{"schema":"1200km.ttp.collection-fixture.v1","synthetic":true,"technique_key":"mobile/T1646","purpose":"Collection/parser contract exercise, NOT a positive example or detection of this TTP.","events":[{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"proposed-lab-gateway-network-flows","collector":"illustrative-lab-collector","observation":{"gateway":"lab-gw-1","device_ip":"192.0.2.10","destination_ip":"198.51.100.20","bytes_sent":128}},{"schema":"1200km.telemetry.example.v1","synthetic":true,"timestamp":"2026-09-27T12:00:00Z","telemetry_id":"proposed-outbound-transfer-volume-and-destination-context","collector":"illustrative-lab-collector","observation":{"device_id":"android-lab-1","window_seconds":60,"outbound_bytes":4096,"destination":"198.51.100.20","classification":"lab_endpoint"}}]}
