[
  {
    "id": 3825896857,
    "indicator": "subprocess.run",
    "type": "domain",
    "created": "2026-05-19T02:35:51",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  }
]