2025-05-07"
    },
    {
      "id": 700,
      "baseline_id": 47,
      "metric_name": "after_hours_actions",
      "baseline_mean": 37.08,
      "baseline_stddev": 5.21,
      "deviation": -7.93,
      "metric_value": 29.15,
      "observed_on": "2025-05-04"
    },
    {
      "id": 701,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": 2.93,
      "metric_value": 36.75,
      "observed_on": "2025-05-06"
    },
    {
      "id": 702,
      "baseline_id": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 48.32,
      "baseline_stddev": 5.99,
      "deviation": 5.09,
      "metric_value": 53.41,
      "observed_on": "2025-05-03"
    },
    {
      "id": 703,
      "baseline_id": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 48.32,
      "baseline_stddev": 5.99,
      "deviation": 2.32,
      "metric_value": 50.64,
      "observed_on": "2025-05-04"
    },
    {
      "id": 704,
      "baseline_id": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "deviation": -9.33,
      "metric_value": 42.67,
      "observed_on": "2025-05-04"
    },
    {
      "id": 705,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": -4.52,
      "metric_value": 23.23,
      "observed_on": "2025-05-07"
    },
    {
      "id": 706,
      "baseline_id": 106,
      "metric_name": "after_hours_actions",
      "baseline_mean": 48.16,
      "baseline_stddev": 3.58,
      "deviation": 3.27,
      "metric_value": 51.43,
      "observed_on": "2025-05-07"
    },
    {
      "id": 707,
      "baseline_id": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": 28.55,
      "baseline_stddev": 7.85,
      "deviation": -4.78,
      "metric_value": 23.77,
      "observed_on": "2025-05-03"
    },
    {
      "id": 708,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": 2.09,
      "metric_value": 33.33,
      "observed_on": "2025-05-07"
    },
    {
      "id": 709,
      "baseline_id": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "deviation": -1.12,
      "metric_value": 46.65,
      "observed_on": "2025-05-06"
    },
    {
      "id": 710,
      "baseline_id": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": 36.7,
      "baseline_stddev": 8.88,
      "deviation": -3.85,
      "metric_value": 32.85,
      "observed_on": "2025-05-02"
    },
    {
      "id": 711,
      "baseline_id": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 52.7,
      "baseline_stddev": 8.21,
      "deviation": 0.32,
      "metric_value": 53.02,
      "observed_on": "2025-05-04"
    },
    {
      "id": 712,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": 2.63,
      "metric_value": 26.88,
      "observed_on": "2025-05-06"
    },
    {
      "id": 713,
      "baseline_id": 41,
      "metric_name": "privileged_commands",
      "baseline_mean": 32.62,
      "baseline_stddev": 7.61,
      "deviation": 7.23,
      "metric_value": 39.85,
      "observed_on": "2025-05-04"
    },
    {
      "id": 714,
      "baseline_id": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.44,
      "baseline_stddev": 3.9,
      "deviation": -9.39,
      "metric_value": 38.05,
      "observed_on": "2025-05-04"
    },
    {
      "id": 715,
      "baseline_id": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 31.93,
      "baseline_stddev": 6.91,
      "deviation": 1.5,
      "metric_value": 33.43,
      "observed_on": "2025-05-03"
    },
    {
      "id": 716,
      "baseline_id": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.29,
      "baseline_stddev": 7.94,
      "deviation": 3.79,
      "metric_value": 51.08,
      "observed_on": "2025-05-03"
    },
    {
      "id": 717,
      "baseline_id": 134,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.29,
      "baseline_stddev": 7.94,
      "deviation": 2.07,
      "metric_value": 49.36,
      "observed_on": "2025-05-04"
    },
    {
      "id": 718,
      "baseline_id": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "deviation": -0.62,
      "metric_value": 38.81,
      "observed_on": "2025-05-06"
    },
    {
      "id": 719,
      "baseline_id": 114,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.22,
      "baseline_stddev": 4.98,
      "deviation": -5.5,
      "metric_value": 36.72,
      "observed_on": "2025-05-08"
    },
    {
      "id": 720,
      "baseline_id": 50,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 49.01,
      "baseline_stddev": 6.94,
      "deviation": -3.63,
      "metric_value": 45.38,
      "observed_on": "2025-05-07"
    },
    {
      "id": 721,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": -2.9,
      "metric_value": 60.66,
      "observed_on": "2025-05-06"
    },
    {
      "id": 722,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": 2.71,
      "metric_value": 41,
      "observed_on": "2025-05-06"
    },
    {
      "id": 723,
      "baseline_id": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": 16.89,
      "baseline_stddev": 7.02,
      "deviation": -4.28,
      "metric_value": 12.61,
      "observed_on": "2025-05-04"
    },
    {
      "id": 724,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": -11.29,
      "metric_value": 16.46,
      "observed_on": "2025-05-08"
    },
    {
      "id": 725,
      "baseline_id": 81,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 29.58,
      "baseline_stddev": 7.02,
      "deviation": 10.08,
      "metric_value": 39.66,
      "observed_on": "2025-05-06"
    },
    {
      "id": 726,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": -7.34,
      "metric_value": 39.8,
      "observed_on": "2025-05-07"
    },
    {
      "id": 727,
      "baseline_id": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 46.46,
      "baseline_stddev": 3.55,
