Detection SLA

The time it took from incident creation until the maliciousness was determined.

Details

ID	`incident_detectionsla`
CLI Name	`detectionsla`
Type	timer
Version	-1
Required	No
Read Only	Yes
Use as KPI	Yes
Searchable	Yes

Source

incidentfield-detectionsla.json

Download History Raw

{
 "closeForm": false,
 "cliName": "detectionsla",
 "fromVersion": "5.0.0",
 "neverSetAsRequired": false,
 "threshold": 0,
 "id": "incident_detectionsla",
 "group": 0,
 "script": "",
 "isReadOnly": true,
 "system": false,
 "content": true,
 "unsearchable": false,
 "version": -1,
 "unmapped": false,
 "hidden": false,
 "type": "timer",
 "editForm": false,
 "description": "The time it took from incident creation until the maliciousness was determined.",
 "associatedToAll": true,
 "breachScript": "",
 "associatedTypes": [

 ],
 "caseInsensitive": true,
 "placeholder": "",
 "useAsKpi": true,
 "systemAssociatedTypes": null,
 "locked": false,
 "name": "Detection SLA",
 "ownerOnly": false,
 "required": false,
 "modified": "2018-12-11T12:53:48.369705659Z",
 "fieldCalcScript": "",
 "selectValues": [],
 "validationRegex": "",
 "sla": 20,
 "supportedModules": [
  "agentix",
  "xsiam"
 ]
}