AWS CloudTrail Misconfiguration Incident

Prisma Cloud by Palo Alto Networks Incident

Details

IDAWS CloudTrail Misconfiguration
Groupincident
Version-1
From Version6.0.0

Layout Structure

Case Info 10 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
playbookid Col 0-2, Height: 22

Work Plan

Notes

Incident Timeline

Team Members

Evidence

Linked Incidents

Child Incidents

Attachments

Field IDPosition
incident_attachment Col 0-2, Height: 55

Prisma Cloud Alert Summary

Prisma Cloud alert summary details.

Field IDPosition
prismacloudid Col 0-2, Height: 22
prismacloudtime Col 0-2, Height: 22
prismacloudstatus Col 0-2, Height: 22
prismaclouddismissalnote Col 0-2, Height: 22
prismacloudreason Col 0-2, Height: 22
firstseen Col 2-4, Height: 22
lastseen Col 2-4, Height: 22
riskscore Col 2-4, Height: 22
riskrating Col 2-4, Height: 22
Investigation 5 sections

Remediation Actions

Remediation tasks information.

Field IDPosition
policyrecommendation Col 0-2, Height: 48

Policy Violated

Violated policy information.

Field IDPosition
policyid Col 0-2, Height: 24
policytype Col 0-2, Height: 24
policyseverity Col 0-2, Height: 24
policydescription Col 0-2, Height: 48
systemdefault Col 0-2, Height: 24
policyremediable Col 0-2, Height: 24
policydeleted Col 0-2, Height: 24
lastmodifiedon Col 0-2, Height: 24
lastmodifiedby Col 0-2, Height: 24

Violating Resource

Violating resource information.

Field IDPosition
resourceid Col 0-2, Height: 24
resourcename Col 0-2, Height: 24
resourcetype Col 0-2, Height: 24
region Col 0-2, Height: 24
accountname Col 0-2, Height: 24
accountid Col 0-2, Height: 24
resourceapiname Col 0-2, Height: 24
resourcecloudtype Col 0-2, Height: 24

Policy Compliance Metadata

Policy compliance-related information.

Alert Rules

Alert Rules created using the policy.

Field IDPosition
prismacloudrules Col 0-6, Height: 110
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.