text: # GENERATED BY KOMAND SDK - DO NOT EDIT
  import komand
  import json
  
  
  class Component:
      DESCRIPTION = "Check for new events"
  
  
  class Input:
      
      DATE_OFFSET = "date_offset"
      FORCE_OFFSET = "force_offset"
      FREQUENCY = "frequency"
      
  
  class Output:
      
      EVENT = "event"
      
  
  class NewEventsInput(komand.Input):
      schema = json.loads("""
     {
    "type": "object",
    "title": "Variables",
    "properties": {
      "date_offset": {
        "type": "string",
        "title": "Date Offset",
        "displayType": "date",
        "description": "Set past date to pull events from that time forward",
        "format": "date-time",
        "order": 2
      },
      "force_offset": {
        "type": "boolean",
        "title": "Force Offset",
        "description": "Forces offset no matter what's in the cache",
        "order": 3
      },
      "frequency": {
        "type": "integer",
        "title": "Frequency",
        "description": "How often the trigger should check for new events in seconds",
        "default": 5,
        "order": 1
      }
    },
    "required": [
      "frequency"
    ]
  }
      """)
  
      def __init__(self):
          super(self.__class__, self).__init__(self.schema)
  
  
  class NewEventsOutput(komand.Output):
      schema = json.loads("""
     {
    "type": "object",
    "title": "Variables",
    "properties": {
      "event": {
        "$ref": "#/definitions/event",
        "title": "Event",
        "description": "New event",
        "order": 1
      }
    },
    "definitions": {
      "detector": {
        "type": "object",
        "title": "detector",
        "properties": {
          "attributes": {
            "$ref": "#/definitions/detector_attributes",
            "title": "Attributes",
            "description": "Attributes of the resource",
            "order": 3
          },
          "id": {
            "type": "integer",
            "title": "ID",
            "description": "Unique identifier of the detector",
            "order": 2
          },
          "relationships": {
            "$ref": "#/definitions/detector_relationships",
            "title": "Relationships",
            "description": "Resources related to this object",
            "order": 4
          },
          "type": {
            "type": "string",
            "title": "Type",
            "description": "Type of object",
            "order": 1
          }
        },
        "definitions": {
          "detector_attributes": {
            "type": "object",
            "title": "detector_attributes",
            "properties": {
              "attack_technique_identifiers": {
                "type": "array",
                "title": "Attack Technique Identifiers",
                "description": "The specific ATT\\u0026CK Techniques the detector maps to",
                "items": {
                  "type": "string"
                },
                "order": 4
              },
              "contributing_intelligence": {
                "type": "string",
                "title": "Contributing Intelligence",
                "description": "The type of adversary intelligence supporting this detector",
                "order": 3
              },
              "description": {
                "type": "string",
                "title": "Description",
                "description": "Description of the activity the detector identifies in Markdown format",
                "order": 2
              },
              "name": {
                "type": "string",
                "title": "Name",
                "description": "Name of the Red Canary detector",
                "order": 1
              }
            }
          },
          "detector_relationships": {
            "type": "object",
            "title": "detector_relationships",
            "properties": {
              "attack_techniques": {
                "type": "array",
                "title": "Attack Techniques",
                "description": "Attack techniques",
                "items": {
                  "$ref": "#/definitions/detector_resource_relationship"
                },
                "order": 1
              }
            },
            "definitions": {
              "detector_resource_relationship": {
                "type": "object",
                "title": "detector_resource_relationship",
                "properties": {
                  "data": {
                    "$ref": "#/definitions/detector_resource_relationship_data",
                    "title": "Data",
                    "description": "Data",
                    "order": 2
                  },
                  "links": {
                    "$ref": "#/definitions/resource_relationship_links",
                    "title": "Links",
                    "description": "Links",
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_resource_relationship": {
            "type": "object",
            "title": "detector_resource_relationship",
            "properties": {
              "data": {
                "$ref": "#/definitions/detector_resource_relationship_data",
                "title": "Data",
                "description": "Data",
                "order": 2
              },
              "links": {
                "$ref": "#/definitions/resource_relationship_links",
                "title": "Links",
                "description": "Links",
                "order": 1
              }
            },
            "definitions": {
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_resource_relationship_data": {
            "type": "object",
            "title": "detector_resource_relationship_data",
            "properties": {
              "id": {
                "type": "string",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "resource_relationship_links": {
            "type": "object",
            "title": "resource_relationship_links",
            "properties": {
              "related": {
                "type": "string",
                "title": "Related",
                "description": "Link to resource",
                "order": 1
              }
            }
          }
        }
      },
      "detector_attributes": {
        "type": "object",
        "title": "detector_attributes",
        "properties": {
          "attack_technique_identifiers": {
            "type": "array",
            "title": "Attack Technique Identifiers",
            "description": "The specific ATT\\u0026CK Techniques the detector maps to",
            "items": {
              "type": "string"
            },
            "order": 4
          },
          "contributing_intelligence": {
            "type": "string",
            "title": "Contributing Intelligence",
            "description": "The type of adversary intelligence supporting this detector",
            "order": 3
          },
          "description": {
            "type": "string",
            "title": "Description",
            "description": "Description of the activity the detector identifies in Markdown format",
            "order": 2
          },
          "name": {
            "type": "string",
            "title": "Name",
            "description": "Name of the Red Canary detector",
            "order": 1
          }
        }
      },
      "detector_relationships": {
        "type": "object",
        "title": "detector_relationships",
        "properties": {
          "attack_techniques": {
            "type": "array",
            "title": "Attack Techniques",
            "description": "Attack techniques",
            "items": {
              "$ref": "#/definitions/detector_resource_relationship"
            },
            "order": 1
          }
        },
        "definitions": {
          "detector_resource_relationship": {
            "type": "object",
            "title": "detector_resource_relationship",
            "properties": {
              "data": {
                "$ref": "#/definitions/detector_resource_relationship_data",
                "title": "Data",
                "description": "Data",
                "order": 2
              },
              "links": {
                "$ref": "#/definitions/resource_relationship_links",
                "title": "Links",
                "description": "Links",
                "order": 1
              }
            },
            "definitions": {
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_resource_relationship_data": {
            "type": "object",
            "title": "detector_resource_relationship_data",
            "properties": {
              "id": {
                "type": "string",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "resource_relationship_links": {
            "type": "object",
            "title": "resource_relationship_links",
            "properties": {
              "related": {
                "type": "string",
                "title": "Related",
                "description": "Link to resource",
                "order": 1
              }
            }
          }
        }
      },
      "detector_resource_relationship": {
        "type": "object",
        "title": "detector_resource_relationship",
        "properties": {
          "data": {
            "$ref": "#/definitions/detector_resource_relationship_data",
            "title": "Data",
            "description": "Data",
            "order": 2
          },
          "links": {
            "$ref": "#/definitions/resource_relationship_links",
            "title": "Links",
            "description": "Links",
            "order": 1
          }
        },
        "definitions": {
          "detector_resource_relationship_data": {
            "type": "object",
            "title": "detector_resource_relationship_data",
            "properties": {
              "id": {
                "type": "string",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "resource_relationship_links": {
            "type": "object",
            "title": "resource_relationship_links",
            "properties": {
              "related": {
                "type": "string",
                "title": "Related",
                "description": "Link to resource",
                "order": 1
              }
            }
          }
        }
      },
      "detector_resource_relationship_data": {
        "type": "object",
        "title": "detector_resource_relationship_data",
        "properties": {
          "id": {
            "type": "string",
            "title": "ID",
            "description": "ID",
            "order": 2
          },
          "type": {
            "type": "string",
            "title": "Type",
            "description": "Type of object",
            "order": 1
          }
        }
      },
      "event": {
        "type": "object",
        "title": "event",
        "properties": {
          "attributes": {
            "$ref": "#/definitions/event_attributes",
            "title": "Attributes",
            "description": "Attributes of the resource",
            "order": 3
          },
          "id": {
            "type": "integer",
            "title": "ID",
            "description": "Unique identifier of the event",
            "order": 2
          },
          "links": {
            "$ref": "#/definitions/event_links",
            "title": "Links",
            "description": "Resources associated with this object",
            "order": 5
          },
          "relationships": {
            "$ref": "#/definitions/event_relationships",
            "title": "Relationships",
            "description": "Resources related to this object",
            "order": 4
          },
          "type": {
            "type": "string",
            "title": "Type",
            "description": "Type of object",
            "order": 1
          }
        },
        "definitions": {
          "detector": {
            "type": "object",
            "title": "detector",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/detector_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 3
              },
              "id": {
                "type": "integer",
                "title": "ID",
                "description": "Unique identifier of the detector",
                "order": 2
              },
              "relationships": {
                "$ref": "#/definitions/detector_relationships",
                "title": "Relationships",
                "description": "Resources related to this object",
                "order": 4
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "detector_attributes": {
