Layouts

514 layouts.

Name Group Pack Version
ACTI Intelligence Alert Indicator Accenture CTI v2 6.0.0
ACTI Intelligence Report Indicator Accenture CTI v2 6.0.0
ACTI Malware Family Indicator Accenture CTI v2 6.0.0
ACTI Threat Actor Indicator Accenture CTI v2 6.0.0
ACTI Threat Campaign Indicator Accenture CTI v2 6.0.0
ACTI Threat Group Indicator Accenture CTI v2 6.0.0
AI Playground Incident Anything LLM 6.0.0
ASM Alert Layout Incident Cortex Attack Surface Management 6.10.0
ASN Indicator Common Types 6.5.0
ASN Indicator Common Types 6.10.0
AWS CloudTrail Misconfiguration Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
AWS EC2 Instance Misconfiguration Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
AWS Guard Duty EC2 Finding Incident AWS - GuardDuty 6.5.0
AWS Guard Duty IAM Finding Incident AWS - GuardDuty 6.5.0
AWS Guard Duty Kubernetes Finding Incident AWS - GuardDuty 6.5.0
AWS Guard Duty Malware Protection Finding Incident AWS - GuardDuty 6.5.0
AWS Guard Duty S3 Finding Incident AWS - GuardDuty 6.5.0
AWS IAM Policy Misconfiguration Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
AWS Security Hub Finding Incident AWS - Security Hub 6.5.0
Access Incident Incident Access Investigation 6.0.0
Account Indicator Indicator Common Types 6.0.0
Account Indicator Indicator Common Types 6.10.0
Agari Phishing Defense Policy Event Incident Agari Phishing Defense 6.0.0
Argus Case Incident mnemonic MDR 6.0.0
Armis Alert Incident Armis 6.0.0
Asimily Anomaly Layout Incident Asimily Insight 6.10.0
Asimily CVE Layout Incident Asimily Insight 6.10.0
Ataya Incident Layout Incident Ataya 6.9.0
Attack Pattern Indicator Common Types 6.10.0
Attack Pattern Indicator Common Types 6.0.0
Azure AKS Misconfiguration Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
Azure Active Directory Identity and Access Layout Incident Azure Active Directory Identity and Access (Deprecated) 6.0.0
Azure DevOps Layout Incident AzureDevOps 6.0.0
Azure Network Misconfiguration Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
Azure SQL Misconfiguration Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
Azure Storage Misconfiguration Incident Prisma Cloud by Palo Alto Networks 6.0.0
Azure Storage Queue Incident Azure Storage Queue 6.0.0
BMC ITSM Layout Incident BMC Helix ITSM 6.2.0
Backup Repository State Incident Veeam App 6.10.0
BitSight Findings Incident Bitsight 6.0.0
Bmc Remedyforce Incident Incident Bmc Helix Remedyforce 6.0.0
Bmc Remedyforce Service Request Incident Bmc Helix Remedyforce 6.0.0
Box Incident Incident Box 6.0.0
Brute Force Incident Incident Brute Force 6.0.0
CCTV layout Incident UnifiVideo NVR 6.0.0
CLOUD Token Theft Incident Cloud Incident Response 6.8.0
CP HEC Security Event Layout Incident Check Point Harmony Email and Collaboration (HEC) 6.9.0
CVE Indicator Indicator Common Types 6.10.0
CVE Indicator Indicator Common Types 6.0.0
CVE Indicator (Prisma Cloud Compute) Indicator Prisma Cloud Compute Reporting (Deprecated) 6.0.0
Caldera Operation Incident MITRE Caldera 6.2.0
Campaign Indicator Common Types 6.0.0
Campaign Indicator Common Types 6.10.0
Campaign Indicator Common Types 6.10.0
Campaign Report Incident Threat Intel Reports (BETA) 6.5.0
Carbon Black EDR Incidents Incident Carbon Black Enterprise Response 6.0.0
Carbon Black Endpoint Standard Layout Incident Carbon Black Endpoint Standard 6.0.0
Case Management Layout v2 Incident CaseManagement-Generic 6.2.0
Case layout Incident CaseManagement-Generic 6.0.0
Certificate Indicator Indicator X509Certificate 6.0.0
Check Point NDR Insight Layout Incident Check Point Infinity NDR 6.9.0
Check Point XDR Incident Layout Incident Check Point XDR 6.10.0
Chronicle Curated Rule Detection Incident Incident Google SecOps 6.5.0
Chronicle Rule Detection Incident Incident Google SecOps 6.0.0
Chronicle User Alert Incident Incident Google SecOps 6.0.0
