GIB Date First Seen

Group-IB Threat Intelligence date

Details

IDincident_gibdatefirstseen
CLI Namegibdatefirstseen
Typedate
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableYes
{
    "associatedToAll": false,
    "associatedTypes": [
        "GIB Compromised Account Group",
        "GIB Compromised Card Group",
        "GIB Attacks Phishing Kit",
        "GIB Suspicious IP TOR Node",
        "GIB Suspicious IP Open Proxy",
        "GIB Suspicious IP VPN",
        "GIB Suspicious IP Scanner",
        "GIB Malware",
        "GIB Malware CNC",
        "GIB Cybercriminal Threat",
        "GIB Attacks Phishing Group",
        "GIB Suspicious IP Socks Proxy",
        "GIB Cybercriminal Threat Actor",
        "GIB Nation-State Cybercriminals Threat Actor",
        "GIB Nation-State Cybercriminals Threat",
        "GIB SPD"
    ],
    "caseInsensitive": true,
    "cliName": "gibdatefirstseen",
    "closeForm": true,
    "content": true,
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_gibdatefirstseen",
    "isReadOnly": false,
    "itemVersion": "1.4.2",
    "locked": false,
    "name": "GIB Date First Seen",
    "neverSetAsRequired": false,
    "openEnded": false,
    "ownerOnly": false,
    "required": false,
    "sla": 0,
    "system": false,
    "systemAssociatedTypes": [
        "GIB Compromised Account Group",
        "GIB Compromised Card Group",
        "GIB Attacks Phishing Kit",
        "GIB Suspicious IP TOR Node",
        "GIB Suspicious IP Open Proxy",
        "GIB Suspicious IP VPN",
        "GIB Suspicious IP Scanner",
        "GIB Malware",
        "GIB Malware CNC",
        "GIB Cybercriminal Threat",
        "GIB Attacks Phishing Group",
        "GIB Suspicious IP Socks Proxy",
        "GIB Cybercriminal Threat Actor",
        "GIB Nation-State Cybercriminals Threat Actor",
        "GIB Nation-State Cybercriminals Threat",
        "GIB SPD"
    ],
    "threshold": 72,
    "type": "date",
    "unmapped": false,
    "unsearchable": false,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.10.0"
}