Cyble Intel Alert Classification

Incoming Cyble Alert will be classified using this classification

Cyble Events (Deprecated) Classification

Details

ID	`b73bd980-456e-4bdd-83ae-c1a8af0c22c6`
Type	classification
Version	-1
From Version	6.0.0
Default Incident Type	—
Feed	No

Key Type Map

Key	Incident Type
`Cyble Intel Alert`	Cyble Intel Alert

Source

classifier-Cyble_Intel_Alert_Classification.json

Download History Raw

{
    "description": "Incoming Cyble Alert will be classified using this classification",
    "feed": false,
    "id": "b73bd980-456e-4bdd-83ae-c1a8af0c22c6",
    "keyTypeMap": {
        "Cyble Intel Alert": "Cyble Intel Alert"
    },
    "name": "Cyble Intel Alert Classification",
    "propagationLabels": [
        "all"
    ],
    "transformer": {
        "complex": {
            "accessor": "",
            "filters": [
                [
                    {
                        "ignoreCase": false,
                        "left": {
                            "isContext": true,
                            "value": {
                                "complex": null,
                                "simple": "name"
                            }
                        },
                        "operator": "startWith",
                        "right": {
                            "isContext": false,
                            "value": {
                                "complex": null,
                                "simple": "Cyble Intel Alert"
                            }
                        }
                    }
                ]
            ],
            "root": "name",
            "transformers": [
                {
                    "args": {
                        "from": {
                            "isContext": false,
                            "value": {
                                "complex": null,
                                "simple": "0"
                            }
                        },
                        "to": {
                            "isContext": false,
                            "value": {
                                "complex": null,
                                "simple": "17"
                            }
                        }
                    },
                    "operator": "substring"
                }
            ]
        },
        "simple": ""
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.0.0"
}