ChronicleAsset Indicator Indicator Google SecOps 6.0.0
CiscoESA Incident Cisco Email Security Appliance (IronPort) 6.2.0
CiscoSMA Incident CiscoSMA 6.2.0
Claroty Integrity Incident Incident Claroty 6.0.0
Claroty Security Incident Incident Claroty 6.0.0
Cloud Alerts Incident Cloud Incident Response 6.10.0
Cloud Threat Response Incident Incident Proofpoint Cloud Threat Response 6.10.0
Code42 Security Alert Incident Code42 6.8.0
Cofense Triage Report Incident Cofense Triage 6.0.0
Cohesity Helios Ransomware Incident Layout Incident Cohesity Helios 6.0.0
Commvault Suspicious File Activity Layout Incident Commvault Cloud 6.8.0
Configuration Backup Incident Veeam App 6.10.0
Confluera Layout Incident Confluera 6.0.0
Content Update Check Layout Incident XSOAR Content Update Notifications 6.0.0
Content Update Manager Layout Incident XSOAR Content Update Notifications 6.0.0
Cortex Data Lake Monitoring Incident PAN-OS to Strata Logging Service Monitoring 6.0.0
Cortex XDR - Lite Incident Cortex XDR by Palo Alto Networks 6.9.0
Cortex XDR - XCLOUD Incident Cortex XDR by Palo Alto Networks 6.2.0
Cortex XDR - XCLOUD Cryptojacking Incident Cloud Incident Response 6.5.0
Cortex XDR Device Control Violations Incident Cortex XDR by Palo Alto Networks 6.0.0
Cortex XDR Disconnected endpoints Incident Cortex XDR by Palo Alto Networks 6.0.0
Cortex XDR Incident Incident Cortex XDR by Palo Alto Networks 6.8.0
Cortex XDR Port Scan Incident Cortex XDR by Palo Alto Networks 6.0.0
Course of Action Indicator Common Types 6.0.0
Course of Action Indicator Common Types 6.10.0
CrowdStrike Falcon Layout Incident CrowdStrike Falcon 6.0.0
Cryptocurrency Indicator Cryptocurrency 6.0.0
Cryptosim Correlation Alerts Incident Cryptosim 6.0.0
CyCognito Asset Information Indicator CyCognito Feed 6.2.0
CyCognito Issue Information Incident CyCognito 6.2.0
CybelAngel Incident CybelAngel 6.0.0
Cyberint Incident Layout Incident Cyberint 6.0.0
Cyberpion - Action Item Incident Cyberpion 6.0.0
Cybersixgill Actionable Alerts Incident Cybersixgill Actionable Alerts 6.0.0
Cyble Intel Alert Incident Cyble Events (Deprecated) 6.0.0
Cyble Vision Alert V2 Incident CybleEventsV2 6.10.0
Cymulate Assessment Findings Layout Incident Cymulate 6.0.0
Cymulate Immediate Threat Incident Cymulate 6.0.0
Cymulate Layout Incident Cymulate 6.0.0
Cypho Thread Intelligence Layout Incident Cypho Threat Intelligence 6.0.0
Cyren Inbox Security layout Incident Cyren Inbox Security 6.0.0
Cyren Threat InDepth Indicator Template Indicator Cyren Threat InDepth Threat Intelligence 6.0.0
Darkmon Account Indicator Darkmon 6.8.0
Darkmon Compromised Credential Incident Darkmon 6.8.0
Darkmon Compromised Employee Incident Darkmon 6.8.0
Darkmon Critical CVE Incident Darkmon 6.8.0
Darkmon Domain Indicator Darkmon 6.8.0
Darkmon Email Indicator Darkmon 6.8.0
Darkmon File Indicator Darkmon 6.8.0
Darkmon IP Indicator Darkmon 6.8.0
Darkmon Ransomware Mention Incident Darkmon 6.8.0
Darkmon Typosquatting Threat Incident Darkmon 6.8.0
Darkmon URL Indicator Darkmon 6.8.0
Darkmon VIP Email Leak Incident Darkmon 6.8.0
Darktrace AI Analyst Incident Layout Incident Darktrace 6.6.0
Darktrace ASM Risk Layout Incident DarktraceASM 6.6.0
Darktrace Email Layout Incident Darktrace 6.10.0
Darktrace MBs Layout Incident Darktrace 6.0.0
Darktrace Model Breach Layout Incident Darktrace 6.0.0
DataBee Layout Incident DataBee 6.10.0
Datadog Cloud SIEM Layout Incident Datadog Cloud SIEM 6.8.0
Datadog Cloud SIEM V2 Layout Incident Datadog Cloud SIEM 6.8.0
Dataminr Pulse Alert Incident Dataminr Pulse 6.5.0
Dataminr Pulse Malware Indicator Indicator Dataminr Pulse 6.10.0
Dataminr Pulse ReGenAI Alert Incident Dataminr Pulse 6.10.0
Dataminr Pulse Threat Actor Indicator Indicator Dataminr Pulse 6.10.0
Dataminr Pulse Vulnerability Indicator Indicator Dataminr Pulse 6.10.0
DeCYFIR-Layout Incident DeCYFIR 6.2.0
