{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/ThreatReport",
  "title": "ThreatReport",
  "type": "object",
  "properties": {
    "period": {
      "type": "object",
      "properties": {
        "start": {
          "type": "string",
          "format": "date-time"
        },
        "end": {
          "type": "string",
          "format": "date-time"
        }
      }
    },
    "summary": {
      "type": "object",
      "properties": {
        "total_threats": {
          "type": "integer"
        },
        "malware_detected": {
          "type": "integer"
        },
        "c2_connections_blocked": {
          "type": "integer"
        },
        "phishing_blocked": {
          "type": "integer"
        }
      }
    },
    "top_threats": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string"
          },
          "category": {
            "type": "string"
          },
          "count": {
            "type": "integer"
          },
          "severity": {
            "type": "string"
          }
        }
      }
    },
    "top_targeted_hosts": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "hostname": {
            "type": "string"
          },
          "ip": {
            "type": "string"
          },
          "threat_count": {
            "type": "integer"
          }
        }
      }
    }
  }
}