Event Stream
Validated suspicious events. In live mode, raw event writes use the DynamoDB single-table event adapter.
AWS adapterSubmission kit
| Event | Entity | Severity | Risk | Stored In | Reason |
|---|---|---|---|---|---|
Payment Attempt 6/16/2026, 4:48:00 AM | Orion Retail acct_orion_4429 | Low | 18 | Demo Adapter | Base weight for payment_attempt events |
Api Abuse 6/16/2026, 4:36:00 AM | Sentinel Partner API api_partner_sentinel | High | 70 | Demo Adapter | 2,200 API calls in 4 minute(s) |
Refund Requested 6/16/2026, 4:18:00 AM | Marble Supply acct_marble_7750 | Medium | 50 | Demo Adapter | 4 refund requests tied to this account |
Login Success 6/16/2026, 4:08:00 AM | Marble Supply acct_marble_7750 | Medium | 47 | Demo Adapter | 1,220 km location change in 1.7 hours |
Chargeback Created 6/16/2026, 3:52:00 AM | Lyra Market acct_lyra_2231 | High | 76 | Demo Adapter | 3 chargebacks clustered around shared payment or device signals |
Ip Velocity 6/16/2026, 3:40:00 AM | Lyra Market acct_lyra_2231 | High | 69 | Demo Adapter | IP 198.51.100.88 is linked to 5 accounts with suspicious activity |
Payment Attempt 6/16/2026, 3:24:00 AM | Voyager Imports acct_voyager_1042 | Critical | 83 | Demo Adapter | New device fingerprint observed near a $12,450 transaction |
Login Failed 6/16/2026, 3:00:00 AM | Voyager Imports acct_voyager_1042 | Medium | 50 | Demo Adapter | 7 failed login attempts in the active investigation window |