Guillaume BOURGEOIS b99de4af19 fix(mock-edr-s1): map the OCSF-shaped incident payload ...

The mock now emits incidents already in an OCSF-aligned shape (src_endpoint,
device, user, rule, dst_endpoint, dns_query, cloud, metadata). Map those nested
fields through to OCSF instead of only the flat OpenAPI fields.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-27 16:20:53 +02:00

..

incident-types

feat(mock-edr-s1): EDR incident integration from OpenAPI spec

2026-06-27 16:00:04 +02:00

mappers

fix(mock-edr-s1): map the OCSF-shaped incident payload

2026-06-27 16:20:53 +02:00

scripts

feat(mock-edr-s1): EDR incident integration from OpenAPI spec

2026-06-27 16:00:04 +02:00

manifest.yaml

feat(mock-edr-s1): EDR incident integration from OpenAPI spec

2026-06-27 16:00:04 +02:00