Incident Fields

5244 incident fields.

Name CLI Name Type Pack Required Group
F5 Silverline Alert Generated Timestamp f5silverlinealertgeneratedtimestamp shortText F5 Silverline No 0
APD Admin Recipients apdadminrecipients shortText Agari Phishing Defense No 0
APD Alert Definition Name apdalertdefinitionname shortText Agari Phishing Defense No 0
APD Attack Types apdattacktypes grid Agari Phishing Defense No 0
APD Created At apdcreatedat date Agari Phishing Defense No 0
APD Enforcement Action apdenforcementaction shortText Agari Phishing Defense No 0
APD Global Message ID apdglobalmessageid shortText Agari Phishing Defense No 0
APD Internal Message ID apdinternalmessageid shortText Agari Phishing Defense No 0
APD Message Authentication Results apdmessageauthenticationresults shortText Agari Phishing Defense No 0
APD Message Authenticity Score apdmessageauthenticityscore number Agari Phishing Defense No 0
APD Message DKIM D Tag apdmessagedkimdtag shortText Agari Phishing Defense No 0
APD Message Date apdmessagedate date Agari Phishing Defense No 0
APD Message Domain Reputation apdmessagedomainreputation number Agari Phishing Defense No 0
APD Message From apdmessagefrom shortText Agari Phishing Defense No 0
APD Message From Domain apdmessagefromdomain shortText Agari Phishing Defense No 0
APD Message Mail From apdmessagemailfrom shortText Agari Phishing Defense No 0
APD Message PTR Name apdmessageptrname shortText Agari Phishing Defense No 0
APD Message Reply To apdmessagereplyto shortText Agari Phishing Defense No 0
APD Message Reputation apdmessagereputation number Agari Phishing Defense No 0
APD Message Risk Reason apdmessageriskreason shortText Agari Phishing Defense No 0
APD Message Sender IP Address apdmessagesenderipaddress shortText Agari Phishing Defense No 0
APD Message Subject apdmessagesubject shortText Agari Phishing Defense No 0
APD Message To apdmessageto shortText Agari Phishing Defense No 0
APD Message Trust Score apdmessagetrustscore number Agari Phishing Defense No 0
APD Notified Original Recipients apdnotifiedoriginalrecipients boolean Agari Phishing Defense No 0
APD Policy Action apdpolicyaction shortText Agari Phishing Defense No 0
APD Policy Enabled apdpolicyenabled boolean Agari Phishing Defense No 0
APD Policy Event ID apdpolicyeventid number Agari Phishing Defense No 0
APD Summary apdsummary boolean Agari Phishing Defense No 0
APD Updated At apdupdatedat date Agari Phishing Defense No 0
ASM - Alert Summary asmalertsummary grid Cortex Attack Surface Management No 0
ASM - Asset Hierarchy asmassethierarchy shortText Cortex Attack Surface Management No 0
ASM - Asset ID asmassetid multiSelect Cortex Attack Surface Management No 0
ASM - Attack Surface Rule Category asmattacksurfacerulecategory shortText Cortex Attack Surface Management No 0
ASM - Attack Surface Rule Description asmattacksurfaceruledescription longText Cortex Attack Surface Management No 0
ASM - Attack Surface Rule ID Hidden asmattacksurfaceruleid multiSelect Cortex Attack Surface Management No 0
ASM - Attack Surface Rule Priority asmattacksurfacerulepriority shortText Cortex Attack Surface Management No 0
ASM - Attack Surface Rule Remediation Guidance asmattacksurfaceruleremediationguidance longText Cortex Attack Surface Management No 0
ASM - Cloud asmcloud grid Cortex Attack Surface Management No 0
ASM - Data Collection asmdatacollection grid Cortex Attack Surface Management No 0
ASM - Dev Check asmdevcheck boolean Cortex Attack Surface Management No 0
ASM - Dev Check Details asmdevcheckdetails grid Cortex Attack Surface Management No 0
ASM - Enrichment Status asmenrichmentstatus grid Cortex Attack Surface Management No 0
ASM - Notification asmnotification grid Cortex Attack Surface Management No 0
ASM - Playbook Stage asmplaybookstage grid Cortex Attack Surface Management No 0
ASM - Private IP asmprivateip grid Cortex Attack Surface Management No 0
ASM - Protocol asmprotocol multiSelect Cortex Attack Surface Management No 0
ASM - Provider asmprovider multiSelect Cortex Attack Surface Management No 0
ASM - Related Hidden asmrelated grid Cortex Attack Surface Management No 0
ASM - Remediation asmremediation grid Cortex Attack Surface Management No 0
ASM - Remediation Objectives asmremediationobjectives grid Cortex Attack Surface Management No 0
ASM - Remediation Path Rule asmremediationpathrule grid Cortex Attack Surface Management No 0
ASM - Service Detection asmservicedetection grid Cortex Attack Surface Management No 0
ASM - Service ID asmserviceid multiSelect Cortex Attack Surface Management No 0
ASM - Service Owner asmserviceowner grid Cortex Attack Surface Management No 0
ASM - Service Owner Unranked Raw asmserviceownerunrankedraw grid Cortex Attack Surface Management No 0
ASM - System IDs asmsystemids grid Cortex Attack Surface Management No 0
ASM - Tags asmtags grid Cortex Attack Surface Management No 0
ASN asn shortText Common Types No 0
ASN Name asnname shortText Common Types No 0
AWS Arn awsarn shortText AWS - GuardDuty No 0
AWS GuardDuty Access Key Details awsguarddutyaccesskeydetails longText AWS - GuardDuty No 0
AWS GuardDuty Confidence Score awsguarddutyconfidencescore number AWS - GuardDuty No 0
AWS GuardDuty Container Details awsguarddutycontainerdetails longText AWS - GuardDuty No 0
AWS GuardDuty Ebs Volume Details awsguarddutyebsvolumedetails longText AWS - GuardDuty No 0
AWS GuardDuty Ecs Cluster Details awsguarddutyecsclusterdetails longText AWS - GuardDuty No 0
AWS GuardDuty Eks Cluster Details awsguarddutyeksclusterdetails longText AWS - GuardDuty No 0
AWS GuardDuty Iam Instance Profile awsguarddutyiaminstanceprofile longText AWS - GuardDuty No 0
AWS GuardDuty Instance Details awsguarddutyinstancedetails longText AWS - GuardDuty No 0
AWS GuardDuty Kubernetes User Details awsguarddutykubernetesuserdetails longText AWS - GuardDuty No 0
AWS GuardDuty Kubernetes Workload Details awsguarddutykubernetesworkloaddetails longText AWS - GuardDuty No 0
AWS GuardDuty Network Interface awsguarddutynetworkinterface longText AWS - GuardDuty No 0
AWS GuardDuty Partition awsguarddutypartition shortText AWS - GuardDuty No 0
AWS GuardDuty Resource Type awsguarddutyresourcetype shortText AWS - GuardDuty No 0
AWS GuardDuty S3 Bucket Details awsguarddutys3bucketdetails longText AWS - GuardDuty No 0
AWS GuardDuty Schema Version awsguarddutyschemaversion shortText AWS - GuardDuty No 0
AWS GuardDuty Service awsguarddutyservice longText AWS - GuardDuty No 0
AWS GuardDuty Type awsguarddutytype shortText AWS - GuardDuty No 0
AWS Security Hub Action awssecurityhubaction longText AWS - Security Hub No 0
AWS Security Hub Company Name awssecurityhubcompanyname shortText AWS - Security Hub No 0
AWS Security Hub Compliance awssecurityhubcompliance longText AWS - Security Hub No 0
AWS Security Hub Confidence awssecurityhubconfidence number AWS - Security Hub No 0
AWS Security Hub Criticality awssecurityhubcriticality number AWS - Security Hub No 0
AWS Security Hub Generator Id awssecurityhubgeneratorid shortText AWS - Security Hub No 0
AWS Security Hub Malware awssecurityhubmalware longText AWS - Security Hub No 0
AWS Security Hub Network Path awssecurityhubnetworkpath longText AWS - Security Hub No 0
AWS Security Hub Product Arn awssecurityhubproductarn shortText AWS - Security Hub No 0
AWS Security Hub Product Fields awssecurityhubproductfields longText AWS - Security Hub No 0
AWS Security Hub Product Name awssecurityhubproductname shortText AWS - Security Hub No 0
AWS Security Hub Provider Fields awssecurityhubproviderfields longText AWS - Security Hub No 0
AWS Security Hub Provider Updated At awssecurityhubproviderupdatedat date AWS - Security Hub No 0
AWS Security Hub Record State awssecurityhubrecordstate shortText AWS - Security Hub No 0
AWS Security Hub Related Findings awssecurityhubrelatedfindings longText AWS - Security Hub No 0
AWS Security Hub Remediation awssecurityhubremediation longText AWS - Security Hub No 0
AWS Security Hub Resources awssecurityhubresources longText AWS - Security Hub No 0
AWS Security Hub Schema Version awssecurityhubschemaversion shortText AWS - Security Hub No 0
AWS Security Hub Severity awssecurityhubseverity longText AWS - Security Hub No 0
AWS Security Hub Threat Intel Indicators awssecurityhubthreatintelindicators longText AWS - Security Hub No 0
AWS Security Hub Threats awssecurityhubthreats longText AWS - Security Hub No 0
AWS Security Hub Types awssecurityhubtypes shortText AWS - Security Hub No 0
AWS Security Hub User Defined Fields awssecurityhubuserdefinedfields longText AWS - Security Hub No 0
AWS Security Hub Verification State awssecurityhubverificationstate multiSelect AWS - Security Hub No 0
AWS Security Hub Vulnerabilities awssecurityhubvulnerabilities longText AWS - Security Hub No 0
AWS Security Hub Workflow Status awssecurityhubworkflowstatus multiSelect AWS - Security Hub No 0
Abnormal Security Abuse Campaign Attack Type abnormalsecurityabusecampaignattacktype shortText Abnormal Security No 0
Abnormal Security Abuse Campaign First Reported abnormalsecurityabusecampaignfirstreported shortText Abnormal Security No 0
Abnormal Security Abuse Campaign From Address abnormalsecurityabusecampaignfromaddress shortText Abnormal Security No 0
Abnormal Security Abuse Campaign From Name abnormalsecurityabusecampaignfromname shortText Abnormal Security No 0
Abnormal Security Abuse Campaign ID abnormalsecurityabusecampaignid shortText Abnormal Security No 0
Abnormal Security Abuse Campaign Judgement Status abnormalsecurityabusecampaignjudgementstatus shortText Abnormal Security No 0
Abnormal Security Abuse Campaign Last Reported abnormalsecurityabusecampaignlastreported shortText Abnormal Security No 0
Abnormal Security Abuse Campaign Message ID abnormalsecurityabusecampaignmessageid shortText Abnormal Security No 0
Abnormal Security Abuse Campaign Overall Status abnormalsecurityabusecampaignoverallstatus shortText Abnormal Security No 0
Abnormal Security Abuse Campaign Recipient Address abnormalsecurityabusecampaignrecipientaddress shortText Abnormal Security No 0
Abnormal Security Abuse Campaign Recipient Name abnormalsecurityabusecampaignrecipientname shortText Abnormal Security No 0
Abnormal Security Abuse Campaign Subject abnormalsecurityabusecampaignsubject shortText Abnormal Security No 0
Abnormal Security Affected Employee abnormalsecurityaffectedemployee shortText Abnormal Security No 0
Abnormal Security Analysis abnormalsecurityanalysis shortText Abnormal Security No 0
Abnormal Security Attachment Count abnormalsecurityattachmentcount number Abnormal Security No 0
Abnormal Security Attachment Names abnormalsecurityattachmentnames multiSelect Abnormal Security No 0
Abnormal Security Attack Strategy abnormalsecurityattackstrategy shortText Abnormal Security No 0
Abnormal Security Attack Type abnormalsecurityattacktype shortText Abnormal Security No 0
Abnormal Security Attack Vector abnormalsecurityattackvector shortText Abnormal Security No 0
Abnormal Security Attacked Party abnormalsecurityattackedparty shortText Abnormal Security No 0
Abnormal Security Auto Remediated abnormalsecurityautoremediated shortText Abnormal Security No 0
Abnormal Security CC Emails abnormalsecurityccemails multiSelect Abnormal Security No 0
Abnormal Security Campaign ID abnormalsecuritycampaignid shortText Abnormal Security No 0
Abnormal Security Case GenAI Summary abnormalsecuritycasegenaisummary longText Abnormal Security No 0
Abnormal Security Case ID abnormalsecuritycaseid shortText Abnormal Security No 0
Abnormal Security Case Status abnormalsecuritycasestatus shortText Abnormal Security No 0
Abnormal Security Customer Visible Time abnormalsecuritycustomervisibletime shortText Abnormal Security No 0
Abnormal Security First Observed Time abnormalsecurityfirstobservedtime shortText Abnormal Security No 0
Abnormal Security First Reported abnormalsecurityfirstreported shortText Abnormal Security No 0
Abnormal Security From Address abnormalsecurityfromaddress shortText Abnormal Security No 0
Abnormal Security From Name abnormalsecurityfromname shortText Abnormal Security No 0
Abnormal Security Impersonated Party abnormalsecurityimpersonatedparty shortText Abnormal Security No 0
Abnormal Security Internet Message ID abnormalsecurityinternetmessageid shortText Abnormal Security No 0
Abnormal Security Is Read abnormalsecurityisread shortText Abnormal Security No 0
Abnormal Security Judgement Status abnormalsecurityjudgementstatus shortText Abnormal Security No 0
Abnormal Security Last Reported abnormalsecuritylastreported shortText Abnormal Security No 0
Abnormal Security Message ID abnormalsecuritymessageid shortText Abnormal Security No 0
Abnormal Security Overall Status abnormalsecurityoverallstatus shortText Abnormal Security No 0
Abnormal Security Portal URL abnormalsecurityportalurl longText Abnormal Security No 0
Abnormal Security Post Remediated abnormalsecuritypostremediated shortText Abnormal Security No 0
Abnormal Security Received Time abnormalsecurityreceivedtime shortText Abnormal Security No 0
Abnormal Security Recipient Address abnormalsecurityrecipientaddress shortText Abnormal Security No 0
Abnormal Security Recipient Name abnormalsecurityrecipientname shortText Abnormal Security No 0
Abnormal Security Remediation Status abnormalsecurityremediationstatus shortText Abnormal Security No 0
Abnormal Security Remediation Timestamp abnormalsecurityremediationtimestamp shortText Abnormal Security No 0
Abnormal Security Reply To Emails abnormalsecurityreplytoemails multiSelect Abnormal Security No 0
Abnormal Security Return Path abnormalsecurityreturnpath shortText Abnormal Security No 0
Abnormal Security Sender Domain abnormalsecuritysenderdomain shortText Abnormal Security No 0
Abnormal Security Sender IP Address abnormalsecuritysenderipaddress shortText Abnormal Security No 0
Abnormal Security Sent Time abnormalsecuritysenttime shortText Abnormal Security No 0
Abnormal Security Severity abnormalsecurityseverity shortText Abnormal Security No 0
Abnormal Security Severity Level abnormalsecurityseveritylevel shortText Abnormal Security No 0
Abnormal Security Subject abnormalsecuritysubject shortText Abnormal Security No 0
Abnormal Security Summary Insights abnormalsecuritysummaryinsights multiSelect Abnormal Security No 0
Abnormal Security Threat ID abnormalsecuritythreatid shortText Abnormal Security No 0
Abnormal Security Threat IDs abnormalsecuritythreatids multiSelect Abnormal Security No 0
Abnormal Security To Addresses abnormalsecuritytoaddresses multiSelect Abnormal Security No 0
Abnormal Security Url Count abnormalsecurityurlcount number Abnormal Security No 0
Account Groups accountgroups shortText Brute Force No 0
Account ID accountid shortText Common Types No 0
Account Member Of accountmemberof multiSelect Common Types No 0
Account Name accountname shortText Common Types No 0
Account Status accountstatus shortText Common Types No 0
Account information breached accountinformationbreached shortText Common Scripts No 0
Acknowledged acknowledged boolean Nutanix Hypervisor No 0
Acknowledged By Username acknowledgedbyusername shortText Nutanix Hypervisor No 0
Acquisition Hire acquisitionhire shortText Common Types No 0
Action action singleSelect FireMon Security Manager No 0
Action action singleSelect Core Alert Fields No 0
Action Process Instance ID actionprocessinstanceid multiSelect Core Alert Fields No 0
Actions On Campaign Incidents actionsoncampaignincidents singleSelect Phishing Campaign No 0
Actions On Low Similarity Incidents actionsonlowsimilarityincidents singleSelect Phishing Campaign No 0
Active Directory Account Status activedirectoryaccountstatus singleSelect Employee Offboarding No 0
Active Directory Display Name activedirectorydisplayname shortText Employee Offboarding No 0
Active Directory Password Status activedirectorypasswordstatus singleSelect Employee Offboarding No 0
Actor cybersixgillactor shortText Cybersixgill Actionable Alerts No 0
Actor Process Instance ID actorprocessinstanceid multiSelect Core Alert Fields No 0
Add BCC To Email addbcctoemail shortText Email Communication No 0
Add CC To Email addcctoemail shortText Email Communication No 0
Additional Data additionaldata multiSelect Common Types No 0
Additional Email Addresses additionalemailaddresses multiSelect Common Types No 0
Additional Indicators additionalindicators shortText Common Types No 0
Affected Data Type affecteddatatype shortText Common Scripts No 0
Affected Entities affectedentities number XM Cyber No 0
Affected Entities List affectedentitieslist grid XM Cyber No 0
Affected Host affectedhost shortText Use Case Builder No 0
Affected Hosts affectedhosts tagsSelect Common Types No 0
Affected Individuals Contact Information affectedindividualscontactinformation grid Common Scripts No 0
Affected Users affectedusers tagsSelect Common Types No 0
Affected data affecteddata multiSelect Common Scripts No 0
Agent ID agentid shortText Common Types No 0
Agent Id agentid shortText Core Alert Fields No 0
Agent OS Sub Type agentossubtype shortText Core Alert Fields No 0
Agent Version agentversion multiSelect Common Types No 0
Agents ID agentsid multiSelect Common Types No 0
Alert Acknowledgement alertacknowledgement shortText Common Types No 0
Alert Action alertaction shortText Common Types No 0
Alert Attack Time alertattacktime shortText Common Types No 0
Alert Category alertcategory shortText Common Types No 0
Alert Closing User alertclosinguser shortText Nutanix Hypervisor No 0
Alert ID alertid shortText Common Types No 0
Alert Malicious alertmalicious shortText Common Types No 0
Alert Name alertname shortText Common Types No 0
Alert Rules alertrules markdown Common Types No 0
Alert Search Results alertsearchresults grid Core Alert Fields No 0
Alert Source alertsource shortText Common Types No 0
Alert Type ID alerttypeid shortText Common Types No 0
Alert Type UUID alerttypeuuid shortText Nutanix Hypervisor No 0
Alert URL alerturl shortText Common Types No 0
Alert tags alerttags shortText Common Types No 0
Alerts and related info alertsandrelatedinfo grid Malware Investigation and Response No 0
Analysis Report analysisreport multiSelect Malware Core No 0
Anti-Spyware Profile Name antispywareprofilename shortText MITRE ATT&CK - Courses of Action No 0
Anti-Spyware Profile Status antispywareprofilestatus shortText MITRE ATT&CK - Courses of Action No 0
Anti-Spyware Rules antispywarerules shortText MITRE ATT&CK - Courses of Action No 0
Anti-Virus Profile Name antivirusprofilename shortText MITRE ATT&CK - Courses of Action No 0
Anti-Virus Profile Status antivirusprofilestatus shortText MITRE ATT&CK - Courses of Action No 0
Anti-Virus Rules antivirusrules shortText MITRE ATT&CK - Courses of Action No 0
Anything LLM Conversation anythingllmconversation markdown Anything LLM No 0
Anything LLM Curthread anythingllmcurthread longText Anything LLM No 0
Anything LLM Documents anythingllmdocuments grid Anything LLM No 0
Anything LLM Embeddings anythingllmembeddings grid Anything LLM No 0
Anything LLM Newcontext anythingllmnewcontext longText Anything LLM No 0
Anything LLM Search Results anythingllmsearchresults longText Anything LLM No 0
Anything LLM Upload anythingllmupload longText Anything LLM No 0
Anything LLM Workspace anythingllmworkspace shortText Anything LLM No 0
Anything LLM Workspace List anythingllmworkspacelist grid Anything LLM No 0
App app shortText Common Types No 0
App Category appcategory multiSelect Core Alert Fields No 0
App Technology apptechnology multiSelect Core Alert Fields No 0
App message appmessage longText Common Types No 0
App-id appid multiSelect Core Alert Fields No 0
Appliance ID applianceid shortText Common Types No 0
Appliance Name appliancename shortText Common Types No 0
Application Id applicationid shortText Common Types No 0
Application Name applicationname shortText Common Types No 0
Application Path applicationpath shortText Common Types No 0
Approval Status approvalstatus shortText Common Types No 0
Approver approver shortText Common Types No 0
Approximate number of affected data subjects approximatenumberofaffecteddatasubjects shortText Common Scripts No 0
Argus Attachment ID argusattachmentid number mnemonic MDR No 0
Argus Case Category arguscasecategory shortText mnemonic MDR No 0
Argus Case HTML arguscasehtml html mnemonic MDR No 0
Argus Case ID arguscaseid number mnemonic MDR No 0
Argus Case Link arguscaselink url mnemonic MDR No 0
Argus Case Service arguscaseservice shortText mnemonic MDR No 0
Argus Case Status arguscasestatus shortText mnemonic MDR No 0
Argus Case Type arguscasetype shortText mnemonic MDR No 0
Argus Comment ID arguscommentid number mnemonic MDR No 0
Argus Customer ID arguscustomerid number mnemonic MDR No 0
Argus Event ID arguseventid number mnemonic MDR No 0
Argus Event Type arguseventtype shortText mnemonic MDR No 0
Argus Tag ID argustagid number mnemonic MDR No 0
Armis Alert Description armisalertdescription shortText Armis No 0
Armis Alert ID armisalertid shortText Armis No 0
Armis Alert Severity armisalertseverity shortText Armis No 0
Armis Alert Status armisalertstatus shortText Armis No 0
Armis Alert Type armisalerttype shortText Armis No 0
Armis Device IDs armisdeviceid shortText Armis No 0
Armis Device Identifier armisdeviceidentifier shortText Armis No 0
Armis Device Risk Level armisdevicerisklevel shortText Armis No 0
Armorblox Incident Id armorbloxincidentid shortText Armorblox No 0
Armorblox Policy Names armorbloxpolicynames longText Armorblox No 0
Armorblox Remediation Actions armorbloxremediationactions longText Armorblox No 0
Armorblox Resolution State armorbloxresolutionstate shortText Armorblox No 0
Armorblox Subject armorbloxsubject shortText Armorblox No 0
Asimily Anomaly Alert ID asimilyanomalyalertid shortText Asimily Insight No 0
Asimily Anomaly Category asimilyanomalycategory shortText Asimily Insight No 0
Asimily Anomaly Criticality asimilyanomalycriticality singleSelect Asimily Insight No 0
Asimily Anomaly Criticality Score asimilyanomalycriticalityscore number Asimily Insight No 0
Asimily Anomaly Customer Anomaly ID asimilyanomalycustomeranomalyid number Asimily Insight No 0
Asimily Anomaly Description asimilyanomalydescription longText Asimily Insight No 0
Asimily Anomaly Earliest Trigger Time asimilyanomalyearliesttriggertime date Asimily Insight No 0
Asimily Anomaly Fix By asimilyanomalyfixby shortText Asimily Insight No 0
Asimily Anomaly Is Fixed asimilyanomalyisfixed boolean Asimily Insight No 0
Asimily Anomaly Last Trigger Time asimilyanomalylasttriggertime date Asimily Insight No 0
Asimily Anomaly Mitre Tactic asimilyanomalymitretactic shortText Asimily Insight No 0
Asimily Anomaly Mitre Technique asimilyanomalymitretechnique shortText Asimily Insight No 0
Asimily Anomaly Name asimilyanomalyname shortText Asimily Insight No 0
Asimily Anomaly URLs asimilyanomalyurls multiSelect Asimily Insight No 0
Asimily CVE CVSS 3 Base Score asimilycvecvss3basescore number Asimily Insight No 0
Asimily CVE CWE Type asimilycvecwetype shortText Asimily Insight No 0
Asimily CVE Description asimilycvedescription shortText Asimily Insight No 0
Asimily CVE Entity Name asimilycveentityname shortText Asimily Insight No 0
Asimily CVE Entity Type asimilycveentitytype shortText Asimily Insight No 0
Asimily CVE Exploitable In Wild asimilycveexploitableinwild boolean Asimily Insight No 0
Asimily CVE Fixed By asimilycvefixedby shortText Asimily Insight No 0
Asimily CVE Fixed Date asimilycvefixeddate date Asimily Insight No 0
Asimily CVE Is Fixed asimilycveisfixed boolean Asimily Insight No 0
Asimily CVE Is Muted asimilycveismuted shortText Asimily Insight No 0
Asimily CVE Name asimilycvename shortText Asimily Insight No 0
Asimily CVE OEM Patched asimilycveoempatched boolean Asimily Insight No 0
Asimily CVE Open Date asimilycveopendate date Asimily Insight No 0
Asimily CVE Published Date asimilycvepublisheddate date Asimily Insight No 0
Asimily CVE Score asimilycvescore number Asimily Insight No 0
Asimily Device Families asimilydevicefamilies tagsSelect Asimily Insight No 0
Asimily Device Host Name asimilydevicehostname shortText Asimily Insight No 0
Asimily Device ID asimilydeviceid number Asimily Insight No 0
Asimily Device IPV4 Address asimilydeviceipv4address tagsSelect Asimily Insight No 0
Asimily Device MAC Address asimilydevicemacaddress shortText Asimily Insight No 0
Asimily Device Manufacturer asimilydevicemanufacturer shortText Asimily Insight No 0
Asimily Device Model asimilydevicemodel shortText Asimily Insight No 0
Asimily Device OS asimilydeviceos shortText Asimily Insight No 0
Asimily Device Type asimilydevicetype shortText Asimily Insight No 0
Asset ID assetid shortText Common Types No 0
Asset Name assetname shortText Common Types No 0
Asset Table assettable markdown Asset No 0
Assigned User assigneduser shortText Common Types No 0
Assignment Group assignmentgroup shortText Common Types No 0
Associated Malicious Domains associatedmaliciousdomains shortText Port Scan No 0
Ataya_ID atayaid shortText Ataya No 0
Ataya_IMEI atayaimei shortText Ataya No 0
Ataya_IMSI atayaimsi shortText Ataya No 0
Attachment Count attachmentcount number Phishing No 0
Attachment Extension attachmentextension shortText Phishing No 0
Attachment Hash attachmenthash shortText Phishing No 0
Attachment ID attachmentid shortText Phishing No 0
Attachment Name attachmentname shortText Phishing No 0
Attachment size attachmentsize shortText Phishing No 0
Attachment type attachmenttype shortText Phishing No 0
Attack Mode attackmode shortText Common Types No 0
Attack Patterns attackpatterns tagsSelect Common Types No 0
Attacker Host Isolated attackerhostisolated boolean Port Scan No 0
Attacker IP Blocked attackeripblocked boolean Port Scan No 0
Attorney General Notification attorneygeneralnotification singleSelect Common Scripts No 0
Audit Logs auditlogs shortText Common Types No 0
Azure Active Directory Identity and Access Activity azureactivedirectoryidentityandaccessactivity shortText Azure Active Directory Identity and Access (Deprecated) No 0
Azure Active Directory Identity and Access Alert Type azureactivedirectoryidentityandaccessalerttype shortText Azure Active Directory Identity and Access (Deprecated) No 0
Azure Active Directory Identity and Access Detected Date Time azureactivedirectoryidentityandaccessdetecteddatetime shortText Azure Active Directory Identity and Access (Deprecated) No 0
Azure Active Directory Identity and Access Detection Timing Type azureactivedirectoryidentityandaccessdetectiontimingtype shortText Azure Active Directory Identity and Access (Deprecated) No 0
Azure Active Directory Identity and Access Token Issuer Type azureactivedirectoryidentityandaccesstokenissuertype shortText Azure Active Directory Identity and Access (Deprecated) No 0
Azure Storage Queue Expiration Time azurestoragequeueexpirationtime date Azure Storage Queue No 0
Azure Storage Queue Insertation Time azurestoragequeueinsertationtime date Azure Storage Queue No 0
Azure Storage Queue Message ID azurestoragequeuemessageid shortText Azure Storage Queue No 0
Azure Storage Queue Message Text azurestoragequeuemessagetext longText Azure Storage Queue No 0
Azure Storage Queue Next Visible Time azurestoragequeuenextvisibletime date Azure Storage Queue No 0
Azure Storage Queue PopReceipt azurestoragequeuepopreceipt shortText Azure Storage Queue No 0
Azure Storage Queue Queue Name azurestoragequeuequeuename shortText Azure Storage Queue No 0
Azure Storage Queue QueueCount azurestoragequeuequeuecount number Azure Storage Queue No 0
AzureDevOps Project ID azuredevopsprojectid shortText AzureDevOps No 0
AzureDevOps Project Name azuredevopsprojectname shortText AzureDevOps No 0
AzureDevOps Pull Request ID azuredevopspullrequestid shortText AzureDevOps No 0
AzureDevOps Repository Name azuredevopsrepositoryname shortText AzureDevOps No 0
AzureDevOps RepositoryID azuredevopsrepositoryid shortText AzureDevOps No 0
AzureDevOps Status azuredevopsstatus singleSelect AzureDevOps No 0
BPA Failed Checks - Anti-Spyware bpafailedchecksantispyware markdown MITRE ATT&CK - Courses of Action No 0
BPA Failed Checks - Anti-Virus bpafailedchecksantivirus markdown MITRE ATT&CK - Courses of Action No 0
BPA Failed Checks - File Blocking bpafailedchecksfileblocking markdown MITRE ATT&CK - Courses of Action No 0
BPA Failed Checks - URL Filtering bpafailedchecksurlfiltering markdown MITRE ATT&CK - Courses of Action No 0
BPA Failed Checks - Vulnerability Protection bpafailedchecksvulnerabilityprotection markdown MITRE ATT&CK - Courses of Action No 0
BPA Failed Checks - WildFire bpafailedcheckswildfire markdown MITRE ATT&CK - Courses of Action No 0
BPA Passed Checks - Anti-Spyware bpapassedchecksantispyware markdown MITRE ATT&CK - Courses of Action No 0
BPA Passed Checks - Anti-Virus bpapassedchecksantivirus markdown MITRE ATT&CK - Courses of Action No 0
BPA Passed Checks - File Blocking bpapassedchecksfileblocking markdown MITRE ATT&CK - Courses of Action No 0
BPA Passed Checks - URL Filtering bpapassedchecksurlfiltering markdown MITRE ATT&CK - Courses of Action No 0
BPA Passed Checks - Vulnerability Protection bpapassedchecksvulnerabilityprotection markdown MITRE ATT&CK - Courses of Action No 0
BPA Passed Checks - WildFire bpapassedcheckswildfire markdown MITRE ATT&CK - Courses of Action No 0
Behaviour Objective behaviourobjective shortText CrowdStrike Falcon No 0
Behaviour Scenario behaviourscenario shortText CrowdStrike Falcon No 0
Behaviour Tactic behaviourtactic shortText CrowdStrike Falcon No 0
Best Practices Description bestpracticesdescription markdown MITRE ATT&CK - Courses of Action No 0
Birthday birthday shortText Common Types No 0
BitSight Affects Rating bitsightaffectsrating shortText Bitsight No 0
BitSight Assets bitsightassets longText Bitsight No 0
BitSight Comments bitsightcomments shortText Bitsight No 0
BitSight Evidence Key bitsightevidencekey shortText Bitsight No 0
BitSight Related Findings bitsightrelatedfindings shortText Bitsight No 0
BitSight Remaining Decay bitsightremainingdecay shortText Bitsight No 0
BitSight Risk Category bitsightriskcategory shortText Bitsight No 0
BitSight Risk Vector bitsightriskvector shortText Bitsight No 0
BitSight Risk Vector Label bitsightriskvectorlabel shortText Bitsight No 0
BitSight Rolledup Observation Id bitsightrolledupobservationid shortText Bitsight No 0
BitSight Severity Category bitsightseveritycategory shortText Bitsight No 0
BitSight Tags bitsighttags tagsSelect Bitsight No 0
BitSight Temporary Id bitsighttemporaryid shortText Bitsight No 0
Bitsight Affects Rating Reason bitsightaffectsratingreason shortText Bitsight No 0
Bitsight Remediation Status bitsightremediationstatus shortText Bitsight No 0
Block Indicators Status blockindicatorsstatus shortText Common Types No 0
Blocked Action blockedaction shortText Common Types No 0
Bmc Remedyforce Attachment(s) bmcremedyforceattachments markdown Bmc Helix Remedyforce No 0
Bmc Remedyforce Broadcast bmcremedyforcebroadcast shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Category bmcremedyforcecategory shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Client Account bmcremedyforceclientaccount shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Client Name bmcremedyforceclientname shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Closed Date bmcremedyforcecloseddate date Bmc Helix Remedyforce No 0
Bmc Remedyforce Configuration Item / Asset bmcremedyforceconfigurationitemasset shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Created Date bmcremedyforcecreateddate date Bmc Helix Remedyforce No 0
Bmc Remedyforce Description bmcremedyforcedescription longText Bmc Helix Remedyforce No 0
Bmc Remedyforce Due Date bmcremedyforceduedate date Bmc Helix Remedyforce No 0
Bmc Remedyforce ID bmcremedyforceid shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Impact bmcremedyforceimpact shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Last Modified Date bmcremedyforcelastmodifieddate date Bmc Helix Remedyforce No 0
Bmc Remedyforce Note(s) bmcremedyforcenotes markdown Bmc Helix Remedyforce No 0
Bmc Remedyforce Opened Date bmcremedyforceopeneddate date Bmc Helix Remedyforce No 0
Bmc Remedyforce Outage End bmcremedyforceoutageend date Bmc Helix Remedyforce No 0
Bmc Remedyforce Outage Start bmcremedyforceoutagestart date Bmc Helix Remedyforce No 0
Bmc Remedyforce Queue bmcremedyforcequeue shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Request Definition bmcremedyforcerequestdefinition shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Resolution bmcremedyforceresolution longText Bmc Helix Remedyforce No 0
Bmc Remedyforce Responded Date bmcremedyforcerespondeddate date Bmc Helix Remedyforce No 0
Bmc Remedyforce Service bmcremedyforceservice shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Service Offering bmcremedyforceserviceoffering shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Service Request bmcremedyforceservicerequest markdown Bmc Helix Remedyforce No 0
Bmc Remedyforce Staff bmcremedyforcestaff shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Status bmcremedyforcestatus shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Template bmcremedyforcetemplate shortText Bmc Helix Remedyforce No 0
Bmc Remedyforce Urgency bmcremedyforceurgency shortText Bmc Helix Remedyforce No 0
BmcITSM Assignee bmcassignee grid BMC Helix ITSM No 0
BmcITSM Contact Sensitivity bmcitsmcontactsensitivity singleSelect BMC Helix ITSM No 0
BmcITSM Customer bmccustomer grid BMC Helix ITSM No 0
BmcITSM Display ID bmcdisplayid shortText BMC Helix ITSM No 0
BmcITSM Impact bmcitsmimpact singleSelect BMC Helix ITSM No 0
BmcITSM Reason For Change bmcitsmreasonforchange shortText BMC Helix ITSM No 0
BmcITSM Request ID bmcrequestid shortText BMC Helix ITSM No 0
BmcITSM Requester bmcrequester grid BMC Helix ITSM No 0
BmcITSM Risk Level bmcitsmrisklevel singleSelect BMC Helix ITSM No 0
BmcITSM Status Reason bmcitsmstatusreason singleSelect BMC Helix ITSM No 0
BmcITSM Sub-Type bmcsubtype shortText BMC Helix ITSM No 0
BmcITSM Submitter bmcsubmitter shortText BMC Helix ITSM No 0
BmcITSM VIP Flag bmcitsmvipflag singleSelect BMC Helix ITSM No 0
Box Source Created By ID boxsourcecreatedbyid shortText Box No 0
Box Source Created By Name boxsourcecreatedbyname shortText Box No 0
Box Source Owner ID boxsourceownerid shortText Box No 0
Box Source Owner Name boxsourceownername shortText Box No 0
Box Source Parent ID boxsourceparentid shortText Box No 0
Box Source Parent Name boxsourceparentname shortText Box No 0
Branch Name branchname shortText XSOAR CI/CD No 0
Breach Confirmation breachconfirmation singleSelect Common Scripts No 0
Bugtraq bugtraq shortText Common Types No 0
CAF A Achievement cafaachievement singleSelect NCSC Cyber Asssessment Framework No 0
CAF A Answers cafaanswers longText NCSC Cyber Asssessment Framework No 0
CAF A Details cafadetails markdown NCSC Cyber Asssessment Framework No 0
CAF A Email cafaemail shortText NCSC Cyber Asssessment Framework No 0
CAF A Questions cafaquestions longText NCSC Cyber Asssessment Framework No 0
CAF A Result cafaresult markdown NCSC Cyber Asssessment Framework No 0
CAF A Result Raw cafaresultraw shortText NCSC Cyber Asssessment Framework No 0
CAF A Status cafastatus singleSelect NCSC Cyber Asssessment Framework No 0
CAF B Achievement cafbachievement singleSelect NCSC Cyber Asssessment Framework No 0
CAF B Answers cafbanswers longText NCSC Cyber Asssessment Framework No 0
CAF B Details cafbdetails markdown NCSC Cyber Asssessment Framework No 0
CAF B Email cafbemail shortText NCSC Cyber Asssessment Framework No 0
CAF B Questions cafbquestions longText NCSC Cyber Asssessment Framework No 0
CAF B Result cafbresult markdown NCSC Cyber Asssessment Framework No 0
CAF B Result Raw cafbresultraw shortText NCSC Cyber Asssessment Framework No 0
CAF B Status cafbstatus singleSelect NCSC Cyber Asssessment Framework No 0
CAF C Achievement cafcachievement singleSelect NCSC Cyber Asssessment Framework No 0
CAF C Answers cafcanswers longText NCSC Cyber Asssessment Framework No 0
CAF C Details cafcdetails markdown NCSC Cyber Asssessment Framework No 0
CAF C Email cafcemail shortText NCSC Cyber Asssessment Framework No 0
CAF C Questions cafcquestions longText NCSC Cyber Asssessment Framework No 0
CAF C Result cafcresult markdown NCSC Cyber Asssessment Framework No 0
CAF C Result Raw cafcresultraw shortText NCSC Cyber Asssessment Framework No 0
CAF C Status cafcstatus singleSelect NCSC Cyber Asssessment Framework No 0
CAF D Achievement cafdachievement singleSelect NCSC Cyber Asssessment Framework No 0
CAF D Answers cafdanswers longText NCSC Cyber Asssessment Framework No 0
CAF D Details cafddetails markdown NCSC Cyber Asssessment Framework No 0
CAF D Email cafdemail shortText NCSC Cyber Asssessment Framework No 0
CAF D Questions cafdquestions longText NCSC Cyber Asssessment Framework No 0
CAF D Result cafdresult markdown NCSC Cyber Asssessment Framework No 0
CAF D Result Raw cafdresultraw shortText NCSC Cyber Asssessment Framework No 0
CAF D Status cafdstatus singleSelect NCSC Cyber Asssessment Framework No 0
CAF Overall Result cafoverallresult singleSelect NCSC Cyber Asssessment Framework No 0
CAF Regulator Email cafregulatoremail shortText NCSC Cyber Asssessment Framework No 0
CGO CMD cgocmd multiSelect Core Alert Fields No 0
CGO MD5 cgomd5 multiSelect Core Alert Fields No 0
CGO SHA256 cgosha256 multiSelect Core Alert Fields No 0
CGO name cgoname multiSelect Core Alert Fields No 0
CGO path cgopath multiSelect Core Alert Fields No 0
CGO signature cgosignature multiSelect Core Alert Fields No 0
CGO signer cgosigner multiSelect Core Alert Fields No 0
CI/CD Branch cicdbranch shortText XSOAR CI/CD No 0
CI/CD Keep Placeholders In Files cicdkeepplaceholdersinfiles boolean XSOAR CI/CD No 0
CI/CD Pack Name cicdpackname shortText XSOAR CI/CD No 0
CI/CD Pull Request Attachment cicdpullrequestattachment attachments XSOAR CI/CD No 0
CI/CD Pull Request Branch cicdpullrequestbranch singleSelect XSOAR CI/CD No 0
CI/CD Pull Request Comment cicdpullrequestcomment longText XSOAR CI/CD No 0
CI/CD Pull Request Link cicdpullrequestlink url XSOAR CI/CD No 0
CI/CD Pull Request Review cicdpullrequestreview longText XSOAR CI/CD No 0
CI/CD Pull Request Reviewer cicdreviewer shortText XSOAR CI/CD No 0
CI/CD Pull Request Title cicdpullrequesttitle shortText XSOAR CI/CD No 0
CI/CD S3 Bucket Name cicds3bucketname shortText XSOAR CI/CD No 0
CICD Azure DevOps target ref cicdazuredevopstargetref shortText XSOAR CI/CD No 0
CID cid multiSelect Core Alert Fields No 0
CMD cmd multiSelect Common Types No 0
CMD line cmdline multiSelect Common Types No 0
CRYPTOSIM Category ID cryptosimcategoryid number Cryptosim No 0
CRYPTOSIM Correlation ID cryptosimcorrelationid number Cryptosim No 0
CRYPTOSIM Event Start Date cryptosimeventstartdate shortText Cryptosim No 0
CRYPTOSIM Log Date cryptosimlogdate shortText Cryptosim No 0
CRYPTOSIM Log Type cryptosimlogtype shortText Cryptosim No 0
CRYPTOSIM Plugin ID cryptosimpluginid number Cryptosim No 0
CTF01 Hidden ctf01 timer Capture The Flag - 01 No 0
CTF02 ctf02 timer Capture The Flag - 02 No 0
CTIX Custom Attributes ctixcustomattributes longText Cyware Intel Exchange No 0
CTIX Custom Scores ctixcustomscores longText Cyware Intel Exchange No 0
CTIX Relations ctixrelations longText Cyware Intel Exchange No 0
CTM360 CyberBlindspot BC Breach Source ctm360cyberblindspotbcbreachsource shortText CTM360 No 0
CTM360 CyberBlindspot BC Domain ctm360cyberblindspotbcdomain shortText CTM360 No 0
CTM360 CyberBlindspot BC Email ctm360cyberblindspotbcemail shortText CTM360 No 0
CTM360 CyberBlindspot BC Executive Name ctm360cyberblindspotbcexecutivename shortText CTM360 No 0
CTM360 CyberBlindspot BC Password ctm360cyberblindspotbcpassword shortText CTM360 No 0
CTM360 CyberBlindspot BC Username ctm360cyberblindspotbcusername shortText CTM360 No 0
CTM360 CyberBlindspot Brand ctm360cyberblindspotbrand shortText CTM360 No 0
CTM360 CyberBlindspot CC CVV ctm360cyberblindspotcccvv shortText CTM360 No 0
CTM360 CyberBlindspot CC Card Number ctm360cyberblindspotcccardnumber shortText CTM360 No 0
CTM360 CyberBlindspot CC Expiry Month ctm360cyberblindspotccexpirymonth number CTM360 No 0
CTM360 CyberBlindspot CC Expiry Year ctm360cyberblindspotccexpiryyear number CTM360 No 0
CTM360 CyberBlindspot Class ctm360cyberblindspotclass shortText CTM360 No 0
CTM360 CyberBlindspot Confirmation Time ctm360cyberblindspotconfirmationtime shortText CTM360 No 0
CTM360 CyberBlindspot Course of Action ctm360cyberblindspotcourseofaction shortText CTM360 No 0
CTM360 CyberBlindspot First Seen ctm360cyberblindspotfirstseen shortText CTM360 No 0
CTM360 CyberBlindspot Incident Type ctm360cyberblindspottype shortText CTM360 No 0
CTM360 CyberBlindspot Last Seen ctm360cyberblindspotlastseen shortText CTM360 No 0
CTM360 CyberBlindspot ML Computer Name ctm360cyberblindspotmlcomputername shortText CTM360 No 0
CTM360 CyberBlindspot ML Date Compromised ctm360cyberblindspotmldatecompromised date CTM360 No 0
CTM360 CyberBlindspot ML Domain ctm360cyberblindspotmldomain shortText CTM360 No 0
CTM360 CyberBlindspot ML Hostname ctm360cyberblindspotmlhostname shortText CTM360 No 0
CTM360 CyberBlindspot ML Malware Path ctm360cyberblindspotmlmalwarepath shortText CTM360 No 0
CTM360 CyberBlindspot ML Masked Password ctm360cyberblindspotmlmaskedpassword shortText CTM360 No 0
CTM360 CyberBlindspot ML Operating System ctm360cyberblindspotmloperatingsystem shortText CTM360 No 0
CTM360 CyberBlindspot ML Password ctm360cyberblindspotmlpassword shortText CTM360 No 0
CTM360 CyberBlindspot ML Software ctm360cyberblindspotmlsoftware shortText CTM360 No 0
CTM360 CyberBlindspot ML Source URI ctm360cyberblindspotmlsourceuri shortText CTM360 No 0
CTM360 CyberBlindspot ML Sources ctm360cyberblindspotmlsources shortText CTM360 No 0
CTM360 CyberBlindspot ML Stealer Family ctm360cyberblindspotmlstealerfamily shortText CTM360 No 0
CTM360 CyberBlindspot ML URL Path ctm360cyberblindspotmlurlpath shortText CTM360 No 0
CTM360 CyberBlindspot ML User ctm360cyberblindspotmluser shortText CTM360 No 0
CTM360 CyberBlindspot ML User Domain ctm360cyberblindspotmluserdomain shortText CTM360 No 0
CTM360 CyberBlindspot ML Website ctm360cyberblindspotmlwebsite shortText CTM360 No 0
CTM360 CyberBlindspot Module ctm360cyberblindspotmodule shortText CTM360 No 0
CTM360 CyberBlindspot Remarks ctm360cyberblindspotremarks shortText CTM360 No 0
CTM360 CyberBlindspot Risks ctm360cyberblindspotrisks shortText CTM360 No 0
CTM360 CyberBlindspot Screenshots ctm360cyberblindspotscreenshots shortText CTM360 No 0
CTM360 CyberBlindspot Severity ctm360cyberblindspotseverity shortText CTM360 No 0
CTM360 CyberBlindspot Status ctm360cyberblindspotstatus shortText CTM360 No 0
CTM360 CyberBlindspot Subject ctm360cyberblindspotsubject shortText CTM360 No 0
CTM360 CyberBlindspot Ticket ID ctm360cyberblindspotticketid shortText CTM360 No 0
CTM360 CyberBlindspot Timestamp ctm360cyberblindspottimestamp shortText CTM360 No 0
CTM360 HackerView Asset Type ctm360hackerviewassettype shortText CTM360 No 0
CTM360 HackerView Potential Attack Types ctm360hackerviewpotentialattack multiSelect CTM360 No 0
CTM360 HackerView Potential Impact ctm360hackerviewpotentialimpact multiSelect CTM360 No 0
CTM360 HackerView Technologies ctm360hackerviewtechnologies multiSelect CTM360 No 0
CVE cve shortText Common Types No 0
CVE Description cvedescription shortText Use Case Builder No 0
CVE ID cveid shortText Common Types No 0
CVE List cvelist shortText PAN-OS by Palo Alto Networks No 0
CVE Published cvepublished shortText Common Types No 0
CVE Reference Links cvereferencelinks url Use Case Builder No 0
CVE Score cvescore shortText Use Case Builder No 0
CVSS cvss shortText Common Types No 0
CVSS Availability Requirement cvssavailabilityrequirement multiSelect Common Types No 0
CVSS Collateral Damage Potential cvsscollateraldamagepotential multiSelect Common Types No 0
CVSS Confidentiality Requirement cvssconfidentialityrequirement multiSelect Common Types No 0
CVSS Integrity Requirement cvssintegrityrequirement multiSelect Common Types No 0
Caller caller shortText Common Types No 0
Campaign Close Notes campaignclosenotes longText Phishing Campaign No 0
Campaign Email Body campaignemailbody longText Phishing Campaign No 0
Campaign Email Sender Instance campaignemailsenderinstance singleSelect Phishing Campaign No 0
Campaign Email Subject campaignemailsubject shortText Phishing Campaign No 0
Campaign Email To campaignemailto shortText Phishing Campaign No 0
Campaign Mutual Indicators campaignmutualindicators markdown Phishing Campaign No 0
Campaign Name campaignname markdown Common Types No 0
Campaign to hunt campaigntohunt shortText Proactive Threat Hunting No 0
Carbon Black EDR IOC Value carbonblackedriocvalue shortText Carbon Black Enterprise Response No 0
Carbon Black EDR Segment ID carbonblackedrsegmentid shortText Carbon Black Enterprise Response No 0
Carbon Black EDR Unique ID carbonblackedruniqueid shortText Carbon Black Common Fields No 0
Carbon Black EDR Watchlist Id carbonblackedrwatchlistid shortText Carbon Black Enterprise Response No 0
Carbon Black EDR Watchlist Name carbonblackedrwatchlistname shortText Carbon Black Enterprise Response No 0
Carbon Black ES Alert Severity carbonblackesalertseverity shortText Carbon Black Endpoint Standard No 0
Carbon Black ES First Event Time carbonblackesfirsteventtime date Carbon Black Endpoint Standard No 0
Carbon Black ES IOC Hit carbonblackesiochit shortText Carbon Black Endpoint Standard No 0
Carbon Black ES IOC Id carbonblackesiocid shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Last Event Time carbonblackeslasteventtime date Carbon Black Endpoint Standard No 0
Carbon Black ES Process Id carbonblackesprocessid shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Process Name carbonblackesprocessname shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Report ID carbonblackesreportid shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Report Name carbonblackesreportname shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Reputation carbonblackesreputation shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Target Value carbonblackestargetvalue shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Threat Category carbonblackesthreatcategory shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Threat Id carbonblackesthreatid shortText Carbon Black Endpoint Standard No 0
Carbon Black ES Vector carbonblackesvector shortText Carbon Black Endpoint Standard No 0
Categories categories multiSelect Common Types No 0
Category Count categorycount number Common Types No 0
Category Name categoryname shortText Core Alert Fields No 0
CertStream Certificate Index certstreamcertificateindex number CertStream No 0
CertStream Certificate Source certstreamcertificatesource shortText CertStream No 0
CertStream Domain Registrar Abuse Email certstreamdomainregistrarabuseemail shortText CertStream No 0
CertStream Fingerprint certstreamfingerprint shortText CertStream No 0
CertStream Levenshtein distance certstreamlevenshteindistance number CertStream No 0
CertStream User asset certstreamuserasset shortText CertStream No 0
Changed changed shortText Common Types No 0
Cheat Sheet cheatsheet markdown Proactive Threat Hunting No 0
Check ID checkid shortText Nutanix Hypervisor No 0
CheckPointHEC Campaign Task checkpointheccampaigntask shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Customer checkpointheccustomer shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Email Info checkpointhecemailinfo markdown Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Email Sender checkpointhecemailsender shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Email Subject checkpointhecemailsubject shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Email Task checkpointhecemailtask shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Entity checkpointhecentity shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Farm checkpointhecfarm shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Parent checkpointhecparent shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Request Child checkpointhecrequestchild boolean Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Request Comment checkpointhecrequestcomment shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Request Time checkpointhecrequesttime shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Saas checkpointhecsaas shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Scan Info checkpointhecscaninfo longText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointHEC Type checkpointhectype shortText Check Point Harmony Email and Collaboration (HEC) No 0
CheckPointNDR Application Names appiname multiSelect Check Point Infinity NDR No 0
CheckPointNDR Received Bytes receivedbytes number Check Point Infinity NDR No 0
CheckPointNDR Sent Bytes sentbytes number Check Point Infinity NDR No 0
Child Process childprocess multiSelect Common Types No 0
Choke points chokepoints shortText XM Cyber No 0
Choose SDO To Hunt for choosesdotohuntfor shortText Proactive Threat Hunting No 0
Chronicle Alert Count chroniclealertcount shortText Google SecOps No 0
Chronicle Alert Name chroniclealertname shortText Google SecOps No 0
Chronicle Auto Block Entities chronicleautoblockentities singleSelect Google SecOps No 0
Chronicle Curated Events chroniclecuratedevents grid Google SecOps No 0
Chronicle DBot Score chronicledbotscore number Google SecOps No 0
Chronicle Detection Created Time chronicledetectioncreatedtime date Google SecOps No 0
Chronicle Detection ID chronicledetectionid shortText Google SecOps No 0
Chronicle Detection State chronicledetectionstate singleSelect Google SecOps No 0
Chronicle Detection Time chronicledetectiontime date Google SecOps No 0
Chronicle Detection Type chronicledetectiontype shortText Google SecOps No 0
Chronicle Detection Window End Time chronicledetectionwindowendtime date Google SecOps No 0
Chronicle Detection Window Start Time chronicledetectionwindowstarttime date Google SecOps No 0
Chronicle Domain Name chronicledomainname shortText Google SecOps No 0
Chronicle Events chronicleevents grid Google SecOps No 0
Chronicle First Seen chroniclefirstseen date Google SecOps No 0
Chronicle IOC Ingest Time chronicleiocingesttime date Google SecOps No 0
Chronicle Last Seen chroniclelastseen date Google SecOps No 0
Chronicle Rule ID chronicleruleid shortText Google SecOps No 0
Chronicle Rule Name chroniclerulename shortText Google SecOps No 0
Chronicle Rule Type chronicleruletype singleSelect Google SecOps No 0
Chronicle Rule Version chronicleruleversion shortText Google SecOps No 0
Chronicle Skip Entity Isolation chronicleskipentityisolation singleSelect Google SecOps No 0
Chronicle Source Product chroniclesourceproduct shortText Google SecOps No 0
Chronicle User chronicleuser shortText Google SecOps No 0
ChronicleAsset Support Contact chronicleassetsupportcontact shortText Google SecOps No 0
CiscoESA Attachments ciscoesaattachments shortText Cisco Email Security Appliance (IronPort) No 0
CiscoSMA Attachments ciscosmaattachments shortText CiscoSMA No 0
City city shortText Common Types No 0
Claroty Alert Resolved clarotyalertresolved boolean Claroty No 0
Claroty Alert Type clarotyalerttype shortText Claroty No 0
Claroty Category clarotycategory shortText Claroty No 0
Claroty Network ID clarotynetworkid shortText Claroty No 0
Claroty Related Assets clarotyrelatedassets grid Claroty No 0
Claroty Resource ID clarotyresourceid shortText Claroty No 0
Claroty Site ID clarotysiteid shortText Claroty No 0
Claroty xDome Alert Assignees clarotyxdomealertassignees multiSelect Claroty xDome No 0
Claroty xDome Alert Class clarotyxdomealertclass shortText Claroty xDome No 0
Claroty xDome Alert Description clarotyxdomealertdescription shortText Claroty xDome No 0
Claroty xDome Alert Labels clarotyxdomealertlabels multiSelect Claroty xDome No 0
Claroty xDome Alert Type clarotyxdomealerttype shortText Claroty xDome No 0
Claroty xDome Device Assignees clarotyxdomedeviceassignees multiSelect Claroty xDome No 0
Claroty xDome Device Category clarotyxdomedevicecategory shortText Claroty xDome No 0
Claroty xDome Device Effective Likelihood Subscore clarotyxdomedeviceeffectivelikelihoodsubscore singleSelect Claroty xDome No 0
Claroty xDome Device Effective Likelihood Subscore Points clarotyxdomedeviceeffectivelikelihoodsubscorepoints number Claroty xDome No 0
Claroty xDome Device First Seen clarotyxdomedevicefirstseen multiSelect Claroty xDome No 0
Claroty xDome Device IP clarotyxdomedeviceip multiSelect Claroty xDome No 0
Claroty xDome Device Impact Subscore clarotyxdomedeviceimpactsubscore singleSelect Claroty xDome No 0
Claroty xDome Device Impact Subscore Points clarotyxdomedeviceimpactsubscorepoints number Claroty xDome No 0
