{
"associatedToAll": false,
"associatedTypes": [
"Qradar Generic",
"FW change management",
"CrowdStrike Falcon Detection",
"CrowdStrike Falcon Incident",
"Malware",
"Microsoft Defender For Endpoint",
"Skyhigh Security Alert",
"Skyhigh Security Threat",
"CrowdStrike Falcon NGSIEM Detection",
"CrowdStrike Falcon NGSIEM Incident"
],
"breachScript": "",
"caseInsensitive": true,
"cliName": "sourceips",
"closeForm": false,
"columns": null,
"content": true,
"defaultRows": null,
"description": "The source IPs of the event.",
"editForm": true,
"extractIndicatorTypesIDs": [],
"fieldCalcScript": "",
"group": 0,
"hidden": false,
"id": "incident_sourceips",
"isExtractingSpecificIndicatorTypes": false,
"isReadOnly": false,
"itemVersion": "",
"locked": false,
"name": "Source IPs",
"neverSetAsRequired": false,
"ownerOnly": false,
"placeholder": "",
"propagationLabels": [
"all"
],
"required": false,
"script": "",
"selectValues": [],
"sla": 0,
"system": false,
"systemAssociatedTypes": [
"Qradar Generic",
"FW change management",
"CrowdStrike Falcon Detection",
"CrowdStrike Falcon Incident",
"Malware",
"Microsoft Defender For Endpoint"
],
"threshold": 72,
"toServerVersion": "",
"type": "multiSelect",
"unmapped": false,
"unsearchable": false,
"useAsKpi": false,
"validationRegex": "",
"version": -1,
"fromVersion": "6.0.0",
"openEnded": true,
"marketplaces": [
"xsoar"
]
}