Recorded Future - Incoming Mapper
Recorded Future Intelligence Mapper (In)
Details
| ID | Recorded Future - Incoming Mapper |
|---|---|
| Type | mapping-incoming |
| Version | -1 |
| From Version | 6.5.0 |
| Default Incident Type | — |
| Feed | No |
{ "description": "", "feed": false, "id": "Recorded Future - Incoming Mapper", "mapping": { "Recorded Future Alert": { "dontMapEventToLabels": true, "internalMapping": { "Alert ID": { "simple": "id" }, "Alert Name": { "simple": "title" }, "Event ID": { "simple": "rule.id" }, "Event Type": { "simple": "type" }, "Rule Name": { "simple": "rule.name" }, "details": { "simple": "url" }, "occurred": { "simple": "triggered" }, "Recorded Future AI Insights": { "simple": "ai_insights" } } }, "Recorded Future Leaked Credential Monitoring": { "dontMapEventToLabels": false, "internalMapping": { "Alert ID": { "simple": "id" }, "Alert Name": { "simple": "title" }, "Event ID": { "simple": "rule.id" }, "Event Type": { "simple": "type" }, "Recorded Future Alert Entities": { "complex": { "accessor": "entities", "filters": [], "root": "entities.documents.references", "transformers": [] } }, "Rule Name": { "simple": "rule.name" }, "details": { "simple": "url" }, "occurred": { "simple": "triggered" } } }, "Recorded Future Potential Typosquat": { "dontMapEventToLabels": false, "internalMapping": { "Alert ID": { "simple": "id" }, "Alert Name": { "simple": "title" }, "Domain Name": { "complex": { "accessor": "name", "filters": [], "root": "entities.entity", "transformers": [] } }, "Event ID": { "simple": "rule.id" }, "Event Type": { "simple": "type" }, "Recorded Future Alert Entities": { "complex": { "accessor": "entity", "filters": [], "root": "entities", "transformers": [] } }, "Rule Name": { "simple": "rule.name" }, "details": { "simple": "url" }, "occurred": { "simple": "triggered" } } }, "Recorded Future New Critical or Pre NVD Vulnerabilities": { "dontMapEventToLabels": false, "internalMapping": { "Alert ID": { "simple": "id" }, "Alert Name": { "simple": "title" }, "Event ID": { "simple": "rule.id" }, "Event Type": { "simple": "type" }, "Recorded Future Alert Entities": { "complex": { "accessor": "entity", "filters": [], "root": "entities", "transformers": [ { "operator": "uniq" } ] } }, "Rule Name": { "simple": "rule.name" }, "details": { "simple": "url" }, "occurred": { "simple": "triggered" } } } }, "name": "Recorded Future - Incoming Mapper", "type": "mapping-incoming", "version": -1, "fromVersion": "6.5.0" }