Claroty xDome Device Insecure Protocols clarotyxdomedeviceinsecureprotocols singleSelect Claroty xDome No 0
Claroty xDome Device Insecure Protocols Points clarotyxdomedeviceinsecureprotocolspoints number Claroty xDome No 0
Claroty xDome Device Internet Communication clarotyxdomedeviceinternetcommunication shortText Claroty xDome No 0
Claroty xDome Device Known Vulnerabilities clarotyxdomedeviceknownvulnerabilities singleSelect Claroty xDome No 0
Claroty xDome Device Known Vulnerabilities Points clarotyxdomedeviceknownvulnerabilitiespoints number Claroty xDome No 0
Claroty xDome Device Labels clarotyxdomedevicelabels multiSelect Claroty xDome No 0
Claroty xDome Device Last Seen clarotyxdomedevicelastseen multiSelect Claroty xDome No 0
Claroty xDome Device Likelihood Subscore clarotyxdomedevicelikelihoodsubscore singleSelect Claroty xDome No 0
Claroty xDome Device Likelihood Subscore Points clarotyxdomedevicelikelihoodsubscorepoints number Claroty xDome No 0
Claroty xDome Device MAC clarotyxdomedevicemac multiSelect Claroty xDome No 0
Claroty xDome Device Manufacturer clarotyxdomedevicemanufacturer shortText Claroty xDome No 0
Claroty xDome Device Network clarotyxdomedevicenetwork multiSelect Claroty xDome No 0
Claroty xDome Device Purdue Level clarotyxdomedevicepurduelevel shortText Claroty xDome No 0
Claroty xDome Device Risk Score clarotyxdomedeviceriskscore singleSelect Claroty xDome No 0
Claroty xDome Device Risk Score Points clarotyxdomedeviceriskscorepoints number Claroty xDome No 0
Claroty xDome Device Site Name clarotyxdomedevicesitename shortText Claroty xDome No 0
Claroty xDome Device Subcategory clarotyxdomedevicesubcategory shortText Claroty xDome No 0
Claroty xDome Device Type clarotyxdomedevicetype shortText Claroty xDome No 0
Claroty xDome Device-Alert Detected Time clarotyxdomedevicealertdetectedtime date Claroty xDome No 0
Claroty xDome Device-Alert Status clarotyxdomedevicealertstatus singleSelect Claroty xDome No 0
Claroty xDome Device-Alert Updated Time clarotyxdomedevicealertupdatedtime date Claroty xDome No 0
Claroty xDome Mitre Technique Enterprise IDs clarotyxdomemitretechniqueenterpriseids multiSelect Claroty xDome No 0
Claroty xDome Mitre Technique Enterprise Names clarotyxdomemitretechniqueenterprisenames multiSelect Claroty xDome No 0
Claroty xDome Mitre Technique ICS IDs clarotyxdomemitretechniqueicsids multiSelect Claroty xDome No 0
Claroty xDome Mitre Technique ICS Names clarotyxdomemitretechniqueicsnames multiSelect Claroty xDome No 0
Classification classification shortText Common Types No 0
Classifications classifications shortText Nutanix Hypervisor No 0
Clicked URLs clickedurls grid Phishing No 0
Close Time closetime shortText Common Types No 0
Closing Reason closingreason shortText Common Types No 0
Closing User closinguser shortText Common Types No 0
Cloud Account ID cloudaccountid multiSelect Common Types No 0
Cloud Identity Sub Type cloudidentitysubtype multiSelect Core Alert Fields No 0
Cloud Identity Type cloudidentitytype multiSelect Core Alert Fields No 0
Cloud Instance ID cloudinstanceid multiSelect Common Types No 0
Cloud Operation Type cloudoperationtype multiSelect Common Types No 0
Cloud Operation Type cloudoperationtype multiSelect Core Alert Fields No 0
Cloud Project cloudproject multiSelect Core Alert Fields No 0
Cloud Provider cloudprovider multiSelect Core Alert Fields No 0
Cloud Referenced Resource cloudreferencedresource multiSelect Core Alert Fields No 0
Cloud Region List cloudregionlist multiSelect Common Types No 0
Cloud Resource List cloudresourcelist multiSelect Common Types No 0
Cloud Resource Sub-type cloudresourcesubtype multiSelect Core Alert Fields No 0
Cloud Resource Type cloudresourcetype multiSelect Core Alert Fields No 0
Cloud Service cloudservice number Common Types No 0
Cluster Name clustername multiSelect Core Alert Fields No 0
Cluster UUID clusteruuid shortText Nutanix Hypervisor No 0
Code42 Alert ID code42alertid shortText Code42 No 0
Code42 Alert Risk Severity Summary code42alertriskseveritysummary shortText Code42 No 0
Code42 Alert Type code42alerttype shortText Code42 No 0
Code42 Alert URL code42alerturl url Code42 No 0
Code42 File Events code42fileevents grid Code42 No 0
Code42 File Events Version code42fileeventsversion shortText Code42 No 0
Code42 SecurityAlert Description code42alertdescription shortText Code42 No 0
Code42 SecurityAlert Name code42alertname shortText Code42 No 0
Code42 SecurityAlert State code42alertstate shortText Code42 No 0
Code42 SecurityAlert Timestamp code42alerttimestamp date Code42 No 0
Code42 Severity code42severity shortText Code42 No 0
Code42 Username code42username shortText Code42 No 0
Cofense Triage Report Attachment Information cofensetriagereportattachmentinformation grid Cofense Triage No 0
Cofense Triage Report Categorization Tags cofensetriagereportcategorizationtags shortText Cofense Triage No 0
Cofense Triage Report Category ID cofensetriagereportcategoryid shortText Cofense Triage No 0
Cofense Triage Report Created At cofensetriagereportcreatedat date Cofense Triage No 0
Cofense Triage Report From Address cofensetriagereportfromaddress shortText Cofense Triage No 0
Cofense Triage Report ID cofensetriagereportid shortText Cofense Triage No 0
Cofense Triage Report Location cofensetriagereportlocation shortText Cofense Triage No 0
Cofense Triage Report MD5 cofensetriagereportmd5 shortText Cofense Triage No 0
Cofense Triage Report Match Priority cofensetriagereportmatchpriority number Cofense Triage No 0
Cofense Triage Report Processed At cofensetriagereportprocessedat date Cofense Triage No 0
Cofense Triage Report Received At cofensetriagereportreceivedat date Cofense Triage No 0
Cofense Triage Report Reported At cofensetriagereportreportedat date Cofense Triage No 0
Cofense Triage Report Risk Score cofensetriagereportriskscore number Cofense Triage No 0
Cofense Triage Report SHA256 cofensetriagereportsha256 shortText Cofense Triage No 0
Cofense Triage Report Subject cofensetriagereportsubject shortText Cofense Triage No 0
Cofense Triage Report Tags cofensetriagereporttags shortText Cofense Triage No 0
Cofense Triage Report Updated At cofensetriagereportupdatedat date Cofense Triage No 0
Cohesity Helios Alert Cause cohesityheliosalertcause longText Cohesity Helios No 0
Cohesity Helios Alert Description cohesityheliosalertdescription longText Cohesity Helios No 0
Cohesity Helios Alert Id cohesityheliosalertid shortText Cohesity Helios No 0
Cohesity Helios Anomalous Object Name cohesityheliosanomalousobjectname shortText Cohesity Helios No 0
Cohesity Helios Anomaly Strength cohesityheliosanomalystrength number Cohesity Helios No 0
Cohesity Helios Cluster Id cohesityheliosclusterid number Cohesity Helios No 0
Cohesity Helios Cluster Name cohesityheliosclustername shortText Cohesity Helios No 0
Cohesity Helios Object Environment cohesityheliosobjectenvironment shortText Cohesity Helios No 0
Cohesity Helios Object Id cohesityheliosobjectid shortText Cohesity Helios No 0
Collection Remediation Products collectionremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Command Line commandline shortText Common Types No 0
Command Line Verdict commandlineverdict shortText Common Types No 0
Command and Control Remediation Products commandandcontrolremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Comment comment shortText Common Types No 0
Commvault Affected Files Count commvaultaffectedfilescount shortText Commvault Cloud No 0
Commvault Created Files Count commvaultcreatedfilescount shortText Commvault Cloud No 0
Commvault Deleted Files Count commvaultdeletedfilescount shortText Commvault Cloud No 0
Commvault Event Time commvaulteventtime shortText Commvault Cloud No 0
Commvault Files List commvaultfileslist grid Commvault Cloud No 0
Commvault Job Id commvaultjobid number Commvault Cloud No 0
Commvault Modified Files Count commvaultmodifiedfilescount shortText Commvault Cloud No 0
Commvault Originating Client commvaultoriginatingclient shortText Commvault Cloud No 0
Commvault Originating Program commvaultoriginatingprogram shortText Commvault Cloud No 0
Commvault Renamed Files Count commvaultrenamedfilescount shortText Commvault Cloud No 0
Commvault Scanned Folder List commvaultscannedfolderlist multiSelect Commvault Cloud No 0
Company Address companyaddress shortText Common Scripts No 0
Company City companycity shortText Common Scripts No 0
Company Country companycountry shortText Common Scripts No 0
Company Name companyname shortText Common Scripts No 0
Company Postal Code companypostalcode shortText Common Scripts No 0
Company Property Status companypropertystatus singleSelect Employee Offboarding No 0
Company has Insurance for the Breach companyhasinsuranceforthebreach shortText Common Scripts No 0
Completed Task Count completedtaskcount shortText Rapid Breach Response No 0
Compliance Notes compliancenotes multiSelect Common Types No 0
Compromising Techniques compromisingtechniques grid XM Cyber No 0
Configuration File Path configfilepath shortText XSOAR CI/CD No 0
Configuration File Source configurationfilesource singleSelect XSOAR CI/CD No 0
Consumer Reporting Agencies Notification consumerreportingagenciesnotification singleSelect Common Scripts No 0
Contact Address contactaddress shortText Common Scripts No 0
Contact Email address contactemailaddress shortText Common Scripts No 0
Contact Name contactname shortText Common Scripts No 0
Contact Telephone number contacttelephonenumber shortText Common Scripts No 0
Container ID containerid multiSelect Core Alert Fields No 0
Containment SLA containmentsla timer Common Types No 0
Contains Featured Host containsfeaturedhost multiSelect Core Alert Fields No 0
Contains Featured IP Address containsfeaturedipaddress multiSelect Core Alert Fields No 0
Contains Featured User containsfeatureduser multiSelect Core Alert Fields No 0
Content Notification Email contentnotificationemail shortText XSOAR Content Update Notifications No 0
Content Notification Slack Channel contentnotificationslackchannel shortText XSOAR Content Update Notifications No 0
Content Notification Slack Channel ID contentnotificationslackchannelid shortText XSOAR Content Update Notifications No 0
Content Notification Slack Username contentnotificationslackusername shortText XSOAR Content Update Notifications No 0
Content Pack Selection contentpackselection longText XSOAR Content Update Notifications No 0
Content Testing Commit History contenttestingcommithistory markdown Content Testing No 0
Content Testing Content Automations contenttestingcontentautomations markdown Content Testing No 0
Content Testing Content Details contenttestingcontentdetails markdown Content Testing No 0
Content Testing Content Impacts contenttestingcontentimpacts markdown Content Testing No 0
Content Testing Coverage contenttestingcoverage markdown Content Testing No 0
Content Testing Dependencies contenttestingdependencies markdown Content Testing No 0
Content Testing PBA Info contenttestingpbainfo markdown Content Testing No 0
Content Testing Unit Test Help contenttestingunittesthelp markdown Content Testing No 0
Content Testing Unit Test Playbooks contenttestingunittestplaybooks multiSelect Content Testing No 0
Content Testing UnitTestResults contenttestingunittestresults grid Content Testing No 0
Content Updates Auto Install contentupdatesautoinstall boolean XSOAR Content Update Notifications No 0
Content Updates Available contentupdatesavailable markdown XSOAR Content Update Notifications No 0
Coordinates coordinates shortText Impossible Traveler No 0
Cost Center costcenter shortText Common Types No 0
Cost Center Code costcentercode shortText Common Types No 0
Country country shortText Common Types No 0
Country country multiSelect Core Alert Fields No 0
Country Code countrycode shortText Common Types No 0
Country Code Number countrycodenumber shortText Common Types No 0
Country Name countryname shortText Common Types No 0
Country where business has its main establishment countrywherebusinesshasitsmainestablishment shortText Common Scripts No 0
Country where the breach took place countrywherethebreachtookplace shortText Common Scripts No 0
Created Date Failed Incidents createddatefailedincidents multiSelect Integrations & Incidents Health Check No 0
Created Time createdtime shortText Atlassian Jira No 0
Credential Access Remediation Products credentialaccessremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Credibility - Offense credibilityoffense number IBM QRadar No 0
Critical Assets criticalassets grid Common Types No 0
Critical Assets at Risk Level criticalassetsatrisklevel shortText XM Cyber No 0
Critical Assets at Risk List criticalassetsatrisklist grid XM Cyber No 0
Critical assets at risk criticalassetsatrisk number XM Cyber No 0
CrowdStrike Falcon Actor slug crowdstrikefalconactorslug shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Alleged File Type crowdstrikefalconallegedfiletype shortText CrowdStrike Falcon No 0
CrowdStrike Falcon At Accounts crowdstrikefalconataccounts multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon Behaviour Pattern Disposition Details crowdstrikefalconbehaviourpatterndispositiondetails grid CrowdStrike Falcon No 0
CrowdStrike Falcon Bios Manufacturer crowdstrikefalconbiosmanufacturer shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Bios Version crowdstrikefalconbiosversion shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Crawled Timestamp crowdstrikefalconcrawledtimestamp date CrowdStrike Falcon No 0
CrowdStrike Falcon Data Domains crowdstrikefalcondatadomains shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Detection Type crowdstrikefalcondetectiontype shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Enrichments crowdstrikefalconenrichments longText CrowdStrike Falcon No 0
CrowdStrike Falcon Firmware Build Fingerprint crowdstrikefalconfirmwarebuildfingerprint shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Firmware Build Time crowdstrikefalconfirmwarebuildtime date CrowdStrike Falcon No 0
CrowdStrike Falcon IOC CVES crowdstrikefalconioccves multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon IOC Domains crowdstrikefalconiocdomains multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon IOC Emails crowdstrikefalconiocemails multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon IOC Hashtags crowdstrikefalconiochashtags multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon IOC Types crowdstrikefalconioctypes multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon IOC Urls crowdstrikefalconiocurls multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon Item Author ID crowdstrikefalconitemauthorid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Item author crowdstrikefalconitemauthor shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Item date crowdstrikefalconitemdate shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Item id crowdstrikefalconitemid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Item site crowdstrikefalconitemsite shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Item site ID crowdstrikefalconitemsiteid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Item type crowdstrikefalconitemtype shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Lead Id crowdstrikefalconleadid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Lead Type crowdstrikefalconleadtype shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Macros CMD line crowdstrikefalconmacroscmdline shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Macros Display Name crowdstrikefalconmacrosdisplayname shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Macros IOC Description crowdstrikefalconmacrosiocdescription shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Macros IOC Source crowdstrikefalconmacrosiocsource shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Macros IOC Type crowdstrikefalconmacrosioctype shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Mitre Attack crowdstrikefalconmitreattack multiSelect CrowdStrike Falcon No 0
CrowdStrike Falcon Mobile Manufacturer crowdstrikefalconmobilemanufacturer shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Mobile Product crowdstrikefalconmobileproduct shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Mobile platform version crowdstrikefalconmobileplatformversion shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Pattern ID crowdstrikefalconpatternid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Platform Name crowdstrikefalconplatformname shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Product Type Description crowdstrikefalconproducttypedesc shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Request Parameters crowdstrikefalconrequestparameters longText CrowdStrike Falcon No 0
CrowdStrike Falcon Resource Attributes crowdstrikefalconresourceattributes longText CrowdStrike Falcon No 0
CrowdStrike Falcon Response Elements crowdstrikefalconresponseelements longText CrowdStrike Falcon No 0
CrowdStrike Falcon Role ID crowdstrikefalconroleid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Role creator UID crowdstrikefalconrolecreatoruid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Role creator name crowdstrikefalconrolecreatorname shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Role priority crowdstrikefalconrolepriority shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Role topic crowdstrikefalconroletopic shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Scan Id crowdstrikefalconscanid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Scan Name crowdstrikefalconscanname shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Security patch level crowdstrikefalconsecuritypatchlevel shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Service Type crowdstrikefalconservicetype shortText CrowdStrike Falcon No 0
CrowdStrike Falcon System Manufacturer crowdstrikefalconsystemmanufacturer shortText CrowdStrike Falcon No 0
CrowdStrike Falcon System Product Name crowdstrikefalconsystemproductname shortText CrowdStrike Falcon No 0
CrowdStrike Falcon User Agent crowdstrikefalconuseragent shortText CrowdStrike Falcon No 0
CrowdStrike Falcon User Identity crowdstrikefalconuseridentity shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Vertex ID crowdstrikefalconvertexid shortText CrowdStrike Falcon No 0
CrowdStrike Falcon Vertex Type crowdstrikefalconvertextype shortText CrowdStrike Falcon No 0
Custom Incident Data Structure customincidentdatastructure markdown Use Case Builder No 0
Custom Packs Installed custompacksinstalled grid XSOAR CI/CD No 0
Custom Packs Source custompackssource singleSelect XSOAR CI/CD No 0
Custom Query Results customqueryresults markdown Common Types No 0
CustomNewsGrid customnewsgrid grid Popular Cybersecurity News No 0
Customer Name customername shortText Use Case Builder No 0
CyCognito Affected Asset cycognitoaffectedasset shortText CyCognito No 0
CyCognito Detection Complexity cycognitodetectioncomplexity shortText CyCognito No 0
CyCognito Exploitation Method cycognitoexploitationmethod shortText CyCognito No 0
CyCognito Exploitation Score cycognitoexploitationscore number CyCognito No 0
CyCognito Investigation Status cycognitoinvestigationstatus singleSelect CyCognito No 0
CyCognito Issue ID cycognitoissueid shortText CyCognito No 0
CyCognito Issue Organizations cycognitoissueorganizations tagsSelect CyCognito No 0
CyCognito Issue Status cycognitoissuestatus shortText CyCognito No 0
CyCognito Issue Type cycognitoissuetype shortText CyCognito No 0
CyCognito Issue Type ID cycognitoissuetypeid shortText CyCognito No 0
CyCognito Potential Impact cycognitopotentialimpact tagsSelect CyCognito No 0
CyCognito Potential Threat cycognitopotentialthreat shortText CyCognito No 0
CyCognito References cycognitoreferences multiSelect CyCognito No 0
CyCognito Remediation Step cycognitoremediationstep markdown CyCognito No 0
CyCognito Resolved Time cycognitoresolvedtime shortText CyCognito No 0
CyCognito Severity Score cycognitoseverityscore number CyCognito No 0
CyCognito Summary cycognitosummary longText CyCognito No 0
CyCognito Tags cycognitotags multiSelect CyCognito No 0
CybelAngel Abstract cybelangelabstract shortText CybelAngel No 0
CybelAngel Abuse Email cybelangelabuseemail shortText CybelAngel No 0
CybelAngel Analysis cybelangelanalysis shortText CybelAngel No 0
CybelAngel Asset Urls cybelangelasseturls shortText CybelAngel No 0
CybelAngel Board cybelangelboard shortText CybelAngel No 0
CybelAngel City cybelangelcity shortText CybelAngel No 0
CybelAngel Country Code cybelangelcountrycode shortText CybelAngel No 0
CybelAngel Created At cybelangelcreatedat shortText CybelAngel No 0
CybelAngel Detected At cybelangeldetectedat shortText CybelAngel No 0
CybelAngel Domain Registered At cybelangeldomainregisteredat shortText CybelAngel No 0
CybelAngel IP cybelangelip shortText CybelAngel No 0
CybelAngel Incident ID cybelangelincidentid shortText CybelAngel No 0
CybelAngel Incident Type cybelangelincidenttype shortText CybelAngel No 0
CybelAngel Investigation ID cybelangelinvestigationid shortText CybelAngel No 0
CybelAngel Keywords cybelangelkeywords shortText CybelAngel No 0
CybelAngel Language cybelangellanguage shortText CybelAngel No 0
CybelAngel Liveness cybelangelliveness shortText CybelAngel No 0
CybelAngel Location cybelangellocation shortText CybelAngel No 0
CybelAngel MX Servers cybelangelmxservers shortText CybelAngel No 0
CybelAngel Machine Name cybelangelmachinename shortText CybelAngel No 0
CybelAngel Malware Location cybelangelmalwarelocation shortText CybelAngel No 0
CybelAngel Malware Name cybelangelmalwarename shortText CybelAngel No 0
CybelAngel Module cybelangelmodule shortText CybelAngel No 0
CybelAngel NS Servers cybelangelnsservers shortText CybelAngel No 0
CybelAngel Origins cybelangelorigins shortText CybelAngel No 0
CybelAngel Port cybelangelport shortText CybelAngel No 0
CybelAngel Registrant Email cybelangelregistrantemail shortText CybelAngel No 0
CybelAngel Registrant Name cybelangelregistrantname shortText CybelAngel No 0
CybelAngel Report Content cybelangelreportcontent longText CybelAngel No 0
CybelAngel Report Type cybelangelreporttype shortText CybelAngel No 0
CybelAngel Risks cybelangelrisks shortText CybelAngel No 0
CybelAngel Samples cybelangelsamples shortText CybelAngel No 0
CybelAngel Screenshots cybelangelscreenshots shortText CybelAngel No 0
CybelAngel Sender cybelangelsender shortText CybelAngel No 0
CybelAngel Sent At cybelangelsentat shortText CybelAngel No 0
CybelAngel Severity cybelangelseverity shortText CybelAngel No 0
CybelAngel Solved At cybelangelsolvedat shortText CybelAngel No 0
CybelAngel Source cybelangelsource shortText CybelAngel No 0
CybelAngel Stream cybelangelstream shortText CybelAngel No 0
CybelAngel Suggestions cybelangelsuggestions shortText CybelAngel No 0
CybelAngel Tags cybelangeltags shortText CybelAngel No 0
CybelAngel Threat cybelangelthreat shortText CybelAngel No 0
CybelAngel Title cybelangeltitle shortText CybelAngel No 0
CybelAngel Updated At cybelangelupdatedat shortText CybelAngel No 0
CybelAngel User Session cybelangelusersession shortText CybelAngel No 0
CybelAngel UserGroups cybelangelusergroups shortText CybelAngel No 0
CybelAngel Volume cybelangelvolume shortText CybelAngel No 0
CybelAngel WHOIS cybelangelwhois shortText CybelAngel No 0
CyberInt Alert Data cyberintalertdata markdown Cyberint No 0
CyberInt Alert ID cyberintalertid shortText Cyberint No 0
CyberInt Alert URL ID cyberintincidentid shortText Cyberint No 0
CyberInt Attachments cyberintattachments grid Cyberint No 0
CyberInt Confidence cyberintconfidence shortText Cyberint No 0
CyberInt Created by cyberintcreatedby shortText Cyberint No 0
CyberInt Created date cyberintcreateddate shortText Cyberint No 0
CyberInt Credentials Exposed CSV cyberintcredentialsexposedcsv grid Cyberint No 0
CyberInt Description cyberintdescription shortText Cyberint No 0
CyberInt Descriptors cyberintdescriptors multiSelect Cyberint No 0
CyberInt Expert Analysis cyberintexpertanalysis shortText Cyberint No 0
CyberInt Impact cyberintimpact shortText Cyberint No 0
CyberInt Impacts cyberintimpacts multiSelect Cyberint No 0
CyberInt Payment Card Exposed CSV cyberintpaymentcardexposedcsv grid Cyberint No 0
CyberInt Recommendation cyberintrecommendation shortText Cyberint No 0
CyberInt Related IOCs cyberintrelatediocs grid Cyberint No 0
CyberInt Related entities cyberintrelatedentities shortText Cyberint No 0
CyberInt Source cyberintsource shortText Cyberint No 0
CyberInt Source category cyberintsourcecategory shortText Cyberint No 0
CyberInt Status cyberintstatus singleSelect Cyberint No 0
CyberInt Tags cyberinttags shortText Cyberint No 0
CyberInt Targeted Brand cyberinttargetedbrand shortText Cyberint No 0
CyberInt Targeted Vector cyberinttargetedvector shortText Cyberint No 0
CyberInt Targeted Vectors cyberinttargetedvectors multiSelect Cyberint No 0
CyberInt Threat Actor cyberintthreatactor shortText Cyberint No 0
CyberInt Ticket ID cyberintticketid shortText Cyberint No 0
CyberInt Title cyberinttitle shortText Cyberint No 0
CyberInt Type cyberinttype shortText Cyberint No 0
CyberInt Vulnerable CName Record cyberinvulnerablecnamerecord shortText Cyberint No 0
Cyberint Alert Close Reason cyberintclosurereason singleSelect Cyberint No 0
Cyberint Alert Close Reason Description cyberintclosurereasondescription shortText Cyberint No 0
Cyberint Category cyberintcategory shortText Cyberint No 0
Cyberint File Type cyberintfiletype shortText Cyberint No 0
Cyberint Related Entity cyberintrelatedentity multiSelect Cyberint No 0
Cyberint Targeted Brands cyberinttargetedbrands multiSelect Cyberint No 0
Cyberpion Action item ID cyberpionactionitemid shortText Cyberpion No 0
Cyberpion Asset cyberpionasset shortText Cyberpion No 0
Cyberpion Category cyberpioncategory shortText Cyberpion No 0
Cyberpion Description cyberpiondescription longText Cyberpion No 0
Cyberpion Domain cyberpiondomain shortText Cyberpion No 0
Cyberpion Impact cyberpionimpact longText Cyberpion No 0
Cyberpion Solution cyberpionsolution longText Cyberpion No 0
Cyberpion Summary cyberpionsummary shortText Cyberpion No 0
Cyberpion Technical Details cyberpiontechnicaldetails longText Cyberpion No 0
Cyberpion Title cyberpiontitle shortText Cyberpion No 0
Cyberpion portal link cyberpionportallink shortText Cyberpion No 0
Cybersixgill Assessment cybersixgillassessment longText Cybersixgill Actionable Alerts No 0
Cybersixgill Attributes cybersixgillattributes longText Cybersixgill Actionable Alerts No 0
Cybersixgill CVSS 2.0 cybersixgillcvss20 number Cybersixgill Actionable Alerts No 0
Cybersixgill CVSS 3.1 cybersixgillcvss31 number Cybersixgill Actionable Alerts No 0
Cybersixgill DVE Score cybersixgilldvescore number Cybersixgill Actionable Alerts No 0
Cybersixgill Post URL cybersixgillposturl shortText Cybersixgill Actionable Alerts No 0
Cybersixgill Recommendations cybersixgillrecommendations longText Cybersixgill Actionable Alerts No 0
Cybersixgill Status cybersixgillstatus singleSelect Cybersixgill Actionable Alerts No 0
Cybersixgill Suspicious domain cybersixgillsuspiciousdomain tagsSelect Cybersixgill Actionable Alerts No 0
Cybersixgill Threat Level cybersixgillthreatlevel singleSelect Cybersixgill Actionable Alerts No 0
Cybersixgill Threat Type cybersixgillthreattype tagsSelect Cybersixgill Actionable Alerts No 0
Cybersixgill Triggered Assets cybersixgilltriggeredassets tagsSelect Cybersixgill Actionable Alerts No 0
Cybersixgill Triggered domain cybersixgilltriggereddomain tagsSelect Cybersixgill Actionable Alerts No 0
Cyble Events Alias cybleeventsalias shortText Cyble Events (Deprecated) No 0
Cyble Events Bucket cybleeventsbucket shortText Cyble Events (Deprecated) No 0
Cyble Events Keyword cybleeventskeyword shortText Cyble Events (Deprecated) No 0
Cyble Events Name cybleeventsname shortText Cyble Events (Deprecated) No 0
CybleEventsV2 Application cybleeventsv2application shortText CybleEventsV2 No 0
CybleEventsV2 CE Filename cybleeventsv2cefilename shortText CybleEventsV2 No 0
CybleEventsV2 CE Username cybleeventsv2ceusername shortText CybleEventsV2 No 0
CybleEventsV2 Card Brand cybleeventsv2cardbrand shortText CybleEventsV2 No 0
CybleEventsV2 Card CVV cybleeventsv2cardcvv shortText CybleEventsV2 No 0
CybleEventsV2 Card Expiry cybleeventsv2cardexpiry shortText CybleEventsV2 No 0
CybleEventsV2 Card Level cybleeventsv2cardlevel shortText CybleEventsV2 No 0
CybleEventsV2 Card No. cybleeventsv2cardno shortText CybleEventsV2 No 0
CybleEventsV2 Card Type cybleeventsv2cardtype shortText CybleEventsV2 No 0
CybleEventsV2 Keyword cybleeventsv2keyword shortText CybleEventsV2 No 0
CybleEventsV2 Password cybleeventsv2password shortText CybleEventsV2 No 0
CybleEventsV2 Status cybleeventsv2status singleSelect CybleEventsV2 No 0
CybleEventsV2 URL cybleeventsv2url shortText CybleEventsV2 No 0
Cymulate Affected Assets cymulateaffectedassets shortText Cymulate No 0
Cymulate Agentless cymulateagentless shortText Cymulate No 0
Cymulate Analysis cymulateanalysis shortText Cymulate No 0
Cymulate Assessment ID cymulateassessmentid shortText Cymulate No 0
Cymulate Assessment Name cymulateassessmentname shortText Cymulate No 0
Cymulate Attack Type cymulateattacktype shortText Cymulate No 0
Cymulate Attack Vector cymulateattackvector shortText Cymulate No 0
Cymulate CIS Compliance Support cymulateciscompliancesupport markdown Cymulate No 0
Cymulate Defense Bypassed cymulatedefensebypassed multiSelect Cymulate No 0
Cymulate Description cymulatedescription shortText Cymulate No 0
Cymulate Environment cymulateenvironment shortText Cymulate No 0
Cymulate Finding Name cymulatefindingname shortText Cymulate No 0
Cymulate Finding Type cymulatefindingtype shortText Cymulate No 0
Cymulate Immediate Threats Attack ID cymulateimmediatethreatsattackid shortText Cymulate No 0
Cymulate Immediate Threats File Type cymulateimmediatethreatsfiletype shortText Cymulate No 0
Cymulate Immediate Threats ID cymulateimmediatethreatsid shortText Cymulate No 0
Cymulate Immediate Threats Mitigations cymulateimmediatethreatsmitigations shortText Cymulate No 0
Cymulate Immediate Threats Module cymulateimmediatethreatsmodule shortText Cymulate No 0
Cymulate Immediate Threats Payload Name cymulateimmediatethreatspayloadname shortText Cymulate No 0
Cymulate Immediate Threats Status cymulateimmediatethreatsstatus shortText Cymulate No 0
Cymulate Immediate Threats Vector cymulateimmediatethreatsvector shortText Cymulate No 0
Cymulate Input cymulateinput shortText Cymulate No 0
Cymulate Last Action cymulatelastaction shortText Cymulate No 0
Cymulate Mitigation Details cymulatemitigationdetails shortText Cymulate No 0
Cymulate Mitigation Type cymulatemitigationtype shortText Cymulate No 0
Cymulate Module cymulatemodule shortText Cymulate No 0
Cymulate Nist Compliance Support cymulatenistcompliancesupport markdown Cymulate No 0
Cymulate Softwares cymulatesoftwares markdown Cymulate No 0
Cymulate Source cymulatesource shortText Cymulate No 0
Cymulate Source Email Address cymulatesourceemailaddress shortText Cymulate No 0
Cymulate Status cymulatestatus shortText Cymulate No 0
Cymulate Template Name cymulatetemplatename shortText Cymulate No 0
Cymulate Test Case cymulatetestcase shortText Cymulate No 0
Cymulate URL cymulateurl shortText Cymulate No 0
Cypho Threat Intelligence Asset cyphoasset shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Attachments cyphoattachments shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Category Name cyphocategoryname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Checker cyphochecker shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Comments cyphocomments longText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Confidence Score cyphoconfidencescore shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Date Detected by Cypho datedetectedbycypho shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Date of Exposure cyphodateofexposure shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Description cyphodescription shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detail cyphodetail shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Attack Type cyphodetectedattacktype shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Base Name cyphodetectedbasename shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected CPEs cyphodetectedcpes shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected CVE ID cyphodetectedcveid shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected CVE Score cyphodetectedcvescore shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected CVE Severity cyphodetectedcveseverity shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Content cyphodetectedcontent longText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Content Author Name cyphodetectedcontentauthorname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Content Page Count cyphodetectedcontentpagecount shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Content Title cyphodetectedcontenttitle shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Developer cyphodetecteddeveloper shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Domains cyphodetecteddomains shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected GitHub Owner Name cyphodetectedgithubownername shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Host cyphodetectedhost shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Http Request Method cyphodetectedhttprequestmethod shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected IP cyphodetectedip shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected New Record cyphodetectednewrecord shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected New Record IP cyphodetectednewrecordip shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Old Record cyphodetectedoldrecord shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Old Record IP cyphodetectedoldrecordip shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Package Name cyphodetectedpackagename shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Parameter cyphodetectedparameter shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Password cyphodetectedpassword shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Payload cyphodetectedpayload shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Phishing Domain Name cyphodetectedphishingdomainname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Port cyphodetectedport shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Repository Name cyphodetectedrepositoryname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Request Body cyphodetectedrequestbody shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Request Headers cyphodetectedrequestheaders shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Response Headers cyphodetectedresponseheaders shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Serial Number cyphodetectedserialnumber shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Service Name cyphodetectedservicename shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Service Version cyphodetectedserviceversion shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected Targeted Brand Name cyphodetectedtargetedbrandname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detected URL cyphodetectedurl shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Detection Source cyphodetectionsource shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Domain Same As Company Keyword Score cyphodomainsameascompanykeywordscore shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Host Path cyphohostpath shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence ID cyphoid shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Login Name cyphologinname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Messages cyphomessages shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Not Parked Factor Score cyphonotparkedfactorscore shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Product Name cyphoproductname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Recommendation cyphorecommendation longText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Remediation SLA cyphoremediationsla timer Cypho Threat Intelligence No 0
Cypho Threat Intelligence Risk Level cyphorisklevel singleSelect Cypho Threat Intelligence No 0
Cypho Threat Intelligence SSL/TLS Certificate Expire Date cyphossltlscertificateexpiredate shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Searching keyword cyphosearchingkeyword shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Similarity Rate cyphosimilarityrate shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Status cyphostatus shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Status Reason cyphostatusreason shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Subject Alternative Names cyphosubjectalternativenames shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Subject Common Name cyphosubjectcommonname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Target Type cyphotargettype shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Tenant Name cyphotenantname shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Threat Intelligence Created at Time cyphocreatedattime shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Threat Intelligence Impact cyphoimpact longText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Ticket Id cyphoticketid shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Time to Assignment cyphotimetoassignment timer Cypho Threat Intelligence No 0
Cypho Threat Intelligence Title cyphotitle shortText Cypho Threat Intelligence No 0
Cypho Threat Intelligence Updated at Time cyphoupdatedattime shortText Cypho Threat Intelligence No 0
Cyren Case ID cyrencaseid shortText Cyren Inbox Security No 0
Cyren Confidence cyrenconfidence shortText Cyren Inbox Security No 0
Cyren Connection ID cyrenconnectionid shortText Cyren Inbox Security No 0
Cyren Connection Name cyrenconnectionname shortText Cyren Inbox Security No 0
Cyren Email Subject cyrenemailsubject shortText Cyren Inbox Security No 0
Cyren External From cyrenexternalfrom shortText Cyren Inbox Security No 0
Cyren External Reply To cyrenexternalreplyto shortText Cyren Inbox Security No 0
Cyren External Reply To Address cyrenexternalreplytoaddress shortText Cyren Inbox Security No 0
Cyren External Sender cyrenexternalsender shortText Cyren Inbox Security No 0
Cyren From Address cyrenfromaddress shortText Cyren Inbox Security No 0
Cyren From Name cyrenfromname shortText Cyren Inbox Security No 0
Cyren Incident ID cyrenincidentid shortText Cyren Inbox Security No 0
Cyren Internet Message ID cyreninternetmessageid shortText Cyren Inbox Security No 0
Cyren Message Details cyrenmessagedetails shortText Cyren Inbox Security No 0
Cyren Message Folder cyrenmessagefolder shortText Cyren Inbox Security No 0
Cyren Message ID cyrenmessageid shortText Cyren Inbox Security No 0
Cyren Message Read State cyrenmessagereadstate shortText Cyren Inbox Security No 0
Cyren Microsoft Tenant ID cyrenmicrosofttenantid shortText Cyren Inbox Security No 0
Cyren Org ID cyrenorgid shortText Cyren Inbox Security No 0
Cyren Remediation Status cyrenremediationstatus shortText Cyren Inbox Security No 0
Cyren Reported By cyrenreportedby shortText Cyren Inbox Security No 0
Cyren Sender Address cyrensenderaddress shortText Cyren Inbox Security No 0
Cyren Sender Name cyrensendername shortText Cyren Inbox Security No 0
Cyren Targeted Address cyrentargetedaddress shortText Cyren Inbox Security No 0
Cyren Targeted User cyrentargeteduser shortText Cyren Inbox Security No 0
Cyren Threat Indicators cyrenthreatindicators shortText Cyren Inbox Security No 0
Cyren Threat Type cyrenthreattype shortText Cyren Inbox Security No 0
Cyren User Comment cyrenusercomment shortText Cyren Inbox Security No 0
Cyren User Reported As cyrenuserreportedas shortText Cyren Inbox Security No 0
Cyren User Selected Indicators cyrenuserselectedindicators shortText Cyren Inbox Security No 0
DBotPrediction dbotprediction shortText Phishing No 0
DBotPredictionProbability dbotpredictionprobability number Phishing No 0
DBotTextSuggestionHighlighted dbottextsuggestionhighlighted markdown Phishing No 0
DLP Detections dlpdetections shortText Enterprise DLP by Palo Alto Networks No 0
DNS Name dnsname multiSelect Common Types No 0
DNS Query Name dnsqueryname multiSelect Core Alert Fields No 0
DPO E-mail Address dpoemailaddress shortText Common Scripts No 0
DPO Notification dponotification singleSelect Common Scripts No 0
DS Alert Description dsalertdescription longText ReliaQuest Digital Risk Protection No 0
DS Alert Email dsalertemail shortText ReliaQuest Digital Risk Protection No 0
DS Alert Password dsalertpassword shortText ReliaQuest Digital Risk Protection No 0
DS Alert Risk Factors dsalertriskfactors shortText ReliaQuest Digital Risk Protection No 0
DS Assets dsassets grid ReliaQuest Digital Risk Protection No 0
DS Auto Closed dsautoclosed shortText ReliaQuest Digital Risk Protection No 0
DS Comments dscomments grid ReliaQuest Digital Risk Protection No 0
DS Event Action dseventaction shortText ReliaQuest Digital Risk Protection No 0
DS Event Number dseventnumber shortText ReliaQuest Digital Risk Protection No 0
DS Impact dsimpact shortText ReliaQuest Digital Risk Protection No 0
DS Impact Description dsimpactdescription longText ReliaQuest Digital Risk Protection No 0
DS Incident Description dsincidentdescription shortText ReliaQuest Digital Risk Protection No 0
DS Incident ID dsincidentid shortText ReliaQuest Digital Risk Protection No 0
DS Incident Raised Date dsincidentraiseddate shortText ReliaQuest Digital Risk Protection No 0
DS Incident Updated Date dsincidentupdateddate shortText ReliaQuest Digital Risk Protection No 0
DS Mitigation dsmitigation shortText ReliaQuest Digital Risk Protection No 0
DS Risk Factors dsriskfactors longText ReliaQuest Digital Risk Protection No 0
DS Risk Level dsrisklevel shortText ReliaQuest Digital Risk Protection No 0
DS Severity dsseverity shortText ReliaQuest Digital Risk Protection No 0
DS Takedown Attachments dstakedownattachments grid ReliaQuest Digital Risk Protection No 0
DS Takedown Comments dstakedowncomments grid ReliaQuest Digital Risk Protection No 0
DS Takedown Targets dstakedowntargets grid ReliaQuest Digital Risk Protection No 0
DS Triage Item ID dstriageitemid shortText ReliaQuest Digital Risk Protection No 0
DS Triage Title dstriagetitle longText ReliaQuest Digital Risk Protection No 0
DSPM Affects affects shortText DSPM No 0
DSPM Asset Dig Tags assetdigtags longText DSPM No 0
DSPM Cloud cloud shortText DSPM No 0
DSPM First Detectedon firstdetectedon shortText DSPM No 0
DSPM Investigation Link investigationlink url DSPM No 0
DSPM Remediate Instruction remediateinstruction shortText DSPM No 0
DSPM Remediation Description remediationdescription longText DSPM No 0
DSPM Remediation Steps remediatesteps longText DSPM No 0
DSPM Risk Finding Id riskfindingid shortText DSPM No 0
DSPM Service Type servicetype shortText DSPM No 0
Darkmon Account ID darkmonaccountid shortText Darkmon No 0
Darkmon Action Taken darkmonactiontaken shortText Darkmon No 0
Darkmon Affected Components darkmonaffectedcomponents multiSelect Darkmon No 0
Darkmon Brand darkmonbrand shortText Darkmon No 0
Darkmon CVE Severity darkmoncveseverity shortText Darkmon No 0
Darkmon Directory User darkmondirectoryuser shortText Darkmon No 0
Darkmon Distance darkmondistance number Darkmon No 0
Darkmon Employee Email darkmonemployeeemail shortText Darkmon No 0
Darkmon First Compromise darkmonfirstcompromise date Darkmon No 0
Darkmon Last Compromise darkmonlastcompromise date Darkmon No 0
Darkmon Leak ID darkmonleakid shortText Darkmon No 0
Darkmon Leak Type darkmonleaktype shortText Darkmon No 0
Darkmon Observed Domain darkmonobserveddomain shortText Darkmon No 0
Darkmon Password (Redacted) darkmonpasswordredacted shortText Darkmon No 0
Darkmon Protected Email darkmonprotectedemail shortText Darkmon No 0
Darkmon Published At darkmonpublishedat date Darkmon No 0
Darkmon Registered At darkmonregisteredat date Darkmon No 0
Darkmon Screenshot URL darkmonscreenshoturl shortText Darkmon No 0
Darkmon Source darkmonsourcename shortText Darkmon No 0
Darkmon Stealer darkmonstealer shortText Darkmon No 0
Darkmon Threat Actor darkmonthreatactor shortText Darkmon No 0
Darkmon URL darkmonurl url Darkmon No 0
Darkmon Username darkmonusername shortText Darkmon No 0
Darkmon Victim Name darkmonvictimname shortText Darkmon No 0
Darktrace AI Analyst Associated Devices darktraceaianalystassociateddevices grid Darktrace No 0
Darktrace AI Analyst Category darktraceaianalystcategory shortText Darktrace No 0
Darktrace AI Analyst Event Id darktraceaianalysteventid shortText Darktrace No 0
Darktrace AI Analyst Group Id darktraceaianalystgroupid shortText Darktrace No 0
Darktrace AI Analyst Mitre Tactics darktraceaianalystmitretactics multiSelect Darktrace No 0
Darktrace AI Analyst Related Model Breaches darktraceaianalystrelatedmodelbreaches grid Darktrace No 0
Darktrace AI Analyst Score darktraceaianalystscore shortText Darktrace No 0
Darktrace AI Analyst Summary darktraceaianalystsummary longText Darktrace No 0
Darktrace AI Analyst Title darktraceaianalysttitle shortText Darktrace No 0
Darktrace Comment Count darktracecommentcount number Darktrace No 0
Darktrace Device Hostname darktracedevicehostname shortText Darktrace No 0
Darktrace Device ID darktracedeviceid shortText Darktrace No 0
Darktrace Device IP darktracedeviceip shortText Darktrace No 0
Darktrace Device Label darktracedevicelabel shortText Darktrace No 0
Darktrace Device MAC darktracedevicemac shortText Darktrace No 0
Darktrace Device Vendor darktracedevicevendor shortText Darktrace No 0
Darktrace Email Action Status darktraceemailactionstatus shortText Darktrace No 0
Darktrace Email Actions darktraceemailactions multiSelect Darktrace No 0
Darktrace Email Actions Taken darktraceemailactionstaken shortText Darktrace No 0
Darktrace Email Anomaly Score darktraceemailanomalyscore number Darktrace No 0
Darktrace Email Attachments darktraceemailattachments number Darktrace No 0
Darktrace Email Critical Tags darktraceemailcriticaltags tagsSelect Darktrace No 0
Darktrace Email Direction darktraceemaildirection shortText Darktrace No 0
Darktrace Email Group Status darktraceemailgroupstatus shortText Darktrace No 0
Darktrace Email Informational Tags darktraceemailinformationaltags tagsSelect Darktrace No 0
Darktrace Email Links darktraceemaillinks number Darktrace No 0
Darktrace Email Read Status darktraceemailreadstatus shortText Darktrace No 0
Darktrace Email Receipt Status darktraceemailreceiptstatus shortText Darktrace No 0
Darktrace Email Recipient darktraceemailrecipient shortText Darktrace No 0
Darktrace Email Release Requested darktraceemailreleaserequested boolean Darktrace No 0
Darktrace Email Sender darktraceemailsender shortText Darktrace No 0
Darktrace Email Subject darktraceemailsubject shortText Darktrace No 0
Darktrace Email Summary darktraceemailsummary longText Darktrace No 0
Darktrace Email Tags darktraceemailtags multiSelect Darktrace No 0
Darktrace Email Time darktraceemailtime shortText Darktrace No 0
Darktrace Email UI Link darktraceemailuilink url Darktrace No 0
Darktrace Email UUID darktraceemailuuid shortText Darktrace No 0
Darktrace Email Warning Tags darktraceemailwarningtags tagsSelect Darktrace No 0
Darktrace Model Breach Category darktracemodelbreachcategory shortText Darktrace No 0
Darktrace Model Breach Comment Count darktracemodelbreachcommentcount number Darktrace No 0
Darktrace Model Breach Description darktracemodelbreachdescription longText Darktrace No 0
Darktrace Model Breach ID darktracemodelbreachid number Darktrace No 0
Darktrace Model Breach Name darktracemodelbreachname shortText Darktrace No 0
Darktrace Model Breach Policy Id darktracemodelbreachpolicyid number Darktrace No 0
Darktrace Model Breach Priority darktracemodelbreachpriority number Darktrace No 0
Darktrace Model Breach Score darktracemodelbreachscore number Darktrace No 0
Darktrace Model Breach Tags darktracemodelbreachtags tagsSelect Darktrace No 0
Darktrace Model Breach Unique Identifier darktracemodelbreachuniqueidentifier shortText Darktrace No 0
Darktrace Model ID darktracemodelid number Darktrace No 0
Darktrace Model Name darktracemodelname shortText Darktrace No 0
Darktrace Model Priority darktracemodelpriority number Darktrace No 0
Darktrace Model Tags darktracemodeltags tagsSelect Darktrace No 0
Darktrace Model UUID darktracemodeluuid shortText Darktrace No 0
DarktraceASM Asset Brand darktraceasmassetbrand shortText DarktraceASM No 0
DarktraceASM Asset Creation Time darktraceasmassetcreationtime shortText DarktraceASM No 0
DarktraceASM Asset ID darktraceasmassetid shortText DarktraceASM No 0
DarktraceASM Asset Security Rating darktraceasmassetsecurityrating shortText DarktraceASM No 0
DarktraceASM Asset State darktraceasmassetstate shortText DarktraceASM No 0
DarktraceASM Asset URL darktraceasmasseturl url DarktraceASM No 0
DarktraceASM Asset Updated Time darktraceasmassetupdatedtime shortText DarktraceASM No 0
DarktraceASM Asset is Malicious darktraceasmassetismalicious shortText DarktraceASM No 0
DarktraceASM Risk Description darktraceasmriskdescription longText DarktraceASM No 0
DarktraceASM Risk End Time darktraceasmriskendtime shortText DarktraceASM No 0
DarktraceASM Risk Evidence darktraceasmriskevidence shortText DarktraceASM No 0
DarktraceASM Risk ID darktraceasmriskid shortText DarktraceASM No 0
DarktraceASM Risk Proposed Action darktraceasmriskproposedaction longText DarktraceASM No 0
DarktraceASM Risk Security Rating darktraceasmrisksecurityrating shortText DarktraceASM No 0
DarktraceASM Risk Start Time darktraceasmriskstarttime shortText DarktraceASM No 0
DarktraceASM Risk Title darktraceasmrisktitle shortText DarktraceASM No 0
DarktraceASM Risk Type darktraceasmrisktype shortText DarktraceASM No 0
DarktraceASM Risk URL darktraceasmriskurl url DarktraceASM No 0
Data Encryption Status dataencryptionstatus multiSelect Common Scripts No 0
DataBee Analytic databeeanalytic markdown DataBee No 0
DataBee Evidence databeeevidence markdown DataBee No 0
DataBee Findings databeefindings markdown DataBee No 0
DataBee Impact databeeimpact shortText DataBee No 0
DataBee Message databeemessage shortText DataBee No 0
DataBee SIC-CSC databeesiccsc markdown DataBee No 0
Datadog Cloud SIEM datadogcloudsiem grid Datadog Cloud SIEM No 0
Datadog Cloud SIEM Attachment User ID datadogcloudsiemattachmentuserid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Commander User datadogcloudsiemcommanderuser shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Customer Impact Scope datadogcloudsiemcustomerimpactscope shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Customer Impacted datadogcloudsiemcustomerimpacted boolean Datadog Cloud SIEM No 0
Datadog Cloud SIEM Detect and Create Duration datadogcloudsiemdetectandcreateduration number Datadog Cloud SIEM No 0
Datadog Cloud SIEM Detected datadogcloudsiemdetected shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Detected Method datadogcloudsiemdetectedmethod shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Display Name datadogcloudsiemdisplayname shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Duration datadogcloudsiemduration shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Integrations ID datadogcloudsiemintegrationsid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Last Modified By datadogcloudsiemlastmodifiedby shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Modified datadogcloudsiemmodified shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Notification Email datadogcloudsiemnotificationemail shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Other Org Id datadogcloudsiemotherorgid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Other Org User Id datadogcloudsiemotherorguserid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Public ID datadogcloudsiempublicid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Relationships User ID datadogcloudsiemrelationshipsuserid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Repair Time datadogcloudsiemrepairtime number Datadog Cloud SIEM No 0
Datadog Cloud SIEM Resolution Time datadogcloudsiemresolutiontime shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Resolved datadogcloudsiemresolved shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Root Cause datadogcloudsiemrootcause shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM Title datadogcloudsiemtitle shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM User Creation Time datadogcloudsiemusercreationtime date Datadog Cloud SIEM No 0
