Prisma Cloud App - Incoming Mapper

{
    "id": "prismaCloud_app-mapper",
    "name": "Prisma Cloud App - Incoming Mapper",
    "type": "mapping-incoming",
    "description": "Maps incoming Prisma Cloud event fields that are pushed into Cortex XSOAR through the Prisma Cloud App add-on.",
	"defaultIncidentType": "",
	"mapping": {
		"AWS CloudTrail Misconfiguration": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Account ID": {
					"complex": {
						"accessor": "accountId",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Account Name": {
					"complex": {
						"accessor": "account",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Alert ID": {
					"complex": null,
					"simple": "id"
				},
				"First Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "firstSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Last Modified By": {
					"complex": {
						"accessor": "lastModifiedBy",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Modified On": {
					"complex": {
						"accessor": "lastModifiedOn",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "lastSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Policy Deleted": {
					"complex": {
						"accessor": "deleted",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Description": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy ID": {
					"complex": {
						"accessor": "policyId",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Recommendation": {
					"complex": {
						"accessor": "recommendation",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Remediable": {
					"complex": {
						"accessor": "remediable",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Type": {
					"complex": {
						"accessor": "policyType",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud ID": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "id",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Reason": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "reason",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Rules": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertRules",
						"transformers": [
							{
								"args": {},
								"operator": "ConvertKeysToTableFieldFormat"
							}
						]
					},
					"simple": ""
				},
				"Prisma Cloud Status": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "status",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Time": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertTime",
						"transformers": []
					},
					"simple": ""
				},
				"Region": {
					"complex": {
						"accessor": "region",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource API Name": {
					"complex": {
						"accessor": "resourceApiName",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Cloud Type": {
					"complex": {
						"accessor": "cloudType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource ID": {
					"complex": {
						"accessor": "id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Type": {
					"complex": {
						"accessor": "resourceType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Rating": {
					"complex": {
						"accessor": "rating",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Score": {
					"complex": {
						"accessor": "score",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"SKU Name": {
					"complex": {
						"accessor": "data.sku.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"SKU TIER": {
					"complex": {
						"accessor": "data.sku.tier",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Assigned By": {
					"complex": {
						"accessor": "data.properties.metadata.assignedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created By": {
					"complex": {
						"accessor": "data.properties.metadata.createdBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created On": {
					"complex": {
						"accessor": "data.properties.metadata.createdOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Description": {
					"complex": {
						"accessor": "data.properties.description",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription ID": {
					"complex": {
						"accessor": "data.id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Name": {
					"complex": {
						"accessor": "data.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Type": {
					"complex": {
						"accessor": "data.type",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated By": {
					"complex": {
						"accessor": "data.properties.metadata.updatedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated On": {
					"complex": {
						"accessor": "data.properties.metadata.updatedOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"System Default": {
					"complex": {
						"accessor": "systemDefault",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Vendor Product": {
					"complex": null,
					"simple": "Prisma Cloud"
				},
				"details": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"sourceBrand": {
					"complex": null,
					"simple": "\"Prisma Cloud\""
				}
			}
		},
		"AWS EC2 Instance Misconfiguration": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Account ID": {
					"complex": {
						"accessor": "accountId",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Account Name": {
					"complex": {
						"accessor": "accountname",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Alert ID": {
					"complex": null,
					"simple": "id"
				},
				"First Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "firstSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Last Modified By": {
					"complex": {
						"accessor": "lastModifiedBy",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Modified On": {
					"complex": {
						"accessor": "lastModifiedOn",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "lastSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Policy Deleted": {
					"complex": {
						"accessor": "deleted",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Description": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy ID": {
					"complex": {
						"accessor": "policyId",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Recommendation": {
					"complex": {
						"accessor": "recommendation",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Remediable": {
					"complex": {
						"accessor": "remediable",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Type": {
					"complex": {
						"accessor": "policyType",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud ID": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "id",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Reason": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "reason",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Rules": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertRules",
						"transformers": [
							{
								"args": {},
								"operator": "ConvertKeysToTableFieldFormat"
							}
						]
					},
					"simple": ""
				},
				"Prisma Cloud Status": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "status",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Time": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertTime",
						"transformers": []
					},
					"simple": ""
				},
				"Region": {
					"complex": {
						"accessor": "region",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource API Name": {
