Access Incident

Access Investigation Incident

Details

IDAccess
Groupincident
Version-1
From Version6.0.0

Source

layoutscontainer-Access.json
Download History Raw 
{
	"id": "Access",
	"group": "incident",
	"name": "Access Incident",
	"description": "",
	"version": -1,
	"fromVersion": "6.0.0",
    "details": {
        "sections": [
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Access Info",
				"type": "",
				"isVisible": true,
				"readOnly": false,
				"fields": [
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_app",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_src",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_srcntdomain",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_srcuser",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_dest",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_destntdomain",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_duration",
						"isVisible": true
					}
				],
				"description": "More information on the access attempts ",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Basic Information",
				"type": "",
				"isVisible": true,
				"readOnly": false,
				"fields": [
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_type",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_severity",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_owner",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_dbotstatus",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_sourcebrand",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_sourceinstance",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_playbookid",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_phase",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_roles",
						"isVisible": true
					}
				],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Work Plan",
				"type": "workplan",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Timeline Information",
				"type": "",
				"isVisible": true,
				"readOnly": false,
				"fields": [
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_dbotcreated",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_occurred",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_dbotduedate",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_dbotmodified",
						"isVisible": true
					},
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_dbottotaltime",
						"isVisible": true
					}
				],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Custom Fields",
				"type": "",
				"isVisible": true,
				"readOnly": false,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Details",
				"type": "",
				"isVisible": true,
				"readOnly": true,
				"fields": [
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_details",
						"isVisible": true
					}
				],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Labels",
				"type": "labels",
				"isVisible": true,
				"readOnly": true,
				"fields": [
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_labels",
						"isVisible": true
					}
				],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Attachments",
				"type": "",
				"isVisible": true,
				"readOnly": true,
				"fields": [
					{
						"id": "",
						"version": 0,
						"modified": "0001-01-01T00:00:00Z",
						"fieldId": "incident_attachment",
						"isVisible": true
					}
				],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Bad or Suspicious Indicators",
				"type": "indicators",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": "reputation:Bad or reputation:Suspicious",
				"queryType": "input"
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Evidence",
				"type": "evidence",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Notes",
				"type": "notes",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Linked Incidents",
				"type": "linkedIncidents",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Incident Timeline",
				"type": "invTimeline",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": {
					"categories": [
						"incidentInfo"
					],
					"lastId": "",
					"pageSize": 100,
					"tags": [],
					"users": []
				},
				"queryType": "warRoomFilter"
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Incident Files",
				"type": "invTimeline",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": {
					"categories": [
						"attachments"
					],
					"lastId": "",
					"pageSize": 100,
					"tags": [],
					"users": []
				},
				"queryType": "warRoomFilter"
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Team",
				"type": "team",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Child Incidents",
				"type": "childInv",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			},
			{
				"id": "",
				"version": 0,
				"modified": "0001-01-01T00:00:00Z",
				"name": "Automation Highlights",
				"type": "findings",
				"isVisible": true,
				"readOnly": true,
				"fields": [],
				"description": "",
				"query": null,
				"queryType": ""
			}
		]
    }
}