                "type": "object",
                "title": "detector_attributes",
                "properties": {
                  "attack_technique_identifiers": {
                    "type": "array",
                    "title": "Attack Technique Identifiers",
                    "description": "The specific ATT\\u0026CK Techniques the detector maps to",
                    "items": {
                      "type": "string"
                    },
                    "order": 4
                  },
                  "contributing_intelligence": {
                    "type": "string",
                    "title": "Contributing Intelligence",
                    "description": "The type of adversary intelligence supporting this detector",
                    "order": 3
                  },
                  "description": {
                    "type": "string",
                    "title": "Description",
                    "description": "Description of the activity the detector identifies in Markdown format",
                    "order": 2
                  },
                  "name": {
                    "type": "string",
                    "title": "Name",
                    "description": "Name of the Red Canary detector",
                    "order": 1
                  }
                }
              },
              "detector_relationships": {
                "type": "object",
                "title": "detector_relationships",
                "properties": {
                  "attack_techniques": {
                    "type": "array",
                    "title": "Attack Techniques",
                    "description": "Attack techniques",
                    "items": {
                      "$ref": "#/definitions/detector_resource_relationship"
                    },
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship": {
                    "type": "object",
                    "title": "detector_resource_relationship",
                    "properties": {
                      "data": {
                        "$ref": "#/definitions/detector_resource_relationship_data",
                        "title": "Data",
                        "description": "Data",
                        "order": 2
                      },
                      "links": {
                        "$ref": "#/definitions/resource_relationship_links",
                        "title": "Links",
                        "description": "Links",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "detector_resource_relationship_data": {
                        "type": "object",
                        "title": "detector_resource_relationship_data",
                        "properties": {
                          "id": {
                            "type": "string",
                            "title": "ID",
                            "description": "ID",
                            "order": 2
                          },
                          "type": {
                            "type": "string",
                            "title": "Type",
                            "description": "Type of object",
                            "order": 1
                          }
                        }
                      },
                      "resource_relationship_links": {
                        "type": "object",
                        "title": "resource_relationship_links",
                        "properties": {
                          "related": {
                            "type": "string",
                            "title": "Related",
                            "description": "Link to resource",
                            "order": 1
                          }
                        }
                      }
                    }
                  },
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship": {
                "type": "object",
                "title": "detector_resource_relationship",
                "properties": {
                  "data": {
                    "$ref": "#/definitions/detector_resource_relationship_data",
                    "title": "Data",
                    "description": "Data",
                    "order": 2
                  },
                  "links": {
                    "$ref": "#/definitions/resource_relationship_links",
                    "title": "Links",
                    "description": "Links",
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_attributes": {
            "type": "object",
            "title": "detector_attributes",
            "properties": {
              "attack_technique_identifiers": {
                "type": "array",
                "title": "Attack Technique Identifiers",
                "description": "The specific ATT\\u0026CK Techniques the detector maps to",
                "items": {
                  "type": "string"
                },
                "order": 4
              },
              "contributing_intelligence": {
                "type": "string",
                "title": "Contributing Intelligence",
                "description": "The type of adversary intelligence supporting this detector",
                "order": 3
              },
              "description": {
                "type": "string",
                "title": "Description",
                "description": "Description of the activity the detector identifies in Markdown format",
                "order": 2
              },
              "name": {
                "type": "string",
                "title": "Name",
                "description": "Name of the Red Canary detector",
                "order": 1
              }
            }
          },
          "detector_relationships": {
            "type": "object",
            "title": "detector_relationships",
            "properties": {
              "attack_techniques": {
                "type": "array",
                "title": "Attack Techniques",
                "description": "Attack techniques",
                "items": {
                  "$ref": "#/definitions/detector_resource_relationship"
                },
                "order": 1
              }
            },
            "definitions": {
              "detector_resource_relationship": {
                "type": "object",
                "title": "detector_resource_relationship",
                "properties": {
                  "data": {
                    "$ref": "#/definitions/detector_resource_relationship_data",
                    "title": "Data",
                    "description": "Data",
                    "order": 2
                  },
                  "links": {
                    "$ref": "#/definitions/resource_relationship_links",
                    "title": "Links",
                    "description": "Links",
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_resource_relationship": {
            "type": "object",
            "title": "detector_resource_relationship",
            "properties": {
              "data": {
                "$ref": "#/definitions/detector_resource_relationship_data",
                "title": "Data",
                "description": "Data",
                "order": 2
              },
              "links": {
                "$ref": "#/definitions/resource_relationship_links",
                "title": "Links",
                "description": "Links",
                "order": 1
              }
            },
            "definitions": {
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_resource_relationship_data": {
            "type": "object",
            "title": "detector_resource_relationship_data",
            "properties": {
              "id": {
                "type": "string",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "event_attributes": {
            "type": "object",
            "title": "event_attributes",
            "properties": {
              "detectors": {
                "type": "array",
                "title": "Detectors",
                "description": "Detectors and MITRE ATT\\u0026CK tactics associated with the event",
                "items": {
                  "$ref": "#/definitions/detector"
                },
                "order": 2
              },
              "process": {
                "$ref": "#/definitions/operating_system_process",
                "title": "Process",
                "description": "The process associated with the event",
                "order": 1
              }
            },
            "definitions": {
              "detector": {
                "type": "object",
                "title": "detector",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/detector_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 3
                  },
                  "id": {
                    "type": "integer",
                    "title": "ID",
                    "description": "Unique identifier of the detector",
                    "order": 2
                  },
                  "relationships": {
                    "$ref": "#/definitions/detector_relationships",
                    "title": "Relationships",
                    "description": "Resources related to this object",
                    "order": 4
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_attributes": {
                    "type": "object",
                    "title": "detector_attributes",
                    "properties": {
                      "attack_technique_identifiers": {
                        "type": "array",
                        "title": "Attack Technique Identifiers",
                        "description": "The specific ATT\\u0026CK Techniques the detector maps to",
                        "items": {
                          "type": "string"
                        },
                        "order": 4
                      },
                      "contributing_intelligence": {
                        "type": "string",
                        "title": "Contributing Intelligence",
                        "description": "The type of adversary intelligence supporting this detector",
                        "order": 3
                      },
                      "description": {
                        "type": "string",
                        "title": "Description",
                        "description": "Description of the activity the detector identifies in Markdown format",
                        "order": 2
                      },
                      "name": {
                        "type": "string",
                        "title": "Name",
                        "description": "Name of the Red Canary detector",
                        "order": 1
                      }
                    }
                  },
                  "detector_relationships": {
                    "type": "object",
                    "title": "detector_relationships",
                    "properties": {
                      "attack_techniques": {
                        "type": "array",
                        "title": "Attack Techniques",
                        "description": "Attack techniques",
                        "items": {
                          "$ref": "#/definitions/detector_resource_relationship"
                        },
                        "order": 1
                      }
                    },
                    "definitions": {
                      "detector_resource_relationship": {
                        "type": "object",
                        "title": "detector_resource_relationship",
                        "properties": {
                          "data": {
                            "$ref": "#/definitions/detector_resource_relationship_data",
                            "title": "Data",
                            "description": "Data",
                            "order": 2
                          },
                          "links": {
                            "$ref": "#/definitions/resource_relationship_links",
                            "title": "Links",
                            "description": "Links",
                            "order": 1
                          }
                        },
                        "definitions": {
                          "detector_resource_relationship_data": {
                            "type": "object",
                            "title": "detector_resource_relationship_data",
                            "properties": {
                              "id": {
                                "type": "string",