DeCyfir_Campaign Indicator DeCYFIR 6.9.0
DeCyfir_Malware Indicator DeCYFIR 6.9.0
DeCyfir_Threat_Actor Indicator DeCYFIR 6.9.0
Default Incident Core 6.8.0
Default Incident Core 6.8.0
Default Incident Default 8.2.0
Default XDR Alert Incident Core 6.8.0
Default XSIAM incident layout Case Core 8.7.0
Digital Guardian Security Event Incident Digital Guardian 6.0.0
Digital Shadows Client Incident Layout Incident ReliaQuest Digital Risk Protection 6.0.0
Digital Shadows Intelligence Incident Layout Incident ReliaQuest Digital Risk Protection 6.0.0
Domain Indicator Indicator Common Types 6.10.0
Domain Indicator Indicator Common Types 6.0.0
DomainTools Iris Detect Incident DomainTools Iris Detect 6.8.0
DomainTools Iris Detect Indicator Layout Indicator DomainTools Iris Detect 6.8.0
DomainTools Iris Incident Layout Incident DomainTools Iris Investigate 6.6.0
DomainTools Iris Indicator Layout Indicator DomainTools Iris Investigate 6.6.0
Doppel Incident Layout Incident Doppel 6.10.0
EDL Change Layout Incident Generic Export Indicators Service 6.6.0
Email Communication Incident Email Communication 6.0.0
Email Indicator Indicator Common Types 6.10.0
Email Indicator Indicator Common Types 6.0.0
Email Threads Incident Email Communication 6.0.0
Employee Health Check Incident Incident Crisis Management 6.0.0
Employee Indicator Indicator Crisis Management 6.0.0
Employee Offboarding Incident Incident Employee Offboarding 6.0.0
Exabeam Incident Incident Exabeam Advanced Analytics 6.10.0
Exabeam Notable User Incident Exabeam Advanced Analytics 6.10.0
Exabeam Platform Case Incident Exabeam Security Operations Platform 6.10.0
Executive Brief Report Incident Threat Intel Reports (BETA) 6.5.0
Expanse Appearance Incident Incident Expanse (Deprecated) 6.0.0
Expanse Behavior Incident Incident Expanse (Deprecated) 6.0.0
Expanse Certificate Indicator Layout Indicator Cortex Xpanse by Palo Alto Networks (Deprecated) 6.0.0
Expanse Issue Layout Incident Cortex Xpanse by Palo Alto Networks (Deprecated) 6.0.0
ExtraHop Detection Incident ExtraHop Reveal(x) 6.5.0
F5 Silverline L7 DDoS Events Layout Incident F5 Silverline 6.0.0
F5 Silverline Threat Intelligence Events Layout Incident F5 Silverline 6.0.0
F5 Silverline WAF Events Layout Incident F5 Silverline 6.0.0
F5 Silverline iRule Events Layout Incident F5 Silverline 6.0.0
FW change management Incident Change Management 6.1.0
Feedly Report Indicator Feedly 6.9.0
File Indicator Indicator Common Types 6.10.0
File Indicator Indicator Common Types 6.0.0
FireEye NX Alert Incident FireEye Network Security (NX) 6.0.0
FireEye NX IPS Event Incident FireEye Network Security (NX) 6.0.0
FireMon Incident Policy Planner Incident FireMon Security Manager 6.0.0
FireMon Incident Pre Change Assessment Incident FireMon Security Manager 6.0.0
Flashpoint Alerts Incident Flashpoint 6.0.0
Flashpoint Compromised Credentials Incident Flashpoint 6.0.0
Flashpoint Indicator Indicator Flashpoint Feed 6.0.0
Flashpoint Vulnerability Indicator Flashpoint Vulnerability Feed 6.10.0
Forensic Acquisition And Analysis Incident Windows Forensics 6.0.0
Forescout Eyeinspect General Layout Incident Forescout EyeInspect 6.1.0
FortiSIEM incident Layout Incident FortiSIEM 6.0.0
FraudWatch Incident Incident FraudWatch PhishPortal 6.0.0
FreshworksFreshservice Layout Incident Freshworks Freshservice 6.0.0
G Suite Security Alert Center Incident G Suite Security Alert Center 6.0.0
GCP Compute Engine Misconfiguration Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
GCP Kubernetes Engine Misconfiguration Incident Prisma Cloud by Palo Alto Networks 6.0.0
GDPR Data Breach Incident Incident GDPR 6.0.0
GIB APT Threat Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Attacks DDOS Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Attacks Deface Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Attacks Phishing Group Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Attacks Phishing Kit Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Brand Protection Phishing Kit Layout Incident Group-IB Threat Intelligence 6.0.0
