Cortex XDR - XCLOUD Cryptojacking
Cloud Incident Response Incident
Details
| ID | Cortex XDR - XCLOUD Cryptomining |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.5.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 7 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
Work Plan
Linked Incidents
Incident Information
| Field ID | Position |
|---|---|
| xdrdescription | Col 0-2, Height: 22 |
| xdrincidentid | Col 0-2, Height: 22 |
| xdrurl | Col 0-2, Height: 22 |
| xdralertcategory | Col 0-2, Height: 22 |
| xdralertname | Col 0-2, Height: 22 |
| dbotcreated | Col 0-2, Height: 22 |
| xdrdetectiontime | Col 0-2, Height: 22 |
| xdrhostcount | Col 2-4, Height: 22 |
| xdrusercount | Col 2-4, Height: 22 |
| xdralertcount | Col 2-4, Height: 22 |
| xdrhighseverityalertcount | Col 2-4, Height: 22 |
| xdrmediumseverityalertcount | Col 2-4, Height: 22 |
| xdrlowseverityalertcount | Col 2-4, Height: 22 |
Alert Information
| Field ID | Position |
|---|---|
| xdralerts | Col 0-4, Height: 106 |
Alert Extended Information
Cloud Provider
Security Posture 8 sections
Users Extra Data
| Field ID | Position |
|---|---|
| identitytable | Col 0-4, Height: 44 |
Attacker Extra Data
| Field ID | Position |
|---|---|
| sourceips | Col 0-2, Height: 22 |
| useragent | Col 0-2, Height: 22 |
| asn | Col 0-2, Height: 22 |
| locationregion | Col 0-2, Height: 22 |
Users Count
Resource Count
Regions
Unique Regions Count
Malicious or Suspicious Indicators
Resource Type
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.