Last Update Time

Common Types shortText

Details

IDincident_lastupdatetime
CLI Namelastupdatetime
TypeshortText
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableYes

Associated Incident Types

{
    "associatedToAll": false,
    "associatedTypes": [
        "Qradar Generic",
        "Carbon Black Endpoint Standard",
        "Guardicore Incident",
        "Azure Active Directory Identity and Access",
        "Saas Security Incident",
        "Tanium TR Incident",
        "Logrhythm Case",
        "CrowdStrike Falcon Detection",
        "CrowdStrike Falcon Incident",
        "Microsoft Defender For Endpoint",
        "OpsGenie Incident",
        "OpsGenie Alert",
        "Skyhigh Security Alert",
        "Skyhigh Security Threat",
        "ThreatConnect",
        "AWS Guard Duty EC2 Finding",
        "AWS Guard Duty IAM Finding",
        "AWS Guard Duty Kubernetes Finding",
        "AWS Guard Duty Malware Protection Finding",
        "AWS Guard Duty S3 Finding",
        "Microsoft Sentinel Incident",
        "Prisma Cloud",
        "GCP Compute Engine Misconfiguration",
        "GCP Kubernetes Engine Misconfiguration",
        "AWS CloudTrail Misconfiguration",
        "AWS IAM Policy Misconfiguration",
        "AWS EC2 Instance Misconfiguration",
        "AWS Security Hub Finding",
		"Prisma Cloud - VM Alert Prioritization",
        "Rapid7 ThreatCommand Alert",
        "Prisma Cloud - VM Alert Prioritization",
        "FreshworksFreshservice Ticket",
        "FreshworksFreshservice Release Request",
        "FreshworksFreshservice Problem Request",
        "FreshworksFreshservice Change Request",
        "Graph Security Alert",
        "CrowdStrike Falcon IDP Detection",
        "Cyberint Incident",
        "CrowdStrike Falcon Mobile Detection",
        "CrowdStrike Falcon On-Demand Scans Detection",
        "CrowdStrike Falcon OFP Detection",
        "CrowdStrike Falcon Third Party Detection",
        "CrowdStrike Falcon NGSIEM Detection",
        "CrowdStrike Falcon Intelligence Recon notification",
        "CrowdStrike Falcon NGSIEM Incident",
        "CrowdStrike Falcon NGSIEM Automated Lead",
        "CrowdStrike Falcon NGSIEM Case",
        "CrowdStrike Falcon IOA Event",
        "GravityZone EDR",
        "GravityZone XDR"
    ],
    "breachScript": "",
    "caseInsensitive": true,
    "cliName": "lastupdatetime",
    "closeForm": false,
    "columns": null,
    "content": true,
    "defaultRows": null,
    "description": "",
    "editForm": true,
    "extractIndicatorTypesIDs": [],
    "fieldCalcScript": "",
    "group": 0,
    "hidden": false,
    "id": "incident_lastupdatetime",
    "isExtractingSpecificIndicatorTypes": true,
    "isReadOnly": false,
    "itemVersion": "",
    "locked": false,
    "name": "Last Update Time",
    "neverSetAsRequired": false,
    "ownerOnly": false,
    "placeholder": "",
    "propagationLabels": [
        "all"
    ],
    "required": false,
    "script": "",
    "selectValues": null,
    "sla": 0,
    "system": false,
    "systemAssociatedTypes": [
        "Prisma Cloud - VM Alert Prioritization",
        "CrowdStrike Falcon OFP Detection"
    ],
    "threshold": 72,
    "toServerVersion": "",
    "type": "shortText",
    "unmapped": false,
    "unsearchable": false,
    "useAsKpi": false,
    "validationRegex": "",
    "version": -1,
    "fromVersion": "6.0.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}