{
"id": "Cortex XDR",
"version": -1,
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 30,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z",
"name": "Cortex XDR",
"layout": [
{
"id": "73cd3050-6415-11eb-b8ff-9fe539e200bc",
"forceRange": false,
"x": 0,
"y": 1,
"i": "73cd3050-6415-11eb-b8ff-9fe539e200bc",
"w": 2,
"h": 1,
"widget": {
"id": "ac4ba4c9-b52a-4ea3-8ddd-752ff0c821c6",
"version": 1,
"modified": "2021-01-31T22:41:20.146561482Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Connected Endpoints",
"prevName": "Cortex XDR Connected Endpoints",
"dataType": "scripts",
"widgetType": "number",
"query": "XDRConnectedEndpoints",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"tableColumns": [
]
},
"size": 0,
"category": ""
}
},
{
"id": "d653a970-6415-11eb-b8ff-9fe539e200bc",
"forceRange": false,
"x": 2,
"y": 1,
"i": "d653a970-6415-11eb-b8ff-9fe539e200bc",
"w": 2,
"h": 1,
"widget": {
"id": "0361981e-c627-4c09-8fcc-085ffe0a7e56",
"version": 1,
"modified": "2021-01-31T22:42:52.531099409Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": " Cortex XDR Disconnected Endpoints",
"prevName": " Cortex XDR Disconnected Endpoints",
"dataType": "scripts",
"widgetType": "number",
"query": "XDRDisconnectedEndpoints",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"tableColumns": [
]
},
"size": 0,
"category": ""
}
},
{
"id": "18eb3d20-6416-11eb-b8ff-9fe539e200bc",
"forceRange": false,
"x": 0,
"y": 3,
"i": "18eb3d20-6416-11eb-b8ff-9fe539e200bc",
"w": 2,
"h": 1,
"widget": {
"id": "2a2be295-58f7-4807-8bf9-37dcb89f0493",
"version": 1,
"modified": "2021-01-31T22:45:58.890470112Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Unassigned Incidents",
"prevName": "Cortex XDR Unassigned Incidents",
"dataType": "incidents",
"widgetType": "number",
"query": "type:\"Cortex XDR Incident\" and status:Active and owner:\"\"",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "3c0f8400-6416-11eb-b8ff-9fe539e200bc",
"forceRange": false,
"x": 2,
"y": 3,
"i": "3c0f8400-6416-11eb-b8ff-9fe539e200bc",
"w": 2,
"h": 1,
"widget": {
"id": "0057b0a3-cc6a-4811-8e05-98658b878af4",
"version": 1,
"modified": "2021-01-31T22:46:55.36484948Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Closed Incidents",
"prevName": "Cortex XDR Closed Incidents",
"dataType": "incidents",
"widgetType": "number",
"query": "type:\"Cortex XDR Incident\" and status:Closed",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "0a2995e0-6626-11eb-b982-ab7ceff3dffb",
"forceRange": false,
"x": 0,
"y": 0,
"i": "0a2995e0-6626-11eb-b982-ab7ceff3dffb",
"w": 4,
"h": 1,
"widget": {
"id": "f2974c2d-ba6d-4deb-8d0e-be8122901b37",
"version": 2,
"modified": "2021-02-03T13:20:54.259563294Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Active High Severity Incidents",
"prevName": "Cortex XDR Active High Severity Incidents",
"dataType": "incidents",
"widgetType": "trend",
"query": "type:\"Cortex XDR Incident\" and severity:High and status:Active",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"colors": {
"isEnabled": true,
"items": {
"#FF1B15": {
"value": -1
}
},
"type": "above"
},
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "152356c0-6626-11eb-b982-ab7ceff3dffb",
"forceRange": false,
"x": 4,
"y": 0,
"i": "152356c0-6626-11eb-b982-ab7ceff3dffb",
"w": 4,
"h": 1,
"widget": {
"id": "6173e162-ff22-4f6c-835f-92f857225e56",
"version": 2,
"modified": "2021-02-03T13:21:26.486392167Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Active Medium Severity Incidents",
"prevName": "Cortex XDR Active Medium Severity Incidents",
"dataType": "incidents",
"widgetType": "trend",
"query": "type:\"Cortex XDR Incident\" and severity:medium and status:Active",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"colors": {
"isEnabled": true,
"items": {
"#00CD33": {
"value": null
},
"#FAC100": {
"value": -1
}
},
"type": "above"
},
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "1e3e6c90-6626-11eb-b982-ab7ceff3dffb",
"forceRange": false,
"x": 8,
"y": 0,
