Alert Malicious

Details

ID	`incident_alertmalicious`
CLI Name	`alertmalicious`
Type	shortText
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	Yes

Associated Incident Types

Source

incidentfield-Alert_Malicious.json

Download History Raw

{
  "associatedToAll": false,
  "associatedTypes": [
    "FireEye NX IPS Event",
    "FireEye NX Alert",
    "FireEye EX Alert"
  ],
  "breachScript": "",
  "caseInsensitive": true,
  "cliName": "alertmalicious",
  "closeForm": false,
  "columns": null,
  "content": true,
  "defaultRows": null,
  "description": "Whether the alert is malicious.",
  "editForm": true,
  "fieldCalcScript": "",
  "group": 0,
  "hidden": false,
  "id": "incident_alertmalicious",
  "isReadOnly": false,
  "locked": false,
  "name": "Alert Malicious",
  "neverSetAsRequired": false,
  "ownerOnly": false,
  "placeholder": "",
  "required": false,
  "script": "",
  "selectValues": null,
  "sla": 0,
  "system": false,
  "systemAssociatedTypes": null,
  "threshold": 72,
  "type": "shortText",
  "unmapped": false,
  "unsearchable": false,
  "useAsKpi": false,
  "validationRegex": "",
  "version": -1,
  "fromVersion": "5.0.0",
  "supportedModules": [
    "agentix",
    "xsiam"
  ]
}