Guillaume BOURGEOIS b99de4af19 fix(mock-edr-s1): map the OCSF-shaped incident payload ...

The mock now emits incidents already in an OCSF-aligned shape (src_endpoint,
device, user, rule, dst_endpoint, dns_query, cloud, metadata). Map those nested
fields through to OCSF instead of only the flat OpenAPI fields.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-27 16:20:53 +02:00

..

list_incidents.yaml

fix(mock-edr-s1): map the OCSF-shaped incident payload

2026-06-27 16:20:53 +02:00