F5 Silverline WAF Events Layout

F5 Silverline Incident

Details

IDF5 Silverline WAF Events Layout
Groupincident
Version-1
From Version6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 11 sections

Case Details

Field IDPosition
type Col 0-2, Height: 53
severity Col 0-2, Height: 53
owner Col 0-2, Height: 53
sourceinstance Col 0-2, Height: 53
f5silverlinealerttype Col 0-2, Height: 53
f5silverlinesecurityseverity Col 0-2, Height: 53
f5silverlineviolationtimestamp Col 0-2, Height: 53
f5silverlineattacktype Col 0-2, Height: 53
destinationip Col 0-2, Height: 53
destinationport Col 0-2, Height: 53
f5silverlinegeolocationsourceip Col 0-2, Height: 53
f5silverlinehttpclassname Col 0-2, Height: 53
f5silverlineclientip Col 0-2, Height: 53
f5silverlinehttpmethod Col 0-2, Height: 53
f5silverlinesecuritypolicyupdatetimestamp Col 0-2, Height: 53
f5silvelinesecuritypolicyname Col 0-2, Height: 53
protocol Col 0-2, Height: 53
f5silverlinehttpstringsdetected Col 0-2, Height: 53
f5silverlinerequeststatus Col 0-2, Height: 53
f5silverlineresponsecode Col 0-2, Height: 53
f5silverlineattacksignatureid Col 0-2, Height: 53
f5silverlineattacksignaturename Col 0-2, Height: 53
sourceport Col 0-2, Height: 53
f5silverlineviolationsecuritysupportid Col 0-2, Height: 53
f5silverlinetargeteduri Col 0-2, Height: 53
f5silverlinedetectedusernames Col 0-2, Height: 53
f5silverlineviolationstypes Col 0-2, Height: 53
f5silverlinewebapplicationname Col 0-2, Height: 53
f5silverlinexforwarded Col 0-2, Height: 53
f5silverlinestagedsignatureids Col 0-2, Height: 53
f5silverlinestagedsignaturenames Col 0-2, Height: 53
f5silverlinesubviolations Col 0-2, Height: 53
f5silverlineviolationsdetails Col 0-2, Height: 106
sourcebrand Col 0-2, Height: 53
f5silverlinerawmessage Col 0-2, Height: 106

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 53
dbotmodified Col 0-1, Height: 53
dbotduedate Col 0-2, Height: 53
dbotcreated Col 1-2, Height: 53
dbotclosed Col 1-2, Height: 53

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Investigation Data

Field IDPosition
details Col 0-2, Height: 22
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

