Rapid7 ThreatCommand Alert

Rapid7 - Threat Command (IntSights) · #CFD0D0

Details

IDRapid7 ThreatCommand Alert
Version-1
From Version6.8.0
PlaybookRetrieve Alert Attachments - Rapid7 ThreatCommand
Auto-runNo
DisabledNo
Read OnlyNo
DefaultNo

Source

incidenttype-Rapid7_ThreatCommand_Alert.json
Download History Raw 
{
    "autorun": false,
    "color": "#CFD0D0",
    "days": 0,
    "daysR": 0,
    "default": false,
    "detached": false,
    "disabled": false,
    "extractSettings": {
        "fieldCliNameToExtractSettings": {
            "threatcommandsourceurl": {
                "extractAsIsIndicatorTypeId": "",
                "extractIndicatorTypesIDs": [
                    "urlRep"
                ],
                "isExtractingAllIndicatorTypes": false
            }
        },
        "mode": "Specific"
    },
    "hours": 0,
    "hoursR": 0,
    "id": "Rapid7 ThreatCommand Alert",
    "layout": "Rapid7 ThreatCommand - Layout",
    "locked": false,
    "name": "Rapid7 ThreatCommand Alert",
    "onChangeRepAlg": 0,
    "playbookId": "Retrieve Alert Attachments - Rapid7 ThreatCommand",
    "readonly": false,
    "reputationCalc": 0,
    "system": false,
    "version": -1,
    "weeks": 0,
    "weeksR": 0,
    "fromVersion": "6.8.0"
}