ExtraHop Detection

ExtraHop Reveal(x) Incident

Details

IDExtraHop Detection
Groupincident
Version-1
From Version6.5.0

Layout Structure

Incident Info 12 sections

Work Plan

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
dbotstatus Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
playbookid Col 0-2, Height: 22
roles Col 0-2, Height: 22
phase Col 0-2, Height: 22
category Col 0-2, Height: 22

Detection Details

Field IDPosition
occurred Col 0-2, Height: 22
extrahoprevealxdetectionid Col 0-2, Height: 22
dbotcreated Col 0-2, Height: 22
dbotmodified Col 0-2, Height: 22
extrahoprevealxstarttime Col 0-2, Height: 22
extrahoprevealxupdatetime Col 0-2, Height: 22
extrahoprevealxmodtime Col 0-2, Height: 22
extrahoprevealxendtime Col 0-2, Height: 22
extrahoprevealxriskscore Col 0-2, Height: 22
extrahopapplianceid Col 0-2, Height: 22
extrahoprevealxdetectionstatus Col 0-2, Height: 22
extrahoprevealxdetectiontype Col 0-2, Height: 22
extrahoprevealxusercreated Col 0-2, Height: 22
detectionurl Col 0-2, Height: 22
detectionticketed Col 0-2, Height: 22
extrahophostname Col 0-2, Height: 22
dbottotaltime Col 0-2, Height: 22

Detection Participants

Field IDPosition
extrahoprevealxdetectionparticipants Col 0-6, Height: 106

Incident Timeline

Detection Description

Field IDPosition
description Col 0-4, Height: 53

Notes

Incident Files

Detection Mitre Techniques

Field IDPosition
extrahoprevealxmitretechniques Col 0-4, Height: 106

Detection Mitre Tactics

Field IDPosition
extrahoprevealxmitretactics Col 0-4, Height: 106

Extrahop Properties

Field IDPosition
extrahoprevealxproperties Col 0-2, Height: 22

ExtraHop Reveal(x) Detection Devices

Field IDPosition
extrahoprevealxdetectiondevices Col 0-6, Height: 106
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