{
	"description": "",
	"fromVersion": "6.0.0",
	"detailsV2": {
		"tabs": [
			{
				"id": "summary",
				"name": "Legacy Summary",
				"type": "summary"
			},
			{
				"id": "caseinfoid",
				"name": "Incident Info",
				"sections": [
					{
						"displayType": "CARD",
						"h": 3,
						"i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "type",
								"height": 53,
								"id": "incident-type-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "severity",
								"height": 53,
								"id": "incident-severity-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "owner",
								"height": 53,
								"id": "incident-owner-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "sourceinstance",
								"height": 53,
								"id": "incident-sourceInstance-field",
								"index": 3,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinealerttype",
								"height": 53,
								"id": "c4927280-b892-11eb-acc5-0dea9504b51a",
								"index": 4,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinesecurityseverity",
								"height": 53,
								"id": "d0439a80-b8a8-11eb-acc5-0dea9504b51a",
								"index": 5,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlineviolationtimestamp",
								"height": 53,
								"id": "a1181f90-b896-11eb-9573-bb5824dda559",
								"index": 6,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlineattacktype",
								"height": 53,
								"id": "985a6c00-b896-11eb-9573-bb5824dda559",
								"index": 7,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "destinationip",
								"height": 53,
								"id": "7cd1c6e0-b896-11eb-9573-bb5824dda559",
								"index": 8,
								"listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "destinationport",
								"height": 53,
								"id": "a8b45d90-b896-11eb-9573-bb5824dda559",
								"index": 9,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinegeolocationsourceip",
								"height": 53,
								"id": "b1723830-b896-11eb-9573-bb5824dda559",
								"index": 10,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "f5silverlinehttpclassname",
								"height": 53,
								"id": "b7f3de70-b896-11eb-9573-bb5824dda559",
								"index": 11,
								"listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "f5silverlineclientip",
								"height": 53,
								"id": "c9499520-b896-11eb-9573-bb5824dda559",
								"index": 12,
								"listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinehttpmethod",
								"height": 53,
								"id": "d476c210-b896-11eb-9573-bb5824dda559",
								"index": 13,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinesecuritypolicyupdatetimestamp",
								"height": 53,
								"id": "d9d8ee90-b896-11eb-9573-bb5824dda559",
								"index": 14,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silvelinesecuritypolicyname",
								"height": 53,
								"id": "dec15730-b896-11eb-9573-bb5824dda559",
								"index": 15,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "protocol",
								"height": 53,
								"id": "e3c07c20-b896-11eb-9573-bb5824dda559",
								"index": 16,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinehttpstringsdetected",
								"height": 53,
								"id": "eca20b60-b896-11eb-9573-bb5824dda559",
								"index": 17,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinerequeststatus",
								"height": 53,
								"id": "f34f0760-b896-11eb-9573-bb5824dda559",
								"index": 18,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlineresponsecode",
								"height": 53,
								"id": "f8533560-b896-11eb-9573-bb5824dda559",
								"index": 19,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlineattacksignatureid",
								"height": 53,
								"id": "072accb0-b897-11eb-9573-bb5824dda559",
								"index": 20,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlineattacksignaturename",
								"height": 53,
								"id": "08bcb750-b897-11eb-9573-bb5824dda559",
								"index": 21,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "sourceport",
								"height": 53,
								"id": "121fd2a0-b897-11eb-9573-bb5824dda559",
								"index": 22,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlineviolationsecuritysupportid",
								"height": 53,
								"id": "1650f930-b897-11eb-9573-bb5824dda559",
								"index": 23,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinetargeteduri",
								"height": 53,
								"id": "1e03f380-b897-11eb-9573-bb5824dda559",
								"index": 24,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinedetectedusernames",
								"height": 53,
								"id": "20e05f80-b897-11eb-9573-bb5824dda559",
								"index": 25,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlineviolationstypes",
								"height": 53,
								"id": "2ffd6440-b897-11eb-9573-bb5824dda559",
								"index": 26,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinewebapplicationname",
								"height": 53,
								"id": "32296c00-b897-11eb-9573-bb5824dda559",
								"index": 27,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinexforwarded",
								"height": 53,
								"id": "3479ebb0-b897-11eb-9573-bb5824dda559",
								"index": 28,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinestagedsignatureids",
								"height": 53,
								"id": "3bcec070-b897-11eb-9573-bb5824dda559",
								"index": 29,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinestagedsignaturenames",
								"height": 53,
								"id": "3cfd5560-b897-11eb-9573-bb5824dda559",
								"index": 30,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "f5silverlinesubviolations",
								"height": 53,
								"id": "429f4a00-b897-11eb-9573-bb5824dda559",
								"index": 31,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "f5silverlineviolationsdetails",
								"height": 106,
								"id": "4a75d1e0-b897-11eb-9573-bb5824dda559",
								"index": 32,
								"listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "sourcebrand",
								"height": 53,
								"id": "incident-sourceBrand-field",
								"index": 33,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "f5silverlinerawmessage",
								"height": 106,
								"id": "25f36990-c909-11eb-96fd-df7b1d8be585",
								"index": 34,
								"listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Case Details",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 0
					},
					{
						"h": 2,
						"i": "caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
						"maxW": 3,
						"moved": false,
						"name": "Notes",
						"static": false,
						"type": "notes",
						"w": 1,
						"x": 2,
						"y": 0
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
						"maxW": 3,
						"moved": false,
						"name": "Work Plan",
						"static": false,
						"type": "workplan",
						"w": 1,
						"x": 1,
						"y": 0
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
						"isVisible": true,
						"maxW": 3,
						"moved": false,
						"name": "Linked Incidents",
						"static": false,
						"type": "linkedIncidents",
						"w": 1,
						"x": 1,
						"y": 2
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-842632c0-98b1-11e9-97d7-ed26ef9e46c8",
						"maxW": 3,
						"moved": false,
						"name": "Child Incidents",
						"static": false,
						"type": "childInv",
						"w": 1,
						"x": 2,
						"y": 4
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0",
						"maxW": 3,
						"moved": false,
						"name": "Evidence",
						"static": false,
						"type": "evidence",
						"w": 1,
						"x": 2,
						"y": 2
					},
					{
						"displayType": "ROW",
						"h": 2,
						"hideName": false,
						"i": "caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
						"maxW": 3,
						"moved": false,
						"name": "Team Members",
						"static": false,
						"type": "team",
						"w": 1,
						"x": 0,
						"y": 7
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
						"maxW": 3,
						"moved": false,
						"name": "Indicators",
						"query": "",
						"queryType": "input",
						"static": false,
						"type": "indicators",
						"w": 2,
						"x": 1,
						"y": 6
					},
					{
						"displayType": "CARD",
						"h": 2,
						"i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
						"items": [
							{
								"endCol": 1,
								"fieldId": "occurred",
								"height": 53,
								"id": "incident-occurred-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 1,
								"fieldId": "dbotmodified",
								"height": 53,
								"id": "incident-modified-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "dbotduedate",
								"height": 53,
								"id": "incident-dueDate-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "dbotcreated",
								"height": 53,
								"id": "incident-created-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 1
							},
							{
								"endCol": 2,
								"fieldId": "dbotclosed",
								"height": 53,
								"id": "incident-closed-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 1
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Timeline Information",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 3
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "dbotclosed",
								"height": 22,
								"id": "incident-dbotClosed-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "closereason",
								"height": 22,
								"id": "incident-closeReason-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "closenotes",
								"height": 22,
								"id": "incident-closeNotes-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Closing Information",
						"static": false,
						"w": 1,
						"x": 1,
						"y": 4
					},
					{
						"displayType": "CARD",
						"h": 2,
						"i": "caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "details",
								"height": 22,
								"id": "incident-details-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxW": 3,
						"moved": false,
						"name": "Investigation Data",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 5
					}
				],
				"type": "custom"
			},
			{
				"id": "warRoom",
				"name": "War Room",
				"type": "warRoom"
			},
			{
				"id": "workPlan",
				"name": "Work Plan",
				"type": "workPlan"
			},
			{
				"id": "evidenceBoard",
				"name": "Evidence Board",
				"type": "evidenceBoard"
			},
			{
				"id": "relatedIncidents",
				"name": "Related Incidents",
				"type": "relatedIncidents"
			},
			{
				"id": "canvas",
				"name": "Canvas",
				"type": "canvas"
			}
		]
	},
	"edit": {
		"sections": []
	},
	"group": "incident",
	"id": "F5 Silverline WAF Events Layout",
	"name": "F5 Silverline WAF Events Layout",
	"system": false,
	"version": -1,
 "marketplaces": ["xsoar"]
}