{
"id": "MicrosoftCloudAppSecurity-mapper",
"name": "Microsoft CAS",
"type": "mapping-incoming",
"description": "Maps incoming Microsoft CAS fields",
"version": -1,
"defaultIncidentType": "",
"mapping": {
"Microsoft CAS Alert": {
"dontMapEventToLabels": true,
"internalMapping": {
"Account Name": {
"complex": null,
"simple": "account.pa"
},
"Cloud Service": {
"complex": null,
"simple": "service.label"
},
"Country": {
"complex": null,
"simple": "country.label"
},
"Policy Description": {
"complex": null,
"simple": "policyRule.label"
},
"Policy Type": {
"complex": null,
"simple": "policyRule.policyType"
},
"Risk Score": {
"complex": null,
"simple": "threatScore"
},
"Username": {
"complex": null,
"simple": "user.label"
}
}
}
},
"fromVersion": "6.0.0"
}