GIB Brand Protection Phishing Layout Incident Group-IB Threat Intelligence 6.0.0
GIB Compromised Account Group Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Compromised Account Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Compromised Card Group Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Compromised Card Layout Incident Group-IB Threat Intelligence 6.0.0
GIB Compromised IMEI Layout Indicator Group-IB Threat Intelligence 6.0.0
GIB Compromised Masked Card Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Compromised Mule Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Cybercriminal Threat Actor Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Cybercriminal Threat Layout Incident Group-IB Threat Intelligence 6.10.0
GIB DRP Violation Layout Incident Group-IB Digital Risk Protection 6.10.0
GIB Data Breach Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Malware CNC Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Malware Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Nation-State Cybercriminals Threat Actor Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Nation-State Cybercriminals Threat Layout Incident Group-IB Threat Intelligence 6.10.0
GIB OSI Git Leak Layout Incident Group-IB Threat Intelligence 6.10.0
GIB OSI Public Leak Layout Incident Group-IB Threat Intelligence 6.10.0
GIB OSI Vulnerability Layout Incident Group-IB Threat Intelligence 6.10.0
GIB SPD Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Suspicious IP Open Proxy Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Suspicious IP Scanner Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Suspicious IP Socks Proxy Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Suspicious IP TOR Node Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Suspicious IP VPN Layout Incident Group-IB Threat Intelligence 6.10.0
GIB Targeted Malware Layout Incident Group-IB Threat Intelligence 6.0.0
GIB Victim IP Layout Indicator Group-IB Threat Intelligence 6.0.0
GLPI Ticket Incident GLPI 6.2.0
GRACaseLayout Incident Gurucul Risk Analytics 6.0.0
Gatewatcher Alert Incident Layout Incident Gatewatcher AionIQ 6.5.0
Gatewatcher Incident Layout Incident Gatewatcher AionIQ 6.5.0
Gem Layout Incident Gem 6.12.0
Gigamon ThreatINSIGHT Detection Incident Gigamon ThreatINSIGHT 6.5.0
Google Cloud SCC Finding Incident Google Cloud SCC 6.0.0
Google Dorking Incident Google Dorking 6.2.0
Google Drive Activity Incident Google Drive 6.0.0
Google Threat Intelligence ASM Issue Incident GoogleThreatIntelligence 6.10.0
Google Threat Intelligence DTM Alert Incident GoogleThreatIntelligence 6.10.0
Google Threat Intelligence RS Alert Incident GoogleThreatIntelligence 6.10.0
Grafana Layout Incident Grafana 6.0.0
GravityZone EDR Incident Layout Incident GravityZone 6.10.0
GravityZone XDR Incident Layout Incident GravityZone 6.10.0
GuardiCore Layout Incident Akamai GuardiCore 6.0.0
HIPAA Breach Notification Incident Incident HIPAA - Breach Notification 6.0.0
HackerOne Report Incident HackerOne 6.0.0
Hello World Alert Incident HelloWorld 6.0.0
Host Indicator Indicator Common Types 6.0.0
Host Indicator Indicator Common Types 6.10.0
Hoxhunt Layout Incident Hoxhunt 6.10.0
Hurukai alert layout Incident HarfangLab EDR 6.2.0
Hurukai threat layout Incident HarfangLab EDR 6.9.0
IBM QRadar SOAR Incident Incident IBM Security QRadar SOAR 6.10.0
IP Indicator Indicator Common Types 6.10.0
IP Indicator Indicator Common Types 6.0.0
Identity Indicator Common Types 6.5.0
Identity Analytics Alerts Incident Core 6.10.0
Ignite Alert Incident Flashpoint 6.10.0
Ignite Indicator Indicator Flashpoint Feed 6.10.0
IllusionBLACK Incident Incident Smokescreen IllusionBLACK 6.0.0
