PhishER-mapper

PhishER Mapper (In)

Details

IDPhishER-mapper
Typemapping-incoming
Version-1
From Version6.0.0
Default Incident Type
FeedNo
{
    "description": "",
    "feed": false,
    "id": "PhishER-mapper",
    "mapping": {
        "PhishER": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "PhishER Action Status": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "actionStatus",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Attachments": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "attachments",
                        "transformers": [
                            {
                                "args": {
                                    "title": {
                                        "isContext": false,
                                        "value": null
                                    }
                                },
                                "operator": "JsonToTable"
                            }
                        ]
                    },
                    "simple": ""
                },
                "PhishER Category": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "category",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Comments": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "comments",
                        "transformers": [
                            {
                                "args": {},
                                "operator": "ConvertKeysToTableFieldFormat"
                            }
                        ]
                    },
                    "simple": ""
                },
                "PhishER Created": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "created at",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Email From": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "from",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER ID": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "id",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Links": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "links",
                        "transformers": [
                            {
                                "args": {
                                    "title": {
                                        "isContext": false,
                                        "value": null
                                    }
                                },
                                "operator": "JsonToTable"
                            }
                        ]
                    },
                    "simple": ""
                },
                "PhishER ML Report": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "phishmlReport",
                        "transformers": [
                            {
                                "args": {
                                    "title": {
                                        "isContext": false,
                                        "value": null
                                    }
                                },
                                "operator": "JsonToTable"
                            }
                        ]
                    },
                    "simple": ""
                },
                "PhishER Pipeline Status": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "pipelineStatus",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Raw URL": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "rawUrl",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Reported By": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "reportedBy",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Severity": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "severity",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Subject": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "subject",
                        "transformers": []
                    },
                    "simple": ""
                },
                "PhishER Tags": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "tags",
                        "transformers": []
                    },
                    "simple": ""
                }
            }
        },
        "Phisher-Incident": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "severity": {
                    "complex": {
                        "accessor": "",
                        "filters": [],
                        "root": "severity",
                        "transformers": []
                    },
                    "simple": ""
                }
            }
        },
        "dbot_classification_incident_type_all": {
            "dontMapEventToLabels": false,
            "internalMapping": {}
        }
    },
    "name": "PhishER-mapper",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.0.0"
}