Doppel Incoming_Mapper

{
	"description": "",
	"feed": false,
	"id": "Doppel Incoming_Mapper",
	"mapping": {
		"Doppel Alert Crypto": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
		        "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				}
			}
		},
		"Doppel Alert Domains": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
		        "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Changed": {
					"complex": {
						"accessor": "[0].changed_by",
						"filters": [],
						"root": "audit_logs",
						"transformers": []
					}
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"State": {
					"complex": {
						"filters": [],
						"root": "queue_state",
						"transformers": []
					}
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"source": {
					"complex": {
						"filters": [],
						"root": "source",
						"transformers": []
					}
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				},
				"Doppel Entity Content": {
					"simple": "entity_content"
				}
			}
		},
		"Doppel Alert Ecommerce": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
		        "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				},
				"Doppel Entity Content Ecommerce": {
					"simple": "entity_content"
				}
			}
		},
		"Doppel Alert Email": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
                "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Changed": {
					"complex": {
						"accessor": "[0].changed_by",
						"filters": [],
						"root": "audit_logs",
						"transformers": []
					}
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"State": {
					"complex": {
						"filters": [],
						"root": "queue_state",
						"transformers": []
					}
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"source": {
					"complex": {
						"filters": [],
						"root": "source",
						"transformers": []
					}
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				}
			}
		},
		"Doppel Alert Mobile_Apps": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
                "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				},
				"Doppel Entity Content Mobile Apps": {
					"simple": "entity_content"
				}
			}
		},
		"Doppel Alert Paid_Ads": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
                "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Changed": {
					"complex": {
						"accessor": "[0].changed_by",
						"filters": [],
						"root": "audit_logs",
						"transformers": []
					}
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"State": {
					"complex": {
						"filters": [],
						"root": "queue_state",
						"transformers": []
					}
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"source": {
					"complex": {
						"filters": [],
						"root": "source",
						"transformers": []
					}
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				}
			}
		},
		"Doppel Alert Social_Media": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
                "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				},
				"Doppel Entity Content Social Media": {
					"simple": "entity_content"
				}
			}
		},
		"Doppel Alert Telco": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Alert tags": {
					"simple": "tags"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
                "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Changed": {
					"complex": {
						"accessor": "[0].changed_by",
						"filters": [],
						"root": "audit_logs",
						"transformers": []
					}
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"Selected Indicators": {
					"simple": "entity"
				},
				"State": {
					"complex": {
						"filters": [],
						"root": "queue_state",
						"transformers": []
					}
				},
				"Vulnerable Product": {
					"simple": "brand"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"source": {
					"complex": {
						"filters": [],
						"root": "source",
						"transformers": []
					}
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				},
				"Doppel Entity Content Telco": {
					"simple": "entity_content"
				}
			}
		},
		"dbot_classification_incident_type_all": {
			"dontMapEventToLabels": true,
			"internalMapping": {
				"Additional Indicators": {
					"simple": "entity"
				},
				"Alert ID": {
					"simple": "id"
				},
				"Alert Source": {
					"simple": "source"
				},
				"Audit Logs": {
					"simple": "audit_logs.[]."
				},
                "Doppel Audit Logs": {
					"simple": "audit_logs"
				},
				"Block Indicators Status": {
					"simple": "entity_state"
				},
				"Doppel Brand": {
					"simple": "brand"
				},
				"Doppel Entity": {
					"simple": "entity"
				},
				"Doppel Entity State": {
					"simple": "entity_state"
				},
				"Doppel Link": {
					"simple": "doppel_link"
				},
				"Doppel Notes": {
					"simple": "notes"
				},
				"Doppel Platform": {
					"simple": "platform"
				},
				"Doppel Product": {
					"simple": "product"
				},
				"Doppel Queue State": {
					"simple": "queue_state"
				},
				"Doppel Uploaded By": {
					"simple": "uploaded_by"
				},
				"State": {
					"simple": "queue_state"
				},
				"dbotMirrorDirection": {
					"simple": "mirror_direction"
				},
				"dbotMirrorId": {
					"simple": "id"
				},
				"dbotMirrorInstance": {
					"simple": "mirror_instance"
				},
				"occurred": {
					"simple": "created_at"
				},
				"severity": {
					"simple": "severity"
				},
				"Doppel Screenshot URL": {
					"simple": "screenshot_url"
				},
				"Doppel Entity Content": {
					"simple": "entity_content"
				},
				"Doppel Entity Content Social Media": {
					"simple": "entity_content"
				},
				"Doppel Entity Content Mobile Apps": {
					"simple": "entity_content"
				},
				"Doppel Entity Content Ecommerce": {
					"simple": "entity_content"
				},
				"Doppel Entity Content Telco": {
					"simple": "entity_content"
				}
			}
		}
	},
	"name": "Doppel Incoming_Mapper",
	"type": "mapping-incoming",
	"version": -1,
	"fromVersion": "6.10.0",
	"supportedModules": [
		"agentix",
		"xsiam"
	]
}