Symantec EDR Incident

Symantec Endpoint Detection and Response · #295AFF

Details

ID	`Symantec EDR Incident`
Version	-1
From Version	6.5.0
Playbook	—
Auto-run	Yes
Disabled	No
Read Only	No
Default	No

Source

incidenttype-SymantecEDR_incident.json

Download History Raw

{
    "id": "Symantec EDR Incident",
    "version": -1,
    "vcShouldIgnore": false,
    "locked": false,
    "name": "Symantec EDR Incident",
    "prevName": "Symantec EDR Incident",
    "color": "#295AFF",
    "hours": 0,
    "days": 0,
    "weeks": 0,
    "hoursR": 0,
    "daysR": 0,
    "weeksR": 0,
    "system": false,
    "readonly": false,
    "default": false,
    "autorun": true,
    "disabled": false,
    "reputationCalc": 0,
    "onChangeRepAlg": 1,
    "layout": "Symantec EDR Incident layout",
    "detached": false,
    "extractSettings": {
        "mode": "All",
        "fieldCliNameToExtractSettings": {}
    },
    "fromVersion": "6.5.0"
}