                                "title": "ID",
                                "description": "ID",
                                "order": 2
                              },
                              "type": {
                                "type": "string",
                                "title": "Type",
                                "description": "Type of object",
                                "order": 1
                              }
                            }
                          },
                          "resource_relationship_links": {
                            "type": "object",
                            "title": "resource_relationship_links",
                            "properties": {
                              "related": {
                                "type": "string",
                                "title": "Related",
                                "description": "Link to resource",
                                "order": 1
                              }
                            }
                          }
                        }
                      },
                      "detector_resource_relationship_data": {
                        "type": "object",
                        "title": "detector_resource_relationship_data",
                        "properties": {
                          "id": {
                            "type": "string",
                            "title": "ID",
                            "description": "ID",
                            "order": 2
                          },
                          "type": {
                            "type": "string",
                            "title": "Type",
                            "description": "Type of object",
                            "order": 1
                          }
                        }
                      },
                      "resource_relationship_links": {
                        "type": "object",
                        "title": "resource_relationship_links",
                        "properties": {
                          "related": {
                            "type": "string",
                            "title": "Related",
                            "description": "Link to resource",
                            "order": 1
                          }
                        }
                      }
                    }
                  },
                  "detector_resource_relationship": {
                    "type": "object",
                    "title": "detector_resource_relationship",
                    "properties": {
                      "data": {
                        "$ref": "#/definitions/detector_resource_relationship_data",
                        "title": "Data",
                        "description": "Data",
                        "order": 2
                      },
                      "links": {
                        "$ref": "#/definitions/resource_relationship_links",
                        "title": "Links",
                        "description": "Links",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "detector_resource_relationship_data": {
                        "type": "object",
                        "title": "detector_resource_relationship_data",
                        "properties": {
                          "id": {
                            "type": "string",
                            "title": "ID",
                            "description": "ID",
                            "order": 2
                          },
                          "type": {
                            "type": "string",
                            "title": "Type",
                            "description": "Type of object",
                            "order": 1
                          }
                        }
                      },
                      "resource_relationship_links": {
                        "type": "object",
                        "title": "resource_relationship_links",
                        "properties": {
                          "related": {
                            "type": "string",
                            "title": "Related",
                            "description": "Link to resource",
                            "order": 1
                          }
                        }
                      }
                    }
                  },
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_attributes": {
                "type": "object",
                "title": "detector_attributes",
                "properties": {
                  "attack_technique_identifiers": {
                    "type": "array",
                    "title": "Attack Technique Identifiers",
                    "description": "The specific ATT\\u0026CK Techniques the detector maps to",
                    "items": {
                      "type": "string"
                    },
                    "order": 4
                  },
                  "contributing_intelligence": {
                    "type": "string",
                    "title": "Contributing Intelligence",
                    "description": "The type of adversary intelligence supporting this detector",
                    "order": 3
                  },
                  "description": {
                    "type": "string",
                    "title": "Description",
                    "description": "Description of the activity the detector identifies in Markdown format",
                    "order": 2
                  },
                  "name": {
                    "type": "string",
                    "title": "Name",
                    "description": "Name of the Red Canary detector",
                    "order": 1
                  }
                }
              },
              "detector_relationships": {
                "type": "object",
                "title": "detector_relationships",
                "properties": {
                  "attack_techniques": {
                    "type": "array",
                    "title": "Attack Techniques",
                    "description": "Attack techniques",
                    "items": {
                      "$ref": "#/definitions/detector_resource_relationship"
                    },
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship": {
                    "type": "object",
                    "title": "detector_resource_relationship",
                    "properties": {
                      "data": {
                        "$ref": "#/definitions/detector_resource_relationship_data",
                        "title": "Data",
                        "description": "Data",
                        "order": 2
                      },
                      "links": {
                        "$ref": "#/definitions/resource_relationship_links",
                        "title": "Links",
                        "description": "Links",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "detector_resource_relationship_data": {
                        "type": "object",
                        "title": "detector_resource_relationship_data",
                        "properties": {
                          "id": {
                            "type": "string",
                            "title": "ID",
                            "description": "ID",
                            "order": 2
                          },
                          "type": {
                            "type": "string",
                            "title": "Type",
                            "description": "Type of object",
                            "order": 1
                          }
                        }
                      },
                      "resource_relationship_links": {
                        "type": "object",
                        "title": "resource_relationship_links",
                        "properties": {
                          "related": {
                            "type": "string",
                            "title": "Related",
                            "description": "Link to resource",
                            "order": 1
                          }
                        }
                      }
                    }
                  },
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship": {
                "type": "object",
                "title": "detector_resource_relationship",
                "properties": {
                  "data": {
                    "$ref": "#/definitions/detector_resource_relationship_data",
                    "title": "Data",
                    "description": "Data",
                    "order": 2
                  },
                  "links": {
                    "$ref": "#/definitions/resource_relationship_links",
                    "title": "Links",
                    "description": "Links",
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "file": {
                "id": "file",
                "type": "object",
                "title": "File",
                "description": "File Object",
                "properties": {
                  "content": {
                    "type": "string",
                    "title": "Content",
                    "description": "File contents",
                    "format": "bytes"
                  },
                  "filename": {
                    "type": "string",
                    "title": "Filename",
                    "description": "Name of file"
                  }
                }
              },
              "operating_system_process": {
                "type": "object",
                "title": "operating_system_process",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/operating_system_process_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "file": {
                    "id": "file",
                    "type": "object",
                    "title": "File",
                    "description": "File Object",
                    "properties": {
                      "content": {
                        "type": "string",
                        "title": "Content",
                        "description": "File contents",
                        "format": "bytes"
                      },
                      "filename": {
                        "type": "string",
                        "title": "Filename",
                        "description": "Name of file"
                      }
                    }
                  },
                  "operating_system_process_attributes": {
                    "type": "object",
                    "title": "operating_system_process_attributes",
                    "properties": {
                      "command_line": {
                        "$ref": "#/definitions/process_command_line",
                        "title": "Command Line",
                        "description": "The command line associated with the process",
                        "order": 4
                      },
                      "image": {
                        "$ref": "#/definitions/file",
                        "title": "Image",
                        "description": "The process image associated with the activity, if applicable and known",
                        "order": 3
                      },
                      "operating_system_pid": {
                        "type": "integer",
                        "title": "Operating System PID",
                        "description": "The PID of the process as reported by the operating system",
                        "order": 2
                      },
                      "started_at": {
                        "type": "string",
                        "title": "Started At",
                        "displayType": "date",
                        "description": "The time the process started",
                        "format": "date-time",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "file": {
                        "id": "file",
                        "type": "object",
                        "title": "File",
                        "description": "File Object",
                        "properties": {
                          "content": {
                            "type": "string",
                            "title": "Content",
                            "description": "File contents",
                            "format": "bytes"
                          },
                          "filename": {
                            "type": "string",
