Chronicle First Seen

The Alert/IOC Domain was first seen within your enterprise.

Google SecOps date

Details

IDincident_chroniclefirstseen
CLI Namechroniclefirstseen
Typedate
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableYes
PlaceholderThe Alert/IOC Domain was first seen within your enterprise.
{
    "id": "incident_chroniclefirstseen",
    "version": -1,
    "modified": "2021-01-18T14:04:51.480034694+05:30",
    "name": "Chronicle First Seen",
    "ownerOnly": false,
    "placeholder": "The Alert/IOC Domain was first seen within your enterprise.",
    "description": "The Alert/IOC Domain was first seen within your enterprise.",
    "cliName": "chroniclefirstseen",
    "type": "date",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "associatedTypes": [
        "Chronicle IOC Domain Matches",
        "Chronicle User Alert"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "5.0.0",
    "marketplaces": [
        "xsoar"
    ]
}