CyberInt Incoming (mapper)

{
    "description": "",
    "feed": false,
    "id": "abcd-5678",
    "mapping": {
        "Cyberint Incident": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "Alert ID": {
                    "simple": "id"
                },
                "CyberInt Alert ID": {
                    "simple": "ref_id"
                },
                "Alert Name": {
                    "simple": "title"
                },
                "CyberInt Alert Data": {
                    "complex": {
                        "filters": [],
                        "root": "alert_data",
                        "transformers": [
                            {
                                "args": {
                                    "headers": {},
                                    "is_auto_json_transform": {},
                                    "json_transform_properties": {},
                                    "title": {}
                                },
                                "operator": "JsonToTable"
                            }
                        ]
                    }
                },
                "CyberInt Attachments": {
                    "complex": {
                        "filters": [],
                        "root": "attachments",
                        "transformers": []
                    }
                },
                "CyberInt Closure reason": {
                    "simple": "closure_reason"
                },
                "CyberInt Closure reason Description": {
                    "simple": "closure_reason_description"
                },
                "CyberInt Confidence": {
                    "simple": "confidence"
                },
                "CyberInt Created by": {
                    "simple": "created_by.email"
                },
                "CyberInt Created date": {
                    "simple": "created_date"
                },
                "CyberInt Credentials Exposed CSV": {
                    "complex": {
                        "accessor": "content",
                        "filters": [],
                        "root": "attachments",
                        "transformers": []
                    }
                },
                "CyberInt Description": {
                    "complex": {
                        "filters": [],
                        "root": "description",
                        "transformers": [
                            {
                                "operator": "trim"
                            }
                        ]
                    }
                },
                "CyberInt Expert Analysis": {
                    "simple": "analysis_report.name"
                },
                "CyberInt File Type": {
                    "simple": "attachments.mimetype"
                },
                "CyberInt Impact": {
                    "complex": {
                        "filters": [],
                        "root": "impacts",
                        "transformers": [
                            {
                                "args": {
                                    "delimiter": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "splitAndTrim"
                            }
                        ]
                    }
                },
                "CyberInt Impacts": {
                    "complex": {
                        "filters": [],
                        "root": "impacts",
                        "transformers": [
                            {
                                "args": {
                                    "delimiter": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "splitAndTrim"
                            }
                        ]
                    }
                },
                "CyberInt Payment Card Exposed CSV": {
                    "simple": "attachments.content"
                },
                "CyberInt Recommendation": {
                    "complex": {
                        "filters": [],
                        "root": "recommendation",
                        "transformers": []
                    }
                },
                "CyberInt Related IOCs": {
                    "simple": "iocs"
                },
                "CyberInt Related entities": {
                    "simple": "related_entities"
                },
                "CyberInt Related Entity": {
                    "simple": "related_entities"
                },
                "CyberInt Source": {
                    "simple": "source"
                },
                "CyberInt Source category": {
                    "simple": "source_category"
                },
                "CyberInt Status": {
                    "simple": "status"
                },
                "CyberInt Tags": {
                    "simple": "tags"
                },
                "CyberInt Descriptors": {
                    "simple": "tags"
                },
                "CyberInt Targeted Brand": {
                    "complex": {
                        "filters": [],
                        "root": "targeted_brands",
                        "transformers": []
                    }
                },
                "CyberInt Targeted Brands": {
                    "complex": {
                        "filters": [],
                        "root": "targeted_brands",
                        "transformers": []
                    }
                },
                "CyberInt Targeted Vector": {
                    "simple": "targeted_vectors"
                },
                "CyberInt Targeted Vectors": {
                    "simple": "targeted_vectors"
                },
                "CyberInt Threat Actor": {
                    "simple": "threat_actor"
                },
                "name": {
                    "simple": "alert_name"
                },
                "CyberInt Ticket ID": {
                    "simple": "ticket_id"
                },
                "CyberInt Title": {
                    "simple": "title"
                },
                "CyberInt Type": {
                    "simple": "type"
                },
                "Cyberint Category": {
                    "simple": "category"
                },
                "Description": {
                    "complex": {
                        "filters": [],
                        "root": "description",
                        "transformers": [
                            {
                                "operator": "trim"
                            }
                        ]
                    }
                },
                "Event Type": {
                    "simple": "type"
                },
                "Last Update Time": {
                    "simple": "update_date"
                },
                "Source Username": {
                    "simple": "attachments.content.username"
                },
                "State": {
                    "simple": "status"
                },
                "Sub Category": {
                    "simple": "type"
                },
                "Tags": {
                    "complex": {
                        "filters": [],
                        "root": "tags",
                        "transformers": []
                    }
                },
                "Threat Actor": {
                    "simple": "threat_actor"
                },
                "occurred": {
                    "complex": {
                        "filters": [],
                        "root": "created_date",
                        "transformers": [
                            {
                                "args": {
                                    "prefix": {},
                                    "suffix": {
                                        "value": {
                                            "simple": "Z"
                                        }
                                    }
                                },
                                "operator": "concat"
                            }
                        ]
                    }
                },
                "severity": {
                    "complex": {
                        "filters": [],
                        "root": "severity",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "low,medium,high,very_high"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1,2,3,4"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    }
                },
                "source": {
                    "simple": "source"
                },
                "Cyberint Alert URL": {
                    "simple": "alert_data.url"
                },
                "CyberInt CVEs": {
                    "complex": {
                        "root": "alert_data.cves",
                        "accessor": "name",
                        "transformers": []
                    }
                }
            }
        },
        "dbot_classification_incident_type_all": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "Alert ID": {
                    "simple": "id"
                },
                "CyberInt Alert ID": {
