Datadog Cloud SIEM V2 Layout
Datadog Cloud SIEM V2 Incident Layout - Enhanced layout for security signal investigation and triage
Datadog Cloud SIEM Incident
Details
| ID | Datadog Cloud SIEM V2 Layout |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.8.0 |
Layout Structure
Security Signal Details 4 sections
Signal Overview
| Field ID | Position |
|---|---|
| datadogcloudsiemv2securitysignaltitle | Col 0-6, Height: 22 |
| datadogcloudsiemv2securitysignalurl | Col 0-6, Height: 22 |
| datadogcloudsiemv2securitysignalmessage | Col 0-6, Height: 88 |
Signal Information
| Field ID | Position |
|---|---|
| datadogcloudsiemv2securitysignalid | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignaltimestamp | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignalseverity | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignalhost | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignaltags | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignaltriggeringlogid | Col 0-2, Height: 22 |
Detection Rule Details
| Field ID | Position |
|---|---|
| datadogcloudsiemv2securitysignalruleurl | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignalruleid | Col 0-2, Height: 22 |
Triage Information
| Field ID | Position |
|---|---|
| datadogcloudsiemv2securitysignaltriagestate | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignaltriageassigneename | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignaltriagearchivereason | Col 0-2, Height: 22 |
| datadogcloudsiemv2securitysignaltriagearchivecomment | Col 0-2, Height: 44 |
Incident Info 7 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
Timeline Information
| Field ID | Position |
|---|---|
| occurred | Col 0-1, Height: 22 |
| dbotcreated | Col 1-2, Height: 22 |
| dbotmodified | Col 0-1, Height: 22 |
| dbotclosed | Col 1-2, Height: 22 |
| dbotduedate | Col 0-2, Height: 22 |
Notes
Investigation Data
| Field ID | Position |
|---|---|
| details | Col 0-2, Height: 66 |
Work Plan
Indicators
Closing Information
| Field ID | Position |
|---|---|
| closereason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 44 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Canvas 0 sections
No sections defined.