f3nris ece2c41340 docs(mappers): time no longer dates detection ...

Eight mappers (Cortex XDR, CrowdStrike, Rapid7) still called the OCSF
`time` field "the MTTD anchor" that Riposte reads to stamp detected_at.
Riposte retired MTTD in migration 0256 and stamps detection at
ingestion for every alert; the mappings stay, as the alert's own record
of when the source saw the event. Comments only: no mapping changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-07 09:56:50 +00:00

..

get_alerts.yaml

docs(mappers): time no longer dates detection

2026-10-07 09:56:50 +00:00

get_incidents_full.yaml

docs(mappers): time no longer dates detection

2026-10-07 09:56:50 +00:00

get_incidents.yaml

docs(mappers): time no longer dates detection

2026-10-07 09:56:50 +00:00