Malicious URL Viewed

Whether a malicious url was viewed by the user, for example in a scenario where a user clicked on a malicious url inside an email and was able to view a malicious site. The value will be True also in a scenario where the URL was blocked initially, but the user decided to proceed and view the URL anyway.

Phishing shortText

Details

ID	`incident_maliciousurlviewed`
CLI Name	`maliciousurlviewed`
Type	shortText
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	No

Source

incidentfield-MaliciousURLViewed.json

Download History Raw

{
    "id": "incident_maliciousurlviewed",
    "version": -1,
    "modified": "2022-12-25T08:52:45.407835633Z",
    "name": "Malicious URL Viewed",
    "ownerOnly": false,
    "description": "Whether a malicious url was viewed by the user, for example in a scenario where  a user clicked on a malicious url inside an email and was able to view a malicious site. The value will be True also in a scenario where the URL was blocked initially, but the user decided to proceed and view the URL anyway.",
    "cliName": "maliciousurlviewed",
    "type": "shortText",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "openEnded": false,
    "associatedToAll": true,
    "unmapped": false,
    "unsearchable": true,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.8.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}