      "deviation": -10.06,
      "metric_value": 36.4,
      "observed_on": "2025-05-03"
    },
    {
      "id": 728,
      "baseline_id": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "deviation": 1.27,
      "metric_value": 35.82,
      "observed_on": "2025-05-06"
    },
    {
      "id": 729,
      "baseline_id": 103,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.81,
      "baseline_stddev": 6.22,
      "deviation": -5.43,
      "metric_value": 29.38,
      "observed_on": "2025-05-04"
    },
    {
      "id": 730,
      "baseline_id": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": 49.44,
      "baseline_stddev": 3.24,
      "deviation": -5.44,
      "metric_value": 44,
      "observed_on": "2025-05-04"
    },
    {
      "id": 731,
      "baseline_id": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": 28.42,
      "baseline_stddev": 7.59,
      "deviation": -9.52,
      "metric_value": 18.9,
      "observed_on": "2025-05-04"
    },
    {
      "id": 732,
      "baseline_id": 44,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 59.76,
      "baseline_stddev": 4.32,
      "deviation": 1.61,
      "metric_value": 61.37,
      "observed_on": "2025-05-04"
    },
    {
      "id": 733,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": 8.99,
      "metric_value": 72.55,
      "observed_on": "2025-05-07"
    },
    {
      "id": 734,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": 11.9,
      "metric_value": 63.21,
      "observed_on": "2025-05-08"
    },
    {
      "id": 735,
      "baseline_id": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "deviation": 9.14,
      "metric_value": 56.97,
      "observed_on": "2025-05-06"
    },
    {
      "id": 736,
      "baseline_id": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.84,
      "baseline_stddev": 8.29,
      "deviation": 3.77,
      "metric_value": 58.61,
      "observed_on": "2025-05-04"
    },
    {
      "id": 737,
      "baseline_id": 23,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.7,
      "baseline_stddev": 8.92,
      "deviation": -6.92,
      "metric_value": 25.78,
      "observed_on": "2025-05-05"
    },
    {
      "id": 738,
      "baseline_id": 99,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.83,
      "baseline_stddev": 3.59,
      "deviation": -5.14,
      "metric_value": 22.69,
      "observed_on": "2025-05-05"
    },
    {
      "id": 739,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": 18.82,
      "metric_value": 66.55,
      "observed_on": "2025-05-08"
    },
    {
      "id": 740,
      "baseline_id": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.76,
      "baseline_stddev": 4.46,
      "deviation": -10.84,
      "metric_value": 21.92,
      "observed_on": "2025-05-04"
    },
    {
      "id": 741,
      "baseline_id": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": 48,
      "baseline_stddev": 7.45,
      "deviation": -2.34,
      "metric_value": 45.66,
      "observed_on": "2025-05-03"
    },
    {
      "id": 742,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": 1.97,
      "metric_value": 35.79,
      "observed_on": "2025-05-07"
    },
    {
      "id": 743,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": 15.36,
      "metric_value": 63.84,
      "observed_on": "2025-05-08"
    },
    {
      "id": 744,
      "baseline_id": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.79,
      "baseline_stddev": 7.87,
      "deviation": 2.55,
      "metric_value": 40.34,
      "observed_on": "2025-05-05"
    },
    {
      "id": 745,
      "baseline_id": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "deviation": 2.54,
      "metric_value": 27.98,
      "observed_on": "2025-05-06"
    },
    {
      "id": 746,
      "baseline_id": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.01,
      "baseline_stddev": 8.84,
      "deviation": 1.99,
      "metric_value": 56,
      "observed_on": "2025-05-05"
    },
    {
      "id": 747,
      "baseline_id": 63,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.54,
      "baseline_stddev": 8.17,
      "deviation": -1.66,
      "metric_value": 29.88,
      "observed_on": "2025-05-07"
    },
    {
      "id": 748,
      "baseline_id": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.41,
      "baseline_stddev": 3.37,
      "deviation": 3.95,
      "metric_value": 46.36,
      "observed_on": "2025-05-04"
    },
    {
      "id": 749,
      "baseline_id": 27,
      "metric_name": "after_hours_actions",
      "baseline_mean": 28.42,
      "baseline_stddev": 7.59,
      "deviation": 10.16,
      "metric_value": 38.58,
      "observed_on": "2025-05-05"
    },
    {
      "id": 750,
      "baseline_id": 60,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.83,
      "baseline_stddev": 3.27,
      "deviation": 3.37,
      "metric_value": 51.2,
      "observed_on": "2025-05-07"
    },
    {
      "id": 751,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": 6.3,
      "metric_value": 42.53,
      "observed_on": "2025-05-06"
    },
    {
      "id": 752,
      "baseline_id": 20,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.44,
      "baseline_stddev": 7.26,
      "deviation": 2.98,
      "metric_value": 28.42,
      "observed_on": "2025-05-07"
    },
    {
      "id": 753,
      "baseline_id": 87,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 37.79,
      "baseline_stddev": 7.87,
      "deviation": 1.65,
      "metric_value": 39.44,
      "observed_on": "2025-05-06"
    },
    {
      "id": 754,
      "baseline_id": 45,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.31,
      "baseline_stddev": 3.18,
      "deviation": -0.26,
      "metric_value": 32.05,
