Brandefense - Incoming Mapper

Maps Brandefense API fields to Cortex XSOAR incident fields for both Incidents and Intelligence reports.

Brandefense Digital Risk Protection Services Mapper (In)

Details

IDBrandefense - Incoming Mapper
Typemapping-incoming
Version-1
From Version6.10.0
Default Incident TypeBrandefense Incident
FeedNo
{
    "id": "Brandefense - Incoming Mapper",
    "version": -1,
    "name": "Brandefense - Incoming Mapper",
    "description": "Maps Brandefense API fields to Cortex XSOAR incident fields for both Incidents and Intelligence reports.",
    "type": "mapping-incoming",
    "feed": false,
    "fromVersion": "6.10.0",
    "defaultIncidentType": "Brandefense Incident",
    "mapping": {
        "Brandefense Incident": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "Name": {
                    "simple": "title",
                    "complex": null
                },
                "Severity": {
                    "simple": "severity",
                    "complex": null
                },
                "Details": {
                    "simple": "description",
                    "complex": null
                },
                "Brandefense Incident Code": {
                    "simple": "code",
                    "complex": null
                },
                "Brandefense Incident Status": {
                    "simple": "status",
                    "complex": null
                },
                "Brandefense Incident Module": {
                    "simple": "module",
                    "complex": null
                },
                "Brandefense Incident Module Category": {
                    "simple": "module_category",
                    "complex": null
                },
                "Brandefense Incident Type": {
                    "simple": "brandefense_original_type",
                    "complex": null
                },
                "Brandefense Incident Tags": {
                    "simple": "tags",
                    "complex": null
                },
                "Brandefense Incident Assignee": {
                    "simple": "assignee",
                    "complex": null
                },
                "Brandefense Incident Network Type": {
                    "simple": "network_type",
                    "complex": null
                },
                "occurred": {
                    "simple": "created_at",
                    "complex": null
                },
                "Alert URL": {
                    "simple": "reference_url",
                    "complex": null
                },
                "Brandefense Indicators": {
                    "simple": "indicators",
                    "complex": null
                },
                "MITRE Tactic ID": {
                    "simple": "mitre_tactics",
                    "complex": null
                }
            }
        },
        "Brandefense Intelligence": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "Name": {
                    "simple": "title",
                    "complex": null
                },
                "Severity": {
                    "simple": "severity",
                    "complex": null
                },
                "Details": {
                    "simple": "description",
                    "complex": null
                },
                "Brandefense Intelligence Code": {
                    "simple": "code",
                    "complex": null
                },
                "Brandefense Intelligence Category": {
                    "simple": "category",
                    "complex": null
                },
                "Brandefense Intelligence Tags": {
                    "simple": "tags",
                    "complex": null
                },
                "occurred": {
                    "simple": "created_at",
                    "complex": null
                },
                "Alert URL": {
                    "simple": "reference_url",
                    "complex": null
                },
                "Brandefense Indicators": {
                    "simple": "indicators",
                    "complex": null
                }
            }
        }
    },
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}