					"complex": {
						"accessor": "resourceApiName",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Cloud Type": {
					"complex": {
						"accessor": "cloudType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource ID": {
					"complex": {
						"accessor": "id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Type": {
					"complex": {
						"accessor": "resourceType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Rating": {
					"complex": {
						"accessor": "rating",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Score": {
					"complex": {
						"accessor": "score",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"SKU Name": {
					"complex": {
						"accessor": "data.sku.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"SKU TIER": {
					"complex": {
						"accessor": "data.sku.tier",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Assigned By": {
					"complex": {
						"accessor": "data.properties.metadata.assignedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created By": {
					"complex": {
						"accessor": "data.properties.metadata.createdBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created On": {
					"complex": {
						"accessor": "data.properties.metadata.createdOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Description": {
					"complex": {
						"accessor": "data.properties.description",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription ID": {
					"complex": {
						"accessor": "data.id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Name": {
					"complex": {
						"accessor": "data.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Type": {
					"complex": {
						"accessor": "data.type",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated By": {
					"complex": {
						"accessor": "data.properties.metadata.updatedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated On": {
					"complex": {
						"accessor": "data.properties.metadata.updatedOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"System Default": {
					"complex": {
						"accessor": "systemDefault",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Vendor Product": {
					"complex": null,
					"simple": "Prisma Cloud"
				},
				"details": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"sourceBrand": {
					"complex": null,
					"simple": "\"Prisma Cloud\""
				}
			}
		},
		"AWS IAM Policy Misconfiguration": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Account ID": {
					"complex": {
						"accessor": "accountId",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Account Name": {
					"complex": {
						"accessor": "accountname",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Alert ID": {
					"complex": null,
					"simple": "id"
				},
				"First Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "firstSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Last Modified By": {
					"complex": {
						"accessor": "lastModifiedBy",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Modified On": {
					"complex": {
						"accessor": "lastModifiedOn",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "lastSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Policy Deleted": {
					"complex": {
						"accessor": "deleted",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Description": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy ID": {
					"complex": {
						"accessor": "policyId",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Recommendation": {
					"complex": {
						"accessor": "recommendation",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Remediable": {
					"complex": {
						"accessor": "remediable",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Type": {
					"complex": {
						"accessor": "policyType",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud ID": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "id",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Reason": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "reason",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Rules": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertRules",
						"transformers": [
							{
								"args": {},
								"operator": "ConvertKeysToTableFieldFormat"
							}
						]
					},
					"simple": ""
				},
				"Prisma Cloud Status": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "status",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Time": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertTime",
						"transformers": []
					},
					"simple": ""
				},
				"Region": {
					"complex": {
						"accessor": "region",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource API Name": {
					"complex": {
						"accessor": "resourceApiName",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Cloud Type": {
					"complex": {
						"accessor": "cloudType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource ID": {
					"complex": {
						"accessor": "id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Type": {
					"complex": {
						"accessor": "resourceType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Rating": {
					"complex": {
						"accessor": "rating",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Score": {
					"complex": {
						"accessor": "score",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"SKU Name": {
					"complex": {
						"accessor": "data.sku.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"SKU TIER": {
					"complex": {
						"accessor": "data.sku.tier",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Assigned By": {
					"complex": {
						"accessor": "data.properties.metadata.assignedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created By": {
					"complex": {
						"accessor": "data.properties.metadata.createdBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created On": {
					"complex": {
						"accessor": "data.properties.metadata.createdOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Description": {
					"complex": {
						"accessor": "data.properties.description",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription ID": {
					"complex": {
						"accessor": "data.id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Name": {
					"complex": {
						"accessor": "data.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Type": {
					"complex": {
						"accessor": "data.type",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated By": {
					"complex": {
						"accessor": "data.properties.metadata.updatedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated On": {
					"complex": {
						"accessor": "data.properties.metadata.updatedOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"System Default": {
					"complex": {
						"accessor": "systemDefault",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Vendor Product": {
					"complex": null,
					"simple": "Prisma Cloud"
				},
				"details": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"sourceBrand": {
					"complex": null,
					"simple": "\"Prisma Cloud\""
				}
			}
		},
		"GCP Compute Engine Misconfiguration": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Account ID": {
					"complex": {
						"accessor": "accountId",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Account Name": {
