Vectra Host

Vectra AI · #76BC43
Details

ID	`Vectra Host`
Version	-1
From Version	6.5.0
Playbook	Process Incident - Vectra Detect
Auto-run	No
Disabled	No
Read Only	No
Default	No
Source

Vectra_Host.json
Download History Raw
{
    "id": "Vectra Host",
    "version": -1,
    "vcShouldIgnore": false,
    "locked": false,
    "name": "Vectra Host",
    "prevName": "Vectra Host",
    "color": "#76BC43",
    "hours": 0,
    "days": 0,
    "weeks": 0,
    "hoursR": 0,
    "daysR": 0,
    "weeksR": 0,
    "system": false,
    "readonly": false,
    "default": false,
    "autorun": false,
    "disabled": false,
    "playbookId": "Process Incident - Vectra Detect",
    "reputationCalc": 0,
    "onChangeRepAlg": 0,
    "layout": "Vectra Host",
    "detached": false,
    "extractSettings": {
        "mode": "Specific",
        "fieldCliNameToExtractSettings": {
            "devicelocalip": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": [
                    "ipRep",
                    "IPv6"
                ]
            },
            "devicename": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "email": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": [
                    "emailRep"
                ]
            },
            "hostnames": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectradetectiondetails": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectrahostaccountaccesshistory": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectrahostartifactset": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectrahostpreviousips": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectraserviceaccesshistory": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            }
        }
    },
    "fromVersion": "6.5.0"
}