{"schema":"1200km.ttp.collection-fixture.v1","synthetic":true,"technique_key":"enterprise/T1578","purpose":"Collection/parser contract exercise, NOT a positive example or detection of this TTP.","events":[{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0070","collector":"illustrative-lab-collector","observation":{"resource_id":"lab-service-1","service":"lab-audit-service","enabled":true,"retention_days":30}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0080","collector":"illustrative-lab-collector","observation":{"instance_id":"vm-lab-1","action":"start","state_before":"stopped","state_after":"pending"}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0089","collector":"illustrative-lab-collector","observation":{"instance_id":"vm-lab-1","action":"stop","state_before":"running","state_after":"stopping"}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0057","collector":"illustrative-lab-collector","observation":{"snapshot_id":"snap-lab-1","source_volume":"vol-lab-1","action":"create","state":"pending"}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0049","collector":"illustrative-lab-collector","observation":{"snapshot_id":"snap-lab-1","action":"delete","actor":"lab-admin","result":"requested"}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0058","collector":"illustrative-lab-collector","observation":{"snapshot_id":"snap-lab-1","attribute":"shared_with","before":[],"after":["lab-account-2"]}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0097","collector":"illustrative-lab-collector","observation":{"volume_id":"vol-lab-1","action":"create","size_gib":8,"encrypted":true}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0098","collector":"illustrative-lab-collector","observation":{"volume_id":"vol-lab-1","action":"delete","actor":"lab-admin","result":"requested"}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"DC0092","collector":"illustrative-lab-collector","observation":{"volume_id":"vol-lab-1","attribute":"size_gib","before":8,"after":10}}]}