FireEye NX Alert

FireEye NX Alert Layout
Details

ID	`FireEye NX Alert`
Group	incident
Version	-1
From Version	6.0.0
Layout Structure

Legacy Summary 0 sections
No sections defined.
Incident Info 12 sections
Case Details

Field ID	Position
type	Col 0-2, Height: 22
severity	Col 0-2, Height: 22
owner	Col 0-2, Height: 22
dbotsource	Col 0-2, Height: 22
sourcebrand	Col 0-2, Height: 22
sourceinstance	Col 0-2, Height: 22
playbookid	Col 0-2, Height: 22
Linked Incidents

Indicators

Timeline Information

Field ID	Position
occurred	Col 0-1, Height: 53
dbotmodified	Col 0-1, Height: 53
dbotduedate	Col 0-2, Height: 53
dbotcreated	Col 1-2, Height: 53
dbotclosed	Col 1-2, Height: 53
Closing Information

Field ID	Position
dbotclosed	Col 0-2, Height: 22
closereason	Col 0-2, Height: 22
closenotes	Col 0-2, Height: 22
Alert Details

Field ID	Position
fireeyenxalerttype	Col 0-2, Height: 53
fireeyenxalerturl	Col 0-2, Height: 53
fireeyenxalertmalwarename	Col 0-2, Height: 53
fireeyenxalerttargetip	Col 0-2, Height: 53
fireeyenxalerttargetmacaddress	Col 0-2, Height: 53
fireeyenxalertvictimip	Col 0-2, Height: 53
fireeyenxalertvictimmacaddress	Col 0-2, Height: 53
fireeyenxalertscversion	Col 2-4, Height: 53
fireeyenxalertaction	Col 2-4, Height: 53
fireeyenxalertid	Col 2-4, Height: 53
fireeyenxalerttargetport	Col 2-4, Height: 53
fireeyenxalertuuid	Col 2-4, Height: 53
fireeyenxalertvictimport	Col 2-4, Height: 22
Attachments

