{
"description": "Mapper for Xpanse Alerts",
"feed": false,
"id": "Xpanse - Incoming Mapper",
"mapping": {
"Xpanse Alert": {
"dontMapEventToLabels": false,
"internalMapping": {
"Xpanse Alert ID": {
"complex": {
"filters": [],
"root": "alert_id",
"transformers": []
}
},
"Xpanse Asset IDs": {
"complex": {
"filters": [],
"root": "asset_ids",
"transformers": []
}
},
"Xpanse Business Units": {
"complex": {
"accessor": "name",
"filters": [],
"root": "business_unit_hierarchies.[].[]",
"transformers": [
{
"args": {
"separator": {
"value": {
"simple": ","
}
}
},
"operator": "join"
}
]
}
},
"Xpanse Country Code": {
"complex": {
"filters": [],
"root": "country_codes",
"transformers": [
{
"operator": "FirstArrayElement"
}
]
}
},
"Xpanse Description": {
"complex": {
"filters": [],
"root": "description",
"transformers": []
}
},
"Xpanse External ID": {
"complex": {
"filters": [],
"root": "external_id",
"transformers": []
}
},
"Xpanse Host Name": {
"complex": {
"filters": [],
"root": "domain_names",
"transformers": [
{
"operator": "FirstArrayElement"
}
]
}
},
"Xpanse IP": {
"complex": {
"filters": [],
"root": "ipv4_addresses",
"transformers": [
{
"operator": "FirstArrayElement"
}
]
}
},
"Xpanse Port": {
"complex": {
"filters": [],
"root": "action_remote_port",
"transformers": []
}
},
"Xpanse Progress Status": {
"complex": {
"filters": [],
"root": "resolution_status",
"transformers": []
}
},
"Xpanse Protocol": {
"complex": {
"filters": [],
"root": "port_protocol",
"transformers": []
}
},
"Xpanse Provider": {
"complex": {
"filters": [],
"root": "cloud_providers",
"transformers": [
{
"operator": "FirstArrayElement"
}
]
}
},
"Xpanse Remediation Guidance": {
"complex": {
"filters": [],
"root": "remediation_guidance",
"transformers": []
}
},
"Xpanse Service ID": {
"complex": {
"filters": [],
"root": "service_ids",
"transformers": [
{
"operator": "FirstArrayElement"
}
]
}
},
"Xpanse Tags": {
"complex": {
"filters": [],
"root": "tags",
"transformers": [
{
"args": {
"applyIfEmpty": {
"isContext": true
},
"defaultValue": {
"isContext": true,
"value": {
"simple": "original_tags"
}
}
},
"operator": "SetIfEmpty"
}
]
}
},
"Xpanse Category": {
"simple": "asm_alert_categories"
},
"Xpanse Attack Surface Rule Name": {
"simple": "attack_surface_rule_name"
}
}
},
"dbot_classification_incident_type_all": {
"dontMapEventToLabels": false,
"internalMapping": {
"Description": {
"simple": "description"
},
"Destination IP": {
"complex": {
"filters": [],
"root": "ipv4_addresses",
"transformers": [
{
"operator": "FirstArrayElement"
}
]
}
},
"Protocol": {
"complex": {
"filters": [],
"root": "port_protocol",
"transformers": []
}
},
"Tags": {
"complex": {
"filters": [],
"root": "tags",
"transformers": []
}
}
}
}
},
"name": "Xpanse - Incoming Mapper",
"type": "mapping-incoming",
"version": -1,
"fromVersion": "6.5.0"
}