Network Security IDS

Details

ID	`incident_networksecurityids`
CLI Name	`networksecurityids`
Type	markdown
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	No

Source

incidentfield-Network_Security_IDS.json

Download History Raw

{
    "associatedToAll": true,
    "caseInsensitive": true,
    "cliName": "networksecurityids",
    "closeForm": false,
    "content": true,
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_networksecurityids",
    "isReadOnly": false,
    "locked": false,
    "name": "Network Security IDS",
    "neverSetAsRequired": false,
    "openEnded": false,
    "ownerOnly": false,
    "required": false,
    "sla": 0,
    "system": false,
    "threshold": 72,
    "type": "markdown",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.8.0",
    "template": "# Network Security (IDS/IPS)\n## Top Use Cases:\n\n- Get/Fetch alerts.\n- Get PCAP file, packet.\n- Get network logs filtered by time range, ip addresses, ports, etc.\n- Create/manage/delete policies and rules.\n- Update signatures from an online source / upload + Get last signature update information.\n- Install policy (if existing).\n\n## Network Security (IPS/IDS) Integration Example: [ProtectWise](https://xsoar.pan.dev/docs/reference/integrations/protect-wise)"
}