Illusive Networks Incident Incident Illusive Networks 6.0.0
Impossible Traveler Incident Incident Impossible Traveler 6.0.0
Indicator Feed Incident Incident Common Types 6.0.0
Infinipoint Compliant Incident Infinipoint 6.0.0
Infinipoint NotCompliant Incident Infinipoint 6.0.0
Infoblox Cloud DNS Security Event Incident Infoblox Threat Defense with DDI 6.5.0
Infoblox Cloud SOC Insight Incident Infoblox Threat Defense with DDI 6.5.0
Infrastructure Indicator Common Types 6.0.0
Infrastructure Indicator Common Types 6.10.0
Integration Troubleshooting Layout Incident Troubleshoot 6.0.0
Integrations and Incidents Health Check Incident Integrations & Incidents Health Check 6.0.0
Intel 471 Watcher Alert Incident Intel471 Feed 6.0.0
Intrusion Set Indicator Common Types 6.0.0
Intrusion Set Indicator Common Types 6.10.0
Inventa DSAR Layout Incident Inventa 6.0.0
IronDefense Alert Notification Incident IronNet 6.0.0
IronDefense Event Notification Incident IronNet 6.0.0
IronDefense IronDome Notification Incident IronNet 6.0.0
Ironscales Incident Ironscales 6.0.0
JARM Indicator Layout Indicator JARM 6.0.0
Jira Incident Layout Incident Atlassian Jira 6.0.0
JiraV3 Incident Layout Incident Atlassian Jira 6.8.0
Location Indicator Common Types 6.5.0
LogRhythm Alarm Incident Incident LogRhythm 6.0.0
LogRhythm Case Incident Incident LogRhythm 6.0.0
Logz.io Alert Incident Logz.io 6.0.0
Lumu Incident Lumu 6.5.0
MAC Indicator Indicator OTSecurity 6.0.0
MITRE ATT&CK Indicator Indicator MITRE IDs (Deprecated) 6.0.0
Malware Indicator Common Types 6.0.0
Malware Detection Incident Veeam App 6.10.0
Malware Incident Incident Malware Core 6.0.0
Malware Incident V2 Incident Malware Core 6.0.0
Malware Indicator Indicator Common Types 6.10.0
Malware Indicator Indicator Common Types 6.10.0
Malware Investigation and Response Incident Malware Investigation and Response 6.5.0
Malware Report Incident Threat Intel Reports (BETA) 6.5.0
Mandiant Advantage ASM Vulnerable Item Incident Mandiant Advantage Attack Surface Management 6.8.0
Mandiant Automated Defense Incident Mandiant Automated Defense 6.0.0
Microsoft 365 Defender - Layout Incident Microsoft 365 Defender 6.0.0
Microsoft ATA Suspicious Activity Incident Microsoft Advanced Threat Analytics 6.0.0
Microsoft Graph Identity and Access Layout Incident Microsoft Graph Identity and Access 6.0.0
Microsoft Sentinel - default layout Incident Microsoft Sentinel 6.5.0
MicrosoftCloudAppSecurity Incident Microsoft Defender for Cloud Apps 6.0.0
Mitre COA - MITRE Layout Incident MITRE ATT&CK - Courses of Action 6.5.0
MobileIron Incident Layout Incident MobileIron-UEM 6.0.0
Mutex Indicator Common Types 6.5.0
Mutex Indicator Common Types 6.10.0
NCSC CAF Assessment Incident NCSC Cyber Asssessment Framework 6.0.0
NIST Incident Incident NIST 6.0.0
Neosec Incident Layout Incident Neosec 6.5.0
Netcraft Takedown Incident Netcraft 6.10.0
Netscout Arbor Sightline Alert Incident Netscout Arbor Sightline 6.0.0
Netskope - DLP Layout Incident Netskope 6.2.0
Netskope - User Analytics Layout Incident Netskope 6.2.0
Netskope - Compromised Credentials Layout Incident Netskope 6.2.0
Netskope - DLP Incident Layout Incident Netskope 6.10.0
Netskope - Malware Layout Incident Netskope 6.2.0
Netskope - Quarantine Layout Incident Netskope 6.2.0
New Git PR Incident DevSecOps 6.0.0
News Layout Incident Popular Cybersecurity News 6.0.0
Nutanix Hypervisor Alert Incident Nutanix Hypervisor 6.0.0
OTSecurity Rogue Device Found Incident OTSecurity 6.0.0
PAN-OS logging to Cortex Data Lake - Action Required Incident PAN-OS to Strata Logging Service Monitoring 6.0.0
PANW Endpoint Malware Incident Incident Comprehensive Investigation by Palo Alto Networks 6.0.0
PCAP Analysis Incident PCAP Analysis 6.0.0
Palo Alto Networks Enterprise DLP Incident Layout Incident Enterprise DLP by Palo Alto Networks 6.0.0
