Get a device infection

{
    "alert_categories": [
        "Malware",
        "CommandAndControl"
    ],
    "allowlisted": true,
    "critical_alert_count": 1,
    "description": "Malicious file detected on endpoint",
    "detection_time": "2021-01-01T00:00:00Z",
    "device": {
        "activation_lock": "unspecified",
        "active_usb_connections": {
            "composite_count": 0,
            "hid_count": 2,
            "kvm_count": 0,
            "max_usb_risk_level": 1,
            "network_adapter_count": 0,
            "storage_count": 1,
            "unknown_count": 0
        },
        "antivirus": "unspecified",
        "apps_installed": 47,
        "disk_encryption": "unspecified",
        "employee_email": "joe.smith@example.com",
        "employee_name": "Joe Smith",
        "id": "8CA67511-744C-4D74-B26E-7281CF88712F",
        "last_seen": "2021-01-01T00:00:00Z",
        "last_usb_usage": "2021-01-01T00:00:00Z",
        "local_user_accounts": [
            {
                "admin": true,
                "name": "John Doe",
                "user_id": "S-1-5-21-1234567890-1234567890-1234567890-1001",
                "username": "john.doe"
            }
        ],
        "mac_addresses": [
            "00:1B:44:11:3A:B7"
        ],
        "mdm": "unspecified",
        "model": "MacBook Pro",
        "name": "Joe's Mac",
        "platform": "windows",
        "risk_factors": [
            {
                "magnitude": 40,
                "type": "sensitive_file"
            }
        ],
        "risk_score": 9.2,
        "serial_number": "C02X1234DC79",
        "sources": [
            "unspecified"
        ]
    },
    "employee_email": "joe.smith@example.com",
    "employee_name": "Joe Smith",
    "external_id": "19414015",
    "high_alert_count": 3,
    "high_prevalence": true,
    "id": "8CA67511-744C-4D74-B26E-7281CF88712F",
    "mitre_tactics_ids_and_names": [
        "TA0001 - Initial Access",
        "TA0002 - Execution"
    ],
    "mitre_techniques_ids_and_names": [
        "T1566 - Phishing",
        "T1059 - Command and Scripting Interpreter"
    ],
    "name": "RIG Exploit Kit Detection",
    "network_origin": {
        "geographic_location": {
            "city": "San Francisco",
            "country": "United States",
            "country_code": "US",
            "latitude": 0,
            "longitude": 0,
            "region": "California",
            "timezone": "America/Los_Angeles"
        },
        "ip": "203.0.113.45",
        "network": {
            "asn": "AS15169",
            "asn_name": "Google LLC",
            "host_type": [
                "HOSTING",
                "ANYCAST"
            ]
        },
        "privacy": {
            "privacy_mode": [
                "VPN"
            ],
            "service_name": "NordVPN"
        }
    },
    "risk_factors": [
        {
            "magnitude": 40,
            "type": "sensitive_file"
        }
    ],
    "risk_score": 9.2,
    "severity": "low",
    "source": "unspecified",
    "status": "quarantined",
    "type": "unspecified",
    "xdr_url": "https://xdr.example.com/incident/12345"
}