      "observed_on": "2025-05-06"
    },
    {
      "id": 755,
      "baseline_id": 22,
      "metric_name": "privileged_commands",
      "baseline_mean": 40.23,
      "baseline_stddev": 3.26,
      "deviation": -0.02,
      "metric_value": 40.21,
      "observed_on": "2025-05-08"
    },
    {
      "id": 756,
      "baseline_id": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 33.91,
      "baseline_stddev": 6.69,
      "deviation": 3.6,
      "metric_value": 37.51,
      "observed_on": "2025-05-04"
    },
    {
      "id": 757,
      "baseline_id": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "deviation": 0.49,
      "metric_value": 43.1,
      "observed_on": "2025-05-05"
    },
    {
      "id": 758,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": 7.33,
      "metric_value": 41.5,
      "observed_on": "2025-05-07"
    },
    {
      "id": 759,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": -6.84,
      "metric_value": 34.37,
      "observed_on": "2025-05-07"
    },
    {
      "id": 760,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": -10.84,
      "metric_value": 32.03,
      "observed_on": "2025-05-05"
    },
    {
      "id": 761,
      "baseline_id": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "deviation": 0.3,
      "metric_value": 42.91,
      "observed_on": "2025-05-06"
    },
    {
      "id": 762,
      "baseline_id": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "deviation": 4.24,
      "metric_value": 43.58,
      "observed_on": "2025-05-06"
    },
    {
      "id": 763,
      "baseline_id": 53,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 51.31,
      "baseline_stddev": 5.5,
      "deviation": -1.64,
      "metric_value": 49.67,
      "observed_on": "2025-05-09"
    },
    {
      "id": 764,
      "baseline_id": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": 45.77,
      "baseline_stddev": 8.3,
      "deviation": -3.77,
      "metric_value": 42,
      "observed_on": "2025-05-04"
    },
    {
      "id": 765,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": 0.88,
      "metric_value": 22.74,
      "observed_on": "2025-05-07"
    },
    {
      "id": 766,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": -2.76,
      "metric_value": 52.8,
      "observed_on": "2025-05-05"
    },
    {
      "id": 767,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": -0.43,
      "metric_value": 63.13,
      "observed_on": "2025-05-08"
    },
    {
      "id": 768,
      "baseline_id": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": 33.67,
      "baseline_stddev": 8.84,
      "deviation": 10.52,
      "metric_value": 44.19,
      "observed_on": "2025-05-05"
    },
    {
      "id": 769,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": 1.56,
      "metric_value": 35.58,
      "observed_on": "2025-05-08"
    },
    {
      "id": 770,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": -6.58,
      "metric_value": 23.74,
      "observed_on": "2025-05-07"
    },
    {
      "id": 771,
      "baseline_id": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": 36.7,
      "baseline_stddev": 8.88,
      "deviation": 4.06,
      "metric_value": 40.76,
      "observed_on": "2025-05-03"
    },
    {
      "id": 772,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": 4.38,
      "metric_value": 42.34,
      "observed_on": "2025-05-08"
    },
    {
      "id": 773,
      "baseline_id": 118,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 39.43,
      "baseline_stddev": 5.98,
      "deviation": -1.94,
      "metric_value": 37.49,
      "observed_on": "2025-05-07"
    },
    {
      "id": 774,
      "baseline_id": 133,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.03,
      "baseline_stddev": 8.2,
      "deviation": 5.5,
      "metric_value": 46.53,
      "observed_on": "2025-05-08"
    },
    {
      "id": 775,
      "baseline_id": 115,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 19.8,
      "baseline_stddev": 4.17,
      "deviation": 2.86,
      "metric_value": 22.66,
      "observed_on": "2025-05-07"
    },
    {
      "id": 776,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": -7.63,
      "metric_value": 30.66,
      "observed_on": "2025-05-07"
    },
    {
      "id": 777,
      "baseline_id": 97,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 31.22,
      "baseline_stddev": 7.04,
      "deviation": 5.45,
      "metric_value": 36.67,
      "observed_on": "2025-05-06"
    },
    {
      "id": 778,
      "baseline_id": 91,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 32.43,
      "baseline_stddev": 6.6,
      "deviation": -11.45,
      "metric_value": 20.98,
      "observed_on": "2025-05-07"
    },
    {
      "id": 779,
      "baseline_id": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "deviation": 0.34,
      "metric_value": 52.94,
      "observed_on": "2025-05-06"
    },
    {
      "id": 780,
      "baseline_id": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 31.93,
      "baseline_stddev": 6.91,
      "deviation": -0.64,
      "metric_value": 31.29,
      "observed_on": "2025-05-04"
    },
    {
      "id": 781,
      "baseline_id": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": 27.18,
      "baseline_stddev": 6.73,
      "deviation": 11.83,
      "metric_value": 39.01,
      "observed_on": "2025-05-05"
    },
    {
      "id": 782,
      "baseline_id": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": 28.55,
      "baseline_stddev": 7.85,
      "deviation": 0.27,
      "metric_value": 28.82,
      "observed_on": "2025-05-04"
    },
    {
      "id": 783,
      "baseline_id": 51,
      "metric_name": "after_hours_actions",
