{
"description": "Mapper for ExtraHop detection.",
"feed": false,
"id": "ExtraHop Detections - Incoming Mapper",
"mapping": {
"ExtraHop Detection": {
"dontMapEventToLabels": false,
"internalMapping": {
"Assigned User": {
"complex": {
"filters": [],
"root": "assignee",
"transformers": []
}
},
"Categories": {
"complex": {
"filters": [],
"root": "categories",
"transformers": []
}
},
"Description": {
"complex": {
"filters": [],
"root": "description",
"transformers": []
}
},
"ExtraHop Appliance ID": {
"complex": {
"filters": [],
"root": "appliance_id",
"transformers": []
}
},
"ExtraHop Reveal(x) Detection ID": {
"complex": {
"filters": [],
"root": "id",
"transformers": []
}
},
"ExtraHop Reveal(x) Detection Participants": {
"complex": {
"filters": [],
"root": "participants",
"transformers": []
}
},
"ExtraHop Reveal(x) Detection Status": {
"complex": {
"filters": [],
"root": "status",
"transformers": []
}
},
"ExtraHop Reveal(x) Detection Type": {
"complex": {
"filters": [],
"root": "type",
"transformers": []
}
},
"ExtraHop Reveal(x) End Time": {
"complex": {
"filters": [],
"root": "end_time",
"transformers": []
}
},
"ExtraHop Reveal(x) Mitre Tactics": {
"complex": {
"filters": [],
"root": "mitre_tactics",
"transformers": []
}
},
"ExtraHop Reveal(x) Mitre Techniques": {
"complex": {
"filters": [],
"root": "mitre_techniques",
"transformers": []
}
},
"ExtraHop Reveal(x) Mod Time": {
"complex": {
"filters": [],
"root": "mod_time",
"transformers": []
}
},
"ExtraHop Reveal(x) Properties": {
"complex": {
"filters": [],
"root": "properties",
"transformers": []
}
},
"ExtraHop Reveal(x) Resolution": {
"complex": {
"filters": [],
"root": "resolution",
"transformers": []
}
},
"ExtraHop Reveal(x) Risk Score": {
"complex": {
"filters": [],
"root": "risk_score",
"transformers": []
}
},
"ExtraHop Reveal(x) Start Time": {
"complex": {
"filters": [],
"root": "start_time",
"transformers": []
}
},
"ExtraHop Reveal(x) Update Time": {
"complex": {
"filters": [],
"root": "update_time",
"transformers": []
}
},
"ExtraHop Reveal(x) User Created": {
"complex": {
"filters": [],
"root": "is_user_created",
"transformers": []
}
},
"ExtraHop Reveal(x) Detection Devices": {
"complex": {
"filters": [],
"root": "device_data",
"transformers": []
}
},
"Ticket Number": {
"complex": {
"filters": [],
"root": "ticket_id",
"transformers": []
}
},
"dbotMirrorDirection": {
"simple": "mirror_direction"
},
"dbotMirrorId": {
"simple": "id"
},
"dbotMirrorInstance": {
"simple": "mirror_instance"
}
}
}
},
"name": "ExtraHop Detections - Incoming Mapper",
"type": "mapping-incoming",
"version": -1,
"fromVersion": "6.5.0",
"supportedModules": [
"agentix",
"xsiam"
]
}