Datadog Cloud SIEM User Is Service datadogcloudsiemuserisservice boolean Datadog Cloud SIEM No 0
Datadog Cloud SIEM User Last Modified datadogcloudsiemuserlastmodified shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM User Status datadogcloudsiemuserstatus shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM User Title datadogcloudsiemusertitle shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM User Verified datadogcloudsiemuserverified boolean Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Event ID datadogcloudsiemv2securitysignaleventid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Host datadogcloudsiemv2securitysignalhost shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal ID datadogcloudsiemv2securitysignalid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Message datadogcloudsiemv2securitysignalmessage markdown Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Rule ID datadogcloudsiemv2securitysignalruleid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Rule URL datadogcloudsiemv2securitysignalruleurl url Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Severity datadogcloudsiemv2securitysignalseverity shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Tags datadogcloudsiemv2securitysignaltags tagsSelect Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Timestamp datadogcloudsiemv2securitysignaltimestamp date Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Title datadogcloudsiemv2securitysignaltitle shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Triage Archive Comment datadogcloudsiemv2securitysignaltriagearchivecomment longText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Triage Archive Reason datadogcloudsiemv2securitysignaltriagearchivereason shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Triage Assignee Name datadogcloudsiemv2securitysignaltriageassigneename shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Triage State datadogcloudsiemv2securitysignaltriagestate shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal Triggering Log ID datadogcloudsiemv2securitysignaltriggeringlogid shortText Datadog Cloud SIEM No 0
Datadog Cloud SIEM V2 Security Signal URL datadogcloudsiemv2securitysignalurl url Datadog Cloud SIEM No 0
Dataminr Pulse Airport dataminrpulseairport grid Dataminr Pulse No 0
Dataminr Pulse Alert Timestamp dataminrpulsealerttimestamp date Dataminr Pulse No 0
Dataminr Pulse Alert Topics dataminrpulsealerttopics grid Dataminr Pulse No 0
Dataminr Pulse Alert Type dataminrpulsealerttype shortText Dataminr Pulse No 0
Dataminr Pulse Alert Type Color dataminrpulsealerttypecolor shortText Dataminr Pulse No 0
Dataminr Pulse Available Related Alerts dataminrpulseavailablerelatedalerts number Dataminr Pulse No 0
Dataminr Pulse Categories dataminrpulsecategories grid Dataminr Pulse No 0
Dataminr Pulse Companies dataminrpulsecompanies grid Dataminr Pulse No 0
Dataminr Pulse Country dataminrpulsecountry grid Dataminr Pulse No 0
Dataminr Pulse Event Corroboration Summary dataminrpulseeventcorroborationsummary longText Dataminr Pulse No 0
Dataminr Pulse Event Location Coordinates dataminrpulseeventlocationcoordinates shortText Dataminr Pulse No 0
Dataminr Pulse Event Location Name dataminrpulseeventlocationname shortText Dataminr Pulse No 0
Dataminr Pulse Event Location Places dataminrpulseeventlocationplaces shortText Dataminr Pulse No 0
Dataminr Pulse Event Location Radius dataminrpulseeventlocationradius number Dataminr Pulse No 0
Dataminr Pulse Event Map Large URL dataminrpulseeventmaplargeurl url Dataminr Pulse No 0
Dataminr Pulse Event Map Small URL dataminrpulseeventmapsmallurl url Dataminr Pulse No 0
Dataminr Pulse Event Time dataminrpulseeventtime date Dataminr Pulse No 0
Dataminr Pulse Event Volume dataminrpulseeventvolume number Dataminr Pulse No 0
Dataminr Pulse Event corroboration Timestamp dataminrpulseeventcorroborationtimestamp date Dataminr Pulse No 0
Dataminr Pulse Expand Alert URL dataminrpulseexpandalerturl url Dataminr Pulse No 0
Dataminr Pulse Expand Map URL dataminrpulseexpandmapurl url Dataminr Pulse No 0
Dataminr Pulse Flight Route dataminrpulseflightroute grid Dataminr Pulse No 0
Dataminr Pulse Generic Event dataminrpulsegenericevent grid Dataminr Pulse No 0
Dataminr Pulse Header Color dataminrpulseheadercolor shortText Dataminr Pulse No 0
Dataminr Pulse Header Label dataminrpulseheaderlabel shortText Dataminr Pulse No 0
Dataminr Pulse Impacted Assets dataminrpulseimpactedassets grid Dataminr Pulse No 0
Dataminr Pulse Impacted Assets Text dataminrpulseimpactedassetstext longText Dataminr Pulse No 0
Dataminr Pulse Intel Agents Discovered Entities dataminrpulseintelagentsdiscoveredentities longText Dataminr Pulse No 0
Dataminr Pulse Intel Agents Summary dataminrpulseintelagentssummary longText Dataminr Pulse No 0
Dataminr Pulse Intel Agents Timestamp dataminrpulseintelagentstimestamp date Dataminr Pulse No 0
Dataminr Pulse Intel Agents Version dataminrpulseintelagentsversion shortText Dataminr Pulse No 0
Dataminr Pulse Lists Matched dataminrpulselistsmatched grid Dataminr Pulse No 0
Dataminr Pulse Live Brief dataminrpulselivebrief longText Dataminr Pulse No 0
Dataminr Pulse Live Brief Timestamp dataminrpulselivebrieftimestamp date Dataminr Pulse No 0
Dataminr Pulse Malware dataminrpulsemalware grid Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber AS Orgs dataminrpulsemetadatacyberasorgs grid Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Address dataminrpulsemetadatacyberaddress grid Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Addresses dataminrpulsemetadatacyberaddresses grid Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Asns dataminrpulsemetadatacyberasns shortText Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Hash Values dataminrpulsemetadatacyberhashvalues grid Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Hashes dataminrpulsemetadatacyberhashes shortText Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Malwares dataminrpulsemetadatacybermalwares shortText Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Orgs dataminrpulsemetadatacyberorgs shortText Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Threats dataminrpulsemetadatacyberthreats shortText Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber URL dataminrpulsemetadatacyberurl grid Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber URLs dataminrpulsemetadatacyberurls shortText Dataminr Pulse No 0
Dataminr Pulse Metadata Cyber Vulnerabilities dataminrpulsemetadatacybervulnerabilities grid Dataminr Pulse No 0
Dataminr Pulse Organization dataminrpulseorganization grid Dataminr Pulse No 0
Dataminr Pulse Parent Alert ID dataminrpulseparentalertid shortText Dataminr Pulse No 0
Dataminr Pulse Point Of Interest dataminrpulsepointofinterest grid Dataminr Pulse No 0
Dataminr Pulse Post Channels dataminrpulsepostchannels multiSelect Dataminr Pulse No 0
Dataminr Pulse Post English Text dataminrpulsepostenglishtext longText Dataminr Pulse No 0
Dataminr Pulse Post Languages dataminrpulsepostlanguages grid Dataminr Pulse No 0
Dataminr Pulse Post Link dataminrpulsepostlink url Dataminr Pulse No 0
Dataminr Pulse Post Media dataminrpulsepostmedia grid Dataminr Pulse No 0
Dataminr Pulse Post Media Content dataminrpulsepostmediacontent grid Dataminr Pulse No 0
Dataminr Pulse Post Media Photo dataminrpulsepostmediaphoto html Dataminr Pulse No 0
Dataminr Pulse Post Text dataminrpulseposttext longText Dataminr Pulse No 0
Dataminr Pulse Post Timestamp dataminrpulseposttimestamp date Dataminr Pulse No 0
Dataminr Pulse Publicly Known Person dataminrpulsepubliclyknownperson grid Dataminr Pulse No 0
Dataminr Pulse Publisher Category Color dataminrpulsepublishercategorycolor shortText Dataminr Pulse No 0
Dataminr Pulse Publisher Category ID dataminrpulsepublishercategoryid shortText Dataminr Pulse No 0
Dataminr Pulse Publisher Category Name dataminrpulsepublishercategoryname shortText Dataminr Pulse No 0
Dataminr Pulse Publisher Category Short Name dataminrpulsepublishercategoryshortname shortText Dataminr Pulse No 0
Dataminr Pulse Region dataminrpulseregion grid Dataminr Pulse No 0
Dataminr Pulse Related Terms dataminrpulserelatedterms grid Dataminr Pulse No 0
Dataminr Pulse Related Terms Query URL dataminrpulserelatedtermsqueryurl url Dataminr Pulse No 0
Dataminr Pulse Sectors dataminrpulsesectors grid Dataminr Pulse No 0
Dataminr Pulse Source Channels dataminrpulsesourcechannels shortText Dataminr Pulse No 0
Dataminr Pulse Source Display Name dataminrpulsesourcedisplayname shortText Dataminr Pulse No 0
Dataminr Pulse Source Entity Name dataminrpulsesourceentityname shortText Dataminr Pulse No 0
Dataminr Pulse Source Verified dataminrpulsesourceverified boolean Dataminr Pulse No 0
Dataminr Pulse Sub Caption Bullets Media dataminrpulsesubcaptionbulletsmedia shortText Dataminr Pulse No 0
Dataminr Pulse Sub Caption Bullets Source dataminrpulsesubcaptionbulletssource shortText Dataminr Pulse No 0
Dataminr Pulse Sub Caption Bullets content dataminrpulsesubcaptionbulletscontent shortText Dataminr Pulse No 0
Dataminr Pulse Sub Headline Content dataminrpulsesubheadlinecontent multiSelect Dataminr Pulse No 0
Dataminr Pulse Sub Headline Title dataminrpulsesubheadlinetitle shortText Dataminr Pulse No 0
Dataminr Pulse Threat Actor dataminrpulsethreatactor grid Dataminr Pulse No 0
Dataminr Pulse User Recent Images dataminrpulseuserrecentimages shortText Dataminr Pulse No 0
Dataminr Pulse User Top Hashtags dataminrpulseusertophashtags shortText Dataminr Pulse No 0
Dataminr Pulse Vulnerability dataminrpulsevulnerability grid Dataminr Pulse No 0
Dataminr Pulse Watchlists Matched By Type dataminrpulsewatchlistsmatchedbytype grid Dataminr Pulse No 0
Date/time of the breach datetimeofthebreach date Common Scripts No 0
DeCYFIR Data Details decyfirdatadetails grid DeCYFIR No 0
Deduplication Logic deduplicationlogic markdown Use Case Builder No 0
Defense Evasion Remediation Products defenseevasionremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Demisto REST API Name demistorestapiname shortText XSOAR Content Update Notifications No 0
Department department shortText Common Types No 0
Description description shortText Common Types No 0
Description - Asset descriptionasset multiSelect Asset No 0
Description - Offense descriptionoffense shortText IBM QRadar No 0
Dest dest shortText Common Types No 0
Dest Hostname desthostname shortText Common Types No 0
Dest NT Domain destntdomain shortText Common Types No 0
Dest OS destos shortText Common Types No 0
Destination destination shortText FireMon Security Manager No 0
Destination Geolocation destinationgeolocation multiSelect Common Types No 0
Destination Hostname destinationhostname shortText Common Types No 0
Destination IP destinationip shortText Common Types No 0
Destination IP - Offense destinationipoffense multiSelect IBM QRadar No 0
Destination IPV6 destinationipv6 multiSelect Common Types No 0
Destination IPs destinationips multiSelect Common Types No 0
Destination MAC Address destinationmacaddress multiSelect Common Types No 0
Destination Network destinationnetwork shortText Common Types No 0
Destination Network - Offense destinationnetworkoffense multiSelect IBM QRadar No 0
Destination Networks destinationnetworks multiSelect Common Types No 0
Destination Port destinationport shortText Common Types No 0
Destination Ports destinationports shortText Port Scan No 0
Destination Zone Name destinationzonename multiSelect Core Alert Fields No 0
Detected Endpoints detectedendpoints shortText Common Types No 0
Detected External Hosts detectedexternalhosts shortText Common Types No 0
Detected External IPs detectedexternalips shortText Common Types No 0
Detected IPs detectedips multiSelect Common Types No 0
Detected Internal Hosts detectedinternalhosts shortText Common Types No 0
Detected Internal IPs detectedinternalips shortText Common Types No 0
Detected User detecteduser multiSelect Common Types No 0
Detected Users detectedusers shortText Common Types No 0
Detection End Time detectionendtime date Common Types No 0
Detection ID detectionid number Common Types No 0
Detection SLA detectionsla timer Common Types No 0
Detection Ticketed detectionticketed boolean ExtraHop Reveal(x) No 0
Detection URL detectionurl url Common Types No 0
Detection Update Time detectionupdatetime date Common Types No 0
DevSecOps After Commit ID devsecopsaftercommitid shortText DevSecOps No 0
DevSecOps Analysis ID devsecopsanalysisid shortText DevSecOps No 0
DevSecOps App Task Action devsecopsapptaskaction shortText DevSecOps No 0
DevSecOps App Task App ID devsecopsapptaskappid shortText DevSecOps No 0
DevSecOps App Task App Name devsecopsapptaskappname shortText DevSecOps No 0
DevSecOps App Task Completed At devsecopsapptaskcompletedat shortText DevSecOps No 0
DevSecOps App Task Conclusion devsecopsapptaskconclusion shortText DevSecOps No 0
DevSecOps App Task Head Commit devsecopsapptaskheadcommit shortText DevSecOps No 0
DevSecOps App Task Id devsecopsapptaskid shortText DevSecOps No 0
DevSecOps App Task Name devsecopsapptaskname shortText DevSecOps No 0
DevSecOps App Task Output Summary devsecopsapptaskoutputsummary shortText DevSecOps No 0
DevSecOps App Task Output Title devsecopsapptaskoutputtitle shortText DevSecOps No 0
DevSecOps App Task Owner Login devsecopsapptaskownerlogin shortText DevSecOps No 0
DevSecOps App Task PR ID devsecopsapptaskprid shortText DevSecOps No 0
DevSecOps App Task PR Number devsecopsapptaskprnumber shortText DevSecOps No 0
DevSecOps App Task Started At devsecopsapptaskstartedat shortText DevSecOps No 0
DevSecOps App Task Status devsecopsapptaskstatus shortText DevSecOps No 0
DevSecOps Before Commit ID devsecopsbeforecommitid shortText DevSecOps No 0
DevSecOps CodeQL Alerts devsecopscodeqlalerts shortText DevSecOps No 0
DevSecOps Commit Author devsecopscommitauthor shortText DevSecOps No 0
DevSecOps Commit Committer devsecopscommitcommitter shortText DevSecOps No 0
DevSecOps Commit ID devsecopscommitid shortText DevSecOps No 0
DevSecOps Commit Message devsecopscommitmessage shortText DevSecOps No 0
DevSecOps Commit Modified Files devsecopscommitmodifiedfiles shortText DevSecOps No 0
DevSecOps Commit TimeStamp devsecopscommittimestamp shortText DevSecOps No 0
DevSecOps Commit Tree ID devsecopscommittreeid shortText DevSecOps No 0
DevSecOps Commit URL devsecopscommiturl shortText DevSecOps No 0
DevSecOps Developer Email devsecopsdeveloperemail shortText DevSecOps No 0
DevSecOps Developer Name devsecopsdevelopername shortText DevSecOps No 0
DevSecOps Git Issue Details devsecopsgitissuedetails shortText DevSecOps No 0
DevSecOps Git Issue Number devsecopsgitissuenumber shortText DevSecOps No 0
DevSecOps Git Pusher Name devsecopsgitpushername shortText DevSecOps No 0
DevSecOps Head Commit Author devsecopsheadcommitauthor shortText DevSecOps No 0
DevSecOps Head Commit Commiter devsecopsheadcommitcommiter shortText DevSecOps No 0
DevSecOps Head Commit ID devsecopsheadcommitid shortText DevSecOps No 0
DevSecOps Head Commit Message devsecopsheadcommitmessage shortText DevSecOps No 0
DevSecOps Head Commit TimeStamp devsecopsheadcommittimestamp shortText DevSecOps No 0
DevSecOps Head Commit Tree ID devsecopsheadcommittreeid shortText DevSecOps No 0
DevSecOps Head Commit URL devsecopsheadcommiturl shortText DevSecOps No 0
DevSecOps IaC Vulnerability devsecopsiacvulnerability shortText DevSecOps No 0
DevSecOps IaC Vulnerability Description devsecopsiacvulnerabilitydescription shortText DevSecOps No 0
DevSecOps IaC Vulnerability Severity devsecopsiacvulnerabilityseverity shortText DevSecOps No 0
DevSecOps IaC Vulnerable Files devsecopsiacvulnerablefiles shortText DevSecOps No 0
DevSecOps LGTM Analysis ID devsecopslgtmanalysisid shortText DevSecOps No 0
DevSecOps LGTM Analysis Logs URL devsecopslgtmanalysislogsurl shortText DevSecOps No 0
DevSecOps LGTM Analysis Project ID devsecopslgtmanalysisprojectid shortText DevSecOps No 0
DevSecOps LGTM Analysis Results URL devsecopslgtmanalysisresultsurl shortText DevSecOps No 0
DevSecOps LGTM Analysis Status devsecopslgtmanalysisstatus shortText DevSecOps No 0
DevSecOps LGTM Project Config devsecopslgtmprojectconfig shortText DevSecOps No 0
DevSecOps LGTM Project Grade devsecopslgtmprojectgrade shortText DevSecOps No 0
DevSecOps LGTM Project ID devsecopslgtmprojectid shortText DevSecOps No 0
DevSecOps LGTM Project Language devsecopslgtmprojectlanguage shortText DevSecOps No 0
DevSecOps LGTM Project Name devsecopslgtmprojectname shortText DevSecOps No 0
DevSecOps LGTM Project Status devsecopslgtmprojectstatus shortText DevSecOps No 0
DevSecOps LGTM Project URL devsecopslgtmprojecturl shortText DevSecOps No 0
DevSecOps Language devsecopslanguage shortText DevSecOps No 0
DevSecOps Organization Name devsecopsorganizationname shortText DevSecOps No 0
DevSecOps PR Action devsecopspraction shortText DevSecOps No 0
DevSecOps PR Additions devsecopspradditions shortText DevSecOps No 0
DevSecOps PR Assignee devsecopsprassignee shortText DevSecOps No 0
DevSecOps PR Assignees devsecopsprassignees shortText DevSecOps No 0
DevSecOps PR Base Label devsecopsprbaselabel shortText DevSecOps No 0
DevSecOps PR Base Size devsecopsprbasesize shortText DevSecOps No 0
DevSecOps PR Body devsecopsprbody shortText DevSecOps No 0
DevSecOps PR Branch devsecopsprbranch shortText DevSecOps No 0
DevSecOps PR Changed Files devsecopsprchangedfiles shortText DevSecOps No 0
DevSecOps PR Closed At devsecopsprclosedat shortText DevSecOps No 0
DevSecOps PR Comments devsecopsprcomments shortText DevSecOps No 0
DevSecOps PR Commits devsecopsprcommits shortText DevSecOps No 0
DevSecOps PR Created At devsecopsprcreatedat shortText DevSecOps No 0
DevSecOps PR Deletions devsecopsprdeletions shortText DevSecOps No 0
DevSecOps PR Head Commit devsecopsprheadcommit shortText DevSecOps No 0
DevSecOps PR Head ID devsecopsprheadid shortText DevSecOps No 0
DevSecOps PR Head Open Issues devsecopsprheadopenissues shortText DevSecOps No 0
DevSecOps PR ID devsecopsprid shortText DevSecOps No 0
DevSecOps PR Installation ID devsecopsprinstallationid shortText DevSecOps No 0
DevSecOps PR Mergeable State devsecopsprmergeablestate shortText DevSecOps No 0
DevSecOps PR Number devsecopsprnumber shortText DevSecOps No 0
DevSecOps PR Pushed At devsecopsprpushedat shortText DevSecOps No 0
DevSecOps PR Size devsecopsprsize shortText DevSecOps No 0
DevSecOps PR State devsecopsprstate shortText DevSecOps No 0
DevSecOps PR Title devsecopsprtitle shortText DevSecOps No 0
DevSecOps PR Updated At devsecopsprupdatedat shortText DevSecOps No 0
DevSecOps PR Watchers devsecopsprwatchers shortText DevSecOps No 0
DevSecOps Project ID devsecopsprojectid shortText DevSecOps No 0
DevSecOps Repository ID devsecopsrepositoryid shortText DevSecOps No 0
DevSecOps Repository Name devsecopsrepositoryname shortText DevSecOps No 0
DevSecOps Repository Organization devsecopsrepositoryorganization shortText DevSecOps No 0
DevSecOps Repository URL devsecopsrepositoryurl shortText DevSecOps No 0
Device External IP deviceexternalip shortText Common Types No 0
Device External IPs deviceexternalips multiSelect Common Types No 0
Device G-Suite Account Status devicegsuiteaccountstatus singleSelect Employee Offboarding No 0
Device Group Id devicegroupid shortText FireMon Security Manager No 0
Device Hash devicehash shortText Common Types No 0
Device Id deviceid shortText Common Types No 0
Device Internal IPs deviceinternalips multiSelect Common Types No 0
Device Local IP devicelocalip shortText Common Types No 0
Device MAC Address devicemacaddress multiSelect Common Types No 0
Device Model devicemodel shortText Common Types No 0
Device Name devicename shortText Common Types No 0
Device OS Name deviceosname multiSelect Common Types No 0
Device OS Version deviceosversion multiSelect Common Types No 0
Device OU deviceou multiSelect Common Types No 0
Device Status devicestatus shortText Common Types No 0
Device Time devicetime multiSelect Common Types No 0
Device Username deviceusername shortText Common Types No 0
Digital Guardian ARC UID digitalguardianarcuid shortText Digital Guardian No 0
Digital Guardian Activity digitalguardianactivity shortText Digital Guardian No 0
Digital Guardian Alarm Name digitalguardianalarmname shortText Digital Guardian No 0
Digital Guardian Attachment Filename digitalguardianattachmentfilename shortText Digital Guardian No 0
Digital Guardian Classification digitalguardianclassification shortText Digital Guardian No 0
Digital Guardian Command line digitalguardiancommandline shortText Digital Guardian No 0
Digital Guardian Computer Name digitalguardiancomputername shortText Digital Guardian No 0
Digital Guardian Destination Address digitalguardiandestinationaddress shortText Digital Guardian No 0
Digital Guardian Destination DNS Domain digitalguardiandestinationdnsdomain shortText Digital Guardian No 0
Digital Guardian Email Recipient digitalguardianemailrecipient shortText Digital Guardian No 0
Digital Guardian Email Sender digitalguardianemailsender shortText Digital Guardian No 0
Digital Guardian Email Subject digitalguardianemailsubject shortText Digital Guardian No 0
Digital Guardian Filename digitalguardianfilename shortText Digital Guardian No 0
Digital Guardian Parent Process Name digitalguardianparentprocessname shortText Digital Guardian No 0
Digital Guardian Policy digitalguardianpolicy shortText Digital Guardian No 0
Digital Guardian Process Name digitalguardianprocessname shortText Digital Guardian No 0
Digital Guardian Remote Port digitalguardianremoteport shortText Digital Guardian No 0
Digital Guardian Sensitivity digitalguardiansensitivity shortText Digital Guardian No 0
Digital Guardian Source Address digitalguardiansourceaddress shortText Digital Guardian No 0
Digital Guardian Source IP digitalguardiansourceip shortText Digital Guardian No 0
Digital Guardian Threat Type digitalguardianthreattype shortText Digital Guardian No 0
Digital Guardian Username digitalguardianusername shortText Digital Guardian No 0
Discovery Remediation Products discoveryremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Display Name displayname shortText Common Types No 0
Domain domain shortText Core Alert Fields No 0
Domain - Offense domainoffense shortText IBM QRadar No 0
Domain Id domainid number FireMon Security Manager No 0
Domain Name domainname multiSelect Common Types No 0
Domain Registrar Abuse Email domainregistrarabuseemail shortText Common Types No 0
Domain Squatting Result domainsquattingresult markdown Common Types No 0
Domain Updated Date domainupdateddate shortText Common Types No 0
DomainToolsIrisDetect domaintoolsirisdetect grid DomainTools Iris Detect No 0
Doppel Brand doppelbrand shortText Doppel No 0
Doppel Entity doppelentity url Doppel No 0
Doppel Entity Content doppelentitycontent grid Doppel No 0
Doppel Entity State doppelentitystate singleSelect Doppel No 0
Doppel Link doppellink url Doppel No 0
Doppel Notes doppelnotes shortText Doppel No 0
Doppel Platform doppelplatform shortText Doppel No 0
Doppel Product doppelproduct singleSelect Doppel No 0
Doppel Queue State doppelqueuestate singleSelect Doppel No 0
Doppel Screenshot URL doppelscreenshoturl url Doppel No 0
Doppel Uploaded By doppeluploadedby shortText Doppel No 0
Dst Ports dstports multiSelect Common Types No 0
Dsts dsts multiSelect Common Types No 0
Duo Account Status duoaccountstatus singleSelect Employee Offboarding No 0
Duo Message duomessage shortText DuoAuth No 0
Duo Message 2 duomessage2 shortText DuoAuth No 0
Duo Status duostatus shortText DuoAuth No 0
Duo Status 2 duostatus2 shortText DuoAuth No 0
Duration duration shortText Common Types No 0
E-mail Address emailaddress shortText Common Scripts No 0
Edgescan Altered score edgescanalteredscore shortText Edgescan No 0
Edgescan CVES edgescancves shortText Edgescan No 0
Edgescan CVSS Score edgescancvssscore shortText Edgescan No 0
Edgescan CVSS V2 Score edgescancvssv2score shortText Edgescan No 0
Edgescan CVSS V2 Vector edgescancvssv2vector shortText Edgescan No 0
Edgescan CVSS Vector edgescancvssvector shortText Edgescan No 0
Edgescan CVSS Version edgescancvssversion shortText Edgescan No 0
Edgescan Confidence edgescanconfidence shortText Edgescan No 0
Edgescan Layer edgescanlayer shortText Edgescan No 0
Edgescan PCI Compliance Status edgescanpcicompliancestatus shortText Edgescan No 0
Edgescan Risk edgescanrisk number Edgescan No 0
Elasticsearch Event info elasticsearcheventinfo shortText Elasticsearch No 0
Elasticsearch Host elasticsearchhost shortText Elasticsearch No 0
Elasticsearch Machine elasticsearchmachine shortText Elasticsearch No 0
Elasticsearch Source elasticsearchsource shortText Elasticsearch No 0
Elasticsearch Timestamp elasticsearchtimestamp shortText Elasticsearch No 0
Elasticsearch index elasticsearchindex shortText Elasticsearch No 0
Email email shortText Common Types No 0
Email Authenticity Check emailauthenticitycheck singleSelect Phishing No 0
Email Auto-reply emailautoreply singleSelect Employee Offboarding No 0
Email BCC emailbcc shortText Phishing No 0
Email Body emailbody longText Phishing No 0
Email Body Format emailbodyformat shortText Phishing No 0
Email Body HTML emailbodyhtml html Phishing No 0
Email CC emailcc shortText Phishing No 0
Email Classification emailclassification singleSelect Phishing No 0
Email Client Name emailclientname shortText Phishing No 0
Email Delete From Brand emaildeletefrombrand singleSelect Phishing No 0
Email Delete Reason emaildeletereason shortText Phishing No 0
Email Delete Result emaildeleteresult shortText Phishing No 0
Email Delete Type emaildeletetype singleSelect Phishing No 0
Email From emailfrom shortText Phishing No 0
Email Generated Code emailgeneratedcode shortText Email Communication No 0
Email Generated Codes emailgeneratedcodes longText Email Communication No 0
Email HTML emailhtml longText Phishing No 0
Email HTML Image emailhtmlimage longText Phishing No 0
Email Headers emailheaders grid Phishing No 0
Email In Reply To emailinreplyto shortText Phishing No 0
Email Internal Message ID emailinternalmessageid shortText Phishing No 0
Email Keywords emailkeywords shortText Phishing No 0
Email Keywords Found emailkeywordsfound tagsSelect Phishing No 0
Email Labels emaillabels shortText Phishing No 0
Email Latest Message emaillatestmessage shortText Phishing No 0
Email Message ID emailmessageid shortText Phishing No 0
Email New Attachment emailnewattachment attachments Email Communication No 0
Email New Body emailnewbody markdown Email Communication No 0
Email New Recipients emailnewrecipients shortText Email Communication No 0
Email New Subject emailnewsubject shortText Email Communication No 0
Email Queue ID emailqueueid shortText PhishingAlerts No 0
Email Received emailreceived shortText Phishing No 0
Email Recipient emailrecipient multiSelect Core Alert Fields No 0
Email Recipients Count emailrecipientscount number Phishing No 0
Email Reply To emailreplyto shortText Phishing No 0
Email Return Path emailreturnpath shortText Phishing No 0
Email Selected Thread emailselectedthread shortText Email Communication No 0
Email Sender emailsender multiSelect Core Alert Fields No 0
Email Sender IP emailsenderip shortText Phishing No 0
Email Sent Successfully emailsentsuccessfully boolean Common Types No 0
Email Size emailsize number Phishing No 0
Email Source emailsource shortText Phishing No 0
Email Source Domain emailsourcedomain shortText PhishingAlerts No 0
Email Subject emailsubject multiSelect Core Alert Fields No 0
Email Subject emailsubject shortText Phishing No 0
Email To emailto shortText Phishing No 0
Email To Count emailtocount shortText Phishing No 0
Email URL Clicked emailurlclicked shortText Phishing No 0
EmailCampaignCanvas emailcampaigncanvas markdown Common Types No 0
EmailCampaignMutualIndicators emailcampaignmutualindicators markdown Common Types No 0
EmailCampaignSnippets emailcampaignsnippets markdown Common Types No 0
EmailCampaignSummary emailcampaignsummary markdown Common Types No 0
Employee Display Name employeedisplayname shortText Common Types No 0
Employee Email employeeemail shortText Common Types No 0
Employee Manager Email employeemanageremail shortText Common Types No 0
End Time endtime shortText Common Types No 0
End-User Interactiveness enduserinteractiveness markdown Use Case Builder No 0
Endpoint endpoint grid Common Types No 0
Endpoint Isolation Status endpointisolationstatus shortText Common Types No 0
Endpoints Details endpointsdetails markdown Common Types No 0
Enrichment enrichment markdown Use Case Builder No 0
Entity ID entityid shortText XM Cyber No 0
Entity IP Address entityipaddress shortText XM Cyber No 0
Entity is a critical asset entityisacriticalasset boolean XM Cyber No 0
Entity name entityname shortText XM Cyber No 0
Entity report entityreport url XM Cyber No 0
Entity type entitytype shortText XM Cyber No 0
Eradication Task Count eradicationtaskcount shortText Rapid Breach Response No 0
Error Code errorcode shortText Common Types No 0
Error Message errormessage longText Common Types No 0
Escalation escalation shortText Common Types No 0
Event Action eventaction singleSelect Common Types No 0
Event Descriptions eventdescriptions multiSelect Common Types No 0
Event ID eventid shortText Common Types No 0
Event Names eventnames multiSelect Common Types No 0
Event Type eventtype shortText Common Types No 0
Event Type eventtype multiSelect Core Alert Fields No 0
Events events multiSelect Common Types No 0
Exabeam Average Risk Score exabeamaverageriskscore number Exabeam Advanced Analytics No 0
Exabeam Destination Hosts exabeamdestinationhosts multiSelect Exabeam Security Operations Platform No 0
Exabeam Highest Session Login Host exabeamhighestsessionloginhost shortText Exabeam Advanced Analytics No 0
Exabeam Highest Session Number Of Asset exabeamhighestsessionnumberofasset number Exabeam Advanced Analytics No 0
Exabeam Highest Session Number Of Reasons exabeamhighestsessionnumberofreasons number Exabeam Advanced Analytics No 0
Exabeam Id exabeamid shortText Exabeam Advanced Analytics No 0
Exabeam Last Activity Time exabeamlastactivitytime date Exabeam Advanced Analytics No 0
Exabeam Last Activity Type exabeamlastactivitytype shortText Exabeam Advanced Analytics No 0
Exabeam Past Scores exabeampastscores multiSelect Exabeam Advanced Analytics No 0
Exabeam Products exabeamproducts multiSelect Exabeam Security Operations Platform No 0
Exabeam Queue exabeamqueue shortText Exabeam Advanced Analytics No 0
Exabeam Rules exabeamrules grid Exabeam Security Operations Platform No 0
Exabeam Session IDs exabeamsessionids multiSelect Exabeam Advanced Analytics No 0
Exabeam Source Hosts exabeamsourcehosts multiSelect Exabeam Security Operations Platform No 0
Exabeam Vendors exabeamvendors multiSelect Exabeam Security Operations Platform No 0
Exactly what happened, and at what times? exactlywhathappenedandatwhattimes shortText NIST No 0
Excluded excluded boolean Core Alert Fields No 0
Executed Remediation Summary Description executedremediationsummarydescription markdown MITRE ATT&CK - Courses of Action No 0
Execution Remediation Products executionremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Exfiltrated Files exfiltratedfiles longText Code42 No 0
Exfiltration Remediation Products exfiltrationremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Expanse Activity Status expanseactivitystatus singleSelect Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Asset expanseasset grid Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Asset Organization Unit expanseassetorganizationunit shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Asset Owner expanseassetowner shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Assignee expanseassignee shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Behavior Rule expansebehaviorrule shortText Expanse (Deprecated) No 0
Expanse Business Unit expansebusinessunit shortText Expanse (Deprecated) No 0
Expanse Business Units expansebusinessunits tagsSelect Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Category expansecategory shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Certificate expansecertificate shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Cloud Management Status expansecloudmanagementstatus tagsSelect Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Created expansecreated date Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Domain expansedomain shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Exposure Type expanseexposuretype shortText Expanse (Deprecated) No 0
Expanse Geolocation expansegeolocation grid Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse IP expanseip shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Initial Evidence expanseinitialevidence longText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Issue ID expanseissueid shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Issue Type expanseissuetype shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Latest Evidence expanselatestevidence longText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse ML Features expansemlfeatures shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Modified expansemodified date Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Port expanseport number Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Priority expansepriority singleSelect Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Progress Status expanseprogressstatus singleSelect Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Protocol expanseprotocol shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Provider expanseprovider shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Region expanseregion shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Service expanseservice shortText Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Severity expanseseverity shortText Expanse (Deprecated) No 0
Expanse Shadow IT expanseshadowit boolean Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
Expanse Tags expansetags tagsSelect Cortex Xpanse by Palo Alto Networks (Deprecated) No 0
ExpanseRawJSONEvent expanserawjsonevent shortText Expanse (Deprecated) No 0
Exposure Level exposurelevel shortText Common Types No 0
External Addresses externaladdresses shortText Common Types No 0
External Category ID externalcategoryid multiSelect Common Types No 0
External Category Name externalcategoryname multiSelect Common Types No 0
External Confidence externalconfidence multiSelect Common Types No 0
External End Time externalendtime date Common Types No 0
External ID externalid shortText Common Types No 0
External Last Updated Time externallastupdatedtime date Common Types No 0
External Link externallink url Common Types No 0
External Severity externalseverity multiSelect Common Types No 0
External Start Time externalstarttime date Common Types No 0
External Status externalstatus multiSelect Common Types No 0
External Sub Category ID externalsubcategoryid multiSelect Common Types No 0
External Sub Category Name externalsubcategoryname multiSelect Common Types No 0
External System ID externalsystemid multiSelect Common Types No 0
ExtraHop Appliance ID extrahopapplianceid number ExtraHop Reveal(x) No 0
ExtraHop Hostname extrahophostname shortText ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Detection Devices extrahoprevealxdetectiondevices grid ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Detection ID extrahoprevealxdetectionid number ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Detection Participants extrahoprevealxdetectionparticipants grid ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Detection Status extrahoprevealxdetectionstatus shortText ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Detection Type extrahoprevealxdetectiontype shortText ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) End Time extrahoprevealxendtime number ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Mitre Tactics extrahoprevealxmitretactics grid ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Mitre Techniques extrahoprevealxmitretechniques grid ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Mod Time extrahoprevealxmodtime number ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Properties extrahoprevealxproperties longText ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Resolution extrahoprevealxresolution shortText ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Risk Score extrahoprevealxriskscore number ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Start Time extrahoprevealxstarttime number ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) Update Time extrahoprevealxupdatetime number ExtraHop Reveal(x) No 0
ExtraHop Reveal(x) User Created extrahoprevealxusercreated boolean ExtraHop Reveal(x) No 0
F5 Silveline Security Policy Name f5silvelinesecuritypolicyname shortText F5 Silverline No 0
F5 Silverline Action f5silverlineaction shortText F5 Silverline No 0
F5 Silverline Action Reason f5silverlineactionreason shortText F5 Silverline No 0
F5 Silverline Alert Type f5silverlinealerttype shortText F5 Silverline No 0
F5 Silverline Attack Signature ID f5silverlineattacksignatureid shortText F5 Silverline No 0
F5 Silverline Attack Signature Name f5silverlineattacksignaturename shortText F5 Silverline No 0
F5 Silverline Attack Type f5silverlineattacktype shortText F5 Silverline No 0
F5 Silverline Backend Server IP f5silverlinebackendserverip shortText F5 Silverline No 0
F5 Silverline Backend Server Port f5silverlinebackendserverport shortText F5 Silverline No 0
F5 Silverline Client IP f5silverlineclientip shortText F5 Silverline No 0
F5 Silverline Client Port f5silverlineclientport shortText F5 Silverline No 0
F5 Silverline Context Name f5silverlinecontextname shortText F5 Silverline No 0
F5 Silverline DOS Attack Latency f5silverlinedosattacklatency shortText F5 Silverline No 0
F5 Silverline DOS Attack TPS f5silverlinedosattacktps shortText F5 Silverline No 0
F5 Silverline DOS Baseline Latency f5silverlinedosbaselinelatency shortText F5 Silverline No 0
F5 Silverline DOS Baseline TPS f5silverlinedosbaselinetps shortText F5 Silverline No 0
F5 Silverline DOS Detection Threshold f5silverlinedosdetectionthreshold shortText F5 Silverline No 0
F5 Silverline Data f5silverlinedata longText F5 Silverline No 0
F5 Silverline Detected Usernames f5silverlinedetectedusernames shortText F5 Silverline No 0
F5 Silverline Flow ID f5silverlineflowid shortText F5 Silverline No 0
F5 Silverline Geo Location Source IP f5silverlinegeolocationsourceip shortText F5 Silverline No 0
F5 Silverline HTTP Class Name f5silverlinehttpclassname shortText F5 Silverline No 0
F5 Silverline HTTP Method f5silverlinehttpmethod shortText F5 Silverline No 0
F5 Silverline HTTP Strings Detected f5silverlinehttpstringsdetected shortText F5 Silverline No 0
F5 Silverline IP Intelligence Event f5silverlineipintelligenceevent shortText F5 Silverline No 0
F5 Silverline IP Intelligence Policy Name f5silverlineipintelligencepolicyname shortText F5 Silverline No 0
F5 Silverline IRule Log Level f5silverlineiruleloglevel shortText F5 Silverline No 0
F5 Silverline IRule Log Type f5silverlineirulelogtype shortText F5 Silverline No 0
F5 Silverline IRule Name f5silverlineirulename shortText F5 Silverline No 0
F5 Silverline IRule Version f5silverlineiruleversion shortText F5 Silverline No 0
F5 Silverline Message Number f5silverlinemessagenumber shortText F5 Silverline No 0
F5 Silverline Message Originator Source IP f5silverlinemessageoriginatorsourceip shortText F5 Silverline No 0
F5 Silverline Message Type f5silverlinemessagetype shortText F5 Silverline No 0
F5 Silverline Mitigate Threshold f5silverlinemitigatethreshold shortText F5 Silverline No 0
F5 Silverline Proxy ID f5silverlineproxyid shortText F5 Silverline No 0
F5 Silverline Raw Message f5silverlinerawmessage longText F5 Silverline No 0
F5 Silverline Request Side f5silverlinerequestside shortText F5 Silverline No 0
F5 Silverline Request Status f5silverlinerequeststatus shortText F5 Silverline No 0
F5 Silverline Response Code f5silverlineresponsecode shortText F5 Silverline No 0
F5 Silverline Route Domain f5silverlineroutedomain shortText F5 Silverline No 0
F5 Silverline SA Translation Pool f5silverlinesatranslationpool shortText F5 Silverline No 0
F5 Silverline SA Translation Type f5silverlinesatranslationtype shortText F5 Silverline No 0
F5 Silverline SNAT IP f5silverlinesnatip shortText F5 Silverline No 0
F5 Silverline SNAT Port f5silverlinesnatport shortText F5 Silverline No 0
F5 Silverline Security Policy update timestamp f5silverlinesecuritypolicyupdatetimestamp shortText F5 Silverline No 0
F5 Silverline Security Severity f5silverlinesecurityseverity shortText F5 Silverline No 0
F5 Silverline Service ID f5silverlineserviceid shortText F5 Silverline No 0
F5 Silverline Staged Signature IDs f5silverlinestagedsignatureids shortText F5 Silverline No 0
F5 Silverline Staged Signature Names f5silverlinestagedsignaturenames shortText F5 Silverline No 0
F5 Silverline Sub Violations f5silverlinesubviolations shortText F5 Silverline No 0
F5 Silverline TMM Unit f5silverlinetmmunit number F5 Silverline No 0
F5 Silverline Targeted URI f5silverlinetargeteduri shortText F5 Silverline No 0
F5 Silverline Threat identifier f5silverlinethreatidentifier shortText F5 Silverline No 0
F5 Silverline Translated Dest IP f5silverlinetranslateddestip shortText F5 Silverline No 0
F5 Silverline Translated Dest Port f5silverlinetranslateddestport shortText F5 Silverline No 0
F5 Silverline Translated IP Protocol f5silverlinetranslatedipprotocol shortText F5 Silverline No 0
F5 Silverline Translated Route Domain f5silverlinetranslatedroutedomain shortText F5 Silverline No 0
F5 Silverline Translated Source IP f5silverlinetranslatedsourceip shortText F5 Silverline No 0
F5 Silverline Translated Source Port f5silverlinetranslatedsourceport shortText F5 Silverline No 0
F5 Silverline Translated Vlan f5silverlinetranslatedvlan shortText F5 Silverline No 0
F5 Silverline Violation Security Support ID f5silverlineviolationsecuritysupportid shortText F5 Silverline No 0
F5 Silverline Violation Timestamp f5silverlineviolationtimestamp shortText F5 Silverline No 0
F5 Silverline Violations Details f5silverlineviolationsdetails longText F5 Silverline No 0
F5 Silverline Violations Types f5silverlineviolationstypes shortText F5 Silverline No 0
F5 Silverline Virtual Server IP f5silverlinevirtualserverip shortText F5 Silverline No 0
F5 Silverline Virtual Server Name f5silverlinevirtualservername longText F5 Silverline No 0
F5 Silverline Virtual Server Port f5silverlinevirtualserverport shortText F5 Silverline No 0
F5 Silverline Web Application Name f5silverlinewebapplicationname shortText F5 Silverline No 0
F5 Silverline X-Forwarded f5silverlinexforwarded shortText F5 Silverline No 0
F5 Silverline support ID f5silverlinesupportid shortText F5 Silverline No 0
FAERE Description faeredescription html NTT Cyber Threat Sensor No 0
FW Name fwname multiSelect Core Alert Fields No 0
FW Rule ID fwruleid multiSelect Core Alert Fields No 0
FW Rule Name fwrulename multiSelect Core Alert Fields No 0
FW Serial Number fwserialnumber multiSelect Core Alert Fields No 0
Failed Logon Events failedlogonevents number Common Types No 0
Failed Logon Events Timeframe failedlogoneventstimeframe shortText Common Types No 0
File Access Date fileaccessdate shortText Common Types No 0
File Blocking Profile Name fileblockingprofilename shortText MITRE ATT&CK - Courses of Action No 0
File Blocking Profile Status fileblockingprofilestatus shortText MITRE ATT&CK - Courses of Action No 0
File Blocking Rules fileblockingrules shortText MITRE ATT&CK - Courses of Action No 0
File Creation Date filecreationdate shortText Common Types No 0
File Hash filehash shortText Common Types No 0
File Hash Blocked filehashblocked boolean Port Scan No 0
File MD5 filemd5 multiSelect Common Types No 0
File MD5 filemd5 multiSelect Core Alert Fields No 0
File Macro SHA256 filemacrosha256 multiSelect Core Alert Fields No 0
File Name filename shortText Common Types No 0
File Name filename multiSelect Core Alert Fields No 0
File Names filenames multiSelect Common Types No 0
File Path filepath shortText Common Types No 0
File Paths filepaths multiSelect Common Types No 0
File Relationships filerelationships grid Common Types No 0
File SHA1 filesha1 multiSelect Common Types No 0
File SHA256 filesha256 multiSelect Common Types No 0
File SHA256 filesha256 multiSelect Core Alert Fields No 0
File Size filesize shortText Common Types No 0
File Upload fileupload attachments Common Types No 0
File path filepath multiSelect Core Alert Fields No 0
Financial information breached financialinformationbreached shortText Common Scripts No 0
FireEye Alert Infection ID fireeyealertinfectionid shortText FireEye Common Fields No 0
FireEye Alert Malicious fireeyealertmalicious shortText FireEye Common Fields No 0
FireEye Alert Vlan fireeyealertvlan shortText FireEye Common Fields No 0
FireEye C2 Address fireeyec2address shortText FireEye Common Fields No 0
FireEye C2 Channel fireeyec2channel shortText FireEye Common Fields No 0
FireEye C2 Host fireeyec2host shortText FireEye Common Fields No 0
FireEye C2 Port fireeyec2port shortText FireEye Common Fields No 0
FireEye C2 Protocol fireeyec2protocol shortText FireEye Common Fields No 0
FireEye Domain Name fireeyedomainname shortText FireEye Common Fields No 0
FireEye Download At fireeyefireeyedownloadat shortText FireEye Common Fields No 0
FireEye Email Queue ID fireeyeemailqueueid shortText FireEye Common Fields No 0
FireEye Email Source Domain fireeyeemailsourcedomain shortText FireEye Common Fields No 0
FireEye HX Agent Containment State fireeyehxagentcontainmentstate shortText FireEye HX No 0
FireEye HX Event Info fireeyehxeventinfo shortText FireEye HX No 0
FireEye Infection ID fireeyeinfectionid shortText FireEye Common Fields No 0
FireEye Infection URL fireeyeinfectionurl shortText FireEye Common Fields No 0
FireEye Malware Info fireeyemalwareinfo grid FireEye Common Fields No 0
FireEye Malware Information fireeyemalwareinformation markdown FireEye Common Fields No 0
FireEye Match Count fireeyematchcount shortText FireEye Common Fields No 0
FireEye Matched Time fireeyematchedtime date FireEye Common Fields No 0
FireEye NX Alert Action fireeyenxalertaction shortText FireEye Network Security (NX) No 0
FireEye NX Alert ID fireeyenxalertid number FireEye Network Security (NX) No 0
FireEye NX Alert Malware Name fireeyenxalertmalwarename shortText FireEye Network Security (NX) No 0
FireEye NX Alert SC Version fireeyenxalertscversion shortText FireEye Network Security (NX) No 0
FireEye NX Alert Target IP fireeyenxalerttargetip shortText FireEye Network Security (NX) No 0
FireEye NX Alert Target MAC Address fireeyenxalerttargetmacaddress shortText FireEye Network Security (NX) No 0
FireEye NX Alert Target Port fireeyenxalerttargetport shortText FireEye Network Security (NX) No 0
FireEye NX Alert Type fireeyenxalerttype singleSelect FireEye Network Security (NX) No 0
FireEye NX Alert URL fireeyenxalerturl url FireEye Network Security (NX) No 0
FireEye NX Alert UUID fireeyenxalertuuid shortText FireEye Network Security (NX) No 0
FireEye NX Alert Victim IP fireeyenxalertvictimip shortText FireEye Network Security (NX) No 0
FireEye NX Alert Victim MAC Address fireeyenxalertvictimmacaddress shortText FireEye Network Security (NX) No 0
FireEye NX Alert Victim Port fireeyenxalertvictimport shortText FireEye Network Security (NX) No 0
FireEye NX Event Attacker IP fireeyenxeventattackerip shortText FireEye Network Security (NX) No 0
FireEye NX Event CVE ID fireeyenxeventcveid shortText FireEye Network Security (NX) No 0
FireEye NX Event Destination MAC Address fireeyenxeventdestinationmacaddress shortText FireEye Network Security (NX) No 0
FireEye NX Event Destination Port fireeyenxeventdestinationport shortText FireEye Network Security (NX) No 0
FireEye NX Event ID fireeyenxeventid number FireEye Network Security (NX) No 0
FireEye NX Event Rule fireeyenxeventrule shortText FireEye Network Security (NX) No 0
FireEye NX Event Source MAC Address fireeyenxeventsourcemacaddress shortText FireEye Network Security (NX) No 0
FireEye NX Event Victim IP fireeyenxeventvictimip shortText FireEye Network Security (NX) No 0
FireEye NX Event Victim Port fireeyenxeventvictimport shortText FireEye Network Security (NX) No 0
FireEye Signature fireeyesignature shortText FireEye Common Fields No 0
FireEye Signature ID fireeyesignatureid shortText FireEye Common Fields No 0
FireEye Signature Revision fireeyesignaturerevision shortText FireEye Common Fields No 0
FireEye Submitted At fireeyesubmittedat shortText FireEye Common Fields No 0
First Name firstname shortText Common Types No 0
First Seen firstseen shortText Common Types No 0
Flashpoint Affected Domain flashpointaffecteddomain shortText Flashpoint No 0
Flashpoint Alert ID flashpointalertid shortText Flashpoint No 0
Flashpoint Alert Text flashpointalerttext html Flashpoint No 0
Flashpoint Basetypes flashpointbasetypes multiSelect Flashpoint No 0
Flashpoint Breach Source flashpointbreachsource shortText Flashpoint No 0
Flashpoint Breach Source Type flashpointbreachsourcetype shortText Flashpoint No 0
Flashpoint Compromised Email flashpointcompromisedemail shortText Flashpoint No 0
Flashpoint Compromised Password flashpointcompromisedpassword shortText Flashpoint No 0
Flashpoint Container flashpointcontainer markdown Flashpoint No 0
Flashpoint Created Date flashpointcreateddate date Flashpoint No 0
Flashpoint Data Type flashpointdatatype shortText Flashpoint No 0
Flashpoint Entity ID flashpointentityid shortText Flashpoint No 0
Flashpoint Entity Name flashpointentityname shortText Flashpoint No 0
Flashpoint Entity Type flashpointentitytype shortText Flashpoint No 0
Flashpoint First Observed Date flashpointfirstobserveddate date Flashpoint No 0
Flashpoint Generated Date flashpointgenerateddate date Flashpoint No 0
Flashpoint Header Indexed At Date flashpointheaderindexedatdate date Flashpoint No 0
Flashpoint ID flashpointid shortText Flashpoint No 0
Flashpoint Image Safe Search flashpointimagesafesearch markdown Flashpoint No 0
Flashpoint Is Fresh flashpointisfresh boolean Flashpoint No 0
Flashpoint Keyword Text flashpointkeywordtext shortText Flashpoint No 0
Flashpoint Last Observed Date flashpointlastobserveddate date Flashpoint No 0
Flashpoint Link to Alert flashpointlinktoalert url Flashpoint No 0
Flashpoint Media Storage URI flashpointmediastorageuri shortText Flashpoint No 0
Flashpoint Media Type flashpointmediatype shortText Flashpoint No 0
Flashpoint Mime Type flashpointmimetype shortText Flashpoint No 0
Flashpoint Native ID flashpointnativeid shortText Flashpoint No 0
Flashpoint Parent Basetypes flashpointparentbasetypes multiSelect Flashpoint No 0
Flashpoint Parent Data Type flashpointparentdatatype shortText Flashpoint No 0
Flashpoint Password Information flashpointpasswordinformation grid Flashpoint No 0
Flashpoint Password Probable Hash Algorithms flashpointpasswordprobablehashalgorithms shortText Flashpoint No 0
Flashpoint Phash flashpointphash shortText Flashpoint No 0
Flashpoint Ports flashpointports html Flashpoint No 0
Flashpoint Read Status flashpointreadstatus boolean Flashpoint No 0
Flashpoint Reason ID flashpointreasonid shortText Flashpoint No 0
Flashpoint Reason Name flashpointreasonname shortText Flashpoint No 0
Flashpoint Reason Origin flashpointreasonorigin shortText Flashpoint No 0
Flashpoint Reason Sources flashpointreasonsources multiSelect Flashpoint No 0
Flashpoint Reason Text flashpointreasontext shortText Flashpoint No 0
Flashpoint Reason Type flashpointreasontype shortText Flashpoint No 0
Flashpoint Resource URL flashpointresourceurl url Flashpoint No 0
Flashpoint Services flashpointservices html Flashpoint No 0
Flashpoint Shodan Host flashpointshodanhost markdown Flashpoint No 0
Flashpoint Site Actor Name flashpointsiteactorname shortText Flashpoint No 0
Flashpoint Site Actor Names flashpointsiteactornames shortText Flashpoint No 0
Flashpoint Site Name flashpointsitename shortText Flashpoint No 0
Flashpoint Site Native ID flashpointsitenativeid shortText Flashpoint No 0
Flashpoint Site Title flashpointsitetitle shortText Flashpoint No 0
Flashpoint Sort Date flashpointsortdate date Flashpoint No 0
Flashpoint Source flashpointsource shortText Flashpoint No 0
Flashpoint Source Basetypes flashpointsourcebasetypes shortText Flashpoint No 0
Flashpoint Source Domain flashpointsourcedomain shortText Flashpoint No 0
Flashpoint Source File flashpointsourcefile shortText Flashpoint No 0
Flashpoint Source ID flashpointsourceid shortText Flashpoint No 0
Flashpoint Source Name flashpointsourcename shortText Flashpoint No 0
Flashpoint Source Owner flashpointsourceowner shortText Flashpoint No 0
