{"timestamp": "2026-08-01T17:35:04.734417", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:05.742716", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:05.742781", "alert_type": "UNAUTHORIZED_MODBUS_WRITE", "source_ip": "172.24.0.10", "target_register": 1, "mitre_id": "T0831", "description": "Unauthorized Modbus write command detected from an untrusted source."}
{"timestamp": "2026-08-01T17:35:06.755679", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:07.267643", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:07.775605", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:08.287975", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:08.800636", "alert_type": "OT_BRUTE_FORCE_SCAN", "source_ip": "172.24.0.10", "error_count": 5, "mitre_id": "T0846", "description": "Excessive Modbus exceptions detected. Possible scanning or brute-force activity."}
{"timestamp": "2026-08-01T17:35:08.800650", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:09.311604", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:09.823573", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:13.844191", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:14.855667", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:14.855674", "alert_type": "UNAUTHORIZED_MODBUS_WRITE", "source_ip": "172.24.0.10", "target_register": 1, "mitre_id": "T0831", "description": "Unauthorized Modbus write command detected from an untrusted source."}
{"timestamp": "2026-08-01T17:35:15.865701", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:16.379556", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:16.893605", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:16.893594", "alert_type": "OT_BRUTE_FORCE_SCAN", "source_ip": "172.24.0.10", "error_count": 5, "mitre_id": "T0846", "description": "Excessive Modbus exceptions detected. Possible scanning or brute-force activity."}
{"timestamp": "2026-08-01T17:35:17.409018", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:17.919534", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:18.426539", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:18.938641", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:22.968096", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:23.975548", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:23.975658", "alert_type": "UNAUTHORIZED_MODBUS_WRITE", "source_ip": "172.24.0.10", "target_register": 1, "mitre_id": "T0831", "description": "Unauthorized Modbus write command detected from an untrusted source."}
{"timestamp": "2026-08-01T17:35:24.985555", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:24.985595", "alert_type": "OT_BRUTE_FORCE_SCAN", "source_ip": "172.24.0.10", "error_count": 5, "mitre_id": "T0846", "description": "Excessive Modbus exceptions detected. Possible scanning or brute-force activity."}
{"timestamp": "2026-08-01T17:35:25.495502", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:26.006446", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:26.513927", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:27.026626", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:27.537607", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:27.538263", "alert_type": "OT_BRUTE_FORCE_SCAN", "source_ip": "172.24.0.10", "error_count": 5, "mitre_id": "T0846", "description": "Excessive Modbus exceptions detected. Possible scanning or brute-force activity."}
{"timestamp": "2026-08-01T17:35:28.047612", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:33.066149", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.10", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:35.079637", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.11", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:37.093638", "alert_type": "CROSS_ZONE_VIOLATION", "source_ip": "172.24.0.10", "dest_ip": "172.21.0.12", "mitre_id": "T0886", "description": "Unauthorized direct communication from IT to Control zone detected."}
{"timestamp": "2026-08-01T17:35:42.623613", "alert_type": "PROCESS_SAFETY_VIOLATION", "source_ip": "172.22.0.10", "details": "Current Tank Level: 95%, Command: OPEN Inlet Valve", "mitre_id": "T0836", "description": "Safety Interlock Violation: Attempted to open inlet valve while container is at overflow capacity."}