{
  "_type": "https://in-toto.io/Statement/v1",
  "predicate": {
    "generated_at": "2026-04-24",
    "generator": {
      "corpus_version": "gold-rules@2026-04-24",
      "model": "n/a-static-corpus",
      "name": "cloudsigma",
      "prompt_version": "p1",
      "seed": 0,
      "version": "cloudsigma@v1.0-stub"
    },
    "input": {
      "enrichment": [],
      "id": "sentinel-entra-audit",
      "type": "sigma_matrix"
    },
    "publish_decision": {
      "embed_status": "experimental",
      "integrity_level": "L1"
    },
    "rule_metadata": {
      "corpus_path": "identity_provider/entra-id-audit/T1078.004.yml",
      "level": "critical",
      "status": "experimental",
      "title": "Entra ID Federation Trust Modification"
    }
  },
  "predicateType": "https://a13e.com/cloudsigma-rule-attestation/v1",
  "subject": [
    {
      "digest": {
        "sha256": "ba9dc57a80e54d9360f96f211d227e89ac6546d3941cdae5eaf7b332b976a9d5"
      },
      "name": "/library/sigma/sentinel-entra-audit/sigma-rule"
    }
  ]
}