Flashpoint Source Repo flashpointsourcerepo shortText Flashpoint No 0
Flashpoint Source Snippet flashpointsourcesnippet html Flashpoint No 0
Flashpoint Source Sort Date flashpointsourcesortdate date Flashpoint No 0
Flashpoint Source URL flashpointsourceurl shortText Flashpoint No 0
Flashpoint Status flashpointstatus shortText Flashpoint No 0
Flashpoint Title flashpointtitle shortText Flashpoint No 0
Flashpoint Victim flashpointvictim shortText Flashpoint No 0
Follow Up followup boolean Common Types No 0
Forescout EyeInspect Engine forescouteyeinspectengine shortText Forescout EyeInspect No 0
Forescout EyeInspect L2 Protocol forescouteyeinspectl2protocol shortText Forescout EyeInspect No 0
Forescout EyeInspect L3 Protocol forescouteyeinspectl3protocol shortText Forescout EyeInspect No 0
Forescout EyeInspect L4 Protocol forescoutleyeinspectl4protocol shortText Forescout EyeInspect No 0
Forescout EyeInspect L7 Protocol forescouteyeinspectl7protocol shortText Forescout EyeInspect No 0
Forescout EyeInspect Sensor ID forescouteyeinspectsensorid shortText Forescout EyeInspect No 0
FortiSIEM Attack Tactics fortisiemattacktactics grid FortiSIEM No 0
FortiSIEM Destination User fortisiemdestinationuser shortText FortiSIEM No 0
FortiSIEM Event Type fortisiemeventtype shortText FortiSIEM No 0
FortiSIEM Events fortisiemevents grid FortiSIEM No 0
FortiSIEM Events Count fortisiemeventscount number FortiSIEM No 0
FortiSIEM Incident First Seen fortisiemincidentfirstseen date FortiSIEM No 0
FortiSIEM Incident ID fortisiemincidentid number FortiSIEM No 0
FortiSIEM Incident Last Seen fortisiemincidentlastseen date FortiSIEM No 0
FortiSIEM Incident Report Device Name fortisiemincidentreportdevicename shortText FortiSIEM No 0
FortiSIEM Incident Reporter IP fortisiemincidentreporterip shortText FortiSIEM No 0
FortiSIEM Incident Severity fortisiemincidentseverity number FortiSIEM No 0
FortiSIEM Resolution Status fortisiemresolutionstatus shortText FortiSIEM No 0
FortiSIEM Status fortisiemstatus shortText FortiSIEM No 0
FraudWatch Abuse Type fraudwatchabusetype shortText FraudWatch PhishPortal No 0
FraudWatch Abuse URL fraudwatchabuseurl url FraudWatch PhishPortal No 0
FraudWatch Additional URLs fraudwatchadditionalurls longText FraudWatch PhishPortal No 0
FraudWatch Brand fraudwatchbrand shortText FraudWatch PhishPortal No 0
FraudWatch Reference ID fraudwatchreferenceid shortText FraudWatch PhishPortal No 0
Freestyle Hunt freestylehunt shortText Proactive Threat Hunting No 0
FreshworksFreshservice Agent ID freshworksfreshserviceagentid shortText Freshworks Freshservice No 0
FreshworksFreshservice Analysis Fields freshworksfreshserviceanalysisfields shortText Freshworks Freshservice No 0
FreshworksFreshservice Approval Status freshworksfreshserviceapprovalstatus shortText Freshworks Freshservice No 0
FreshworksFreshservice Assets freshworksfreshserviceassets grid Freshworks Freshservice No 0
FreshworksFreshservice Attachments freshworksfreshserviceattachments grid Freshworks Freshservice No 0
FreshworksFreshservice Category freshworksfreshservicecategory shortText Freshworks Freshservice No 0
FreshworksFreshservice Change Status freshworksfreshservicechangestatus singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Change Type freshworksfreshservicechangetype singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Custom Fields freshworksfreshservicecustomfields shortText Freshworks Freshservice No 0
FreshworksFreshservice Deleted freshworksfreshservicedeleted boolean Freshworks Freshservice No 0
FreshworksFreshservice Department ID freshworksfreshservicedepartmentid shortText Freshworks Freshservice No 0
FreshworksFreshservice Due By freshworksfreshservicedueby shortText Freshworks Freshservice No 0
FreshworksFreshservice Group ID freshworksfreshservicegroupid shortText Freshworks Freshservice No 0
FreshworksFreshservice Impact freshworksfreshserviceimpact singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Impacted Services freshworksfreshserviceimpactedservices multiSelect Freshworks Freshservice No 0
FreshworksFreshservice Incident Type freshworksfreshserviceincidenttype shortText Freshworks Freshservice No 0
FreshworksFreshservice Item Category freshworksfreshserviceitemcategory shortText Freshworks Freshservice No 0
FreshworksFreshservice Known Error freshworksfreshserviceknownerror boolean Freshworks Freshservice No 0
FreshworksFreshservice Planned End Date freshworksfreshserviceplannedenddate date Freshworks Freshservice No 0
FreshworksFreshservice Planned Start Date freshworksfreshserviceplannedstartdate date Freshworks Freshservice No 0
FreshworksFreshservice Priority freshworksfreshservicepriority singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Problem Status freshworksfreshserviceproblemstatus singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Release ID freshworksfreshservicereleaseid shortText Freshworks Freshservice No 0
FreshworksFreshservice Release Status freshworksfreshservicereleasestatus singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Release Type freshworksfreshservicereleasetype singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Requester ID freshworksfreshservicerequesterid shortText Freshworks Freshservice No 0
FreshworksFreshservice Responder ID freshworksfreshserviceresponderid shortText Freshworks Freshservice No 0
FreshworksFreshservice Risk freshworksfreshservicerisk singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Source freshworksfreshservicesource shortText Freshworks Freshservice No 0
FreshworksFreshservice Spam freshworksfreshservicespam boolean Freshworks Freshservice No 0
FreshworksFreshservice Sub Category freshworksfreshservicesubcategory shortText Freshworks Freshservice No 0
FreshworksFreshservice Tags freshworksfreshservicetags multiSelect Freshworks Freshservice No 0
FreshworksFreshservice Task freshworksfreshservicetask grid Freshworks Freshservice No 0
FreshworksFreshservice Ticket Status freshworksfreshserviceticketstatus singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Ticket Type freshworksfreshservicetickettype shortText Freshworks Freshservice No 0
FreshworksFreshservice Urgency freshworksfreshserviceurgency singleSelect Freshworks Freshservice No 0
FreshworksFreshservice Workspace ID freshworksfreshserviceworkspaceid shortText Freshworks Freshservice No 0
Full Name fullname shortText Common Types No 0
GDPR Notify Authorities gdprnotifyauthorities timer Common Scripts No 0
GIB Address gibaddress shortText Group-IB Threat Intelligence No 0
GIB Admiralty Code gibadmiraltycode shortText Group-IB Threat Intelligence No 0
GIB Affected Software Table gibaffectedsoftwaretable grid Group-IB Threat Intelligence No 0
GIB Base Name gibbasename shortText Group-IB Threat Intelligence No 0
GIB Bulletin Family gibbulletinfamily shortText Group-IB Threat Intelligence No 0
GIB CNC gibcnc shortText Group-IB Threat Intelligence No 0
GIB CNC ASN gibcncasn shortText Group-IB Threat Intelligence No 0
GIB CNC City gibcnccity shortText Group-IB Threat Intelligence No 0
GIB CNC Country Code gibcnccountrycode shortText Group-IB Threat Intelligence No 0
GIB CNC Country Name gibcnccountryname shortText Group-IB Threat Intelligence No 0
GIB CNC Domain gibcncdomain shortText Group-IB Threat Intelligence No 0
GIB CNC IP gibcncip shortText Group-IB Threat Intelligence No 0
GIB CNC Port gibcncport number Group-IB Threat Intelligence No 0
GIB CNC Provider gibcncprovider shortText Group-IB Threat Intelligence No 0
GIB CNC Region gibcncregion shortText Group-IB Threat Intelligence No 0
GIB CNC URL gibcncurl url Group-IB Threat Intelligence No 0
GIB CPE Table gibcpetable grid Group-IB Threat Intelligence No 0
GIB CVSS Score gibcvssscore number Group-IB Threat Intelligence No 0
GIB CVSS Vector gibcvssvector shortText Group-IB Threat Intelligence No 0
GIB CVV gibcvv number Group-IB Threat Intelligence No 0
GIB Card BIN gibcardbin shortText Group-IB Threat Intelligence No 0
GIB Card Category gibcardcategory shortText Group-IB Threat Intelligence No 0
GIB Card Dump gibcarddump shortText Group-IB Threat Intelligence No 0
GIB Card Issuer gibcardissuer shortText Group-IB Threat Intelligence No 0
GIB Card Issuer Country Code gibcardissuercountrycode shortText Group-IB Threat Intelligence No 0
GIB Card Issuer Country Name gibcardissuercountryname shortText Group-IB Threat Intelligence No 0
GIB Card Number gibcardnumber shortText Group-IB Threat Intelligence No 0
GIB Card PIN gibcardpin shortText Group-IB Threat Intelligence No 0
GIB Card Type gibcardtype shortText Group-IB Threat Intelligence No 0
GIB Card Valid Thru gibcardvalidthru shortText Group-IB Threat Intelligence No 0
GIB Card Valid Thru Date gibcardvalidthrudate date Group-IB Threat Intelligence No 0
GIB Client ASN gibclientasn shortText Group-IB Threat Intelligence No 0
GIB Client City gibclientcity shortText Group-IB Threat Intelligence No 0
GIB Client Country Code gibclientcountrycode shortText Group-IB Threat Intelligence No 0
GIB Client Country Name gibclientcountryname shortText Group-IB Threat Intelligence No 0
GIB Client IP gibclientip shortText Group-IB Threat Intelligence No 0
GIB Client Provider gibclientprovider shortText Group-IB Threat Intelligence No 0
GIB Client Region gibclientregion shortText Group-IB Threat Intelligence No 0
GIB Compromised Account gibcompromisedaccount shortText Group-IB Threat Intelligence No 0
GIB Compromised Events Information Table gibcompromisedeventsinformationtable grid Group-IB Threat Intelligence No 0
GIB Compromised Events Table gibcompromisedeventstable grid Group-IB Threat Intelligence No 0
GIB Compromised Login gibcompromisedlogin shortText Group-IB Threat Intelligence No 0
GIB Country Code gibcountrycode shortText Group-IB Threat Intelligence No 0
GIB Country Name gibcountryname shortText Group-IB Threat Intelligence No 0
GIB Credibility gibcredibility number Group-IB Threat Intelligence No 0
GIB Cybercriminal Expertises gibcybercriminalexpertises multiSelect Group-IB Threat Intelligence No 0
GIB Cybercriminal Forums Table gibcybercriminalforumstable grid Group-IB Threat Intelligence No 0
GIB Cybercriminal Malware gibcybercriminalmalware multiSelect Group-IB Threat Intelligence No 0
GIB Cybercriminal Regions gibcybercriminalregions multiSelect Group-IB Threat Intelligence No 0
GIB Cybercriminal Sectors gibcybercriminalsectors multiSelect Group-IB Threat Intelligence No 0
GIB Cybercriminal Threat Actor Aliases gibcybercriminalthreatactoraliases multiSelect Group-IB Threat Intelligence No 0
GIB Cybercriminal Threat Actor Description gibcybercriminalthreatactordescription longText Group-IB Threat Intelligence No 0
GIB Cybercriminal Threat Actor Report Authors gibcybercriminalthreatactorreportauthors multiSelect Group-IB Threat Intelligence No 0
GIB Cybercriminal Threat Actor Reports Table gibcybercriminalthreatactorreportstable grid Group-IB Threat Intelligence No 0
GIB Cybercriminal Threat Description gibcybercriminalthreatdescription longText Group-IB Threat Intelligence No 0
GIB Cybercriminal Threat Title gibcybercriminalthreattitle shortText Group-IB Threat Intelligence No 0
GIB DDOS Date Begin gibddosdatebegin date Group-IB Threat Intelligence No 0
GIB DDOS Date End gibddosdateend date Group-IB Threat Intelligence No 0
GIB DDOS Date Registration gibddosdateregistration date Group-IB Threat Intelligence No 0
GIB DDOS Duration gibddosduration number Group-IB Threat Intelligence No 0
GIB DDOS Protocol gibddosprotocol shortText Group-IB Threat Intelligence No 0
GIB DDOS Request Body gibddosrequestbody shortText Group-IB Threat Intelligence No 0
GIB DDOS Request Body Hash gibddosrequestbodyhash shortText Group-IB Threat Intelligence No 0
GIB DDOS Request Data Link gibddosrequestdatalink url Group-IB Threat Intelligence No 0
GIB DDOS Request Headers Body gibddosrequestheadersbody longText Group-IB Threat Intelligence No 0
GIB DDOS Request Headers Hash gibddosrequestheadershash shortText Group-IB Threat Intelligence No 0
GIB DDOS Source gibddossource shortText Group-IB Threat Intelligence No 0
GIB DDOS Target ASN gibddostargetasn shortText Group-IB Threat Intelligence No 0
GIB DDOS Target Category gibddostargetcategory shortText Group-IB Threat Intelligence No 0
GIB DDOS Target City gibddostargetcity shortText Group-IB Threat Intelligence No 0
GIB DDOS Target Country Code gibddostargetcountrycode shortText Group-IB Threat Intelligence No 0
GIB DDOS Target Country Name gibddostargetcountryname shortText Group-IB Threat Intelligence No 0
GIB DDOS Target Domain gibddostargetdomain shortText Group-IB Threat Intelligence No 0
GIB DDOS Target IP gibddostargetip shortText Group-IB Threat Intelligence No 0
GIB DDOS Target Port gibddostargetport number Group-IB Threat Intelligence No 0
GIB DDOS Target Provider gibddostargetprovider shortText Group-IB Threat Intelligence No 0
GIB DDOS Target Region gibddostargetregion shortText Group-IB Threat Intelligence No 0
GIB DDOS Target URL gibddostargeturl url Group-IB Threat Intelligence No 0
GIB DDOS Type gibddostype shortText Group-IB Threat Intelligence No 0
GIB DRP Approve State gibdrpapprovestate shortText Group-IB Digital Risk Protection No 0
GIB DRP Approved gibdrpapproved date Group-IB Digital Risk Protection No 0
GIB DRP Brand gibdrpbrand shortText Group-IB Digital Risk Protection No 0
GIB DRP Company gibdrpcompany shortText Group-IB Digital Risk Protection No 0
GIB DRP Created gibdrpcreated date Group-IB Digital Risk Protection No 0
GIB DRP Current Status Date gibdrpcurrentstatusdate date Group-IB Digital Risk Protection No 0
GIB DRP Description gibdrpdescription longText Group-IB Digital Risk Protection No 0
GIB DRP Detected gibdrpdetected date Group-IB Digital Risk Protection No 0
GIB DRP First Active gibdrpfirstactive date Group-IB Digital Risk Protection No 0
GIB DRP First Detected gibdrpfirstdetected date Group-IB Digital Risk Protection No 0
GIB DRP First Solved gibdrpfirstsolved date Group-IB Digital Risk Protection No 0
GIB DRP Found gibdrpfound date Group-IB Digital Risk Protection No 0
GIB DRP HTML Images gibdrphtmlimages html Group-IB Digital Risk Protection No 0
GIB DRP ID gibdrpid shortText Group-IB Digital Risk Protection No 0
GIB DRP Images gibdrpimages attachments Group-IB Digital Risk Protection No 0
GIB DRP Link gibdrplink url Group-IB Digital Risk Protection No 0
GIB DRP Scores Table gibdrpscorestable grid Group-IB Digital Risk Protection No 0
GIB DRP Source gibdrpsource shortText Group-IB Digital Risk Protection No 0
GIB DRP Status gibdrpstatus shortText Group-IB Digital Risk Protection No 0
GIB DRP Tags gibdrptags multiSelect Group-IB Digital Risk Protection No 0
GIB DRP Title gibdrptitle shortText Group-IB Digital Risk Protection No 0
GIB DRP Type gibdrptype shortText Group-IB Digital Risk Protection No 0
GIB DRP Typosquatting Status gibdrptyposquattingstatus boolean Group-IB Digital Risk Protection No 0
GIB DRP Violation URI gibdrpviolationuri shortText Group-IB Digital Risk Protection No 0
GIB Data Hash gibdatahash shortText Group-IB Threat Intelligence No 0
GIB Date Add gibdateadd date Group-IB Threat Intelligence No 0
GIB Date Compromised gibdatecompromised date Group-IB Threat Intelligence No 0
GIB Date Created gibdatecreated date Group-IB Threat Intelligence No 0
GIB Date Created At gibdatecreatedat date Group-IB Threat Intelligence No 0
GIB Date Expired gibdateexpired date Group-IB Threat Intelligence No 0
GIB Date First Compromised gibdatefirstcompromised date Group-IB Threat Intelligence No 0
GIB Date First Seen gibdatefirstseen date Group-IB Threat Intelligence No 0
GIB Date Incident gibdateincident date Group-IB Threat Intelligence No 0
GIB Date Last Compromised gibdatelastcompromised date Group-IB Threat Intelligence No 0
GIB Date Last Seen gibdatelastseen date Group-IB Threat Intelligence No 0
GIB Date Modified gibdatemodified date Group-IB Threat Intelligence No 0
GIB Date Published gibdatepublished date Group-IB Threat Intelligence No 0
GIB Date Updated At gibdateupdatedat date Group-IB Threat Intelligence No 0
GIB Date of Detection gibdateofdetection date Group-IB Threat Intelligence No 0
GIB Deface Contacts gibdefacecontacts multiSelect Group-IB Threat Intelligence No 0
GIB Deface Date gibdefacedate date Group-IB Threat Intelligence No 0
GIB Deface Site URL gibdefacesiteurl url Group-IB Threat Intelligence No 0
GIB Deface Source gibdefacesource shortText Group-IB Threat Intelligence No 0
GIB Downloaded From gibdownloadedfrom markdown Group-IB Threat Intelligence No 0
GIB Downloaded From Table gibdownloadedfromtable grid Group-IB Threat Intelligence No 0
GIB Drop Email gibdropemail shortText Group-IB Threat Intelligence No 0
GIB Drop Email Domain gibdropemaildomain shortText Group-IB Threat Intelligence No 0
GIB Email gibemail shortText Group-IB Threat Intelligence No 0
GIB Email Domains gibemaildomains multiSelect Group-IB Threat Intelligence No 0
GIB Emails gibemails multiSelect Group-IB Threat Intelligence No 0
GIB Extended CVSS Base gibextendedcvssbase number Group-IB Threat Intelligence No 0
GIB Extended CVSS Exploitability gibextendedcvssexploitability number Group-IB Threat Intelligence No 0
GIB Extended CVSS Impact gibextendedcvssimpact number Group-IB Threat Intelligence No 0
GIB Extended CVSS Overall gibextendedcvssoverall number Group-IB Threat Intelligence No 0
GIB Extended CVSS Temporal gibextendedcvsstemporal number Group-IB Threat Intelligence No 0
GIB Extended Description gibextendeddescription longText Group-IB Threat Intelligence No 0
GIB Favicon gibfavicon url Group-IB Threat Intelligence No 0
GIB GIT Source gibgitsource shortText Group-IB Threat Intelligence No 0
GIB HTML gibhtml url Group-IB Threat Intelligence No 0
GIB Has Exploit gibhasexploit boolean Group-IB Threat Intelligence No 0
GIB Href gibhref url Group-IB Threat Intelligence No 0
GIB ID gibid shortText Group-IB Threat Intelligence No 0
GIB Inject Dump gibinjectdump longText Group-IB Threat Intelligence No 0
GIB Inject MD5 gibinjectmd5 shortText Group-IB Threat Intelligence No 0
GIB Is Dump gibisdump boolean Group-IB Threat Intelligence No 0
GIB Is Expired gibisexpired boolean Group-IB Threat Intelligence No 0
GIB Is Masked gibismasked boolean Group-IB Threat Intelligence No 0
GIB Is Tailored gibistailored tagsSelect Group-IB Threat Intelligence No 0
GIB Leak Name gibleakname shortText Group-IB Threat Intelligence No 0
GIB Leak Published gibleakpublished date Group-IB Threat Intelligence No 0
GIB Leaked Data gibleakeddata longText Group-IB Threat Intelligence No 0
GIB Leaked File Name gibleakedfilename shortText Group-IB Threat Intelligence No 0
GIB Link List giblinklist markdown Group-IB Threat Intelligence No 0
GIB Link List Table giblinklisttable grid Group-IB Threat Intelligence No 0
GIB Malware Aliases gibmalwarealiases multiSelect Group-IB Threat Intelligence No 0
GIB Malware CNC Domain gibmalwarecncdomain shortText Group-IB Threat Intelligence No 0
GIB Malware Categories gibmalwarecategories multiSelect Group-IB Threat Intelligence No 0
GIB Malware Description gibmalwaredescription longText Group-IB Threat Intelligence No 0
GIB Malware File hash gibmalwarefilehash multiSelect Group-IB Threat Intelligence No 0
GIB Malware ID gibmalwareid shortText Group-IB Threat Intelligence No 0
GIB Malware Langs gibmalwarelangs multiSelect Group-IB Threat Intelligence No 0
GIB Malware Name gibmalwarename shortText Group-IB Threat Intelligence No 0
GIB Malware Platforms gibmalwareplatforms multiSelect Group-IB Threat Intelligence No 0
GIB Malware Regions gibmalwareregions multiSelect Group-IB Threat Intelligence No 0
GIB Malware STIX GUID gibmalwarestixguid shortText Group-IB Threat Intelligence No 0
GIB Malware Short Description gibmalwareshortdescription longText Group-IB Threat Intelligence No 0
GIB Malware Source Countries gibmalwaresourcecountries multiSelect Group-IB Threat Intelligence No 0
GIB Malware Table gibmalwaretable grid Group-IB Threat Intelligence No 0
GIB Matches gibmatches markdown Group-IB Threat Intelligence No 0
GIB Matches Table gibmatchestable grid Group-IB Threat Intelligence No 0
GIB Merged Cvss gibmergedcvss number Group-IB Threat Intelligence No 0
GIB Mirror Link gibmirrorlink url Group-IB Threat Intelligence No 0
GIB Name Servers gibnameservers shortText Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminal Forums Table gibnationstatecybercriminalforumstable grid Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Expertises gibnationstatecybercriminalsexpertises multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Malware gibnationstatecybercriminalsmalware multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Regions gibnationstatecybercriminalsregions multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Sectors gibnationstatecybercriminalssectors multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor Aliases gibnationstatecybercriminalsthreatactoraliases multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor CVE gibnationstatecybercriminalsthreatactorcve multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor Country gibnationstatecybercriminalsthreatactorcountry shortText Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor Description gibnationstatecybercriminalsthreatactordescription longText Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor Goals gibnationstatecybercriminalsthreatactorgoals multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor Labels gibnationstatecybercriminalsthreatactorlabels multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor Reports Table gibnationstatecybercriminalsthreatactorreportstable grid Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Actor Roles gibnationstatecybercriminalsthreatactorroles multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Countries gibnationstatecybercriminalsthreatcountries shortText Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Description gibnationstatecybercriminalsthreatdescription longText Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Expertises gibnationstatecybercriminalsthreatexpertises multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Langs gibnationstatecybercriminalsthreatlangs multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Regions gibnationstatecybercriminalsthreatregions multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Report Number gibnationstatecybercriminalsthreatreportnumber shortText Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Sectors gibnationstatecybercriminalsthreatsectors multiSelect Group-IB Threat Intelligence No 0
GIB Nation-State Cybercriminals Threat Title gibnationstatecybercriminalsthreattitle shortText Group-IB Threat Intelligence No 0
GIB OSI Git Repository Files Table gibosigitrepositoryfilestable grid Group-IB Threat Intelligence No 0
GIB Organization BIC giborganizationbic shortText Group-IB Threat Intelligence No 0
GIB Organization BSB giborganizationbsb shortText Group-IB Threat Intelligence No 0
GIB Organization CLABE giborganizationclabe shortText Group-IB Threat Intelligence No 0
GIB Organization IBAN giborganizationiban shortText Group-IB Threat Intelligence No 0
GIB Organization Name giborganizationname shortText Group-IB Threat Intelligence No 0
GIB Organization SWIFT giborganizationswift shortText Group-IB Threat Intelligence No 0
GIB Owner Birthday gibownerbirthday shortText Group-IB Threat Intelligence No 0
GIB Owner City gibownercity shortText Group-IB Threat Intelligence No 0
GIB Owner Country Code gibownercountrycode shortText Group-IB Threat Intelligence No 0
GIB Owner Passport gibownerpassport shortText Group-IB Threat Intelligence No 0
GIB Owner State gibownerstate shortText Group-IB Threat Intelligence No 0
GIB Owner Tax Number gibownertaxnumber shortText Group-IB Threat Intelligence No 0
GIB Owner ZIP gibownerzip shortText Group-IB Threat Intelligence No 0
GIB Parsed Login Domain gibparsedlogindomain shortText Group-IB Threat Intelligence No 0
GIB Parsed Login IP gibparsedloginip shortText Group-IB Threat Intelligence No 0
GIB Password gibpassword shortText Group-IB Threat Intelligence No 0
GIB Passwords gibpasswords multiSelect Group-IB Threat Intelligence No 0
GIB Payment System gibpaymentsystem shortText Group-IB Threat Intelligence No 0
GIB Person gibperson shortText Group-IB Threat Intelligence No 0
GIB Phishing Brand gibphishingbrand shortText Group-IB Threat Intelligence No 0
GIB Phishing Date Added gibphishingdateadded date Group-IB Threat Intelligence No 0
GIB Phishing Date Blocked gibphishingdateblocked date Group-IB Threat Intelligence No 0
GIB Phishing Date Detected gibphishingdatedetected date Group-IB Threat Intelligence No 0
GIB Phishing Date Updated gibphishingdateupdated date Group-IB Threat Intelligence No 0
GIB Phishing Domain gibphishingdomain shortText Group-IB Threat Intelligence No 0
GIB Phishing Domain Expiration Date gibphishingdomainexpirationdate date Group-IB Threat Intelligence No 0
GIB Phishing Domain Puny gibphishingdomainpuny shortText Group-IB Threat Intelligence No 0
GIB Phishing IP Table gibphishingiptable grid Group-IB Threat Intelligence No 0
GIB Phishing Kit Email gibphishingkitemail multiSelect Group-IB Threat Intelligence No 0
GIB Phishing Kit Emails gibphishingkitemails shortText Group-IB Threat Intelligence No 0
GIB Phishing Kit Hash gibphishingkithash shortText Group-IB Threat Intelligence No 0
GIB Phishing Kit Path gibphishingkitpath url Group-IB Threat Intelligence No 0
GIB Phishing Kit Source gibphishingkitsource multiSelect Group-IB Threat Intelligence No 0
GIB Phishing Kit Table gibphishingkittable grid Group-IB Threat Intelligence No 0
GIB Phishing Objectives gibphishingobjectives multiSelect Group-IB Threat Intelligence No 0
GIB Phishing Registrar gibphishingregistrar shortText Group-IB Threat Intelligence No 0
GIB Phishing Sources gibphishingsources multiSelect Group-IB Threat Intelligence No 0
GIB Phishing Status gibphishingstatus shortText Group-IB Threat Intelligence No 0
GIB Phishing Type gibphishingtype shortText Group-IB Threat Intelligence No 0
GIB Phishing URLs gibphishingurls multiSelect Group-IB Threat Intelligence No 0
GIB Portal Link gibportallink url Group-IB Threat Intelligence No 0
GIB Price Currency gibpricecurrency shortText Group-IB Threat Intelligence No 0
GIB Price Value gibpricevalue number Group-IB Threat Intelligence No 0
GIB Provider Domain gibproviderdomain shortText Group-IB Threat Intelligence No 0
GIB Proxy Port gibproxyport number Group-IB Threat Intelligence No 0
GIB Proxy Source gibproxysource shortText Group-IB Threat Intelligence No 0
GIB Proxy Sources gibproxysources multiSelect Group-IB Threat Intelligence No 0
GIB Proxy Type gibproxytype shortText Group-IB Threat Intelligence No 0
GIB Related Indicators Data gibrelatedindicatorsdata longText Group-IB Threat Intelligence No 0
GIB Reliability gibreliability number Group-IB Threat Intelligence No 0
GIB Report Number gibreportnumber shortText Group-IB Threat Intelligence No 0
GIB Reporter gibreporter shortText Group-IB Threat Intelligence No 0
GIB Repository gibrepository shortText Group-IB Threat Intelligence No 0
GIB Revisions gibrevisions markdown Group-IB Threat Intelligence No 0
GIB SPD Events Table gibspdeventstable grid Group-IB Threat Intelligence No 0
GIB SPD Illegal Score gibspdillegalscore number Group-IB Threat Intelligence No 0
GIB SPD Malware Table gibspdmalwaretable grid Group-IB Threat Intelligence No 0
GIB SPD Owner Name gibspdownername shortText Group-IB Threat Intelligence No 0
GIB SPD Service Type gibspdservicetype shortText Group-IB Threat Intelligence No 0
GIB SPD Sources Table gibspdsourcestable grid Group-IB Threat Intelligence No 0
GIB SPD Threat Actor Table gibspdthreatactortable grid Group-IB Threat Intelligence No 0
GIB SPD Type gibspdtype shortText Group-IB Threat Intelligence No 0
GIB SPD Value gibspdvalue shortText Group-IB Threat Intelligence No 0
GIB Scanner Categories gibscannercategories multiSelect Group-IB Threat Intelligence No 0
GIB Scanner Sources gibscannersources multiSelect Group-IB Threat Intelligence No 0
GIB Screenshot gibscreenshot url Group-IB Threat Intelligence No 0
GIB Service Domain gibservicedomain shortText Group-IB Threat Intelligence No 0
GIB Service IP gibserviceip shortText Group-IB Threat Intelligence No 0
GIB Service URL gibserviceurl url Group-IB Threat Intelligence No 0
GIB Severity gibseverity shortText Group-IB Threat Intelligence No 0
GIB Socks Proxy Source gibsocksproxysource shortText Group-IB Threat Intelligence No 0
GIB Source gibsource shortText Group-IB Threat Intelligence No 0
GIB Source Link gibsourcelink shortText Group-IB Threat Intelligence No 0
GIB TLP gibtlp shortText Group-IB Threat Intelligence No 0
GIB TTL gibttl number Group-IB Threat Intelligence No 0
GIB Target ASN gibtargetasn shortText Group-IB Threat Intelligence No 0
GIB Target Brand gibtargetbrand shortText Group-IB Threat Intelligence No 0
GIB Target Category gibtargetcategory shortText Group-IB Threat Intelligence No 0
GIB Target City gibtargetcity shortText Group-IB Threat Intelligence No 0
GIB Target Domain gibtargetdomain shortText Group-IB Threat Intelligence No 0
GIB Target Domain Provider gibtargetdomainprovider shortText Group-IB Threat Intelligence No 0
GIB Target IP gibtargetip shortText Group-IB Threat Intelligence No 0
GIB Target Provider gibtargetprovider shortText Group-IB Threat Intelligence No 0
GIB Target Region gibtargetregion shortText Group-IB Threat Intelligence No 0
GIB Threat Actor Country gibthreatactorcountry shortText Group-IB Threat Intelligence No 0
GIB Threat Actor ID gibthreatactorid shortText Group-IB Threat Intelligence No 0
GIB Threat Actor Name gibthreatactorname shortText Group-IB Threat Intelligence No 0
GIB Threat Actor STIX GUID gibthreatactorstixguid shortText Group-IB Threat Intelligence No 0
GIB Threat Actor is APT gibthreatactorisapt boolean Group-IB Threat Intelligence No 0
GIB Threat Actors Table gibthreatactorstable grid Group-IB Threat Intelligence No 0
GIB Threat Level gibthreatlevel shortText Group-IB Threat Intelligence No 0
GIB Title gibtitle shortText Group-IB Threat Intelligence No 0
GIB Track gibtrack longText Group-IB Threat Intelligence No 0
GIB Update Time gibupdatetime date Group-IB Threat Intelligence No 0
GIB Upload Time gibuploadtime date Group-IB Threat Intelligence No 0
GIB VPN Names gibvpnnames multiSelect Group-IB Threat Intelligence No 0
GIB VPN Sources gibvpnsources multiSelect Group-IB Threat Intelligence No 0
GIB Victim IP gibvictimip shortText Group-IB Threat Intelligence No 0
GIB Vulnerability Type gibvulnerabilitytype shortText Group-IB Threat Intelligence No 0
GLPI Assigned To glpiassignedto shortText GLPI No 0
GLPI Assigned To Group glpiassignedtogroup shortText GLPI No 0
GLPI Category glpicategory shortText GLPI No 0
GLPI Closing Date glpiclosingdate shortText GLPI No 0
GLPI Description glpidescription html GLPI No 0
GLPI Impact glpiimpact singleSelect GLPI No 0
GLPI Internal Time To Own glpiinternaltimetoown shortText GLPI No 0
GLPI Internal Time To Resolve glpiinternaltimetoresolve shortText GLPI No 0
GLPI Opening Date glpiopeningdate shortText GLPI No 0
GLPI Priority glpipriority singleSelect GLPI No 0
GLPI Request Source glpirequestsource shortText GLPI No 0
GLPI Requester glpirequester shortText GLPI No 0
GLPI Requester Group glpirequestergroup shortText GLPI No 0
GLPI Solved Date glpisolveddate shortText GLPI No 0
GLPI Status glpistatus singleSelect GLPI No 0
GLPI Ticket ID glpiticketid shortText GLPI No 0
GLPI Time To Own glpitimetoown shortText GLPI No 0
GLPI Time To Resolve glpitimetoresolve shortText GLPI No 0
GLPI Type glpitype singleSelect GLPI No 0
GLPI Urgency glpiurgency singleSelect GLPI No 0
GLPI Watcher glpiwatcher shortText GLPI No 0
GLPI Watcher Group glpiwatchergroup shortText GLPI No 0
GRA Case gracase shortText Gurucul Risk Analytics No 0
GRA Case Anomaly Details gracaseanomalydetails grid Gurucul Risk Analytics No 0
GRA Case Entity gracaseentity shortText Gurucul Risk Analytics No 0
GRA Case Entity Id gracaseentityid shortText Gurucul Risk Analytics No 0
GRA Case Entity Type Id gracaseentitytypeid shortText Gurucul Risk Analytics No 0
GRA Case Open Date gracaseopendate shortText Gurucul Risk Analytics No 0
GRA Case Owner Id gracaseownerid shortText Gurucul Risk Analytics No 0
GRA Case Owner Name gracaseownername shortText Gurucul Risk Analytics No 0
GRA Case Owner Type gracaseownertype shortText Gurucul Risk Analytics No 0
GRA Case Risk Date gracaseriskdate shortText Gurucul Risk Analytics No 0
GRA Case Risk Score gracaseriskscore shortText Gurucul Risk Analytics No 0
GRA Case Status gracasestatus shortText Gurucul Risk Analytics No 0
GRA Case Weblink gracaseweblink url Gurucul Risk Analytics No 0
GSuiteSAC Alert ID gsuitesacalertid shortText G Suite Security Alert Center No 0
GSuiteSAC Alert Severity gsuitesacalertseverity shortText G Suite Security Alert Center No 0
GSuiteSAC Alert Source gsuitesacalertsource shortText G Suite Security Alert Center No 0
GSuiteSAC Alert Status gsuitesacalertstatus shortText G Suite Security Alert Center No 0
GSuiteSAC Alert Type gsuitesacalerttype shortText G Suite Security Alert Center No 0
GSuiteSAC Create Time gsuitesaccreatetime shortText G Suite Security Alert Center No 0
GSuiteSAC Customer ID gsuitesaccustomerid shortText G Suite Security Alert Center No 0
GSuiteSAC Deleted gsuitesacdeleted shortText G Suite Security Alert Center No 0
GSuiteSAC End Time gsuitesacendtime shortText G Suite Security Alert Center No 0
GSuiteSAC Etag gsuitesacetag shortText G Suite Security Alert Center No 0
GSuiteSAC Feedback Create Time gsuitesacfeedbackcreatetime shortText G Suite Security Alert Center No 0
GSuiteSAC Feedback Email gsuitesacfeedbackemail shortText G Suite Security Alert Center No 0
GSuiteSAC Feedback ID gsuitesacfeedbackid shortText G Suite Security Alert Center No 0
GSuiteSAC Feedback Type gsuitesacfeedbacktype shortText G Suite Security Alert Center No 0
GSuiteSAC Security Investigation Tool Link gsuitesacsecurityinvestigationtoollink shortText G Suite Security Alert Center No 0
GSuiteSAC Start Time gsuitesacstarttime shortText G Suite Security Alert Center No 0
GSuiteSAC Update Time gsuitesacupdatetime shortText G Suite Security Alert Center No 0
GTI ASM Issue Alias Group gtiasmissuealiasgroup shortText GoogleThreatIntelligence No 0
GTI ASM Issue Category gtiasmissuecategory shortText GoogleThreatIntelligence No 0
GTI ASM Issue Collection gtiasmissuecollection shortText GoogleThreatIntelligence No 0
GTI ASM Issue Collection Type gtiasmissuecollectiontype shortText GoogleThreatIntelligence No 0
GTI ASM Issue Collection UUID gtiasmissuecollectionuuid shortText GoogleThreatIntelligence No 0
GTI ASM Issue Confidence gtiasmissueconfidence shortText GoogleThreatIntelligence No 0
GTI ASM Issue Dynamic ID gtiasmissuedynamicid shortText GoogleThreatIntelligence No 0
GTI ASM Issue Entity Name gtiasmissueentityname url GoogleThreatIntelligence No 0
GTI ASM Issue Entity Type gtiasmissueentitytype shortText GoogleThreatIntelligence No 0
GTI ASM Issue Entity UID gtiasmissueentityuid shortText GoogleThreatIntelligence No 0
GTI ASM Issue First Seen gtiasmissuefirstseen date GoogleThreatIntelligence No 0
GTI ASM Issue Identifiers gtiasmissueidentifiers grid GoogleThreatIntelligence No 0
GTI ASM Issue Last Seen gtiasmissuelastseen date GoogleThreatIntelligence No 0
GTI ASM Issue Name gtiasmissuename shortText GoogleThreatIntelligence No 0
GTI ASM Issue Organization UUID gtiasmissueorganizationuuid shortText GoogleThreatIntelligence No 0
GTI ASM Issue Scoped gtiasmissuescoped boolean GoogleThreatIntelligence No 0
GTI ASM Issue Status gtiasmissuestatus shortText GoogleThreatIntelligence No 0
GTI ASM Issue Status New gtiasmissuestatusnew shortText GoogleThreatIntelligence No 0
GTI ASM Issue Status New Detailed gtiasmissuestatusnewdetailed shortText GoogleThreatIntelligence No 0
GTI ASM Issue Ticket List gtiasmissueticketlist multiSelect GoogleThreatIntelligence No 0
GTI ASM Issue UID gtiasmissueuid shortText GoogleThreatIntelligence No 0
GTI ASM Issue UUID gtiasmissueuuid shortText GoogleThreatIntelligence No 0
GTI ASM Issue Upstream gtiasmissueupstream shortText GoogleThreatIntelligence No 0
GTI DTM Alert AI Doc Summary gtidtmalertaidocsummary longText GoogleThreatIntelligence No 0
GTI DTM Alert Aggregation ID gtidtmalertaggregationid shortText GoogleThreatIntelligence No 0
GTI DTM Alert Analysis gtidtmalertanalysis longText GoogleThreatIntelligence No 0
GTI DTM Alert Attachments gtidtmalertattachments grid GoogleThreatIntelligence No 0
GTI DTM Alert Confidence Score gtidtmalertconfidencescore number GoogleThreatIntelligence No 0
GTI DTM Alert Created At gtidtmalertcreatedat date GoogleThreatIntelligence No 0
GTI DTM Alert Doc Body gtidtmalertdocbody html GoogleThreatIntelligence No 0
GTI DTM Alert Doc Description gtidtmalertdocdescription longText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Details gtidtmalertdocdetails markdown GoogleThreatIntelligence No 0
GTI DTM Alert Doc Domain gtidtmalertdocdomain shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc ID gtidtmalertdocid shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Ingested Time gtidtmalertdocingestedtime date GoogleThreatIntelligence No 0
GTI DTM Alert Doc Item Type gtidtmalertdocitemtype shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Language gtidtmalertdoclanguage shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Message ID gtidtmalertdocmessageid shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Paste ID gtidtmalertdocpasteid shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Post Date gtidtmalertdocpostdate date GoogleThreatIntelligence No 0
GTI DTM Alert Doc Raw Text gtidtmalertdocrawtext html GoogleThreatIntelligence No 0
GTI DTM Alert Doc Similar Domains gtidtmalertdocsimilardomains multiSelect GoogleThreatIntelligence No 0
GTI DTM Alert Doc Source gtidtmalertdocsource shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Subject gtidtmalertdocsubject shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Timestamp gtidtmalertdoctimestamp date GoogleThreatIntelligence No 0
GTI DTM Alert Doc Title gtidtmalertdoctitle shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Topic ID gtidtmalertdoctopicid shortText GoogleThreatIntelligence No 0
GTI DTM Alert Doc Type gtidtmalertdoctype shortText GoogleThreatIntelligence No 0
GTI DTM Alert Email Sent At gtidtmalertemailsentat shortText GoogleThreatIntelligence No 0
GTI DTM Alert Has Analysis gtidtmalerthasanalysis boolean GoogleThreatIntelligence No 0
GTI DTM Alert Indicator Malicious Score gtidtmalertindicatormaliciousscore number GoogleThreatIntelligence No 0
GTI DTM Alert Labels gtidtmalertlabels grid GoogleThreatIntelligence No 0
GTI DTM Alert Monitor ID gtidtmalertmonitorid shortText GoogleThreatIntelligence No 0
GTI DTM Alert Monitor Name gtidtmalertmonitorname shortText GoogleThreatIntelligence No 0
GTI DTM Alert Monitor Version gtidtmalertmonitorversion number GoogleThreatIntelligence No 0
GTI DTM Alert Similarity Score gtidtmalertsimilarityscore number GoogleThreatIntelligence No 0
GTI DTM Alert Status gtidtmalertstatus shortText GoogleThreatIntelligence No 0
GTI DTM Alert Summary gtidtmalertsummary longText GoogleThreatIntelligence No 0
GTI DTM Alert Topics gtidtmalerttopics grid GoogleThreatIntelligence No 0
GTI DTM Alert Type gtidtmalerttype shortText GoogleThreatIntelligence No 0
GTI DTM Alert Updated At gtidtmalertupdatedat date GoogleThreatIntelligence No 0
GTI RS Alert AI Summary gtirsalertaisummary markdown GoogleThreatIntelligence No 0
GTI RS Alert Audit Create Time gtirsalertauditcreatetime date GoogleThreatIntelligence No 0
GTI RS Alert Audit Creator gtirsalertauditcreator shortText GoogleThreatIntelligence No 0
GTI RS Alert Audit Update Time gtirsalertauditupdatetime date GoogleThreatIntelligence No 0
GTI RS Alert Audit Updater gtirsalertauditupdater shortText GoogleThreatIntelligence No 0
GTI RS Alert Configurations gtirsalertconfigurations multiSelect GoogleThreatIntelligence No 0
GTI RS Alert Data Leak Discovery Document IDs gtirsalertdataleakdiscoverydocumentids multiSelect GoogleThreatIntelligence No 0
GTI RS Alert Data Leak Severity gtirsalertdataleakseverity shortText GoogleThreatIntelligence No 0
GTI RS Alert Detail Type gtirsalertdetailtype shortText GoogleThreatIntelligence No 0
GTI RS Alert Display Name gtirsalertdisplayname shortText GoogleThreatIntelligence No 0
GTI RS Alert Duplicate Of gtirsalertduplicateof shortText GoogleThreatIntelligence No 0
GTI RS Alert Duplicated By gtirsalertduplicatedby multiSelect GoogleThreatIntelligence No 0
GTI RS Alert ETag gtirsalertetag shortText GoogleThreatIntelligence No 0
GTI RS Alert External ID gtirsalertexternalid shortText GoogleThreatIntelligence No 0
GTI RS Alert Finding Count gtirsalertfindingcount number GoogleThreatIntelligence No 0
GTI RS Alert Findings gtirsalertfindings multiSelect GoogleThreatIntelligence No 0
GTI RS Alert Initial Access Broker Discovery Document IDs gtirsalertinitialaccessbrokerdiscoverydocumentids multiSelect GoogleThreatIntelligence No 0
GTI RS Alert Initial Access Broker Severity gtirsalertinitialaccessbrokerseverity shortText GoogleThreatIntelligence No 0
GTI RS Alert Insider Threat Discovery Document IDs gtirsalertinsiderthreatdiscoverydocumentids multiSelect GoogleThreatIntelligence No 0
GTI RS Alert Insider Threat Severity gtirsalertinsiderthreatseverity shortText GoogleThreatIntelligence No 0
GTI RS Alert Name gtirsalertname shortText GoogleThreatIntelligence No 0
GTI RS Alert Priority Analysis Confidence gtirsalertpriorityanalysisconfidence shortText GoogleThreatIntelligence No 0
GTI RS Alert Priority Analysis Level gtirsalertpriorityanalysislevel shortText GoogleThreatIntelligence No 0
GTI RS Alert Priority Analysis Reasoning gtirsalertpriorityanalysisreasoning longText GoogleThreatIntelligence No 0
GTI RS Alert Relevance Common Themes gtirsalertrelevancecommonthemes multiSelect GoogleThreatIntelligence No 0
GTI RS Alert Relevance Confidence gtirsalertrelevanceconfidence shortText GoogleThreatIntelligence No 0
GTI RS Alert Relevance Distinct Themes gtirsalertrelevancedistinctthemes multiSelect GoogleThreatIntelligence No 0
GTI RS Alert Relevance Level gtirsalertrelevancelevel shortText GoogleThreatIntelligence No 0
GTI RS Alert Relevance Reasoning gtirsalertrelevancereasoning longText GoogleThreatIntelligence No 0
GTI RS Alert Relevance Relevant gtirsalertrelevancerelevant boolean GoogleThreatIntelligence No 0
GTI RS Alert Severity Analysis Confidence gtirsalertseverityanalysisconfidence shortText GoogleThreatIntelligence No 0
GTI RS Alert Severity Analysis Level gtirsalertseverityanalysislevel shortText GoogleThreatIntelligence No 0
GTI RS Alert Severity Analysis Reasoning gtirsalertseverityanalysisreasoning longText GoogleThreatIntelligence No 0
GTI RS Alert State gtirsalertstate singleSelect GoogleThreatIntelligence No 0
Gatewatcher AionIQ Active CTI case identifier gatewatcherioccaseid shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc campaigns gatewatcherioccampaigns multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc categories gatewatcherioccategories multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc color based level gatewatcherioctlp shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc creation date gatewatcherioccreationdate date Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc description gatewatcheriocdescription shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc external links gatewatcheriocexternallinks multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc families gatewatcheriocfamilies multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc kill chain phases gatewatcheriockillchainphases multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc metadata gatewatcheriocmetadata shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc package date gatewatcheriocpackagedate date Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc relations gatewatcheriocrelations multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc signature gatewatcheriocsignature shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc tactics techniques and procedures gatewatcheriocttp multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc tags gatewatcherioctags multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc targeted countries gatewatcherioctargetedcountries multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc targeted organizations gatewatcherioctargetedorganizations multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc targeted platforms gatewatcherioctargetedplatforms multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc targeted sectors gatewatcherioctargetedsectors multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc threat actors gatewatcheriocthreatactor multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc type gatewatcherioctype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc updated date gatewatcheriocupdateddate date Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc usage mode gatewatcheriocusagemode shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc value gatewatcheriocvalue shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Active CTI ioc vulnerabilities gatewatcheriocvulnerabilities multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Beacon Detect active beacon gatewatcherbeaconactive boolean Gatewatcher AionIQ No 0
Gatewatcher AionIQ Beacon Detect hostname resolution gatewatcherbeaconhostnameresolution shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Beacon Detect identifier gatewatcherbeaconid shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Beacon Detect mean time interval gatewatcherbeaconmeantimeinterval number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Beacon Detect possible cnc gatewatcherbeaconpossiblecnc shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Beacon Detect session count gatewatcherbeaconsessioncount number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Beacon Detect type gatewatcherbeacontype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DCE RPC call number gatewatcherdcerpccallid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DCE RPC request details gatewatcherdcerpcreq shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DCE RPC request type gatewatcherdcerpcrequest shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DCE RPC response details gatewatcherdcerpcres shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DCE RPC response type gatewatcherdcerpcresponse shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DCE RPC rpc version gatewatcherdcerpcrpcversion shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DGA Detect malware confidence percetage gatewatcherdgamalwarebehaviorconfidence number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DGA Detect number of NX domains gatewatcherdganxdomaincount number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DGA Detect number of dga gatewatcherdgadgacount number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DGA Detect ratio of number and NX domains gatewatcherdgadgaratio number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DGA Detect top 10 domains gatewatcherdgatopdga multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP DNS servers gatewatcherdhcpdnsservers multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP assigned IP gatewatcherdhcpassignedip shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP client IP gatewatcherdhcpclientip shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP client MAC gatewatcherdhcpclientmac shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP hostname gatewatcherdhcphostname shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP id gatewatcherdhcpid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP lease time gatewatcherdhcpleasetime number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP next server IP gatewatcherdhcpnextserverip shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP relay IP gatewatcherdhcprelayip shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP request type gatewatcherdhcptype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP routers gatewatcherdhcprouters multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP subnet mask gatewatcherdhcpsubnetmask shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DHCP type gatewatcherdhcpdhcptype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNP3 application gatewatcherdnp3application shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNP3 control gatewatcherdnp3control shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNP3 destination gatewatcherdnp3dst number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNP3 internal indication points gatewatcherdnp3iin shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNP3 request type gatewatcherdnp3type shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNP3 source gatewatcherdnp3src number Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNS answers gatewatcherdnsanswers shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNS authorities gatewatcherdnsauthorities multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNS request type gatewatcherdnstype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ DNS response type gatewatcherdnsresponsecode shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ FTP command gatewatcherftpcommand shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ FTP completion codes gatewatcherftpcompletioncode multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ FTP dynamic port gatewatcherftpdynamicport number Gatewatcher AionIQ No 0
Gatewatcher AionIQ FTP reply gatewatcherftpreply shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ FTP reply received gatewatcherftpreplyreceived shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ FTP reply truncated gatewatcherftpreplytruncated boolean Gatewatcher AionIQ No 0
Gatewatcher AionIQ GCap gatewatchergcap shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ GCap network interface gatewatchergcapinterface shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ GCenter gatewatchergcenter shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ GCenter WebUI link gatewatchergcenterwebui url Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP HTTP referer gatewatcherhttphttprefer url Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP HTTP2 details gatewatcherhttphttp2 shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP accept request header gatewatcherhttpaccept shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP date gatewatcherhttpdate date Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP hostname gatewatcherhttphostname shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP last modified gatewatcherhttplastmodified date Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP protocol gatewatcherhttpversion shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP request MIME type gatewatcherhttprequestmimetype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP request method gatewatcherhttprequestmethod shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP response MIME type gatewatcherhttpresponsemimetype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP response code gatewatcherhttpresponsestatus number Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 URL gatewatcherhttp2url url Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 exchange length gatewatcherhttp2length number Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 http2 details gatewatcherhttp2http2 shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 request headers gatewatcherhttp2requestheaders multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 request method gatewatcherhttp2httpmethod shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 response code gatewatcherhttp2status number Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 response headers gatewatcherhttp2responseheaders multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 user agent gatewatcherhttp2httpuseragent shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ HTTP2 version gatewatcherhttp2version number Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 algorithm Diffie Hellman group gatewatcherikev2algdh shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 algorithm Extended Sequence Numbers gatewatcherikev2esn shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 authentication algorithm gatewatcherikev2algauth shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 encryption algorithm gatewatcherikev2algenc shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 exchange type number gatewatcherikev2exchangetype number Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 initial Security Parameter Indexes gatewatcherikev2initspi shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 message id gatewatcherikev2messageid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 notify gatewatcherikev2notify multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 number of errors gatewatcherikev2errors number Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 payload gatewatcherikev2payload multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 preferred algorithm gatewatcherikev2algperf shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 responder Security Parameter Indexes gatewatcherikev2respspi shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 role gatewatcherikev2role shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 version major gatewatcherikev2versionmajor number Gatewatcher AionIQ No 0
