{
  "alertId": "500123",
  "closeReason": "Resolved",
  "note": "Investigating this activity - looks suspicious."
}