XM Cyber Incident Classifier

Classifies XM Cyber alerts and events into 4 types

XM Cyber Classification

Details

ID	`XM Cyber Incident Classifier`
Type	classification
Version	-1
From Version	6.0.0
Default Incident Type	XM Cyber Choke Point
Feed	No

Key Type Map

Key	Incident Type
`XM Cyber Choke Point`	XM Cyber Choke Point
`XM Cyber Critical Asset`	XM Cyber Critical Asset
`XM Cyber Security Score`	XM Cyber Security Score
`XM Cyber Technique`	XM Cyber Technique

Source

classifier-XM_Cyber_Incident_Classifier.json

Download History Raw

{
    "description": "Classifies XM Cyber alerts and events into 4 types",
    "defaultIncidentType": "XM Cyber Choke Point",
    "feed": false,
    "id": "XM Cyber Incident Classifier",
    "keyTypeMap": {
        "XM Cyber Choke Point": "XM Cyber Choke Point",
        "XM Cyber Critical Asset": "XM Cyber Critical Asset",
        "XM Cyber Security Score": "XM Cyber Security Score",
        "XM Cyber Technique": "XM Cyber Technique"
    },
    "name": "XM Cyber Incident Classifier",
    "propagationLabels": [
        "all"
    ],
    "transformer": {
        "complex": null,
        "simple": "type"
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.0.0"
}