Tripwire - Incoming Mapper

Maps incoming Tripwire incident fields.

Tripwire Mapper (In)

Details

IDTripwire-mapper
Typemapping-incoming
Version-1
From Version6.0.0
Default Incident Type
FeedNo
{
 "description": "Maps incoming Tripwire incident fields.",
 "feed": false,
 "id": "Tripwire-mapper",
 "mapping": {
  "Tripwire File Change": {
   "dontMapEventToLabels": true,
   "internalMapping": {
    "Device Id": {
     "complex": null,
     "simple": "nodeId"
    },
    "Device Name": {
     "complex": null,
     "simple": "nodeName"
    },
    "File Name": {
     "complex": null,
     "simple": "elementName"
    },
    "MD5": {
     "complex": null,
     "simple": "md5"
    },
    "Policy Description": {
     "complex": null,
     "simple": "ruleName"
    },
    "Policy ID": {
     "complex": null,
     "simple": "ruleId"
    },
    "SHA1": {
     "complex": null,
     "simple": "sha1"
    },
    "SHA256": {
     "complex": null,
     "simple": "sha256"
    },
    "SHA512": {
     "complex": null,
     "simple": "sha512"
    }
   }
  }
 },
 "name": "Tripwire - Incoming Mapper",
 "type": "mapping-incoming",
 "version": -1,
 "fromVersion": "6.0.0"
}