Gatewatcher AionIQ IKEV2 version minor gatewatcherikev2versionminor number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Kerberos client name gatewatcherkrbcname shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Kerberos encryption algorithm gatewatcherkrbencryption shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Kerberos message type gatewatcherkrbmsgtype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Kerberos realm gatewatcherkrbrealm url Gatewatcher AionIQ No 0
Gatewatcher AionIQ Kerberos service name gatewatcherkrbsname shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Kerberos weak encryption gatewatcherkrbweakencryption boolean Gatewatcher AionIQ No 0
Gatewatcher AionIQ MQTT CONNACK gatewatchermqttconnack shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Malcore analysis result gatewatchermalcorestate shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Malcore engines last update gatewatchermalcoreengineslastupdatedate date Gatewatcher AionIQ No 0
Gatewatcher AionIQ Malcore file magic gatewatchermalcoremagicdetails shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Malcore ratio of engines on alert gatewatchermalcoretotalfound shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Malcore threat details gatewatchermalcoredetailthreatfound shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Malicious Powershell Detect characters score gatewatchermaliciouspowershellscore number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Malicious Powershell Detect probability of obfuscation gatewatchermaliciouspowershellprobaobfuscated number Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS exchange type gatewatchernfstype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS file transmission gatewatchernfsfiletx boolean Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS filename gatewatchernfsfilename shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS id gatewatchernfsid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS procedure gatewatchernfsprocedure shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS session hash gatewatchernfshhash shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS status gatewatchernfsstatus shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ NFS version gatewatchernfsversion number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics action policy gatewatchernbaaction shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics base64 packet gatewatchernbapacket shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics base64 payload gatewatchernbapayload shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics category gatewatchernbacategory shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics group id gatewatchernbagid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics metadata gatewatchernbametadata shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics readable payload gatewatchernbapayloadprintable shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics revision gatewatchernbarev number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics signature gatewatchernbasignature shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics signature id gatewatchernbasignatureid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Network Behavior Analytics stream gatewatchernbastream number Gatewatcher AionIQ No 0
Gatewatcher AionIQ RDP channels gatewatcherrdpchannels multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ RDP client info gatewatcherrdpclient shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ RDP exchange type gatewatcherrdpeventtype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ RDP transmission id gatewatcherrdptxid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ RFB authentication details gatewatcherrfbauthentication shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ RFB client protocol versions gatewatcherrfbclientprotocolversion shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ RFB server protocol versions gatewatcherrfbserverprotocolversion shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ RFB server security failure reason gatewatcherrfbserversecurityfailurereason shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Ransomware Detect alert threshold gatewatcherransomwarealertthreshold number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Ransomware Detect malicious confidence percentage gatewatcherransomwaremaliciousbehaviorconfidence number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Ransomware Detect session score gatewatcherransomwaresessionscore number Gatewatcher AionIQ No 0
Gatewatcher AionIQ Raw Event gatewatcherrawevent longText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SIP code gatewatchersipcode number Gatewatcher AionIQ No 0
Gatewatcher AionIQ SIP protocol version gatewatchersipversion shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SIP reason gatewatchersipreason shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SIP response text gatewatchersipresponseline shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB command gatewatchersmbcommand shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB exchange status gatewatchersmbstatus shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB exchange status code gatewatchersmbstatuscode shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB file UID gatewatchersmbfuid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB filename gatewatchersmbfilename shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB id gatewatchersmbid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB protocol version gatewatchersmbdialect shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB session id gatewatchersmbsessionid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB share gatewatchersmbshare shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMB tree id gatewatchersmbtreeid number Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMTP helo gatewatchersmtphelo url Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMTP mail from gatewatchersmtpmailfrom shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SMTP recipients gatewatchersmtprcptto multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ SNMP PDU type gatewatchersnmppdutype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SNMP commnunity gatewatchersnmpcomm shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SNMP variables gatewatchersnmpvars multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ SNMP version gatewatchersnmpversion number Gatewatcher AionIQ No 0
Gatewatcher AionIQ SSH client details gatewatchersshclient shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ SSH server details gatewatchersshserver shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Shellcode Detect detected encodings gatewatchershellcodeencodings multiSelect Gatewatcher AionIQ No 0
Gatewatcher AionIQ Shellcode Detect type gatewatchershellcodesubtype shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Sigflow action policy gatewatchersigflowaction shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Sigflow alert description gatewatchersigflowcategory shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Sigflow payload base64 gatewatchersigflowpayload shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Sigflow payload readable gatewatchersigflowpayloadprintable shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TFTP filename gatewatchertftpfile shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TFTP mode gatewatchertftpmode shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TFTP packet gatewatchertftppacket shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TLS JA3 fingerprint gatewatchertlsja3 shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TLS JA3S fingerprint gatewatchertlsja3s shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TLS SNI gatewatchertlssni shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TLS client details gatewatchertlsclient shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TLS protocol version gatewatchertlsversion shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TLS serial gatewatchertlsserial shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ TLS server details gatewatchertlsserver shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ Transport layer gatewatchernetworktransport shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ event module gatewatchereventmodule shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ file filename gatewatcherfilename shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ file hashes gatewatcherfilehash shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ file magic gatewatcherfilemagic shortText Gatewatcher AionIQ No 0
Gatewatcher AionIQ network flow id gatewatcherflowid number Gatewatcher AionIQ No 0
Gem Account Provider gemaccountprovider shortText Gem No 0
Gem Events Count gemeventscount number Gem No 0
Gem Main Entity ID gemmainentityid shortText Gem No 0
Gem Main Entity Name gemmainentityname shortText Gem No 0
Gem Main Entity Region gemmainentityregion shortText Gem No 0
Gem Main Entity Type gemmainentitytype shortText Gem No 0
Gem TTP ID gemttpid shortText Gem No 0
Gem Threat ID gemthreatid shortText Gem No 0
Gem Verdict gemverdict singleSelect Gem No 0
Generic Export Indicators Service Action genericexportindicatorsserviceaction singleSelect Generic Export Indicators Service No 0
Generic Export Indicators Service Indicators List genericexportindicatorsserviceindicatorslist longText Generic Export Indicators Service No 0
Generic Export Indicators Service Tag genericexportindicatorsservicetag shortText Generic Export Indicators Service No 0
Generic Export Indicators Service Type genericexportindicatorsserviceindicatortype singleSelect Generic Export Indicators Service No 0
Gigamon ThreatINSIGHT Category gigamonthreatinsightcategory shortText Gigamon ThreatINSIGHT No 0
Gigamon ThreatINSIGHT Confidence gigamonthreatinsightconfidence shortText Gigamon ThreatINSIGHT No 0
Gigamon ThreatINSIGHT Status gigamonthreatinsightstatus shortText Gigamon ThreatINSIGHT No 0
Given Name givenname shortText Common Types No 0
Global Directory Visibility globaldirectoryvisibility singleSelect Employee Offboarding No 0
Google Account Status googleaccountstatus singleSelect Employee Offboarding No 0
Google Admin Roles Status googleadminrolesstatus singleSelect Employee Offboarding No 0
Google Cloud SCC Organization ID googlecloudsccorganizationid shortText Google Cloud SCC No 0
Google Display Name googledisplayname shortText Employee Offboarding No 0
Google Dorking Data Classification googledorkingdataclassification singleSelect Google Dorking No 0
Google Dorking Data Owner googledorkingdataowner multiSelect Google Dorking No 0
Google Dorking Data Owner Mail googledorkingdataownermail multiSelect Google Dorking No 0
Google Drive Activity Added Parents googledriveactivityaddedparents grid Google Drive No 0
Google Drive Activity Added Permissions googledriveactivityaddedpermissions grid Google Drive No 0
Google Drive Activity Assigned Current User googledriveactivityassignedcurrentuser boolean Google Drive No 0
Google Drive Activity Assigned Deleted User googledriveactivityassigneddeleteduser boolean Google Drive No 0
Google Drive Activity Assigned Person Name googledriveactivityassignedpersonname shortText Google Drive No 0
Google Drive Activity Assigned Unknown User googledriveactivityassignedunknownuser boolean Google Drive No 0
Google Drive Activity Assignment Subtype googledriveactivityassignmentsubtype shortText Google Drive No 0
Google Drive Activity Copied Folder Type googledriveactivitycopiedfoldertype shortText Google Drive No 0
Google Drive Activity Copied Item Is File googledriveactivitycopieditemisfile boolean Google Drive No 0
Google Drive Activity Copied Item Name googledriveactivitycopieditemname shortText Google Drive No 0
Google Drive Activity Copied Item Title googledriveactivitycopieditemtitle shortText Google Drive No 0
Google Drive Activity Copied Shared Drive Name googledriveactivitycopiedshareddrivename shortText Google Drive No 0
Google Drive Activity Copied Shared Drive Title googledriveactivitycopiedshareddrivetitle shortText Google Drive No 0
Google Drive Activity Created New googledriveactivitycreatednew boolean Google Drive No 0
Google Drive Activity DLP Change Type googledriveactivitydlpchangetype shortText Google Drive No 0
Google Drive Activity Delete Type googledriveactivitydeletetype shortText Google Drive No 0
Google Drive Activity Identified As googledriveactivityidentifiedas shortText Google Drive No 0
Google Drive Activity Mentioned Users googledriveactivitymentionedusers grid Google Drive No 0
Google Drive Activity New Title googledriveactivitynewtitle shortText Google Drive No 0
Google Drive Activity Old Title googledriveactivityoldtitle shortText Google Drive No 0
Google Drive Activity Post Subtype googledriveactivitypostsubtype shortText Google Drive No 0
Google Drive Activity Reference Type googledriveactivityreferencetype shortText Google Drive No 0
Google Drive Activity Removed Parents googledriveactivityremovedparents grid Google Drive No 0
Google Drive Activity Removed Permissions googledriveactivityremovedpermissions grid Google Drive No 0
Google Drive Activity Restore Type googledriveactivityrestoretype shortText Google Drive No 0
Google Drive Activity Restriction Changes googledriveactivityrestrictionchanges grid Google Drive No 0
Google Drive Activity Suggestion Subtype googledriveactivitysuggestionsubtype shortText Google Drive No 0
Google Drive Activity Targets googledriveactivitytargets grid Google Drive No 0
Google Drive Activity Uploaded googledriveactivityuploaded boolean Google Drive No 0
Google Drive Status googledrivestatus singleSelect Employee Offboarding No 0
Google Mail Status googlemailstatus singleSelect Employee Offboarding No 0
Google Password Status googlepasswordstatus singleSelect Employee Offboarding No 0
GoogleCloudSCC Asset DisplayName googlecloudsccassetdisplayname shortText Google Cloud SCC No 0
GoogleCloudSCC Finding Category googlecloudsccfindingcategory shortText Google Cloud SCC No 0
GoogleCloudSCC Finding CreateTime googlecloudsccfindingcreatetime date Google Cloud SCC No 0
GoogleCloudSCC Finding EventTime googlecloudsccfindingeventtime date Google Cloud SCC No 0
GoogleCloudSCC Finding ExternalURI googlecloudsccfindingexternaluri url Google Cloud SCC No 0
GoogleCloudSCC Finding FirstDiscovered googlecloudsccfindingfirstdiscovered date Google Cloud SCC No 0
GoogleCloudSCC Finding MostRecentlySeen googlecloudsccfindingmostrecentlyseen date Google Cloud SCC No 0
GoogleCloudSCC Finding Name googlecloudsccfindingname shortText Google Cloud SCC No 0
GoogleCloudSCC Finding Parent googlecloudsccfindingparent shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties AccessMethod googlecloudsccfindingsourcepropertiesaccessmethod shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Acked googlecloudsccfindingsourcepropertiesacked shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ActivationTrigger googlecloudsccfindingsourcepropertiesactivationtrigger shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Alert googlecloudsccfindingsourcepropertiesalert shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties AlertType googlecloudsccfindingsourcepropertiesalerttype shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties App googlecloudsccfindingsourcepropertiesapp shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties AppCategory googlecloudsccfindingsourcepropertiesappcategory shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties AppSessionId googlecloudsccfindingsourcepropertiesappsessionid shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Browser googlecloudsccfindingsourcepropertiesbrowser shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Browser Version googlecloudsccfindingsourcepropertiesbrowserversion shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties BrowserSessionId googlecloudsccfindingsourcepropertiesbrowsersessionid shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties CCI googlecloudsccfindingsourcepropertiescci shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties CCL googlecloudsccfindingsourcepropertiesccl shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ClientBytes googlecloudsccfindingsourcepropertiesclientbytes shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Count googlecloudsccfindingsourcepropertiescount shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Device googlecloudsccfindingsourcepropertiesdevice shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Domain googlecloudsccfindingsourcepropertiesdomain shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties DstCountry googlecloudsccfindingsourcepropertiesdstcountry shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties DstGeoipSrc googlecloudsccfindingsourcepropertiesdstgeoipsrc shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties DstIP googlecloudsccfindingsourcepropertiesdstip shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties DstLocation googlecloudsccfindingsourcepropertiesdstlocation shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties DstRegion googlecloudsccfindingsourcepropertiesdstregion shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties DstTimezone googlecloudsccfindingsourcepropertiesdsttimezone shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties DstZipcode googlecloudsccfindingsourcepropertiesdstzipcode shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties EventType googlecloudsccfindingsourcepropertieseventtype shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ExceptionInstructions googlecloudsccfindingsourcepropertiesexceptioninstructions shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ExposedService googlecloudsccfindingsourcepropertiesexposedservice shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties HostName googlecloudsccfindingsourcepropertieshostname shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ID googlecloudsccfindingsourcepropertiesid shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties InsertionEpochTimestamp googlecloudsccfindingsourcepropertiesinsertionepochtimestamp shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties LastApp googlecloudsccfindingsourcepropertieslastapp shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties LastCountry googlecloudsccfindingsourcepropertieslastcountry shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties LastDevice googlecloudsccfindingsourcepropertieslastdevice shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties LastLocation googlecloudsccfindingsourcepropertieslastlocation shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties LastRegion googlecloudsccfindingsourcepropertieslastregion shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties MfaDetails googlecloudsccfindingsourcepropertiesmfadetails markdown Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties NumBytes googlecloudsccfindingsourcepropertiesnumbytes shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties OrganizationUnit googlecloudsccfindingsourcepropertiesorganizationunit shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties OrigTy googlecloudsccfindingsourcepropertiesorigty shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Page googlecloudsccfindingsourcepropertiespage shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties PageDuration googlecloudsccfindingsourcepropertiespageduration shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties PageEndtime googlecloudsccfindingsourcepropertiespageendtime shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties PageId googlecloudsccfindingsourcepropertiespageid shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties PageStarttime googlecloudsccfindingsourcepropertiespagestarttime shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ProfileId googlecloudsccfindingsourcepropertiesprofileid shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ProjectId googlecloudsccfindingsourcepropertiesprojectid shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ReactivationCount googlecloudsccfindingsourcepropertiesreactivationcount shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ReqCnt googlecloudsccfindingsourcepropertiesreqcnt shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties RespCnt googlecloudsccfindingsourcepropertiesrespcnt shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties RiskLevel googlecloudsccfindingsourcepropertiesrisklevel shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties RiskLevelId googlecloudsccfindingsourcepropertiesrisklevelid shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ScannerName googlecloudsccfindingsourcepropertiesscannername shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties ServerBytes googlecloudsccfindingsourcepropertiesserverbytes shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Severity googlecloudsccfindingsourcepropertiesseverity singleSelect Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SeverityLevel googlecloudsccfindingsourcepropertiesseveritylevel shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Site googlecloudsccfindingsourcepropertiessite shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SlcLatitude googlecloudsccfindingsourcepropertiesslclatitude number Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SlcLongitute googlecloudsccfindingsourcepropertiesslclongitute number Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SrcCountry googlecloudsccfindingsourcepropertiessrccountry shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SrcGeoIpSrc googlecloudsccfindingsourcepropertiessrcgeoipsrc shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SrcLocation googlecloudsccfindingsourcepropertiessrclocation shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SrcRegion googlecloudsccfindingsourcepropertiessrcregion shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SrcTimezone googlecloudsccfindingsourcepropertiessrctimezone shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties SrcZipcode googlecloudsccfindingsourcepropertiessrczipcode shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties TenantName googlecloudsccfindingsourcepropertiestenantname shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Threshold googlecloudsccfindingsourcepropertiesthreshold shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties Timestamp googlecloudsccfindingsourcepropertiestimestamp shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties TrafficType googlecloudsccfindingsourcepropertiestraffictype shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties UrNormalized googlecloudsccfindingsourcepropertiesurnormalized shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties User googlecloudsccfindingsourcepropertiesuser shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties UserAgent googlecloudsccfindingsourcepropertiesuseragent shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties UserGenerated googlecloudsccfindingsourcepropertiesusergenerated shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties UserIP googlecloudsccfindingsourcepropertiesuserip shortText Google Cloud SCC No 0
GoogleCloudSCC Finding SourceProperties UserKey googlecloudsccfindingsourcepropertiesuserkey shortText Google Cloud SCC No 0
GoogleCloudSCC Finding URL googlecloudsccfindingurl url Google Cloud SCC No 0
GoogleCloudSCC Overview googlecloudsccoverview longText Google Cloud SCC No 0
GoogleCloudSCC Parent Resource ParentDisplayName googlecloudsccparentresourceparentdisplayname shortText Google Cloud SCC No 0
GoogleCloudSCC Recommendation googlecloudsccrecommendation longText Google Cloud SCC No 0
GoogleCloudSCC Resource Name googlecloudsccresourcename shortText Google Cloud SCC No 0
GoogleCloudSCC Resource ParentDisplayName googlecloudsccresourceparentdisplayname shortText Google Cloud SCC No 0
GoogleCloudSCC Resource ParentName googlecloudsccresourceparentname shortText Google Cloud SCC No 0
GoogleCloudSCC Resource Project DisplayName googlecloudsccresourceprojectdisplayname shortText Google Cloud SCC No 0
GoogleCloudSCC Resource ProjectName googlecloudsccresourceprojectname shortText Google Cloud SCC No 0
GoogleCloudSCC Security Marks googlecloudsccsecuritymarks markdown Google Cloud SCC No 0
Grafana Dashboard Link grafanadashboardlink url Grafana No 0
Grafana Dashboard Uid grafanadashboarduid shortText Grafana No 0
Grafana Panel Id grafanapanelid number Grafana No 0
Grand Parent Process grandparentprocess shortText CrowdStrike Falcon No 0
Graph Plot graphplot html NTT Cyber Threat Sensor No 0
GravityZone Company ID gravityzonecompanyid shortText GravityZone No 0
GravityZone Company Name gravityzonecompanyname shortText GravityZone No 0
GravityZone Computer FQDN gravityzonecomputerfqdn shortText GravityZone No 0
GravityZone Computer ID gravityzonecomputerid shortText GravityZone No 0
GravityZone Computer IP gravityzonecomputerip shortText GravityZone No 0
GravityZone Computer Name gravityzonecomputername shortText GravityZone No 0
GravityZone Incident Action Taken gravityzoneincidentactiontaken shortText GravityZone No 0
GravityZone Incident Assigned User ID gravityzoneincidentassigneduserid shortText GravityZone No 0
GravityZone Incident ID gravityzoneincidentid shortText GravityZone No 0
GravityZone Incident Link gravityzoneincidentlink shortText GravityZone No 0
GravityZone Incident Number gravityzoneincidentnumber number GravityZone No 0
GravityZone Incident Priority gravityzoneincidentpriority shortText GravityZone No 0
GravityZone Incident Severity Score gravityzoneincidentseverityscore number GravityZone No 0
GravityZone Incident Type gravityzoneincidenttype singleSelect GravityZone No 0
Group ID groupid shortText Common Types No 0
GuardiCore Associated Incident Groups guardicoreassociatedincidentgroups tagsSelect Akamai GuardiCore No 0
GuardiCore Incident Type guardicoreincidenttype shortText Akamai GuardiCore No 0
HIPAA Notification hipaanotification timer HIPAA - Breach Notification No 0
HackerOne Report Assignee Disabled hackeronereportassigneedisabled boolean HackerOne No 0
HackerOne Report Assignee HackerOne Triager hackeronereportassigneehackeronetriager boolean HackerOne No 0
HackerOne Report Assignee ID hackeronereportassigneeid shortText HackerOne No 0
HackerOne Report Assignee Location hackeronereportassigneelocation shortText HackerOne No 0
HackerOne Report Assignee Name hackeronereportassigneename shortText HackerOne No 0
HackerOne Report Assignee Reputation hackeronereportassigneereputation number HackerOne No 0
HackerOne Report Assignee Username hackeronereportassigneeusername shortText HackerOne No 0
HackerOne Report Assignee Website hackeronereportassigneewebsite shortText HackerOne No 0
HackerOne Report Attack Complexity hackeronereportattackcomplexity shortText HackerOne No 0
HackerOne Report Attack Vector hackeronereportattackvector shortText HackerOne No 0
HackerOne Report Disclosed At hackeronereportdisclosedat date HackerOne No 0
HackerOne Report ID hackeronereportid shortText HackerOne No 0
HackerOne Report Program Handle hackeronereportprogramhandle shortText HackerOne No 0
HackerOne Report Reporter Disabled hackeronereportreporterdisabled boolean HackerOne No 0
HackerOne Report Reporter HackerOne Triager hackeronereportreporterhackeronetriager boolean HackerOne No 0
HackerOne Report Reporter ID hackeronereportreporterid shortText HackerOne No 0
HackerOne Report Reporter Location hackeronereportreporterlocation shortText HackerOne No 0
HackerOne Report Reporter Name hackeronereportreportername shortText HackerOne No 0
HackerOne Report Reporter Reputation hackeronereportreporterreputation number HackerOne No 0
HackerOne Report Reporter Username hackeronereportreporterusername shortText HackerOne No 0
HackerOne Report Reporter Website hackeronereportreporterwebsite shortText HackerOne No 0
HackerOne Report Severity ID hackeronereportseverityid shortText HackerOne No 0
HackerOne Report Vulnerability Information hackeronereportvulnerabilityinformation markdown HackerOne No 0
HackerOne Report Vulnerable Component Scope hackeronereportvulnerablecomponentscope shortText HackerOne No 0
HackerOne Report Weakness External ID hackeronereportweaknessexternalid shortText HackerOne No 0
HackerOne Report Weakness ID hackeronereportweaknessid shortText HackerOne No 0
HackerOne Report Weakness Name hackeronereportweaknessname shortText HackerOne No 0
Handled Techniques handledtechniques grid MITRE ATT&CK - Courses of Action No 0
HarfangLab EDR Critical Security Event Count criticalsecurityeventcount number HarfangLab EDR No 0
HarfangLab EDR High Security Event Count highsecurityeventcount number HarfangLab EDR No 0
HarfangLab EDR Low Security Event Count lowsecurityeventcount number HarfangLab EDR No 0
HarfangLab EDR Medium Security Event Count mediumsecurityeventcount number HarfangLab EDR No 0
HarfangLab EDR Threat ID threatid shortText HarfangLab EDR No 0
HarfangLab EDR Top Agents topagents multiSelect HarfangLab EDR No 0
HarfangLab EDR Top Impacted Users topimpactedusers multiSelect HarfangLab EDR No 0
HarfangLab EDR Top Rules toprules multiSelect HarfangLab EDR No 0
HarfangLab EDR Total Security Event Count totalsecurityeventcount number HarfangLab EDR No 0
Health Check Actionable Items healthcheckactionableitems grid System Diagnostics and Health Check No 0
Health Check Auto Extraction based Incident Type healthcheckautoextractionbasedincidenttype grid System Diagnostics and Health Check No 0
Health Check Docker Containers healthcheckdockercontainers shortText System Diagnostics and Health Check No 0
Health Check Docker Containers Stats healthcheckdockercontainersstats grid System Diagnostics and Health Check No 0
Health Check Docker Images healthcheckdockerimages grid System Diagnostics and Health Check No 0
Health Check Docker Paused healthcheckdockerpaused shortText System Diagnostics and Health Check No 0
Health Check Docker Running healthcheckdockerrunning shortText System Diagnostics and Health Check No 0
Health Check Docker Stop healthcheckdockerstop shortText System Diagnostics and Health Check No 0
Health Check Docker Version healthcheckdockerversion shortText System Diagnostics and Health Check No 0
Health Check Enabled Instances healthcheckenabledinstances grid System Diagnostics and Health Check No 0
Health Check File System Directories healthcheckfilesystemdirectories grid System Diagnostics and Health Check No 0
Health Check Incidents Large Number Of Entries healthcheckincidentslargenumberofentries grid System Diagnostics and Health Check No 0
Health Check Installed Packs healthcheckinstalledpacks grid System Diagnostics and Health Check No 0
Health Check Investigations With Large Input / Output healthcheckinvestigationswithlargeinputoutput grid System Diagnostics and Health Check No 0
Health Check Large Files healthchecklargefiles grid System Diagnostics and Health Check No 0
Health Check Large Investigations healthchecklargeinvestigations grid System Diagnostics and Health Check No 0
Health Check Log Since healthchecklogsince shortText System Diagnostics and Health Check No 0
Health Check Log Until healthcheckloguntil shortText System Diagnostics and Health Check No 0
Health Check Number Of Dropped Incidents healthchecknumberofdroppedincidents number System Diagnostics and Health Check No 0
Health Check Number Of Engines healthchecknumberofengines number System Diagnostics and Health Check No 0
Health Check Number of investigations bigger than 1MB healthchecknumberofinvestigationsbiggerthan1mb number System Diagnostics and Health Check No 0
Health Check Number of investigations input / output bigger than 1MB healthchecknumberofinvestigationsinputoutputbiggerthan1mb number System Diagnostics and Health Check No 0
Health Check Panics healthcheckpanics grid System Diagnostics and Health Check No 0
Health Check Permitted Users healthcheckpermittedusers shortText System Diagnostics and Health Check No 0
Health Check Restart Count healthcheckrestartcount shortText System Diagnostics and Health Check No 0
Health Check Risky Indexed Fields healthcheckriskyindexedfields grid System Diagnostics and Health Check No 0
Health Check Top Used Playbooks healthchecktopusedplaybooks grid System Diagnostics and Health Check No 0
Health Check Total Outdated Packs healthchecktotaloutdatedpacks number System Diagnostics and Health Check No 0
Health Check Total Packs Installed healthchecktotalpacksinstalled number System Diagnostics and Health Check No 0
Health Check Used Users healthcheckusedusers shortText System Diagnostics and Health Check No 0
Health Check Workers Busy healthcheckworkersbusy shortText System Diagnostics and Health Check No 0
Health Check Workers Total healthcheckworkerstotal shortText System Diagnostics and Health Check No 0
Health insurance breached healthinsurancebreached shortText Common Scripts No 0
Hello World ID helloworldid shortText HelloWorld No 0
Hello World Status helloworldstatus shortText HelloWorld No 0
Hello World Type helloworldtype shortText HelloWorld No 0
HelloWorld OnPrem helloworldonprem shortText HelloWorld No 0
HelloWorld SaaS helloworldsaas shortText HelloWorld No 0
High Level Categories highlevelcategories multiSelect Common Types No 0
High Risky Hosts highriskyhosts multiSelect Common Types No 0
High Risky Users highriskyusers multiSelect Common Types No 0
Highlights highlights shortText Intel471 Feed No 0
Host FQDN hostfqdn shortText Core Alert Fields No 0
Host IP hostip multiSelect Core Alert Fields No 0
Host Mac Address hostmacaddress shortText Core Alert Fields No 0
Host Name hostname shortText Malware Core No 0
Host OS hostos singleSelect Core Alert Fields No 0
Host Risk Level hostrisklevel shortText Core Alert Fields No 0
Host Risk Reasons hostriskreasons multiSelect Core Alert Fields No 0
Hostname hostname shortText Core Alert Fields No 0
Hostnames hostnames multiSelect Common Types No 0
How could information sharing with other organizations have been improved? howcouldinformationsharingwithotherorganizationshavebeenimproved shortText NIST No 0
How was the incident contained and eradicated? howwastheincidentcontainedanderadicated shortText SANS No 0
How well did staff and management perform in dealing with the incident? Were the documented procedures followed? Were they adequate? howwelldidstaffandmanagementperformindealingwiththeincidentwerethedocumentedproceduresfollowedweretheyadequate shortText NIST No 0
Hox External Classification hoxexternalclassification singleSelect Hoxhunt No 0
Hox FT Attachments hoxftattachments markdown Hoxhunt No 0
Hox FT Body Link hoxftbodylink url Hoxhunt No 0
Hox FT Email From hoxftemailfrom shortText Hoxhunt No 0
Hox FT Email To hoxftemailto shortText Hoxhunt No 0
Hox FT ID hoxftid shortText Hoxhunt No 0
Hox FT Internal Classification hoxftinternalclassification shortText Hoxhunt No 0
Hox FT Links hoxftlinks markdown Hoxhunt No 0
Hox FT Maliciousness Probability hoxftmaliciousnessprobability shortText Hoxhunt No 0
Hox FT Message Id hoxftmessageid shortText Hoxhunt No 0
Hox FT Subject hoxftsubject shortText Hoxhunt No 0
Hox First Reported At hoxfirstreportedat shortText Hoxhunt No 0
Hox Global Report Count hoxglobalreportcount number Hoxhunt No 0
Hox Has Sensitive Information hoxhassensitiveinformation boolean Hoxhunt No 0
Hox ID hoxid shortText Hoxhunt No 0
Hox Inbox Report Count hoxinboxreportcount number Hoxhunt No 0
Hox Incident Rule Actions hoxincidentruleactions markdown Hoxhunt No 0
Hox Internal Classification hoxinternalclassification singleSelect Hoxhunt No 0
Hox Last Reported At hoxlastreportedat shortText Hoxhunt No 0
Hox Likely Target Entity hoxlikelytargetentity shortText Hoxhunt No 0
Hox Message To Users hoxmessagetousers shortText Hoxhunt No 0
Hox Notes hoxnotes markdown Hoxhunt No 0
Hox Phish Report Count hoxphishreportcount number Hoxhunt No 0
Hox Report Count hoxreportcount number Hoxhunt No 0
Hox Reported At Limit hoxreportedatlimit singleSelect Hoxhunt No 0
Hox Send Feedback hoxsendfeedback boolean Hoxhunt No 0
Hox State hoxstate singleSelect Hoxhunt No 0
Hox Threat Indicators hoxthreatindicators tagsSelect Hoxhunt No 0
Hox URL hoxurl url Hoxhunt No 0
Hox User Actions hoxuseractions tagsSelect Hoxhunt No 0
Hox VIP Report Count hoxvipreportcount number Hoxhunt No 0
Hunt Results Count huntresultscount shortText Common Types No 0
Hunting Endpoint Enrichment huntingendpointenrichment shortText Proactive Threat Hunting No 0
Hunting Session Status huntingsessionstatus shortText Proactive Threat Hunting No 0
Hunting Task Count huntingtaskcount shortText Rapid Breach Response No 0
IBM Security QRadar SOAR Artifacts ibmsecurityqradarsoarartifacts multiSelect IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Attachments ibmsecurityqradarsoarattachments multiSelect IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Criminal Activity ibmsecurityqradarsoarcriminalactivity shortText IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Discovered Date ibmsecurityqradarsoardiscovereddate date IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Exposure Type ibmsecurityqradarsoarexposuretype shortText IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR NIST Attack Vectors ibmsecurityqradarsoarnistattackvectors multiSelect IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Name ibmsecurityqradarsoarname shortText IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Negative PR ibmsecurityqradarsoarnegativepr boolean IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Notes ibmsecurityqradarsoarnotes multiSelect IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Phase ibmsecurityqradarsoarphase shortText IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Reporter Name ibmsecurityqradarsoarreportername shortText IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Resolution ibmsecurityqradarsoarresolution shortText IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Resolution Summary ibmsecurityqradarsoarresolutionsummary longText IBM Security QRadar SOAR No 0
IBM Security QRadar SOAR Tasks ibmsecurityqradarsoartasks multiSelect IBM Security QRadar SOAR No 0
ID - Asset idasset multiSelect Asset No 0
ID - Offense idoffense number IBM QRadar No 0
IP Address - Asset ipaddressasset multiSelect Asset No 0
IP Blocked Status ipblockedstatus shortText Common Types No 0
IP Reputation ipreputation shortText Common Types No 0
Identity Table identitytable markdown Identity No 0
Identity Type identitytype multiSelect Common Types No 0
IllusionBLACK Attack Type illusionblackattacktype shortText Smokescreen IllusionBLACK No 0
IllusionBLACK Attacker ID illusionblackattackerid shortText Smokescreen IllusionBLACK No 0
IllusionBLACK Decoy ID illusionblackdecoyid shortText Smokescreen IllusionBLACK No 0
IllusionBLACK Events illusionblackevents grid Smokescreen IllusionBLACK No 0
IllusionBLACK Threat Parse illusionblackthreatparse markdown Smokescreen IllusionBLACK No 0
Illusive Networks Deception Families illusivenetworksdeceptionfamilies shortText Illusive Networks No 0
Illusive Networks Events Number illusivenetworkseventsnumber number Illusive Networks No 0
Illusive Networks Has Forensics illusivenetworkshasforensics boolean Illusive Networks No 0
Illusive Networks Host Name illusivenetworkshostname shortText Illusive Networks No 0
Illusive Networks Id illusivenetworksid shortText Illusive Networks No 0
Illusive Networks Last Seen User illusivenetworkslastseenuser shortText Illusive Networks No 0
Illusive Networks Source Operating System illusivenetworkssourceoperatingsystem shortText Illusive Networks No 0
Illusive Networks Steps To Crown Jewel illusivenetworksstepstocrownjewel number Illusive Networks No 0
Illusive Networks Steps To Domain Admin illusivenetworksstepstodomainadmin number Illusive Networks No 0
Image Name imagename multiSelect Core Alert Fields No 0
Impact Remediation Products impactremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Incident Duration incidentduration timer Common Types No 0
Incident Link incidentlink url Common Types No 0
Incident Response Process incidentresponseprocess markdown Use Case Builder No 0
Incident Structure and Mapping incidentstructureandmapping markdown Use Case Builder No 0
Incidents Info incidentsinfo markdown Phishing Campaign No 0
IncomingMirrorError incomingmirrorerror longText Common Types No 0
Indeni Device ID indenideviceid shortText Indeni No 0
Indeni Issue ID indeniissueid shortText Indeni No 0
Individuals Notification individualsnotification singleSelect Common Scripts No 0
Infected Hostnames infectedhostnames shortText Port Scan No 0
Infected Hosts infectedhosts grid Malware Core No 0
Infinipoint hostname infinipointhostname shortText Infinipoint No 0
Infinipoint policyID infinipointpolicyid shortText Infinipoint No 0
Infinipoint policyName infinipointpolicyname shortText Infinipoint No 0
Infoblox Cloud Application Category infobloxcloudapplicationcategory shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Application Name infobloxcloudapplicationname shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Category infobloxcloudcategory shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Confidence infobloxcloudconfidence shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud DHCP Fingerprint infobloxclouddhcpfingerprint shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud DNS View infobloxclouddnsview shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Endpoint Groups infobloxcloudendpointgroups shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Event Count infobloxcloudeventcount number Infoblox Threat Defense with DDI No 0
Infoblox Cloud Event Not Blocked Count infobloxcloudeventnotblockedcount number Infoblox Threat Defense with DDI No 0
Infoblox Cloud Event Time infobloxcloudeventtime date Infoblox Threat Defense with DDI No 0
Infoblox Cloud Feed Name infobloxcloudfeedname shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Feed Source infobloxcloudfeedsource shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Feed Type infobloxcloudfeedtype shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight Changed Time infobloxcloudinsightchangedtime date Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight ID infobloxcloudinsightid shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight Most Recent Time infobloxcloudinsightmostrecenttime date Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight Persistent Time infobloxcloudinsightpersistenttime date Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight Priority infobloxcloudinsightpriority shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight Spreading Time infobloxcloudinsightspreadingtime date Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight Start Time infobloxcloudinsightstarttime date Infoblox Threat Defense with DDI No 0
Infoblox Cloud Insight Status infobloxcloudinsightstatus shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Network infobloxcloudnetwork shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Private IP infobloxcloudprivateip shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud QIP infobloxcloudqip shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud QNAME infobloxcloudqname shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud QTYPE infobloxcloudqtype shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud RCODE infobloxcloudrcode shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud RDATA infobloxcloudrdata shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud RIP infobloxcloudrip shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Severity infobloxcloudseverity shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Threat Class infobloxcloudthreatclass shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Threat Family infobloxcloudthreatfamily shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Threat Indicator infobloxcloudthreatindicator shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Threat Property infobloxcloudthreatproperty shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud Threat Type infobloxcloudthreattype shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud User infobloxclouduser shortText Infoblox Threat Defense with DDI No 0
Infoblox Cloud User Groups infobloxcloudusergroups shortText Infoblox Threat Defense with DDI No 0
Initial Access Remediation Products initialaccessremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Initiated By initiatedby multiSelect Core Alert Fields No 0
Initiator CMD initiatorcmd multiSelect Core Alert Fields No 0
Initiator MD5 initiatormd5 multiSelect Core Alert Fields No 0
Initiator PID initiatorpid multiSelect Core Alert Fields No 0
Initiator SHA256 initiatorsha256 multiSelect Core Alert Fields No 0
Initiator TID initiatortid multiSelect Core Alert Fields No 0
Initiator path initiatorpath multiSelect Core Alert Fields No 0
Initiator signature initiatorsignature multiSelect Core Alert Fields No 0
Initiator signer initiatorsigner multiSelect Core Alert Fields No 0
Instance Name instancename singleSelect Troubleshoot No 0
Integrations Categories integrationscategories multiSelect Integrations & Incidents Health Check No 0
Integrations Failed Categories integrationsfailedcategories multiSelect Integrations & Incidents Health Check No 0
Integrations Test Grid integrationstestgrid grid Integrations & Incidents Health Check No 0
Intel 471 URL intel471url url Intel471 Feed No 0
Internal Addresses internaladdresses shortText Common Types No 0
Inventa Credit Card Number inventacreditcardnumber shortText Inventa No 0
Inventa DSAR DataAssets inventadsardataassets grid Inventa No 0
Inventa DSAR DataBases inventadsardatabases grid Inventa No 0
Inventa DSAR DataSubject Email inventadsardatasubjectemail shortText Inventa No 0
Inventa DSAR DataSubject ID inventadsardatasubjectid shortText Inventa No 0
Inventa DSAR DataSubject Name inventadsardatasubjectname shortText Inventa No 0
Inventa DSAR Files inventadsarfiles grid Inventa No 0
Inventa DSAR Inventa Ticket inventadsarinventaticket shortText Inventa No 0
Inventa DSAR PII Entities inventadsarpiientities grid Inventa No 0
Inventa DSAR Transactions inventadsartransactions grid Inventa No 0
Inventa Driver License inventadriverlicense shortText Inventa No 0
Inventa National ID inventanationalid shortText Inventa No 0
Inventa PII Entities inventapiientities tagsSelect Inventa No 0
Inventa Passport Number inventapassportnumber shortText Inventa No 0
Inventa Report Reason inventareportreason shortText Inventa No 0
Inventa Source inventasource grid Inventa No 0
Inventa Tax ID inventataxid shortText Inventa No 0
Inventa Vehicle Number inventavehiclenumber shortText Inventa No 0
Investigation Stage investigationstage shortText Common Types No 0
IoT Incident URL iotincidenturl url IoT by Palo Alto Networks No 0
IronDefense Aggregation Criteria irondefenseaggregationcriteria shortText IronNet No 0
IronDefense Alert ID irondefensealertid shortText IronNet No 0
IronDefense Alert IDs irondefensealertids shortText IronNet No 0
IronDefense Analyst Expectation irondefenseanalystexpectation singleSelect IronNet No 0
IronDefense Analyst Severity irondefenseanalystseverity singleSelect IronNet No 0
IronDefense App Domains irondefenseappdomains shortText IronNet No 0
IronDefense Bytes In irondefensebytesin number IronNet No 0
IronDefense Bytes Out irondefensebytesout number IronNet No 0
IronDefense Category irondefensecategory singleSelect IronNet No 0
IronDefense Comment Details irondefensecommentdetails shortText IronNet No 0
IronDefense Confidence irondefenseconfidence shortText IronNet No 0
IronDefense Created irondefensecreated date IronNet No 0
IronDefense Dome Shared Time irondefensedomesharedtime date IronNet No 0
IronDefense Dome Tags irondefensedometags shortText IronNet No 0
IronDefense Dst Entity Attribute irondefensedstentityattribute shortText IronNet No 0
IronDefense Dst Entity Attribute Type irondefensedstentityattributetype singleSelect IronNet No 0
IronDefense Dst IP irondefensedstip shortText IronNet No 0
IronDefense Dst Network ID irondefensedstnetworkid shortText IronNet No 0
IronDefense Dst Port irondefensedstport number IronNet No 0
IronDefense End Time irondefenseendtime date IronNet No 0
IronDefense Event Count irondefenseeventcount number IronNet No 0
IronDefense Event ID irondefenseeventid shortText IronNet No 0
IronDefense First Event Created irondefensefirsteventcreated date IronNet No 0
IronDefense High Cognitive System Details irondefensehighcognitivesystemdetails shortText IronNet No 0
IronDefense IronDome Category irondefenseirondomecategory singleSelect IronNet No 0
IronDefense IronDome ID irondefenseirondomeid shortText IronNet No 0
IronDefense Is Blacklisted irondefenseisblacklisted boolean IronNet No 0
IronDefense Is Whitelisted irondefenseiswhitelisted boolean IronNet No 0
IronDefense Last event Created irondefenselasteventcreated date IronNet No 0
IronDefense Mismatch Details irondefensemismatchdetails shortText IronNet No 0
IronDefense Primary App Protocol irondefenseprimaryappprotocol shortText IronNet No 0
IronDefense Raw Data Format irondefenserawdataformat multiSelect IronNet No 0
IronDefense Secondary App Protocol irondefensesecondaryappprotocol shortText IronNet No 0
IronDefense Severity irondefenseseverity number IronNet No 0
IronDefense Severity Details irondefenseseveritydetails shortText IronNet No 0
IronDefense Severity Malicious Details irondefenseseveritymaliciousdetails shortText IronNet No 0
IronDefense Severity Suspicious Details irondefenseseveritysuspiciousdetails shortText IronNet No 0
IronDefense Src Entity Attribute irondefensesrcentityattribute shortText IronNet No 0
IronDefense Src Entity Attribute Type irondefensesrcentityattributetype singleSelect IronNet No 0
IronDefense Src IP irondefensesrcip shortText IronNet No 0
IronDefense Src Network ID irondefensesrcnetworkid shortText IronNet No 0
IronDefense Start Time irondefensestarttime date IronNet No 0
IronDefense Status irondefensestatus singleSelect IronNet No 0
IronDefense SubCategory irondefensesubcategory shortText IronNet No 0
IronDefense Total Bytes irondefensetotalbytes number IronNet No 0
IronDefense Updated irondefenseupdated date IronNet No 0
IronDefense VUE URL irondefensevueurl url IronNet No 0
Ironscales-Choose-Classification ironscaleschooseclassification singleSelect Ironscales No 0
Ironscales-Classification ironscalesclassification shortText Ironscales No 0
Ironscales-Details ironscalesdetails grid Ironscales No 0
Ironscales-ID ironscalesid shortText Ironscales No 0
Ironscales-Links ironscaleslinks longText Ironscales No 0
Ironscales-Resolver-email-address ironscalesresolveremailaddress shortText Ironscales No 0
Ironscales-affected_mailbox_count ironscalesaffectedmailboxcount shortText Ironscales No 0
Ironscales-attachments ironscalesattachments longText Ironscales No 0
Ironscales-banner_displayed ironscalesbannerdisplayed longText Ironscales No 0
Ironscales-company_id ironscalescompanyid shortText Ironscales No 0
Ironscales-company_name ironscalescompanyname shortText Ironscales No 0
Ironscales-federation ironscalesfederation longText Ironscales No 0
Ironscales-first_reported_by ironscalesfirstreportedby shortText Ironscales No 0
Ironscales-first_reported_date ironscalesfirstreporteddate shortText Ironscales No 0
Ironscales-mail_server ironscalesmailserver longText Ironscales No 0
Ironscales-reply_to ironscalesreplyto longText Ironscales No 0
Ironscales-reports ironscalesreports longText Ironscales No 0
Ironscales-sender_email ironscalessenderemail shortText Ironscales No 0
Ironscales-sender_is_internal ironscalessenderisinternal boolean Ironscales No 0
Ironscales-sender_reputation ironscalessenderreputation shortText Ironscales No 0
