Vectra RUX Events Detection
Vectra RUX
· #98DCFF
Details
| ID | Vectra RUX Events Detection |
|---|---|
| Version | -1 |
| From Version | 6.10.0 |
| Playbook | — |
| Auto-run | No |
| Disabled | No |
| Read Only | No |
| Default | No |
{ "id": "Vectra RUX Events Detection", "version": -1, "vcShouldIgnore": false, "locked": false, "name": "Vectra RUX Events Detection", "prevName": "Vectra RUX Events Detection", "color": "#98DCFF", "hours": 0, "days": 0, "weeks": 0, "hoursR": 0, "daysR": 0, "weeksR": 0, "system": false, "readonly": false, "default": false, "autorun": false, "disabled": false, "reputationCalc": 0, "onChangeRepAlg": 0, "layout": "Vectra RUX Events Detection", "detached": false, "extractSettings": { "mode": "Specific", "fieldCliNameToExtractSettings": { "vectraruxentityip": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": false, "extractIndicatorTypesIDs": [ "ipRep" ] }, "vectraruxeventaccounts": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": true, "extractIndicatorTypesIDs": [] }, "vectraruxeventdns": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": true, "extractIndicatorTypesIDs": [] }, "vectraruxeventdomains": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": false, "extractIndicatorTypesIDs": [ "domainRepUnified" ] }, "vectraruxeventexternaltargets": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": true, "extractIndicatorTypesIDs": [] }, "vectraruxeventhosts": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": true, "extractIndicatorTypesIDs": [] }, "vectraruxeventips": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": false, "extractIndicatorTypesIDs": [ "ipRep", "IPv6", "IPv6CIDR" ] }, "vectraruxeventports": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": true, "extractIndicatorTypesIDs": [] }, "vectraruxeventprotocols": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": true, "extractIndicatorTypesIDs": [] }, "vectraruxsourceexternalhostip": { "extractAsIsIndicatorTypeId": "", "isExtractingAllIndicatorTypes": false, "extractIndicatorTypesIDs": [ "ipRep" ] } } }, "fromVersion": "6.10.0", "supportedModules": [ "agentix", "xsiam" ] }