"i": "1e3e6c90-6626-11eb-b982-ab7ceff3dffb",
"w": 4,
"h": 1,
"widget": {
"id": "b49cb3c0-33e0-493d-8462-31929b4509e1",
"version": 2,
"modified": "2021-02-03T13:22:26.410229241Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Active Low Severity Incidents",
"prevName": "Cortex XDR Active Low Severity Incidents",
"dataType": "incidents",
"widgetType": "trend",
"query": "type:\"Cortex XDR Incident\" and severity:Low and status:Active",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"colors": {
"isEnabled": true,
"items": {
"#418ae6": {
"value": -1
}
},
"type": "above"
},
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "47a1f980-6626-11eb-b982-ab7ceff3dffb",
"forceRange": false,
"x": 0,
"y": 2,
"i": "47a1f980-6626-11eb-b982-ab7ceff3dffb",
"w": 2,
"h": 1,
"widget": {
"id": "f39f1990-8c88-4e76-8fa7-a0e564692d77",
"version": 2,
"modified": "2021-02-03T13:23:21.581809197Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Active Device Control Violations Incidents",
"prevName": "Cortex XDR Active Device Control Violations Incidents",
"dataType": "incidents",
"widgetType": "number",
"query": "type:\"Cortex XDR Device Control Violations\" and status:Active",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 30,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "4e78ebb0-6626-11eb-b982-ab7ceff3dffb",
"forceRange": false,
"x": 2,
"y": 2,
"i": "4e78ebb0-6626-11eb-b982-ab7ceff3dffb",
"w": 2,
"h": 1,
"widget": {
"id": "2de3d4e6-573a-4c4e-86c1-85d57dbd88b7",
"version": 1,
"modified": "2021-02-03T13:17:58.925310112Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Closed Device Control Violations",
"prevName": "Cortex XDR Closed Device Control Violations",
"dataType": "incidents",
"widgetType": "number",
"query": "type:\"Cortex XDR Device Control Violations\" and status:Closed",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 30,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "841288d0-97a4-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 8,
"y": 7,
"i": "841288d0-97a4-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "b0d7015d-ea2d-4590-854e-b922a257f368",
"version": 2,
"modified": "2021-04-07T13:23:54.614585662Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 MITRE Tactics",
"prevName": "Cortex XDR Top 10 MITRE Tactics",
"dataType": "incidents",
"widgetType": "pie",
"query": "type:\"Cortex XDR Incident\" and -status:Closed and -xdrmitretactics:\"\"",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"xdrmitretactics"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "91802fe0-97a4-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 4,
"y": 7,
"i": "91802fe0-97a4-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "0bef45cc-5c29-4504-89c6-9c5f9c742587",
"version": 1,
"modified": "2021-04-07T13:23:41.530295138Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 MITRE Techniques",
"prevName": "Cortex XDR Top 10 MITRE Techniques",
"dataType": "incidents",
"widgetType": "pie",
"query": "type:\"Cortex XDR Incident\" -status:Closed and -xdrmitretechniques:\"\"",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"xdrmitretechniques"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "adb604f0-97a4-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 4,
"y": 1,
"i": "adb604f0-97a4-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "d027f9c1-326a-4cca-8854-a3fe08219d1d",
"version": 1,
"modified": "2021-04-07T13:25:06.830693113Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 Users",
"prevName": "Cortex XDR Top 10 Users",
"dataType": "incidents",
"widgetType": "column",
"query": "type:\"Cortex XDR Incident\" and -status:Closed and -xdrusers:\"\"",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": null,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"xdrusers"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "ce2209a0-97a4-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 8,
"y": 1,
"i": "ce2209a0-97a4-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "a2d2fd64-e057-4d57-8ee7-dd6ca6cefa42",
