{"columns":[{"name":"community_id","type":"string"},{"name":"conn_state","type":"string"},{"name":"duration","type":"double"},{"name":"history","type":"string"},{"name":"src_ip_zeek","type":"string"},{"name":"src_port_zeek","type":"int64"},{"name":"dest_ip_zeek","type":"string"},{"name":"dest_port_zeek","type":"int64"},{"name":"local_orig","type":"bool"},{"name":"local_resp","type":"bool"},{"name":"missed_bytes","type":"int64"},{"name":"orig_bytes","type":"int64"},{"name":"orig_ip_bytes","type":"int64"},{"name":"orig_pkts","type":"int64"},{"name":"proto","type":"string"},{"name":"resp_bytes","type":"int64"},{"name":"resp_ip_bytes","type":"int64"},{"name":"resp_pkts","type":"int64"},{"name":"service","type":"string"},{"name":"ts","type":"double"},{"name":"uid","type":"string"},{"name":"datetime","type":"timestamp[ns]"},{"name":"label_tactic","type":"string"},{"name":"label_technique","type":"string"},{"name":"label_binary","type":"string"}],"n_rows":5,"rows_kept":5,"cut":false,"text_format":"parquet-jsonl-2026-10-02","bounds":{"document_bytes":16777216,"package_text_limit_bytes":33554432,"package_text_slack_bytes":1024,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096,"vector_min":64,"vector_head_fixed":16,"vector_head_variable":64,"kv_value_chars":1048576,"nesting_max":64,"binary_text":true},"cells_cut":0,"cells_bad_utf8":0,"cells_raw":0,"cells_binary":0,"cells_binary_text":0,"cells_vector":0,"n_row_groups":1,"reader":"pyarrow 23.0.1, python 3.13","created_by":"parquet-mr version 1.12.2 (build 77e30c8093386ec52c3cfa6c34b7ef3321322c94)","schema":{"fields":[{"name":"community_id","type":"string","nullable":true,"metadata":null,"children":null},{"name":"conn_state","type":"string","nullable":true,"metadata":null,"children":null},{"name":"duration","type":"double","nullable":true,"metadata":null,"children":null},{"name":"history","type":"string","nullable":true,"metadata":null,"children":null},{"name":"src_ip_zeek","type":"string","nullable":true,"metadata":null,"children":null},{"name":"src_port_zeek","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"dest_ip_zeek","type":"string","nullable":true,"metadata":null,"children":null},{"name":"dest_port_zeek","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"local_orig","type":"bool","nullable":true,"metadata":null,"children":null},{"name":"local_resp","type":"bool","nullable":true,"metadata":null,"children":null},{"name":"missed_bytes","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"orig_bytes","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"orig_ip_bytes","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"orig_pkts","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"proto","type":"string","nullable":true,"metadata":null,"children":null},{"name":"resp_bytes","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"resp_ip_bytes","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"resp_pkts","type":"int64","nullable":true,"metadata":null,"children":null},{"name":"service","type":"string","nullable":true,"metadata":null,"children":null},{"name":"ts","type":"double","nullable":true,"metadata":null,"children":null},{"name":"uid","type":"string","nullable":true,"metadata":null,"children":null},{"name":"datetime","type":"timestamp[ns]","nullable":true,"metadata":null,"children":null},{"name":"label_tactic","type":"string","nullable":true,"metadata":null,"children":null},{"name":"label_technique","type":"string","nullable":true,"metadata":null,"children":null},{"name":"label_binary","type":"string","nullable":false,"metadata":null,"children":null}],"parquet":"required group field_id=-1 spark_schema {\n  optional binary field_id=-1 community_id (String);\n  optional binary field_id=-1 conn_state (String);\n  optional double field_id=-1 duration;\n  optional binary field_id=-1 history (String);\n  optional binary field_id=-1 src_ip_zeek (String);\n  optional int64 field_id=-1 src_port_zeek;\n  optional binary field_id=-1 dest_ip_zeek (String);\n  optional int64 field_id=-1 dest_port_zeek;\n  optional boolean field_id=-1 local_orig;\n  optional boolean field_id=-1 local_resp;\n  optional int64 field_id=-1 missed_bytes;\n  optional int64 field_id=-1 orig_bytes;\n  optional int64 field_id=-1 orig_ip_bytes;\n  optional int64 field_id=-1 orig_pkts;\n  optional binary field_id=-1 proto (String);\n  optional int64 field_id=-1 resp_bytes;\n  optional int64 field_id=-1 resp_ip_bytes;\n  optional int64 field_id=-1 resp_pkts;\n  optional binary field_id=-1 service (String);\n  optional double field_id=-1 ts;\n  optional binary field_id=-1 uid (String);\n  optional int96 field_id=-1 datetime;\n  optional binary field_id=-1 label_tactic (String);\n  optional binary field_id=-1 label_technique (String);\n  required binary field_id=-1 label_binary (String);\n}\n"},"kv_metadata":[["org.apache.spark.sql.parquet.row.metadata","{\"type\":\"struct\",\"fields\":[{\"name\":\"community_id\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"conn_state\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"duration\",\"type\":\"double\",\"nullable\":true,\"metadata\":{}},{\"name\":\"history\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"src_ip_zeek\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"src_port_zeek\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"dest_ip_zeek\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"dest_port_zeek\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"local_orig\",\"type\":\"boolean\",\"nullable\":true,\"metadata\":{}},{\"name\":\"local_resp\",\"type\":\"boolean\",\"nullable\":true,\"metadata\":{}},{\"name\":\"missed_bytes\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"orig_bytes\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"orig_ip_bytes\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"orig_pkts\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"proto\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"resp_bytes\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"resp_ip_bytes\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"resp_pkts\",\"type\":\"long\",\"nullable\":true,\"metadata\":{}},{\"name\":\"service\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"ts\",\"type\":\"double\",\"nullable\":true,\"metadata\":{}},{\"name\":\"uid\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"datetime\",\"type\":\"timestamp\",\"nullable\":true,\"metadata\":{}},{\"name\":\"label_tactic\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"label_technique\",\"type\":\"string\",\"nullable\":true,\"metadata\":{}},{\"name\":\"label_binary\",\"type\":\"string\",\"nullable\":false,\"metadata\":{}}]}"],["org.apache.spark.version","3.3.0"]]}
["1:52yAKDtnHSPDIljwNPlA+UWODdA=","SF",0.04184913635253906,"ShAdDFaf","143.88.10.11",57042,"143.88.10.16",9999,false,false,0,114,590,9,"tcp",73,393,6,null,1664993674.531364,"CqO92B3QWHYhyPdtse","2022-10-05T18:14:34.531000000","Execution","T1059","True"]
["1:CLE/zfbKMSEi1spOm7y0JJKUgO4=","SF",0.046800851821899414,"ShAdDFaf","143.88.10.11",57044,"143.88.10.16",9999,false,false,0,1014,1490,9,"tcp",73,393,6,null,1664993691.275844,"CPwSIpstvV2fZBc4k","2022-10-05T18:14:51.275000000","Execution","T1059","True"]
["1:TTpmQx1wKxVI3KmlIDAsdr/5rXg=","S1",0.01205897331237793,"ShAdDa","143.88.10.11",57046,"143.88.10.16",9999,false,false,0,3008,3328,6,"tcp",51,215,3,null,1664993697.059843,"Cy4bYOmyBBGRSvod9","2022-10-05T18:14:57.059000000","Execution","T1059","True"]
["1:VhB7MbbJ52hjItNqXYgI9n8660Q=","SF",0.013730049133300781,"Dd","143.88.20.12",68,"143.88.20.1",67,false,false,0,600,656,2,"udp",600,656,2,"dhcp",1664883645.900091,"CMcgot3HfOuCDV3s11","2022-10-04T11:40:45.900000000","Collection","T1557","True"]
["1:VhB7MbbJ52hjItNqXYgI9n8660Q=","SF",0.013730049133300781,"Dd","143.88.20.12",68,"143.88.20.1",67,false,false,0,600,656,2,"udp",600,656,2,"dhcp",1664883645.900091,"CMcgot3HfOuCDV3s11","2022-10-04T11:40:45.900000000","Credential Access","Duplicate","Duplicate"]