      "baseline_mean": 53.84,
      "baseline_stddev": 5.26,
      "deviation": 10.5,
      "metric_value": 64.34,
      "observed_on": "2025-05-09"
    },
    {
      "id": 784,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": -5.61,
      "metric_value": 37.26,
      "observed_on": "2025-05-06"
    },
    {
      "id": 785,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": -13.4,
      "metric_value": 33.74,
      "observed_on": "2025-05-08"
    },
    {
      "id": 786,
      "baseline_id": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.54,
      "baseline_stddev": 5.21,
      "deviation": 9.98,
      "metric_value": 56.52,
      "observed_on": "2025-05-04"
    },
    {
      "id": 787,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": 6.82,
      "metric_value": 39.71,
      "observed_on": "2025-05-06"
    },
    {
      "id": 788,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": 4.07,
      "metric_value": 25.93,
      "observed_on": "2025-05-08"
    },
    {
      "id": 789,
      "baseline_id": 40,
      "metric_name": "after_hours_actions",
      "baseline_mean": 45.77,
      "baseline_stddev": 8.3,
      "deviation": -11.19,
      "metric_value": 34.58,
      "observed_on": "2025-05-05"
    },
    {
      "id": 790,
      "baseline_id": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.52,
      "baseline_stddev": 3.02,
      "deviation": -4.15,
      "metric_value": 37.37,
      "observed_on": "2025-05-04"
    },
    {
      "id": 791,
      "baseline_id": 14,
      "metric_name": "privileged_commands",
      "baseline_mean": 46.78,
      "baseline_stddev": 5.64,
      "deviation": -8.93,
      "metric_value": 37.85,
      "observed_on": "2025-05-06"
    },
    {
      "id": 792,
      "baseline_id": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.12,
      "baseline_stddev": 5.36,
      "deviation": 0.02,
      "metric_value": 40.14,
      "observed_on": "2025-05-03"
    },
    {
      "id": 793,
      "baseline_id": 125,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 48.6,
      "baseline_stddev": 7.36,
      "deviation": 9.62,
      "metric_value": 58.22,
      "observed_on": "2025-05-08"
    },
    {
      "id": 794,
      "baseline_id": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 33.91,
      "baseline_stddev": 6.69,
      "deviation": -4.74,
      "metric_value": 29.17,
      "observed_on": "2025-05-05"
    },
    {
      "id": 795,
      "baseline_id": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": 49.44,
      "baseline_stddev": 3.24,
      "deviation": 11.86,
      "metric_value": 61.3,
      "observed_on": "2025-05-05"
    },
    {
      "id": 796,
      "baseline_id": 95,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.02,
      "baseline_stddev": 4.36,
      "deviation": -6.65,
      "metric_value": 27.37,
      "observed_on": "2025-05-09"
    },
    {
      "id": 797,
      "baseline_id": 19,
      "metric_name": "after_hours_actions",
      "baseline_mean": 52.6,
      "baseline_stddev": 3.78,
      "deviation": -11.66,
      "metric_value": 40.94,
      "observed_on": "2025-05-07"
    },
    {
      "id": 798,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": 4.4,
      "metric_value": 28.65,
      "observed_on": "2025-05-07"
    },
    {
      "id": 799,
      "baseline_id": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.44,
      "baseline_stddev": 3.9,
      "deviation": -7.52,
      "metric_value": 39.92,
      "observed_on": "2025-05-05"
    },
    {
      "id": 800,
      "baseline_id": 100,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 27.75,
      "baseline_stddev": 4.7,
      "deviation": -1.65,
      "metric_value": 26.1,
      "observed_on": "2025-05-09"
    },
    {
      "id": 801,
      "baseline_id": 24,
      "metric_name": "privileged_commands",
      "baseline_mean": 50.31,
      "baseline_stddev": 4.67,
      "deviation": 0.28,
      "metric_value": 50.59,
      "observed_on": "2025-05-06"
    },
    {
      "id": 802,
      "baseline_id": 96,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 55.62,
      "baseline_stddev": 4.46,
      "deviation": -11.86,
      "metric_value": 43.76,
      "observed_on": "2025-05-04"
    },
    {
      "id": 803,
      "baseline_id": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": 36.7,
      "baseline_stddev": 8.88,
      "deviation": 13.93,
      "metric_value": 50.63,
      "observed_on": "2025-05-04"
    },
    {
      "id": 804,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": -11.2,
      "metric_value": 22.53,
      "observed_on": "2025-05-07"
    },
    {
      "id": 805,
      "baseline_id": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 37.4,
      "baseline_stddev": 4.51,
      "deviation": -0.1,
      "metric_value": 37.3,
      "observed_on": "2025-05-05"
    },
    {
      "id": 806,
      "baseline_id": 7,
      "metric_name": "privileged_commands",
      "baseline_mean": 28.55,
      "baseline_stddev": 7.85,
      "deviation": 3.06,
      "metric_value": 31.61,
      "observed_on": "2025-05-05"
    },
    {
      "id": 807,
      "baseline_id": 137,
      "metric_name": "failed_authentications",
      "baseline_mean": 63.56,
      "baseline_stddev": 7.66,
      "deviation": 6.48,
      "metric_value": 70.04,
      "observed_on": "2025-05-09"
    },
    {
      "id": 808,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": -7,
      "metric_value": 27.17,
      "observed_on": "2025-05-08"
    },
    {
      "id": 809,
      "baseline_id": 74,
      "metric_name": "after_hours_actions",
      "baseline_mean": 49.44,
      "baseline_stddev": 3.24,
      "deviation": 4.31,
