Alert Schema

Graph Data Schema

This page documents the primary viewer payload schema emitted by graph/build_graph.py.

Top-Level Payload

{
  "nodes": [...],
  "edges": [...],
  "metadata": {...},
  "meta": {...}
}

Node Fields (common)

Typical node keys in graph_3d_render.json include:

• id, label, kind
• source, source_key, subsource, source_url
• group, sector, country
• victim_name, victim_domain
• ioc_type, ioc_value, family, malware
• confidence, severity, time_layer
• first_observed, last_observed, posted_at, last_activity
• x, y, z
• Visual fields such as node_color, source_color, spectrum_color, glow_color

Edge Fields

Common edge keys:

• source
• target
• type
• weight

Notes

• Render payload is optimized for the Three.js viewer.
• Schema can expand as feeds and enrichments evolve.