{
  "configured": true,
  "findings": [
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T23:07:06.195Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T22:07:06.196Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T21:07:06.194Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T20:07:06.239Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T19:07:06.217Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T18:07:06.200Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T17:07:06.200Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T16:07:06.214Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T15:07:06.210Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T14:07:06.188Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T13:07:06.201Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T12:07:06.206Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T11:07:06.202Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T10:07:06.207Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T09:07:06.209Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T08:07:06.195Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T07:07:06.193Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T06:07:06.192Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T05:07:06.186Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T04:07:06.189Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T03:07:06.182Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T02:07:06.186Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T01:07:06.296Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-07T00:07:52.347Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T23:07:52.331Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T22:07:52.330Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T21:07:52.332Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T20:07:52.342Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T19:07:52.337Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T18:07:52.334Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T17:07:52.356Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T16:07:52.340Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T15:07:52.336Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T14:07:52.345Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T13:07:52.357Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T12:07:52.335Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T11:07:52.347Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T10:07:52.344Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T09:07:52.360Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T08:07:52.337Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-06T07:05:12Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-06T07:07:52.341Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T14:30:32Z",
      "summary": "Authentication at 14:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-05T23:07:52.329Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T14:30:32Z",
      "summary": "Authentication at 14:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-05T22:07:52.335Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T14:30:32Z",
      "summary": "Authentication at 14:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-05T21:07:52.345Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T14:30:32Z",
      "summary": "Authentication at 14:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T16:07:52.357Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T14:30:32Z",
      "summary": "Authentication at 14:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T15:07:52.355Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-04T13:02:18Z",
      "summary": "Authentication at 13:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T14:07:52.337Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-04T13:02:18Z",
      "summary": "Authentication at 13:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T13:07:52.335Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-04T11:47:58Z",
      "summary": "Authentication at 11:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T12:07:52.366Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T10:34:37Z",
      "summary": "Authentication at 10:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T11:07:52.341Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-04T09:20:15Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T10:07:52.345Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T09:04:09Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T09:07:52.339Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-11-04T07:08:05Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T08:07:52.342Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-04T07:07:05Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-04T07:07:52.360Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T17:07:52.364Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T16:07:52.341Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T15:07:52.343Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T14:07:52.338Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T13:07:52.685Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T12:07:21.754Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T11:07:21.756Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T10:07:21.771Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-11-03T08:11:40Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-11-03T09:07:21.884Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T17:07:15.220Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T16:07:16.387Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T15:07:16.655Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T14:07:16.704Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T13:07:16.413Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T12:07:18.037Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T11:07:16.323Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T10:07:16.236Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T09:07:17.457Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T08:07:15.861Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T07:07:16.321Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T06:07:16.015Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T05:07:15.810Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T04:07:16.112Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T03:07:53.493Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T02:07:53.650Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T01:07:54.035Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-30T00:07:54.221Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T23:07:54.324Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T22:07:54.429Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T21:07:54.984Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T20:07:54.751Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T19:07:55.033Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T18:07:54.462Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T17:07:54.602Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T16:07:54.544Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T15:07:54.570Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T14:07:54.326Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T13:07:54.528Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T12:07:54.208Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T11:07:55.011Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T10:07:53.923Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T09:07:53.437Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-29T07:32:35Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-29T08:07:54.406Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T23:07:21.410Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T22:07:21.416Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T21:07:21.415Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T20:07:21.446Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T19:07:23.318Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T18:07:21.493Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T17:07:21.444Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T16:07:21.478Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T15:07:21.480Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T14:07:21.480Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-26T12:16:47Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-26T13:07:21.457Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T20:07:24.751Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T19:07:25.359Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T18:07:24.555Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T17:07:25.311Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T16:07:26.155Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T15:07:25.245Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T14:07:26.027Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T13:07:24.851Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T12:07:25.678Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T11:07:25.001Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-19T09:10:47Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-19T10:07:25.398Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-16T12:23:22Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-17T19:07:26.534Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-16T12:23:22Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-17T18:07:26.076Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-16T12:23:22Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-16T17:07:28.436Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-16T12:23:22Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-16T16:07:29.166Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-16T12:23:22Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-16T15:07:28.183Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-16T12:23:22Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-16T14:07:29.479Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-16T12:23:22Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-16T13:07:28.164Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-15T23:07:51.936Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-15T22:07:52.624Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-15T21:07:53.635Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T20:07:55.166Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T19:07:58.781Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T18:07:55.374Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T17:07:54.597Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T16:07:55.016Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T15:07:54.625Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T14:07:55.858Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T13:07:54.821Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T12:07:55.178Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T11:07:55.149Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T10:07:53.801Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T08:24:16Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T09:07:54.385Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-14T07:28:27Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-14T08:07:54.226Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T12:33:59Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-13T23:07:48.710Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T12:33:59Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-13T22:07:48.530Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T12:33:59Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-13T21:07:50.824Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T12:33:59Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-13T20:07:51.079Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T12:33:59Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-12T15:07:50.933Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T12:33:59Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-12T14:07:51.916Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T12:33:59Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-12T13:07:52.155Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T10:17:35Z",
      "summary": "Authentication at 10:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-12T12:07:51.843Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-12T10:17:35Z",
      "summary": "Authentication at 10:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-12T11:07:51.442Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-11T05:07:31.496Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-11T04:07:30.801Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-11T03:07:31.279Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-11T02:07:29.395Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-11T01:07:30.191Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-11T00:07:33.115Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T23:07:31.508Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T22:07:31.620Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T21:07:35.616Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T20:07:33.595Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T19:07:33.602Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T18:07:41.458Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T17:07:35.604Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T16:07:32.796Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T15:07:33.100Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T14:07:35.211Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T13:07:32.343Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T12:07:35.013Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T11:07:34.640Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T10:07:32.445Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-10T08:45:11Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-10T09:07:43.704Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-09T14:57:48Z",
      "summary": "Authentication at 14:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T16:07:39.970Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-09T14:57:48Z",
      "summary": "Authentication at 14:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T15:07:36.160Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-09T13:48:52Z",
      "summary": "Authentication at 13:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T14:07:32.097Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-09T11:39:30Z",
      "summary": "Authentication at 11:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T12:07:37.209Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-09T11:04:21Z",
      "summary": "Authentication at 11:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T11:07:45.125Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-09T09:10:05Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T10:07:43.715Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-09T07:55:50Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T09:07:40.785Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-09T07:55:50Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-09T08:07:45.027Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-06T13:57:22Z",
      "summary": "Authentication at 13:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T15:07:38.093Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-06T13:57:22Z",
      "summary": "Authentication at 13:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T14:07:40.386Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-06T13:01:49Z",
      "summary": "Authentication at 13:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T13:07:35.636Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-06T12:05:37Z",
      "summary": "Authentication at 12:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T12:07:32.619Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-06T10:34:46Z",
      "summary": "Authentication at 10:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T11:07:36.023Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-06T09:30:10Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T10:07:31.112Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-06T08:25:13Z",
      "summary": "Authentication at 8:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T09:07:34.360Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "files.amirslm.com/",
      "at": "2026-10-06T07:51:16Z",
      "summary": "Authentication at 7:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-06T08:07:34.534Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-04T23:07:29.500Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-04T22:07:30.514Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-04T21:07:31.639Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-04T20:07:34.738Z"
    },
    {
      "rule": "first-seen-ip",
      "severity": "medium",
      "user": "amir_alrabadi@yahoo.com",
      "ips": [
        "76.169.208.171"
      ],
      "summary": "amir_alrabadi@yahoo.com authenticated from 1 address(es) not seen before.",
      "detectedAt": "2026-10-03T20:07:34.083Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-03T20:07:34.083Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-03T19:07:34.997Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-03T18:07:30.906Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-03T17:07:30.701Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-03T16:07:31.310Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-03T15:07:30.493Z"
    },
    {
      "rule": "off-hours-access",
      "severity": "low",
      "user": "cf7d0bef055ec3a4100bc9bc5a3f845a.access",
      "app": "llm.amirslm.com/",
      "at": "2026-10-03T09:17:28Z",
      "summary": "Authentication at 9:00 UTC, outside normal hours.",
      "detectedAt": "2026-10-03T14:07:33.885Z"
    }
  ]
}