CTM360-CyberBlindspot - Incoming Mapper

{
	"description": "Maps incoming CTM360 CyberBlindspot incidents.",
	"feed": false,
	"id": "CTM360-CyberBlindspot - Incoming Mapper",
	"mapping": {
		"CyberBlindspot Incident": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"CTM360 CyberBlindspot BC Breach Source": {
					"simple": "CustomFields.breach_source"
				},
				"CTM360 CyberBlindspot BC Domain": {
					"simple": "CustomFields.domain"
				},
				"CTM360 CyberBlindspot BC Email": {
					"simple": "CustomFields.email"
				},
				"CTM360 CyberBlindspot BC Executive Name": {
					"simple": "CustomFields.executive_name"
				},
				"CTM360 CyberBlindspot BC Password": {
					"simple": "CustomFields.password"
				},
				"CTM360 CyberBlindspot BC Username": {
					"simple": "CustomFields.username"
				},
				"CTM360 CyberBlindspot Brand": {
					"simple": "CustomFields.brand"
				},
				"CTM360 CyberBlindspot CC CVV": {
					"simple": "CustomFields.cc_cvv"
				},
				"CTM360 CyberBlindspot CC Card Number": {
					"simple": "CustomFields.cc_card_number"
				},
				"CTM360 CyberBlindspot CC Expiry Month": {
					"simple": "CustomFields.cc_expiry_month"
				},
				"CTM360 CyberBlindspot CC Expiry Year": {
					"simple": "CustomFields.cc_expiry_year"
				},
				"CTM360 CyberBlindspot Class": {
					"simple": "CustomFields.class"
				},
				"CTM360 CyberBlindspot Confirmation Time": {
					"simple": "CustomFields.confirmation_time"
				},
				"CTM360 CyberBlindspot Course of Action": {
					"simple": "CustomFields.cbs_coa"
				},
				"CTM360 CyberBlindspot First Seen": {
					"simple": "occurred"
				},
				"CTM360 CyberBlindspot Incident Type": {
					"simple": "CustomFields.cbs_type"
				},
				"CTM360 CyberBlindspot Incident Status": {
					"simple": "CustomFields.incident_status"
				},
				"CTM360 CyberBlindspot GS Enrichment": {
					"simple": "CustomFields.enrichment"
				},
				"CTM360 CyberBlindspot GS External Links": {
					"simple": "CustomFields.external_links"
				},
				"CTM360 CyberBlindspot GS Finding ID": {
					"simple": "CustomFields.finding_id"
				},
				"CTM360 CyberBlindspot GS Internal Links": {
					"simple": "CustomFields.internal_links"
				},
				"CTM360 CyberBlindspot GS Landing URL": {
					"simple": "CustomFields.landing_url"
				},
				"CTM360 CyberBlindspot GS Resolving IP": {
					"simple": "CustomFields.resolving_ip"
				},
				"CTM360 CyberBlindspot GS Scan Status": {
					"simple": "CustomFields.scan_status"
				},
				"CTM360 CyberBlindspot GS Submitted URL": {
					"simple": "CustomFields.submitted_url"
				},
				"CTM360 CyberBlindspot GS Status Code": {
					"simple": "CustomFields.status_code"
				},
				"CTM360 CyberBlindspot GS Tags": {
					"simple": "CustomFields.tags"
				},
				"CTM360 CyberBlindspot GS Title": {
					"simple": "CustomFields.title"
				},
				"CTM360 CyberBlindspot GS URL": {
					"simple": "CustomFields.url"
				},
				"CTM360 CyberBlindspot GS URL Status": {
					"simple": "CustomFields.url_status"
				},
				"CTM360 CyberBlindspot MM Account Identifier": {
					"simple": "CustomFields.account_identifier"
				},
				"CTM360 CyberBlindspot MM BIC": {
					"simple": "CustomFields.bic"
				},
				"CTM360 CyberBlindspot MM Bank Account Country": {
					"simple": "CustomFields.bank_account_country"
				},
				"CTM360 CyberBlindspot MM Bank Account Holder Name": {
					"simple": "CustomFields.bank_account_holder_name"
				},
				"CTM360 CyberBlindspot MM Bank Name": {
					"simple": "CustomFields.bank_name"
				},
				"CTM360 CyberBlindspot MM Money Mule ID": {
					"simple": "CustomFields.money_mule_id"
				},
				"CTM360 CyberBlindspot MM Suspect Emails": {
					"simple": "CustomFields.suspect_emails"
				},
				"CTM360 CyberBlindspot MM Suspect Names": {
					"simple": "CustomFields.suspect_names"
				},
				"CTM360 CyberBlindspot MM Suspect Phones": {
					"simple": "CustomFields.suspect_phones"
				},
				"CTM360 CyberBlindspot MM Transfer Amount": {
					"simple": "CustomFields.transfer_amount"
				},
				"CTM360 CyberBlindspot MM Transfer Currency": {
					"simple": "CustomFields.transfer_currency"
				},
				"CTM360 CyberBlindspot SMF Platform": {
					"simple": "CustomFields.platform"
