ASM Alert Layout

A layout used for ASM alerts in XSIAM.

Cortex Attack Surface Management Incident

Details

IDASM Alert Layout
Groupincident
Version-1
From Version6.10.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Alert Info 11 sections

Alert Details

Field IDPosition
severity Col 0-2, Height: 26
owner Col 0-2, Height: 26
occurred Col 0-2, Height: 26
asmassetid Col 0-2, Height: 26
asmserviceid Col 0-2, Height: 26
asmassethierarchy Col 0-2, Height: 26
alert_sub_type Col 2-4, Height: 26
playbookid Col 2-4, Height: 26

Work Plan

Closing Information

Field IDPosition
closereason Col 0-2, Height: 26
closenotes Col 0-2, Height: 52

System IDs

Field IDPosition
asmsystemids Col 0-6, Height: 106

Tags

Field IDPosition
asmtags Col 0-6, Height: 106

Development or Production

Field IDPosition
asmdevcheckdetails Col 0-6, Height: 106
asmprivateip Col 0-6, Height: 106

Alert Summary

Field IDPosition
asmalertsummary Col 0-6, Height: 106

Service Owners

Field IDPosition
asmserviceowner Col 0-6, Height: 106

AttackSurface Rule Information

Field IDPosition
asmattacksurfaceruledescription Col 0-4, Height: 106
asmattacksurfaceruleremediationguidance Col 0-4, Height: 106
asmattacksurfacerulecategory Col 0-2, Height: 53
asmattacksurfacerulepriority Col 0-2, Height: 53

Playbook Stage Completion Times

Field IDPosition
asmplaybookstage Col 0-2, Height: 106

RCS Scan

Field IDPosition
Col 0-2, Height: 44
Col 0-2, Height: 26
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Canvas 0 sections

No sections defined.