Ironscales-spf_Result ironscalesspfresult shortText Ironscales No 0
Ironscales-themis_proba ironscalesthemisproba number Ironscales No 0
Ironscales-themis_verdict ironscalesthemisverdict shortText Ironscales No 0
Ironscales_incident_id ironscalesincidentid shortText Ironscales No 0
Is Active isactive singleSelect Common Types No 0
Is Phishing isphishing multiSelect Core Alert Fields No 0
Is VPN IP Address isvpnipaddress boolean Cloud Incident Response No 0
Is the Data Subject to DPIA isthedatasubjecttodpia shortText Common Scripts No 0
Isolated isolated shortText Common Types No 0
Item Owner itemowner shortText Common Types No 0
Item Owner Email itemowneremail shortText Common Types No 0
Jira Attachments jiraattachments attachments Atlassian Jira No 0
Jira Comment jiracomment longText Atlassian Jira No 0
Jira Component jiracomponent tagsSelect Atlassian Jira No 0
Jira Description jiradescription shortText Atlassian Jira No 0
Jira Due Date jiraduedate shortText Atlassian Jira No 0
Jira Estimate jiraestimate shortText Atlassian Jira No 0
Jira ID jiraid number Atlassian Jira No 0
Jira Issue Key jiraissuekey shortText Atlassian Jira No 0
Jira Issue Type jiraissuetype shortText Atlassian Jira No 0
Jira Labels jiralabels tagsSelect Atlassian Jira No 0
Jira Priority jirapriority shortText Atlassian Jira No 0
Jira Project jiraproject shortText Atlassian Jira No 0
Jira Reporter Email jirareporteremail shortText Atlassian Jira No 0
Jira Reporter Name jirareportername shortText Atlassian Jira No 0
Jira Status jirastatus shortText Atlassian Jira No 0
Jira Subtask jirasubtask longText Atlassian Jira No 0
Jira Summary jirasummary shortText Atlassian Jira No 0
Jira Transitions jiratransitions singleSelect Atlassian Jira No 0
JiraV3 Status jirav3status singleSelect Atlassian Jira No 0
Job Code jobcode shortText Common Types No 0
Job Family jobfamily shortText Common Types No 0
Job Function jobfunction shortText Common Types No 0
Jobs Created jobscreated grid XSOAR CI/CD No 0
KELA RaDark Details kelaradarkdetails shortText KELA RaDark No 0
KELA RaDark Incident URL kelaradarkincidenturl url KELA RaDark No 0
KELA RaDark Monitor ID kelaradarkmonitorid shortText KELA RaDark No 0
KELA RaDark Sub Type kelaradarksubtype shortText KELA RaDark No 0
KELA RaDark Table Agressor kelaradarktableagressor grid KELA RaDark No 0
KELA RaDark Table Botnets kelaradarktablebotnets grid KELA RaDark No 0
KELA RaDark Table Credit Cards kelaradarktablecreditcards grid KELA RaDark No 0
KELA RaDark Table Credit Cards From Instant Messaging kelaradarktablecreditcardsfrominstantmessaging grid KELA RaDark No 0
KELA RaDark Table Hacking Discussions kelaradarktablehackingdiscussions grid KELA RaDark No 0
KELA RaDark Table Information Disclosure kelaradarktableinformationdisclosure grid KELA RaDark No 0
KELA RaDark Table Leaked Credentials From Citadel kelaradarktableleakedcredentialsfromcitadel grid KELA RaDark No 0
KELA RaDark Table Leaked Credentials From Dump kelaradarktableleakedcredentialsfromdump grid KELA RaDark No 0
KELA RaDark Table Leaked Credentials From Hacking Discussions kelaradarktableleakedcredentialsfromhackingdiscussions grid KELA RaDark No 0
KELA RaDark Table Leaked Credentials From Instant Messaging kelaradarktableleakedcredentialsfrominstantmessaging grid KELA RaDark No 0
KELA RaDark Table Russian Market kelaradarktablerussianmarket grid KELA RaDark No 0
KELA RaDark Table Sensitive Hosts kelaradarktablesensitivehosts grid KELA RaDark No 0
KELA RaDark Table TwoEasy kelaradarktabletwoeasy grid KELA RaDark No 0
KELA RaDark Table Vulnerable Services Database kelaradarktablevulnerableservicesdatabase grid KELA RaDark No 0
KELA RaDark Table Vulnerable Services File Sharing kelaradarktablevulnerableservicesfilesharing grid KELA RaDark No 0
KELA RaDark Table Vulnerable Services Insecure Network Services kelaradarktablevulnerableservicesinsecurenetworkservices grid KELA RaDark No 0
KELA RaDark Table Vulnerable Services Message Broker kelaradarktablevulnerableservicesmessagebroker grid KELA RaDark No 0
KELA RaDark Table Vulnerable Services Remote Control kelaradarktablevulnerableservicesremotecontrol grid KELA RaDark No 0
KELA RaDark Table Vulnerable Services SCADA kelaradarktablevulnerableservicesscada grid KELA RaDark No 0
KELA RaDark Table Vulnerable Technologies kelaradarktablevulnerabletechnologies grid KELA RaDark No 0
KELA RaDark Table Web Applications Vulnerabilities kelaradarktablewebapplicationsvulnerabilities grid KELA RaDark No 0
Lacework Event Actor laceworkeventactor shortText Lacework No 0
Lacework Event ID laceworkeventid shortText Lacework No 0
Lacework Event Model laceworkeventmodel shortText Lacework No 0
Lacework Event Type laceworkeventtype shortText Lacework No 0
Lacework Recommendation Account Alias laceworkrecommendationaccountalias shortText Lacework No 0
Lacework Recommendation Account ID laceworkrecommendationaccountid shortText Lacework No 0
Lacework Recommendation ID laceworkrecommendationid shortText Lacework No 0
Lacework Recommendation Title laceworkrecommendationtitle shortText Lacework No 0
Last Mirrored Time Stamp lastmirroredtimestamp date Common Types No 0
Last Modified By lastmodifiedby shortText Common Types No 0
Last Modified On lastmodifiedon shortText Common Types No 0
Last Name lastname shortText Common Types No 0
Last Seen lastseen shortText Common Types No 0
Last Update Time lastupdatetime shortText Common Types No 0
LastMirroredInTime lastmirroredintime date Cortex XDR by Palo Alto Networks No 0
Lateral Movement Remediation Products lateralmovementremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Leadership leadership shortText Common Types No 0
Likely Impact likelyimpact shortText Common Scripts No 0
Link To Offense linktooffense url IBM QRadar No 0
List Of Rules - Event listofrulesevent multiSelect Common Types No 0
List of Rules - Offense listofrulesoffense multiSelect IBM QRadar No 0
Lists Created listscreated grid XSOAR CI/CD No 0
Local IP localip multiSelect Core Alert Fields No 0
Local Port localport multiSelect Core Alert Fields No 0
Location location shortText Common Types No 0
Location - Asset locationasset multiSelect Asset No 0
Location Region locationregion shortText Common Types No 0
Log Source logsource shortText Common Types No 0
Log Source Name logsourcename multiSelect Common Types No 0
Log Source Type logsourcetype multiSelect Common Types No 0
LogPoint AlertObjId logpointalertobjid shortText LogPoint SIEM Integration No 0
LogPoint Assigned To logpointassignedto shortText LogPoint SIEM Integration No 0
LogPoint Comments logpointcomments shortText LogPoint SIEM Integration No 0
LogPoint Comments Count logpointcommentscount number LogPoint SIEM Integration No 0
LogPoint Detection Timestamp logpointdetectiontimestamp number LogPoint SIEM Integration No 0
LogPoint IncidentId logpointincidentid shortText LogPoint SIEM Integration No 0
LogPoint Last Action logpointlastaction shortText LogPoint SIEM Integration No 0
LogPoint LogPoint Name logpointlogpointname shortText LogPoint SIEM Integration No 0
LogPoint Loginspect IP DNS logpointloginspectipdns shortText LogPoint SIEM Integration No 0
LogPoint Object ID logpointobjectid shortText LogPoint SIEM Integration No 0
LogPoint Query logpointquery shortText LogPoint SIEM Integration No 0
LogPoint Repos logpointrepos shortText LogPoint SIEM Integration No 0
LogPoint Rows Count logpointrowscount number LogPoint SIEM Integration No 0
LogPoint Status logpointstatus shortText LogPoint SIEM Integration No 0
LogPoint Throttle Enabled logpointthrottleenabled boolean LogPoint SIEM Integration No 0
LogPoint Tid logpointtid shortText LogPoint SIEM Integration No 0
LogPoint Time Range logpointtimerange shortText LogPoint SIEM Integration No 0
LogPoint User Id logpointuserid shortText LogPoint SIEM Integration No 0
LogPoint Username logpointusername shortText LogPoint SIEM Integration No 0
LogPoint Visible To logpointvisibleto shortText LogPoint SIEM Integration No 0
LogRhythm Associated Cases logrhythmassociatedcases shortText LogRhythm No 0
LogRhythm Case Collaborators logrhythmcollaborators shortText LogRhythm No 0
LogRhythm Case Priority logrhythmpriority number LogRhythm No 0
LogRhythm Case Updated User logrhythmcaseupdateduser shortText LogRhythm No 0
LogRhythm Entity logrhythmentity shortText LogRhythm No 0
LogRhythm Status logrhythmstatus shortText LogRhythm No 0
LogRhythm Ticket Due Date logrhythmticketduedate date LogRhythm No 0
Login Attempt Count loginattemptcount number Brute Force No 0
Logz.Io Alert ID logzioalertid shortText Logz.io No 0
Logz.io Alert Event ID logzioalerteventid shortText Logz.io No 0
Logz.io Alert Summary logzioalertsummary shortText Logz.io No 0
Logz.io Tags logziotags multiSelect Logz.io No 0
Low Level Categories - Offense lowlevelcategoriesoffense multiSelect IBM QRadar No 0
Low Level Categories Events lowlevelcategoriesevents multiSelect Common Types No 0
M-ASM Category masmcategory shortText Mandiant Advantage Attack Surface Management No 0
M-ASM Collection masmcollection shortText Mandiant Advantage Attack Surface Management No 0
M-ASM Confirmed masmconfirmed boolean Mandiant Advantage Attack Surface Management No 0
M-ASM Description masmdescription longText Mandiant Advantage Attack Surface Management No 0
M-ASM Entity Name masmentityname shortText Mandiant Advantage Attack Surface Management No 0
M-ASM Project masmproject shortText Mandiant Advantage Attack Surface Management No 0
M-ASM Remediation masmremediation longText Mandiant Advantage Attack Surface Management No 0
MAC Address macaddress shortText Common Types No 0
MAC Address - Asset macaddressasset multiSelect Asset No 0
MAD Accounts madaccounts grid Mandiant Automated Defense No 0
MAD Asset Criticality madassetcriticality shortText Mandiant Automated Defense No 0
MAD Assets madassets grid Mandiant Automated Defense No 0
MAD Assigned Users madassignedusers shortText Mandiant Automated Defense No 0
MAD Attack Stage madattackstage shortText Mandiant Automated Defense No 0
MAD Attack Tactic madattacktactic shortText Mandiant Automated Defense No 0
MAD Close URL madcloseurl shortText Mandiant Automated Defense No 0
MAD Description maddescription shortText Mandiant Automated Defense No 0
MAD Domains maddomains grid Mandiant Automated Defense No 0
MAD Escalation Reasons madescalationreasons grid Mandiant Automated Defense No 0
MAD Event Count madeventcount number Mandiant Automated Defense No 0
MAD External Systems madexternalsystems grid Mandiant Automated Defense No 0
MAD External Tenant Id madexternaltenantid shortText Mandiant Automated Defense No 0
MAD Feedback Comments madfeedbackcomments shortText Mandiant Automated Defense No 0
MAD Feedback Outcome madfeedbackoutcome shortText Mandiant Automated Defense No 0
MAD Feedback Time Updated madfeedbacktimeupdated shortText Mandiant Automated Defense No 0
MAD Feedback User Id madfeedbackuserid shortText Mandiant Automated Defense No 0
MAD File Hashes madfilehashes grid Mandiant Automated Defense No 0
MAD First Event Time madfirsteventtime shortText Mandiant Automated Defense No 0
MAD Incident Id madincidentid shortText Mandiant Automated Defense No 0
MAD Internal Tenant Id madinternaltenantid shortText Mandiant Automated Defense No 0
MAD Last Event Time madlasteventtime shortText Mandiant Automated Defense No 0
MAD Malware madmalware grid Mandiant Automated Defense No 0
MAD Probability madprobability shortText Mandiant Automated Defense No 0
MAD Signatures madsignatures grid Mandiant Automated Defense No 0
MAD Status madstatus shortText Mandiant Automated Defense No 0
MAD Time Generated madtimegenerated shortText Mandiant Automated Defense No 0
MAD URL madurl shortText Mandiant Automated Defense No 0
MD5 md5 shortText Common Types No 0
MITRE Caldera Delete Operation calderadeleteoperation boolean MITRE Caldera No 0
MITRE Caldera Operation Adversary ID calderaoperationadversaryid singleSelect MITRE Caldera No 0
MITRE Caldera Operation Auto Close calderaoperationautoclose singleSelect MITRE Caldera No 0
MITRE Caldera Operation Autonomy calderaoperationautonomy singleSelect MITRE Caldera No 0
MITRE Caldera Operation Group calderaoperationgroup shortText MITRE Caldera No 0
MITRE Caldera Operation Host Group calderaoperationhostgroup shortText MITRE Caldera No 0
MITRE Caldera Operation ID calderaoperationid shortText MITRE Caldera No 0
MITRE Caldera Operation Jitter calderaoperationjitter shortText MITRE Caldera No 0
MITRE Caldera Operation Name calderaoperationname shortText MITRE Caldera No 0
MITRE Caldera Operation Obfuscator calderaoperationobfuscator singleSelect MITRE Caldera No 0
MITRE Caldera Operation Objective ID calderaoperationobjectiveid singleSelect MITRE Caldera No 0
MITRE Caldera Operation Planner ID calderaoperationplannerid singleSelect MITRE Caldera No 0
MITRE Caldera Operation Source ID calderaoperationsourceid singleSelect MITRE Caldera No 0
MITRE Caldera Operation State calderaoperationstate singleSelect MITRE Caldera No 0
MITRE Caldera Operation Use Learning Parsers calderaoperationuselearningparsers singleSelect MITRE Caldera No 0
MITRE Caldera Operation Visbility calderaoperationvisibility shortText MITRE Caldera No 0
MITRE Caldera Schedule Date Time calderascheduledatetime date MITRE Caldera No 0
MITRE Caldera Schedule Date Time SLA calderascheduledatetimesla timer MITRE Caldera No 0
MITRE Caldera Schedule Operation calderascheduleoperation boolean MITRE Caldera No 0
MITRE Tactic ID mitretacticid multiSelect Common Types No 0
MITRE Tactic Name mitretacticname multiSelect Common Types No 0
MITRE Technique ID mitretechniqueid multiSelect Common Types No 0
MITRE Technique Name mitretechniquename multiSelect Common Types No 0
Macro Source Code macrosourcecode longText Common Types No 0
Magnitude - Offense magnitudeoffense number IBM QRadar No 0
Mailbox Delegation mailboxdelegation singleSelect Employee Offboarding No 0
Malicious Behavior maliciousbehavior shortText Malware Core No 0
Malicious Cause (If the cause is a malicious attack) maliciouscauseifthecauseisamaliciousattack multiSelect Common Scripts No 0
Malicious Domains Blocked maliciousdomainsblocked boolean Port Scan No 0
Malicious URL Clicked maliciousurlclicked shortText Phishing No 0
Malicious URL Viewed maliciousurlviewed shortText Phishing No 0
Malware Detailed Investigation Summary malwaredetailedinvestigationsummary shortText Malware Investigation and Response No 0
Malware Family malwarefamily shortText Malware Core No 0
Malware Investigation Summary malwareinvestigationsummary shortText Malware Investigation and Response No 0
Malware Name malwarename shortText Malware Core No 0
Management Notification managementnotification singleSelect Common Scripts No 0
Manager Email manageremail shortText Crisis Management No 0
Manager Email Address manageremailaddress shortText Common Types No 0
Manager Name managername shortText Common Types No 0
Manual Steps manualsteps markdown Use Case Builder No 0
Marketplace Packs Installed marketplacepacksinstalled grid XSOAR CI/CD No 0
Measures to Mitigate measurestomitigate shortText Common Scripts No 0
Media Notification medianotification singleSelect Common Scripts No 0
Medical Information breached medicalinformationbreached shortText Common Scripts No 0
Message message longText Nutanix Hypervisor No 0
Microsoft 365 Defender A microsoft365defendera grid Microsoft 365 Defender No 0
Microsoft 365 Defender Active microsoft365defenderactive shortText Microsoft 365 Defender No 0
Microsoft 365 Defender Categories count microsoft365defendercategoriescount grid Microsoft 365 Defender No 0
Microsoft 365 Defender Classification microsoft365defenderclassification singleSelect Microsoft 365 Defender No 0
Microsoft 365 Defender Comments microsoft365defendercomments grid Microsoft 365 Defender No 0
Microsoft 365 Defender Devices microsoft365defenderdevices grid Microsoft 365 Defender No 0
Microsoft 365 Defender Display Name microsoft365defenderdisplayname shortText Microsoft 365 Defender No 0
Microsoft 365 Defender First activity microsoft365defenderfirstactivity shortText Microsoft 365 Defender No 0
Microsoft 365 Defender ID microsoft365defenderid number Microsoft 365 Defender No 0
Microsoft 365 Defender Last activity microsoft365defenderlastactivity shortText Microsoft 365 Defender No 0
Microsoft 365 Defender Mailboxes microsoft365defendermailboxes grid Microsoft 365 Defender No 0
Microsoft 365 Defender Status microsoft365defenderstatus singleSelect Microsoft 365 Defender No 0
Microsoft 365 Defender Tags microsoft365defendertags tagsSelect Microsoft 365 Defender No 0
Microsoft 365 Defender Users microsoft365defenderusers grid Microsoft 365 Defender No 0
Microsoft Defender for Endpoint Evidence Creation Time microsoftdefenderforendpointevidencecreationtime multiSelect Microsoft Defender for Endpoint No 0
Microsoft Defender for Endpoint Evidence Type microsoftdefenderforendpointevidencetype multiSelect Microsoft Defender for Endpoint No 0
Microsoft Graph Identity and Access Activity microsoftgraphidentityandaccessactivity shortText Microsoft Graph Identity and Access No 0
Microsoft Graph Identity and Access Alert Type microsoftgraphidentityandaccessalerttype shortText Microsoft Graph Identity and Access No 0
Microsoft Graph Identity and Access Detected Date Time microsoftgraphidentityandaccessdetecteddatetime shortText Microsoft Graph Identity and Access No 0
Microsoft Graph Identity and Access Detection Timing Type microsoftgraphidentityandaccessdetectiontimingtype shortText Microsoft Graph Identity and Access No 0
Microsoft Graph Identity and Access Token Issuer Type microsoftgraphidentityandaccesstokenissuertype shortText Microsoft Graph Identity and Access No 0
Microsoft Graph Security Alert Determination microsoftgraphsecurityalertdetermination shortText Microsoft Graph Security No 0
Microsoft Graph Security Alert Evidence microsoftgraphsecurityalertevidence markdown Microsoft Graph Security No 0
Microsoft Graph Security Comment microsoftgraphsecuritycomment multiSelect Microsoft Graph Security No 0
Microsoft Graph Security Detector Id microsoftgraphsecuritydetectorid shortText Microsoft Graph Security No 0
Microsoft Graph Security Id microsoftgraphsecurityid shortText Microsoft Graph Security No 0
Microsoft Graph Security Recommended Action microsoftgraphsecurityrecommendedaction shortText Microsoft Graph Security No 0
Microsoft Graph Security Service Source microsoftgraphsecurityservicesource shortText Microsoft Graph Security No 0
Microsoft Sentinel Alert Count microsoftsentinelalertcount shortText Microsoft Sentinel No 0
Microsoft Sentinel Alerts microsoftsentinelalerts longText Microsoft Sentinel No 0
Microsoft Sentinel Classification Comment microsoftsentinelclassificationcomment shortText Microsoft Sentinel No 0
Microsoft Sentinel Classification Reason microsoftsentinelclassificationreason singleSelect Microsoft Sentinel No 0
Microsoft Sentinel Comments microsoftsentinelcomments longText Microsoft Sentinel No 0
Microsoft Sentinel Entities microsoftsentinelentities longText Microsoft Sentinel No 0
Microsoft Sentinel Incident Number microsoftsentinelincidentnumber shortText Microsoft Sentinel No 0
Microsoft Sentinel Owner microsoftsentinelowner grid Microsoft Sentinel No 0
Microsoft Sentinel Relations microsoftsentinelrelations longText Microsoft Sentinel No 0
Microsoft Sentinel Rule Id microsoftsentinelruleid multiSelect Microsoft Sentinel No 0
Misc misc multiSelect Core Alert Fields No 0
Mitigation Task Count mitigationtaskcount shortText Rapid Breach Response No 0
Mitre ATT&CK Tactic mitreattcktactic multiSelect Core Alert Fields No 0
Mitre ATT&CK Technique mitreattcktechnique multiSelect Core Alert Fields No 0
Mobile Device Model mobiledevicemodel shortText Common Types No 0
Mobile Phone mobilephone shortText Common Types No 0
MobileIron Compliance State mobileironcompliancestate shortText MobileIron-UEM No 0
MobileIron Device Alt Serial Number mobileirondevicealtserialnumber shortText MobileIron-UEM No 0
MobileIron Device ID mobileirondeviceid shortText MobileIron-UEM No 0
MobileIron Device Owner mobileirondeviceowner shortText MobileIron-UEM No 0
MobileIron Device Registration Status mobileirondeviceregistrationstatus shortText MobileIron-UEM No 0
MobileIron Device Registration Timestamp mobileirondeviceregistrationtimestamp date MobileIron-UEM No 0
MobileIron Device Serial Number mobileirondeviceserialnumber shortText MobileIron-UEM No 0
MobileIron Device UDID mobileirondeviceudid shortText MobileIron-UEM No 0
MobileIron Device UUID mobileirondeviceuuid shortText MobileIron-UEM No 0
MobileIron Device User ID mobileirondeviceuserid shortText MobileIron-UEM No 0
MobileIron IMEI mobileironimei shortText MobileIron-UEM No 0
MobileIron IMSI mobileironimsi shortText MobileIron-UEM No 0
MobileIron Is Device Jailbroken? mobileironisdevicejailbroken boolean MobileIron-UEM No 0
MobileIron Is Device Quarantined? mobileironisdevicequarantined boolean MobileIron-UEM No 0
MobileIron Last Check-in Timestamp mobileironlastcheckintimestamp date MobileIron-UEM No 0
MobileIron Manufacturer mobileironmanufacturer shortText MobileIron-UEM No 0
MobileIron Platform mobileironplatform shortText MobileIron-UEM No 0
MobileIron Security State mobileironsecuritystate shortText MobileIron-UEM No 0
MobileIron User Email Address mobileironuseremailaddress shortText MobileIron-UEM No 0
Module module multiSelect Core Alert Fields No 0
NCSC Assessment Status ncscassessmentstatus shortText NCSC Cyber Asssessment Framework No 0
NGFW Vsys Name ngfwvsysname multiSelect Core Alert Fields No 0
NIST Stage niststage shortText NIST No 0
Neosec Endpoints neosecendpoints grid Neosec No 0
Neosec Entities neosecentities grid Neosec No 0
Neosec Labels neoseclabels multiSelect Neosec No 0
Neosec Recommendations neosecrecommendations longText Neosec No 0
Netscout Arbor Sightline Alert Type netscoutarborsightlinealerttype shortText Netscout Arbor Sightline No 0
Netskope Access Method netskopeaccessmethod shortText Netskope No 0
Netskope Acknowledge netskopeacknowledge boolean Netskope No 0
Netskope Action netskopeaction shortText Netskope No 0
Netskope Behavior Analytics Policy netskopebehavioranalyticspolicy shortText Netskope No 0
Netskope Breach Date netskopebreachdate date Netskope No 0
Netskope Breach Description netskopebreachdescription shortText Netskope No 0
Netskope Breach Score netskopebreachscore number Netskope No 0
Netskope Breach Source netskopebreachsource shortText Netskope No 0
Netskope Cloud Confidence Level netskopecloudconfidencelevel shortText Netskope No 0
Netskope DLP Policy netskopedlppolicy shortText Netskope No 0
Netskope DLP Profile netskopedlpprofile shortText Netskope No 0
Netskope DLP Rule netskopedlprule shortText Netskope No 0
Netskope File Type netskopefiletype shortText Netskope No 0
Netskope Leak ID netskopeleakid shortText Netskope No 0
Netskope Malware ID netskopemalwareid shortText Netskope No 0
Netskope Malware Name netskopemalwarename shortText Netskope No 0
Netskope Malware Type netskopemalwaretype shortText Netskope No 0
Netskope Object netskopeobject shortText Netskope No 0
Netskope Object ID netskopeobjectid shortText Netskope No 0
Netskope Object Type netskopeobjecttype shortText Netskope No 0
Netskope Original Severity netskopeoriginalseverity shortText Netskope No 0
Netskope Original Status netskopeoriginalstatus shortText Netskope No 0
Netskope Quarantine File ID netskopequarantinefileid shortText Netskope No 0
Netskope Quarantine Policy netskopequarantinepolicy shortText Netskope No 0
Netskope Quarantine Profile netskopequarantineprofile shortText Netskope No 0
Netskope Quarantine Profile ID netskopequarantineprofileid shortText Netskope No 0
Netskope Severity netskopeseverity singleSelect Netskope No 0
Netskope Site netskopesite shortText Netskope No 0
Netskope Timestamp netskopetimestamp shortText Netskope No 0
Netskope Violations netskopeviolations number Netskope No 0
Network Security IDS networksecurityids markdown Use Case Builder No 0
Notable - ID notableid shortText Splunk No 0
Notable Drilldown notabledrilldown markdown Splunk No 0
Notable Owner notableowner user Splunk No 0
Notable Status notablestatus singleSelect Splunk No 0
Notable Urgency notableurgency singleSelect Splunk No 0
Number Of Events In Offense numberofeventsinoffense number IBM QRadar No 0
Number Of Fetched Events numberoffetchedevents number IBM QRadar No 0
Number Of Flows numberofflows number IBM QRadar No 0
Number Of Found Related Alerts numberoffoundrelatedalerts number Common Types No 0
Number Of Log Sources numberoflogsources number Common Types No 0
Number of Entries ID Errors numberofentriesiderrors number Integrations & Incidents Health Check No 0
Number of Failed Incidents numberoffailedincidents number Integrations & Incidents Health Check No 0
Number of Ports numberofports number Port Scan No 0
Number of Related Incidents numberofrelatedincidents number Common Types No 0
Number of Unique Ports numberofuniqueports number Port Scan No 0
Number of similar files numberofsimilarfiles number Common Types No 0
OS os shortText Common Types No 0
OS Parent CMD osparentcmd multiSelect Core Alert Fields No 0
OS Parent ID osparentid multiSelect Core Alert Fields No 0
OS Parent Name osparentname multiSelect Core Alert Fields No 0
OS Parent PID osparentpid multiSelect Core Alert Fields No 0
OS Parent SHA256 osparentsha256 multiSelect Core Alert Fields No 0
OS Parent Signature osparentsignature multiSelect Core Alert Fields No 0
OS Parent Signer osparentsigner multiSelect Core Alert Fields No 0
OS Parent User Name osparentusername multiSelect Core Alert Fields No 0
OS Type ostype shortText Common Types No 0
OS Version osversion shortText Common Types No 0
OTSecurity Protocols otsecurityprotocols grid OTSecurity No 0
OTSecurity Substation Contact otsecuritysubstationcontact shortText OTSecurity No 0
OTSecurity Substation Location otsecuritysubstationlocation shortText OTSecurity No 0
OTSecurity Substation Name otsecuritysubstationname shortText OTSecurity No 0
Objective objective multiSelect Common Types No 0
Offboarding Date offboardingdate date Employee Offboarding No 0
Offboarding Stage offboardingstage singleSelect Employee Offboarding No 0
Offense Inactive offenseinactive boolean IBM QRadar No 0
Okta Account Status oktaaccountstatus singleSelect Employee Offboarding No 0
Operation Name operationname multiSelect Common Types No 0
Operation Type operationtype shortText Nutanix Hypervisor No 0
OpsGenie AlertId opsgeniealertid shortText OpsGenie No 0
OpsGenie Alias opsgeniealias shortText OpsGenie No 0
OpsGenie Count Linked Alerts opsgeniecountlinkedalerts shortText OpsGenie No 0
OpsGenie Responder opsgenieresponder shortText OpsGenie No 0
OpsGenie TinyId opsgenietinyid shortText OpsGenie No 0
Orca Alert ID orcaalertid shortText Orca No 0
Orca Asset Unique ID orcaassetuniqueid shortText Orca No 0
Orca Cloud Account orcacloudaccount shortText Orca No 0
Orca Reason orcareason shortText Orca No 0
Org Level 1 orglevel1 shortText Common Types No 0
Org Level 2 orglevel2 shortText Common Types No 0
Org Level 3 orglevel3 shortText Common Types No 0
Org Unit orgunit shortText Common Types No 0
Original Alert ID originalalertid shortText Common Types No 0
Original Alert Name originalalertname shortText Common Types No 0
Original Alert Source originalalertsource shortText Common Types No 0
Original Description originaldescription shortText Common Types No 0
Original Events originalevents multiSelect Common Types No 0
Other PII data breached otherpiidatabreached shortText Common Scripts No 0
Out of the office outoftheoffice grid Shift Management No 0
OutgoingMirrorError outgoingmirrorerror longText Common Types No 0
PAN DLP Action pandlpaction shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Channel pandlpchannel shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Data Profile Name pandlpdataprofilename shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Incident Feedback pandlpincidentfeedback shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Incident ID pandlpincidentid shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Incident Region pandlpincidentregion shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Previous Feedback pandlppreviousfeedback shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Report ID pandlpreportid shortText Enterprise DLP by Palo Alto Networks No 0
PAN DLP Tenant ID pandlptenantid shortText Enterprise DLP by Palo Alto Networks No 0
PAN-OS Port Based Rules panosportbasedrules markdown PAN-OS Policy Optimizer (beta) No 0
PAN-OS Rules with Unused Applications panosruleswithunusedapplications markdown PAN-OS Policy Optimizer (beta) No 0
PAN-OS Unused Rules panosunusedrules markdown PAN-OS Policy Optimizer (beta) No 0
PCAP Encryption key pcapencryptionkey attachments PCAP Analysis No 0
PCAP End Time pcapendtime shortText PCAP Analysis No 0
PCAP File Name pcapfilename shortText PCAP Analysis No 0
PCAP File Size pcapfilesize shortText PCAP Analysis No 0
PCAP Flows pcapflows grid PCAP Analysis No 0
PCAP Number Of Packets pcapnumberofpackets number PCAP Analysis No 0
PCAP Number Of Streams pcapnumberofstreams number PCAP Analysis No 0
PCAP Start Time pcapstarttime shortText PCAP Analysis No 0
PCAP file pcapfile attachments PCAP Analysis No 0
PID pid shortText Common Types No 0
PII Data Type piidatatype shortText Common Scripts No 0
PP Ticket Due Date ppticketduedate date FireMon Security Manager No 0
Panorays Finding Asset Name panoraysfindingassetname shortText Panorays No 0
Panorays Finding CVEs panoraysfindingcves longText Panorays No 0
Panorays Finding Category panoraysfindingcategory shortText Panorays No 0
Panorays Finding Description panoraysfindingdescription longText Panorays No 0
Panorays Finding ID panoraysfindingid shortText Panorays No 0
Panorays Finding Insert Timestamp panoraysfindinginsertts shortText Panorays No 0
Panorays Finding Severity panoraysfindingseverity shortText Panorays No 0
Panorays Finding Status panoraysfindingstatus shortText Panorays No 0
Panorays Finding Sub Category panoraysfindingsubcategory shortText Panorays No 0
Panorays Finding Test Name panoraysfindingstestname shortText Panorays No 0
Panorays Finding Text panoraysfindingfindingtext longText Panorays No 0
Panorays Finding Update Timestamp panoraysfindingupdatets shortText Panorays No 0
Parent CMD line parentcmdline multiSelect Common Types No 0
Parent Process parentprocess multiSelect Common Types No 0
Parent Process CMD parentprocesscmd multiSelect Common Types No 0
Parent Process File Path parentprocessfilepath multiSelect Common Types No 0
Parent Process ID parentprocessid shortText Malware Core No 0
Parent Process IDs parentprocessids multiSelect Common Types No 0
Parent Process MD5 parentprocessmd5 multiSelect Common Types No 0
Parent Process Name parentprocessname multiSelect Common Types No 0
Parent Process Path parentprocesspath multiSelect Common Types No 0
Parent Process SHA256 parentprocesssha256 multiSelect Common Types No 0
Part of Campaign partofcampaign shortText Common Types No 0
Participants participants grid ExtraHop Reveal(x) No 0
Password Changed Date passwordchangeddate shortText Common Types No 0
Password Expiration Status passwordexpirationstatus shortText Brute Force No 0
Password Reset Successfully passwordresetsuccessfully boolean Common Types No 0
Pentera Operation Details penteraoperationdetails grid Pentera No 0
Persistence Remediation Products persistenceremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Personal Email personalemail shortText Common Types No 0
PhishER Action Status phisheractionstatus shortText PhishER No 0
PhishER Attachments phisherattachments markdown PhishER No 0
PhishER Category phishercategory shortText PhishER No 0
PhishER Comments phishercomments grid PhishER No 0
PhishER Created phishercreated shortText PhishER No 0
PhishER Email From phisheremailfrom shortText PhishER No 0
PhishER ID phisherid shortText PhishER No 0
PhishER Links phisherlinks markdown PhishER No 0
PhishER ML Report phishermlreport markdown PhishER No 0
PhishER Pipeline Status phisherpipelinestatus shortText PhishER No 0
PhishER Raw URL phisherrawurl longText PhishER No 0
PhishER Reported By phisherreportedby shortText PhishER No 0
PhishER Severity phisherseverity shortText PhishER No 0
PhishER Subject phishersubject shortText PhishER No 0
PhishER Tags phishertags grid PhishER No 0
Phishing BCL Score phishingbclscore number Phishing No 0
Phishing PCL Score phishingpclscore number Phishing No 0
Phishing Reporter Email Headers phishingreporteremailheaders grid Phishing No 0
Phishing SCL Score phishingsclscore number Phishing No 0
Phishing Sub-type phishingsubtype multiSelect Phishing No 0
Phone Number phonenumber multiSelect Common Types No 0
PingCastle XML Report pingcastlexmlreport longText PingCastle No 0
Playbook Description playbookdescription markdown Rapid Breach Response No 0
Playbook Names With Failed Tasks playbooknameswithfailedtasks multiSelect Integrations & Incidents Health Check No 0
Playbook Tasks Errors playbooktaskserrors grid Integrations & Incidents Health Check No 0
Playbooks Failed Commands playbooksfailedcommands multiSelect Integrations & Incidents Health Check No 0
Playbooks With Failed Tasks playbookswithfailedtasks multiSelect Integrations & Incidents Health Check No 0
Policy Actions policyactions multiSelect Common Types No 0
Policy Deleted policydeleted shortText Common Types No 0
Policy Description policydescription longText Common Types No 0
Policy Details policydetails shortText Common Types No 0
Policy ID policyid shortText Common Types No 0
Policy Optimizer Use-Case policyoptimizerusecase multiSelect PAN-OS Policy Optimizer (beta) No 0
Policy Recommendation policyrecommendation longText Common Types No 0
Policy Remediable policyremediable shortText Common Types No 0
Policy Severity policyseverity shortText Common Types No 0
Policy Type policytype shortText Common Types No 0
Policy URI policyuri shortText Common Types No 0
Ports Blocked portsblocked boolean Port Scan No 0
Possible Cause of the Breach possiblecauseofthebreach multiSelect Common Scripts No 0
Post Nat Destination IP postnatdestinationip multiSelect Common Types No 0
Post Nat Destination Port postnatdestinationport multiSelect Common Types No 0
Post Nat Source IP postnatsourceip multiSelect Common Types No 0
Post Nat Source Port postnatsourceport multiSelect Common Types No 0
Postal Code postalcode shortText Common Scripts No 0
Pre Nat Destination Port prenatdestinationport multiSelect Common Types No 0
Pre Nat Source IP prenatsourceip multiSelect Common Types No 0
Pre Nat Source Port prenatsourceport multiSelect Common Types No 0
Previous Coordinates previouscoordinates shortText Impossible Traveler No 0
Previous Country previouscountry shortText Impossible Traveler No 0
Previous Sign In Date Time previoussignindatetime date Impossible Traveler No 0
Previous Source IP previoussourceip shortText Impossible Traveler No 0
Priority priority singleSelect FireMon Security Manager No 0
Prisma Cloud - Findings Results prismacloudfindingsresults grid Prisma Cloud by Palo Alto Networks No 0
Prisma Cloud - IAM Results prismacloudiamresults grid Prisma Cloud by Palo Alto Networks No 0
Prisma Cloud Compute Activity Type prismacloudcomputeactivitytype shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute AppID prismacloudcomputeappid shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Audit Table prismaaudittable markdown Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Category prismacloudcomputecategory shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Cluster prismacloudcomputecluster shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Collections prismacloudcomputecollections shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Command prismacloudcomputecommand shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Container prismacloudcomputecontainer shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Container Compliance Issues prismacloudcomputecontainercomplianceissues grid Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Credential ID prismacloudcomputecredentialid shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Defender Logs prismacloudcomputedefenderlogs markdown Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Distribution prismacloudcomputedistribution shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Error prismacloudcomputeerror shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute FQDN prismacloudcomputefqdn shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Forensic prismacloudcomputeforensic url Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Function prismacloudcomputefunction shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Host prismacloudcomputehost shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Host Compliance Issues prismacloudcomputehostcomplianceissues grid Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Image prismacloudcomputeimage shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Image Compliance Issues prismacloudcomputeimagecomplianceissues grid Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Interactive prismacloudcomputeinteractive boolean Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Kubernetes Resource prismacloudcomputekubernetesresource shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Labels prismacloudcomputelabels shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Line prismacloudcomputeline shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Log File prismacloudcomputelogfile shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Markdown prismacloudcomputemarkdown markdown Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Message prismacloudcomputemessage shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Namespaces prismacloudcomputenamespaces multiSelect Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute PCC Defender Logs pccdefenderlogs markdown Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Project prismacloudcomputeproject shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Protected prismacloudcomputeprotected shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Provider prismacloudcomputeprovider shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Raw Alert JSON prismacloudcomputerawalertjson shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Region prismacloudcomputeregion shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Registry prismacloudcomputeregistry shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Rule prismacloudcomputerule shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Runtime prismacloudcomputeruntime shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Service prismacloudcomputeservice shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Service Type prismacloudcomputeservicetype shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Show Compliance Tab prismacloudcomputeshowcompliancetab shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Tickets Info prismacloudcomputeticketsinfo grid Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Total prismacloudcomputetotal shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute Type prismacloudcomputetype shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Compute User prismacloudcomputeuser shortText Prisma Cloud Compute by Palo Alto Networks No 0
Prisma Cloud Dismissal Note prismaclouddismissalnote shortText Prisma Cloud by Palo Alto Networks No 0
Prisma Cloud ID prismacloudid shortText Prisma Cloud by Palo Alto Networks No 0
Prisma Cloud Reason prismacloudreason shortText Prisma Cloud by Palo Alto Networks No 0
Prisma Cloud Rules prismacloudrules grid Prisma Cloud by Palo Alto Networks No 0
Prisma Cloud Status prismacloudstatus shortText Prisma Cloud by Palo Alto Networks No 0
Prisma Cloud Time prismacloudtime shortText Prisma Cloud by Palo Alto Networks No 0
Privilege Escalation Remediation Products privilegeescalationremediationproducts markdown MITRE ATT&CK - Courses of Action No 0
Process CMD processcmd multiSelect Common Types No 0
Process Creation Time processcreationtime multiSelect Common Types No 0
Process ID processid multiSelect Common Types No 0
Process MD5 processmd5 multiSelect Common Types No 0
Process Name processname shortText Common Types No 0
Process Names processnames multiSelect Common Types No 0
Process Path processpath shortText Common Types No 0
Process Paths processpaths multiSelect Common Types No 0
Process SHA256 processsha256 multiSelect Common Types No 0
Process execution signature processexecutionsignature multiSelect Core Alert Fields No 0
Process execution signer processexecutionsigner multiSelect Core Alert Fields No 0
Project ID projectid multiSelect Common Types No 0
Proofpoint TAP Campaign ID proofpointtapcampaignid shortText Proofpoint TAP No 0
Proofpoint TAP Classification proofpointtapclassification shortText Proofpoint TAP No 0
Proofpoint TAP Click IP proofpointtapclickip shortText Proofpoint TAP No 0
Proofpoint TAP Click Time proofpointtapclicktime shortText Proofpoint TAP No 0
Proofpoint TAP Cluster proofpointtapcluster shortText Proofpoint TAP No 0
Proofpoint TAP Examined By proofpointtapexaminedby shortText Proofpoint TAP No 0
Proofpoint TAP GUID proofpointtapguid shortText Proofpoint TAP No 0
Proofpoint TAP Header CC proofpointtapheadercc shortText Proofpoint TAP No 0
Proofpoint TAP Header To proofpointtapheaderto shortText Proofpoint TAP No 0
Proofpoint TAP Headers From proofpointtapheadersfrom shortText Proofpoint TAP No 0
Proofpoint TAP Headers Reply To proofpointtapheadersreplyto shortText Proofpoint TAP No 0
Proofpoint TAP ID proofpointtapid shortText Proofpoint TAP No 0
Proofpoint TAP Imposter Score proofpointtapimposterscore number Proofpoint TAP No 0
Proofpoint TAP Long Subject proofpointtaplongsubject longText Proofpoint TAP No 0
Proofpoint TAP Malware Score proofpointtapmalwarescore number Proofpoint TAP No 0
Proofpoint TAP Message ID proofpointtapmessageid shortText Proofpoint TAP No 0
Proofpoint TAP Message Parts proofpointtapmessageparts grid Proofpoint TAP No 0
Proofpoint TAP Message Size proofpointtapmessagesize shortText Proofpoint TAP No 0
Proofpoint TAP Phishing Score proofpointtapphishingscore number Proofpoint TAP No 0
Proofpoint TAP Policies proofpointtappolicies shortText Proofpoint TAP No 0
Proofpoint TAP Quarantine Folder proofpointtapquarantinefolder shortText Proofpoint TAP No 0
Proofpoint TAP Quarantine Rule proofpointtapquarantinerule shortText Proofpoint TAP No 0
Proofpoint TAP Reply To Address proofpointtapreplytoaddress shortText Proofpoint TAP No 0
Proofpoint TAP SMTP Recipient proofpointtapsmtprecipient shortText Proofpoint TAP No 0
Proofpoint TAP SMTP Sender proofpointtapsmtpsender shortText Proofpoint TAP No 0
Proofpoint TAP Sender Address proofpointtapsenderaddress shortText Proofpoint TAP No 0
Proofpoint TAP Sender IP proofpointtapsenderip shortText Proofpoint TAP No 0
Proofpoint TAP Spam Score proofpointtapspamscore number Proofpoint TAP No 0
Proofpoint TAP Subject proofpointtapsubject shortText Proofpoint TAP No 0
Proofpoint TAP Suspicious URL proofpointtapsuspiciousurl shortText Proofpoint TAP No 0
Proofpoint TAP Threat ID proofpointtapthreatid shortText Proofpoint TAP No 0
Proofpoint TAP Threat Info Map proofpointtapthreatinfomap grid Proofpoint TAP No 0
Proofpoint TAP Threat Status proofpointtapthreatstatus shortText Proofpoint TAP No 0
Proofpoint TAP Threat Time proofpointtapthreattime shortText Proofpoint TAP No 0
Proofpoint TAP Threat URL proofpointtapthreaturl url Proofpoint TAP No 0
Proofpoint TAP Type proofpointtaptype shortText Proofpoint TAP No 0
Proofpoint TAP User Agent proofpointtapuseragent shortText Proofpoint TAP No 0
Proofpoint TAP Xmailer proofpointtapxmailer shortText Proofpoint TAP No 0
Protocol protocol shortText Common Types No 0
Protocol - Event protocolevent multiSelect Common Types No 0
Protocol names protocolnames multiSelect Common Types No 0
Protocols protocols shortText Common Types No 0
QSS Case Acknowledged qsscaseacknowledged shortText Quantum Security Systems No 0
QSS Case Assets qsscaseassets grid Quantum Security Systems No 0
QSS Case Assignee qsscaseassignee shortText Quantum Security Systems No 0
QSS Case Category qsscasecategory shortText Quantum Security Systems No 0
QSS Case Created By qsscasecreatedby shortText Quantum Security Systems No 0
QSS Case Creation Date qsscasecreationdate date Quantum Security Systems No 0
QSS Case Description qsscasedescription html Quantum Security Systems No 0
QSS Case False Positive qsscasefalsepositive shortText Quantum Security Systems No 0
QSS Case ID qsscaseid number Quantum Security Systems No 0
QSS Case IOCs qsscaseiocs grid Quantum Security Systems No 0
QSS Case Last Update qsscaselastupdate date Quantum Security Systems No 0
QSS Case Notes qsscasenotes html Quantum Security Systems No 0
QSS Case Number qsscasenumber shortText Quantum Security Systems No 0
QSS Case Severity qsscaseseverity shortText Quantum Security Systems No 0
QSS Case Status qsscasestatus shortText Quantum Security Systems No 0
QSS Case Sub Category qsscasesubcategory shortText Quantum Security Systems No 0
QSS Case TLP qsscasetlp shortText Quantum Security Systems No 0
QSS Case Tags qsscasetags tagsSelect Quantum Security Systems No 0
QSS Case Title qsscasetitle shortText Quantum Security Systems No 0
QSS Custom Attribute qsscustomattribute grid Quantum Security Systems No 0
Qintel QWatch Exposures qintelqwatchexposures grid Qintel No 0
Qualys-Fim Alert ID qualysfimalertid shortText QualysFIM No 0
Qualys-Fim Alert Name qualysfimalertname shortText QualysFIM No 0
Qualys-Fim Approval Date qualysfimapprovaldate shortText QualysFIM No 0
Qualys-Fim Approval Status qualysfimapprovalstatus shortText QualysFIM No 0
Qualys-Fim Approval Type qualysfimapprovaltype shortText QualysFIM No 0
Qualys-Fim Assigned Date qualysfimassigneddate shortText QualysFIM No 0
Qualys-Fim Changed Type qualysfimchangedtype shortText QualysFIM No 0
Qualys-Fim Comment qualysfimcomment shortText QualysFIM No 0
Qualys-Fim Created By qualysfimcreatedby shortText QualysFIM No 0
Qualys-Fim Created Date qualysfimcreateddate shortText QualysFIM No 0
Qualys-Fim Event Type qualysfimeventtype shortText QualysFIM No 0
Qualys-Fim Last updated by qualysfimlastupdatedby shortText QualysFIM No 0
Qualys-Fim Query qualysfimquery longText QualysFIM No 0
Qualys-Fim Reviewers qualysfimreviewers shortText QualysFIM No 0
Qualys-Fim Status qualysfimstatus shortText QualysFIM No 0
Qualys-Fim Updated Date qualysfimupdateddate shortText QualysFIM No 0
Quarantined quarantined shortText Malware Core No 0
RDPCacheHunting String Sifter incidentrdpcachehuntingstringsifter grid RDPCacheHunting No 0
RDPCacheHunting Strings Similarity incidentrdpachehuntingstringssimilarity grid RDPCacheHunting No 0
RF AI Insights rfaiinsights longText Recorded Future No 0
RF Affected Products rfaffectedproducts shortText Recorded Future No 0
RF DNS Records rfdnsrecords grid Recorded Future No 0
RF Documents rfdocuments grid Recorded Future No 0
RF Entities rfentities grid Recorded Future No 0
RF Fragment rffragment longText Recorded Future No 0
RF Identified CVE rfidentifiedcve grid Recorded Future No 0
RF Identified Domain rfidentifieddomain grid Recorded Future No 0
RF Insikt Notes rfinsiktnotes grid Recorded Future No 0
RF Lifecycle Stage rflifecyclestage shortText Recorded Future No 0
RF Markdown rfmarkdown markdown Recorded Future No 0
RF Portal URL rfportalurl url Recorded Future No 0
RF Risk Rule rfriskrule grid Recorded Future No 0
RF Rule ID rfruleid shortText Recorded Future No 0
RF Targeted Domains rftargeteddomains shortText Recorded Future No 0
RF Targeted Products rftargetedproducts shortText Recorded Future No 0
RF Triggered By rftriggeredby shortText Recorded Future No 0
RF Whois Record Data rfwhoisrecorddata grid Recorded Future No 0
RRN rrn shortText Prisma Cloud by Palo Alto Networks No 0
RSA Alert Count rsaalertcount shortText NetWitness No 0
RSA Alerts rsaalerts grid NetWitness No 0
RSA Event Count rsaeventcount shortText NetWitness No 0
RSA Id rsaid shortText NetWitness No 0
RSA Metas Events rsametasevents grid NetWitness No 0
RSA Raw Logs List rsarawlogslist grid NetWitness No 0
RSA Rule Id rsaruleid shortText NetWitness No 0
Ransomware Approximate Number Of Encrypted Endpoints ransomwareapproximatenumberofencryptedendpoints shortText Ransomware No 0
Ransomware Cryptocurrency Address ransomwarecryptocurrencyaddress multiSelect Ransomware No 0
Ransomware Cryptocurrency Address Type ransomwarecryptocurrencyaddresstype multiSelect Ransomware No 0
Ransomware Data Encryption Status ransomwaredataencryptionstatus shortText Ransomware No 0
Ransomware Email ransomwareemail multiSelect Ransomware No 0
Ransomware Encrypted File Owner ransomwareencryptedfileowner shortText Ransomware No 0
Ransomware Note ransomwarenote longText Ransomware No 0
Ransomware Onion Address ransomwareonionaddress multiSelect Ransomware No 0
Ransomware Recovery Tool ransomwarerecoverytool shortText Ransomware No 0
Ransomware Strain ransomwarestrain shortText Ransomware No 0
Rapid7 ThreatCommand Assets rapid7threatcommandassets grid Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Attachments rapid7threatcommandattachments grid Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand CSV rapid7threatcommandcsv grid Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Related IOCs rapid7threatcommandrelatediocs multiSelect Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Related Threat IDs rapid7threatcommandrelatedthreatids shortText Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Source Date rapid7threatcommandsourcedate date Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Source Email rapid7threatcommandsourceemail user Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Source Network Type rapid7threatcommandsourcenetworktype shortText Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Source Type rapid7threatcommandsourcetype shortText Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Source URL rapid7threatcommandsourceurl shortText Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Status rapid7threatcommandstatus singleSelect Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Subtype rapid7threatcommandsubtype shortText Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Tags rapid7threatcommandtags multiSelect Rapid7 - Threat Command (IntSights) No 0
Rapid7 ThreatCommand Takedown Status rapid7threatcommandtakedownstatus shortText Rapid7 - Threat Command (IntSights) No 0
Rating rating shortText Common Types No 0
Raw Event rawevent multiSelect Common Types No 0
Raw Participants rawparticipants longText ExtraHop Reveal(x) No 0
Recorded Future AI Insights recordedfutureaiinsights longText Recorded Future Intelligence No 0
Recorded Future Alert Entities recordedfuturealertentities grid Recorded Future Intelligence No 0
Recorded Future Attack Surface Intelligence Affected Hosts recordedfutureattacksurfaceintelligenceaffectedhosts grid Recorded Future Attack Surface Intelligence No 0
Recorded Future Attack Surface Intelligence Attack Surface Rule recordedfutureattacksurfaceintelligenceattacksurfacerule shortText Recorded Future Attack Surface Intelligence No 0
Recorded Future Attack Surface Intelligence Triggered Rules recordedfutureattacksurfaceintelligencetriggeredrules grid Recorded Future Attack Surface Intelligence No 0
Recorded Future DNS Records recordedfuturednsrecords grid Recorded Future Intelligence No 0
Recorded Future Identified CVE recordedfutureidentifiedcve grid Recorded Future Intelligence No 0
Recorded Future Identified Domain recordedfutureidentifieddomain grid Recorded Future Intelligence No 0
Recorded Future Identity Assessment recordedfutureidentityassessment shortText Recorded Future Identity No 0
Recorded Future Identity Authorization URL recordedfutureidentityauthorizationurl shortText Recorded Future Identity No 0
Recorded Future Identity Compromised Host recordedfutureidentitycompromisedhost grid Recorded Future Identity No 0
Recorded Future Identity Dump Name recordedfutureidentitydumpname shortText Recorded Future Identity No 0
Recorded Future Identity Exposed Hint recordedfutureidentityexposedhint shortText Recorded Future Identity No 0
Recorded Future Identity Exposed Properties recordedfutureidentityexposedproperties shortText Recorded Future Identity No 0
Recorded Future Identity Exposed Secret recordedfutureidentityexposedsecret grid Recorded Future Identity No 0
Recorded Future Identity Exposed Value recordedfutureidentityexposedvalue shortText Recorded Future Identity No 0
Recorded Future Identity Malware Family recordedfutureidentitymalwarefamily shortText Recorded Future Identity No 0
