Microsoft Sentinel Incident

Microsoft Sentinel · #C9C598

Details

ID	`Microsoft Sentinel Incident`
Version	-1
From Version	6.5.0
Playbook	—
Auto-run	No
Disabled	No
Read Only	No
Default	No

Source

incidenttype-Microsoft_Sentinel_Incident.json

Download History Raw

{
    "id": "Microsoft Sentinel Incident",
    "version": -1,
    "vcShouldIgnore": false,
    "locked": false,
    "name": "Microsoft Sentinel Incident",
    "prevName": "Microsoft Sentinel Incident",
    "color": "#C9C598",
    "hours": 0,
    "days": 0,
    "weeks": 0,
    "hoursR": 0,
    "daysR": 0,
    "weeksR": 0,
    "system": false,
    "readonly": false,
    "default": false,
    "autorun": false,
    "disabled": false,
    "reputationCalc": 0,
    "onChangeRepAlg": 0,
    "layout": "Microsoft Sentinel - default layout",
    "detached": false,
    "extractSettings": {
        "mode": "Specific",
        "fieldCliNameToExtractSettings": {}
    },
    "fromVersion": "6.5.0"
}