Chronicle - Classifier

Classifies Chronicle incidents

Google SecOps Classification

Details

IDChronicle
Typeclassification
Version-1
From Version6.0.0
Default Incident Type—
FeedNo

Key Type Map

KeyIncident Type
AssetAlert Chronicle Asset Alert
DetectionAlert Chronicle Rule Detection
CuratedRuleDetectionAlert Chronicle Curated Rule Detection
IocDomainMatches Chronicle IOC Domain Matches
UserAlert Chronicle User Alert

Source

classifier-Chronicle.json
Download History Raw 
{
    "description": "Classifies Chronicle incidents",
    "feed": false,
    "id": "Chronicle",
    "keyTypeMap": {
        "AssetAlert": "Chronicle Asset Alert",
        "DetectionAlert": "Chronicle Rule Detection",
        "CuratedRuleDetectionAlert": "Chronicle Curated Rule Detection",
        "IocDomainMatches": "Chronicle IOC Domain Matches",
        "UserAlert": "Chronicle User Alert"
    },
    "name": "Chronicle - Classifier",
    "transformer": {
        "complex": null,
        "simple": "IncidentType"
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.0.0"
}