                            "title": "Filename",
                            "description": "Name of file"
                          }
                        }
                      },
                      "process_command_line": {
                        "type": "object",
                        "title": "process_command_line",
                        "properties": {
                          "attributes": {
                            "$ref": "#/definitions/process_command_line_attributes",
                            "title": "Attributes",
                            "description": "Attributes of the resource",
                            "order": 2
                          },
                          "type": {
                            "type": "string",
                            "title": "Type",
                            "description": "Type of object",
                            "order": 1
                          }
                        },
                        "definitions": {
                          "process_command_line_attributes": {
                            "type": "object",
                            "title": "process_command_line_attributes",
                            "properties": {
                              "command_line": {
                                "type": "string",
                                "title": "Command Line",
                                "description": "The command line associated with the activity, if applicable and known",
                                "order": 1
                              },
                              "command_line_decoded": {
                                "type": "string",
                                "title": "Command Line Decoded",
                                "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                                "order": 2
                              },
                              "identified_encodings": {
                                "type": "array",
                                "title": "Identifier Encodings",
                                "description": "Possible encodings that may have been used throughout the command line",
                                "items": {
                                  "type": "string"
                                },
                                "order": 3
                              }
                            }
                          }
                        }
                      },
                      "process_command_line_attributes": {
                        "type": "object",
                        "title": "process_command_line_attributes",
                        "properties": {
                          "command_line": {
                            "type": "string",
                            "title": "Command Line",
                            "description": "The command line associated with the activity, if applicable and known",
                            "order": 1
                          },
                          "command_line_decoded": {
                            "type": "string",
                            "title": "Command Line Decoded",
                            "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                            "order": 2
                          },
                          "identified_encodings": {
                            "type": "array",
                            "title": "Identifier Encodings",
                            "description": "Possible encodings that may have been used throughout the command line",
                            "items": {
                              "type": "string"
                            },
                            "order": 3
                          }
                        }
                      }
                    }
                  },
                  "process_command_line": {
                    "type": "object",
                    "title": "process_command_line",
                    "properties": {
                      "attributes": {
                        "$ref": "#/definitions/process_command_line_attributes",
                        "title": "Attributes",
                        "description": "Attributes of the resource",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "process_command_line_attributes": {
                        "type": "object",
                        "title": "process_command_line_attributes",
                        "properties": {
                          "command_line": {
                            "type": "string",
                            "title": "Command Line",
                            "description": "The command line associated with the activity, if applicable and known",
                            "order": 1
                          },
                          "command_line_decoded": {
                            "type": "string",
                            "title": "Command Line Decoded",
                            "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                            "order": 2
                          },
                          "identified_encodings": {
                            "type": "array",
                            "title": "Identifier Encodings",
                            "description": "Possible encodings that may have been used throughout the command line",
                            "items": {
                              "type": "string"
                            },
                            "order": 3
                          }
                        }
                      }
                    }
                  },
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "operating_system_process_attributes": {
                "type": "object",
                "title": "operating_system_process_attributes",
                "properties": {
                  "command_line": {
                    "$ref": "#/definitions/process_command_line",
                    "title": "Command Line",
                    "description": "The command line associated with the process",
                    "order": 4
                  },
                  "image": {
                    "$ref": "#/definitions/file",
                    "title": "Image",
                    "description": "The process image associated with the activity, if applicable and known",
                    "order": 3
                  },
                  "operating_system_pid": {
                    "type": "integer",
                    "title": "Operating System PID",
                    "description": "The PID of the process as reported by the operating system",
                    "order": 2
                  },
                  "started_at": {
                    "type": "string",
                    "title": "Started At",
                    "displayType": "date",
                    "description": "The time the process started",
                    "format": "date-time",
                    "order": 1
                  }
                },
                "definitions": {
                  "file": {
                    "id": "file",
                    "type": "object",
                    "title": "File",
                    "description": "File Object",
                    "properties": {
                      "content": {
                        "type": "string",
                        "title": "Content",
                        "description": "File contents",
                        "format": "bytes"
                      },
                      "filename": {
                        "type": "string",
                        "title": "Filename",
                        "description": "Name of file"
                      }
                    }
                  },
                  "process_command_line": {
                    "type": "object",
                    "title": "process_command_line",
                    "properties": {
                      "attributes": {
                        "$ref": "#/definitions/process_command_line_attributes",
                        "title": "Attributes",
                        "description": "Attributes of the resource",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "process_command_line_attributes": {
                        "type": "object",
                        "title": "process_command_line_attributes",
                        "properties": {
                          "command_line": {
                            "type": "string",
                            "title": "Command Line",
                            "description": "The command line associated with the activity, if applicable and known",
                            "order": 1
                          },
                          "command_line_decoded": {
                            "type": "string",
                            "title": "Command Line Decoded",
                            "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                            "order": 2
                          },
                          "identified_encodings": {
                            "type": "array",
                            "title": "Identifier Encodings",
                            "description": "Possible encodings that may have been used throughout the command line",
                            "items": {
                              "type": "string"
                            },
                            "order": 3
                          }
                        }
                      }
                    }
                  },
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line": {
                "type": "object",
                "title": "process_command_line",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/process_command_line_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "event_links": {
            "type": "object",
            "title": "event_links",
            "properties": {
              "self": {
                "$ref": "#/definitions/resource_link",
                "title": "Self",
                "description": "Self",
                "order": 1
              }
            },
            "definitions": {
              "resource_link": {
                "type": "object",
                "title": "resource_link",
                "properties": {
                  "href": {
                    "type": "string",
                    "title": "Href",
                    "description": "Link to a resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "event_relationships": {
            "type": "object",
            "title": "event_relationships",
            "properties": {
              "endpoint": {
                "$ref": "#/definitions/resource_relationship",
                "title": "Endpoint",
                "description": "Endpoint",
                "order": 1
              },
              "endpoint_user": {
                "$ref": "#/definitions/resource_relationship",
                "title": "Endpoint User",
                "description": "Endpoint user",
                "order": 2
              }
            },
            "definitions": {
              "resource_relationship": {
                "type": "object",
                "title": "resource_relationship",
                "properties": {
                  "data": {
                    "$ref": "#/definitions/resource_relationship_data",
                    "title": "Data",
                    "description": "Data",
                    "order": 2
                  },
                  "links": {
                    "$ref": "#/definitions/resource_relationship_links",
                    "title": "Links",
                    "description": "Links",
                    "order": 1
                  }
                },
                "definitions": {
                  "resource_relationship_data": {
                    "type": "object",
                    "title": "resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "integer",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "resource_relationship_data": {
                "type": "object",
                "title": "resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "integer",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "file": {
            "id": "file",
            "type": "object",
            "title": "File",
            "description": "File Object",
            "properties": {
              "content": {
