incidents

Incidents

An incident is a sourced report of an attack, compromise, exposure, disclosure, or a branch of a campaign. It records what happened and the configuration that was abused; it is not a vulnerability advisory and does not imply that a CVE exists.

Incidents live at incidents/YYYY/INC-YYYY-NNNN.json. They preserve exact IOCs, hashes, package versions, and source URLs. Prose may defang domains and IP addresses for readability.