Cybersixgill Actionable Alerts - Incoming Mapper

Cybersixgill Actionable Alerts Mapper (In)

Details

IDCybersixgill Actionable Alerts - Incoming Mapper
Typemapping-incoming
Version-1
From Version6.10.0
Default Incident Type
FeedNo
{
    "description": "",
    "feed": false,
    "id": "Cybersixgill Actionable Alerts - Incoming Mapper",
    "mapping": {
        "Cybersixgill Actionable Alerts": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "Cybersixgill CVSS 2.0": {
                    "simple": "additional_info.nvd.v3.current"
                },
                "Cybersixgill CVSS 3.1": {
                    "simple": "additional_info.nvd.v2.current"
                },
                "Cybersixgill DVE Score": {
                    "simple": "additional_info.score.current"
                },
                "Cybersixgill Suspicious domain": {
                    "simple": "additional_info.tables.suspicious_domain"
                },
                "Cybersixgill Triggered domain": {
                    "simple": "additional_info.tables.triggered_domain"
                },
                "Cybersixgill Post URL": {
                    "complex": {
                        "filters": [
                            [
                                {
                                    "left": {
                                        "isContext": true,
                                        "value": {
                                            "simple": "alert_post_url"
                                        }
                                    },
                                    "operator": "isNotEmpty"
                                }
                            ]
                        ],
                        "root": "alert_post_url",
                        "transformers": []
                    }
                }
            }
        }
    },
    "name": "Cybersixgill Actionable Alerts - Incoming Mapper",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.10.0"
}