[
  {
    "ticket_id": "TKT-5001",
    "incident_id": "INC-1001",
    "title": "Investigate suspicious container on web-prod-01",
    "status": "open",
    "priority": "high",
    "risk": "high",
    "asset_id": "ASSET-001",
    "assignee_user_id": "USR-300",
    "created_at": "2026-06-18T02:30:00Z",
    "comments": [
      {
        "author_user_id": "USR-300",
        "at": "2026-06-18T02:35:00Z",
        "body": "Triage started; container suspicious-nginx flagged for containment review."
      }
    ]
  },
  {
    "ticket_id": "TKT-5002",
    "incident_id": "INC-1003",
    "title": "Patch Log4j on db-prod-01",
    "status": "open",
    "priority": "medium",
    "risk": "medium",
    "asset_id": "ASSET-002",
    "assignee_user_id": "USR-300",
    "created_at": "2026-06-17T22:30:00Z",
    "comments": []
  }
]