                "type": "string",
                "title": "Content",
                "description": "File contents",
                "format": "bytes"
              },
              "filename": {
                "type": "string",
                "title": "Filename",
                "description": "Name of file"
              }
            }
          },
          "operating_system_process": {
            "type": "object",
            "title": "operating_system_process",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/operating_system_process_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "file": {
                "id": "file",
                "type": "object",
                "title": "File",
                "description": "File Object",
                "properties": {
                  "content": {
                    "type": "string",
                    "title": "Content",
                    "description": "File contents",
                    "format": "bytes"
                  },
                  "filename": {
                    "type": "string",
                    "title": "Filename",
                    "description": "Name of file"
                  }
                }
              },
              "operating_system_process_attributes": {
                "type": "object",
                "title": "operating_system_process_attributes",
                "properties": {
                  "command_line": {
                    "$ref": "#/definitions/process_command_line",
                    "title": "Command Line",
                    "description": "The command line associated with the process",
                    "order": 4
                  },
                  "image": {
                    "$ref": "#/definitions/file",
                    "title": "Image",
                    "description": "The process image associated with the activity, if applicable and known",
                    "order": 3
                  },
                  "operating_system_pid": {
                    "type": "integer",
                    "title": "Operating System PID",
                    "description": "The PID of the process as reported by the operating system",
                    "order": 2
                  },
                  "started_at": {
                    "type": "string",
                    "title": "Started At",
                    "displayType": "date",
                    "description": "The time the process started",
                    "format": "date-time",
                    "order": 1
                  }
                },
                "definitions": {
                  "file": {
                    "id": "file",
                    "type": "object",
                    "title": "File",
                    "description": "File Object",
                    "properties": {
                      "content": {
                        "type": "string",
                        "title": "Content",
                        "description": "File contents",
                        "format": "bytes"
                      },
                      "filename": {
                        "type": "string",
                        "title": "Filename",
                        "description": "Name of file"
                      }
                    }
                  },
                  "process_command_line": {
                    "type": "object",
                    "title": "process_command_line",
                    "properties": {
                      "attributes": {
                        "$ref": "#/definitions/process_command_line_attributes",
                        "title": "Attributes",
                        "description": "Attributes of the resource",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "process_command_line_attributes": {
                        "type": "object",
                        "title": "process_command_line_attributes",
                        "properties": {
                          "command_line": {
                            "type": "string",
                            "title": "Command Line",
                            "description": "The command line associated with the activity, if applicable and known",
                            "order": 1
                          },
                          "command_line_decoded": {
                            "type": "string",
                            "title": "Command Line Decoded",
                            "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                            "order": 2
                          },
                          "identified_encodings": {
                            "type": "array",
                            "title": "Identifier Encodings",
                            "description": "Possible encodings that may have been used throughout the command line",
                            "items": {
                              "type": "string"
                            },
                            "order": 3
                          }
                        }
                      }
                    }
                  },
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line": {
                "type": "object",
                "title": "process_command_line",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/process_command_line_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "operating_system_process_attributes": {
            "type": "object",
            "title": "operating_system_process_attributes",
            "properties": {
              "command_line": {
                "$ref": "#/definitions/process_command_line",
                "title": "Command Line",
                "description": "The command line associated with the process",
                "order": 4
              },
              "image": {
                "$ref": "#/definitions/file",
                "title": "Image",
                "description": "The process image associated with the activity, if applicable and known",
                "order": 3
              },
              "operating_system_pid": {
                "type": "integer",
                "title": "Operating System PID",
                "description": "The PID of the process as reported by the operating system",
                "order": 2
              },
              "started_at": {
                "type": "string",
                "title": "Started At",
                "displayType": "date",
                "description": "The time the process started",
                "format": "date-time",
                "order": 1
              }
            },
            "definitions": {
              "file": {
                "id": "file",
                "type": "object",
                "title": "File",
                "description": "File Object",
                "properties": {
                  "content": {
                    "type": "string",
                    "title": "Content",
                    "description": "File contents",
                    "format": "bytes"
                  },
                  "filename": {
                    "type": "string",
                    "title": "Filename",
                    "description": "Name of file"
                  }
                }
              },
              "process_command_line": {
                "type": "object",
                "title": "process_command_line",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/process_command_line_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "process_command_line": {
            "type": "object",
            "title": "process_command_line",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/process_command_line_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "process_command_line_attributes": {
            "type": "object",
            "title": "process_command_line_attributes",
            "properties": {
              "command_line": {
                "type": "string",
                "title": "Command Line",
                "description": "The command line associated with the activity, if applicable and known",
                "order": 1
              },
              "command_line_decoded": {
                "type": "string",
                "title": "Command Line Decoded",
                "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                "order": 2
              },
              "identified_encodings": {
                "type": "array",
                "title": "Identifier Encodings",
                "description": "Possible encodings that may have been used throughout the command line",
                "items": {
                  "type": "string"
                },
                "order": 3
              }
            }
          },
          "resource_link": {
            "type": "object",
            "title": "resource_link",
            "properties": {
              "href": {
                "type": "string",
                "title": "Href",
                "description": "Link to a resource",
                "order": 1
              }
            }
          },
          "resource_relationship": {
            "type": "object",
            "title": "resource_relationship",
            "properties": {
              "data": {
                "$ref": "#/definitions/resource_relationship_data",
                "title": "Data",
                "description": "Data",
                "order": 2
              },
              "links": {
                "$ref": "#/definitions/resource_relationship_links",
                "title": "Links",
                "description": "Links",
                "order": 1
              }
            },
            "definitions": {
              "resource_relationship_data": {
                "type": "object",
                "title": "resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "integer",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "resource_relationship_data": {
            "type": "object",
            "title": "resource_relationship_data",
            "properties": {
              "id": {
                "type": "integer",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "resource_relationship_links": {
            "type": "object",
            "title": "resource_relationship_links",
            "properties": {
              "related": {
                "type": "string",
                "title": "Related",
                "description": "Link to resource",
                "order": 1
              }
            }
          }
        }
      },
      "event_attributes": {
        "type": "object",
        "title": "event_attributes",
        "properties": {
          "detectors": {
            "type": "array",
            "title": "Detectors",
            "description": "Detectors and MITRE ATT\\u0026CK tactics associated with the event",
            "items": {
              "$ref": "#/definitions/detector"
            },
            "order": 2
          },
          "process": {
            "$ref": "#/definitions/operating_system_process",
            "title": "Process",
            "description": "The process associated with the event",
            "order": 1
          }
        },
        "definitions": {
          "detector": {
            "type": "object",
            "title": "detector",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/detector_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 3
              },
              "id": {
                "type": "integer",
                "title": "ID",
                "description": "Unique identifier of the detector",
                "order": 2
              },
              "relationships": {
                "$ref": "#/definitions/detector_relationships",
                "title": "Relationships",
                "description": "Resources related to this object",
                "order": 4
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "detector_attributes": {
                "type": "object",
                "title": "detector_attributes",
                "properties": {
                  "attack_technique_identifiers": {
                    "type": "array",
                    "title": "Attack Technique Identifiers",
                    "description": "The specific ATT\\u0026CK Techniques the detector maps to",
                    "items": {
                      "type": "string"
                    },
                    "order": 4
                  },
                  "contributing_intelligence": {
                    "type": "string",
