Cortex XDR Port Scan

Cortex XDR by Palo Alto Networks Incident

Details

IDCortex XDR Port Scan
Groupincident
Version-1
From Version6.0.0

Layout Structure

Case info 12 sections

Case Details

Field IDPosition
type Col 0-2, Height: 24
dbotsource Col 0-2, Height: 24
sourceinstance Col 0-2, Height: 24
sourcebrand Col 0-2, Height: 24
severity Col 0-2, Height: 24
owner Col 0-2, Height: 24
playbookid Col 0-2, Height: 24

Notes

Linked Incidents

Child Incidents

Evidence

Team Members

Timeline Information

Field IDPosition
dbotcreated Col 0-2, Height: 24
occurred Col 0-2, Height: 24
dbotmodified Col 0-2, Height: 24
dbotclosed Col 0-2, Height: 24
remediationsla Col 0-2, Height: 24
detectionsla Col 0-2, Height: 24
dbotduedate Col 0-2, Height: 24

Closing Information

Field IDPosition
xdrresolvecomment Col 0-2, Height: 24
dbotclosed Col 0-2, Height: 24
closereason Col 0-2, Height: 24
closinguserid Col 0-2, Height: 24
closenotes Col 0-2, Height: 48

XDR Basic Information

Field IDPosition
xdrdescription Col 0-4, Height: 24
xdrincidentid Col 0-2, Height: 24
xdrstatus Col 0-2, Height: 24
description Col 0-2, Height: 24
xdrhostcount Col 0-2, Height: 24
xdrusercount Col 0-2, Height: 24
xdrnotes Col 0-2, Height: 24
xdrurl Col 0-2, Height: 24
xdralertcount Col 2-4, Height: 24
xdrhighseverityalertcount Col 2-4, Height: 24
xdrmediumseverityalertcount Col 2-4, Height: 24
xdrlowseverityalertcount Col 2-4, Height: 24
xdrassigneduserprettyname Col 2-4, Height: 24
xdrassigneduseremail Col 2-4, Height: 24
sourceip Col 2-4, Height: 24
sourcehostname Col 2-4, Height: 24
investigationstage Col 2-4, Height: 24

Related Alerts Severity

Affected Hosts Count

Affected Users Count

Alert & Artifacts 5 sections

Incident Files

Indicators

XDR Alerts

Field IDPosition
xdralerts Col 0-6, Height: 110

XDR File Artifacts

Field IDPosition
xdrfileartifacts Col 0-6, Height: 110

XDR Network Artifacts

Field IDPosition
xdrnetworkartifacts Col 0-6, Height: 110
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.