{
    "close": {
        "sections": [
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_closereason",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_closenotes",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Basic Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            }
        ]
    },
    "details": {
        "sections": [
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_type",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_severity",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_owner",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotstatus",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_sourcebrand",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_sourceinstance",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_playbookid",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_phase",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_roles",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_category",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Basic Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_extrahophostname",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionurl",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionticketed",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_occurred",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionendtime",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionupdatetime",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_riskscore",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionid",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Detection Details",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_details",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Details",
                "query": null,
                "queryType": "",
                "readOnly": true,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_participants",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Detection Participants",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "isVisible": true,
                "name": "Work Plan",
                "query": null,
                "queryType": "",
                "readOnly": true,
                "type": "workplan"
            },
            {
                "description": "",
                "isVisible": true,
                "name": "Incident Files",
                "query": {
                    "categories": [
                        "attachments"
                    ],
                    "lastId": "",
                    "pageSize": 100,
                    "tags": [],
                    "users": []
                },
                "queryType": "warRoomFilter",
                "readOnly": true,
                "type": "invTimeline"
            },
            {
                "description": "",
                "isVisible": true,
                "name": "Linked Incidents",
                "query": null,
                "queryType": "",
                "readOnly": true,
                "type": "linkedIncidents"
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_dbotcreated",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_occurred",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotduedate",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotmodified",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbottotaltime",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Timeline Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "isVisible": true,
                "name": "Incident Timeline",
                "query": {
                    "categories": [
                        "incidentInfo"
                    ],
                    "lastId": "",
                    "pageSize": 100,
                    "tags": [],
                    "users": []
                },
                "queryType": "warRoomFilter",
                "readOnly": true,
                "type": "invTimeline"
            }
        ]
    },
    "detailsV2": {
        "tabs": [
            {
                "id": "caseinfoid",
                "name": "Incident Info",
                "sections": [
                    {
                        "displayType": "ROW",
                        "h": 3,
                        "i": "caseinfoid-field-changed-caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Work Plan",
                        "static": false,
                        "type": "workplan",
                        "w": 1,
                        "x": 1,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 3,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-bfe0c200-1496-11eb-9980-5f8e6bceb89a",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "type",
                                "height": 22,
                                "id": "df7419f0-1496-11eb-9980-5f8e6bceb89a",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "severity",
                                "height": 22,
                                "id": "e7b375c0-1496-11eb-9980-5f8e6bceb89a",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "owner",
                                "height": 22,
                                "id": "ede463f0-1496-11eb-9980-5f8e6bceb89a",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotstatus",
                                "height": 22,
                                "id": "f2e49a50-1496-11eb-9980-5f8e6bceb89a",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "sourcebrand",
                                "height": 22,
                                "id": "fa472ab0-1496-11eb-9980-5f8e6bceb89a",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "sourceinstance",
                                "height": 22,
                                "id": "01522530-1497-11eb-9980-5f8e6bceb89a",
                                "index": 5,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "playbookid",
                                "height": 22,
                                "id": "09d71580-1497-11eb-9980-5f8e6bceb89a",
                                "index": 6,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "roles",
                                "height": 22,
                                "id": "1793ee00-1497-11eb-9980-5f8e6bceb89a",
                                "index": 7,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "phase",
                                "height": 22,
                                "id": "48a34950-1497-11eb-9980-5f8e6bceb89a",
                                "index": 8,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "category",
                                "height": 22,
                                "id": "1f709060-1497-11eb-9980-5f8e6bceb89a",
                                "index": 9,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Case Details",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 0
                    },
                    {
						"displayType": "CARD",
                        "h": 5,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-568f2110-1497-11eb-9980-5f8e6bceb89a",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "occurred",
                                "height": 22,
                                "id": "7f464160-1497-11eb-9980-5f8e6bceb89a",
                                "index": 0,
                                "listId": "caseinfoid-568f2110-1497-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxdetectionid",
                                "height": 22,
                                "id": "088d5b50-ab92-11ed-85d4-a9318b4d07e0",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "dbotcreated",
                                "height": 22,
                                "id": "86d8aca0-149d-11eb-9980-5f8e6bceb89a",
                                "index": 2,
                                "listId": "caseinfoid-568f2110-1497-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotmodified",
                                "height": 22,
                                "id": "7e6fa8c0-149d-11eb-9980-5f8e6bceb89a",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxstarttime",
                                "height": 22,
                                "id": "b86880f0-af7e-11ed-aeb3-17e4ab65d78c",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxupdatetime",
                                "height": 22,
                                "id": "c6235da0-af7e-11ed-aeb3-17e4ab65d78c",
                                "index": 5,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxmodtime",
                                "height": 22,
                                "id": "0fc09e00-b1d7-11ed-b7b0-11ddace27d31",
                                "index": 6,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxendtime",
                                "height": 22,
                                "id": "c9e5bcd0-af7e-11ed-aeb3-17e4ab65d78c",
                                "index": 7,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxriskscore",
                                "height": 22,
                                "id": "98c8f400-af7e-11ed-aeb3-17e4ab65d78c",
                                "index": 7,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahopapplianceid",
                                "height": 22,
                                "id": "a8f22e20-ac48-11ed-ad24-e1f6fc9cd422",
                                "index": 8,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxdetectionstatus",
                                "height": 22,
                                "id": "2b0711a0-ac53-11ed-9939-b34573b2eaec",
                                "index": 9,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxdetectiontype",
                                "height": 22,
                                "id": "17cd6150-a935-11ed-beec-cd0cb5eb7120",
                                "index": 10,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxusercreated",
                                "height": 22,
                                "id": "2cb9ac40-a935-11ed-beec-cd0cb5eb7120",
                                "index": 11,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "detectionurl",
                                "height": 22,
                                "id": "75e91980-1497-11eb-9980-5f8e6bceb89a",
                                "index": 12,
                                "listId": "caseinfoid-field-changed-caseinfoid-568f2110-1497-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "detectionticketed",
                                "height": 22,
                                "id": "78513fe0-1497-11eb-9980-5f8e6bceb89a",
                                "index": 13,
                                "listId": "caseinfoid-field-changed-caseinfoid-568f2110-1497-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "extrahophostname",
                                "height": 22,
                                "id": "19f4ae20-a935-11ed-beec-cd0cb5eb7120",
                                "index": 14,
                                "listId": "caseinfoid-field-changed-caseinfoid-568f2110-1497-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "dbottotaltime",
                                "height": 22,
                                "id": "820b4610-149d-11eb-9980-5f8e6bceb89a",
                                "index": 15,
                                "listId": "caseinfoid-field-changed-caseinfoid-568f2110-1497-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Detection Details",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideItemTitleOnlyOne": false,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-a89de770-1497-11eb-9980-5f8e6bceb89a",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 6,
                                "fieldId": "extrahoprevealxdetectionparticipants",
                                "height": 106,
                                "id": "2ce1bb60-ab5e-11ed-85b3-0dd32a5984c8",
                                "index": 1,
                                "listId": "caseinfoid-a89de770-1497-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Detection Participants",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 5
                    },
                    {
                        "h": 7,