                    "title": "Contributing Intelligence",
                    "description": "The type of adversary intelligence supporting this detector",
                    "order": 3
                  },
                  "description": {
                    "type": "string",
                    "title": "Description",
                    "description": "Description of the activity the detector identifies in Markdown format",
                    "order": 2
                  },
                  "name": {
                    "type": "string",
                    "title": "Name",
                    "description": "Name of the Red Canary detector",
                    "order": 1
                  }
                }
              },
              "detector_relationships": {
                "type": "object",
                "title": "detector_relationships",
                "properties": {
                  "attack_techniques": {
                    "type": "array",
                    "title": "Attack Techniques",
                    "description": "Attack techniques",
                    "items": {
                      "$ref": "#/definitions/detector_resource_relationship"
                    },
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship": {
                    "type": "object",
                    "title": "detector_resource_relationship",
                    "properties": {
                      "data": {
                        "$ref": "#/definitions/detector_resource_relationship_data",
                        "title": "Data",
                        "description": "Data",
                        "order": 2
                      },
                      "links": {
                        "$ref": "#/definitions/resource_relationship_links",
                        "title": "Links",
                        "description": "Links",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "detector_resource_relationship_data": {
                        "type": "object",
                        "title": "detector_resource_relationship_data",
                        "properties": {
                          "id": {
                            "type": "string",
                            "title": "ID",
                            "description": "ID",
                            "order": 2
                          },
                          "type": {
                            "type": "string",
                            "title": "Type",
                            "description": "Type of object",
                            "order": 1
                          }
                        }
                      },
                      "resource_relationship_links": {
                        "type": "object",
                        "title": "resource_relationship_links",
                        "properties": {
                          "related": {
                            "type": "string",
                            "title": "Related",
                            "description": "Link to resource",
                            "order": 1
                          }
                        }
                      }
                    }
                  },
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship": {
                "type": "object",
                "title": "detector_resource_relationship",
                "properties": {
                  "data": {
                    "$ref": "#/definitions/detector_resource_relationship_data",
                    "title": "Data",
                    "description": "Data",
                    "order": 2
                  },
                  "links": {
                    "$ref": "#/definitions/resource_relationship_links",
                    "title": "Links",
                    "description": "Links",
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_attributes": {
            "type": "object",
            "title": "detector_attributes",
            "properties": {
              "attack_technique_identifiers": {
                "type": "array",
                "title": "Attack Technique Identifiers",
                "description": "The specific ATT\\u0026CK Techniques the detector maps to",
                "items": {
                  "type": "string"
                },
                "order": 4
              },
              "contributing_intelligence": {
                "type": "string",
                "title": "Contributing Intelligence",
                "description": "The type of adversary intelligence supporting this detector",
                "order": 3
              },
              "description": {
                "type": "string",
                "title": "Description",
                "description": "Description of the activity the detector identifies in Markdown format",
                "order": 2
              },
              "name": {
                "type": "string",
                "title": "Name",
                "description": "Name of the Red Canary detector",
                "order": 1
              }
            }
          },
          "detector_relationships": {
            "type": "object",
            "title": "detector_relationships",
            "properties": {
              "attack_techniques": {
                "type": "array",
                "title": "Attack Techniques",
                "description": "Attack techniques",
                "items": {
                  "$ref": "#/definitions/detector_resource_relationship"
                },
                "order": 1
              }
            },
            "definitions": {
              "detector_resource_relationship": {
                "type": "object",
                "title": "detector_resource_relationship",
                "properties": {
                  "data": {
                    "$ref": "#/definitions/detector_resource_relationship_data",
                    "title": "Data",
                    "description": "Data",
                    "order": 2
                  },
                  "links": {
                    "$ref": "#/definitions/resource_relationship_links",
                    "title": "Links",
                    "description": "Links",
                    "order": 1
                  }
                },
                "definitions": {
                  "detector_resource_relationship_data": {
                    "type": "object",
                    "title": "detector_resource_relationship_data",
                    "properties": {
                      "id": {
                        "type": "string",
                        "title": "ID",
                        "description": "ID",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    }
                  },
                  "resource_relationship_links": {
                    "type": "object",
                    "title": "resource_relationship_links",
                    "properties": {
                      "related": {
                        "type": "string",
                        "title": "Related",
                        "description": "Link to resource",
                        "order": 1
                      }
                    }
                  }
                }
              },
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_resource_relationship": {
            "type": "object",
            "title": "detector_resource_relationship",
            "properties": {
              "data": {
                "$ref": "#/definitions/detector_resource_relationship_data",
                "title": "Data",
                "description": "Data",
                "order": 2
              },
              "links": {
                "$ref": "#/definitions/resource_relationship_links",
                "title": "Links",
                "description": "Links",
                "order": 1
              }
            },
            "definitions": {
              "detector_resource_relationship_data": {
                "type": "object",
                "title": "detector_resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "string",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "detector_resource_relationship_data": {
            "type": "object",
            "title": "detector_resource_relationship_data",
            "properties": {
              "id": {
                "type": "string",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "file": {
            "id": "file",
            "type": "object",
            "title": "File",
            "description": "File Object",
            "properties": {
              "content": {
                "type": "string",
                "title": "Content",
                "description": "File contents",
                "format": "bytes"
              },
              "filename": {
                "type": "string",
                "title": "Filename",
                "description": "Name of file"
              }
            }
          },
          "operating_system_process": {
            "type": "object",
            "title": "operating_system_process",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/operating_system_process_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "file": {
                "id": "file",
                "type": "object",
                "title": "File",
                "description": "File Object",
                "properties": {
                  "content": {
                    "type": "string",
                    "title": "Content",
                    "description": "File contents",
                    "format": "bytes"
                  },
                  "filename": {
                    "type": "string",
                    "title": "Filename",
                    "description": "Name of file"
                  }
                }
              },
              "operating_system_process_attributes": {
                "type": "object",
                "title": "operating_system_process_attributes",
                "properties": {
                  "command_line": {
                    "$ref": "#/definitions/process_command_line",
                    "title": "Command Line",
                    "description": "The command line associated with the process",
                    "order": 4
                  },
                  "image": {
                    "$ref": "#/definitions/file",
                    "title": "Image",
                    "description": "The process image associated with the activity, if applicable and known",
                    "order": 3
                  },
                  "operating_system_pid": {
                    "type": "integer",
                    "title": "Operating System PID",
                    "description": "The PID of the process as reported by the operating system",
                    "order": 2
                  },
                  "started_at": {
                    "type": "string",
                    "title": "Started At",
                    "displayType": "date",
                    "description": "The time the process started",
                    "format": "date-time",
                    "order": 1
                  }
                },
                "definitions": {
                  "file": {
                    "id": "file",
                    "type": "object",
                    "title": "File",
                    "description": "File Object",
                    "properties": {
                      "content": {
                        "type": "string",
                        "title": "Content",
                        "description": "File contents",
                        "format": "bytes"
                      },
                      "filename": {
                        "type": "string",
                        "title": "Filename",
                        "description": "Name of file"
                      }
                    }
                  },
                  "process_command_line": {
                    "type": "object",
                    "title": "process_command_line",
                    "properties": {
                      "attributes": {
                        "$ref": "#/definitions/process_command_line_attributes",
                        "title": "Attributes",
                        "description": "Attributes of the resource",
                        "order": 2
                      },
                      "type": {
                        "type": "string",
                        "title": "Type",
                        "description": "Type of object",