Recorded Future Identity Name recordedfutureidentityname shortText Recorded Future Identity No 0
Recorded Future Insikt Notes recordedfutureinsiktnotes grid Recorded Future Intelligence No 0
Recorded Future Risk Rule recordedfutureriskrule grid Recorded Future Intelligence No 0
Recorded Future Targeted Domains recordedfuturetargeteddomains longText Recorded Future Intelligence No 0
Recorded Future Targeted Products recordedfuturetargetedproducts shortText Recorded Future Intelligence No 0
Recorded Future Whois Record Data recordedfuturewhoisrecorddata grid Recorded Future Intelligence No 0
Referenced Resource ID referencedresourceid multiSelect Common Types No 0
Referenced Resource Name referencedresourcename multiSelect Common Types No 0
Region region shortText Common Types No 0
Region ID regionid shortText Common Types No 0
Registration Email registrationemail shortText Common Types No 0
Registry Data registrydata multiSelect Core Alert Fields No 0
Registry Full Key registryfullkey multiSelect Core Alert Fields No 0
Registry Hive registryhive multiSelect Common Types No 0
Registry Key registrykey multiSelect Common Types No 0
Registry Value registryvalue multiSelect Common Types No 0
Registry Value Type registryvaluetype multiSelect Common Types No 0
Related Alerts relatedalerts markdown Common Types No 0
Related Campaign relatedcampaign shortText Common Types No 0
Related Endpoints relatedendpoints shortText Common Types No 0
Related Report relatedreport shortText Common Types No 0
Relevance - Offense relevanceoffense number IBM QRadar No 0
Remaining Task Count remainingtaskcount shortText Rapid Breach Response No 0
Remediated Techniques remediatedtechniques markdown MITRE ATT&CK - Courses of Action No 0
Remediation SLA remediationsla timer Common Types No 0
Remediation Task Count remediationtaskcount shortText Rapid Breach Response No 0
Remote Agent Hostname remoteagenthostname multiSelect Core Alert Fields No 0
Remote Host remotehost multiSelect Core Alert Fields No 0
Remote IP remoteip multiSelect Core Alert Fields No 0
Remote Port remoteport multiSelect Core Alert Fields No 0
RemovedFromCampaigns removedfromcampaigns multiSelect Common Types No 0
Rendered HTML renderedhtml html Common Types No 0
Report Name reportname markdown Common Types No 0
Reported Email CC reportedemailcc shortText Phishing No 0
Reported Email From reportedemailfrom shortText Phishing No 0
Reported Email Message ID reportedemailmessageid shortText Phishing No 0
Reported Email Origin reportedemailorigin singleSelect Phishing No 0
Reported Email Subject reportedemailsubject shortText Phishing No 0
Reported Email To reportedemailto shortText Phishing No 0
Reporter Email Address reporteremailaddress shortText Common Types No 0
Requirements requirements grid FireMon Security Manager No 0
Resident Notification Option residentnotificationoption shortText Common Scripts No 0
Residents Email Address residentsemailaddress grid Common Scripts No 0
Resolved resolved boolean Nutanix Hypervisor No 0
Resource API Name resourceapiname shortText Prisma Cloud by Palo Alto Networks No 0
Resource Cloud Type resourcecloudtype shortText Prisma Cloud by Palo Alto Networks No 0
Resource ID resourceid shortText Common Types No 0
Resource Name resourcename shortText Common Types No 0
Resource Type resourcetype shortText Common Types No 0
Resource URL resourceurl shortText Common Types No 0
Risk Name riskname shortText Common Types No 0
Risk Rating riskrating shortText Common Types No 0
Risk Score riskscore shortText Common Types No 0
RiskIQ Asset AWS Security Group Name riskiqassetawssecuritygroupname shortText RiskIQ Digital Footprint No 0
RiskIQ Asset Contact riskiqassetcontact shortText RiskIQ Digital Footprint No 0
RiskIQ Asset GCP Firewall Name riskiqassetgcpfirewallname shortText RiskIQ Digital Footprint No 0
RiskIQ Asset Name riskiqassetname shortText RiskIQ Digital Footprint No 0
RiskIQ Asset Okta Zone ID riskiqassetoktazoneid shortText RiskIQ Digital Footprint No 0
RiskIQ Asset Owner riskiqassetowner shortText RiskIQ Digital Footprint No 0
RiskIQ Asset Type riskiqassettype singleSelect RiskIQ Digital Footprint No 0
RiskIQ Auto Exclude Whitelisted IP Address riskiqautoexcludewhitelistedipaddress singleSelect RiskIQ Digital Footprint No 0
RiskIQ Auto Whitelist IP Address riskiqautowhitelistipaddress singleSelect RiskIQ Digital Footprint No 0
RiskIQ Skip Manual Tasks riskiqskipmanualtasks boolean RiskIQ Digital Footprint No 0
RiskIQ Support Contact riskiqsupportcontact shortText RiskIQ Digital Footprint No 0
Rubrik Actor ID rubrikactorid shortText Rubrik Security Cloud No 0
Rubrik Actor Name rubrikactorname shortText Rubrik Security Cloud No 0
Rubrik Actor Privilege Type rubrikactorprivilegetype shortText Rubrik Security Cloud No 0
Rubrik Actor State rubrikactorstate shortText Rubrik Security Cloud No 0
Rubrik Actor Type rubrikactortype shortText Rubrik Security Cloud No 0
Rubrik CDM Cluster ID rubrikcdmclusterid shortText Rubrik Security Cloud No 0
Rubrik CDM Cluster Location rubrikcdmclusterlocation shortText Rubrik Security Cloud No 0
Rubrik CDM Cluster Name rubrikcdmclustername shortText Rubrik Security Cloud No 0
Rubrik Data Categories rubrikdatacategories grid Rubrik Security Cloud No 0
Rubrik Data Types rubrikdatatypes grid Rubrik Security Cloud No 0
Rubrik Detection Time rubrikdetectiontime date Rubrik Security Cloud No 0
Rubrik Domain ID rubrikdomainid shortText Rubrik Security Cloud No 0
Rubrik Domain Name rubrikdomainname shortText Rubrik Security Cloud No 0
Rubrik Entity ID rubrikentityid shortText Rubrik Security Cloud No 0
Rubrik Entity Name rubrikentityname shortText Rubrik Security Cloud No 0
Rubrik Event Time rubrikeventtime date Rubrik Security Cloud No 0
Rubrik File Match Count rubrikfilematchcount number Rubrik Security Cloud No 0
Rubrik Files At Risk rubrikfilesatrisk grid Rubrik Security Cloud No 0
Rubrik High Risk Hits rubrikhighriskhits number Rubrik Security Cloud No 0
Rubrik IR Violation Status rubrikirviolationstatus singleSelect Rubrik Security Cloud No 0
Rubrik Identity Provider rubrikidentityprovider shortText Rubrik Security Cloud No 0
Rubrik Identity Tags rubrikidentitytags multiSelect Rubrik Security Cloud No 0
Rubrik Last Detected rubriklastdetected date Rubrik Security Cloud No 0
Rubrik Low Risk Hits rubriklowriskhits number Rubrik Security Cloud No 0
Rubrik Manual Remediation Process rubrikmanualremediationprocess longText Rubrik Security Cloud No 0
Rubrik Match Types rubrikmatchtypes multiSelect Rubrik Security Cloud No 0
Rubrik Medium Risk Hits rubrikmediumriskhits number Rubrik Security Cloud No 0
Rubrik Mitre Tactic rubrikmitretactic shortText Rubrik Security Cloud No 0
Rubrik Native Type rubriknativetype shortText Rubrik Security Cloud No 0
Rubrik No Risk Hits rubriknoriskhits number Rubrik Security Cloud No 0
Rubrik Object Account Name rubrikobjectaccountname shortText Rubrik Security Cloud No 0
Rubrik Object Create Time rubrikobjectcreatetime date Rubrik Security Cloud No 0
Rubrik Object Location rubrikobjectlocation shortText Rubrik Security Cloud No 0
Rubrik Object Platform rubrikobjectplatform shortText Rubrik Security Cloud No 0
Rubrik Object Region rubrikobjectregion shortText Rubrik Security Cloud No 0
Rubrik Polaris Activity Series ID rubrikpolarisactivityseriesid shortText Rubrik Security Cloud No 0
Rubrik Polaris Activity Type rubrikpolarisactivitytype shortText Rubrik Security Cloud No 0
Rubrik Polaris Analysis Pipeline rubrikpolarisanalysispipeline grid Rubrik Security Cloud No 0
Rubrik Polaris Analysis Progress Hidden rubrikpolarisanalysisprogress shortText Rubrik Security Cloud No 0
Rubrik Polaris CDM Cluster ID Hidden rubrikpolariscdmclusterid shortText Rubrik Security Cloud No 0
Rubrik Polaris CDM Cluster Name Hidden rubrikpolariscdmclustername shortText Rubrik Security Cloud No 0
Rubrik Polaris Cluster Location Path rubrikpolarisclusterlocationpath shortText Rubrik Security Cloud No 0
Rubrik Polaris Event Completed rubrikpolariseventcompleted shortText Rubrik Security Cloud No 0
Rubrik Polaris Event ID rubrikpolariseventid shortText Rubrik Security Cloud No 0
Rubrik Polaris FID rubrikpolarisfid shortText Rubrik Security Cloud No 0
Rubrik Polaris Last Activity Status rubrikpolarislastactivitystatus shortText Rubrik Security Cloud No 0
Rubrik Polaris Last Updated Hidden rubrikpolarislastupdated shortText Rubrik Security Cloud No 0
Rubrik Polaris Message Hidden rubrikpolarismessage grid Rubrik Security Cloud No 0
Rubrik Polaris Object ID rubrikpolarisobjectid shortText Rubrik Security Cloud No 0
Rubrik Polaris Object Name rubrikpolarisobjectname shortText Rubrik Security Cloud No 0
Rubrik Polaris Object Type rubrikpolarisobjecttype shortText Rubrik Security Cloud No 0
Rubrik Polaris Start Time rubrikpolarisstarttime date Rubrik Security Cloud No 0
Rubrik Policy Category rubrikpolicycategory shortText Rubrik Security Cloud No 0
Rubrik Policy Frameworks rubrikpolicyframeworks multiSelect Rubrik Security Cloud No 0
Rubrik Policy Name rubrikpolicyname shortText Rubrik Security Cloud No 0
Rubrik Principal Type rubrikprincipaltype shortText Rubrik Security Cloud No 0
Rubrik Privilege Type rubrikprivilegetype shortText Rubrik Security Cloud No 0
Rubrik Resource Source rubrikresourcesource shortText Rubrik Security Cloud No 0
Rubrik Resource Status rubrikresourcestatus shortText Rubrik Security Cloud No 0
Rubrik Resource Unique ID rubrikresourceuniqueid shortText Rubrik Security Cloud No 0
Rubrik Root Domain ID rubrikrootdomainid shortText Rubrik Security Cloud No 0
Rubrik Root Domain Name rubrikrootdomainname shortText Rubrik Security Cloud No 0
Rubrik Snapshot ID rubriksnapshotid shortText Rubrik Security Cloud No 0
Rubrik Suspicious File Count rubriksuspiciousfilecount number Rubrik Security Cloud No 0
Rubrik Suspicious File List rubriksuspiciousfilelist grid Rubrik Security Cloud No 0
Rubrik Target ID rubriktargetid shortText Rubrik Security Cloud No 0
Rubrik Target Identity Provider rubriktargetidentityprovider shortText Rubrik Security Cloud No 0
Rubrik Target Name rubriktargetname shortText Rubrik Security Cloud No 0
Rubrik Target Privilege Type rubriktargetprivilegetype shortText Rubrik Security Cloud No 0
Rubrik Target Source rubriktargetsource shortText Rubrik Security Cloud No 0
Rubrik Target Status rubriktargetstatus shortText Rubrik Security Cloud No 0
Rubrik Target Type rubriktargettype shortText Rubrik Security Cloud No 0
Rubrik Total Risk Hits rubriktotalriskhits number Rubrik Security Cloud No 0
Rubrik User Principal Name rubrikuserprincipalname shortText Rubrik Security Cloud No 0
Rubrik Violation ID rubrikviolationid shortText Rubrik Security Cloud No 0
Rubrik Violation Name rubrikviolationname shortText Rubrik Security Cloud No 0
Rubrik Violation Status rubrikviolationstatus singleSelect Rubrik Security Cloud No 0
Rule ID ruleid shortText Core Alert Fields No 0
Rule Name rulename shortText Common Types No 0
Run with 'insecure' runwithinsecure boolean Troubleshoot No 0
SANS Stage sansstage shortText SANS No 0
SDLP Action Status ID sdlpactionstatusid shortText Symantec Data Loss Prevention No 0
SDLP Detection Server Name sdlpdetectionservername shortText Symantec Data Loss Prevention No 0
SDLP Group Name sdlpgroupname shortText Symantec Data Loss Prevention No 0
SDLP Incident Type sdlpincidenttype shortText Symantec Data Loss Prevention No 0
SDLP Message Type sdlpmessagetype shortText Symantec Data Loss Prevention No 0
SDLP Policy Version sdlppolicyversion shortText Symantec Data Loss Prevention No 0
SDLP Policy Violations Count sdlppolicyviolationscount shortText Symantec Data Loss Prevention No 0
SDLP Recipient URL sdlprecipienturl shortText Symantec Data Loss Prevention No 0
SDLP Scan Start sdlpscanstart shortText Symantec Data Loss Prevention No 0
SDLP Scanned Machine sdlpscannedmachine shortText Symantec Data Loss Prevention No 0
SDLP Target sdlptarget shortText Symantec Data Loss Prevention No 0
SDO Feed sdofeed markdown Proactive Threat Hunting No 0
SDO Name sdoname markdown Proactive Threat Hunting No 0
SHA1 sha1 shortText Common Types No 0
SHA256 sha256 shortText Common Types No 0
SHA512 sha512 shortText Common Types No 0
SKU Name skuname shortText Common Types No 0
SKU TIER skutier shortText Common Types No 0
SOCRadar Company ID socradarcompanyid shortText SOCRadar No 0
SOCRadar Detection And Analysis socradardetectionandanalysis html SOCRadar No 0
SOCRadar Incident Assets socradarincidentassets shortText SOCRadar No 0
SOCRadar Incident Content socradarincidentcontent html SOCRadar No 0
SOCRadar Incident ID socradarincidentid shortText SOCRadar No 0
SOCRadar Incident Link socradarincidentlink url SOCRadar No 0
SOCRadar Incident Main Type socradarincidentmaintype shortText SOCRadar No 0
SOCRadar Incident Sub Type socradarincidentsubtype shortText SOCRadar No 0
SOCRadar Mitigation socradarmitigation shortText SOCRadar No 0
SOCRadar Post Incident Analysis socradarpostincidentanalysis html SOCRadar No 0
SOCRadar Related Assets socradarrelatedassets shortText SOCRadar No 0
SOCRadar Related Entities socradarrelatedentities shortText SOCRadar No 0
SOCRadar Response socradarresponse html SOCRadar No 0
SSDeep ssdeep shortText Common Types No 0
SSL Certificates (Expired) sslcertificatesexpired grid SSL Certificates No 0
SSL Certificates (Expiring) sslcertificatesexpiring grid SSL Certificates No 0
SSL Certificates (Good) sslcertificatesgood grid SSL Certificates No 0
SSL Certificates (Warning) sslcertificateswarning grid SSL Certificates No 0
Saas Security Asset ID saassecurityassetid shortText SaaS Security by Palo Alto Networks No 0
Saas Security Asset Name saassecurityassetname shortText SaaS Security by Palo Alto Networks No 0
Saas Security Asset Owner saassecurityassetowner shortText SaaS Security by Palo Alto Networks No 0
Saas Security Asset Owner Email saassecurityassetowneremail shortText SaaS Security by Palo Alto Networks No 0
Saas Security Asset URL saassecurityasseturl shortText SaaS Security by Palo Alto Networks No 0
Saas Security Assigned To saassecurityassignedto shortText SaaS Security by Palo Alto Networks No 0
Saas Security Category saassecuritycategory singleSelect SaaS Security by Palo Alto Networks No 0
Saas Security Incident Id saassecurityincidentid number SaaS Security by Palo Alto Networks No 0
Saas Security Incident Severity Level saassecurityincidentseveritylevel shortText SaaS Security by Palo Alto Networks No 0
Saas Security Remediation Type saassecurityremediationtype singleSelect SaaS Security by Palo Alto Networks No 0
Saas Security Remove Inherited Sharing saassecurityremoveinheritedsharing boolean SaaS Security by Palo Alto Networks No 0
Saas Security Resolved By saassecurityresolvedby shortText SaaS Security by Palo Alto Networks No 0
Saas Security State saassecuritystate singleSelect SaaS Security by Palo Alto Networks No 0
Saas Security Status saassecuritystatus singleSelect SaaS Security by Palo Alto Networks No 0
SafeBreach Affected Targets safebreachaffectedtargets grid SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Affected Targets Count safebreachaffectedtargetscount number SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Attack Count safebreachattackcount number SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Attack Ids safebreachattackids tagsSelect SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Insight Category safebreachinsightcategory shortText SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Insight Id safebreachinsightid number SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Insight Name safebreachinsightname shortText SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Insight Risk Impact safebreachinsightriskimpact number SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Latest Simulation safebreachlatestsimulation date SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Remediation Action safebreachremediationaction shortText SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Remediation Data safebreachremediationdata grid SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Remediation Data Count safebreachremediationdatacount number SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Remediation Status safebreachremediationstatus singleSelect SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Results Link safebreachresultslink url SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Severity safebreachseverity singleSelect SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Severity Score safebreachseverityscore number SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Simulation Id safebreachsimulationid shortText SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Simulation Number safebreachsimulationnumber number SafeBreach - Breach and Attack Simulation platform No 0
SafeBreach Threat Groups safebreachthreatgroups tagsSelect SafeBreach - Breach and Attack Simulation platform No 0
SafeNet Trusted Access - Instance Name safenettrustedaccessinstancename shortText Thales SafeNet Trusted Access No 0
SafeNet Trusted Access - Remove User from Unusual Activity Group safenettrustedaccessremoveuserfromunusualactivitygroup singleSelect Thales SafeNet Trusted Access No 0
SafeNet Trusted Access - Unusual Activity Group safenettrustedaccessunusualactivitygroup shortText Thales SafeNet Trusted Access No 0
SafeNet Trusted Access - User in Unusual Activity Group (Hours) safenettrustedaccessuserinunusualactivitygrouphours shortText Thales SafeNet Trusted Access No 0
SafeNet Trusted Access - Username safenettrustedaccessusername shortText Thales SafeNet Trusted Access No 0
SailPoint IdentityIQ Alert Display Name sailpointidentityiqalertdisplayname shortText SailPoint IdentityIQ No 0
SailPoint IdentityIQ Alert Target Display Name sailpointidentityiqalerttargetdisplayname shortText SailPoint IdentityIQ No 0
SailPoint IdentityIQ Alert Target Id sailpointidentityiqalerttargetid shortText SailPoint IdentityIQ No 0
SailPoint IdentityIQ Alert Target Type sailpointidentityiqalerttargettype shortText SailPoint IdentityIQ No 0
SailPoint IdentityIQ Alert Type sailpointidentityiqalerttype shortText SailPoint IdentityIQ No 0
SailPoint IdentityNow Trigger Access Request Details sailpointidentitynowtriggeraccessrequestdetails shortText SailPoint IdentityNow No 0
SailPoint IdentityNow Trigger Account Aggregated Details sailpointidentitynowtriggeraccountaggregateddetails shortText SailPoint IdentityNow No 0
SailPoint IdentityNow Trigger Attributes sailpointidentitynowtriggerattributes shortText SailPoint IdentityNow No 0
SailPoint IdentityNow Trigger Changes sailpointidentitynowtriggerchanges shortText SailPoint IdentityNow No 0
SailPoint IdentityNow Trigger Identity sailpointidentitynowtriggeridentity shortText SailPoint IdentityNow No 0
SailPoint IdentityNow Trigger Metadata sailpointidentitynowtriggermetadata shortText SailPoint IdentityNow No 0
SailPoint IdentityNow Trigger Post Provisioning Details sailpointidentitynowtriggerpostprovisioningdetails shortText SailPoint IdentityNow No 0
SailPoint IdentityNow Trigger Search Completed Details sailpointidentitynowtriggersearchcompleteddetails shortText SailPoint IdentityNow No 0
SalesforceV2 Case Number salesforcecasenumber shortText SalesforceV2 No 0
SalesforceV2 Closed Date salesforcecloseddate date SalesforceV2 No 0
SalesforceV2 Escalated salesforceescalated boolean SalesforceV2 No 0
SalesforceV2 Last Modified Date salesforcelastmodifieddate date SalesforceV2 No 0
SalesforceV2 Milestone Status salesforcemilestonestatus shortText SalesforceV2 No 0
SalesforceV2 Origin salesforceorigin shortText SalesforceV2 No 0
SalesforceV2 Owner salesforceowner shortText SalesforceV2 No 0
SalesforceV2 Priority salesforcepriority shortText SalesforceV2 No 0
SalesforceV2 Status salesforcestatus singleSelect SalesforceV2 No 0
SalesforceV2 Subject salesforcesubject shortText SalesforceV2 No 0
Scan Source Type scansourcetype singleSelect Port Scan No 0
Scenario scenario multiSelect Common Types No 0
Secretary Notification secretarynotification singleSelect Common Scripts No 0
Sector of Affected Party sectorofaffectedparty shortText Common Scripts No 0
Security Policy Match securitypolicymatch grid Change Management No 0
SecurityScorecard Company Name securityscorecardcompanyname shortText SecurityScorecard No 0
SecurityScorecard Domain securityscorecarddomain url SecurityScorecard No 0
SecurityScorecard Factor securityscorecardfactor shortText SecurityScorecard No 0
SecurityScorecard Grade securityscorecardgrade shortText SecurityScorecard No 0
SecurityScorecard Score securityscorecardscore number SecurityScorecard No 0
SecurityScorecard Score Impact securityscorecardscoreimpact number SecurityScorecard No 0
SecurityScorecard Username securityscorecardusername shortText SecurityScorecard No 0
Securonix Bulk Action Allowed securonixbulkactionallowed boolean Securonix No 0
Securonix Case Create Time securonixcasecreatetime date Securonix No 0
Securonix Case Event End Time securonixcaseeventendtime date Securonix No 0
Securonix Category securonixcategory shortText Securonix No 0
Securonix Close Incident securonixcloseincident boolean Securonix No 0
Securonix Entity securonixentity shortText Securonix No 0
Securonix Entity ID securonixentityid shortText Securonix No 0
Securonix Incident ID securonixincidentid shortText Securonix No 0
Securonix Incident Status securonixincidentstatus shortText Securonix No 0
Securonix Incident Type securonixincidenttype shortText Securonix No 0
Securonix Is Whitelisted securonixiswhitelisted boolean Securonix No 0
Securonix Last Update Date securonixlastupdatedate date Securonix No 0
Securonix Parent Case ID securonixparentcaseid shortText Securonix No 0
Securonix Policies securonixpolicies multiSelect Securonix No 0
Securonix Policy Stages securonixpolicystages markdown Securonix No 0
Securonix Policy Type securonixpolicytype shortText Securonix No 0
Securonix Reason securonixreason multiSelect Securonix No 0
Securonix Resource Name securonixresourcename shortText Securonix No 0
Securonix Resource Type securonixresourcetype shortText Securonix No 0
Securonix ResourceGroup Name securonixresourcegroupname shortText Securonix No 0
Securonix Risk Score securonixriskscore number Securonix No 0
Securonix Sandbox Policy securonixsandboxpolicy boolean Securonix No 0
Securonix Status Completed securonixstatuscompleted boolean Securonix No 0
Securonix Tenant Color securonixtenantcolor shortText Securonix No 0
Securonix Tenant ID securonixtenantid number Securonix No 0
Securonix Tenant Short Code securonixtenantshortcode shortText Securonix No 0
Securonix Threat Generation Time securonixthreatgenerationtime date Securonix No 0
Securonix Violation Count securonixviolationcount number Securonix No 0
Securonix Violation Spotter Query securonixviolationspotterquery shortText Securonix No 0
Securonix Violator securonixviolator shortText Securonix No 0
Securonix Violator ID securonixviolatorid shortText Securonix No 0
Securonix Violator Sub Text securonixviolatorsubtext shortText Securonix No 0
Securonix Violator Text securonixviolatortext shortText Securonix No 0
Securonix Watchlisted securonixwatchlisted boolean Securonix No 0
Securonix Workflow Name securonixworkflowname shortText Securonix No 0
SekoiaXDR Alert Details sekoiaxdralertdetails markdown SekoiaXDR No 0
SekoiaXDR Alert Reject sekoiaxdralertreject boolean SekoiaXDR No 0
SekoiaXDR Alert Status sekoiaxdralertstatus shortText SekoiaXDR No 0
SekoiaXDR Events sekoiaxdrevents grid SekoiaXDR No 0
SekoiaXDR First Seen sekoiaxdrfirstseen shortText SekoiaXDR No 0
SekoiaXDR Kill Chain sekoiaxdrkillchain grid SekoiaXDR No 0
SekoiaXDR MirrorOut sekoiaxdrmirrorout boolean SekoiaXDR No 0
Select Action selectaction singleSelect Phishing Campaign No 0
Select Campaign Incidents selectcampaignincidents multiSelect Phishing Campaign No 0
Select Low Similarity Incidents selectlowsimilarityincidents multiSelect Phishing Campaign No 0
Selected Indicators selectedindicators multiSelect Common Types No 0
Send Body as Raw Text (No Markdown) sendbodyasrawnomarkdown boolean Email Communication No 0
Sensor IP sensorip shortText Common Types No 0
Sensor Name sensorname shortText Common Types No 0
SentinelOne Account ID sentineloneaccountid shortText SentinelOne No 0
SentinelOne Account Name sentineloneaccountname shortText SentinelOne No 0
SentinelOne Agent Network Status sentineloneagentnetworkstatus shortText SentinelOne No 0
SentinelOne Classification Source sentineloneclassificationsource shortText SentinelOne No 0
SentinelOne Cloud Provider sentinelonecloudprovider singleSelect SentinelOne No 0
SentinelOne Cloud Provider Account sentinelonecloudprovideraccount shortText SentinelOne No 0
SentinelOne Cloud Provider Image sentinelonecloudproviderimage shortText SentinelOne No 0
SentinelOne Cloud Provider Instance ID sentinelonecloudproviderinstanceid shortText SentinelOne No 0
SentinelOne Cloud Provider Instance Size sentinelonecloudproviderinstancesize shortText SentinelOne No 0
SentinelOne Cloud Provider Location sentinelonecloudproviderlocation shortText SentinelOne No 0
SentinelOne Cloud Provider Network sentinelonecloudprovidernetwork shortText SentinelOne No 0
SentinelOne Cloud Provider Resource Group sentinelonecloudproviderresourcegroup shortText SentinelOne No 0
SentinelOne Cloud Provider Role sentinelonecloudproviderrole shortText SentinelOne No 0
SentinelOne Cloud Provider Security Group sentinelonecloudprovidersecuritygroup multiSelect SentinelOne No 0
SentinelOne Cloud Provider Service Account sentinelonecloudproviderserviceaccount shortText SentinelOne No 0
SentinelOne Cloud Provider SubnetId sentinelonecloudprovidersubnetid multiSelect SentinelOne No 0
SentinelOne Cloud Provider Tags sentinelonecloudprovidertags multiSelect SentinelOne No 0
SentinelOne Group ID sentinelonegroupid shortText SentinelOne No 0
SentinelOne Group Name sentinelonegroupname shortText SentinelOne No 0
SentinelOne Kubernetes Cluster sentinelonekubernetescluster shortText SentinelOne No 0
SentinelOne Kubernetes Controller Kind sentinelonekubernetescontrollerkind shortText SentinelOne No 0
SentinelOne Kubernetes Controller Labels sentinelonekubernetescontrollerlabels multiSelect SentinelOne No 0
SentinelOne Kubernetes Controller Name sentinelonekubernetescontrollername shortText SentinelOne No 0
SentinelOne Kubernetes Namespace sentinelonekubernetesnamespace shortText SentinelOne No 0
SentinelOne Kubernetes Namespace Labels sentinelonekubernetesnamespacelabels multiSelect SentinelOne No 0
SentinelOne Kubernetes Node sentinelonekubernetesnode shortText SentinelOne No 0
SentinelOne Kubernetes Node Labels sentinelonekubernetesnodelabels multiSelect SentinelOne No 0
SentinelOne Kubernetes Pod sentinelonekubernetespod shortText SentinelOne No 0
SentinelOne Kubernetes Pod Labels sentinelonekubernetespodlabels multiSelect SentinelOne No 0
SentinelOne Kubernetes isContainerQuarantine sentinelonekubernetesiscontainerquarantine boolean SentinelOne No 0
SentinelOne Network Interface Details sentinelonenetworkinterfacedetails grid SentinelOne No 0
SentinelOne Site ID sentinelonesiteid shortText SentinelOne No 0
SentinelOne Site Name sentinelonesitename shortText SentinelOne No 0
SentinelOne Threat Analyst Verdict sentinelonethreatanalystverdict singleSelect SentinelOne No 0
SentinelOne Threat ID sentinelonethreatid shortText SentinelOne No 0
SentinelOne Threat Status sentinelonethreatstatus singleSelect SentinelOne No 0
SentinelOne Threat Story Line sentinelonethreatstoryline shortText SentinelOne No 0
SentinelOne UAM Alert Analyst Verdict Hidden sentineloneuamalertanalystverdict shortText SentinelOne No 0
SentinelOne UAM Alert Analyst Verdict Mapped sentineloneuamalertanalystverdictmapped singleSelect SentinelOne No 0
SentinelOne UAM Alert Attack Surfaces sentineloneuamalertattacksurfaces multiSelect SentinelOne No 0
SentinelOne UAM Alert Detection Product sentineloneuamalertdetectionproduct shortText SentinelOne No 0
SentinelOne UAM Alert External Id sentineloneuamalertexternalid shortText SentinelOne No 0
SentinelOne UAM Alert ID sentineloneuamalertid shortText SentinelOne No 0
SentinelOne UAM Alert Name sentineloneuamalertname shortText SentinelOne No 0
SentinelOne UAM Alert Status sentineloneuamalertstatus singleSelect SentinelOne No 0
Service service shortText FireMon Security Manager No 0
ServiceNow Assigned To servicenowassignedto shortText ServiceNow No 0
ServiceNow Assignment Group servicenowassignmentgroup shortText ServiceNow No 0
ServiceNow Attack Vector servicenowattackvector shortText ServiceNow No 0
ServiceNow Business Impact servicenowbusinessimpact singleSelect ServiceNow No 0
ServiceNow Caller servicenowcaller shortText ServiceNow No 0
ServiceNow Caller ID servicenowcallerid shortText ServiceNow No 0
ServiceNow Category servicenowcategory singleSelect ServiceNow No 0
ServiceNow Closed By servicenowclosedby shortText ServiceNow No 0
ServiceNow Closed Date servicenowcloseddate date ServiceNow No 0
ServiceNow Description servicenowdescription longText ServiceNow No 0
ServiceNow Due Date servicenowduedate date ServiceNow No 0
ServiceNow Escalation servicenowescalation shortText ServiceNow No 0
ServiceNow Impact servicenowimpact singleSelect ServiceNow No 0
ServiceNow Notify servicenownotify singleSelect ServiceNow No 0
ServiceNow Opened Date servicenowopeneddate date ServiceNow No 0
ServiceNow Priority servicenowpriority singleSelect ServiceNow No 0
ServiceNow Record ID servicenowrecordid shortText IoT by Palo Alto Networks No 0
ServiceNow Resolution Code servicenowresolutioncode shortText ServiceNow No 0
ServiceNow Resolution Notes servicenowresolutionnotes shortText ServiceNow No 0
ServiceNow Resolved Time servicenowresolvedtime date ServiceNow No 0
ServiceNow SIR Category servicenowsircategory singleSelect ServiceNow No 0
ServiceNow SIR State servicenowsirstate singleSelect ServiceNow No 0
ServiceNow Severity servicenowseverity singleSelect ServiceNow No 0
ServiceNow State servicenowstate singleSelect ServiceNow No 0
ServiceNow Table Name servicenowtablename shortText IoT by Palo Alto Networks No 0
ServiceNow Ticket ID servicenowticketid shortText ServiceNow No 0
ServiceNow Ticket Number servicenowticketnumber shortText ServiceNow No 0
ServiceNow Urgency servicenowurgency singleSelect ServiceNow No 0
Severity - Offense severityoffense number IBM QRadar No 0
Shadow IT Account Owner Email shadowitaccountowneremail shortText Shadow IT No 0
Shadow IT Account Owner Name shadowitaccountownername shortText Shadow IT No 0
Shadow IT Billed To Corp shadowitbilledtocorp boolean Shadow IT No 0
Shadow IT Certificate shadowitcertificate shortText Shadow IT No 0
Shadow IT Cloud Account ID shadowitcloudaccountid shortText Shadow IT No 0
Shadow IT Cloud Account Type shadowitcloudaccounttype singleSelect Shadow IT No 0
Shadow IT FQDN shadowitfqdn shortText Shadow IT No 0
Shadow IT IP shadowitip shortText Shadow IT No 0
Shadow IT OU Contact Email shadowitoucontactemail shortText Shadow IT No 0
Shadow IT OU Contact Name shadowitoucontactname shortText Shadow IT No 0
Shadow IT Organizational Unit shadowitorganizationalunit shortText Shadow IT No 0
Shadow IT Port shadowitport number Shadow IT No 0
Shadow IT Provider shadowitprovider shortText Shadow IT No 0
Shadow IT Region shadowitregion shortText Shadow IT No 0
Shadow IT Risk shadowitrisk singleSelect Shadow IT No 0
Shadow IT Sactioned Service shadowitsactionedservice boolean Shadow IT No 0
Shadow IT Sensitive Data shadowitsensitivedata boolean Shadow IT No 0
Shadow IT Service shadowitservice shortText Shadow IT No 0
Shadow IT Service Purpose shadowitservicepurpose multiSelect Shadow IT No 0
Shadow IT Source shadowitsource shortText Shadow IT No 0
Shadow IT User Suggestions shadowitusersuggestions grid Shadow IT No 0
Shift manager briefing shiftmanagerbriefing longText Shift Management No 0
Shift open incidents shiftopenincidents grid Shift Management No 0
Sign In Date Time signindatetime date Impossible Traveler No 0
Signature signature shortText Common Types No 0
Similar File Hashes Based on SSDeep similarfilehashesbasedonssdeep grid Uncover Unknown Malware Using SSDeep No 0
Similar incidents Dbot similarincidentsdbot grid Common Types No 0
Simple Debugger Cmd simpledebuggercmd shortText Simple Debugger No 0
Simple Debugger Code simpledebuggercode markdown Simple Debugger No 0
Simple Debugger Data simpledebuggerdata markdown Simple Debugger No 0
Simple Debugger Input simpledebuggerinput longText Simple Debugger No 0
Simple Debugger Output simpledebuggeroutput markdown Simple Debugger No 0
Site cybersixgillsite shortText Cybersixgill Actionable Alerts No 0
Size - number of employees sizenumberofemployees shortText Common Scripts No 0
Size - turnover sizeturnover shortText Common Scripts No 0
Skyhigh Security Activity Count skyhighsecurityactivitycount shortText Skyhigh Security SSE No 0
Skyhigh Security Activity Names skyhighsecurityactivitynames shortText Skyhigh Security SSE No 0
Skyhigh Security Actor ID skyhighsecurityactorid shortText Skyhigh Security SSE No 0
Skyhigh Security Actor ID Type skyhighsecurityactoridtype shortText Skyhigh Security SSE No 0
Skyhigh Security Anomaly Category skyhighsecurityanomalycategory shortText Skyhigh Security SSE No 0
Skyhigh Security Anomaly Cause skyhighsecurityanomalycause shortText Skyhigh Security SSE No 0
Skyhigh Security Anomaly Count skyhighsecurityanomalycount shortText Skyhigh Security SSE No 0
Skyhigh Security Anomaly IDs skyhighsecurityanomalyids shortText Skyhigh Security SSE No 0
Skyhigh Security Anomaly Value skyhighsecurityanomalyvalue shortText Skyhigh Security SSE No 0
Skyhigh Security Content Item Hierarchy skyhighsecuritycontentitemhierarchy shortText Skyhigh Security SSE No 0
Skyhigh Security Content Item ID skyhighsecuritycontentitemid shortText Skyhigh Security SSE No 0
Skyhigh Security Content Item Name skyhighsecuritycontentitemname shortText Skyhigh Security SSE No 0
Skyhigh Security Content Item Parent skyhighsecuritycontentitemparent shortText Skyhigh Security SSE No 0
Skyhigh Security Content Item Size skyhighsecuritycontentitemsize shortText Skyhigh Security SSE No 0
Skyhigh Security Content Item Type skyhighsecuritycontentitemtype shortText Skyhigh Security SSE No 0
Skyhigh Security Destination Hostname skyhighsecuritydestinationhostname shortText Skyhigh Security SSE No 0
Skyhigh Security Device Type skyhighsecuritydevicetype shortText Skyhigh Security SSE No 0
Skyhigh Security Is Part Of Threat skyhighsecurityispartofthreat boolean Skyhigh Security SSE No 0
Skyhigh Security Is Tokenized skyhighsecurityistokenized boolean Skyhigh Security SSE No 0
Skyhigh Security Malware Confidence skyhighsecuritymalwareconfidence shortText Skyhigh Security SSE No 0
Skyhigh Security Match Count skyhighsecuritymatchcount shortText Skyhigh Security SSE No 0
Skyhigh Security Resolution Action skyhighsecurityresolutionaction shortText Skyhigh Security SSE No 0
Skyhigh Security Scan Name skyhighsecurityscanname shortText Skyhigh Security SSE No 0
Skyhigh Security Scan Run Date skyhighsecurityscanrundate shortText Skyhigh Security SSE No 0
Skyhigh Security Significantly Updated At skyhighsecuritysignificantlyupdatedat shortText Skyhigh Security SSE No 0
Skyhigh Security Total Match Count skyhighsecuritytotalmatchcount shortText Skyhigh Security SSE No 0
Skyhigh Security URLs skyhighsecurityurls shortText Skyhigh Security SSE No 0
Skyhigh Security Unique Activity Names skyhighsecurityuniqueactivitynames shortText Skyhigh Security SSE No 0
Skyhigh Security User Attributes skyhighsecurityuserattributes shortText Skyhigh Security SSE No 0
Skyhigh Security content Item Created On skyhighsecuritycontentitemcreatedon shortText Skyhigh Security SSE No 0
Skyhigh User Agent skyhighsecurityuseragent multiSelect Skyhigh Security SSE No 0
Social Engineering Domain Analysis CSV socialengineeringdomainanalysiscsv attachments Social Engineering Domain Analysis No 0
Social Engineering Domain Analysis List socialengineeringdomainanalysislist longText Social Engineering Domain Analysis No 0
Social Engineering Domain Analysis Registered Domain socialengineeringdomainanalysisregistereddomain shortText Social Engineering Domain Analysis No 0
Social Engineering Domain Analysis Summary socialengineeringdomainanalysissummary html Social Engineering Domain Analysis No 0
SolarWinds Acknowledged solarwindsacknowledged boolean SolarWinds No 0
SolarWinds Active Alert ID solarwindsactivealertid number SolarWinds No 0
SolarWinds Alert Acknowledged By solarwindsalertacknowledgedby shortText SolarWinds No 0
SolarWinds Alert Acknowledged Date Time solarwindsalertacknowledgeddatetime date SolarWinds No 0
SolarWinds Alert Acknowledged Note solarwindsalertacknowledgednote shortText SolarWinds No 0
SolarWinds Alert Created By solarwindsalertcreatedby shortText SolarWinds No 0
SolarWinds Alert Entity Caption solarwindsalertentitycaption shortText SolarWinds No 0
SolarWinds Alert Entity Details URI solarwindsalertentitydetailsuri shortText SolarWinds No 0
SolarWinds Alert Entity NetObject ID solarwindsalertentitynetobjectid shortText SolarWinds No 0
SolarWinds Alert Entity Type solarwindsalertentitytype shortText SolarWinds No 0
SolarWinds Alert Entity URI solarwindsalertentityuri shortText SolarWinds No 0
SolarWinds Alert ID solarwindsalertid number SolarWinds No 0
SolarWinds Alert Name solarwindsalertname shortText SolarWinds No 0
SolarWinds Alert Note solarwindsalertnote shortText SolarWinds No 0
SolarWinds Alert Object ID solarwindsalertobjectid number SolarWinds No 0
SolarWinds Alert Real Entity Type solarwindsalertrealentitytype shortText SolarWinds No 0
SolarWinds Alert Real Entity URI solarwindsalertrealentityuri shortText SolarWinds No 0
SolarWinds Alert Reference ID solarwindsalertreferenceid shortText SolarWinds No 0
SolarWinds Alert Related Node Caption solarwindsalertrelatednodecaption shortText SolarWinds No 0
SolarWinds Alert Related Node Details URL solarwindsalertrelatednodedetailsurl shortText SolarWinds No 0
SolarWinds Alert Related Node ID solarwindsalertrelatednodeid number SolarWinds No 0
SolarWinds Alert Type solarwindsalerttype shortText SolarWinds No 0
SolarWinds Description solarwindsdescription longText SolarWinds No 0
SolarWinds Display Name solarwindsdisplayname shortText SolarWinds No 0
SolarWinds Event Engine ID solarwindseventengineid number SolarWinds No 0
SolarWinds Event ID solarwindseventid number SolarWinds No 0
SolarWinds Event NetObject ID solarwindseventnetobjectid number SolarWinds No 0
SolarWinds Event NetObject Type solarwindseventnetobjecttype shortText SolarWinds No 0
SolarWinds Event NetObject Value solarwindseventnetobjectvalue shortText SolarWinds No 0
SolarWinds Event Type solarwindseventtype shortText SolarWinds No 0
SolarWinds Instance Site ID solarwindsinstancesiteid number SolarWinds No 0
SolarWinds Instance Type solarwindsinstancetype shortText SolarWinds No 0
SolarWinds Message solarwindsmessage longText SolarWinds No 0
SolarWinds URI solarwindsuri shortText SolarWinds No 0
Source source shortText FireMon Security Manager No 0
Source Category sourcecategory shortText Common Types No 0
Source Create time sourcecreatetime shortText Common Types No 0
Source Created By sourcecreatedby shortText Common Types No 0
Source External IPs sourceexternalips multiSelect Common Types No 0
Source Geolocation sourcegeolocation multiSelect Common Types No 0
Source Hostname sourcehostname shortText Common Types No 0
Source IP sourceip shortText Common Types No 0
Source IP - Offense sourceipoffense multiSelect IBM QRadar No 0
Source IPV6 sourceipv6 multiSelect Common Types No 0
Source IPs sourceips multiSelect Common Types No 0
Source Id sourceid shortText Common Types No 0
Source MAC Address sourcemacaddress multiSelect Common Types No 0
Source Network sourcenetwork shortText Common Types No 0
Source Network - Offense sourcenetworkoffense multiSelect IBM QRadar No 0
Source Networks sourcenetworks multiSelect Common Types No 0
Source Of Indicators sourceofindicators grid Rapid Breach Response No 0
Source Port sourceport shortText Common Types No 0
Source Priority sourcepriority shortText Common Types No 0
Source Status sourcestatus shortText Common Types No 0
Source Updated by sourceupdatedby shortText Common Types No 0
Source Urgency sourceurgency shortText Common Types No 0
Source Username sourceusername shortText Common Types No 0
Source Zone Name sourcezonename multiSelect Core Alert Fields No 0
Splunk Comments splunkcomments multiSelect Splunk No 0
Splunk Consolidated Findings splunkconsolidatedfindings longText Splunk No 0
Splunk Dest Risk Object Type splunkdestriskobjecttype shortText Splunk No 0
Splunk Dest Risk Score splunkdestriskscore number Splunk No 0
Splunk Disposition splunkdisposition singleSelect Splunk No 0
Splunk Drilldown splunkdrilldown markdown Splunk No 0
Splunk ES Event Type splunkeseventtype shortText Splunk No 0
Splunk Excluded Finding IDs splunkexcludedfindingids multiSelect Splunk No 0
Splunk Implicit Finding IDs splunkimplicitfindingids multiSelect Splunk No 0
Splunk Incident IDs splunkincidentids multiSelect Splunk No 0
Splunk Incident Origin splunkincidentorigin shortText Splunk No 0
Splunk Intermediate Finding IDs splunkintermediatefindingids multiSelect Splunk No 0
Splunk Investigation GUID splunkinvestigationguid shortText Splunk No 0
Splunk Investigation ID splunkinvestigationid shortText Splunk No 0
Splunk Investigation Name splunkinvestigationname shortText Splunk No 0
Splunk Investigation Type splunkinvestigationtype shortText Splunk No 0
Splunk Notable Reviewer splunknotablereviewer user Splunk No 0
Splunk Notes splunknotes multiSelect Splunk No 0
Splunk Risk Object splunkriskobject multiSelect Splunk No 0
Splunk Security Domain splunksecuritydomain shortText Splunk No 0
Splunk Sensitivity splunksensitivity shortText Splunk No 0
Splunk Status splunkstatus singleSelect Splunk No 0
Splunk Urgency splunkurgency singleSelect Splunk No 0
SpyCloud Compass Device-Data spycloudcompassdevicedata grid SpyCloud Enterprise Protection No 0
SpyCloud Confidence spycloudconfidence shortText SpyCloud Enterprise Protection No 0
SpyCloud Document ID spyclouddocumentid shortText SpyCloud Enterprise Protection No 0
SpyCloud Email Domain spycloudemaildomain shortText SpyCloud Enterprise Protection No 0
SpyCloud Email Username spycloudemailusername shortText SpyCloud Enterprise Protection No 0
SpyCloud Infected Machine ID spycloudinfectedmachineid shortText SpyCloud Enterprise Protection No 0
SpyCloud Password spycloudpassword shortText SpyCloud Enterprise Protection No 0
SpyCloud Password Plaintext spycloudpasswordplaintext shortText SpyCloud Enterprise Protection No 0
SpyCloud Password Type spycloudpasswordtype shortText SpyCloud Enterprise Protection No 0
SpyCloud Publish Date spycloudpublishdate shortText SpyCloud Enterprise Protection No 0
SpyCloud Record Modification Date spycloudrecordmodificationdate shortText SpyCloud Enterprise Protection No 0
SpyCloud Target Domain spycloudtargetdomain shortText SpyCloud Enterprise Protection No 0
SpyCloud Target Subdomain spycloudtargetsubdomain shortText SpyCloud Enterprise Protection No 0
SpyCloud User Browser spyclouduserbrowser shortText SpyCloud Enterprise Protection No 0
SpyCloud User SYS Registered Owner spycloudusersysregisteredowner shortText SpyCloud Enterprise Protection No 0
SpyCloud User System Domain spycloudusersystemdomain shortText SpyCloud Enterprise Protection No 0
Src src shortText Common Types No 0
Src Hostname srchostname shortText Common Types No 0
Src NT Domain srcntdomain shortText Common Types No 0
Src OS srcos shortText Common Types No 0
Src Ports srcports multiSelect Common Types No 0
Src User srcuser shortText Common Types No 0
Srcs srcs multiSelect Common Types No 0
Stamus Host First Seen stamushostfirstseen date Stamus No 0
Stamus Host Last Seen stamushostlastseen date Stamus No 0
Stamus Host Roles stamushostroles shortText Stamus No 0
StamusFamilyDescription stamusfamilydescription shortText Stamus No 0
StamusFamilyID stamusfamilyid shortText Stamus No 0
StamusFamilyLink stamusfamilylink shortText Stamus No 0
StamusID stamusid shortText Stamus No 0
StamusKillchain stamuskillchain shortText Stamus No 0
StamusTarget stamustarget shortText Stamus No 0
StamusTargettype stamustargettype shortText Stamus No 0
StamusTenant stamustenant shortText Stamus No 0
StamusThreatDescription stamusthreatdescription shortText Stamus No 0
StamusThreatId stamusthreatid shortText Stamus No 0
StamusThreatLink stamusthreatlink shortText Stamus No 0
Starred starred boolean Core Alert Fields No 0
Start Time starttime shortText Common Types No 0
State state shortText Common Types No 0
State CISO Notification statecisonotification singleSelect Common Scripts No 0
State where the breach took place statewherethebreachtookplace singleSelect Common Scripts No 0
Status - Offense statusoffense shortText IBM QRadar No 0
Status Reason statusreason shortText Common Types No 0
Stellar Cyber Case Alerts stellarcybercasealerts grid Stellar Cyber No 0
Stellar Cyber Case Score stellarcybercasescore number Stellar Cyber No 0
Stellar Cyber Tenant ID stellarcybertenantid shortText Stellar Cyber No 0
Street Address streetaddress shortText Common Types No 0
String Similarity Results stringsimilarityresults markdown Common Types No 0
Sub Category subcategory shortText Common Types No 0
Subscription Assigned By subscriptionassignedby shortText Prisma Cloud by Palo Alto Networks No 0
Subscription Created By subscriptioncreatedby shortText Prisma Cloud by Palo Alto Networks No 0
Subscription Created On subscriptioncreatedon shortText Prisma Cloud by Palo Alto Networks No 0
Subscription Description subscriptiondescription shortText Prisma Cloud by Palo Alto Networks No 0
Subscription ID subscriptionid shortText Prisma Cloud by Palo Alto Networks No 0
Subscription Name subscriptionname shortText Prisma Cloud by Palo Alto Networks No 0
Subscription Type subscriptiontype shortText Prisma Cloud by Palo Alto Networks No 0
Subscription Updated By subscriptionupdatedby shortText Prisma Cloud by Palo Alto Networks No 0
Subscription Updated On subscriptionupdatedon shortText Prisma Cloud by Palo Alto Networks No 0
Subtype subtype shortText Common Types No 0
Successful Asset Enrichment successfulassetenrichment shortText Splunk No 0
Successful Drilldown Enrichment successfuldrilldownenrichment shortText Splunk No 0
Successful Identity Enrichment successfulidentityenrichment shortText Splunk No 0
Successful Login successfullogin shortText Brute Force No 0
Suggestions and discussion of how to improve the team suggestionsanddiscussionofhowtoimprovetheteam shortText SANS No 0
Sumo Logic Cloud SIEM Insight Entity sumologiccloudsieminsightentity grid Sumo Logic Cloud SIEM No 0
Sumo Logic Cloud SIEM Insight Involved Entities sumologiccloudsieminsightinvolvedentities grid Sumo Logic Cloud SIEM No 0
Sumo Logic Cloud SIEM Insight Signals sumologiccloudsieminsightsignals grid Sumo Logic Cloud SIEM No 0
Sumo Logic Cloud SIEM Insight URL sumologiccloudsieminsighturl url Sumo Logic Cloud SIEM No 0
Sumo Logic Cloud SIEM Record Fields sumologiccloudsiemrecordfields grid Sumo Logic Cloud SIEM No 0
Sumo Logic Cloud SIEM Record Fields JSON sumologiccloudsiemrecordfieldsjson markdown Sumo Logic Cloud SIEM No 0
Sumo Logic Cloud SIEM Signal Entity sumologiccloudsiemsignalentity grid Sumo Logic Cloud SIEM No 0
Sumo Logic Cloud SIEM Signal Records sumologiccloudsiemsignalrecords grid Sumo Logic Cloud SIEM No 0
Surname surname shortText Common Types No 0
Suspicious Activity End Time suspiciousactivityendtime date Microsoft Advanced Threat Analytics No 0
Suspicious Activity ID suspiciousactivityid shortText Microsoft Advanced Threat Analytics No 0
Suspicious Activity Severity suspiciousactivityseverity singleSelect Microsoft Advanced Threat Analytics No 0
Suspicious Activity Start Time suspiciousactivitystarttime date Microsoft Advanced Threat Analytics No 0
Suspicious Activity Status suspiciousactivitystatus singleSelect Microsoft Advanced Threat Analytics No 0
Suspicious Executions suspiciousexecutions grid Common Types No 0
Suspicious Executions Found suspiciousexecutionsfound markdown Common Types No 0
Switch ID - Asset switchidasset multiSelect Asset No 0
Switch Port ID - Asset switchportidasset multiSelect Asset No 0
Symantec ESC Detection Method symantecescdetectionmethod shortText SymantecEmailSecurity No 0
Symantec ESC Email Attachment symantecescemailattachment markdown SymantecEmailSecurity No 0
Symantec ESC Email Body symantecescemailbody html SymantecEmailSecurity No 0
Symantec ESC Email Direction symantecescemaildirection shortText SymantecEmailSecurity No 0
Symantec ESC Email Malware Category symantecescemailmalwarecategory shortText SymantecEmailSecurity No 0
Symantec ESC Email Malware Name symantecescemailmalwarename shortText SymantecEmailSecurity No 0
Symantec ESC Email Recipient symantecescemailrecipient shortText SymantecEmailSecurity No 0
Symantec ESC Email Sender symantecescemailsender shortText SymantecEmailSecurity No 0
Symantec ESC Email Subject symantecescemailsubject shortText SymantecEmailSecurity No 0
Symantec ESC Quarantine Rule symantecescquarantinerule shortText SymantecEmailSecurity No 0
Symantec ESC Security Service symantecescsecurityservice shortText SymantecEmailSecurity No 0
SymantecEDR Antivirus symantecedrantivirus grid Symantec Endpoint Detection and Response No 0
SymantecEDR Detection Type symantecedrdetectiontype shortText Symantec Endpoint Detection and Response No 0
SymantecEDR Enriched Data symantecedrenricheddata grid Symantec Endpoint Detection and Response No 0
SymantecEDR Event Actor symantecedreventactor grid Symantec Endpoint Detection and Response No 0
SymantecEDR Event Actor File symantecedreventactorfile grid Symantec Endpoint Detection and Response No 0
SymantecEDR Event Actor User symantecedreventactoruser grid Symantec Endpoint Detection and Response No 0
SymantecEDR Event Process symantecedreventprocess grid Symantec Endpoint Detection and Response No 0
SymantecEDR Event Type ID symantecedreventtypeid shortText Symantec Endpoint Detection and Response No 0
SymantecEDR Incident Comments symantecedrincidentcomments grid Symantec Endpoint Detection and Response No 0
SymantecEDR Incident Events symantecedrincidentevents grid Symantec Endpoint Detection and Response No 0
SymantecEDR Intrusion symantecedrintrusion grid Symantec Endpoint Detection and Response No 0
SymantecEDR Log Name symantecedrlogname shortText Symantec Endpoint Detection and Response No 0
SymantecEDR Process File symantecedrprocessfile grid Symantec Endpoint Detection and Response No 0
SymantecEDR Process User symantecedrprocessuser grid Symantec Endpoint Detection and Response No 0
SymantecEDR Recommended Action symantecedrrecommendedaction longText Symantec Endpoint Detection and Response No 0
SymantecEDR Rule ID symantecedrruleid shortText Symantec Endpoint Detection and Response No 0
SymantecEDR Scan symantecedrscan shortText Symantec Endpoint Detection and Response No 0
SymantecEDR Threat symantecedrthreat grid Symantec Endpoint Detection and Response No 0
SymantecEDR attacks symantecedrattacks grid Symantec Endpoint Detection and Response No 0
SysAid Asset Name sysaidassetname shortText SysAid No 0
SysAid Category sysaidcategory shortText SysAid No 0
SysAid Company sysaidcompany shortText SysAid No 0
SysAid Due Date sysaidduedate shortText SysAid No 0
SysAid Notes sysaidnotes shortText SysAid No 0
SysAid Parent ID sysaidparentid shortText SysAid No 0
SysAid Resolution sysaidresolution shortText SysAid No 0
SysAid Solution sysaidsolution shortText SysAid No 0
SysAid Sub Category sysaidsubcategory shortText SysAid No 0
SysAid Tertiary Category sysaidtertiarycategory shortText SysAid No 0
Sysdig Agent ID sysdigagentid shortText Sysdig Response Actions No 0
Sysdig Container ID sysdigcontainerid shortText Sysdig Response Actions No 0
Sysdig Customer ID sysdigcustomerid shortText Sysdig Response Actions No 0
System Default systemdefault shortText Prisma Cloud by Palo Alto Networks No 0
TIM Campaign Threat Alias timcampaignthreatalias tagsSelect TIM Campaign Tracking No 0
TIM Campaign Threat Detected timcampaignthreatdetected boolean TIM Campaign Tracking No 0
TIM Campaign Threat Goals timcampaignthreatgoals shortText TIM Campaign Tracking No 0
TIM Campaign Threat Motivation timcampaignthreatmotivation shortText TIM Campaign Tracking No 0
TOPdesk Call Type topdeskcalltype shortText TOPdesk No 0
TOPdesk Caller Branch Name topdeskcallerbranchname shortText TOPdesk No 0
TOPdesk Caller Name topdeskcallername shortText TOPdesk No 0
TOPdesk Category topdeskcategory shortText TOPdesk No 0
TOPdesk Creation Date topdeskcreationdate date TOPdesk No 0
TOPdesk Creator topdeskcreator shortText TOPdesk No 0
