[
  {
    "ioc_id": "ioc_001",
    "report_id": "rpt_01",
    "raw_value": "malicious-c2[.]com",
    "normalized_value": "malicious-c2.com",
    "ioc_type": "domain",
    "format_valid": true,
    "grounded": true,
    "source_span": "C2 도메인 malicious-c2[.]com 이 확인되었습니다",
    "label": "load",
    "ts": "2026-04-02T09:00"
  },
  {
    "ioc_id": "ioc_002",
    "report_id": "rpt_01",
    "raw_value": "203.0.113.55",
    "normalized_value": "203.0.113.55",
    "ioc_type": "ipv4",
    "format_valid": true,
    "grounded": true,
    "source_span": "해당 IP 203.0.113.55 로 비콘 트래픽 발생",
    "label": "load",
    "ts": "2026-04-02T09:10"
  },
  {
    "ioc_id": "ioc_003",
    "report_id": "rpt_01",
    "raw_value": "999.1.1.1",
    "normalized_value": null,
    "ioc_type": "ipv4",
    "format_valid": false,
    "grounded": true,
    "source_span": "출처 999.1.1.1",
    "label": "reject",
    "ts": "2026-04-02T09:20"
  },
  {
    "ioc_id": "ioc_004",
    "report_id": "rpt_02",
    "raw_value": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "normalized_value": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "ioc_type": "sha256",
    "format_valid": true,
    "grounded": false,
    "source_span": null,
    "label": "reject",
    "ts": "2026-04-02T10:00"
  },
  {
    "ioc_id": "ioc_005",
    "report_id": "rpt_02",
    "raw_value": "hxxp://drop .evil-host .net/x",
    "normalized_value": "http://drop.evil-host.net/x",
    "ioc_type": "domain",
    "format_valid": true,
    "grounded": true,
    "source_span": "페이로드는 hxxp://drop .evil-host .net/x 에서 내려받습니다",
    "label": "load",
    "ts": "2026-04-02T10:20"
  },
  {
    "ioc_id": "ioc_006",
    "report_id": "rpt_02",
    "raw_value": "CVE-2026-1337",
    "normalized_value": "CVE-2026-1337",
    "ioc_type": "cve",
    "format_valid": true,
    "grounded": true,
    "source_span": "CVE-2026-1337 취약점을 악용",
    "label": "load",
    "ts": "2026-04-02T10:40"
  },
  {
    "ioc_id": "ioc_007",
    "report_id": "rpt_03",
    "raw_value": "d41d8cd98f00b204e9800998ecf8427",
    "normalized_value": null,
    "ioc_type": "md5",
    "format_valid": false,
    "grounded": true,
    "source_span": "해시 d41d8cd98f00b204e9800998ecf8427 첨부",
    "label": "reject",
    "ts": "2026-04-02T11:00"
  },
  {
    "ioc_id": "ioc_008",
    "report_id": "rpt_03",
    "raw_value": "actor@mail[.]bad",
    "normalized_value": "actor@mail.bad",
    "ioc_type": "email",
    "format_valid": true,
    "grounded": true,
    "source_span": "발신 actor@mail[.]bad 사용",
    "label": "load",
    "ts": "2026-04-02T11:20"
  },
  {
    "ioc_id": "ioc_009",
    "report_id": "rpt_03",
    "raw_value": "TA-0xNova",
    "normalized_value": null,
    "ioc_type": "unknown",
    "format_valid": true,
    "grounded": true,
    "source_span": "위협 행위자 TA-0xNova 로 추정",
    "label": "review",
    "ts": "2026-04-02T11:40"
  },
  {
    "ioc_id": "ioc_010",
    "report_id": "rpt_04",
    "raw_value": "MALICIOUS-C2[.]COM",
    "normalized_value": "malicious-c2.com",
    "ioc_type": "domain",
    "format_valid": true,
    "grounded": true,
    "source_span": "재확인된 MALICIOUS-C2[.]COM",
    "label": "load",
    "ts": "2026-04-03T09:00"
  },
  {
    "ioc_id": "ioc_011",
    "report_id": "rpt_04",
    "raw_value": "phish-login[.]co",
    "normalized_value": "phish-login.co",
    "ioc_type": "domain",
    "format_valid": true,
    "grounded": false,
    "source_span": null,
    "label": "reject",
    "ts": "2026-04-03T09:20"
  }
]