LogsignSIEM_Classifier

Logsign SIEM Classification

Details

IDLogsignSIEM Classifier
Typeclassification
Version-1
From Version6.0.0
Default Incident Type—
FeedNo

Key Type Map

KeyIncident Type
Discovery Reconnaissance
File Access
Identity Authentication
Mail Phishing
Malware Malware
Privilege Escalation Lateral Movement
Reconnaissance Reconnaissance
Threat Intelligence Reconnaissance
Traffic Network

Source

classifier-LogsignSIEM_Classifier.json
Download History Raw 
{
    "description": "",
    "feed": false,
    "id": "LogsignSIEM Classifier",
    "keyTypeMap": {
        "Discovery": "Reconnaissance",
        "File": "Access",
        "Identity": "Authentication",
        "Mail": "Phishing",
        "Malware": "Malware",
        "Privilege Escalation": "Lateral Movement",
        "Reconnaissance": "Reconnaissance",
        "Threat Intelligence": "Reconnaissance",
        "Traffic": "Network"
    },
    "name": "LogsignSIEM_Classifier",
    "propagationLabels": [
        "all"
    ],
    "transformer": {
        "complex": null,
        "simple": "Alert.Category"
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.0.0"
}