Vectra RUX Events Detection

Vectra RUX · #98DCFF

Details

IDVectra RUX Events Detection
Version-1
From Version6.10.0
Playbook
Auto-runNo
DisabledNo
Read OnlyNo
DefaultNo
{
    "id": "Vectra RUX Events Detection",
    "version": -1,
    "vcShouldIgnore": false,
    "locked": false,
    "name": "Vectra RUX Events Detection",
    "prevName": "Vectra RUX Events Detection",
    "color": "#98DCFF",
    "hours": 0,
    "days": 0,
    "weeks": 0,
    "hoursR": 0,
    "daysR": 0,
    "weeksR": 0,
    "system": false,
    "readonly": false,
    "default": false,
    "autorun": false,
    "disabled": false,
    "reputationCalc": 0,
    "onChangeRepAlg": 0,
    "layout": "Vectra RUX Events Detection",
    "detached": false,
    "extractSettings": {
        "mode": "Specific",
        "fieldCliNameToExtractSettings": {
            "vectraruxentityip": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": [
                    "ipRep"
                ]
            },
            "vectraruxeventaccounts": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectraruxeventdns": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectraruxeventdomains": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": [
                    "domainRepUnified"
                ]
            },
            "vectraruxeventexternaltargets": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectraruxeventhosts": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectraruxeventips": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": [
                    "ipRep",
                    "IPv6",
                    "IPv6CIDR"
                ]
            },
            "vectraruxeventports": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectraruxeventprotocols": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": true,
                "extractIndicatorTypesIDs": []
            },
            "vectraruxsourceexternalhostip": {
                "extractAsIsIndicatorTypeId": "",
                "isExtractingAllIndicatorTypes": false,
                "extractIndicatorTypesIDs": [
                    "ipRep"
                ]
            }
        }
    },
    "fromVersion": "6.10.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}