Email Sender

{
    "associatedToAll": true,
    "caseInsensitive": true,
    "cliName": "emailsender",
    "closeForm": false,
    "content": true,
    "description": "The email sender value of a firewall alerts triggered on a the content of a malicious email.",
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_emailsender",
    "isReadOnly": false,
    "locked": false,
    "name": "Email Sender",
    "neverSetAsRequired": false,
    "openEnded": true,
    "ownerOnly": false,
    "propagationLabels": [
        "all"
    ],
    "required": false,
    "sla": 0,
    "system": false,
    "threshold": 72,
    "type": "multiSelect",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.5.0",
    "x2_fields": "fw_email_sender",
    "Aliases": [
        {
            "cliName": "emailfrom",
            "type": "shortText",
            "name": "Email From"
        },
        {
            "cliName": "ironscalessenderemail",
            "type": "shortText",
            "name": "Ironscales-sender_email"
        },
        {
            "cliName": "proofpointtapsenderaddress",
            "type": "shortText",
            "name": "Proofpoint TAP Sender Address"
        },
        {
            "cliName": "apdmessagemailfrom",
            "type": "shortText",
            "name": "APD Message Mail From"
        },
        {
            "cliName": "cofensetriagereportfromaddress",
            "type": "shortText",
            "name": "Cofense Triage Report From Address"
        },
        {
            "cliName": "cymulatesourceemailaddress",
            "type": "shortText",
            "name": "Cymulate Source Email Address"
        },
        {
            "cliName": "cyrenexternalfrom",
            "type": "shortText",
            "name": "Cyren External From"
        },
        {
            "cliName": "cyrenexternalsender",
            "type": "shortText",
            "name": "Cyren External Sender"
        },
        {
            "cliName": "cyrenfromaddress",
            "type": "shortText",
            "name": "Cyren From Address"
        },
        {
            "cliName": "cyrensenderaddress",
            "type": "shortText",
            "name": "Cyren Sender Address"
        },
        {
            "cliName": "digitalguardianemailsender",
            "type": "shortText",
            "name": "Digital Guardian Email Sender"
        },
        {
            "cliName": "phisheremailfrom",
            "type": "shortText",
            "name": "PhishER Email From"
        },
        {
            "cliName": "symantecescemailsender",
            "type": "shortText",
            "name": "Symantec ESC Email Sender"
        }
    ]
}