actor.internal.job_change_empty.json

{
  "incident": {
    "action": {
      "Unknown": {}
    },
    "actor": {
      "internal": {
        "job_change": ["Promoted"],
        "notes": "This is a test",
        "variety": [
          "Auditor"
        ]
      }
    },
    "asset": {
      "assets": [
        {
          "variety": "S - Unknown"
        }
      ]
    },
    "attribute": {
      "integrity": {
        "variety": [
          "Defacement"
        ]
      }
    },
    "discovery_method": "Int - unknown",
    "incident_id": "test",
    "schema_version": "1.3",
    "security_incident": "Confirmed",
    "timeline": {
      "incident": {
        "year": 2014
      }
    }
  },
  "message": "actor.internal.job_change is empty []. Test should fail.",
  "should": "fail"
}