					"complex": {
						"accessor": "accountname",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Alert ID": {
					"complex": null,
					"simple": "id"
				},
				"First Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "firstSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Last Modified By": {
					"complex": {
						"accessor": "lastModifiedBy",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Modified On": {
					"complex": {
						"accessor": "lastModifiedOn",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "lastSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Policy Deleted": {
					"complex": {
						"accessor": "deleted",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Description": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy ID": {
					"complex": {
						"accessor": "policyId",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Recommendation": {
					"complex": {
						"accessor": "recommendation",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Remediable": {
					"complex": {
						"accessor": "remediable",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Type": {
					"complex": {
						"accessor": "policyType",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud ID": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "id",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Reason": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "reason",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Rules": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertRules",
						"transformers": [
							{
								"args": {},
								"operator": "ConvertKeysToTableFieldFormat"
							}
						]
					},
					"simple": ""
				},
				"Prisma Cloud Status": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "status",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Time": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertTime",
						"transformers": []
					},
					"simple": ""
				},
				"Region": {
					"complex": {
						"accessor": "region",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource API Name": {
					"complex": {
						"accessor": "resourceApiName",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Cloud Type": {
					"complex": {
						"accessor": "cloudType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource ID": {
					"complex": {
						"accessor": "id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Type": {
					"complex": {
						"accessor": "resourceType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Rating": {
					"complex": {
						"accessor": "rating",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Score": {
					"complex": {
						"accessor": "score",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"SKU Name": {
					"complex": {
						"accessor": "data.sku.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"SKU TIER": {
					"complex": {
						"accessor": "data.sku.tier",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Assigned By": {
					"complex": {
						"accessor": "data.properties.metadata.assignedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created By": {
					"complex": {
						"accessor": "data.properties.metadata.createdBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created On": {
					"complex": {
						"accessor": "data.properties.metadata.createdOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Description": {
					"complex": {
						"accessor": "data.properties.description",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription ID": {
					"complex": {
						"accessor": "data.id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Name": {
					"complex": {
						"accessor": "data.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Type": {
					"complex": {
						"accessor": "data.type",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated By": {
					"complex": {
						"accessor": "data.properties.metadata.updatedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated On": {
					"complex": {
						"accessor": "data.properties.metadata.updatedOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"System Default": {
					"complex": {
						"accessor": "systemDefault",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Vendor Product": {
					"complex": null,
					"simple": "Prisma Cloud"
				},
				"details": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"sourceBrand": {
					"complex": null,
					"simple": "\"Prisma Cloud\""
				}
			}
		},
                "GCP Kubernetes Engine Misconfiguration": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Account ID": {
					"complex": {
						"accessor": "accountId",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Account Name": {
					"complex": {
						"accessor": "accountname",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Alert ID": {
					"complex": null,
					"simple": "id"
				},
				"First Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "firstSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Last Modified By": {
					"complex": {
						"accessor": "lastModifiedBy",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Modified On": {
					"complex": {
						"accessor": "lastModifiedOn",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "lastSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Policy Deleted": {
					"complex": {
						"accessor": "deleted",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Description": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy ID": {
					"complex": {
						"accessor": "policyId",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Recommendation": {
					"complex": {
						"accessor": "recommendation",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Remediable": {
					"complex": {
						"accessor": "remediable",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Type": {
					"complex": {
						"accessor": "policyType",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud ID": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "id",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Reason": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "reason",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Rules": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertRules",
						"transformers": [
							{
								"args": {},
								"operator": "ConvertKeysToTableFieldFormat"
							}
						]
					},
					"simple": ""
				},
				"Prisma Cloud Status": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "status",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Time": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertTime",
						"transformers": []
					},
					"simple": ""
				},
				"Region": {
					"complex": {
						"accessor": "region",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource API Name": {
					"complex": {
						"accessor": "resourceApiName",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Cloud Type": {
					"complex": {
						"accessor": "cloudType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource ID": {
					"complex": {
						"accessor": "id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Type": {
					"complex": {
						"accessor": "resourceType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Rating": {
					"complex": {
						"accessor": "rating",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Score": {