Field ID	Position
incident_attachment	Col 0-2, Height: 53
Work Plan

Notes

Evidence

Child Incidents

Team Members

War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.
Source

layoutscontainer-FireEye_NX_Alert.json
Download History Raw
{
 "id": "FireEye NX Alert",
 "group": "incident",
 "name": "FireEye NX Alert",
 "description": "FireEye NX Alert Layout",
 "version": -1,
 "fromVersion": "6.0.0",
 "detailsV2": {
  "tabs": [
   {
    "id": "summary",
    "name": "Legacy Summary",
    "type": "summary"
   },
   {
    "id": "caseinfoid",
    "name": "Incident Info",
    "sections": [
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "type",
        "height": 22,
        "id": "incident-type-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "severity",
        "height": 22,
        "id": "incident-severity-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "owner",
        "height": 22,
        "id": "incident-owner-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotsource",
        "height": 22,
        "id": "incident-source-field",
        "index": 3,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourcebrand",
        "height": 22,
        "id": "incident-sourceBrand-field",
        "index": 4,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourceinstance",
        "height": 22,
        "id": "incident-sourceInstance-field",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "playbookid",
        "height": 22,
        "id": "incident-playbookId-field",
        "index": 6,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "moved": false,
      "name": "Case Details",
      "static": false,
      "w": 1,
      "x": 0,
      "y": 0
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
      "isVisible": true,
      "moved": false,
      "name": "Linked Incidents",
      "static": false,
      "type": "linkedIncidents",
      "w": 1,
      "x": 1,
      "y": 8
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
      "moved": false,
      "name": "Indicators",
      "query": "",
      "queryType": "input",
      "static": false,
      "type": "indicators",
      "w": 2,
      "x": 0,
      "y": 6
     },
     {
      "displayType": "CARD",
      "h": 2,
      "i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
      "items": [
       {
        "endCol": 1,
        "fieldId": "occurred",
        "height": 53,
        "id": "incident-occurred-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 1,
        "fieldId": "dbotmodified",
        "height": 53,
        "id": "incident-modified-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotduedate",
        "height": 53,
        "id": "incident-dueDate-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotcreated",
        "height": 53,
        "id": "incident-created-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 1
       },
       {
        "endCol": 2,
        "fieldId": "dbotclosed",
        "height": 53,
        "id": "incident-closed-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 1
       }
      ],
      "moved": false,
      "name": "Timeline Information",
      "static": false,
      "w": 1,
      "x": 1,
      "y": 4
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "dbotclosed",
        "height": 22,
        "id": "incident-dbotClosed-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "closereason",
        "height": 22,
        "id": "incident-closeReason-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "closenotes",
        "height": 22,
        "id": "incident-closeNotes-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "moved": false,
      "name": "Closing Information",
      "static": false,
      "w": 1,
      "x": 0,
      "y": 8
     },
     {
      "displayType": "CARD",
      "h": 4,
      "hideName": false,
      "i": "caseinfoid-491ac0f0-e7ad-11ea-b9fb-69214b89606a",
      "items": [
       {
        "endCol": 2,
        "fieldId": "fireeyenxalerttype",
        "height": 53,
        "id": "e45c6e40-00dc-11eb-8966-f589ddaf289f",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "fireeyenxalerturl",
        "height": 53,
        "id": "5df7a5b0-00df-11eb-8966-f589ddaf289f",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "fireeyenxalertmalwarename",
        "height": 53,
        "id": "687cf9e0-00df-11eb-8966-f589ddaf289f",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "fireeyenxalerttargetip",
        "height": 53,
        "id": "9c0f7da0-00df-11eb-8966-f589ddaf289f",
        "index": 3,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "fireeyenxalerttargetmacaddress",
        "height": 53,
        "id": "a3d19320-00df-11eb-8966-f589ddaf289f",
        "index": 4,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "fireeyenxalertvictimip",
        "height": 53,
        "id": "acadcb30-00df-11eb-8966-f589ddaf289f",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "fireeyenxalertvictimmacaddress",
        "height": 53,
        "id": "b0a3bd80-00df-11eb-8966-f589ddaf289f",
        "index": 6,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "dropEffect": "move",
        "endCol": 4,
        "fieldId": "fireeyenxalertscversion",
        "height": 53,
        "id": "f4e5e960-00de-11eb-8966-f589ddaf289f",
        "index": 0,
        "listId": "caseinfoid-491ac0f0-e7ad-11ea-b9fb-69214b89606a",
        "sectionItemType": "field",
        "startCol": 2
       },
       {
        "dropEffect": "move",
        "endCol": 4,
        "fieldId": "fireeyenxalertaction",
        "height": 53,
        "id": "65aac710-00df-11eb-8966-f589ddaf289f",
        "index": 1,
        "listId": "caseinfoid-491ac0f0-e7ad-11ea-b9fb-69214b89606a",
        "sectionItemType": "field",
        "startCol": 2
       },
       {
        "endCol": 4,
        "fieldId": "fireeyenxalertid",
        "height": 53,
        "id": "9286b1e0-00df-11eb-8966-f589ddaf289f",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 2
       },
       {
        "endCol": 4,
        "fieldId": "fireeyenxalerttargetport",
        "height": 53,
        "id": "a1e29460-00df-11eb-8966-f589ddaf289f",
        "index": 3,
        "sectionItemType": "field",
        "startCol": 2
       },
       {
        "endCol": 4,
        "fieldId": "fireeyenxalertuuid",
        "height": 53,
        "id": "a7e14f00-00df-11eb-8966-f589ddaf289f",
        "index": 4,
        "sectionItemType": "field",
        "startCol": 2
       },
       {
        "endCol": 4,
        "fieldId": "fireeyenxalertvictimport",
        "height": 22,
        "id": "b2e80830-00df-11eb-8966-f589ddaf289f",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 2
       }
      ],
      "maxW": 3,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Alert Details",
      "static": false,
      "w": 2,
      "x": 1,
      "y": 0
     },
     {
      "displayType": "CARD",
      "h": 2,
      "hideItemTitleOnlyOne": true,
      "i": "caseinfoid-12642780-00e0-11eb-8966-f589ddaf289f",
      "items": [
       {
        "endCol": 2,
        "fieldId": "incident_attachment",
        "height": 53,
        "id": "125c5f50-00e0-11eb-8966-f589ddaf289f",
        "index": 0,
        "isVisible": true,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxW": 3,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Attachments",
      "static": false,
      "type": "",
      "w": 1,
      "x": 0,
      "y": 2
     },
     {
      "h": 2,
      "i": "caseinfoid-2a2145b0-00e0-11eb-8966-f589ddaf289f",
      "items": [

      ],
      "maxW": 3,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Work Plan",
      "static": false,
      "type": "workplan",
      "w": 1,
      "x": 0,
      "y": 4
     },
     {
      "h": 2,
      "i": "caseinfoid-37957c70-00e0-11eb-8966-f589ddaf289f",
      "items": [

