SpyCloud Access Data

SpyCloud Enterprise Protection · #FFA05C

Details

IDSpyCloud Access Data
Version-1
From Version6.10.0
Playbook—
Auto-runNo
DisabledNo
Read OnlyNo
DefaultNo

Source

incidenttype-SpyCloudAccessData.json
Download History Raw 
{
    "id": "SpyCloud Access Data",
    "version": -1,
    "vcShouldIgnore": false,
    "locked": false,
    "name": "SpyCloud Access Data",
    "prevName": "SpyCloud Access Data",
    "color": "#FFA05C",
    "hours": 0,
    "days": 0,
    "weeks": 0,
    "hoursR": 0,
    "daysR": 0,
    "weeksR": 0,
    "system": false,
    "readonly": false,
    "default": false,
    "autorun": false,
    "disabled": false,
    "reputationCalc": 0,
    "onChangeRepAlg": 0,
    "layout": "SpyCloud Access Layout",
    "detached": false,
    "extractSettings": {
        "mode": "Specific",
        "fieldCliNameToExtractSettings": {
            "sourceip": {
                "extractAsIsIndicatorTypeId": "ipRep",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            },
            "spyclouddomain": {
                "extractAsIsIndicatorTypeId": "domainRepUnified",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            },
            "spycloudemail": {
                "extractAsIsIndicatorTypeId": "emailRep",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            },
            "spycloudtargetdomain": {
                "extractAsIsIndicatorTypeId": "domainRepUnified",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            },
            "spycloudtargetsubdomain": {
                "extractAsIsIndicatorTypeId": "domainRepUnified",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            }
        }
    },
    "fromVersion": "6.10.0"
}