package com.hiveops.aria.dto;

import jakarta.validation.constraints.NotBlank;
import lombok.Data;

import java.time.Instant;
import java.util.Map;

@Data
public class ThreatEventItem {

    /** e.g. "EVENT_4688", "DOOR_OPEN", "HASH_DRIFT", "IOC_PROCESS_MATCH" */
    @NotBlank
    private String signalKey;

    /** OS_EVENT | PHYSICAL | FILE_SYSTEM | COMPOSITE */
    @NotBlank
    private String eventType;

    private Map<String, Object> rawPayload;

    private Instant detectedAt;
}