      "metric_value": 53.75,
      "observed_on": "2025-05-06"
    },
    {
      "id": 810,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": -10.55,
      "metric_value": 20.69,
      "observed_on": "2025-05-08"
    },
    {
      "id": 811,
      "baseline_id": 48,
      "metric_name": "failed_authentications",
      "baseline_mean": 48.1,
      "baseline_stddev": 7.35,
      "deviation": 0.28,
      "metric_value": 48.38,
      "observed_on": "2025-05-07"
    },
    {
      "id": 812,
      "baseline_id": 13,
      "metric_name": "failed_authentications",
      "baseline_mean": 61.9,
      "baseline_stddev": 3.17,
      "deviation": -10.86,
      "metric_value": 51.04,
      "observed_on": "2025-05-09"
    },
    {
      "id": 813,
      "baseline_id": 35,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.56,
      "baseline_stddev": 6.43,
      "deviation": -3.81,
      "metric_value": 32.75,
      "observed_on": "2025-05-07"
    },
    {
      "id": 814,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": 3.68,
      "metric_value": 38.31,
      "observed_on": "2025-05-06"
    },
    {
      "id": 815,
      "baseline_id": 88,
      "metric_name": "privileged_commands",
      "baseline_mean": 21.65,
      "baseline_stddev": 5.31,
      "deviation": 2.53,
      "metric_value": 24.18,
      "observed_on": "2025-05-06"
    },
    {
      "id": 816,
      "baseline_id": 128,
      "metric_name": "privileged_commands",
      "baseline_mean": 36.7,
      "baseline_stddev": 8.88,
      "deviation": 1.06,
      "metric_value": 37.76,
      "observed_on": "2025-05-05"
    },
    {
      "id": 817,
      "baseline_id": 85,
      "metric_name": "failed_authentications",
      "baseline_mean": 45.12,
      "baseline_stddev": 7.21,
      "deviation": -2.11,
      "metric_value": 43.01,
      "observed_on": "2025-05-08"
    },
    {
      "id": 818,
      "baseline_id": 26,
      "metric_name": "after_hours_actions",
      "baseline_mean": 16.89,
      "baseline_stddev": 7.02,
      "deviation": 8,
      "metric_value": 24.89,
      "observed_on": "2025-05-05"
    },
    {
      "id": 819,
      "baseline_id": 112,
      "metric_name": "after_hours_actions",
      "baseline_mean": 41.7,
      "baseline_stddev": 4.92,
      "deviation": -0.73,
      "metric_value": 40.97,
      "observed_on": "2025-05-08"
    },
    {
      "id": 820,
      "baseline_id": 9,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 26.84,
      "baseline_stddev": 3.25,
      "deviation": -0.99,
      "metric_value": 25.85,
      "observed_on": "2025-05-05"
    },
    {
      "id": 821,
      "baseline_id": 130,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.54,
      "baseline_stddev": 5.21,
      "deviation": -1.47,
      "metric_value": 45.07,
      "observed_on": "2025-05-05"
    },
    {
      "id": 822,
      "baseline_id": 122,
      "metric_name": "after_hours_actions",
      "baseline_mean": 34.55,
      "baseline_stddev": 8.23,
      "deviation": -5.93,
      "metric_value": 28.62,
      "observed_on": "2025-05-07"
    },
    {
      "id": 823,
      "baseline_id": 68,
      "metric_name": "failed_authentications",
      "baseline_mean": 33.67,
      "baseline_stddev": 8.84,
      "deviation": -3.57,
      "metric_value": 30.1,
      "observed_on": "2025-05-06"
    },
    {
      "id": 824,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": 1.12,
      "metric_value": 37.35,
      "observed_on": "2025-05-07"
    },
    {
      "id": 825,
      "baseline_id": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 35.9,
      "baseline_stddev": 6.88,
      "deviation": -1.18,
      "metric_value": 34.72,
      "observed_on": "2025-05-04"
    },
    {
      "id": 826,
      "baseline_id": 49,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 37.4,
      "baseline_stddev": 4.51,
      "deviation": 2.44,
      "metric_value": 39.84,
      "observed_on": "2025-05-06"
    },
    {
      "id": 827,
      "baseline_id": 124,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 41.21,
      "baseline_stddev": 8.09,
      "deviation": 16.04,
      "metric_value": 57.25,
      "observed_on": "2025-05-08"
    },
    {
      "id": 828,
      "baseline_id": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "deviation": -16.31,
      "metric_value": 15.84,
      "observed_on": "2025-05-06"
    },
    {
      "id": 829,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": 7.18,
      "metric_value": 62.74,
      "observed_on": "2025-05-06"
    },
    {
      "id": 830,
      "baseline_id": 32,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 40.12,
      "baseline_stddev": 5.36,
      "deviation": 0.73,
      "metric_value": 40.85,
      "observed_on": "2025-05-04"
    },
    {
      "id": 831,
      "baseline_id": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.39,
      "baseline_stddev": 5.66,
      "deviation": -5.8,
      "metric_value": 35.59,
      "observed_on": "2025-05-04"
    },
    {
      "id": 832,
      "baseline_id": 107,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.93,
      "baseline_stddev": 7.64,
      "deviation": -2.73,
      "metric_value": 50.2,
      "observed_on": "2025-05-07"
    },
    {
      "id": 833,
      "baseline_id": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 46.46,
      "baseline_stddev": 3.55,
      "deviation": -8.91,
      "metric_value": 37.55,
      "observed_on": "2025-05-04"
    },
    {
      "id": 834,
      "baseline_id": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": 39.22,
      "baseline_stddev": 4.32,
      "deviation": 2.39,
      "metric_value": 41.61,
      "observed_on": "2025-05-04"
    },
    {
      "id": 835,
