Malicious Domains Blocked

Whether malicious domains associated with the attacker's IP have been blocked.

Details

ID	`incident_maliciousdomainsblocked`
CLI Name	`maliciousdomainsblocked`
Type	boolean
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	Yes

Associated Incident Types

Port Scan

Source

MaliciousDomainsBlocked.json

Download History Raw

{
    "id": "incident_maliciousdomainsblocked",
    "version": -1,
    "modified": "2020-03-24T17:51:11.703363512Z",
    "name": "Malicious Domains Blocked",
    "ownerOnly": false,
    "placeholder": "",
    "description": "Whether malicious domains associated with the attacker's IP have been blocked.",
    "cliName": "maliciousdomainsblocked",
    "type": "boolean",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "script": "",
    "fieldCalcScript": "",
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "selectValues": null,
    "validationRegex": "",
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "associatedTypes": [
        "Port Scan"
    ],
    "systemAssociatedTypes": null,
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "columns": null,
    "defaultRows": null,
    "sla": 0,
    "threshold": 72,
    "breachScript": "",
    "fromVersion": "5.0.0"
}