				},
				"CTM360 CyberBlindspot SMF Risk Score": {
					"simple": "CustomFields.risk_score"
				},
				"CTM360 CyberBlindspot Last Seen": {
					"simple": "CustomFields.cbs_updated_date"
				},
				"CTM360 CyberBlindspot ML Computer Name": {
					"simple": "CustomFields.computer_name"
				},
				"CTM360 CyberBlindspot ML Date Compromised": {
					"simple": "CustomFields.date_compromised"
				},
				"CTM360 CyberBlindspot ML Domain": {
					"simple": "CustomFields.domain"
				},
				"CTM360 CyberBlindspot ML Hostname": {
					"simple": "CustomFields.hostname"
				},
				"CTM360 CyberBlindspot ML Malware Path": {
					"simple": "CustomFields.malware_path"
				},
				"CTM360 CyberBlindspot ML Masked Password": {
					"simple": "CustomFields.masked_password"
				},
				"CTM360 CyberBlindspot ML Operating System": {
					"simple": "CustomFields.operating_system"
				},
				"CTM360 CyberBlindspot ML Password": {
					"simple": "CustomFields.password"
				},
				"CTM360 CyberBlindspot ML Software": {
					"simple": "CustomFields.software"
				},
				"CTM360 CyberBlindspot ML Source URI": {
					"simple": "CustomFields.source_uri"
				},
				"CTM360 CyberBlindspot ML Sources": {
					"simple": "CustomFields.sources"
				},
				"CTM360 CyberBlindspot ML Stealer Family": {
					"simple": "CustomFields.stealer_family"
				},
				"CTM360 CyberBlindspot ML URL Path": {
					"simple": "CustomFields.url_path"
				},
				"CTM360 CyberBlindspot ML User": {
					"simple": "CustomFields.user"
				},
				"CTM360 CyberBlindspot ML User Domain": {
					"simple": "CustomFields.user_domain"
				},
				"CTM360 CyberBlindspot ML Website": {
					"simple": "CustomFields.website"
				},
				"CTM360 CyberBlindspot Module": {
					"simple": "CustomFields.cbs_module"
				},
				"CTM360 CyberBlindspot Remarks": {
					"simple": "CustomFields.remarks"
				},
				"CTM360 CyberBlindspot Risks": {
					"simple": "CustomFields.risks"
				},
				"CTM360 CyberBlindspot Screenshots": {
					"simple": "CustomFields.screenshots"
				},
				"CTM360 CyberBlindspot Severity": {
					"simple": "CustomFields.severity"
				},
				"CTM360 CyberBlindspot Status": {
					"simple": "externalstatus"
				},
				"CTM360 CyberBlindspot Subject": {
					"simple": "CustomFields.subject"
				},
				"CTM360 CyberBlindspot Ticket ID": {
					"simple": "name"
				},
				"CTM360 CyberBlindspot Timestamp": {
					"simple": "CustomFields.timestamp"
				},
				"External Status": {
					"simple": "externalstatus"
				},
				"Ticket Number": {
					"simple": "xsoar_mirroring.mirror_id"
				},
				"dbotMirrorDirection": {
					"simple": "xsoar_mirroring.mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "xsoar_mirroring.mirror_id"
				},
				"dbotMirrorInstance": {
					"simple": "xsoar_mirroring.mirror_instance"
				},
				"name": {
					"complex": {
						"filters": [],
						"root": "name",
						"transformers": []
					}
				},
				"occurred": {
					"complex": {
						"filters": [],
						"root": "occurred",
						"transformers": []
					}
				},
				"severity": {
					"complex": {
						"filters": [],
						"root": "severity",
						"transformers": []
					}
				}
			}
		},
		"dbot_classification_incident_type_all": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"CTM360 CyberBlindspot Course of Action": {
					"simple": "CustomFields.cbs_coa"
				},
				"External Status": {
					"simple": "externalstatus"
				},
				"Ticket Number": {
					"simple": "xsoar_mirroring.mirror_id"
				},
				"dbotMirrorDirection": {
					"simple": "xsoar_mirroring.mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "xsoar_mirroring.mirror_id"
				},
				"dbotMirrorInstance": {
					"simple": "xsoar_mirroring.mirror_instance"
				},
				"name": {
					"complex": {
						"filters": [],
						"root": "name",
						"transformers": []
					}
				},
				"occurred": {
					"complex": {
						"filters": [],
						"root": "occurred",
						"transformers": []
					}
				},
				"severity": {
					"complex": {
						"filters": [],
						"root": "severity",
						"transformers": []
					}
				}
			}
		}
	},
	"name": "CTM360-CyberBlindspot - Incoming Mapper",
	"type": "mapping-incoming",
	"version": -1,
    "fromVersion": "6.10.0"
}