{
  "text": "{\n  \"utc\": \"2026-09-14T06:03:55.8503749Z\",\n  \"instrument_sha256\": \"473f359145e7aa6135106863fe9cb4f6020c9b4a1fdf97df535aaac5c338c43c\",\n  \"read_only\": true,\n  \"native_self_positive\": {\n    \"created_utc\": \"2026-09-14T06:03:54.6850380Z\",\n    \"original_gone\": false,\n    \"observations\": [\n      {\n        \"image\": null,\n        \"created_utc\": \"2026-09-14T06:03:54.6850380Z\",\n        \"source\": \"CIM\",\n        \"pid\": 52276\n      },\n      {\n        \"source\": \"NATIVE\",\n        \"live\": true,\n        \"image\": \"C:\\\\Program Files\\\\PowerShell\\\\7\\\\pwsh.exe\",\n        \"pid\": 52276,\n        \"created_utc\": \"2026-09-14T06:03:54.6850385Z\",\n        \"replaces_cim_identity\": false\n      }\n    ],\n    \"pid\": 52276,\n    \"disposition\": \"OTHER_IMAGE\",\n    \"allowed\": true\n  },\n  \"native_self_negative\": {\n    \"created_utc\": \"2026-09-14T06:03:54.6850380Z\",\n    \"original_gone\": false,\n    \"observations\": [\n      {\n        \"image\": null,\n        \"created_utc\": \"2026-09-14T06:03:54.6850380Z\",\n        \"source\": \"CIM\",\n        \"pid\": 52276\n      },\n      {\n        \"source\": \"NATIVE\",\n        \"live\": true,\n        \"image\": \"C:\\\\Program Files\\\\PowerShell\\\\7\\\\pwsh.exe\",\n        \"pid\": 52276,\n        \"created_utc\": \"2026-09-14T06:03:54.6850385Z\",\n        \"replaces_cim_identity\": false\n      }\n    ],\n    \"pid\": 52276,\n    \"disposition\": \"RIG_DAEMON_ALREADY_PRESENT\",\n    \"allowed\": false\n  },\n  \"live_census_count\": 17,\n  \"decisions\": [\n    {\n      \"created_utc\": \"2026-09-11T04:17:53.3401860Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-11T04:17:53.3401860Z\",\n          \"source\": \"CIM\",\n          \"pid\": 4732\n        }\n      ],\n      \"pid\": 4732,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-11T04:17:53.6612050Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-11T04:17:53.6612050Z\",\n          \"source\": \"CIM\",\n          \"pid\": 15856\n        }\n      ],\n      \"pid\": 15856,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-11T04:18:04.2658420Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-11T04:18:04.2658420Z\",\n          \"source\": \"CIM\",\n          \"pid\": 12368\n        }\n      ],\n      \"pid\": 12368,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-12T04:55:48.2063870Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-12T04:55:48.2063870Z\",\n          \"source\": \"CIM\",\n          \"pid\": 12756\n        }\n      ],\n      \"pid\": 12756,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-12T06:05:35.8434410Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-12T06:05:35.8434410Z\",\n          \"source\": \"CIM\",\n          \"pid\": 43916\n        }\n      ],\n      \"pid\": 43916,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-12T06:23:47.7874970Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-12T06:23:47.7874970Z\",\n          \"source\": \"CIM\",\n          \"pid\": 52692\n        }\n      ],\n      \"pid\": 52692,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-12T06:33:49.8764270Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-12T06:33:49.8764270Z\",\n          \"source\": \"CIM\",\n          \"pid\": 34872\n        }\n      ],\n      \"pid\": 34872,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-12T20:17:00.5331330Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": null,\n          \"created_utc\": \"2026-09-12T20:17:00.5331330Z\",\n          \"source\": \"CIM\",\n          \"pid\": 52860\n        }\n      ],\n      \"pid\": 52860,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-13T10:00:35.4969550Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-13T10:00:35.4969550Z\",\n          \"source\": \"CIM\",\n          \"pid\": 7272\n        }\n      ],\n      \"pid\": 7272,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-13T10:03:29.0265240Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-13T10:03:29.0265240Z\",\n          \"source\": \"CIM\",\n          \"pid\": 48024\n        }\n      ],\n      \"pid\": 48024,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-13T10:03:49.6699960Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-13T10:03:49.6699960Z\",\n          \"source\": \"CIM\",\n          \"pid\": 24452\n        }\n      ],\n      \"pid\": 24452,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-13T10:25:15.3949990Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-13T10:25:15.3949990Z\",\n          \"source\": \"CIM\",\n          \"pid\": 6528\n        }\n      ],\n      \"pid\": 6528,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-13T12:19:06.3682080Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-13T12:19:06.3682080Z\",\n          \"source\": \"CIM\",\n          \"pid\": 57596\n        }\n      ],\n      \"pid\": 57596,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-14T04:43:58.3586350Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-14T04:43:58.3586350Z\",\n          \"source\": \"CIM\",\n          \"pid\": 53816\n        }\n      ],\n      \"pid\": 53816,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-14T04:44:47.6276090Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-14T04:44:47.6276090Z\",\n          \"source\": \"CIM\",\n          \"pid\": 37324\n        }\n      ],\n      \"pid\": 37324,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-14T04:45:36.1742560Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-14T04:45:36.1742560Z\",\n          \"source\": \"CIM\",\n          \"pid\": 36652\n        }\n      ],\n      \"pid\": 36652,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    },\n    {\n      \"created_utc\": \"2026-09-14T04:54:37.9856950Z\",\n      \"original_gone\": false,\n      \"observations\": [\n        {\n          \"image\": \"C:\\\\Users\\\\decid\\\\AppData\\\\Local\\\\spt-core\\\\bin\\\\spt.exe\",\n          \"created_utc\": \"2026-09-14T04:54:37.9856950Z\",\n          \"source\": \"CIM\",\n          \"pid\": 57248\n        }\n      ],\n      \"pid\": 57248,\n      \"disposition\": \"PREDATES_RIG\",\n      \"allowed\": true\n    }\n  ],\n  \"refused_count\": 0,\n  \"product_invocations\": 0,\n  \"fleet_process_terminations\": 0,\n  \"rig_mutations\": 0\n}\n\n\nWall time: 2.79 seconds",
  "details": {
    "timeoutSeconds": 30,
    "wallTimeMs": 2787.537400007248
  }
}