SentinelOne UAM Alert Analyst Verdict Hidden
SentinelOne shortText
Details
| ID | incident_sentineloneuamalertanalystverdict |
|---|---|
| CLI Name | sentineloneuamalertanalystverdict |
| Type | shortText |
| Version | -1 |
| Required | No |
| Read Only | No |
| Use as KPI | No |
| Searchable | No |
Associated Incident Types
{ "associatedToAll": false, "associatedTypes": [ "SentinelOne Incident" ], "caseInsensitive": true, "cliName": "sentineloneuamalertanalystverdictmapped", "closeForm": false, "content": true, "editForm": true, "group": 0, "hidden": false, "id": "incident_sentineloneuamalertanalystverdictmapped", "isReadOnly": false, "locked": false, "name": "SentinelOne UAM Alert Analyst Verdict Mapped", "neverSetAsRequired": false, "openEnded": false, "ownerOnly": false, "required": false, "sla": 0, "system": false, "threshold": 72, "type": "singleSelect", "unmapped": false, "unsearchable": true, "useAsKpi": false, "version": -1, "fromVersion": "6.10.0", "selectValues": [ "False positive - Benign", "False positive - Benign but suspicious", "False positive - System error", "False positive - Undefined", "False positive - User error", "True positive - Advanced persistent threat", "True positive - Benign", "True positive - Benign but suspicious", "True positive - Data exfiltration", "True positive - Denial of service", "True positive - Exploitation tools", "True positive - Insider threat", "True positive - Malware", "True positive - Phishing attack", "True positive - Policy violation", "True positive - PUA/Adware", "True positive - Ransomware", "True positive - Unauthorized access", "True positive - Undefined", "Undefined" ] }