                        "order": 1
                      }
                    },
                    "definitions": {
                      "process_command_line_attributes": {
                        "type": "object",
                        "title": "process_command_line_attributes",
                        "properties": {
                          "command_line": {
                            "type": "string",
                            "title": "Command Line",
                            "description": "The command line associated with the activity, if applicable and known",
                            "order": 1
                          },
                          "command_line_decoded": {
                            "type": "string",
                            "title": "Command Line Decoded",
                            "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                            "order": 2
                          },
                          "identified_encodings": {
                            "type": "array",
                            "title": "Identifier Encodings",
                            "description": "Possible encodings that may have been used throughout the command line",
                            "items": {
                              "type": "string"
                            },
                            "order": 3
                          }
                        }
                      }
                    }
                  },
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line": {
                "type": "object",
                "title": "process_command_line",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/process_command_line_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "operating_system_process_attributes": {
            "type": "object",
            "title": "operating_system_process_attributes",
            "properties": {
              "command_line": {
                "$ref": "#/definitions/process_command_line",
                "title": "Command Line",
                "description": "The command line associated with the process",
                "order": 4
              },
              "image": {
                "$ref": "#/definitions/file",
                "title": "Image",
                "description": "The process image associated with the activity, if applicable and known",
                "order": 3
              },
              "operating_system_pid": {
                "type": "integer",
                "title": "Operating System PID",
                "description": "The PID of the process as reported by the operating system",
                "order": 2
              },
              "started_at": {
                "type": "string",
                "title": "Started At",
                "displayType": "date",
                "description": "The time the process started",
                "format": "date-time",
                "order": 1
              }
            },
            "definitions": {
              "file": {
                "id": "file",
                "type": "object",
                "title": "File",
                "description": "File Object",
                "properties": {
                  "content": {
                    "type": "string",
                    "title": "Content",
                    "description": "File contents",
                    "format": "bytes"
                  },
                  "filename": {
                    "type": "string",
                    "title": "Filename",
                    "description": "Name of file"
                  }
                }
              },
              "process_command_line": {
                "type": "object",
                "title": "process_command_line",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/process_command_line_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "process_command_line": {
            "type": "object",
            "title": "process_command_line",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/process_command_line_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "process_command_line_attributes": {
            "type": "object",
            "title": "process_command_line_attributes",
            "properties": {
              "command_line": {
                "type": "string",
                "title": "Command Line",
                "description": "The command line associated with the activity, if applicable and known",
                "order": 1
              },
              "command_line_decoded": {
                "type": "string",
                "title": "Command Line Decoded",
                "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                "order": 2
              },
              "identified_encodings": {
                "type": "array",
                "title": "Identifier Encodings",
                "description": "Possible encodings that may have been used throughout the command line",
                "items": {
                  "type": "string"
                },
                "order": 3
              }
            }
          },
          "resource_relationship_links": {
            "type": "object",
            "title": "resource_relationship_links",
            "properties": {
              "related": {
                "type": "string",
                "title": "Related",
                "description": "Link to resource",
                "order": 1
              }
            }
          }
        }
      },
      "event_links": {
        "type": "object",
        "title": "event_links",
        "properties": {
          "self": {
            "$ref": "#/definitions/resource_link",
            "title": "Self",
            "description": "Self",
            "order": 1
          }
        },
        "definitions": {
          "resource_link": {
            "type": "object",
            "title": "resource_link",
            "properties": {
              "href": {
                "type": "string",
                "title": "Href",
                "description": "Link to a resource",
                "order": 1
              }
            }
          }
        }
      },
      "event_relationships": {
        "type": "object",
        "title": "event_relationships",
        "properties": {
          "endpoint": {
            "$ref": "#/definitions/resource_relationship",
            "title": "Endpoint",
            "description": "Endpoint",
            "order": 1
          },
          "endpoint_user": {
            "$ref": "#/definitions/resource_relationship",
            "title": "Endpoint User",
            "description": "Endpoint user",
            "order": 2
          }
        },
        "definitions": {
          "resource_relationship": {
            "type": "object",
            "title": "resource_relationship",
            "properties": {
              "data": {
                "$ref": "#/definitions/resource_relationship_data",
                "title": "Data",
                "description": "Data",
                "order": 2
              },
              "links": {
                "$ref": "#/definitions/resource_relationship_links",
                "title": "Links",
                "description": "Links",
                "order": 1
              }
            },
            "definitions": {
              "resource_relationship_data": {
                "type": "object",
                "title": "resource_relationship_data",
                "properties": {
                  "id": {
                    "type": "integer",
                    "title": "ID",
                    "description": "ID",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                }
              },
              "resource_relationship_links": {
                "type": "object",
                "title": "resource_relationship_links",
                "properties": {
                  "related": {
                    "type": "string",
                    "title": "Related",
                    "description": "Link to resource",
                    "order": 1
                  }
                }
              }
            }
          },
          "resource_relationship_data": {
            "type": "object",
            "title": "resource_relationship_data",
            "properties": {
              "id": {
                "type": "integer",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "resource_relationship_links": {
            "type": "object",
            "title": "resource_relationship_links",
            "properties": {
              "related": {
                "type": "string",
                "title": "Related",
                "description": "Link to resource",
                "order": 1
              }
            }
          }
        }
      },
      "file": {
        "id": "file",
        "type": "object",
        "title": "File",
        "description": "File Object",
        "properties": {
          "content": {
            "type": "string",
            "title": "Content",
            "description": "File contents",
            "format": "bytes"
          },
          "filename": {
            "type": "string",
            "title": "Filename",
            "description": "Name of file"
          }
        }
      },
      "operating_system_process": {
        "type": "object",
        "title": "operating_system_process",
        "properties": {
          "attributes": {
            "$ref": "#/definitions/operating_system_process_attributes",
            "title": "Attributes",
            "description": "Attributes of the resource",
            "order": 2
          },
          "type": {
            "type": "string",
            "title": "Type",
            "description": "Type of object",
            "order": 1
          }
        },
        "definitions": {
          "file": {
            "id": "file",
            "type": "object",
            "title": "File",
            "description": "File Object",
            "properties": {
              "content": {
                "type": "string",
                "title": "Content",
                "description": "File contents",
                "format": "bytes"
              },
              "filename": {
                "type": "string",
                "title": "Filename",
                "description": "Name of file"
              }
            }
          },
          "operating_system_process_attributes": {
            "type": "object",
            "title": "operating_system_process_attributes",
            "properties": {
              "command_line": {
                "$ref": "#/definitions/process_command_line",
                "title": "Command Line",
                "description": "The command line associated with the process",
                "order": 4
              },
              "image": {
                "$ref": "#/definitions/file",
                "title": "Image",
                "description": "The process image associated with the activity, if applicable and known",
                "order": 3
              },
              "operating_system_pid": {
                "type": "integer",
                "title": "Operating System PID",
                "description": "The PID of the process as reported by the operating system",
                "order": 2
              },
              "started_at": {
                "type": "string",
                "title": "Started At",
                "displayType": "date",
                "description": "The time the process started",
                "format": "date-time",
                "order": 1
              }
            },
            "definitions": {
              "file": {
                "id": "file",
                "type": "object",
                "title": "File",
                "description": "File Object",
                "properties": {
                  "content": {
                    "type": "string",
                    "title": "Content",
                    "description": "File contents",
                    "format": "bytes"
                  },
                  "filename": {
                    "type": "string",
                    "title": "Filename",
                    "description": "Name of file"
                  }
                }
              },
              "process_command_line": {
                "type": "object",
                "title": "process_command_line",
                "properties": {
                  "attributes": {
                    "$ref": "#/definitions/process_command_line_attributes",
