{
"feed": false,
"fromVersion": "6.12.0",
"mapping": {
"Gem Alert": {
"dontMapEventToLabels": false,
"internalMapping": {
"Account ID": {
"simple": "account.name"
},
"Account Name": {
"simple": "account.display_name"
},
"Gem Account Provider": {
"simple": "account.cloud_provider"
},
"Alert ID": {
"simple": "event.alert_id"
},
"Alert Source": {
"simple": "event.alert_source"
},
"occurred": {
"simple": "event_datetime"
},
"Description": {
"simple": "description"
},
"Gem Events Count": {
"simple": "event.events_total_count"
},
"External Link": {
"complex": {
"accessor": "threat_id",
"filters": [],
"root": "event",
"transformers": [
{
"args": {
"prefix": {
"isContext": false,
"value": {
"simple": "https://app.gem.security/threats/"
}
},
"suffix": {
"isContext": false
}
},
"operator": "concat"
}
]
}
},
"Gem Main Entity ID": {
"simple": "event.main_entity.id"
},
"Gem Main Entity Name": {
"simple": "event.main_entity.name"
},
"Gem Main Entity Region": {
"simple": "event.main_entity.metadata.region"
},
"Gem Main Entity Type": {
"simple": "event.main_entity.type"
},
"Gem Threat ID": {
"simple": "event.threat_id"
},
"Title": {
"simple": "title"
},
"Gem TTP ID": {
"simple": "event.ttp_id"
},
"name": {
"simple": "title"
},
"severity": {
"complex": {
"filters": [],
"root": "severity",
"transformers": [
{
"args": {
"input_values": {
"isContext": false,
"value": {
"simple": "1,2,3,4,5,6,7,8,9,10"
}
},
"mapped_values": {
"isContext": false,
"value": {
"simple": "1,1,1,2,2,2,2,3,3,3"
}
}
},
"operator": "MapValuesTransformer"
}
]
}
}
}
},
"dbot_classification_incident_type_all": {
"dontMapEventToLabels": false,
"internalMapping": {
"occurred": {
"simple": "event_datetime"
}
}
}
},
"id": "Gem Mapper Webhook",
"name": "Gem Mapper Webhook",
"type": "mapping-incoming",
"description": "Maps incoming Gem Alert fields when received via webhook.",
"version": -1
}