SentinelOne - Outgoing Mapper

SentinelOne mirror out mapper.

SentinelOne Mapper (Out)

Details

IDSentinelOne - Outgoing Mapper
Typemapping-outgoing
Version-1
From Version6.0.0
Default Incident Type—
FeedNo

Source

classifier-mapper-outgoing-SentinelOne.json
Download History Raw 
{
    "description": "SentinelOne mirror out mapper.",
    "feed": false,
    "id": "SentinelOne - Outgoing Mapper",
    "mapping": {
        "SentinelOne Incident": {
            "dontMapEventToLabels": true,
            "internalMapping": {
				"sentinelonethreatstatus": {
					"simple": "incidentStatus"
				},
				"sentinelonethreatanalystverdict": {
					"simple": "analystVerdict"
				},
				"sentineloneuamalertstatus": {
					"simple": "uamStatus"
				},
				"sentineloneuamalertanalystverdictmapped": {
					"simple": "uamAnalystVerdict"
				}
            }
        }
    },
    "name": "SentinelOne - Outgoing Mapper",
    "type": "mapping-outgoing",
    "version": -1,
    "fromVersion": "6.0.0"
}