{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:57.075Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-35b8e077f2e20a1861546a15",
    "scope_type": "country",
    "scope_key": "LB",
    "geography": "LB",
    "title": "Internet disruption in LB",
    "started_at": "2026-08-11T00:00:00.000Z",
    "last_observed_at": "2026-10-02T13:35:00.000Z",
    "status": "resolved",
    "classification": "PARTIAL_OUTAGE",
    "trajectory": "RESOLVED",
    "stress_score": 64,
    "confidence": 34,
    "event_count": 1,
    "affected_asns": [],
    "affected_services": [
      "Facebook Messenger",
      "Signal",
      "Telegram",
      "Tor",
      "WhatsApp"
    ],
    "affected_regions": [
      "LB"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:33.264Z",
    "updated_at": "2026-10-03T23:39:45.285Z"
  },
  "events": [
    {
      "id": "ise-77a2afcbc1785faecfd299c8",
      "entity_type": "country",
      "entity_key": "LB",
      "geography": "LB",
      "started_at": "2026-08-11T00:00:00.000Z",
      "last_observed_at": "2026-10-02T13:35:00.000Z",
      "status": "resolved",
      "classification": "SERVICE_BLOCKING",
      "trajectory": "RESOLVED",
      "stress_score": 64,
      "confidence": 15,
      "components": {
        "anomaly": 1,
        "breadth": 0.3533333333333334,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.8127596370303325
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 1
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.07547169811320754
      },
      "deviation": {
        "max_anomaly": 1,
        "max_deviation": 0.8127596370303325
      },
      "affected_asns": [],
      "affected_services": [
        "Facebook Messenger",
        "Signal",
        "Telegram",
        "Tor",
        "WhatsApp"
      ],
      "affected_regions": [
        "LB"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 21,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:21.735Z",
      "updated_at": "2026-10-03T23:50:21.446Z",
      "evidence": [
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--d7be26ec-faff-58c2-9504-2e8bbb8aac0e",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1169",
          "content_hash": "aa5f5f5bb17df5da",
          "object_json": {
            "id": "incident--d7be26ec-faff-58c2-9504-2e8bbb8aac0e",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1169",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-11T23:59:59Z",
            "severity": "critical",
            "confidence": 70,
            "start_time": "2026-08-11T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.5,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--52c78a15-348f-52fe-a659-2aaf63159c60",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T02:20:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1168",
          "content_hash": "918d86c208664e08",
          "object_json": {
            "id": "incident--52c78a15-348f-52fe-a659-2aaf63159c60",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1168",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-12T03:00:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-12T02:20:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 2 critical alerts recorded.",
            "anomaly_rate": 0.04327090440715728,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--8741a254-2a28-5758-5132-04c8b8832f38",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-26T06:25:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1182",
          "content_hash": "803556179d5c9da1",
          "object_json": {
            "id": "incident--8741a254-2a28-5758-5132-04c8b8832f38",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1182",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-26T06:25:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 1 critical alerts recorded.",
            "anomaly_rate": 0.01845018450184502,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--dc6c40e4-2fa4-542d-dc8a-0f5ccd725ce6",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1184",
          "content_hash": "a30ffb8752e4832d",
          "object_json": {
            "id": "incident--dc6c40e4-2fa4-542d-dc8a-0f5ccd725ce6",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1184",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--52259dd2-5d54-54f4-6edf-609caa3bc1ce",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1185",
          "content_hash": "fb3d71d3339982a0",
          "object_json": {
            "id": "incident--52259dd2-5d54-54f4-6edf-609caa3bc1ce",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1185",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-28T23:59:59Z",
            "severity": "critical",
            "confidence": 70,
            "start_time": "2026-08-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.5,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--c4e765e3-d18c-5553-5031-205b11807b9e",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1187",
          "content_hash": "c1542d5f68935dd3",
          "object_json": {
            "id": "incident--c4e765e3-d18c-5553-5031-205b11807b9e",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1187",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--1d19a992-bd81-5ab1-b251-b086cc49b2d7",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T02:20:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1186",
          "content_hash": "d164b3e25243c76e",
          "object_json": {
            "id": "incident--1d19a992-bd81-5ab1-b251-b086cc49b2d7",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1186",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-29T02:55:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-29T02:20:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 2 critical alerts recorded.",
            "anomaly_rate": 0.04511592285734178,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0.5833,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--060cbfb7-0dfd-5099-abcf-76413739cbd8",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1219",
          "content_hash": "de2d7c57d15712a5",
          "object_json": {
            "id": "incident--060cbfb7-0dfd-5099-abcf-76413739cbd8",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1219",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-23T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-23T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--4870b83a-dda7-54d1-39f5-30c8cc3049d4",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1222",
          "content_hash": "4bec4299c5902fad",
          "object_json": {
            "id": "incident--4870b83a-dda7-54d1-39f5-30c8cc3049d4",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1222",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-24T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-24T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--0b6614d6-5024-5a13-2bdb-cbb5226baf6d",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T19:55:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1220",
          "content_hash": "4480f7d63d2923fa",
          "object_json": {
            "id": "incident--0b6614d6-5024-5a13-2bdb-cbb5226baf6d",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1220",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-24T19:55:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 1 critical alerts recorded.",
