Agari Phishing Defense Policy Event

Agari Phishing Defense Policy Event Layout

Details

ID	`Agari Phishing Defense Policy Event`
Group	incident
Version	-1
From Version	6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 12 sections

Case Details

Field ID	Position
type	Col 0-2, Height: 22
severity	Col 0-2, Height: 22
owner	Col 0-2, Height: 22
dbotsource	Col 0-2, Height: 22
sourcebrand	Col 0-2, Height: 22
sourceinstance	Col 0-2, Height: 22
playbookid	Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field ID	Position
occurred	Col 0-1, Height: 22
dbotmodified	Col 0-1, Height: 22
dbotduedate	Col 0-2, Height: 22
dbotcreated	Col 1-2, Height: 22
dbotclosed	Col 1-2, Height: 22

Closing Information

Field ID	Position
dbotclosed	Col 0-2, Height: 22
closereason	Col 0-2, Height: 22
closenotes	Col 0-2, Height: 22

Investigation Data

Field ID	Position
details	Col 0-2, Height: 22

Policy Event

Field ID	Position
apdpolicyeventid	Col 0-2, Height: 22
apdalertdefinitionname	Col 0-2, Height: 22
apdupdatedat	Col 0-2, Height: 22
apdsummary	Col 0-2, Height: 22
apdpolicyaction	Col 0-2, Height: 22
apdpolicyenabled	Col 0-2, Height: 22
apdcreatedat	Col 0-2, Height: 22
apdnotifiedoriginalrecipients	Col 0-2, Height: 22
apdadminrecipients	Col 0-2, Height: 22

War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

Message Info 2 sections

Message Detail

Field ID	Position
apdglobalmessageid	Col 0-2, Height: 53
apdmessagefrom	Col 0-2, Height: 53
apdmessagefromdomain	Col 0-2, Height: 53
apdmessagesenderipaddress	Col 0-2, Height: 53
apdmessagemailfrom	Col 0-2, Height: 53
apdmessagesubject	Col 0-2, Height: 53
apdmessageto	Col 0-2, Height: 53
apdmessageauthenticationresults	Col 0-2, Height: 53
apdenforcementaction	Col 0-2, Height: 53
apdmessageptrname	Col 0-2, Height: 53
apdmessageriskreason	Col 0-2, Height: 53
apdinternalmessageid	Col 0-4, Height: 53
apdmessagereplyto	Col 0-2, Height: 53
apdmessagedate	Col 2-4, Height: 53
apdmessagedkimdtag	Col 2-4, Height: 53
apdattacktypes	Col 2-4, Height: 106

Message Score

Field ID	Position
apdmessagetrustscore	Col 0-2, Height: 53
apdmessageauthenticityscore	Col 0-2, Height: 53
apdmessagereputation	Col 0-2, Height: 53
apdmessagedomainreputation	Col 0-2, Height: 53

