{
"description": "The incoming mapper for the Ignite Alert.",
"feed": false,
"id": "Ignite Alert - Incoming Mapper",
"mapping": {
"Ignite Alert": {
"dontMapEventToLabels": true,
"internalMapping": {
"Flashpoint Alert Body": {
"complex": {
"accessor": "body",
"filters": [],
"root": "highlights",
"transformers": [
{
"args": {
"separator": {
"isContext": false,
"value": {
"simple": "\u003cbr/\u003e"
}
}
},
"operator": "join"
}
]
}
},
"Flashpoint Alert ID": {
"complex": {
"filters": [],
"root": "id",
"transformers": []
}
},
"Flashpoint Alert Text": {
"complex": {
"filters": [],
"root": "highlight_text",
"transformers": []
}
},
"Flashpoint Basetypes": {
"complex": {
"accessor": "basetypes",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Container": {
"complex": {
"filters": [
[
{
"left": {
"isContext": true,
"value": {
"simple": "resource.container"
}
},
"operator": "isNotEmpty"
}
]
],
"root": "resource.container",
"transformers": [
{
"args": {
"headers": {
"isContext": false
},
"is_auto_json_transform": {
"isContext": false
},
"json_transform_properties": {
"isContext": false
},
"title": {
"isContext": false,
"value": {
"simple": "Flashpoint Container"
}
}
},
"operator": "JsonToTable"
}
]
}
},
"Flashpoint Created Date": {
"complex": {
"filters": [],
"root": "created_at",
"transformers": []
}
},
"Flashpoint Data Type": {
"complex": {
"filters": [],
"root": "data_type",
"transformers": []
}
},
"Flashpoint Entity ID": {
"complex": {
"accessor": "id",
"filters": [],
"root": "reason.entity",
"transformers": []
}
},
"Flashpoint Entity Name": {
"complex": {
"accessor": "name",
"filters": [],
"root": "reason.entity",
"transformers": []
}
},
"Flashpoint Entity Type": {
"complex": {
"accessor": "type",
"filters": [],
"root": "reason.entity",
"transformers": []
}
},
"Flashpoint Generated Date": {
"complex": {
"filters": [],
"root": "generated_at",
"transformers": []
}
},
"Flashpoint Image Safe Search": {
"complex": {
"accessor": "safe_search",
"filters": [
[
{
"left": {
"isContext": true,
"value": {
"simple": "resource.media_v2.image_enrichment.enrichments.v1.image-analysis"
}
},
"operator": "isNotEmpty"
}
]
],
"root": "resource.media_v2.image_enrichment.enrichments.v1.image-analysis",
"transformers": [
{
"args": {
"headers": {
"isContext": false
},
"is_auto_json_transform": {
"isContext": false
},
"json_transform_properties": {
"isContext": false
},
"title": {
"isContext": false,
"value": {
"simple": "Flashpoint Image Safe Search"
}
}
},
"operator": "JsonToTable"
}
]
}
},
"Flashpoint Media Storage URI": {
"complex": {
"accessor": "storage_uri",
"filters": [],
"root": "resource.media_v2",
"transformers": []
}
},
"Flashpoint Media Type": {
"complex": {
"accessor": "media_type",
"filters": [],
"root": "resource.media_v2",
"transformers": []
}
},
"Flashpoint Mime Type": {
"complex": {
"accessor": "mime_type",
"filters": [],
"root": "resource.media_v2",
"transformers": []
}
},
"Flashpoint Parent Basetypes": {
"complex": {
"accessor": "parent_basetypes",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Parent Data Type": {
"complex": {
"filters": [],
"root": "parent_data_type",
"transformers": []
}
},
"Flashpoint Phash": {
"complex": {
"accessor": "phash",
"filters": [],
"root": "resource.media_v2",
"transformers": []
}
},
"Flashpoint Ports": {
"complex": {
"accessor": "ports",
"filters": [],
"root": "highlights",
"transformers": [
{
"args": {
"separator": {
"isContext": false,
"value": {
"simple": ", "
}
}
},
"operator": "join"
}
]
}
},
"Flashpoint Read Status": {
