second push

q4-siem/alerts.json

@@ -0,0 +1,12 @@
+[
+    {
+        "ip": "192.168.1.50",
+        "threat_score": 100,
+        "events": [
+            "Web Brute Force Attempt",
+            "SSH Failed Login",
+            "SQL Injection Attempt"
+        ],
+        "status": "Critical"
+    }
+]