      "baseline_id": 105,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 36.37,
      "baseline_stddev": 7.35,
      "deviation": 7.88,
      "metric_value": 44.25,
      "observed_on": "2025-05-04"
    },
    {
      "id": 836,
      "baseline_id": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 46.25,
      "baseline_stddev": 3.74,
      "deviation": 1.41,
      "metric_value": 47.66,
      "observed_on": "2025-05-04"
    },
    {
      "id": 837,
      "baseline_id": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 44.88,
      "baseline_stddev": 5.51,
      "deviation": 1.08,
      "metric_value": 45.96,
      "observed_on": "2025-05-03"
    },
    {
      "id": 838,
      "baseline_id": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.39,
      "baseline_stddev": 5.66,
      "deviation": -12.46,
      "metric_value": 28.93,
      "observed_on": "2025-05-05"
    },
    {
      "id": 839,
      "baseline_id": 38,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.41,
      "baseline_stddev": 3.37,
      "deviation": -6.96,
      "metric_value": 35.45,
      "observed_on": "2025-05-05"
    },
    {
      "id": 840,
      "baseline_id": 101,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 52.7,
      "baseline_stddev": 8.21,
      "deviation": 3.28,
      "metric_value": 55.98,
      "observed_on": "2025-05-05"
    },
    {
      "id": 841,
      "baseline_id": 94,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 35.9,
      "baseline_stddev": 6.88,
      "deviation": 0.89,
      "metric_value": 36.79,
      "observed_on": "2025-05-05"
    },
    {
      "id": 842,
      "baseline_id": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.14,
      "baseline_stddev": 4.45,
      "deviation": 0.2,
      "metric_value": 35.34,
      "observed_on": "2025-05-05"
    },
    {
      "id": 843,
      "baseline_id": 58,
      "metric_name": "privileged_commands",
      "baseline_mean": 48.48,
      "baseline_stddev": 5.35,
      "deviation": -5.23,
      "metric_value": 43.25,
      "observed_on": "2025-05-09"
    },
    {
      "id": 844,
      "baseline_id": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.16,
      "baseline_stddev": 5.98,
      "deviation": 4.2,
      "metric_value": 56.36,
      "observed_on": "2025-05-03"
    },
    {
      "id": 845,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": -0.7,
      "metric_value": 54.86,
      "observed_on": "2025-05-07"
    },
    {
      "id": 846,
      "baseline_id": 89,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.27,
      "baseline_stddev": 3,
      "deviation": -11.22,
      "metric_value": 22.05,
      "observed_on": "2025-05-05"
    },
    {
      "id": 847,
      "baseline_id": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "deviation": 2.03,
      "metric_value": 54.03,
      "observed_on": "2025-05-05"
    },
    {
      "id": 848,
      "baseline_id": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.99,
      "baseline_stddev": 3.71,
      "deviation": -4.24,
      "metric_value": 43.75,
      "observed_on": "2025-05-05"
    },
    {
      "id": 849,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": -8.1,
      "metric_value": 26.53,
      "observed_on": "2025-05-07"
    },
    {
      "id": 850,
      "baseline_id": 39,
      "metric_name": "failed_authentications",
      "baseline_mean": 21.86,
      "baseline_stddev": 5.81,
      "deviation": 5.37,
      "metric_value": 27.23,
      "observed_on": "2025-05-09"
    },
    {
      "id": 851,
      "baseline_id": 141,
      "metric_name": "privileged_commands",
      "baseline_mean": 53.45,
      "baseline_stddev": 4.83,
      "deviation": -6.35,
      "metric_value": 47.1,
      "observed_on": "2025-05-05"
    },
    {
      "id": 852,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": 5.92,
      "metric_value": 48.79,
      "observed_on": "2025-05-07"
    },
    {
      "id": 853,
      "baseline_id": 113,
      "metric_name": "after_hours_actions",
      "baseline_mean": 39.34,
      "baseline_stddev": 6.19,
      "deviation": -3.72,
      "metric_value": 35.62,
      "observed_on": "2025-05-07"
    },
    {
      "id": 854,
      "baseline_id": 4,
      "metric_name": "privileged_commands",
      "baseline_mean": 27.18,
      "baseline_stddev": 6.73,
      "deviation": 1.95,
      "metric_value": 29.13,
      "observed_on": "2025-05-06"
    },
    {
      "id": 855,
      "baseline_id": 8,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 55.56,
      "baseline_stddev": 8.65,
      "deviation": 0.45,
      "metric_value": 56.01,
      "observed_on": "2025-05-08"
    },
    {
      "id": 856,
      "baseline_id": 6,
      "metric_name": "failed_authentications",
      "baseline_mean": 32.76,
      "baseline_stddev": 4.46,
      "deviation": -2.87,
      "metric_value": 29.89,
      "observed_on": "2025-05-05"
    },
    {
      "id": 857,
      "baseline_id": 36,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 36.23,
      "baseline_stddev": 6.56,
      "deviation": -5.27,
      "metric_value": 30.96,
      "observed_on": "2025-05-08"
    },
    {
      "id": 858,
      "baseline_id": 102,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 25.02,
      "baseline_stddev": 3.88,
      "deviation": -0.22,
      "metric_value": 24.8,
      "observed_on": "2025-05-05"
    },
    {
      "id": 859,
      "baseline_id": 78,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 30.32,
      "baseline_stddev": 5.52,
      "deviation": -1.9,
      "metric_value": 28.42,
      "observed_on": "2025-05-08"
    },
    {
      "id": 860,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": 3.64,
      "metric_value": 36.53,
