CrowdStrike Falcon - Outgoing Mapper

CrowdStrike Falcon mirror out mapper.

Details

ID	`CrowdStrike Falcon - Outgoing Mapper`
Type	mapping-outgoing
Version	-1
From Version	6.0.0
Default Incident Type	—
Feed	No

Source

classifier-mapper-outgoing-CrowdStrike_Falcon.json

Download History Raw

{
    "description": "CrowdStrike Falcon mirror out mapper.",
    "feed": false,
    "id": "CrowdStrike Falcon - Outgoing Mapper",
    "mapping": {
        "CrowdStrike Falcon Detection": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "state"
                }
            }
        },
        "CrowdStrike Falcon IDP Detection": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "state"
                }
            }
        },
        "CrowdStrike Falcon Mobile Detection": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "state"
                }
            }
        },
        "CrowdStrike Falcon On-Demand Scans Detection": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "state"
                }
            }
        },
        "CrowdStrike Falcon OFP Detection": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "state"
                }
            }
        },
        "CrowdStrike Falcon Third Party Detection": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "state"
                }
            }
        },
        "CrowdStrike Falcon NGSIEM Detection": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "state"
                }
            }
        },
        "CrowdStrike Falcon Incident": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "status": {
                    "simple": "sourcestatus"
                },
                "tag": {
                    "simple": "tags"
                }
            }
        }
    },
    "name": "CrowdStrike Falcon - Outgoing Mapper",
    "type": "mapping-outgoing",
    "version": -1,
    "fromVersion": "6.0.0",
    "marketplaces": [
        "xsoar"
    ]
}