					"complex": {
						"accessor": "score",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"SKU Name": {
					"complex": {
						"accessor": "data.sku.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"SKU TIER": {
					"complex": {
						"accessor": "data.sku.tier",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Assigned By": {
					"complex": {
						"accessor": "data.properties.metadata.assignedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created By": {
					"complex": {
						"accessor": "data.properties.metadata.createdBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created On": {
					"complex": {
						"accessor": "data.properties.metadata.createdOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Description": {
					"complex": {
						"accessor": "data.properties.description",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription ID": {
					"complex": {
						"accessor": "data.id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Name": {
					"complex": {
						"accessor": "data.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Type": {
					"complex": {
						"accessor": "data.type",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated By": {
					"complex": {
						"accessor": "data.properties.metadata.updatedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated On": {
					"complex": {
						"accessor": "data.properties.metadata.updatedOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"System Default": {
					"complex": {
						"accessor": "systemDefault",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Vendor Product": {
					"complex": null,
					"simple": "Prisma Cloud"
				},
				"details": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"sourceBrand": {
					"complex": null,
					"simple": "\"Prisma Cloud\""
				}
			}
		},
		"Prisma Cloud": {
			"dontMapEventToLabels": false,
			"internalMapping": {
				"Account ID": {
					"complex": {
						"accessor": "accountId",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Account Name": {
					"complex": null,
					"simple": "resource.account"
				},
				"Alert ID": {
					"complex": null,
					"simple": "id"
				},
				"First Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "firstSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Last Modified By": {
					"complex": {
						"accessor": "lastModifiedBy",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Modified On": {
					"complex": {
						"accessor": "lastModifiedOn",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Last Seen": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "lastSeen",
						"transformers": [
							{
								"args": {},
								"operator": "TimeStampToDate"
							}
						]
					},
					"simple": ""
				},
				"Policy Deleted": {
					"complex": {
						"accessor": "deleted",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Description": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy ID": {
					"complex": {
						"accessor": "policyId",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Recommendation": {
					"complex": {
						"accessor": "recommendation",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Remediable": {
					"complex": {
						"accessor": "remediable",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Policy Type": {
					"complex": {
						"accessor": "policyType",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud ID": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "id",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Reason": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "reason",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Rules": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertRules",
						"transformers": [
							{
								"args": {},
								"operator": "ConvertKeysToTableFieldFormat"
							}
						]
					},
					"simple": ""
				},
				"Prisma Cloud Status": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "status",
						"transformers": []
					},
					"simple": ""
				},
				"Prisma Cloud Time": {
					"complex": {
						"accessor": "",
						"filters": [],
						"root": "alertTime",
						"transformers": []
					},
					"simple": ""
				},
				"Region": {
					"complex": {
						"accessor": "region",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource API Name": {
					"complex": {
						"accessor": "resourceApiName",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Cloud Type": {
					"complex": {
						"accessor": "cloudType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource ID": {
					"complex": {
						"accessor": "id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Resource Type": {
					"complex": {
						"accessor": "resourceType",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Rating": {
					"complex": {
						"accessor": "rating",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"Risk Score": {
					"complex": {
						"accessor": "score",
						"filters": [],
						"root": "riskDetail",
						"transformers": []
					},
					"simple": ""
				},
				"SKU Name": {
					"complex": {
						"accessor": "data.sku.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"SKU TIER": {
					"complex": {
						"accessor": "data.sku.tier",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Assigned By": {
					"complex": {
						"accessor": "data.properties.metadata.assignedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created By": {
					"complex": {
						"accessor": "data.properties.metadata.createdBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Created On": {
					"complex": {
						"accessor": "data.properties.metadata.createdOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Description": {
					"complex": {
						"accessor": "data.properties.description",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription ID": {
					"complex": {
						"accessor": "data.id",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Name": {
					"complex": {
						"accessor": "data.name",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Type": {
					"complex": {
						"accessor": "data.type",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated By": {
					"complex": {
						"accessor": "data.properties.metadata.updatedBy",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"Subscription Updated On": {
					"complex": {
						"accessor": "data.properties.metadata.updatedOn",
						"filters": [],
						"root": "resource",
						"transformers": []
					},
					"simple": ""
				},
				"System Default": {
					"complex": {
						"accessor": "systemDefault",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"Vendor Product": {
					"complex": null,
					"simple": "Prisma Cloud"
				},
				"details": {
					"complex": {
						"accessor": "description",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"name": {
					"complex": {
						"accessor": "name",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"severity": {
					"complex": {
						"accessor": "severity",
						"filters": [],
						"root": "policy",
						"transformers": []
					},
					"simple": ""
				},
				"sourceBrand": {
					"complex": null,
					"simple": "\"Prisma Cloud\""
				}
			}
		}
	},
    "marketplaces": [
        "xsoar"
    ],
	"version": -1,
	"fromVersion": "6.0.0"
}