"version": 1,
"modified": "2021-04-07T13:25:59.472449275Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 Hosts",
"prevName": "Cortex XDR Top 10 Hosts",
"dataType": "incidents",
"widgetType": "column",
"query": "type:\"Cortex XDR Incident\" -status:Closed and -hostnames:\"\"",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"hostnames"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "f6fdf000-97a4-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 4,
"y": 4,
"i": "f6fdf000-97a4-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "0b674563-66ca-4c41-8eac-134722296026",
"version": 1,
"modified": "2021-04-07T13:27:10.964416573Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 Categories",
"prevName": "Cortex XDR Top 10 Categories",
"dataType": "incidents",
"widgetType": "column",
"query": "type:\"Cortex XDR Incident\" -status:Closed",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"xdralertcategory"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "3d5e2470-97a5-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 8,
"y": 4,
"i": "3d5e2470-97a5-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "f0021d41-aef6-4870-8f61-2c0bb2df3685",
"version": 1,
"modified": "2021-04-07T13:29:10.049137856Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 Alerts",
"prevName": "Cortex XDR Top 10 Alerts",
"dataType": "incidents",
"widgetType": "column",
"query": "type:\"Cortex XDR Incident\" -status:Closed",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"xdralertname"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "6ce0c540-97a5-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 0,
"y": 4,
"i": "6ce0c540-97a5-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "24adf3d5-48e2-450a-834d-badbffba52a7",
"version": 1,
"modified": "2021-04-07T13:30:29.006278544Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 files",
"prevName": "Cortex XDR Top 10 files",
"dataType": "incidents",
"widgetType": "pie",
"query": "type:\"Cortex XDR Incident\" -status:Closed and -xdrfilename:\"\"",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"xdrfilename"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
},
{
"id": "8cd48cb0-97a5-11eb-b45a-c3f5fab2d0d2",
"forceRange": false,
"x": 0,
"y": 7,
"i": "8cd48cb0-97a5-11eb-b45a-c3f5fab2d0d2",
"w": 4,
"h": 3,
"widget": {
"id": "c147b637-9e76-470f-8c9d-cf13361fcb33",
"version": 1,
"modified": "2021-04-07T13:31:21.51411527Z",
"sortValues": null,
"packID": "",
"itemVersion": "",
"fromServerVersion": "",
"toServerVersion": "",
"propagationLabels": [
"all"
],
"vcShouldIgnore": false,
"vcShouldKeepItemLegacyProdMachine": false,
"commitMessage": "",
"shouldCommit": false,
"name": "Cortex XDR Top 10 File SHA256",
"prevName": "Cortex XDR Top 10 File SHA256",
"dataType": "incidents",
"widgetType": "pie",
"query": "type:\"Cortex XDR Incident\" -status:Closed and -xdrfilesha256:\"\"",
"sort": null,
"isPredefined": false,
"dateRange": {
"fromDate": "0001-01-01T00:00:00Z",
"toDate": "0001-01-01T00:00:00Z",
"period": {
"by": "",
"byTo": "",
"byFrom": "days",
"toValue": null,
"fromValue": 7,
"field": ""
},
"fromDateLicense": "0001-01-01T00:00:00Z"
},
"params": {
"groupBy": [
"xdrfilesha256"
],
"tableColumns": [
{
"isDefault": true,
"key": "id",
"position": 0,
"width": 110
},
{
"isDefault": true,
"key": "name",
"position": 2,
"width": 300
},
{
"isDefault": true,
"key": "type",
"position": 3,
"width": 200
},
{
"isDefault": true,
"key": "severity",
"position": 4,
"width": 80
},
{
"isDefault": true,
"key": "status",
"position": 5,
"width": 80
},
{
"isDefault": true,
"key": "owner",
"position": 6,
"width": 160
},
{
"isDefault": true,
"key": "roles",
"position": 7,
"width": 160
},
{
"isDefault": true,
"key": "playbookId",
"position": 8,
"width": 150
},
{
"isDefault": true,
"key": "occurred",
"position": 9,
"width": 200
},
{
"isDefault": true,
"key": "dueDate",
"position": 10,
"width": 200
}
]
},
"size": 0,
"category": ""
}
}
],
"fromVersion": "6.0.0",
"description": "",
"isPredefined": true
}