            "anomaly_rate": 0.011904761904761904,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--3a2e6c78-8415-51dd-3743-7a08a0403c0b",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1223",
          "content_hash": "1c988401238c8ee6",
          "object_json": {
            "id": "incident--3a2e6c78-8415-51dd-3743-7a08a0403c0b",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1223",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-25T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-25T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger"
            ]
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--f8c5e92f-13a3-5ccc-ba39-58eade5d73f2",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T02:55:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1221",
          "content_hash": "bd05a317f060620f",
          "object_json": {
            "id": "incident--f8c5e92f-13a3-5ccc-ba39-58eade5d73f2",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1221",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-25T02:55:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 1 critical alerts recorded.",
            "anomaly_rate": 0.07547169811320754,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--360ea9ba-d8d5-535f-db82-c811c049899a",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1224",
          "content_hash": "59fbe3e11f28d9ef",
          "object_json": {
            "id": "incident--360ea9ba-d8d5-535f-db82-c811c049899a",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1224",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--5def09ab-55ad-5528-ff2d-ac9c6dbd1b2b",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1226",
          "content_hash": "1717df82007075fc",
          "object_json": {
            "id": "incident--5def09ab-55ad-5528-ff2d-ac9c6dbd1b2b",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1226",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--32406763-4096-550b-6da7-177a2bd49cef",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T07:40:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1225",
          "content_hash": "a40e95d722bf270b",
          "object_json": {
            "id": "incident--32406763-4096-550b-6da7-177a2bd49cef",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1225",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-28T07:40:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 1 critical alerts recorded.",
            "anomaly_rate": 0.013333333333333334,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--92b5ab60-1330-5488-610e-cae93871312b",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1228",
          "content_hash": "37cdabdd4e4f022e",
          "object_json": {
            "id": "incident--92b5ab60-1330-5488-610e-cae93871312b",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1228",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--e01848a4-017a-53c5-b0d3-d580dcef16a1",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T01:05:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1227",
          "content_hash": "7f3a338aa6dc45e0",
          "object_json": {
            "id": "incident--e01848a4-017a-53c5-b0d3-d580dcef16a1",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1227",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-29T07:10:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-29T01:05:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 1 critical alerts recorded.",
            "anomaly_rate": 0.07547169811320754,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--a0a22641-45d7-5e72-16e3-adcdfea798c8",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1230",
          "content_hash": "4cfdedacb4e8c0af",
          "object_json": {
            "id": "incident--a0a22641-45d7-5e72-16e3-adcdfea798c8",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1230",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-30T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-30T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--a84ceaa8-420a-5ad7-bb7d-229e1c8d6f30",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T22:15:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1229",
          "content_hash": "3e6b6fc60d4b5cea",
          "object_json": {
            "id": "incident--a84ceaa8-420a-5ad7-bb7d-229e1c8d6f30",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1229",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-30T22:15:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 1 critical alerts recorded.",
            "anomaly_rate": 0.018867924528301886,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--c25b9c95-9909-5116-923c-c4af2e30c3de",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T00:00:00.000Z",
          "name": "Censorship detected in LB",
          "value": "lb-2026-1232",
          "content_hash": "a403095691447004",
          "object_json": {
            "id": "incident--c25b9c95-9909-5116-923c-c4af2e30c3de",
            "name": "Censorship detected in LB",
            "type": "incident",
            "title": "Censorship detected in LB",
            "value": "lb-2026-1232",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-02T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-02T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-77a2afcbc1785faecfd299c8",
          "stix_object_id": "incident--cf54051e-3f61-5f0f-e0c7-e3978f659c74",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T13:35:00.000Z",
          "name": "Internet connectivity disruption in Lebanon",
          "value": "lb-2026-1231",
          "content_hash": "912b4ba5aada01d7",
          "object_json": {
            "id": "incident--cf54051e-3f61-5f0f-e0c7-e3978f659c74",
            "name": "Internet connectivity disruption in Lebanon",
            "type": "incident",
            "title": "Internet connectivity disruption in Lebanon",
            "value": "lb-2026-1231",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-02T13:35:00Z",
            "description": "IODA detected significant connectivity drop in Lebanon. 1 critical alerts recorded.",
            "anomaly_rate": 0.07547169811320754,
            "country_code": "LB",
            "country_name": "Lebanon",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--d7be26ec-faff-58c2-9504-2e8bbb8aac0e",
      "incident--52c78a15-348f-52fe-a659-2aaf63159c60",
      "incident--8741a254-2a28-5758-5132-04c8b8832f38",
      "incident--dc6c40e4-2fa4-542d-dc8a-0f5ccd725ce6",
      "incident--52259dd2-5d54-54f4-6edf-609caa3bc1ce",
      "incident--c4e765e3-d18c-5553-5031-205b11807b9e",
      "incident--1d19a992-bd81-5ab1-b251-b086cc49b2d7",
      "incident--060cbfb7-0dfd-5099-abcf-76413739cbd8",
      "incident--4870b83a-dda7-54d1-39f5-30c8cc3049d4",
      "incident--0b6614d6-5024-5a13-2bdb-cbb5226baf6d",
      "incident--3a2e6c78-8415-51dd-3743-7a08a0403c0b",
      "incident--f8c5e92f-13a3-5ccc-ba39-58eade5d73f2",
      "incident--360ea9ba-d8d5-535f-db82-c811c049899a",
      "incident--5def09ab-55ad-5528-ff2d-ac9c6dbd1b2b",
      "incident--32406763-4096-550b-6da7-177a2bd49cef",
      "incident--92b5ab60-1330-5488-610e-cae93871312b",
      "incident--e01848a4-017a-53c5-b0d3-d580dcef16a1",
      "incident--a0a22641-45d7-5e72-16e3-adcdfea798c8",
      "incident--a84ceaa8-420a-5ad7-bb7d-229e1c8d6f30",
      "incident--c25b9c95-9909-5116-923c-c4af2e30c3de",
      "incident--cf54051e-3f61-5f0f-e0c7-e3978f659c74"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}