                    "simple": "ref_id"
                },
                "Alert Name": {
                    "simple": "title"
                },
                "CyberInt Attachments": {
                    "complex": {
                        "filters": [],
                        "root": "attachments",
                        "transformers": []
                    }
                },
                "CyberInt Closure reason": {
                    "simple": "closure_reason"
                },
                "CyberInt Closure reason Description": {
                    "simple": "closure_reason_description"
                },
                "CyberInt Confidence": {
                    "simple": "confidence"
                },
                "CyberInt Created by": {
                    "simple": "created_by.email"
                },
                "CyberInt Created date": {
                    "simple": "created_date"
                },
                "CyberInt Description": {
                    "complex": {
                        "filters": [],
                        "root": "description",
                        "transformers": [
                            {
                                "operator": "trim"
                            }
                        ]
                    }
                },
                "CyberInt Expert Analysis": {
                    "simple": "analysis_report.name"
                },
                "CyberInt Impact": {
                    "complex": {
                        "filters": [],
                        "root": "impacts",
                        "transformers": [
                            {
                                "operator": "Stringify"
                            },
                            {
                                "args": {
                                    "delimiter": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "splitAndTrim"
                            }
                        ]
                    }
                },
                "CyberInt Impacts": {
                    "complex": {
                        "filters": [],
                        "root": "impacts",
                        "transformers": [
                            {
                                "operator": "Stringify"
                            },
                            {
                                "args": {
                                    "delimiter": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "splitAndTrim"
                            }
                        ]
                    }
                },
                "CyberInt Recommendation": {
                    "simple": "recommendation"
                },
                "CyberInt Related IOCs": {
                    "simple": "iocs"
                },
                "CyberInt Related entities": {
                    "complex": {
                        "filters": [],
                        "root": "related_entities",
                        "transformers": []
                    }
                },
                "CyberInt Related Entity": {
                    "complex": {
                        "filters": [],
                        "root": "related_entities",
                        "transformers": []
                    }
                },
                "CyberInt Source": {
                    "simple": "source"
                },
                "CyberInt Source category": {
                    "simple": "source_category"
                },
                "CyberInt Status": {
                    "simple": "status"
                },
                "CyberInt Tags": {
                    "complex": {
                        "filters": [],
                        "root": "tags",
                        "transformers": []
                    }
                },
                "CyberInt Descriptors": {
                    "complex": {
                        "filters": [],
                        "root": "tags",
                        "transformers": []
                    }
                },
                "CyberInt Targeted Brand": {
                    "complex": {
                        "filters": [],
                        "root": "targeted_brands",
                        "transformers": [
                            {
                                "operator": "ConvertToSingleElementArray"
                            }
                        ]
                    }
                },
                "CyberInt Targeted Brands": {
                    "complex": {
                        "filters": [],
                        "root": "targeted_brands",
                        "transformers": [
                            {
                                "operator": "ConvertToSingleElementArray"
                            }
                        ]
                    }
                },
                "CyberInt Targeted Vector": {
                    "complex": {
                        "filters": [],
                        "root": "targeted_vectors",
                        "transformers": []
                    }
                },
                "CyberInt Targeted Vectors": {
                    "complex": {
                        "filters": [],
                        "root": "targeted_vectors",
                        "transformers": []
                    }
                },
                "CyberInt Threat Actor": {
                    "simple": "threat_actor"
                },
                "CyberInt Ticket ID": {
                    "complex": {
                        "filters": [],
                        "root": "ticket_id",
                        "transformers": []
                    }
                },
                "CyberInt Title": {
                    "simple": "title"
                },
                "CyberInt Type": {
                    "simple": "type"
                },
                "CyberInt Vulnerable CName Record": {
                    "simple": "alert_data.vulnerable_cname_record"
                },
                "Cyberint Category": {
                    "simple": "category"
                },
                "Description": {
                    "complex": {
                        "filters": [],
                        "root": "description",
                        "transformers": [
                            {
                                "operator": "trim"
                            }
                        ]
                    }
                },
                "Event Type": {
                    "simple": "type"
                },
                "Source Username": {
                    "simple": "attachments.content.username"
                },
                "State": {
                    "simple": "status"
                },
                "Sub Category": {
                    "simple": "type"
                },
                "Tags": {
                    "complex": {
                        "filters": [],
                        "root": "tags",
                        "transformers": []
                    }
                },
                "Threat Actor": {
                    "simple": "threat_actor"
                },
                "dbotMirrorDirection": {
                    "simple": "mirror_direction"
                },
                "dbotMirrorId": {
                    "simple": "ref_id"
                },
                "dbotMirrorInstance": {
                    "simple": "mirror_instance"
                },
                "name": {
                    "simple": "title"
                },
                "occurred": {
                    "complex": {
                        "filters": [],
                        "root": "created_date",
                        "transformers": [
                            {
                                "args": {
                                    "prefix": {},
                                    "suffix": {
                                        "value": {
                                            "simple": "Z"
                                        }
                                    }
                                },
                                "operator": "concat"
                            }
                        ]
                    }
                },
                "severity": {
                    "complex": {
                        "filters": [],
                        "root": "severity",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "low,medium,high,very_high"
                                        }
                                    },
                                    "mapped_values": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "1,2,3,4"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    }
                },
                "source": {
                    "simple": "source"
                },
                "Cyberint Alert URL": {
                    "simple": "alert_data.url"
                }
            }
        }
    },
    "name": "CyberInt Incoming (mapper)",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.0.0"
}