{
  "appendConditionMessages": true,
  "clearConditions": [
    {
      "aggregation": 9,
      "comparison": 7,
      "duration": 9,
      "id": 8,
      "indicatorTypeId": 10,
      "isTrigger": false,
      "message": "string",
      "policyId": 6,
      "sigmaDirection": 5,
      "type": 9,
      "unit": "string",
      "value": 3
    },
    {
      "aggregation": 7,
      "comparison": 4,
      "duration": 4,
      "id": 2,
      "indicatorTypeId": 2,
      "isTrigger": true,
      "message": "string",
      "policyId": 2,
      "sigmaDirection": 7,
      "type": 7,
      "unit": "string",
      "value": 6
    },
    {
      "aggregation": 8,
      "comparison": 8,
      "duration": 4,
      "id": 8,
      "indicatorTypeId": 10,
      "isTrigger": true,
      "message": "string",
      "policyId": 9,
      "sigmaDirection": 10,
      "type": 6,
      "unit": "string",
      "value": 5
    },
    {
      "aggregation": 7,
      "comparison": 7,
      "duration": 1,
      "id": 8,
      "indicatorTypeId": 6,
      "isTrigger": true,
      "message": "string",
      "policyId": 9,
      "sigmaDirection": 2,
      "type": 1,
      "unit": "string",
      "value": 5
    },
    {
      "aggregation": 9,
      "comparison": 7,
      "duration": 6,
      "id": 3,
      "indicatorTypeId": 6,
      "isTrigger": true,
      "message": "string",
      "policyId": 2,
      "sigmaDirection": 5,
      "type": 10,
      "unit": "string",
      "value": 6
    },
    {
      "aggregation": 10,
      "comparison": 5,
      "duration": 1,
      "id": 3,
      "indicatorTypeId": 5,
      "isTrigger": false,
      "message": "string",
      "policyId": 6,
      "sigmaDirection": 6,
      "type": 7,
      "unit": "string",
      "value": 2
    },
    {
      "aggregation": 10,
      "comparison": 7,
      "duration": 8,
      "id": 6,
      "indicatorTypeId": 3,
      "isTrigger": false,
      "message": "string",
      "policyId": 6,
      "sigmaDirection": 1,
      "type": 7,
      "unit": "string",
      "value": 7
    },
    {
      "aggregation": 9,
      "comparison": 8,
      "duration": 6,
      "id": 6,
      "indicatorTypeId": 7,
      "isTrigger": false,
      "message": "string",
      "policyId": 2,
      "sigmaDirection": 10,
      "type": 3,
      "unit": "string",
      "value": 9
    }
  ],
  "clearExpression": "string",
  "clearMessage": "string",
  "description": "string",
  "flow": {
    "direction": 9,
    "filterId": 4,
    "id": 9,
    "viewId": 6
  },
  "folderId": 7,
  "groupId": 1,
  "groupIdList": [
    4,
    7,
    5,
    2,
    2,
    8,
    4
  ],
  "id": 7,
  "isDeviceGroup": true,
  "isMemberOfAny": false,
  "lastUpdated": 1,
  "mailOnce": false,
  "mailPeriod": 7,
  "mailTo": "string",
  "name": "string",
  "objectSubTypeId": 2,
  "objectTypeId": 5,
  "pluginId": 8,
  "severity": 5,
  "triggerConditions": [
    {
      "aggregation": 2,
      "comparison": 3,
      "duration": 9,
      "id": 7,
      "indicatorTypeId": 8,
      "isTrigger": false,
      "message": "string",
      "policyId": 6,
      "sigmaDirection": 9,
      "type": 4,
      "unit": "string",
      "value": 6
    },
    {
      "aggregation": 9,
      "comparison": 4,
      "duration": 3,
      "id": 8,
      "indicatorTypeId": 4,
      "isTrigger": true,
      "message": "string",
      "policyId": 7,
      "sigmaDirection": 8,
      "type": 3,
      "unit": "string",
      "value": 2
    },
    {
      "aggregation": 3,
      "comparison": 3,
      "duration": 3,
      "id": 8,
      "indicatorTypeId": 8,
      "isTrigger": false,
      "message": "string",
      "policyId": 10,
      "sigmaDirection": 10,
      "type": 9,
      "unit": "string",
      "value": 9
    },
    {
      "aggregation": 8,
      "comparison": 6,
      "duration": 5,
      "id": 7,
      "indicatorTypeId": 8,
      "isTrigger": false,
      "message": "string",
      "policyId": 7,
      "sigmaDirection": 2,
      "type": 5,
      "unit": "string",
      "value": 2
    },
    {
      "aggregation": 8,
      "comparison": 5,
      "duration": 2,
      "id": 7,
      "indicatorTypeId": 2,
      "isTrigger": true,
      "message": "string",
      "policyId": 1,
      "sigmaDirection": 9,
      "type": 2,
      "unit": "string",
      "value": 7
    },
    {
      "aggregation": 1,
      "comparison": 3,
      "duration": 2,
      "id": 2,
      "indicatorTypeId": 7,
      "isTrigger": true,
      "message": "string",
      "policyId": 6,
      "sigmaDirection": 6,
      "type": 2,
      "unit": "string",
      "value": 4
    },
    {
      "aggregation": 4,
      "comparison": 7,
      "duration": 3,
      "id": 3,
      "indicatorTypeId": 5,
      "isTrigger": false,
      "message": "string",
      "policyId": 9,
      "sigmaDirection": 9,
      "type": 4,
      "unit": "string",
      "value": 4
    },
    {
      "aggregation": 6,
      "comparison": 5,
      "duration": 10,
      "id": 5,
      "indicatorTypeId": 3,
      "isTrigger": false,
      "message": "string",
      "policyId": 6,
      "sigmaDirection": 9,
      "type": 2,
      "unit": "string",
      "value": 6
    },
    {
      "aggregation": 6,
      "comparison": 10,
      "duration": 3,
      "id": 7,
      "indicatorTypeId": 4,
      "isTrigger": false,
      "message": "string",
      "policyId": 2,
      "sigmaDirection": 7,
      "type": 5,
      "unit": "string",
      "value": 8
    },
    {
      "aggregation": 3,
      "comparison": 10,
      "duration": 3,
      "id": 8,
      "indicatorTypeId": 3,
      "isTrigger": false,
      "message": "string",
      "policyId": 6,
      "sigmaDirection": 5,
      "type": 2,
      "unit": "string",
      "value": 3
    }
  ],
  "triggerExpression": "string",
  "triggerMessage": "string",
  "type": "flow",
  "useCustomTraps": true,
  "useDefaultTraps": true,
  "useDeviceTraps": false,
  "userEnabled": 9
}