Palo Alto Networks Enterprise DLP Incident Layout Incident Enterprise DLP by Palo Alto Networks 6.8.0
Panorama Best Practice Assessment Incident Incident Best Practice Assessment (BPA) by Palo Alto Networks (Deprecated) 6.0.0
Panorama Threat Coverage Layout Incident PAN-OS by Palo Alto Networks 6.0.0
PassiveTotal Domain Indicator Layout Indicator PassiveTotal 6.0.0
PassiveTotal Email Indicator Layout Indicator PassiveTotal 6.0.0
PassiveTotal File SHA-1 Indicator Indicator PassiveTotal 6.0.0
PassiveTotal IP Indicator Layout Indicator PassiveTotal 6.0.0
Password Reset via Chatbot Incident Password Reset via Chatbot 6.8.0
Pentera Insight Incident Pentera 6.0.0
PhishER Incident PhishER 6.0.0
Phishing Alerts Incident Incident PhishingAlerts 6.0.0
Phishing Campaign Incident Phishing Campaign 6.0.0
Phishing Incident Incident Phishing 6.0.0
Phishing Incident v3 Incident Phishing 6.1.0
Phishing Layout Incident Phishing 6.10.0
Policy Optimizer Layout Incident PAN-OS Policy Optimizer (beta) 6.0.0
Port Scan Incident Port Scan 6.0.0
Post Intrusion Ransomware Incident Ransomware 6.0.0
Prisma Cloud - Network API and Anomaly Incident Layout Incident Prisma Cloud by Palo Alto Networks 6.10.0
Prisma Cloud - VM Alert Prioritization Incident Prisma Cloud by Palo Alto Networks 6.8.0
Prisma Cloud Compute Audit Incident Prisma Cloud Compute by Palo Alto Networks 6.0.0
Prisma Cloud Compute Audit Layout v2 Incident Prisma Cloud Compute by Palo Alto Networks 6.0.0
Prisma Cloud Compute Audit Layout v3 Incident Prisma Cloud Compute by Palo Alto Networks 6.10.0
Prisma Cloud Compute Audit Layout v3 Incident Prisma Cloud Compute by Palo Alto Networks 6.10.0
Prisma Cloud Compute Cloud Discovery Incident Incident Prisma Cloud Compute by Palo Alto Networks 6.0.0
Prisma Cloud Compute Compliance Incident Incident Prisma Cloud Compute by Palo Alto Networks 6.0.0
Prisma Cloud Compute Compliance Incident v2 Incident Prisma Cloud Compute by Palo Alto Networks 6.10.0
Prisma Cloud Compute Compliance Incident v2 Incident Prisma Cloud Compute by Palo Alto Networks 6.10.0
Prisma Cloud Compute Compliance Incident v2 Incident Prisma Cloud Compute by Palo Alto Networks 8.0.0
Prisma Cloud Compute Reporting Layout Incident Prisma Cloud Compute Reporting (Deprecated) 6.0.0
Prisma Cloud Compute Vulnerability Incident Incident Prisma Cloud Compute by Palo Alto Networks 6.0.0
Prisma Cloud Incident Incident Prisma Cloud by Palo Alto Networks 6.0.0
Prisma Cloud V2 Incident Prisma Cloud by Palo Alto Networks 6.10.0
Proactive Threat Hunting Incident Proactive Threat Hunting 6.9.0
Proofpoint TAP Clicks Layout Incident Proofpoint TAP 6.0.0
Proofpoint TAP Message Layout Incident Proofpoint TAP 6.0.0
Pull Request Creation Incident XSOAR CI/CD 6.0.0
Pull Request Update Incident XSOAR CI/CD 6.0.0
QSS SOC Monitoring Layout Incident Quantum Security Systems 6.0.0
Qintel - QWatch Alert Incident Qintel 6.0.0
Qradar Generic Incident IBM QRadar 6.0.0
Qualys FIM Layout Incident QualysFIM 6.0.0
RDP Sessions Incident RDPCacheHunting 6.9.0
RF Classic Alert Layout Incident Recorded Future 6.0.0
RF Domain Abuse Playbook Alert Layout Incident Recorded Future 6.0.0
RF Facility Risk Playbook Alert Layout Incident Recorded Future 6.0.0
RF Playbook Alert Generic Layout Incident Recorded Future 6.0.0
RF Vulnerability Playbook Alert Layout Incident Recorded Future 6.0.0
RSA NetWitness Layout Incident NetWitness 6.0.0
RaDark Layout Incident KELA RaDark 6.0.0
Rapid Breach Response Incident Rapid Breach Response 6.0.0
Rapid7 InsightIDR - Layout Incident Rapid7 InsightIDR 6.0.0
Rapid7 ThreatCommand - Layout Incident Rapid7 - Threat Command (IntSights) 6.8.0
Reco Finding Incident Reco 6.5.0
Recorded Future Identity Incident Incident Recorded Future Identity 6.5.0
Recorded Future Incident Incident Recorded Future Intelligence 6.0.0
Recorded Future Playbook Alert Domain Abuse Incident Recorded Future Intelligence 6.0.0
