{"schema":"1200km.ttp.collection-fixture.v1","synthetic":true,"technique_key":"ics/T0882","purpose":"Collection/parser contract exercise, NOT a positive example or detection of this TTP.","events":[{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"proposed-operational-document-access-audit","collector":"illustrative-lab-collector","observation":{"document_id":"lab-procedure-1","actor":"lab-reader","action":"download","result":"success"}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"proposed-egress-and-transfer-records","collector":"illustrative-lab-collector","observation":{"source":"192.0.2.10","destination":"198.51.100.20","direction":"outbound","bytes_sent":128}}]}