Digital Guardian Security Event
Digital Guardian Incident
Details
| ID | Digital Guardian Security Event |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Digital Guardian 4 sections
Digital Guardian Event Information
| Field ID | Position |
|---|---|
| digitalguardianactivity | Col 0-2, Height: 24 |
| digitalguardianalarmname | Col 0-2, Height: 24 |
| digitalguardianclassification | Col 0-2, Height: 24 |
| digitalguardianpolicy | Col 0-2, Height: 24 |
| digitalguardiansensitivity | Col 0-2, Height: 24 |
| digitalguardianthreattype | Col 0-2, Height: 24 |
| digitalguardianarcuid | Col 0-2, Height: 24 |
Digital Guardian Network Information
| Field ID | Position |
|---|---|
| digitalguardianremoteport | Col 0-2, Height: 24 |
| digitalguardiansourceaddress | Col 1-3, Height: 24 |
| digitalguardiandestinationdnsdomain | Col 1-3, Height: 24 |
| digitalguardiansourceip | Col 1-3, Height: 24 |
| digitalguardiandestinationaddress | Col 1-3, Height: 24 |
Digital Guardian Endpoint Information
| Field ID | Position |
|---|---|
| digitalguardianprocessname | Col 0-4, Height: 24 |
| digitalguardiancomputername | Col 0-4, Height: 24 |
| digitalguardianfilename | Col 0-4, Height: 24 |
| digitalguardiancommandline | Col 0-4, Height: 24 |
| digitalguardianparentprocessname | Col 0-4, Height: 24 |
Digital Guardian Email Information
| Field ID | Position |
|---|---|
| digitalguardianemailsender | Col 0-4, Height: 24 |
| digitalguardianemailsubject | Col 0-4, Height: 24 |
| digitalguardianemailrecipient | Col 0-4, Height: 24 |
| digitalguardianattachmentfilename | Col 0-4, Height: 24 |
Legacy Summary 0 sections
No sections defined.
Incident Info 11 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 24 |
| severity | Col 0-2, Height: 24 |
| owner | Col 0-2, Height: 24 |
| dbotsource | Col 0-2, Height: 24 |
| sourcebrand | Col 0-2, Height: 24 |
| sourceinstance | Col 0-2, Height: 24 |
| playbookid | Col 0-2, Height: 24 |
Notes
Work Plan
Linked Incidents
Child Incidents
Evidence
Team Members
Indicators
Timeline Information
| Field ID | Position |
|---|---|
| occurred | Col 0-1, Height: 24 |
| dbotcreated | Col 1-2, Height: 24 |
| dbotmodified | Col 0-1, Height: 24 |
| dbotclosed | Col 1-2, Height: 24 |
| dbotduedate | Col 0-2, Height: 24 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 24 |
| closereason | Col 0-2, Height: 24 |
| closenotes | Col 0-2, Height: 24 |
Investigation Data
| Field ID | Position |
|---|---|
| details | Col 0-2, Height: 24 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.