Recorded Future Playbook Alert Identity Exposure Incident Recorded Future Identity 6.10.0
Recorded Future Playbook Alert Layout Incident Recorded Future Intelligence 6.5.0
Recorded Future Playbook Alert Vulnerability Incident Recorded Future Intelligence 6.0.0
RecordedFutureASILayout Incident Recorded Future Attack Surface Intelligence 6.8.0
RecordedFutureLayout Incident Recorded Future Intelligence 6.0.0
Registry Key Indicator Indicator Common Types 6.10.0
Registry Key Indicator Indicator Common Types 6.0.0
Reliaquest GreyMatter DRP Incident Layout Incident ReliaQuest Digital Risk Protection 6.10.0
Reliaquest Takedown Layout Incident ReliaQuest Digital Risk Protection 6.9.0
Report Indicator Common Types 6.10.0
Report Indicator Common Types 6.0.0
Review Indicators Manually For Allowlisting Incident Incident TIM - Indicator Auto-Processing 6.0.0
Review Indicators Manually Incident Incident TIM - Indicator Auto-Processing 6.0.0
RiskIQ Asset Management Incident Incident RiskIQ Digital Footprint 6.0.0
RiskIQAsset Indicator Indicator RiskIQ Digital Footprint 6.0.0
RiskIQSerialNumber Indicator Indicator PassiveTotal 6.0.0
Rubrik DSPM Violation Incident Rubrik Security Cloud 6.10.0
Rubrik IR Violation Incident Rubrik Security Cloud 6.10.0
Rubrik Polaris Radar Incident Rubrik Security Cloud 6.0.0
Rubrik Threat Monitoring Object Incident Rubrik Security Cloud 6.10.0
RubrikPolaris Account Indicator Indicator Rubrik Security Cloud 6.0.0
SANS Incident Incident SANS 6.0.0
SOCRadar Incident Incident SOCRadar 6.0.0
SSL Certificates Incident SSL Certificates 6.0.0
Saas Security Layout Incident SaaS Security by Palo Alto Networks 6.0.0
SafeBreach Command Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Domain Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Hash Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Insight Incident SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Port Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Process Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Protocol Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Registry Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach Simulation Incident SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeBreach URL Indicator SafeBreach - Breach and Attack Simulation platform 6.0.0
SafeNet Trusted Access - Incident Layout Incident Thales SafeNet Trusted Access 6.0.0
SafeNet Trusted Access – Account Lockout Incident Layout Incident Thales SafeNet Trusted Access 6.0.0
SailPoint IdentityIQ Alert Incident SailPoint IdentityIQ 6.0.0
SailPoint IdentityNow Trigger Layout Incident SailPoint IdentityNow 6.0.0
Salesforce Case Incident SalesforceV2 6.2.0
SecurityScorecard Alert Layout Incident SecurityScorecard 6.0.0
Securonix Incident Information Incident Securonix 6.5.0
Securonix Threat Incident Securonix 6.5.0
Sekoia XDR Layout Incident SekoiaXDR 6.10.0
SentinelOne Incident Layout Incident SentinelOne 6.0.0
ServiceNow Create Ticket and Mirror Incident ServiceNow 6.0.0
ServiceNow SIR Incident Incident ServiceNow 6.0.0
ServiceNow Ticket Incident ServiceNow 6.0.0
Shadow IT Incident Incident Shadow IT 6.0.0
Shift handover Incident Shift Management 6.0.0
Sigma Rule Layout Indicator Sigma 6.10.0
SimpleDebugger Incident Simple Debugger 6.8.0
Skyhigh Security Alert Incident Skyhigh Security SSE 6.5.0
Skyhigh Security Threat Incident Skyhigh Security SSE 6.5.0
Social Engineering Domain Investigation Layout Incident Social Engineering Domain Analysis 6.0.0
Software Indicator Common Types 6.5.0
SolarWinds Alert Incident SolarWinds 6.0.0
SolarWinds Event Incident SolarWinds 6.0.0
Sophos Central Event Layout Incident Sophos Central 6.0.0
SpecterOps-Layout Incident SpecterOpsBHE 6.10.0
SpecterOpsBloodHoundEnterprise-Layout Incident SpecterOpsBloodHoundEnterprise 6.10.0
Splunk Finding Incident Splunk 6.0.0
