Vectra Detect

Details

ID	`Vectra Detect`
Type	classification
Version	-1
From Version	6.2.0
Default Incident Type	Vectra Detection
Feed	No

Key Type Map

Key	Incident Type
`COMMAND & CONTROL`	C2Communication
`EXFILTRATION`	Exfiltration
`INFO`	Indicator Feed
`LATERAL MOVEMENT`	Lateral Movement
`RECONNAISSANCE`	Reconnaissance
`account`	Vectra Account
`host`	Vectra Host

Source

classifier-Vectra_Detect.json classifier-Vectra_Detect_-_Incoming_Mapper.json

Download History Raw

{
    "defaultIncidentType": "Vectra Detection",
    "description": "Classifies Vectra Detect incidents.",
    "feed": false,
    "fromVersion": "6.2.0",
    "id": "Vectra Detect",
    "keyTypeMap": {
        "COMMAND & CONTROL": "C2Communication",
        "EXFILTRATION": "Exfiltration",
        "INFO": "Indicator Feed",
        "LATERAL MOVEMENT": "Lateral Movement",
        "RECONNAISSANCE": "Reconnaissance",
        "account": "Vectra Account",
        "host": "Vectra Host"
    },
    "name": "Vectra Detect",
    "transformer": {
        "complex": {
            "filters": [],
            "root": "_vectra_specific.entity_type",
            "transformers": []
        }
    },
    "type": "classification",
    "version": -1
}