XDR Risky Host Count

The number of hosts identified as risky by Cortex XDR.

Details

ID	`incident_xdrriskyhostcount`
CLI Name	`xdrriskyhostcount`
Type	number
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	Yes

Associated Incident Types

Source

incidentfield-XDR_Risky_Host_Count.json

Download History Raw

{
    "id": "incident_xdrriskyhostcount",
    "version": -1,
    "modified": "2023-08-23T11:06:47.425411175Z",
    "name": "XDR Risky Host Count",
    "ownerOnly": false,
    "description": "The number of hosts identified as risky by Cortex XDR.",
    "cliName": "xdrriskyhostcount",
    "type": "number",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "openEnded": false,
    "associatedTypes": [
        "Cortex XDR Port Scan",
        "Cortex XDR - XCLOUD",
        "Cortex XDR - XCLOUD Cryptomining",
        "Cortex XDR Device Control Violations",
        "Cortex XDR Disconnected endpoints",
        "Cortex XDR Incident",
        "Cortex XDR - Lite"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.5.0"
}