      ],
      "maxW": 3,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Notes",
      "static": false,
      "type": "notes",
      "w": 1,
      "x": 2,
      "y": 4
     },
     {
      "h": 2,
      "i": "caseinfoid-453445a0-00e0-11eb-8966-f589ddaf289f",
      "items": [

      ],
      "maxW": 3,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Evidence",
      "static": false,
      "type": "evidence",
      "w": 1,
      "x": 2,
      "y": 6
     },
     {
      "h": 1,
      "i": "caseinfoid-61784b80-00e0-11eb-8966-f589ddaf289f",
      "items": [

      ],
      "maxW": 3,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Child Incidents",
      "static": false,
      "type": "childInv",
      "w": 1,
      "x": 2,
      "y": 8
     },
     {
      "h": 1,
      "i": "caseinfoid-70c8e360-00e0-11eb-8966-f589ddaf289f",
      "items": [

      ],
      "maxW": 3,
      "minH": 1,
      "minW": 1,
      "moved": false,
      "name": "Team Members",
      "static": false,
      "type": "team",
      "w": 1,
      "x": 2,
      "y": 9
     }
    ],
    "type": "custom"
   },
   {
    "id": "warRoom",
    "name": "War Room",
    "type": "warRoom"
   },
   {
    "id": "workPlan",
    "name": "Work Plan",
    "type": "workPlan"
   },
   {
    "id": "evidenceBoard",
    "name": "Evidence Board",
    "type": "evidenceBoard"
   },
   {
    "id": "relatedIncidents",
    "name": "Related Incidents",
    "type": "relatedIncidents"
   },
   {
    "id": "canvas",
    "name": "Canvas",
    "type": "canvas"
   }
  ]
 },
 "quickView": {
  "sections": [
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_type",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_severity",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_owner",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotstatus",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourcebrand",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourceinstance",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_playbookid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_phase",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_roles",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Basic Information",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_dbotcreated",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_occurred",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotduedate",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotmodified",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbottotaltime",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Timeline Information",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_fireeyenxalerttype",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertaction",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertmalwarename",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertscversion",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerttargetip",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerttargetmacaddress",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerttargetport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerturl",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertuuid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertvictimip",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertvictimmacaddress",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertvictimport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Alert Details",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_dbotprediction",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotpredictionprobability",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_destinationhostname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_destinationnetwork",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_destinationport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_detectionsla",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_devicehash",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_eventid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_eventtype",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_firstname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_investigationstage",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_lastname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_logsource",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_mobiledevicemodel",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_niststage",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_os",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_osversion",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_phonenumber",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_protocol",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_remediationsla",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sansstage",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourcenetwork",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourceport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourceusername",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_tenantname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_timetoassignment",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_urlsslverification",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Custom Fields",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_labels",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Labels",
    "query": null,
    "queryType": "",
    "readOnly": true,
    "sortValues": null,
    "type": "labels",
    "version": 0
   }
  ]
 },
 "mobile": {
  "sections": [
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_type",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_severity",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_owner",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotstatus",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourcebrand",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourceinstance",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_playbookid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_phase",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_roles",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Basic Information",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_dbotcreated",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_occurred",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotduedate",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotmodified",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbottotaltime",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Timeline Information",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_fireeyenxalerttype",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertaction",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertmalwarename",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertscversion",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerttargetip",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerttargetmacaddress",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerttargetport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalerturl",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertuuid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertvictimip",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertvictimmacaddress",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_fireeyenxalertvictimport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Alert Details",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_dbotprediction",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_dbotpredictionprobability",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_destinationhostname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_destinationnetwork",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_destinationport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_detectionsla",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_devicehash",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_eventid",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_eventtype",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_firstname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_investigationstage",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_lastname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_logsource",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_mobiledevicemodel",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_niststage",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_os",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_osversion",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_phonenumber",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_protocol",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_remediationsla",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sansstage",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourcenetwork",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourceport",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_sourceusername",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_tenantname",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_timetoassignment",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     },
     {
      "fieldId": "incident_urlsslverification",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Custom Fields",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "sortValues": null,
    "type": "",
    "version": 0
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_labels",
      "id": "",
      "isVisible": true,
      "modified": "0001-01-01T00:00:00Z",
      "sortValues": null,
      "version": 0
     }
    ],
    "id": "",
    "isVisible": true,
    "modified": "0001-01-01T00:00:00Z",
    "name": "Labels",
    "query": null,
    "queryType": "",
    "readOnly": true,
    "sortValues": null,
    "type": "labels",
    "version": 0
   }
  ]
 },
 "marketplaces": ["xsoar"]
}