      "observed_on": "2025-05-07"
    },
    {
      "id": 861,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": 1.59,
      "metric_value": 35.41,
      "observed_on": "2025-05-08"
    },
    {
      "id": 862,
      "baseline_id": 17,
      "metric_name": "failed_authentications",
      "baseline_mean": 48,
      "baseline_stddev": 7.45,
      "deviation": 2.97,
      "metric_value": 50.97,
      "observed_on": "2025-05-04"
    },
    {
      "id": 863,
      "baseline_id": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "deviation": -7.18,
      "metric_value": 44.82,
      "observed_on": "2025-05-06"
    },
    {
      "id": 864,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": 7.43,
      "metric_value": 50.3,
      "observed_on": "2025-05-08"
    },
    {
      "id": 865,
      "baseline_id": 1,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 46.46,
      "baseline_stddev": 3.55,
      "deviation": -10.63,
      "metric_value": 35.83,
      "observed_on": "2025-05-05"
    },
    {
      "id": 866,
      "baseline_id": 83,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 34.17,
      "baseline_stddev": 3.53,
      "deviation": 4.46,
      "metric_value": 38.63,
      "observed_on": "2025-05-09"
    },
    {
      "id": 867,
      "baseline_id": 93,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.09,
      "baseline_stddev": 4.82,
      "deviation": 17.53,
      "metric_value": 52.62,
      "observed_on": "2025-05-06"
    },
    {
      "id": 868,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": 5.01,
      "metric_value": 35.47,
      "observed_on": "2025-05-07"
    },
    {
      "id": 869,
      "baseline_id": 90,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 33.73,
      "baseline_stddev": 4.64,
      "deviation": 1.73,
      "metric_value": 35.46,
      "observed_on": "2025-05-08"
    },
    {
      "id": 870,
      "baseline_id": 46,
      "metric_name": "privileged_commands",
      "baseline_mean": 38.01,
      "baseline_stddev": 7.08,
      "deviation": -1.11,
      "metric_value": 36.9,
      "observed_on": "2025-05-08"
    },
    {
      "id": 871,
      "baseline_id": 59,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.73,
      "baseline_stddev": 7.79,
      "deviation": -1.69,
      "metric_value": 46.04,
      "observed_on": "2025-05-09"
    },
    {
      "id": 872,
      "baseline_id": 117,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 31.93,
      "baseline_stddev": 6.91,
      "deviation": -3.14,
      "metric_value": 28.79,
      "observed_on": "2025-05-05"
    },
    {
      "id": 873,
      "baseline_id": 25,
      "metric_name": "after_hours_actions",
      "baseline_mean": 43.96,
      "baseline_stddev": 4,
      "deviation": 13.4,
      "metric_value": 57.36,
      "observed_on": "2025-05-05"
    },
    {
      "id": 874,
      "baseline_id": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.84,
      "baseline_stddev": 8.29,
      "deviation": 5.24,
      "metric_value": 60.08,
      "observed_on": "2025-05-05"
    },
    {
      "id": 875,
      "baseline_id": 57,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 45.61,
      "baseline_stddev": 5.33,
      "deviation": -12.56,
      "metric_value": 33.05,
      "observed_on": "2025-05-07"
    },
    {
      "id": 876,
      "baseline_id": 86,
      "metric_name": "privileged_commands",
      "baseline_mean": 31.24,
      "baseline_stddev": 3.6,
      "deviation": -3.83,
      "metric_value": 27.41,
      "observed_on": "2025-05-09"
    },
    {
      "id": 877,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": -6.12,
      "metric_value": 26.77,
      "observed_on": "2025-05-08"
    },
    {
      "id": 878,
      "baseline_id": 33,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 32.15,
      "baseline_stddev": 6.52,
      "deviation": 0.37,
      "metric_value": 32.52,
      "observed_on": "2025-05-07"
    },
    {
      "id": 879,
      "baseline_id": 76,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 48.32,
      "baseline_stddev": 5.99,
      "deviation": 6.89,
      "metric_value": 55.21,
      "observed_on": "2025-05-05"
    },
    {
      "id": 880,
      "baseline_id": 42,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 46.25,
      "baseline_stddev": 3.74,
      "deviation": 4.32,
      "metric_value": 50.57,
      "observed_on": "2025-05-05"
    },
    {
      "id": 881,
      "baseline_id": 16,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.84,
      "baseline_stddev": 8.29,
      "deviation": -0.87,
      "metric_value": 53.97,
      "observed_on": "2025-05-06"
    },
    {
      "id": 882,
      "baseline_id": 135,
      "metric_name": "after_hours_actions",
      "baseline_mean": 32.89,
      "baseline_stddev": 5.26,
      "deviation": 14.06,
      "metric_value": 46.95,
      "observed_on": "2025-05-09"
    },
    {
      "id": 883,
      "baseline_id": 121,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.44,
      "baseline_stddev": 3.9,
      "deviation": 3.04,
      "metric_value": 50.48,
      "observed_on": "2025-05-06"
    },
    {
      "id": 884,
      "baseline_id": 37,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.39,
      "baseline_stddev": 5.66,
      "deviation": -3.92,
      "metric_value": 37.47,
      "observed_on": "2025-05-06"
    },
    {
      "id": 885,
      "baseline_id": 21,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 44.88,
      "baseline_stddev": 5.51,
      "deviation": -2.08,
      "metric_value": 42.8,
      "observed_on": "2025-05-04"
    },
    {
      "id": 886,
      "baseline_id": 140,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.16,