Source

layoutscontainer-Agari_Phishing_Defense_Policy_Event.json

Download History Raw

{
 "description": "Agari Phishing Defense Policy Event Layout",
 "detailsV2": {
  "tabs": [
   {
    "id": "summary",
    "name": "Legacy Summary",
    "type": "summary"
   },
   {
    "id": "caseinfoid",
    "name": "Incident Info",
    "sections": [
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "type",
        "height": 22,
        "id": "incident-type-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "severity",
        "height": 22,
        "id": "incident-severity-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "owner",
        "height": 22,
        "id": "incident-owner-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotsource",
        "height": 22,
        "id": "incident-source-field",
        "index": 4,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourcebrand",
        "height": 22,
        "id": "incident-sourceBrand-field",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourceinstance",
        "height": 22,
        "id": "incident-sourceInstance-field",
        "index": 6,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "playbookid",
        "height": 22,
        "id": "incident-playbookId-field",
        "index": 7,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Case Details",
      "static": false,
      "w": 1,
      "x": 0,
      "y": 0
     },
     {
      "h": 2,
      "i": "caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Notes",
      "static": false,
      "type": "notes",
      "w": 1,
      "x": 2,
      "y": 6
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Work Plan",
      "static": false,
      "type": "workplan",
      "w": 1,
      "x": 1,
      "y": 0
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
      "isVisible": true,
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Linked Incidents",
      "static": false,
      "type": "linkedIncidents",
      "w": 1,
      "x": 1,
      "y": 6
     },
     {
      "displayType": "ROW",
      "h": 1,
      "i": "caseinfoid-842632c0-98b1-11e9-97d7-ed26ef9e46c8",
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Child Incidents",
      "static": false,
      "type": "childInv",
      "w": 1,
      "x": 2,
      "y": 4
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0",
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Evidence",
      "static": false,
      "type": "evidence",
      "w": 1,
      "x": 2,
      "y": 2
     },
     {
      "displayType": "ROW",
      "h": 1,
      "hideName": false,
      "i": "caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Team Members",
      "static": false,
      "type": "team",
      "w": 1,
      "x": 2,
      "y": 5
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
      "maxH": null,
      "maxW": 2,
      "minH": 1,
      "minW": 2,
      "moved": false,
      "name": "Indicators",
      "query": "",
      "queryType": "input",
      "static": false,
      "type": "indicators",
      "w": 2,
      "x": 0,
      "y": 4
     },
     {
      "displayType": "CARD",
      "h": 2,
      "i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
      "items": [
       {
        "endCol": 1,
        "fieldId": "occurred",
        "height": 22,
        "id": "incident-occurred-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 1,
        "fieldId": "dbotmodified",
        "height": 22,
        "id": "incident-modified-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotduedate",
        "height": 22,
        "id": "incident-dueDate-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotcreated",
        "height": 22,
        "id": "incident-created-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 1
       },
       {
        "endCol": 2,
        "fieldId": "dbotclosed",
        "height": 22,
        "id": "incident-closed-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 1
       }
      ],
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Timeline Information",
      "static": false,
      "w": 1,
      "x": 0,
      "y": 2
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "dbotclosed",
        "height": 22,
        "id": "incident-dbotClosed-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "closereason",
        "height": 22,
        "id": "incident-closeReason-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "closenotes",
        "height": 22,
        "id": "incident-closeNotes-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Closing Information",
      "static": false,
      "w": 1,
      "x": 0,
      "y": 6
     },
     {
      "displayType": "CARD",
      "h": 2,
      "i": "caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "details",
        "height": 22,
        "id": "incident-details-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Investigation Data",
      "static": false,
      "w": 1,
      "x": 1,
      "y": 2
     },
     {
      "displayType": "ROW",
      "h": 2,
      "hideItemTitleOnlyOne": false,
      "hideName": false,
      "i": "caseinfoid-50467460-309f-11eb-abb4-0dbd4dcfaa9a",
      "items": [
       {
        "endCol": 2,
        "fieldId": "apdpolicyeventid",
        "height": 22,
        "id": "cdf38a90-30a1-11eb-abb4-0dbd4dcfaa9a",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdalertdefinitionname",
        "height": 22,
        "id": "d99c5ab0-30a2-11eb-abb4-0dbd4dcfaa9a",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdupdatedat",
        "height": 22,
        "id": "ee71ed30-346f-11eb-ba51-13dadf4d1e10",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "dropEffect": "move",
        "endCol": 2,
        "fieldId": "apdsummary",
        "height": 22,
        "id": "e6efea10-30a2-11eb-abb4-0dbd4dcfaa9a",
        "index": 3,
        "listId": "caseinfoid-50467460-309f-11eb-abb4-0dbd4dcfaa9a",
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "dropEffect": "move",
        "endCol": 2,
        "fieldId": "apdpolicyaction",
        "height": 22,
        "id": "c84f7310-30a1-11eb-abb4-0dbd4dcfaa9a",
        "index": 4,
        "listId": "caseinfoid-50467460-309f-11eb-abb4-0dbd4dcfaa9a",
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdpolicyenabled",
        "height": 22,
        "id": "cc6bd920-30a1-11eb-abb4-0dbd4dcfaa9a",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdcreatedat",
        "height": 22,
        "id": "e4af25b0-346f-11eb-ba51-13dadf4d1e10",
        "index": 6,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdnotifiedoriginalrecipients",
        "height": 22,
        "id": "79559860-30a2-11eb-abb4-0dbd4dcfaa9a",
        "index": 7,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdadminrecipients",
        "height": 22,
        "id": "802e1130-30a2-11eb-abb4-0dbd4dcfaa9a",
        "index": 8,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Policy Event",
      "static": false,
      "w": 1,
      "x": 2,
      "y": 0
     }
    ],
    "type": "custom"
   },
   {
    "id": "warRoom",
    "name": "War Room",
    "type": "warRoom"
   },
   {
    "id": "workPlan",
    "name": "Work Plan",
    "type": "workPlan"
   },
   {
    "id": "evidenceBoard",
    "name": "Evidence Board",
    "type": "evidenceBoard"
   },
   {
    "id": "relatedIncidents",
    "name": "Related Incidents",
    "type": "relatedIncidents"
   },
   {
    "id": "canvas",
    "name": "Canvas",
    "type": "canvas"
   },
   {
    "hidden": false,
    "id": "sr1qhs9ev9",
    "name": "Message Info",
    "sections": [
     {
      "displayType": "CARD",
      "h": 3,
      "hideName": true,
      "i": "sr1qhs9ev9-aa63d480-309d-11eb-abb4-0dbd4dcfaa9a",
      "items": [
       {
        "endCol": 2,
        "fieldId": "apdglobalmessageid",
        "height": 53,
        "id": "23875c30-30a6-11eb-abb4-0dbd4dcfaa9a",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "dropEffect": "move",
        "endCol": 2,
        "fieldId": "apdmessagefrom",
        "height": 53,
        "id": "5e4a7ae0-3638-11eb-b72f-6de9f7cee477",
        "index": 1,
        "listId": "sr1qhs9ev9-aa63d480-309d-11eb-abb4-0dbd4dcfaa9a",
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessagefromdomain",
        "height": 53,
        "id": "60ec4ee0-3638-11eb-b72f-6de9f7cee477",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessagesenderipaddress",
        "height": 53,
        "id": "cef59470-30a5-11eb-abb4-0dbd4dcfaa9a",
        "index": 3,
        "sectionItemType": "field",
        "startCol": 0
       },

