XDR File Artifacts

Cortex XDR by Palo Alto Networks grid

Details

IDincident_xdrfileartifacts
CLI Namexdrfileartifacts
Typegrid
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableYes
{
	"associatedToAll": false,
	"associatedTypes": [
		"Cortex XDR Incident",
		"Cortex XDR Port Scan",
        "Cortex XDR - Lite"
	],
	"breachScript": "",
	"caseInsensitive": true,
	"cliName": "xdrfileartifacts",
	"closeForm": false,
	"columns": [
		{
			"displayName": "File Name",
			"fieldCalcScript": "",
			"isDefault": true,
			"isReadOnly": false,
			"key": "filename",
			"required": false,
			"script": "",
			"selectValues": null,
			"type": "shortText",
			"width": 150
		},
		{
			"displayName": "File SHA256",
			"fieldCalcScript": "",
			"isDefault": true,
			"isReadOnly": false,
			"key": "filesha256",
			"required": false,
			"script": "",
			"selectValues": null,
			"type": "shortText",
			"width": 150
		},
		{
			"displayName": "Alert Count",
			"fieldCalcScript": "",
			"isDefault": true,
			"isReadOnly": false,
			"key": "alertcount",
			"required": false,
			"script": "",
			"selectValues": null,
			"type": "number",
			"width": 150
		},
		{
			"displayName": "File Wildfire Verdict",
			"fieldCalcScript": "",
			"isDefault": true,
			"isReadOnly": false,
			"key": "filewildfireverdict",
			"required": false,
			"script": "",
			"selectValues": null,
			"type": "shortText",
			"width": 150
		},
		{
			"displayName": "File Signature Vendor Name",
			"fieldCalcScript": "",
			"isDefault": true,
			"isReadOnly": false,
			"key": "filesignaturevendorname",
			"required": false,
			"script": "",
			"selectValues": null,
			"type": "shortText",
			"width": 150
		},
		{
			"displayName": "File Signature Status",
			"fieldCalcScript": "",
			"isDefault": true,
			"isReadOnly": false,
			"key": "filesignaturestatus",
			"required": false,
			"script": "",
			"selectValues": null,
			"type": "shortText",
			"width": 150
		}
	],
	"content": true,
	"defaultRows": [
		{},
		{},
		{}
	],
	"description": "",
	"editForm": true,
	"fieldCalcScript": "",
	"group": 0,
	"hidden": false,
	"id": "incident_xdrfileartifacts",
	"isReadOnly": false,
	"locked": false,
	"name": "XDR File Artifacts",
	"neverSetAsRequired": false,
	"ownerOnly": false,
	"placeholder": "",
	"required": false,
	"script": "",
	"selectValues": [],
	"sla": 0,
	"system": false,
	"systemAssociatedTypes": null,
	"threshold": 72,
	"type": "grid",
	"unmapped": false,
	"unsearchable": false,
	"useAsKpi": false,
	"validationRegex": "",
	"version": -1,
	"fromVersion": "5.0.0"
}