new json format for attack steps