Carbon Black EDR Incidents
Carbon Black Enterprise Response Incident
Details
| ID | Carbon Black EDR Incidents |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 13 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| incidentlink | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
Notes
Work Plan
Linked Incidents
Child Incidents
Evidence
Team Members
Indicators
Timeline Information
| Field ID | Position |
|---|---|
| occurred | Col 0-1, Height: 53 |
| dbotmodified | Col 0-1, Height: 53 |
| iocvalue | Col 0-2, Height: 53 |
| dbotduedate | Col 0-2, Height: 53 |
| dbotcreated | Col 1-2, Height: 53 |
| dbotclosed | Col 1-2, Height: 53 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 22 |
| closereason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 22 |
Alert Source
| Field ID | Position |
|---|---|
| alertname | Col 0-2, Height: 22 |
| alertid | Col 0-2, Height: 22 |
| carbonblackedrwatchlistname | Col 0-2, Height: 22 |
| carbonblackedrwatchlistid | Col 0-2, Height: 22 |
| deviceid | Col 0-2, Height: 22 |
| devicename | Col 0-2, Height: 22 |
| resourcetype | Col 0-2, Height: 22 |
Event Summary
| Field ID | Position |
|---|---|
| eventtype | Col 0-1, Height: 53 |
| eventdescriptions | Col 0-1, Height: 53 |
| username | Col 0-1, Height: 53 |
| incidentlink | Col 0-2, Height: 53 |
| dbotstatus | Col 1-2, Height: 53 |
| details | Col 1-2, Height: 106 |
Investigation Data
| Field ID | Position |
|---|---|
| carbonblackedriocvalue | Col 0-2, Height: 22 |
| deviceexternalip | Col 0-2, Height: 22 |
| logsource | Col 0-2, Height: 22 |
| md5 | Col 0-2, Height: 22 |
| pid | Col 0-2, Height: 22 |
| processname | Col 0-2, Height: 22 |
| processpath | Col 0-2, Height: 22 |
| carbonblackedrsegmentid | Col 0-2, Height: 22 |
| osversion | Col 0-2, Height: 22 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.