{
  "_type": "https://in-toto.io/Statement/v1",
  "predicate": {
    "generated_at": "2026-04-24",
    "generator": {
      "corpus_version": "gold-rules@2026-04-24",
      "model": "n/a-static-corpus",
      "name": "cloudsigma",
      "prompt_version": "p1",
      "seed": 0,
      "version": "cloudsigma@v1.0-stub"
    },
    "input": {
      "enrichment": [],
      "id": "sentinel-azure",
      "type": "sigma_matrix"
    },
    "publish_decision": {
      "embed_status": "experimental",
      "integrity_level": "L1"
    },
    "rule_metadata": {
      "corpus_path": "cloud/azure/T1078.004.yml",
      "level": "high",
      "status": "experimental",
      "title": "Azure High-Privilege Role Assignment via Activity Log"
    }
  },
  "predicateType": "https://a13e.com/cloudsigma-rule-attestation/v1",
  "subject": [
    {
      "digest": {
        "sha256": "95dfb0da896e19391cbef50609d21dfa3e6fcd4859d1a3aca2c4de195bed7be2"
      },
      "name": "/library/sigma/sentinel-azure/sigma-rule"
    }
  ]
}