                        "i": "caseinfoid-field-changed-caseinfoid-07cbbfb0-1498-11eb-9980-5f8e6bceb89a",
                        "items": [],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Incident Timeline",
                        "query": {
                            "categories": [
                                "incidentInfo"
                            ],
                            "lastId": "",
                            "pageSize": 100,
                            "tags": [],
                            "users": []
                        },
                        "queryType": "warRoomFilter",
                        "static": false,
                        "type": "invTimeline",
                        "w": 3,
                        "x": 0,
                        "y": 15
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-040a8710-149a-11eb-9980-5f8e6bceb89a",
                        "items": [
                            {
                                "endCol": 4,
                                "fieldId": "description",
                                "height": 53,
                                "id": "760a6b90-ab93-11ed-85d4-a9318b4d07e0",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Detection Description",
                        "static": false,
                        "w": 2,
                        "x": 0,
                        "y": 3
                    },
                    {
                        "h": 2,
                        "i": "caseinfoid-field-changed-caseinfoid-bc884400-149d-11eb-9980-5f8e6bceb89a",
                        "items": [],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Notes",
                        "static": false,
                        "type": "notes",
                        "w": 1,
                        "x": 1,
                        "y": 13
                    },
                    {
                        "h": 2,
                        "i": "caseinfoid-field-changed-caseinfoid-269b43b0-149e-11eb-9980-5f8e6bceb89a",
                        "items": [],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Incident Files",
                        "query": {
                            "categories": [
                                "attachments"
                            ],
                            "lastId": "",
                            "pageSize": 100,
                            "tags": [],
                            "users": []
                        },
                        "queryType": "warRoomFilter",
                        "static": false,
                        "type": "invTimeline",
                        "w": 1,
                        "x": 0,
                        "y": 13
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-5a82bb60-ab94-11ed-b1dd-9fa418020c0a",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 4,
                                "fieldId": "extrahoprevealxmitretechniques",
                                "height": 106,
                                "id": "27abf110-ab95-11ed-b1dd-9fa418020c0a",
                                "index": 0,
                                "listId": "caseinfoid-040a8710-149a-11eb-9980-5f8e6bceb89a",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Detection Mitre Techniques",
                        "static": false,
                        "w": 2,
                        "x": 0,
                        "y": 9
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-91c1d380-ac30-11ed-8ae7-71b5fe3d0b36",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 4,
                                "fieldId": "extrahoprevealxmitretactics",
                                "height": 106,
                                "id": "abae06b0-ac30-11ed-8ae7-71b5fe3d0b36",
                                "index": 0,
                                "listId": "caseinfoid-91c1d380-ac30-11ed-8ae7-71b5fe3d0b36",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Detection Mitre Tactics",
                        "static": false,
                        "w": 2,
                        "x": 0,
                        "y": 11
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-f8f755c0-ac30-11ed-8ae7-71b5fe3d0b36",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "extrahoprevealxproperties",
                                "height": 22,
                                "id": "56ca3c70-ac32-11ed-8ae7-71b5fe3d0b36",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Extrahop Properties",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 9
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-field-changed-caseinfoid-4ce28b00-ac36-11ed-af36-61746b21b6cd",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 6,
                                "fieldId": "extrahoprevealxdetectiondevices",
                                "height": 106,
                                "id": "82b9f5b0-ac36-11ed-af36-61746b21b6cd",
                                "index": 0,
                                "listId": "caseinfoid-4ce28b00-ac36-11ed-af36-61746b21b6cd",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "ExtraHop Reveal(x) Detection Devices",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 7
                    }
                ],
                "type": "custom"
            },
            {
                "id": "warRoom",
                "name": "War Room",
                "type": "warRoom"
            },
            {
                "id": "workPlan",
                "name": "Work Plan",
                "type": "workPlan"
            },
            {
                "id": "evidenceBoard",
                "name": "Evidence Board",
                "type": "evidenceBoard"
            },
            {
                "id": "relatedIncidents",
                "name": "Related Incidents",
                "type": "relatedIncidents"
            },
            {
                "id": "canvas",
                "name": "Canvas",
                "type": "canvas"
            }
        ]
    },
    "edit": {
        "sections": [
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_name",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_occurred",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_reminder",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_owner",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_roles",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_type",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_severity",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_playbookid",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_labels",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_phase",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_attachment",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_details",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Basic Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_extrahophostname",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionurl",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionid",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_riskscore",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_participants",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionupdatetime",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionendtime",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Detection Details",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            }
        ]
    },
    "group": "incident",
    "id": "ExtraHop Detection",
    "mobile": {
        "sections": [
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_type",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_severity",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_owner",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotstatus",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_sourcebrand",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_sourceinstance",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_playbookid",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_phase",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_roles",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_category",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Basic Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_extrahophostname",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionurl",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionticketed",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_occurred",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionupdatetime",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionendtime",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_riskscore",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionid",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Detection Details",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_details",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Details",
                "query": null,
                "queryType": "",
                "readOnly": true,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_dbotcreated",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_occurred",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotduedate",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotmodified",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbottotaltime",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Timeline Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_labels",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Labels",
                "query": null,
                "queryType": "",
                "readOnly": true,
                "type": "labels"
            }
        ]
    },
    "name": "ExtraHop Detection",
    "quickView": {
        "sections": [
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_type",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_severity",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_owner",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotstatus",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_sourcebrand",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_sourceinstance",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_playbookid",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_phase",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_roles",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_category",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Basic Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_extrahophostname",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionurl",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionticketed",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_occurred",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionupdatetime",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionendtime",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_riskscore",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_detectionid",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Detection Details",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_details",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Details",
                "query": null,
                "queryType": "",
                "readOnly": true,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_participants",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Detection Participants",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_dbotcreated",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_occurred",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotduedate",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbotmodified",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_dbottotaltime",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Timeline Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            },
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_labels",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Labels",
                "query": null,
                "queryType": "",
                "readOnly": true,
                "type": "labels"
            }
        ]
    },
    "system": false,
    "version": -1,
    "marketplaces": [
        "xsoar"
    ],
    "fromVersion": "6.5.0",
    "description": ""
}