SpyCloud Malware Data

SpyCloud Enterprise Protection · #92F4EF

Details

IDSpyCloud Malware Data
Version-1
From Version6.10.0
PlaybookSpyCloud - Malware Incident Enrichment
Auto-runNo
DisabledNo
Read OnlyNo
DefaultNo

Source

incidenttype-SpyCloudMalwareData.json
Download History Raw 
{
    "id": "SpyCloud Malware Data",
    "version": -1,
    "vcShouldIgnore": false,
    "locked": false,
    "name": "SpyCloud Malware Data",
    "prevName": "SpyCloud Malware Data",
    "color": "#92F4EF",
    "playbookId": "SpyCloud - Malware Incident Enrichment",
    "hours": 0,
    "days": 0,
    "weeks": 0,
    "hoursR": 0,
    "daysR": 0,
    "weeksR": 0,
    "system": false,
    "readonly": false,
    "default": false,
    "autorun": false,
    "disabled": false,
    "reputationCalc": 0,
    "onChangeRepAlg": 0,
    "layout": "SpyCloud Malware Layout",
    "detached": false,
    "extractSettings": {
        "mode": "Specific",
        "fieldCliNameToExtractSettings": {
            "sourceip": {
                "extractAsIsIndicatorTypeId": "ipRep",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            },
            "spyclouddomain": {
                "extractAsIsIndicatorTypeId": "domainRepUnified",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            },
            "spycloudemail": {
                "extractAsIsIndicatorTypeId": "emailRep",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            },
            "spycloudtargetdomain": {
                "extractAsIsIndicatorTypeId": "domainRepUnified",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": []
            }
        }
    },
    "fromVersion": "6.10.0"
}