{
  "rule_ids": [
    "variation_selector"
  ],
  "severity": "MEDIUM",
  "command_redacted": "curl -s \"https://api.telegram.org/bot8797218493:AAE602XOnZ3G0R0wlZbXx4al59zS_T5o...",
  "findings": [
    {
      "rule_id": "variation_selector",
      "severity": "MEDIUM",
      "title": "Variation selector characters detected",
      "description": "Content contains Unicode variation selectors (VS1-256). These are commonly used in emoji sequences but may indicate steganographic encoding or obfuscation",
      "evidence": [
        {
          "type": "byte_sequence",
          "offset": 167,
          "hex": "U+FE0F",
          "description": "variation selector U+FE0F"
        }
      ],
      "mitre_id": "T1036.005"
    }
  ],
  "timestamp": "2026-04-27T04:21:51.799878970+00:00"
}