       {
        "endCol": 2,
        "fieldId": "apdmessagemailfrom",
        "height": 53,
        "id": "5bae5c30-30a6-11eb-abb4-0dbd4dcfaa9a",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessagesubject",
        "height": 53,
        "id": "770c5ee0-3638-11eb-b72f-6de9f7cee477",
        "index": 6,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessageto",
        "height": 53,
        "id": "71678410-3638-11eb-b72f-6de9f7cee477",
        "index": 7,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessageauthenticationresults",
        "height": 53,
        "id": "d8352230-30a5-11eb-abb4-0dbd4dcfaa9a",
        "index": 8,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdenforcementaction",
        "height": 53,
        "id": "54612890-30a6-11eb-abb4-0dbd4dcfaa9a",
        "index": 9,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessageptrname",
        "height": 53,
        "id": "77fd5e90-30a6-11eb-abb4-0dbd4dcfaa9a",
        "index": 10,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessageriskreason",
        "height": 53,
        "id": "be33e060-30a5-11eb-abb4-0dbd4dcfaa9a",
        "index": 11,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "dropEffect": "move",
        "endCol": 4,
        "fieldId": "apdinternalmessageid",
        "height": 53,
        "id": "9e7089b0-30a3-11eb-abb4-0dbd4dcfaa9a",
        "index": 12,
        "listId": "sr1qhs9ev9-aa63d480-309d-11eb-abb4-0dbd4dcfaa9a",
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessagereplyto",
        "height": 53,
        "id": "de58a2e0-30a5-11eb-abb4-0dbd4dcfaa9a",
        "index": 13,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "dropEffect": "move",
        "endCol": 4,
        "fieldId": "apdmessagedate",
        "height": 53,
        "id": "d232be10-30a5-11eb-abb4-0dbd4dcfaa9a",
        "index": 0,
        "listId": "sr1qhs9ev9-aa63d480-309d-11eb-abb4-0dbd4dcfaa9a",
        "sectionItemType": "field",
        "startCol": 2
       },
       {
        "dropEffect": "move",
        "endCol": 4,
        "fieldId": "apdmessagedkimdtag",
        "height": 53,
        "id": "6a617b90-30a6-11eb-abb4-0dbd4dcfaa9a",
        "index": 1,
        "listId": "sr1qhs9ev9-aa63d480-309d-11eb-abb4-0dbd4dcfaa9a",
        "sectionItemType": "field",
        "startCol": 2
       },
       {
        "endCol": 4,
        "fieldId": "apdattacktypes",
        "height": 106,
        "id": "a8fcd590-3ad1-11eb-8685-1136ebd6af30",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 2
       }
      ],
      "maxH": null,
      "maxW": 2,
      "minH": 1,
      "minW": 2,
      "moved": false,
      "name": "Message Detail",
      "static": false,
      "w": 2,
      "x": 0,
      "y": 0
     },
     {
      "displayType": "CARD",
      "h": 3,
      "hideName": false,
      "i": "sr1qhs9ev9-9e5b9030-30a5-11eb-abb4-0dbd4dcfaa9a",
      "items": [
       {
        "dropEffect": "move",
        "endCol": 2,
        "fieldId": "apdmessagetrustscore",
        "height": 53,
        "id": "eab84c60-3637-11eb-b72f-6de9f7cee477",
        "index": 0,
        "listId": "sr1qhs9ev9-9e5b9030-30a5-11eb-abb4-0dbd4dcfaa9a",
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessageauthenticityscore",
        "height": 53,
        "id": "b8eb2f50-30a5-11eb-abb4-0dbd4dcfaa9a",
        "index": 3,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessagereputation",
        "height": 53,
        "id": "c35a0550-3637-11eb-b72f-6de9f7cee477",
        "index": 4,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "apdmessagedomainreputation",
        "height": 53,
        "id": "c7db7ec0-30a5-11eb-abb4-0dbd4dcfaa9a",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxH": null,
      "maxW": 1,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Message Score",
      "static": false,
      "w": 1,
      "x": 2,
      "y": 0
     }
    ],
    "type": "custom"
   }
  ]
 },
 "group": "incident",
 "id": "Agari Phishing Defense Policy Event",
 "name": "Agari Phishing Defense Policy Event",
 "system": false,
 "version": -1,
 "fromVersion": "6.0.0",
 "marketplaces": ["xsoar"]
}