"complex": {
"filters": [],
"root": "is_read",
"transformers": []
}
},
"Flashpoint Reason ID": {
"complex": {
"accessor": "id",
"filters": [],
"root": "reason",
"transformers": []
}
},
"Flashpoint Reason Name": {
"complex": {
"accessor": "name",
"filters": [],
"root": "reason",
"transformers": []
}
},
"Flashpoint Reason Origin": {
"complex": {
"accessor": "origin",
"filters": [],
"root": "reason",
"transformers": []
}
},
"Flashpoint Reason Sources": {
"complex": {
"accessor": "sources",
"filters": [],
"root": "reason.details",
"transformers": []
}
},
"Flashpoint Reason Text": {
"complex": {
"accessor": "text",
"filters": [],
"root": "reason",
"transformers": []
}
},
"Flashpoint Reason Type": {
"complex": {
"accessor": "type",
"filters": [],
"root": "reason.details",
"transformers": []
}
},
"Flashpoint Resource URL": {
"complex": {
"accessor": "url",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Services": {
"complex": {
"accessor": "services",
"filters": [],
"root": "highlights",
"transformers": [
{
"args": {
"separator": {
"isContext": false,
"value": {
"simple": ", "
}
}
},
"operator": "join"
}
]
}
},
"Flashpoint Shodan Host": {
"complex": {
"filters": [
[
{
"left": {
"isContext": true,
"value": {
"simple": "resource.shodan_host"
}
},
"operator": "isNotEmpty"
}
]
],
"root": "resource.shodan_host",
"transformers": [
{
"args": {
"headers": {
"isContext": false
},
"is_auto_json_transform": {
"isContext": false
},
"json_transform_properties": {
"isContext": false
},
"title": {
"isContext": false,
"value": {
"simple": "Flashpoint Shodan Host"
}
}
},
"operator": "JsonToTable"
}
]
}
},
"Flashpoint Site Actor Name": {
"complex": {
"accessor": "handle",
"filters": [],
"root": "resource.site_actor.names",
"transformers": []
}
},
"Flashpoint Site Name": {
"complex": {
"accessor": "title",
"filters": [],
"root": "resource.site",
"transformers": []
}
},
"Flashpoint Site Native ID": {
"complex": {
"accessor": "native_id",
"filters": [],
"root": "resource.site_actor",
"transformers": []
}
},
"Flashpoint Source": {
"complex": {
"filters": [],
"root": "source",
"transformers": []
}
},
"Flashpoint Source File": {
"complex": {
"accessor": "file",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Source ID": {
"complex": {
"accessor": "id",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Source Name": {
"complex": {
"accessor": "source",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Source Owner": {
"complex": {
"accessor": "owner",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Source Repo": {
"complex": {
"accessor": "repo",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Source Snippet": {
"complex": {
"accessor": "snippet",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Source Sort Date": {
"complex": {
"accessor": "sort_date",
"filters": [],
"root": "resource",
"transformers": []
}
},
"Flashpoint Status": {
"complex": {
"filters": [],
"root": "status",
"transformers": []
}
},
"Flashpoint Vulnerability Details": {
"complex": {
"accessor": "vulns",
"filters": [],
"root": "resource",
"transformers": []
}
},
"SHA1": {
"complex": {
"accessor": "sha1",
"filters": [],
"root": "resource.media_v2",
"transformers": []
}
},
"Tags": {
"complex": {
"filters": [],
"root": "tag_as_list",
"transformers": []
}
}
}
},
"dbot_classification_incident_type_all": {
"dontMapEventToLabels": false,
"internalMapping": {
"Tags": {
"simple": "tags"
}
}
}
},
"name": "Ignite Alert - Incoming Mapper",
"type": "mapping-incoming",
"version": -1,
"fromVersion": "6.10.0"
}