{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "SandboxReport",
  "description": "Analysis results from a single sandbox execution environment.",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/wildfire-api-sandbox-report-schema.json",
  "type": "object",
  "properties": {
    "platform": {
      "type": "string",
      "description": "Platform identifier (e.g., 100 for Windows XP SP3)."
    },
    "software": {
      "type": "string",
      "description": "Sandbox software environment."
    },
    "version": {
      "type": "string"
    },
    "summary": {
      "type": "object",
      "properties": {
        "@verdict": {
          "type": "string",
          "enum": [
            "benign",
            "malware",
            "grayware",
            "phishing"
          ]
        }
      }
    },
    "network": {
      "type": "object",
      "properties": {
        "dns": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@query": {
                "type": "string"
              },
              "@response": {
                "type": "string"
              }
            }
          }
        },
        "tcp": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@ip": {
                "type": "string"
              },
              "@port": {
                "type": "integer"
              },
              "@country": {
                "type": "string"
              }
            }
          }
        },
        "http": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@request": {
                "type": "string"
              },
              "@response": {
                "type": "string"
              }
            }
          }
        }
      }
    },
    "process_list": {
      "type": "object",
      "properties": {
        "process": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "@name": {
                "type": "string"
              },
              "@pid": {
                "type": "string"
              },
              "@text": {
                "type": "string"
              }
            }
          }
        }
      }
    }
  }
}