Check Point NDR Insight Layout

Check Point NDR Insight

Check Point Infinity NDR Incident

Details

IDCheck Point NDR Insight Layout
Groupincident
Version-1
From Version6.9.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 10 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
externallink Col 0-2, Height: 22
playbookid Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 53
externalstarttime Col 0-1, Height: 53
externalendtime Col 0-1, Height: 53
dbotmodified Col 1-1, Height: 53
dbotcreated Col 1-2, Height: 53
dbotclosed Col 1-2, Height: 53

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Details and Statistics

Field IDPosition
details Col 0-4, Height: 44
sourceips Col 0-4, Height: 22
sourceexternalips Col 0-4, Height: 22
destinationips Col 0-4, Height: 22
dstports Col 0-4, Height: 22
filemd5 Col 0-4, Height: 22
appiname Col 0-4, Height: 22
users Col 0-4, Height: 22
hostnames Col 0-4, Height: 22
sentbytes Col 0-4, Height: 22
receivedbytes Col 0-4, Height: 22
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

{
    "group": "incident",
    "id": "Check Point NDR Insight Layout",
    "marketplaces": [
        "xsoar"
    ],
    "name": "Check Point NDR Insight Layout",
    "system": false,
    "version": -1,
    "fromVersion": "6.9.0",
	"description": "Check Point NDR Insight",
	"detailsV2": {
		"tabs": [
			{
				"id": "summary",
				"name": "Legacy Summary",
				"type": "summary"
			},
			{
				"id": "caseinfoid",
				"name": "Incident Info",
				"sections": [
					{
						"displayType": "ROW",
						"h": 3,
						"i": "zsgh4yoppk-caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "type",
								"height": 22,
								"id": "incident-type-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "severity",
								"height": 22,
								"id": "incident-severity-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "owner",
								"height": 22,
								"id": "incident-owner-field",
								"index": 3,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "sourcebrand",
								"height": 22,
								"id": "incident-sourceBrand-field",
								"index": 4,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "sourceinstance",
								"height": 22,
								"id": "incident-sourceInstance-field",
								"index": 5,
								"sectionItemType": "field",
								"startCol": 0
							},
                            {
								"endCol": 2,
								"fieldId": "externallink",
								"height": 22,
								"id": "incident-externallink",
								"index": 6,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "playbookid",
								"height": 22,
								"id": "incident-playbookId-field",
								"index": 7,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Case Details",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 0
					},
					{
						"h": 4,
						"i": "zsgh4yoppk-caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
						"maxW": 3,
						"moved": false,
						"name": "Notes",
						"static": false,
						"type": "notes",
						"w": 1,
						"x": 2,
						"y": 3
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "zsgh4yoppk-caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
						"maxW": 3,
						"moved": false,
						"name": "Work Plan",
						"static": false,
						"type": "workplan",
						"w": 1,
						"x": 1,
						"y": 3
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "zsgh4yoppk-caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
						"isVisible": true,
						"maxW": 3,
						"moved": false,
						"name": "Linked Incidents",
						"static": false,
						"type": "linkedIncidents",
						"w": 2,
						"x": 1,
						"y": 9
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "zsgh4yoppk-caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0",
						"maxW": 3,
						"moved": false,
						"name": "Evidence",
						"static": false,
						"type": "evidence",
						"w": 1,
						"x": 0,
						"y": 9
					},
					{
						"displayType": "ROW",
						"h": 2,
						"hideName": false,
						"i": "zsgh4yoppk-caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
						"maxW": 3,
						"moved": false,
						"name": "Team Members",
						"static": false,
						"type": "team",
						"w": 1,
						"x": 0,
						"y": 5
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "zsgh4yoppk-caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
						"maxW": 3,
						"moved": false,
						"name": "Indicators",
						"query": "",
						"queryType": "input",
						"static": false,
						"type": "indicators",
						"w": 2,
						"x": 0,
						"y": 4
					},
					{
						"displayType": "CARD",
						"h": 2,
						"i": "zsgh4yoppk-caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
						"items": [
							{
								"endCol": 1,
								"fieldId": "occurred",
								"height": 53,
								"id": "incident-occurred-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
                            {
								"endCol": 1,
								"fieldId": "externalstarttime",
                                "name": "NDR Event Start Time",
								"height": 53,
								"id": "incident-externalstarttime",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
                            {
								"endCol": 1,
								"fieldId": "externalendtime",
                                "name": "NDR Event End Time",
								"height": 53,
								"id": "incident-externalendtime",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 1,
								"fieldId": "dbotmodified",
								"height": 53,
								"id": "incident-modified-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 1
							},
							{
								"endCol": 2,
								"fieldId": "dbotcreated",
								"height": 53,
								"id": "incident-created-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 1
							},
							{
								"endCol": 2,
								"fieldId": "dbotclosed",
								"height": 53,
								"id": "incident-closed-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 1
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Timeline Information",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 3
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "zsgh4yoppk-caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "dbotclosed",
								"height": 22,
								"id": "incident-dbotClosed-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "closereason",
								"height": 22,
								"id": "incident-closeReason-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "closenotes",
								"height": 22,
								"id": "incident-closeNotes-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Closing Information",
						"static": false,
						"w": 1,
						"x": 1,
						"y": 5
					},
					{
						"displayType": "ROW",
						"h": 3,
						"i": "zsgh4yoppk-caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
						"isVisible": true,
						"items": [
							{
								"endCol": 4,
								"fieldId": "details",
								"height": 44,
								"id": "incident-details-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "sourceips",
								"height": 22,
								"id": "1b62fd50-8bad-11ef-afb5-214168f0d65e",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "sourceexternalips",
								"height": 22,
								"id": "22d1e9c0-8bad-11ef-afb5-214168f0d65e",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "destinationips",
								"height": 22,
								"id": "1d6ab430-8bad-11ef-afb5-214168f0d65e",
								"index": 3,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "dstports",
								"height": 22,
								"id": "8e168ba0-8bad-11ef-afb5-214168f0d65e",
								"index": 4,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "filemd5",
								"height": 22,
								"id": "a5d8b2e0-8bad-11ef-afb5-214168f0d65e",
								"index": 5,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "appiname",
								"height": 22,
								"id": "40c6de80-8bae-11ef-afb5-214168f0d65e",
								"index": 6,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "users",
								"height": 22,
								"id": "50283f40-8bae-11ef-afb5-214168f0d65e",
								"index": 7,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "hostnames",
								"height": 22,
								"id": "5d1a4db0-8bae-11ef-afb5-214168f0d65e",
								"index": 8,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "sentbytes",
								"height": 22,
								"id": "5d1a4db0-8bae-11ef-afb5-214168f0d65e",
								"index": 9,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "receivedbytes",
								"height": 22,
								"id": "5d1a4db0-8bae-11ef-afb5-214168f0d65e",
								"index": 10,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Details and Statistics",
						"static": false,
						"w": 2,
						"x": 1,
						"y": 0
					}
				],
				"type": "custom"
			},
			{
				"id": "warRoom",
				"name": "War Room",
				"type": "warRoom"
			},
			{
				"id": "workPlan",
				"name": "Work Plan",
				"type": "workPlan"
			},
			{
				"id": "evidenceBoard",
				"name": "Evidence Board",
				"type": "evidenceBoard"
			},
			{
				"id": "relatedIncidents",
				"name": "Related Incidents",
				"type": "relatedIncidents"
			},
			{
				"id": "canvas",
				"name": "Canvas",
				"type": "canvas"
			}
		]
	}
}