Darkmon - Feed Mapper

Maps raw Darkmon indicator JSON to XSOAR indicator fields per indicator type.
Darkmon Mapper (In) Feed
Details

ID	`Darkmon - Feed Mapper`
Type	mapping-incoming
Version	-1
From Version	6.8.0
Default Incident Type	IP
Feed	Yes
Source

classifier-mapper-incoming-Darkmon_-_Feed_Mapper.json
Download History Raw
{
    "id": "Darkmon - Feed Mapper",
    "version": -1,
    "fromVersion": "6.8.0",
    "name": "Darkmon - Feed Mapper",
    "description": "Maps raw Darkmon indicator JSON to XSOAR indicator fields per indicator type.",
    "type": "mapping-incoming",
    "feed": true,
    "defaultIncidentType": "IP",
    "mapping": {
        "IP": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "description": {
                    "simple": "eventInfo"
                },
                "firstseenbysource": {
                    "simple": "timestamp"
                },
                "lastseenbysource": {
                    "simple": "timestamp"
                },
                "darkmonclassification": {
                    "simple": "classification"
                }
            }
        },
        "Domain": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "description": {
                    "simple": "eventInfo"
                },
                "firstseenbysource": {
                    "simple": "timestamp"
                },
                "lastseenbysource": {
                    "simple": "timestamp"
                },
                "darkmonclassification": {
                    "simple": "classification"
                }
            }
        },
        "URL": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "description": {
                    "simple": "eventInfo"
                },
                "firstseenbysource": {
                    "simple": "timestamp"
                },
                "lastseenbysource": {
                    "simple": "timestamp"
                },
                "darkmonclassification": {
                    "simple": "classification"
                }
            }
        },
        "File": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "description": {
                    "simple": "eventInfo"
                },
                "firstseenbysource": {
                    "simple": "timestamp"
                },
                "lastseenbysource": {
                    "simple": "timestamp"
                },
                "darkmonclassification": {
                    "simple": "classification"
                }
            }
        },
        "Email": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "description": {
                    "simple": "eventInfo"
                },
                "firstseenbysource": {
                    "simple": "timestamp"
                },
                "lastseenbysource": {
                    "simple": "timestamp"
                },
                "darkmoncompromisesources": {
                    "simple": "compromise_sources"
                },
                "darkmonfirstcompromise": {
                    "simple": "first_compromise"
                },
                "darkmonlastcompromise": {
                    "simple": "last_compromise"
                },
                "darkmonstealers": {
                    "simple": "stealers"
                }
            }
        },
        "Account": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "description": {
                    "simple": "eventInfo"
                },
                "firstseenbysource": {
                    "simple": "timestamp"
                },
                "lastseenbysource": {
                    "simple": "timestamp"
                },
                "darkmoncompromisesources": {
                    "simple": "compromise_sources"
                },
                "darkmonfirstcompromise": {
                    "simple": "first_compromise"
                },
                "darkmonlastcompromise": {
                    "simple": "last_compromise"
                },
                "darkmonstealers": {
                    "simple": "stealers"
                }
            }
        }
    },
    "marketplaces": [
        "xsoar",
        "platform"
    ],
    "supportedModules": [
        "xsiam",
        "agentix"
    ]
}