XDR Risky Hosts
Hosts that pose a risk, along with their scores retrieved from XDR.
Details
| ID | incident_xdrriskyhosts |
|---|---|
| CLI Name | xdrriskyhosts |
| Type | grid |
| Version | -1 |
| Required | No |
| Read Only | No |
| Use as KPI | No |
| Searchable | Yes |
Associated Incident Types
{ "id": "incident_xdrriskyhosts", "version": -1, "modified": "2023-08-31T11:50:13.433749407Z", "name": "XDR Risky Hosts", "ownerOnly": false, "description": "Hosts that pose a risk, along with their scores retrieved from XDR.", "cliName": "xdrriskyhosts", "type": "grid", "closeForm": false, "editForm": true, "required": false, "neverSetAsRequired": false, "isReadOnly": false, "useAsKpi": false, "locked": false, "system": false, "content": true, "group": 0, "hidden": false, "openEnded": false, "associatedTypes": [ "Cortex XDR - XCLOUD", "Cortex XDR - XCLOUD Cryptomining", "Cortex XDR Device Control Violations", "Cortex XDR Disconnected endpoints", "Cortex XDR Incident", "Cortex XDR Port Scan", "Cortex XDR - Lite" ], "associatedToAll": false, "unmapped": false, "unsearchable": false, "caseInsensitive": true, "columns": [ { "key": "hostid", "displayName": "Host ID", "type": "shortText", "orgType": "shortText", "required": false, "script": "", "width": 150, "isDefault": true, "fieldCalcScript": "", "isReadOnly": false, "selectValues": null }, { "key": "risklevel", "displayName": "Risk Level", "type": "shortText", "orgType": "shortText", "required": false, "script": "", "width": 150, "isDefault": true, "fieldCalcScript": "", "isReadOnly": false, "selectValues": null }, { "key": "reasons", "displayName": "Reasons", "type": "shortText", "orgType": "shortText", "required": false, "script": "", "width": 150, "isDefault": true, "fieldCalcScript": "", "isReadOnly": false, "selectValues": null } ], "defaultRows": [ {}, {}, {} ], "sla": 0, "threshold": 72, "fromVersion": "6.5.0" }