Carbon Black Endpoint Standard Layout

The Carbon Black Endpoint Standard Layout

Carbon Black Endpoint Standard Incident

Details

IDCarbon Black Endpoint Standard Layout
Groupincident
Version-1
From Version6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 15 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
playbookid Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 53
dbotduedate Col 0-2, Height: 53
dbotmodified Col 0-1, Height: 53
dbotcreated Col 1-2, Height: 53
dbotclosed Col 1-2, Height: 53

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Investigation Data

Field IDPosition
details Col 0-2, Height: 106

ALERT DETAILS

Field IDPosition
alertid Col 0-2, Height: 53
description Col 0-2, Height: 53
carbonblackeslasteventtime Col 0-2, Height: 53
carbonblackesalertseverity Col 0-2, Height: 22

REPORT DETAILS

Field IDPosition
carbonblackesreportname Col 0-2, Height: 53
carbonblackesiochit Col 0-2, Height: 53
carbonblackesreportid Col 0-2, Height: 53
carbonblackesiocid Col 0-2, Height: 22

PROCESS

Field IDPosition
sha256 Col 0-2, Height: 53
carbonblackesprocessid Col 0-2, Height: 53
carbonblackesvector Col 0-2, Height: 53
carbonblackesprocessname Col 0-2, Height: 53
carbonblackesfirsteventtime Col 0-2, Height: 53
carbonblackesreputation Col 0-2, Height: 53

CARBON BLACK DATA

Field IDPosition
carbonblackestargetvalue Col 0-2, Height: 22
carbonblackesthreatid Col 0-2, Height: 22
carbonblackesthreatcategory Col 0-2, Height: 22
alertcategory Col 0-2, Height: 22
changed Col 0-2, Height: 22
comment Col 0-2, Height: 22
deviceusername Col 0-2, Height: 22
tags Col 0-2, Height: 22
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.