Spaces:
Paused
Paused
File size: 4,552 Bytes
4a2ab42 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 | {
"rules": [
{
"id": "default_structuring_detection",
"name": "Structuring Detection",
"description": "Detects transactions just below reporting thresholds",
"type": "RuleType.AMOUNT_ANALYSIS",
"conditions": [
"RuleCondition(field='amount', operator=<Operator.BETWEEN: 'between'>, value=[9000, 10000], case_sensitive=False, description='Amount between $9,000-$10,000')"
],
"logical_operator": "LogicalOperator.AND",
"severity": "high",
"enabled": true,
"tags": [
"structuring",
"smurfing"
],
"created_at": "2025-12-17 04:48:01.587898",
"updated_at": "2025-12-17 04:48:01.587902",
"trigger_count": 0,
"last_triggered": null,
"confidence_threshold": 0.8,
"action": "flag"
},
{
"id": "default_round_number_suspicion",
"name": "Round Number Suspicion",
"description": "Flags suspiciously round transaction amounts",
"type": "RuleType.AMOUNT_ANALYSIS",
"conditions": [
"RuleCondition(field='amount', operator=<Operator.GREATER_THAN: 'greater_than'>, value=1000, case_sensitive=False, description='Amount > $1,000')",
"RuleCondition(field='amount', operator=<Operator.REGEX_MATCH: 'regex_match'>, value='^\\\\d+000$', case_sensitive=False, description='Round number ending in 000s')"
],
"logical_operator": "LogicalOperator.AND",
"severity": "medium",
"enabled": true,
"tags": [
"round_numbers",
"suspicious"
],
"created_at": "2025-12-17 04:48:01.587910",
"updated_at": "2025-12-17 04:48:01.587911",
"trigger_count": 0,
"last_triggered": null,
"confidence_threshold": 0.8,
"action": "flag"
},
{
"id": "default_velocity_anomaly",
"name": "Velocity Anomaly",
"description": "Detects unusual transaction frequency",
"type": "RuleType.FREQUENCY_ANALYSIS",
"conditions": [
"RuleCondition(field='transactions_per_hour', operator=<Operator.GREATER_THAN: 'greater_than'>, value=10, case_sensitive=False, description='More than 10 transactions per hour')"
],
"logical_operator": "LogicalOperator.AND",
"severity": "high",
"enabled": true,
"tags": [
"velocity",
"frequency"
],
"created_at": "2025-12-17 04:48:01.587914",
"updated_at": "2025-12-17 04:48:01.587915",
"trigger_count": 0,
"last_triggered": null,
"confidence_threshold": 0.8,
"action": "flag"
},
{
"id": "default_geographic_anomaly",
"name": "Geographic Anomaly",
"description": "Transactions from unusual locations",
"type": "RuleType.GEOGRAPHIC_ANALYSIS",
"conditions": [
"RuleCondition(field='country', operator=<Operator.NOT_EQUALS: 'not_equals'>, value='US', case_sensitive=False, description='Transaction from outside US')",
"RuleCondition(field='amount', operator=<Operator.GREATER_THAN: 'greater_than'>, value=50000, case_sensitive=False, description='Large amount from unusual location')"
],
"logical_operator": "LogicalOperator.AND",
"severity": "high",
"enabled": true,
"tags": [
"geographic",
"international"
],
"created_at": "2025-12-17 04:48:01.587919",
"updated_at": "2025-12-17 04:48:01.587920",
"trigger_count": 0,
"last_triggered": null,
"confidence_threshold": 0.8,
"action": "flag"
},
{
"id": "default_shell_company_pattern",
"name": "Shell Company Pattern",
"description": "Detects potential shell company transactions",
"type": "RuleType.ENTITY_RELATIONSHIP",
"conditions": [
"RuleCondition(field='recipient_type', operator=<Operator.EQUALS: 'equals'>, value='corporation', case_sensitive=False, description='Recipient is a corporation')",
"RuleCondition(field='recipient_age_days', operator=<Operator.LESS_THAN: 'less_than'>, value=365, case_sensitive=False, description='Company less than 1 year old')"
],
"logical_operator": "LogicalOperator.AND",
"severity": "critical",
"enabled": true,
"tags": [
"shell_company",
"new_entity"
],
"created_at": "2025-12-17 04:48:01.587926",
"updated_at": "2025-12-17 04:48:01.587927",
"trigger_count": 0,
"last_triggered": null,
"confidence_threshold": 0.8,
"action": "flag"
}
],
"last_updated": "2025-12-17T04:48:01.587933",
"version": "1.0"
} |