Splunk Investigation Incident Splunk 6.0.0
Splunk Notable Generic Incident Splunk 6.0.0
SpyCloud Breach Layout Incident SpyCloud Enterprise Protection 6.10.0
SpyCloud Informative Layout Incident SpyCloud Enterprise Protection 6.9.0
SpyCloud Malware Layout Incident SpyCloud Enterprise Protection 6.10.0
Stamus Networks DoC Layout Incident Stamus 6.9.0
Stellar Cyber Case Incident Stellar Cyber 6.6.0
Sumo Logic Insight Incident Sumo Logic Cloud SIEM 6.2.0
Sumo Logic Signal Incident Sumo Logic Cloud SIEM 6.8.0
Suspicious Domain Hunting Incident Incident Suspicious Domain Hunting 6.10.0
Symantec DLP Network layout Incident Symantec Data Loss Prevention 6.0.0
Symantec EDR Event layout Incident Symantec Endpoint Detection and Response 6.10.0
Symantec EDR Incident layout Incident Symantec Endpoint Detection and Response 6.5.0
Symantec Email Security Cloud - Layout Incident SymantecEmailSecurity 6.10.0
SysAid Layout Incident SysAid 6.0.0
Sysdig Incident Incident Sysdig Response Actions 6.0.0
System Diagnostics and Health Check Incident System Diagnostics and Health Check 8.0.0
System Diagnostics and Health Check Incident System Diagnostics and Health Check 6.0.0
TD Incident Incident NTT Cyber Threat Sensor 6.0.0
TIM - Campaign Incident TIM Campaign Tracking 6.0.0
TOPdesk Incident Incident TOPdesk 6.0.0
Tactic Layout Indicator Common Types 6.10.0
Tanium Threat Response Incident Tanium Threat Response 6.0.0
TheHive layout (custom) Incident TheHive Project 6.0.0
Threat Actor Indicator Common Types 6.0.0
Threat Actor Indicator Common Types 6.10.0
Threat Actor Report Incident Threat Intel Reports (BETA) 6.5.0
Threat Vault Incident Threat Vault by Palo Alto Networks 6.5.0
ThreatConnect Layout Incident ThreatConnect 6.5.0
Tidy Incident Tidy 6.0.0
Tool Indicator Common Types 6.0.0
Tool Indicator Indicator Common Types 6.10.0
Traps Incident Incident Palo Alto Networks Traps (Deprecated) 6.0.0
Trello Incident Trello 6.0.0
Trend Micro CAS Incident TrendAI™ Cloud App Security 6.0.0
Trend Micro Vision One XDR Incident Incident TrendAI Vision One™ 6.2.0
Triggered Alarm Incident Veeam App 6.10.0
Tripwire incident Incident Tripwire 6.0.0
URL Indicator Indicator Common Types 6.10.0
URL Indicator Indicator Common Types 6.0.0
US Breach Notification Incident Incident US - Breach Notification 6.0.0
USTA Account Takeover Victim Layout Incident USTA Cyber Threat Intelligence Platform 6.10.0
USTA Stolen Credit Card Layout Incident USTA Cyber Threat Intelligence Platform 6.10.0
Uncover Unknown Malware Using SSDeep Incident Uncover Unknown Malware Using SSDeep 6.5.0
UnitTestLayout Incident Content Testing 6.0.0
Use Case Builder Incident Use Case Builder 6.8.0
Varonis DSP Incident Incident Varonis Data Security Platform 6.0.0
Varonis SaaS Incident Incident Varonis SaaS 6.0.0
Vectra Account Incident Vectra AI 6.5.0
Vectra Host Incident Vectra AI 6.5.0
Vectra RUX Events Detection Incident Vectra RUX 6.10.0
Vectra XDR Entity Incident Vectra XDR 6.8.0
Vulnerability Incident Incident Common Types 6.0.0
Vulnerability Report Incident Threat Intel Reports (BETA) 6.5.0
Wiz Layout Incident Wiz 6.0.0
WizDefend Layout Incident Wiz 6.0.0
X509 Certificate Indicator Common Types 6.0.0
XDR Best Practice Assessment Incident XDR Best Practice Assessment 6.2.0
XM Cyber Layout Incident XM Cyber 6.0.0
XM Cyber Security Score Incident XM Cyber 6.0.0
XM Cyber Technique Layout Incident XM Cyber 6.0.0
XMCO Serenety Alert Incident XMCO 6.10.0
XSOAR Dev to Prod Incident XSOAR - Simple Dev to Prod 6.0.0
Xpanse Alert Layout Incident Cortex Xpanse 6.5.0
YARA Rule Layout Indicator Yara 6.10.0
ZTAP Alert Incident Zero Trust Analytics Platform 6.0.0
ZeroFox Key Incidents Layout Incident ZeroFox 6.10.0
Zimperium Event Incident Zimperium 6.0.0
configuration setup Incident XSOAR CI/CD 6.0.0
testing-exodus Indicator Exodus Intelligence EVE Platform 6.5.0