                    "title": "Attributes",
                    "description": "Attributes of the resource",
                    "order": 2
                  },
                  "type": {
                    "type": "string",
                    "title": "Type",
                    "description": "Type of object",
                    "order": 1
                  }
                },
                "definitions": {
                  "process_command_line_attributes": {
                    "type": "object",
                    "title": "process_command_line_attributes",
                    "properties": {
                      "command_line": {
                        "type": "string",
                        "title": "Command Line",
                        "description": "The command line associated with the activity, if applicable and known",
                        "order": 1
                      },
                      "command_line_decoded": {
                        "type": "string",
                        "title": "Command Line Decoded",
                        "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                        "order": 2
                      },
                      "identified_encodings": {
                        "type": "array",
                        "title": "Identifier Encodings",
                        "description": "Possible encodings that may have been used throughout the command line",
                        "items": {
                          "type": "string"
                        },
                        "order": 3
                      }
                    }
                  }
                }
              },
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "process_command_line": {
            "type": "object",
            "title": "process_command_line",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/process_command_line_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "process_command_line_attributes": {
            "type": "object",
            "title": "process_command_line_attributes",
            "properties": {
              "command_line": {
                "type": "string",
                "title": "Command Line",
                "description": "The command line associated with the activity, if applicable and known",
                "order": 1
              },
              "command_line_decoded": {
                "type": "string",
                "title": "Command Line Decoded",
                "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                "order": 2
              },
              "identified_encodings": {
                "type": "array",
                "title": "Identifier Encodings",
                "description": "Possible encodings that may have been used throughout the command line",
                "items": {
                  "type": "string"
                },
                "order": 3
              }
            }
          }
        }
      },
      "operating_system_process_attributes": {
        "type": "object",
        "title": "operating_system_process_attributes",
        "properties": {
          "command_line": {
            "$ref": "#/definitions/process_command_line",
            "title": "Command Line",
            "description": "The command line associated with the process",
            "order": 4
          },
          "image": {
            "$ref": "#/definitions/file",
            "title": "Image",
            "description": "The process image associated with the activity, if applicable and known",
            "order": 3
          },
          "operating_system_pid": {
            "type": "integer",
            "title": "Operating System PID",
            "description": "The PID of the process as reported by the operating system",
            "order": 2
          },
          "started_at": {
            "type": "string",
            "title": "Started At",
            "displayType": "date",
            "description": "The time the process started",
            "format": "date-time",
            "order": 1
          }
        },
        "definitions": {
          "file": {
            "id": "file",
            "type": "object",
            "title": "File",
            "description": "File Object",
            "properties": {
              "content": {
                "type": "string",
                "title": "Content",
                "description": "File contents",
                "format": "bytes"
              },
              "filename": {
                "type": "string",
                "title": "Filename",
                "description": "Name of file"
              }
            }
          },
          "process_command_line": {
            "type": "object",
            "title": "process_command_line",
            "properties": {
              "attributes": {
                "$ref": "#/definitions/process_command_line_attributes",
                "title": "Attributes",
                "description": "Attributes of the resource",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            },
            "definitions": {
              "process_command_line_attributes": {
                "type": "object",
                "title": "process_command_line_attributes",
                "properties": {
                  "command_line": {
                    "type": "string",
                    "title": "Command Line",
                    "description": "The command line associated with the activity, if applicable and known",
                    "order": 1
                  },
                  "command_line_decoded": {
                    "type": "string",
                    "title": "Command Line Decoded",
                    "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                    "order": 2
                  },
                  "identified_encodings": {
                    "type": "array",
                    "title": "Identifier Encodings",
                    "description": "Possible encodings that may have been used throughout the command line",
                    "items": {
                      "type": "string"
                    },
                    "order": 3
                  }
                }
              }
            }
          },
          "process_command_line_attributes": {
            "type": "object",
            "title": "process_command_line_attributes",
            "properties": {
              "command_line": {
                "type": "string",
                "title": "Command Line",
                "description": "The command line associated with the activity, if applicable and known",
                "order": 1
              },
              "command_line_decoded": {
                "type": "string",
                "title": "Command Line Decoded",
                "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                "order": 2
              },
              "identified_encodings": {
                "type": "array",
                "title": "Identifier Encodings",
                "description": "Possible encodings that may have been used throughout the command line",
                "items": {
                  "type": "string"
                },
                "order": 3
              }
            }
          }
        }
      },
      "process_command_line": {
        "type": "object",
        "title": "process_command_line",
        "properties": {
          "attributes": {
            "$ref": "#/definitions/process_command_line_attributes",
            "title": "Attributes",
            "description": "Attributes of the resource",
            "order": 2
          },
          "type": {
            "type": "string",
            "title": "Type",
            "description": "Type of object",
            "order": 1
          }
        },
        "definitions": {
          "process_command_line_attributes": {
            "type": "object",
            "title": "process_command_line_attributes",
            "properties": {
              "command_line": {
                "type": "string",
                "title": "Command Line",
                "description": "The command line associated with the activity, if applicable and known",
                "order": 1
              },
              "command_line_decoded": {
                "type": "string",
                "title": "Command Line Decoded",
                "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
                "order": 2
              },
              "identified_encodings": {
                "type": "array",
                "title": "Identifier Encodings",
                "description": "Possible encodings that may have been used throughout the command line",
                "items": {
                  "type": "string"
                },
                "order": 3
              }
            }
          }
        }
      },
      "process_command_line_attributes": {
        "type": "object",
        "title": "process_command_line_attributes",
        "properties": {
          "command_line": {
            "type": "string",
            "title": "Command Line",
            "description": "The command line associated with the activity, if applicable and known",
            "order": 1
          },
          "command_line_decoded": {
            "type": "string",
            "title": "Command Line Decoded",
            "description": "The command line associated with the activity, if applicable and known, after passing through several decoding attempts",
            "order": 2
          },
          "identified_encodings": {
            "type": "array",
            "title": "Identifier Encodings",
            "description": "Possible encodings that may have been used throughout the command line",
            "items": {
              "type": "string"
            },
            "order": 3
          }
        }
      },
      "resource_link": {
        "type": "object",
        "title": "resource_link",
        "properties": {
          "href": {
            "type": "string",
            "title": "Href",
            "description": "Link to a resource",
            "order": 1
          }
        }
      },
      "resource_relationship": {
        "type": "object",
        "title": "resource_relationship",
        "properties": {
          "data": {
            "$ref": "#/definitions/resource_relationship_data",
            "title": "Data",
            "description": "Data",
            "order": 2
          },
          "links": {
            "$ref": "#/definitions/resource_relationship_links",
            "title": "Links",
            "description": "Links",
            "order": 1
          }
        },
        "definitions": {
          "resource_relationship_data": {
            "type": "object",
            "title": "resource_relationship_data",
            "properties": {
              "id": {
                "type": "integer",
                "title": "ID",
                "description": "ID",
                "order": 2
              },
              "type": {
                "type": "string",
                "title": "Type",
                "description": "Type of object",
                "order": 1
              }
            }
          },
          "resource_relationship_links": {
            "type": "object",
            "title": "resource_relationship_links",
            "properties": {
              "related": {
                "type": "string",
                "title": "Related",
                "description": "Link to resource",
                "order": 1
              }
            }
          }
        }
      },
      "resource_relationship_data": {
        "type": "object",
        "title": "resource_relationship_data",
        "properties": {
          "id": {
            "type": "integer",
            "title": "ID",
            "description": "ID",
            "order": 2
          },
          "type": {
            "type": "string",
            "title": "Type",
            "description": "Type of object",
            "order": 1
          }
        }
      },
      "resource_relationship_links": {
        "type": "object",
        "title": "resource_relationship_links",
        "properties": {
          "related": {
            "type": "string",
            "title": "Related",
            "description": "Link to resource",
            "order": 1
          }
        }
      }
    }
  }
      """)
  
      def __init__(self):
          super(self.__class__, self).__init__(self.schema)
  