      "baseline_stddev": 5.98,
      "deviation": 4.97,
      "metric_value": 57.13,
      "observed_on": "2025-05-04"
    },
    {
      "id": 887,
      "baseline_id": 54,
      "metric_name": "privileged_commands",
      "baseline_mean": 30.46,
      "baseline_stddev": 4.78,
      "deviation": -6.61,
      "metric_value": 23.85,
      "observed_on": "2025-05-08"
    },
    {
      "id": 888,
      "baseline_id": 18,
      "metric_name": "failed_authentications",
      "baseline_mean": 39.22,
      "baseline_stddev": 4.32,
      "deviation": 1.49,
      "metric_value": 40.71,
      "observed_on": "2025-05-05"
    },
    {
      "id": 889,
      "baseline_id": 82,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 35.14,
      "baseline_stddev": 4.45,
      "deviation": -5.75,
      "metric_value": 29.39,
      "observed_on": "2025-05-06"
    },
    {
      "id": 890,
      "baseline_id": 3,
      "metric_name": "failed_authentications",
      "baseline_mean": 54.01,
      "baseline_stddev": 8.84,
      "deviation": 1.36,
      "metric_value": 55.37,
      "observed_on": "2025-05-06"
    },
    {
      "id": 891,
      "baseline_id": 2,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 47.77,
      "baseline_stddev": 8.91,
      "deviation": 8.7,
      "metric_value": 56.47,
      "observed_on": "2025-05-07"
    },
    {
      "id": 892,
      "baseline_id": 126,
      "metric_name": "after_hours_actions",
      "baseline_mean": 38.27,
      "baseline_stddev": 3.29,
      "deviation": 6.45,
      "metric_value": 44.72,
      "observed_on": "2025-05-08"
    },
    {
      "id": 893,
      "baseline_id": 139,
      "metric_name": "privileged_commands",
      "baseline_mean": 34.63,
      "baseline_stddev": 4.07,
      "deviation": 9.35,
      "metric_value": 43.98,
      "observed_on": "2025-05-08"
    },
    {
      "id": 894,
      "baseline_id": 29,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52,
      "baseline_stddev": 4.99,
      "deviation": -3.47,
      "metric_value": 48.53,
      "observed_on": "2025-05-07"
    },
    {
      "id": 895,
      "baseline_id": 129,
      "metric_name": "privileged_commands",
      "baseline_mean": 47.14,
      "baseline_stddev": 3.69,
      "deviation": -3.7,
      "metric_value": 43.44,
      "observed_on": "2025-05-09"
    },
    {
      "id": 896,
      "baseline_id": 116,
      "metric_name": "after_hours_actions",
      "baseline_mean": 33.82,
      "baseline_stddev": 6.1,
      "deviation": 0.18,
      "metric_value": 34,
      "observed_on": "2025-05-09"
    },
    {
      "id": 897,
      "baseline_id": 136,
      "metric_name": "megabytes_uploaded",
      "baseline_mean": 33.91,
      "baseline_stddev": 6.69,
      "deviation": -0.52,
      "metric_value": 33.39,
      "observed_on": "2025-05-06"
    },
    {
      "id": 898,
      "baseline_id": 73,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 42.87,
      "baseline_stddev": 5.14,
      "deviation": 4.48,
      "metric_value": 47.35,
      "observed_on": "2025-05-09"
    },
    {
      "id": 899,
      "baseline_id": 65,
      "metric_name": "after_hours_actions",
      "baseline_mean": 47.99,
      "baseline_stddev": 3.71,
      "deviation": -5.86,
      "metric_value": 42.13,
      "observed_on": "2025-05-06"
    },
    {
      "id": 900,
      "baseline_id": 80,
      "metric_name": "privileged_commands",
      "baseline_mean": 24.25,
      "baseline_stddev": 3.09,
      "deviation": -7.09,
      "metric_value": 17.16,
      "observed_on": "2025-05-08"
    },
    {
      "id": 901,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": 5.51,
      "metric_value": 34.44,
      "observed_on": "2025-05-08"
    },
    {
      "id": 902,
      "baseline_id": 132,
      "metric_name": "privileged_commands",
      "baseline_mean": 37.96,
      "baseline_stddev": 4.69,
      "deviation": -7.3,
      "metric_value": 30.66,
      "observed_on": "2025-05-09"
    },
    {
      "id": 903,
      "baseline_id": 127,
      "metric_name": "privileged_commands",
      "baseline_mean": 39.14,
      "baseline_stddev": 5.9,
      "deviation": 7.12,
      "metric_value": 46.26,
      "observed_on": "2025-05-05"
    },
    {
      "id": 904,
      "baseline_id": 11,
      "metric_name": "privileged_commands",
      "baseline_mean": 41.52,
      "baseline_stddev": 3.02,
      "deviation": 3.78,
      "metric_value": 45.3,
      "observed_on": "2025-05-05"
    },
    {
      "id": 905,
      "baseline_id": 108,
      "metric_name": "sign_ins_per_day",
      "baseline_mean": 52.02,
      "baseline_stddev": 4.88,
      "deviation": 5.99,
      "metric_value": 58.01,
      "observed_on": "2025-05-05"
    },
    {
      "id": 906,
      "baseline_id": 34,
      "metric_name": "failed_authentications",
      "baseline_mean": 46.49,
      "baseline_stddev": 3.5,
      "deviation": 2.9,
      "metric_value": 49.39,
      "observed_on": "2025-05-08"
    },
    {
      "id": 907,
      "baseline_id": 109,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 28.93,
      "baseline_stddev": 5.95,
      "deviation": 2.53,
      "metric_value": 31.46,
      "observed_on": "2025-05-09"
    },
    {
      "id": 908,
      "baseline_id": 31,
      "metric_name": "distinct_hosts_reached",
      "baseline_mean": 38.29,
      "baseline_stddev": 4.56,
      "deviation": 6.84,
      "metric_value": 45.13,
      "observed_on": "2025-05-08"
    },
    {
      "id": 909,
      "baseline_id": 10,
      "metric_name": "failed_authentications",
      "baseline_mean": 42.61,
      "baseline_stddev": 5.85,
      "deviation": -11.74,
      "metric_value": 30.87,
      "observed_on": "2025-05-07"
    }
  ]
}