TOPdesk Duration topdeskduration shortText TOPdesk No 0
TOPdesk Entry Type topdeskentrytype shortText TOPdesk No 0
TOPdesk Impact topdeskimpact shortText TOPdesk No 0
TOPdesk Line topdeskline shortText TOPdesk No 0
TOPdesk MainIncident topdeskmainincident shortText TOPdesk No 0
TOPdesk Modification Date topdeskmodificationdate date TOPdesk No 0
TOPdesk Modifier topdeskmodifier shortText TOPdesk No 0
TOPdesk Number topdeskincidentnumber shortText TOPdesk No 0
TOPdesk Priority topdeskpriority shortText TOPdesk No 0
TOPdesk Processing Status topdeskprocessingstatus shortText TOPdesk No 0
TOPdesk Subcategory topdesksubcategory shortText TOPdesk No 0
TOPdesk Urgency topdeskurgency shortText TOPdesk No 0
Tactic tactic multiSelect Common Types No 0
Tactic ID tacticid multiSelect Common Types No 0
Tags tags tagsSelect Common Types No 0
Tanium Threat Response Event Id taniumthreatresponseeventid shortText Tanium Threat Response No 0
Tanium Threat Response GUID taniumthreatresponseguid shortText Tanium Threat Response No 0
Tanium Threat Response Intel Doc Id taniumthreatresponseinteldocid shortText Tanium Threat Response No 0
Tanium Threat Response Intel Doc Revision Id taniumthreatresponseinteldocrevisionid shortText Tanium Threat Response No 0
Tanium Threat Response Priority taniumthreatresponsepriority shortText Tanium Threat Response No 0
Tanium Threat Response Scan Config Id taniumtreatresponsescanconfigid shortText Tanium Threat Response No 0
Tanium Threat Response Scan Config Revision Id taniumthreatresponsescanconfigrevisionid shortText Tanium Threat Response No 0
Tanium Threat Response Type taniumthreatresponsetype shortText Tanium Threat Response No 0
Target target shortText PAN-OS by Palo Alto Networks No 0
Target Firewall Version targetfirewallversion shortText PAN-OS by Palo Alto Networks No 0
Target process CMD targetprocesscmd multiSelect Core Alert Fields No 0
Target process SHA256 targetprocesssha256 multiSelect Core Alert Fields No 0
Target process name targetprocessname multiSelect Core Alert Fields No 0
Team name teamname shortText Common Types No 0
Technical Owner technicalowner multiSelect Common Types No 0
Technical Owner Contact technicalownercontact multiSelect Common Types No 0
Technical User technicaluser multiSelect Common Types No 0
Technique technique multiSelect Common Types No 0
Technique Best Practice techniquebestpractice shortText XM Cyber No 0
Technique ID techniqueid multiSelect Common Types No 0
Technique name techniquename shortText XM Cyber No 0
Techniques List techniqueslist longText MITRE ATT&CK - Courses of Action No 0
Techniques to Handle techniquestohandle markdown MITRE ATT&CK - Courses of Action No 0
Telephone no. telephoneno shortText Common Scripts No 0
Tenant Name tenantname shortText Common Types No 0
Terminated Action terminatedaction shortText Malware Core No 0
TheHive Case PAP thehivecasepap singleSelect TheHive Project No 0
TheHive Case Resolution Status thehivecaseresolutionstatus singleSelect TheHive Project No 0
TheHive Case Status thehivecasestatus singleSelect TheHive Project No 0
TheHive Case Summary thehivecasesummary longText TheHive Project No 0
TheHive Case TLP thehivecasetlp singleSelect TheHive Project No 0
TheHive Flag thehiveflag boolean TheHive Project No 0
TheHive Observables thehiveobservables grid TheHive Project No 0
TheHive Tasks thehivetasks grid TheHive Project No 0
Thinkst Canary Flock Id thinkstcanaryflockid shortText Thinkst Canary No 0
Thinkst Canary Flock Name thinkstcanaryflockname shortText Thinkst Canary No 0
Thinkst Canary Node Id thinkstcanarynodeid shortText Thinkst Canary No 0
Third Party Integrations thirdpartyintegrations markdown Use Case Builder No 0
Threat Actor threatactor shortText Malware Core No 0
Threat Family Name threatfamilyname shortText Common Types No 0
Threat Hunting Detected Hostnames threathuntingdetectedhostnames multiSelect Common Types No 0
Threat Hunting Detected IP threathuntingdetectedip multiSelect Common Types No 0
Threat Name threatname shortText Common Types No 0
Threat Vault by Palo Alto Networks Applications threatvaultbypaloaltonetworksapplications grid Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks Content Version threatvaultbypaloaltonetworkscontentversion shortText Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks Release Version threatvaultbypaloaltonetworksreleaseversion shortText Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks Spyware threatvaultbypaloaltonetworksspyware grid Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks Vulnerability threatvaultbypaloaltonetworksvulnerability grid Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks data correlation threatvaultbypaloaltonetworksdatacorrelation grid Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks decoders threatvaultbypaloaltonetworksdecoders grid Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks file type threatvaultbypaloaltonetworksfiletype grid Threat Vault by Palo Alto Networks No 0
Threat Vault by Palo Alto Networks release notes threatvaultbypaloaltonetworksreleasenotes html Threat Vault by Palo Alto Networks No 0
ThreatConnect Associated Indicators threatconnectassociatedindicators grid ThreatConnect No 0
ThreatConnect AssociatedGroups threatconnectassociatedgroups grid ThreatConnect No 0
ThreatConnect Attributes threatconnectattributes grid ThreatConnect No 0
ThreatConnect Created By threatconnectcreatedby grid ThreatConnect No 0
ThreatConnect Event Date threatconnecteventdate shortText ThreatConnect No 0
ThreatConnect Group Type threatconnectgrouptype shortText ThreatConnect No 0
ThreatConnect Id threatconnectid shortText ThreatConnect No 0
ThreatConnect Security Labels threatconnectsecuritylabels grid ThreatConnect No 0
ThreatConnect Victim Assets threatconnectvictimassets grid ThreatConnect No 0
Ticket Acknowledged Date ticketacknowledgeddate date Common Types No 0
Ticket Closed Date ticketcloseddate date Common Types No 0
Ticket Number ticketnumber shortText Common Types No 0
Ticket Opened Date ticketopeneddate date Common Types No 0
TidyGitHubToken tidygithubtoken shortText Tidy No 0
TidyHost tidyhost shortText Tidy No 0
TidyPassword tidypassword shortText Tidy No 0
TidyUser tidyuser shortText Tidy No 0
Time to Assignment timetoassignment timer Common Types No 0
Time to Investigate timetoinvestigate timer Use Case Builder No 0
Time to Remediate timetoremediate timer Use Case Builder No 0
Time to Triage timetotriage timer Use Case Builder No 0
Timestamp timestamp date Core Alert Fields No 0
Timezone timezone shortText Common Types No 0
Titan URL titanurl url Intel471 Feed No 0
Titan Watcher titanwatcher shortText Intel471 Feed No 0
Titan Watcher Group titanwatchergroup shortText Intel471 Feed No 0
Title title shortText Common Types No 0
To join the meeting tojointhemeeting markdown Shift Management No 0
To start the meeting tostartthemeeting markdown Shift Management No 0
Tool Usage Found toolusagefound tagsSelect Common Types No 0
Tools tools tagsSelect Common Types No 0
Tools To Hunt For toolstohuntfor tagsSelect Proactive Threat Hunting No 0
Total Failed Instances totalfailedinstances number Integrations & Incidents Health Check No 0
Total Good Instances totalgoodinstances number Integrations & Incidents Health Check No 0
Total Indicator Count totalindicatorcount shortText Rapid Breach Response No 0
Total Instances totalinstances number Integrations & Incidents Health Check No 0
Total Malicious URLs Clicks totalmaliciousurlsclicks number Phishing No 0
Total Task Count totaltaskcount shortText Rapid Breach Response No 0
Traffic Direction trafficdirection multiSelect Common Types No 0
Traps ID trapsid shortText Palo Alto Networks Traps (Deprecated) No 0
Travel Map Link travelmaplink shortText Impossible Traveler No 0
Trello Board ID trelloboardid shortText Trello No 0
Trello Board Name trelloboardname shortText Trello No 0
Trello Card ID trellocardid shortText Trello No 0
Trello Card URL trellocardurl url Trello No 0
Trello Created By trellocreatedby shortText Trello No 0
Trello Details trellodetails markdown Trello No 0
Trello List ID trellolistid shortText Trello No 0
Trello List Name trellolistname shortText Trello No 0
Trello SLA trellosla timer Trello No 0
Trend Micro Vision One XDR Account Count trendmicrovisiononexdraccountcount number TrendAI Vision One™ No 0
Trend Micro Vision One XDR Desktop Count trendmicrovisiononexdrdesktopcount number TrendAI Vision One™ No 0
Trend Micro Vision One XDR Detail trendmicrovisiononexdrdetail markdown TrendAI Vision One™ No 0
Trend Micro Vision One XDR Email Address Count trendmicrovisiononexdremailaddresscount number TrendAI Vision One™ No 0
Trend Micro Vision One XDR Impact Scope trendmicrovisiononexdrimpactscope markdown TrendAI Vision One™ No 0
Trend Micro Vision One XDR Impacted Entities trendmicrovisiononexdrimpactedentities markdown TrendAI Vision One™ No 0
Trend Micro Vision One XDR Impacted Entities JSON trendmicrovisiononexdrimpactedentitiesjson shortText TrendAI Vision One™ No 0
Trend Micro Vision One XDR Indicators trendmicrovisiononexdrindicators markdown TrendAI Vision One™ No 0
Trend Micro Vision One XDR Indicators JSON trendmicrovisiononexdrindicatorsjson shortText TrendAI Vision One™ No 0
Trend Micro Vision One XDR Investigation Status trendmicrovisiononexdrinvestigationstatus shortText TrendAI Vision One™ No 0
Trend Micro Vision One XDR Matched Rules JSON trendmicrovisiononexdrmatchedrulesjson shortText TrendAI Vision One™ No 0
Trend Micro Vision One XDR Priority Score trendmicrovisiononexdrpriorityscore shortText TrendAI Vision One™ No 0
Trend Micro Vision One XDR Server Count trendmicrovisiononexdrservercount number TrendAI Vision One™ No 0
Trend Micro Vision One XDR Workbench ID trendmicrovisiononexdrworkbenchid shortText TrendAI Vision One™ No 0
Trend Micro Vision One XDR Workbench Link trendmicrovisiononexdrworkbenchlink url TrendAI Vision One™ No 0
Triage SLA triagesla timer Common Types No 0
Trigger trigger markdown Use Case Builder No 0
Triggered Security Profile triggeredsecurityprofile shortText Common Types No 0
Troubleshoot Summary troubleshootsummary markdown Troubleshoot No 0
Troubleshoot type troubleshoottype singleSelect Troubleshoot No 0
Type - Offense typeoffense shortText IBM QRadar No 0
URL url multiSelect Core Alert Fields No 0
URL Filtering Profile Name urlfilteringprofilename shortText MITRE ATT&CK - Courses of Action No 0
URL Filtering Profile Status urlfilteringprofilestatus shortText MITRE ATT&CK - Courses of Action No 0
URL Filtering Rules urlfilteringrules shortText MITRE ATT&CK - Courses of Action No 0
URL SSL Verification urlsslverification grid Common Types No 0
URLs urls multiSelect Common Types No 0
USTA Account Takeover Prevention Created ustaaccounttakeoverpreventioncreated date USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention ID ustaaccounttakeoverpreventionid shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Is Corporate ustaaccounttakeoverpreventioniscorporate boolean USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Password ustaaccounttakeoverpreventionpassword shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Source ustaaccounttakeoverpreventionsource shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention URL ustaaccounttakeoverpreventionurl url USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Username ustaaccounttakeoverpreventionusername shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details CPU ustaaccounttakeoverpreventionvictimdetailscpu shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Computer Name ustaaccounttakeoverpreventionvictimdetailscomputername shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Computer Username ustaaccounttakeoverpreventionvictimdetailscomputerusername shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Country ustaaccounttakeoverpreventionvictimdetailscountry shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details GPU ustaaccounttakeoverpreventionvictimdetailsgpu shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details IP Adress ustaaccounttakeoverpreventionvictimdetailsipadress shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Infection Date ustaaccounttakeoverpreventionvictimdetailsinfectiondate shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Language ustaaccounttakeoverpreventionvictimdetailslanguage shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Malware ustaaccounttakeoverpreventionvictimdetailsmalware shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Memory ustaaccounttakeoverpreventionvictimdetailsmemory shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Phone Number ustaaccounttakeoverpreventionvictimdetailsphonenumber shortText USTA Cyber Threat Intelligence Platform No 0
USTA Account Takeover Prevention Victim Details Victim OS ustaaccounttakeoverpreventionvictimdetailsvictimos shortText USTA Cyber Threat Intelligence Platform No 0
UUID uuid shortText Common Types No 0
Unassigned Incidents unassignedincidents multiSelect Integrations & Incidents Health Check No 0
Unhandled Techniques unhandledtechniques grid MITRE ATT&CK - Courses of Action No 0
UnifiVideo Camera Name unifivideocameraname shortText UnifiVideo NVR No 0
UnifiVideo End Time unifivideoendtime shortText UnifiVideo NVR No 0
UnifiVideo Start Time unifivideostarttime shortText UnifiVideo NVR No 0
UnifiVideo Ubnt ID unifivideoubntid shortText UnifiVideo NVR No 0
Unique Ports uniqueports shortText Common Types No 0
Unique biometric data breached uniquebiometricdatabreached shortText Common Scripts No 0
Unique identification number breached uniqueidentificationnumberbreached shortText Common Scripts No 0
Use Case Backlog Timer usecasebacklogtimer timer Use Case Builder No 0
Use Case Builder Authentication usecasebuilderauthentication markdown Use Case Builder No 0
Use Case Builder Auto Generator Key usecasebuilderautogeneratorkey number Use Case Builder No 0
Use Case Builder Case Management usecasebuildercasemanagement markdown Use Case Builder No 0
Use Case Builder Data Enrichment and Threat Intelligence usecasebuilderdataenrichmentandthreatintelligence markdown Use Case Builder No 0
Use Case Builder Development Deadline usecasebuilderdevelopmentdeadline timer Use Case Builder No 0
Use Case Builder Email Gateway usecasebuilderemailgateway markdown Use Case Builder No 0
Use Case Builder Endpoint usecasebuilderendpoint markdown Use Case Builder No 0
Use Case Builder Forensics and Malware Analysis usecasebuilderforensicsandmalwareanalysis markdown Use Case Builder No 0
Use Case Builder Getting Started usecasebuildergettingstarted markdown Use Case Builder No 0
Use Case Builder IAM usecasebuilderiam markdown Use Case Builder No 0
Use Case Builder Network Security NGFW usecasebuildernetworksecurityngfw markdown Use Case Builder No 0
Use Case Builder Playbook Generator Key usecasebuilderplaybookgeneratorkey number Use Case Builder No 0
Use Case Builder SEIM usecasebuilderseim markdown Use Case Builder No 0
Use Case Builder Use Case Containment Steps usecasebuilderusecasecontainmentsteps multiSelect Use Case Builder No 0
Use Case Builder Vulnerability Management usecasebuildervulnerabilitymanagement markdown Use Case Builder No 0
Use Case Category usecasecategory singleSelect Use Case Builder No 0
Use Case Description usecasedescription markdown Common Types No 0
Use Case Design Best Practice usecasedesignbestpractice markdown Use Case Builder No 0
Use Case Development Stage usecasedevelopmentstage singleSelect Use Case Builder No 0
Use Case Development Timer usecasedevelopmenttimer timer Use Case Builder No 0
Use Case Enrichment Actions usecaseenrichmentactions markdown Use Case Builder No 0
Use Case Enrichment Steps usecaseenrichmentsteps multiSelect Use Case Builder No 0
Use Case Ingestion Best Practice usecaseingestionbestpractice markdown Use Case Builder No 0
Use Case Initiator usecaseinitiator singleSelect Use Case Builder No 0
Use Case Name usecasename markdown Use Case Builder No 0
Use Case Pre-Production Timer usecasepreproductiontimer timer Use Case Builder No 0
Use Case Priority usecasepriority singleSelect Use Case Builder No 0
Use Case Production Timer usecaseproductiontimer timer Use Case Builder No 0
Use Case Purpose usecasepurpose markdown Use Case Builder No 0
Use Case Required Metrics and Notifications usecaserequiredmetricsandnotifications multiSelect Use Case Builder No 0
Use Case SLAs usecaseslas multiSelect Use Case Builder No 0
Use Case TIM Best Practice usecasetimbestpractice markdown Use Case Builder No 0
Use Case Testing Timer usecasetestingtimer timer Use Case Builder No 0
Use Case Type usecasetype singleSelect Use Case Builder No 0
UseCaseAdoptionMetrics usecaseadoptionmetrics markdown Use Case Builder No 0
User user shortText Malware Core No 0
User Agent useragent multiSelect Common Types No 0
User Agent useragent multiSelect Core Alert Fields No 0
User Anomaly Count useranomalycount shortText Common Types No 0
User Block Status userblockstatus shortText Common Types No 0
User Creation Time usercreationtime shortText Common Types No 0
User Disabled Status userdisabledstatus shortText Brute Force No 0
User Engagement Response userengagementresponse shortText Common Types No 0
User Groups usergroups multiSelect Common Types No 0
User Id userid shortText Common Types No 0
User Risk Level userrisklevel shortText Common Types No 0
User Risk Level userrisklevel shortText Core Alert Fields No 0
User Risk Reasons userriskreasons multiSelect Core Alert Fields No 0
User SID usersid multiSelect Common Types No 0
User name username multiSelect Core Alert Fields No 0
Username username shortText Common Types No 0
Username Count - Offense usernamecountoffense number IBM QRadar No 0
Usernames usernames multiSelect Common Types No 0
Users users multiSelect Common Types No 0
Users Details usersdetails markdown Common Types No 0
Usta Alert URL ustaalerturl shortText USTA Cyber Threat Intelligence Platform No 0
Usta Stolen Credit Cards Card Number ustastolencreditcardscardnumber shortText USTA Cyber Threat Intelligence Platform No 0
Usta Stolen Credit Cards Created ustastolencreditcardscreated shortText USTA Cyber Threat Intelligence Platform No 0
Usta Stolen Credit Cards Expire Date ustastolencreditcardsexpiredate shortText USTA Cyber Threat Intelligence Platform No 0
Usta Stolen Credit Cards Id ustastolencreditcardsid shortText USTA Cyber Threat Intelligence Platform No 0
VM - Asset Owner vmassetowner grid Cortex Vulnerability Management No 0
VM - Asset Owner Unranked Raw vmassetownerunrankedraw grid Cortex Vulnerability Management No 0
VPC ID vpcid shortText Prisma Cloud by Palo Alto Networks No 0
Varonis Data Security Platform Alert Status varonisdatasecurityplatformalertstatus shortText Varonis Data Security Platform No 0
Varonis Data Security Platform Close Reason varonisdatasecurityplatformclosereason shortText Varonis Data Security Platform No 0
Varonis Data Security Platform Contains Flagged Data varonisdatasecurityplatformcontainsflaggeddata boolean Varonis Data Security Platform No 0
Varonis Data Security Platform Contains Malicious External IP varonisdatasecurityplatformcontainsmaliciousexternalip boolean Varonis Data Security Platform No 0
Varonis Data Security Platform Contains Sensitive Data varonisdatasecurityplatformcontainssensitivedata boolean Varonis Data Security Platform No 0
Varonis Data Security Platform Devices varonisdatasecurityplatformdevices grid Varonis Data Security Platform No 0
Varonis Data Security Platform Locations varonisdatasecurityplatformlocations grid Varonis Data Security Platform No 0
Varonis Data Security Platform Number of Events varonisdatasecurityplatformnumberofevents number Varonis Data Security Platform No 0
Varonis Data Security Platform Sources varonisdatasecurityplatformsources grid Varonis Data Security Platform No 0
Varonis Data Security Platform Users varonisdatasecurityplatformusers grid Varonis Data Security Platform No 0
Varonis SaaS Alert Status varonissaasalertstatus singleSelect Varonis SaaS No 0
Varonis SaaS Close Reason varonissaasclosereason singleSelect Varonis SaaS No 0
Varonis SaaS Contains Flagged Data varonissaascontainsflaggeddata boolean Varonis SaaS No 0
Varonis SaaS Contains Malicious External IP varonissaascontainsmaliciousexternalip boolean Varonis SaaS No 0
Varonis SaaS Contains Sensitive Data varonissaascontainssensitivedata boolean Varonis SaaS No 0
Varonis SaaS Devices varonissaasdevices grid Varonis SaaS No 0
Varonis SaaS Locations varonissaaslocations grid Varonis SaaS No 0
Varonis SaaS Number of Events varonissaasnumberofevents number Varonis SaaS No 0
Varonis SaaS Sources varonissaassources grid Varonis SaaS No 0
Varonis SaaS Users varonissaasusers grid Varonis SaaS No 0
Vectra Account Host Access History vectraaccounthostaccesshistory grid Vectra AI No 0
Vectra Account Type vectraaccounttype shortText Vectra AI No 0
Vectra Assigned By vectraassignedby shortText Vectra AI No 0
Vectra Assigned Date vectraassigneddate date Vectra AI No 0
Vectra Assigned To vectraassignedto shortText Vectra AI No 0
Vectra Assignment ID vectraassignmentid shortText Vectra AI No 0
Vectra Assignment Outcome vectraassignmentoutcome shortText Vectra AI No 0
Vectra Assignment Resolved By vectraassignmentresolvedby shortText Vectra AI No 0
Vectra Assignment Resolved Date vectraassignmentresolveddate date Vectra AI No 0
Vectra Certainty Score vectracertaintyscore number Vectra AI No 0
Vectra Detection Count vectradetectioncount number Vectra AI No 0
Vectra Detection Details vectradetectiondetails multiSelect Vectra AI No 0
Vectra Detection Profile vectradetectionprofile shortText Vectra AI No 0
Vectra Entity Type vectraentitytype shortText Vectra AI No 0
Vectra Groups vectragroups grid Vectra AI No 0
Vectra Host Account Access History vectrahostaccountaccesshistory grid Vectra AI No 0
Vectra Host Active Traffic vectrahostactivetraffic boolean Vectra AI No 0
Vectra Host Artifact Set vectrahostartifactset markdown Vectra AI No 0
Vectra Host Key Asset vectrahostkeyasset boolean Vectra AI No 0
Vectra Host Previous IPs vectrahostpreviousips multiSelect Vectra AI No 0
Vectra Host Targets Key Asset vectrahosttargetskeyasset boolean Vectra AI No 0
Vectra Last Detection Timestamp vectralastdetectiontimestamp date Vectra AI No 0
Vectra Privilege Category vectraprivilegecategory shortText Vectra AI No 0
Vectra Privilege Level vectraprivilegelevel shortText Vectra AI No 0
Vectra RUX AWS Region vectraruxawsregion shortText Vectra RUX No 0
Vectra RUX Access Key ID vectraruxaccesskeyid shortText Vectra RUX No 0
Vectra RUX Account ID vectraruxaccountid shortText Vectra RUX No 0
Vectra RUX Assumed Role vectraruxassumedrole shortText Vectra RUX No 0
Vectra RUX Certainty Score vectraruxcertaintyscore number Vectra RUX No 0
Vectra RUX Data Source Sensor ID vectraruxdatasourcesensorid shortText Vectra RUX No 0
Vectra RUX Data Source Sensor Name vectraruxdatasourcesensorname shortText Vectra RUX No 0
Vectra RUX Data Source Type vectraruxdatasourcetype shortText Vectra RUX No 0
Vectra RUX Destination Account Information vectraruxdestinationaccountinformation grid Vectra RUX No 0
Vectra RUX Destination Domain Information vectraruxdestinationdomaininformation grid Vectra RUX No 0
Vectra RUX Destination Host Information vectraruxdestinationhostinformation grid Vectra RUX No 0
Vectra RUX Detection Category vectraruxdetectioncategory shortText Vectra RUX No 0
Vectra RUX Detection ID vectraruxdetectionid number Vectra RUX No 0
Vectra RUX Detection Notes vectraruxdetectionnotes longText Vectra RUX No 0
Vectra RUX Detection Reason vectraruxdetectionreason shortText Vectra RUX No 0
Vectra RUX Detection Type vectraruxdetectiontype shortText Vectra RUX No 0
Vectra RUX Entity Assignment Assigned By vectraruxentityassignmentassignedby shortText Vectra RUX No 0
Vectra RUX Entity Assignment Assigned Date vectraruxentityassignmentassigneddate shortText Vectra RUX No 0
Vectra RUX Entity Assignment Assigned to vectraruxentityassignmentassignedto shortText Vectra RUX No 0
Vectra RUX Entity Assignment Details vectraruxentityassignmentdetails longText Vectra RUX No 0
Vectra RUX Entity Assignment ID vectraruxentityassignmentid shortText Vectra RUX No 0
Vectra RUX Entity Assignment Outcome vectraruxentityassignmentoutcome shortText Vectra RUX No 0
Vectra RUX Entity Assignment Resolved By vectraruxentityassignmentresolvedby shortText Vectra RUX No 0
Vectra RUX Entity Assignment Resolved Date vectraruxentityassignmentresolveddate shortText Vectra RUX No 0
Vectra RUX Entity External Reference ID vectraruxentityexternalreferenceid shortText Vectra RUX No 0
Vectra RUX Entity ID vectraruxentityid shortText Vectra RUX No 0
Vectra RUX Entity IP vectraruxentityip shortText Vectra RUX No 0
Vectra RUX Entity Importance vectraruxentityimportance shortText Vectra RUX No 0
Vectra RUX Entity Name vectraruxentityname shortText Vectra RUX No 0
Vectra RUX Entity Priority Status vectraruxentityprioritystatus shortText Vectra RUX No 0
Vectra RUX Entity Privilege Category vectraruxentityprivilegecategory shortText Vectra RUX No 0
Vectra RUX Entity Type vectraruxentitytype shortText Vectra RUX No 0
Vectra RUX Entity UID vectraruxentityuid shortText Vectra RUX No 0
Vectra RUX Entity URL vectraruxentityurl url Vectra RUX No 0
Vectra RUX Entity Unresolved Priority Status vectraruxentityunresolvedprioritystatus boolean Vectra RUX No 0
Vectra RUX Entity Urgency Score vectraruxentityurgencyscore shortText Vectra RUX No 0
Vectra RUX Event Accounts vectraruxeventaccounts longText Vectra RUX No 0
Vectra RUX Event Change Type vectraruxeventchangetype shortText Vectra RUX No 0
Vectra RUX Event DNS vectraruxeventdns longText Vectra RUX No 0
Vectra RUX Event Domains vectraruxeventdomains longText Vectra RUX No 0
Vectra RUX Event External Targets vectraruxeventexternaltargets longText Vectra RUX No 0
Vectra RUX Event Hosts vectraruxeventhosts longText Vectra RUX No 0
Vectra RUX Event IPs vectraruxeventips longText Vectra RUX No 0
Vectra RUX Event Name vectraruxeventname shortText Vectra RUX No 0
Vectra RUX Event Ports vectraruxeventports longText Vectra RUX No 0
Vectra RUX Event Protocols vectraruxeventprotocols longText Vectra RUX No 0
Vectra RUX Event Severity vectraruxeventseverity number Vectra RUX No 0
Vectra RUX Event Timestamp vectraruxeventtimestamp date Vectra RUX No 0
Vectra RUX External Reference ID vectraruxexternalreferenceid shortText Vectra RUX No 0
Vectra RUX Identity Type vectraruxidentitytype shortText Vectra RUX No 0
Vectra RUX Investigation Status vectraruxinvestigationstatus singleSelect Vectra RUX No 0
Vectra RUX Is Event Triaged vectraruxiseventtriaged boolean Vectra RUX No 0
Vectra RUX Last Timestamp vectraruxlasttimestamp date Vectra RUX No 0
Vectra RUX Mitre IDs vectraruxmitreids longText Vectra RUX No 0
Vectra RUX Process Context Date Created vectraruxprocesscontextdatecreated date Vectra RUX No 0
Vectra RUX Process Context Error Message vectraruxprocesscontexterrormessage shortText Vectra RUX No 0
Vectra RUX Process Context Investigate Entity Link vectraruxprocesscontextinvestigateentitylink url Vectra RUX No 0
Vectra RUX Process Context Processes vectraruxprocesscontextprocesses grid Vectra RUX No 0
Vectra RUX Process Context Query Link vectraruxprocesscontextquerylink url Vectra RUX No 0
Vectra RUX Process Context Query Status vectraruxprocesscontextquerystatus shortText Vectra RUX No 0
Vectra RUX Role Sequence vectraruxrolesequence shortText Vectra RUX No 0
Vectra RUX Source External Host IP vectraruxsourceexternalhostip shortText Vectra RUX No 0
Vectra RUX Source External Host Name vectraruxsourceexternalhostname shortText Vectra RUX No 0
Vectra RUX Threat Score vectraruxthreatscore number Vectra RUX No 0
Vectra RUX User Agent vectraruxuseragent shortText Vectra RUX No 0
Vectra Sensors vectrasensors multiSelect Vectra AI No 0
Vectra Service Access History vectraserviceaccesshistory grid Vectra AI No 0
Vectra Threat Score vectrathreatscore number Vectra AI No 0
Vectra XDR Entity Account Type vectraxdrentityaccounttype shortText Vectra XDR No 0
Vectra XDR Entity Assignment Assigned By vectraxdrentityassignmentassignedby shortText Vectra XDR No 0
Vectra XDR Entity Assignment Assigned Date vectraxdrentityassignmentassigneddate shortText Vectra XDR No 0
Vectra XDR Entity Assignment Assigned to vectraxdrentityassignmentassignedto shortText Vectra XDR No 0
Vectra XDR Entity Assignment Details vectraxdrentityassignmentdetails shortText Vectra XDR No 0
Vectra XDR Entity Assignment ID vectraxdrentityassignmentid shortText Vectra XDR No 0
Vectra XDR Entity Assignment Outcome vectraxdrentityassignmentoutcome shortText Vectra XDR No 0
Vectra XDR Entity Assignment Resolved By vectraxdrentityassignmentresolvedby shortText Vectra XDR No 0
Vectra XDR Entity Assignment Resolved Date vectraxdrentityassignmentresolveddate shortText Vectra XDR No 0
Vectra XDR Entity Attack Profile vectraxdrentityattackprofile shortText Vectra XDR No 0
Vectra XDR Entity Attack Rating vectraxdrentityattackrating shortText Vectra XDR No 0
Vectra XDR Entity Detection Details vectraxdrentitydetectiondetails multiSelect Vectra XDR No 0
Vectra XDR Entity Filter Tags vectraxdrentityfiltertags shortText Vectra XDR No 0
Vectra XDR Entity Host Type vectraxdrentityhosttype shortText Vectra XDR No 0
Vectra XDR Entity ID vectraxdrentityid shortText Vectra XDR No 0
Vectra XDR Entity IP vectraxdrentityip shortText Vectra XDR No 0
Vectra XDR Entity Importance vectraxdrentityimportance shortText Vectra XDR No 0
Vectra XDR Entity Last Detection Timestamp vectraxdrentitylastdetectiontimestamp date Vectra XDR No 0
Vectra XDR Entity Last Modification Timestamp vectraxdrentitylastmodificationtimestamp date Vectra XDR No 0
Vectra XDR Entity Name vectraxdrentityname shortText Vectra XDR No 0
Vectra XDR Entity Notes vectraxdrentitynotes multiSelect Vectra XDR No 0
Vectra XDR Entity Priority Status vectraxdrentityprioritystatus shortText Vectra XDR No 0
Vectra XDR Entity State vectraxdrentitystate shortText Vectra XDR No 0
Vectra XDR Entity Type vectraxdrentitytype shortText Vectra XDR No 0
Vectra XDR Entity Urgency Score vectraxdrentityurgencyscore shortText Vectra XDR No 0
Vectra XDR Entity Velocity vectraxdrentityvelocity shortText Vectra XDR No 0
Veeam Affected Machine veeamaffectedmachine markdown Veeam App No 0
Veeam Alarm Status veeamalarmstatus shortText Veeam App No 0
Veeam Alarm Template ID veeamalarmtemplateid shortText Veeam App No 0
Veeam Alarm Template Name veeamalarmtemplatename shortText Veeam App No 0
Veeam Assigned Object veeamassignedobject markdown Veeam App No 0
Veeam Backup Object ID veeambackupobjectid shortText Veeam App No 0
Veeam Backup Repository Capacity (GB) veeambackuprepositorycapacitygb shortText Veeam App No 0
Veeam Backup Repository Free Space (GB) veeambackuprepositoryfreespacegb shortText Veeam App No 0
Veeam Backup Repository ID veeambackuprepositoryid shortText Veeam App No 0
Veeam Backup Repository Name veeambackuprepositoryname shortText Veeam App No 0
Veeam Backup Repository Used Space (GB) veeambackuprepositoryusedspacegb shortText Veeam App No 0
Veeam Backup Scheduling veeambackupscheduling markdown Veeam App No 0
Veeam Encryption veeamencryption markdown Veeam App No 0
Veeam Event Source Description veeameventsourcedescription shortText Veeam App No 0
Veeam Event Type Description veeameventtypedescription shortText Veeam App No 0
Veeam Is Enabled veeamisenabled boolean Veeam App No 0
Veeam Last Successful Backup veeamlastsuccessfulbackup markdown Veeam App No 0
Veeam Malware Detection Method veeammalwaredetectionmethod shortText Veeam App No 0
Veeam Malware Detection Time veeammalwaredetectiontime shortText Veeam App No 0
Veeam Malware Status veeammalwarestatus shortText Veeam App No 0
Veeam Notifications veeamnotifications markdown Veeam App No 0
Veeam Number of Stored Restore Points veeamnumberofstoredrestorepoints number Veeam App No 0
Veeam Number of Triggered Alarms veeamnumberoftriggeredalarms shortText Veeam App No 0
Veeam Remediation veeamremediation markdown Veeam App No 0
Veeam Triggered Time veeamtriggeredtime shortText Veeam App No 0
Vendor ID vendorid shortText Common Types No 0
Vendor Product vendorproduct shortText Common Types No 0
Verdict verdict shortText Common Types No 0
Verification Method verificationmethod shortText Common Types No 0
Verification Status verificationstatus shortText Common Types No 0
Vulnerability Category vulnerabilitycategory shortText Common Types No 0
Vulnerability Protection Profile Name vulnerabilityprotectionprofilename shortText MITRE ATT&CK - Courses of Action No 0
Vulnerability Protection Profile Status vulnerabilityprotectionprofilestatus shortText MITRE ATT&CK - Courses of Action No 0
Vulnerability Protection Rules vulnerabilityprotectionrules shortText MITRE ATT&CK - Courses of Action No 0
Vulnerable Product vulnerableproduct shortText Common Types No 0
Watcher watcher shortText Intel471 Feed No 0
Watcher Group watchergroup shortText Intel471 Feed No 0
Were any steps or actions taken that might have inhibited the recovery? wereanystepsoractionstakenthatmighthaveinhibitedtherecovery shortText NIST No 0
What additional tools or resources are needed to detect, analyze, and mitigate future incidents? whatadditionaltoolsorresourcesareneededtodetectanalyzeandmitigatefutureincidents shortText NIST No 0
What are the areas that need improvement? whataretheareasthatneedimprovement shortText SANS No 0
What corrective actions can prevent similar incidents in the future? whatcorrectiveactionscanpreventsimilarincidentsinthefuture shortText NIST No 0
What information was needed sooner? whatinformationwasneededsooner shortText NIST No 0
What precursors or indicators should be watched for in the future to detect similar incidents? whatprecursorsorindicatorsshouldbewatchedforinthefuturetodetectsimilarincidents shortText NIST No 0
What was the scope of the incident? whatwasthescopeoftheincident shortText SANS No 0
What was the work performed during recovery? whatwastheworkperformedduringrecovery shortText SANS No 0
What were the areas where the CIRT teams were effective? whatweretheareaswherethecirtteamswereeffective shortText SANS No 0
What would the staff and management do differently the next time a similar incident occurs? whatwouldthestaffandmanagementdodifferentlythenexttimeasimilarincidentoccurs shortText NIST No 0
When was the problem first detected and by whom? whenwastheproblemfirstdetectedandbywhom shortText SANS No 0
Where is data hosted whereisdatahosted multiSelect Common Scripts No 0
WildFire Profile Name wildfireprofilename shortText MITRE ATT&CK - Courses of Action No 0
WildFire Profile Status wildfireprofilestatus shortText MITRE ATT&CK - Courses of Action No 0
WildFire Rules wildfirerules shortText MITRE ATT&CK - Courses of Action No 0
Wiz Cloud Account wizcloudaccount shortText Wiz No 0
Wiz Cloud Account Name wizcloudaccountname shortText Wiz No 0
Wiz Cloud Platform wizcloudplatform shortText Wiz No 0
Wiz Details wizdetails shortText Wiz No 0
Wiz Detection ID wizdetectionid shortText Wiz No 0
Wiz Detection URL wizdetectionurl url Wiz No 0
Wiz Issue Due Date wizissueduedate shortText Wiz No 0
Wiz Issue ID wizissueid shortText Wiz No 0
Wiz Issue Note wizissuenote shortText Wiz No 0
Wiz Issue Projects wizissueprojects shortText Wiz No 0
Wiz Issue Resolution Recommendation wizissueresolutionrecommendation markdown Wiz No 0
Wiz Issue URL wizissueurl shortText Wiz No 0
Wiz Project Owners wizprojectowners shortText Wiz No 0
Wiz Project Security Champions wizprojectsecuritychampions shortText Wiz No 0
Wiz Resource Cloud ID wizresourcecloudid shortText Wiz No 0
Wiz Resource ID wizresourceid shortText Wiz No 0
Wiz Resource Native Type wizresourcenativetype shortText Wiz No 0
Wiz Resource Region wizresourceregion shortText Wiz No 0
Wiz Resource Type wizresourcetype shortText Wiz No 0
Work Phone workphone shortText Common Types No 0
Workflow Name workflowname shortText FireMon Security Manager No 0
XDR Alert Category xdralertcategory multiSelect Cortex XDR by Palo Alto Networks No 0
XDR Alert Count xdralertcount number Cortex XDR by Palo Alto Networks No 0
XDR Alert Name xdralertname multiSelect Cortex XDR by Palo Alto Networks No 0
XDR Alert Search Results xdralertsearchresults grid Cortex XDR by Palo Alto Networks No 0
XDR Alerts xdralerts grid Cortex XDR by Palo Alto Networks No 0
XDR Assigned User Email xdrassigneduseremail shortText Cortex XDR by Palo Alto Networks No 0
XDR Assigned User Pretty Name xdrassigneduserprettyname shortText Cortex XDR by Palo Alto Networks No 0
XDR BPA Access Management xdrbpaaccessmanagement longText XDR Best Practice Assessment No 0
XDR BPA Access Management Recommendation xdrbpaaccessmanagementrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Agent Groups xdrbpaagentgroups longText XDR Best Practice Assessment No 0
XDR BPA Agent Groups Recommendation xdrbpaagentgroupsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Agent Install Packages xdrbpaagentinstallpackages longText XDR Best Practice Assessment No 0
XDR BPA Agent Install Recommendation xdrbpaagentinstallrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Agent Profile xdrbpaagentprofile longText XDR Best Practice Assessment No 0
XDR BPA Agent Profile Recommendation xdrbpaagentprofilerecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Agent VDI Flag xdrbpaagentvdiflag longText XDR Best Practice Assessment No 0
XDR BPA Agent VDI Flag Recommendation xdrbpaagentvdiflagrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Agent Versions xdrbpaagentversions longText XDR Best Practice Assessment No 0
XDR BPA Agent Versions Recommendation xdrbpaagentversionsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Alert Exclusions xdrbpaalertexclusions longText XDR Best Practice Assessment No 0
XDR BPA Alert Exclusions Recommendation xdrbpaalertexclusionsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Alerting xdrbpaalerting longText XDR Best Practice Assessment No 0
XDR BPA Alerting Recommendation xdrbpaalertingrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Broker VM xdrbpabrokervm longText XDR Best Practice Assessment No 0
XDR BPA Broker VM Recommendation xdrbpabrokervmrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Content Versions xdrbpacontentversions longText XDR Best Practice Assessment No 0
XDR BPA Content Versions Recommendation xdrbpacontentversionsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Dashboards xdrbpadashboards longText XDR Best Practice Assessment No 0
XDR BPA Dashboards Recommendations xdrbpadashboardsrecommendations markdown XDR Best Practice Assessment No 0
XDR BPA Deployment Strategy xdrbpadeploymentstrategy longText XDR Best Practice Assessment No 0
XDR BPA Deployment Strategy Recommendation xdrbpadeploymentstrategyrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Device Control Profile xdrbpadevicecontrolprofile longText XDR Best Practice Assessment No 0
XDR BPA Device Control Recommendation xdrbpadevicecontrolrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Device Exceptions xdrbpadeviceexceptions longText XDR Best Practice Assessment No 0
XDR BPA Device Exceptions Recommendation xdrbpadeviceexceptionsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Disk Encryption xdrbpadiskencryption longText XDR Best Practice Assessment No 0
XDR BPA Disk Encryption Recommendation xdrbpadiskencryptionrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Exception Profile xdrbpaexceptionprofile longText XDR Best Practice Assessment No 0
XDR BPA Exception Profile Recommendation xdrbpaexceptionprofilerecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Exploit Profile xdrbpaexploitprofile longText XDR Best Practice Assessment No 0
XDR BPA Exploit Profile Recommendation xdrbpaexploitprofilerecommendation markdown XDR Best Practice Assessment No 0
XDR BPA General Settings xdrbpageneralsettings longText XDR Best Practice Assessment No 0
XDR BPA General Settings Recommendation xdrbpageneralsettingsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Host Firewall xdrbpahostfirewall longText XDR Best Practice Assessment No 0
XDR BPA Host Firewall Recommendation xdrbpahostfirewallrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Host Isolation xdrbpahostisolation longText XDR Best Practice Assessment No 0
XDR BPA Host Isolation Recommendation xdrbpahostisolationrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Integrations xdrbpaintegrations longText XDR Best Practice Assessment No 0
XDR BPA Integrations Recommendation xdrbpaintegrationsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Live Terminal xdrbpaliveterminal longText XDR Best Practice Assessment No 0
XDR BPA Live Terminal Recommendation xdrbpaliveterminalrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Malware Profile xdrbpamalwareprofile longText XDR Best Practice Assessment No 0
XDR BPA Malware Profile Recommendation xdrbpamalwareprofilerecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Management Overview xdrbpamanagementoverview longText XDR Best Practice Assessment No 0
XDR BPA Management Overview Recommendation xdrbpamanagementoverviewrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Other Actions xdrbpaotheractions longText XDR Best Practice Assessment No 0
XDR BPA Other Actions Recommendation xdrbpaotheractionsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Policy Strategy xdrbpapolicystrategy longText XDR Best Practice Assessment No 0
XDR BPA Policy Strategy Recommendation xdrbpapolicystrategyrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Process Exceptions xdrbpaprocessexceptions longText XDR Best Practice Assessment No 0
XDR BPA Process Exceptions Recommendation xdrbpaprocessexceptionsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Reports xdrbpareports longText XDR Best Practice Assessment No 0
XDR BPA Reports Recommendation xdrbpareportsrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Response Overview xdrbparesponseoverview longText XDR Best Practice Assessment No 0
XDR BPA Response Overview Recommendation xdrbparesponseoverviewrecommendation markdown XDR Best Practice Assessment No 0
XDR BPA Restriction Profile xdrbparestrictionprofile longText XDR Best Practice Assessment No 0
XDR BPA Restriction Profile Recommendation xdrbparestrictionprofilerecommendation markdown XDR Best Practice Assessment No 0
XDR Description xdrdescription shortText Cortex XDR by Palo Alto Networks No 0
XDR Detection Time xdrdetectiontime date Cortex XDR by Palo Alto Networks No 0
XDR Disconnected endpoints xdrdisconnectedendpoints grid Cortex XDR by Palo Alto Networks No 0
XDR File Artifacts xdrfileartifacts grid Cortex XDR by Palo Alto Networks No 0
XDR File Name xdrfilename multiSelect Cortex XDR by Palo Alto Networks No 0
XDR File SHA256 xdrfilesha256 multiSelect Cortex XDR by Palo Alto Networks No 0
XDR High Severity Alert Count xdrhighseverityalertcount number Cortex XDR by Palo Alto Networks No 0
XDR Host Count xdrhostcount number Cortex XDR by Palo Alto Networks No 0
XDR Incident ID xdrincidentid shortText Cortex XDR by Palo Alto Networks No 0
XDR Investigation results xdrinvestigationresults grid Cortex XDR by Palo Alto Networks No 0
XDR Low Severity Alert Count xdrlowseverityalertcount number Cortex XDR by Palo Alto Networks No 0
XDR MITRE Tactics xdrmitretactics multiSelect Cortex XDR by Palo Alto Networks No 0
XDR MITRE Techniques xdrmitretechniques multiSelect Cortex XDR by Palo Alto Networks No 0
XDR Medium Severity Alert Count xdrmediumseverityalertcount number Cortex XDR by Palo Alto Networks No 0
XDR Modification Time xdrmodificationtime date Cortex XDR by Palo Alto Networks No 0
XDR Network Artifacts xdrnetworkartifacts grid Cortex XDR by Palo Alto Networks No 0
XDR Notes xdrnotes shortText Cortex XDR by Palo Alto Networks No 0
XDR Resolve Comment xdrresolvecomment shortText Cortex XDR by Palo Alto Networks No 0
XDR Risky Host Count xdrriskyhostcount number Cortex XDR by Palo Alto Networks No 0
XDR Risky Hosts xdrriskyhosts grid Cortex XDR by Palo Alto Networks No 0
XDR Risky User Count xdrriskyusercount number Cortex XDR by Palo Alto Networks No 0
XDR Risky Users xdrriskyusers grid Cortex XDR by Palo Alto Networks No 0
XDR Similar Incidents xdrsimilarincidents grid Cortex XDR by Palo Alto Networks No 0
XDR Starred xdrstarred boolean Cortex XDR by Palo Alto Networks No 0
XDR Status xdrstatus shortText Cortex XDR by Palo Alto Networks No 0
XDR Status v2 xdrstatusv2 singleSelect Cortex XDR by Palo Alto Networks No 0
XDR URL xdrurl url Cortex XDR by Palo Alto Networks No 0
XDR User Count xdrusercount number Cortex XDR by Palo Alto Networks No 0
XDR Users xdrusers multiSelect Cortex XDR by Palo Alto Networks No 0
XDR device control violations xdrdevicecontrolviolations grid Cortex XDR by Palo Alto Networks No 0
XDR manual severity xdrmanualseverity shortText Cortex XDR by Palo Alto Networks No 0
XFF xff multiSelect Core Alert Fields No 0
XM Cyber MITRE xmcybermitre grid XM Cyber No 0
XM Cyber advices xmcyberadvices grid XM Cyber No 0
XM Cyber avg. complexity level xmcyberavgcomplexitylevel shortText XM Cyber No 0
XM Cyber avg. complexity score xmcyberavgcomplexityscore number XM Cyber No 0
XM Cyber critical assets trend xmcybercriticalassetstrend number XM Cyber No 0
XM Cyber current security score xmcybercurrentsecurityscore number XM Cyber No 0
XM Cyber dashboard xmcyberdashboard url XM Cyber No 0
XM Cyber description xmcyberdescription longText XM Cyber No 0
XM Cyber report xmcyberreport url XM Cyber No 0
XM Cyber security score grade xmcybersecurityscoregrade shortText XM Cyber No 0
XM Cyber security score trend xmcybersecurityscoretrend number XM Cyber No 0
XMCO Serenety identification xmcoserenetyidentification shortText XMCO No 0
XMCO Serenety monitoring xmcoserenetymonitoring shortText XMCO No 0
XSOAR Architecture xsoararchitecture shortText System Diagnostics and Health Check No 0
XSOAR Build xsoarbuild shortText System Diagnostics and Health Check No 0
XSOAR CPU xsoarcpu shortText System Diagnostics and Health Check No 0
XSOAR Content Version xsoarcontentversion shortText System Diagnostics and Health Check No 0
XSOAR Customer Name xsoarcustomername shortText System Diagnostics and Health Check No 0
XSOAR DR xsoardr shortText System Diagnostics and Health Check No 0
XSOAR Dev Instance Name xsoardevinstancename shortText XSOAR - Simple Dev to Prod No 0
XSOAR Dev to Prod Method xsoardevtoprodmethod shortText XSOAR - Simple Dev to Prod No 0
XSOAR Dev-Prod xsoardevprod shortText System Diagnostics and Health Check No 0
XSOAR Dev-Prod Mode xsoardevprodmode shortText System Diagnostics and Health Check No 0
XSOAR Elastic Search xsoarelasticsearch shortText System Diagnostics and Health Check No 0
XSOAR Incident Flow xsoarincidentflow html Use Case Builder No 0
XSOAR License xsoarlicense shortText System Diagnostics and Health Check No 0
XSOAR License Valid Till xsoarlicensevalidtill shortText System Diagnostics and Health Check No 0
XSOAR Memory xsoarmemory shortText System Diagnostics and Health Check No 0
XSOAR Multi-Repo xsoarmultirepo shortText System Diagnostics and Health Check No 0
XSOAR Multi-Tenant xsoarmultitenant shortText System Diagnostics and Health Check No 0
XSOAR Number Of DB Partitions xsoarnumberofdbpartitions number System Diagnostics and Health Check No 0
XSOAR OS xsoaros shortText System Diagnostics and Health Check No 0
XSOAR Prod Instance Name xsoarprodinstancename shortText XSOAR - Simple Dev to Prod No 0
XSOAR Server Configuration xsoarserverconfiguration grid System Diagnostics and Health Check No 0
XSOAR Telemetry Status xsoartelemetrystatus shortText System Diagnostics and Health Check No 0
XSOAR Version xsoarversion shortText System Diagnostics and Health Check No 0
Xpanse Alert ID xpansealertid shortText Cortex Xpanse No 0
Xpanse Asset IDs xpanseassetids shortText Cortex Xpanse No 0
Xpanse Attack Surface Rule Name xpanseattacksurfacerulename shortText Cortex Xpanse No 0
Xpanse Business Units xpansebusinessunits shortText Cortex Xpanse No 0
Xpanse Category xpansecategory shortText Cortex Xpanse No 0
Xpanse Certificate Asset xpansecertificateasset grid Cortex Xpanse No 0
Xpanse Cloud Asset xpansecloudasset grid Cortex Xpanse No 0
Xpanse Country Code xpansecountrycode shortText Cortex Xpanse No 0
Xpanse Description xpansedescription markdown Cortex Xpanse No 0
Xpanse Domain Asset xpansedomainasset grid Cortex Xpanse No 0
Xpanse External ID xpanseexternalid shortText Cortex Xpanse No 0
Xpanse Host Name xpansehostname shortText Cortex Xpanse No 0
Xpanse IP xpanseip shortText Cortex Xpanse No 0
Xpanse Port xpanseport number Cortex Xpanse No 0
Xpanse Progress Status xpanseprogressstatus shortText Cortex Xpanse No 0
Xpanse Protocol xpanseprotocol shortText Cortex Xpanse No 0
Xpanse Provider xpanseprovider shortText Cortex Xpanse No 0
Xpanse Remediation Guidance xpanseremediationguidance markdown Cortex Xpanse No 0
Xpanse Responsive IP Asset xpanseresponsiveipasset grid Cortex Xpanse No 0
Xpanse Service Classifications xpanseserviceclassifications grid Cortex Xpanse No 0
Xpanse Service Details xpanseservicedetails grid Cortex Xpanse No 0
Xpanse Service ID xpanseserviceid shortText Cortex Xpanse No 0
Xpanse Service Validation xpanseservicevalidation grid Cortex Xpanse No 0
Xpanse Tags xpansetags shortText Cortex Xpanse No 0
Xsoar-web-server Email Send Counter xsoarwebserveremailsendcounter number Xsoar-web-server No 0
Xsoar-web-server Email User SLA xsoarwebserveremailusersla timer Xsoar-web-server No 0
ZTAP Alert ID ztapalertid shortText Zero Trust Analytics Platform No 0
ZTAP Alert Link ztapalertlink url Zero Trust Analytics Platform No 0
ZTAP Assigned Organization ztapassignedorganization shortText Zero Trust Analytics Platform No 0
ZTAP Input Tag ztapinputtag shortText Zero Trust Analytics Platform No 0
ZTAP Priority ztappriority shortText Zero Trust Analytics Platform No 0
ZTAP Product Status ztapproductstatus shortText Zero Trust Analytics Platform No 0
ZTAP Source Organization ztapsourceorganization shortText Zero Trust Analytics Platform No 0
ZTAP Status ztapstatus shortText Zero Trust Analytics Platform No 0
ZTAP Trigger Count ztaptriggercount number Zero Trust Analytics Platform No 0
ZTAP Triggers ztaptriggers grid Zero Trust Analytics Platform No 0
Zendesk CC'd zendeskccd shortText Zendesk No 0
Zendesk Collaborators zendeskcollaborators shortText Zendesk No 0
Zendesk Custom Fields zendeskcustomfields shortText Zendesk No 0
Zendesk Followers zendeskfollowers shortText Zendesk No 0
Zendesk Forum Id zendeskforumid number Zendesk No 0
Zendesk Organization zendeskorganization shortText Zendesk No 0
Zendesk Problem Id zendeskproblemid number Zendesk No 0
Zendesk Recipient zendeskrecipient shortText Zendesk No 0
Zendesk Requester zendeskrequester shortText Zendesk No 0
Zendesk Ticket Type zendesktickettype singleSelect Zendesk No 0
ZeroFox Key Incident Analysis zerofoxkeyincidentanalysis longText ZeroFox No 0
ZeroFox Key Incident Headline zerofoxkeyincidentheadline shortText ZeroFox No 0
Zimperium Bundle ID zimperiumbundleid shortText Zimperium No 0
Zip Code zipcode shortText Common Types No 0
adversaries adversaries multiSelect Lumu No 0
adversaryId adversaryid shortText Lumu No 0
adversaryTypes adversarytypes multiSelect Lumu No 0
app channel name appchannelname shortText Common Types No 0
appsubcategory appsubcategory multiSelect Core Alert Fields No 0
companyId companyid shortText Lumu No 0
contactSummary contactsummary shortText Lumu No 0
failed incidents created date failedincidentscreateddate shortText Integrations & Incidents Health Check No 0
firstContact firstcontact shortText Lumu No 0
fwserials fwserials shortText PAN-OS to Strata Logging Service Monitoring No 0
impacted devices impacteddevices shortText Microsoft 365 Defender No 0
impacted entities impactedentities shortText Microsoft 365 Defender No 0
labelDistribution labeldistribution shortText Lumu No 0
lastContact lastcontact shortText Lumu No 0
lumu_actions lumuactions grid Lumu No 0
lumu_contacts lumucontacts number Lumu No 0
lumu_description lumudescription shortText Lumu No 0
lumu_event_type lumueventtype shortText Lumu No 0
lumu_incidentId lumuincidentid shortText Lumu No 0
lumu_source_name lumusourcename shortText Lumu No 0
lumu_status lumustatus singleSelect Lumu No 0
lumu_totalEndpoints lumutotalendpoints number Lumu No 0
panosintegrationinstancename panosintegrationinstancename shortText PAN-OS to Strata Logging Service Monitoring No 0
sAMAccountName samaccountname shortText Common Types No 0
similarIncident similarincident multiSelect Integrations & Incidents Health Check No 0
similarIncidents similarincidents multiSelect Common Types No 0
statusTimestamp statustimestamp shortText Lumu No 0
subclassification subclassification multiSelect Use Case Builder No 0
userAccountControl useraccountcontrol shortText Common Types No 0