SentinelOne UAM Alert Analyst Verdict Mapped

Details

ID	`incident_sentineloneuamalertanalystverdictmapped`
CLI Name	`sentineloneuamalertanalystverdictmapped`
Type	singleSelect
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	No

Select Values

False positive - Benign
False positive - Benign but suspicious
False positive - System error
False positive - Undefined
False positive - User error
True positive - Advanced persistent threat
True positive - Benign
True positive - Benign but suspicious
True positive - Data exfiltration
True positive - Denial of service
True positive - Exploitation tools
True positive - Insider threat
True positive - Malware
True positive - Phishing attack
True positive - Policy violation
True positive - PUA/Adware
True positive - Ransomware
True positive - Unauthorized access
True positive - Undefined
Undefined

Associated Incident Types

SentinelOne Incident

Source

incidentfield-SentinelOne_UAM_Alert_Analyst_Verdict_Mapped.json

Download History Raw

{
    "associatedToAll": false,
    "associatedTypes": [
        "SentinelOne Incident"
    ],
    "caseInsensitive": true,
    "cliName": "sentineloneuamalertanalystverdictmapped",
    "closeForm": false,
    "content": true,
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_sentineloneuamalertanalystverdictmapped",
    "isReadOnly": false,
    "locked": false,
    "name": "SentinelOne UAM Alert Analyst Verdict Mapped",
    "neverSetAsRequired": false,
    "openEnded": false,
    "ownerOnly": false,
    "required": false,
    "sla": 0,
    "system": false,
    "threshold": 72,
    "type": "singleSelect",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.10.0",
    "selectValues": [
        "False positive - Benign",
        "False positive - Benign but suspicious",
        "False positive - System error",
        "False positive - Undefined",
        "False positive - User error",
        "True positive - Advanced persistent threat",
        "True positive - Benign",
        "True positive - Benign but suspicious",
        "True positive - Data exfiltration",
        "True positive - Denial of service",
        "True positive - Exploitation tools",
        "True positive - Insider threat",
        "True positive - Malware",
        "True positive - Phishing attack",
        "True positive - Policy violation",
        "True positive - PUA/Adware",
        "True positive - Ransomware",
        "True positive - Unauthorized access",
        "True positive - Undefined",
        "Undefined"
    ]
}