FortiSIEM incident Layout
FortiSIEM Incident
Details
| ID | FortiSIEM incident Layout |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 13 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-1, Height: 53 |
| owner | Col 0-1, Height: 53 |
| severity | Col 0-1, Height: 53 |
| sourcebrand | Col 0-1, Height: 53 |
| sourceinstance | Col 0-1, Height: 53 |
Notes
Work Plan
Linked Incidents
Child Incidents
Evidence
Team Members
Timeline Information
| Field ID | Position |
|---|---|
| fortisiemincidentfirstseen | Col 0-1, Height: 53 |
| occurred | Col 0-1, Height: 53 |
| dbotmodified | Col 0-1, Height: 53 |
| dbotduedate | Col 0-2, Height: 53 |
| fortisiemincidentlastseen | Col 1-2, Height: 53 |
| dbotcreated | Col 1-2, Height: 53 |
| dbotclosed | Col 1-2, Height: 53 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 22 |
| closereason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 22 |
Investigation Data
| Field ID | Position |
|---|---|
| details | Col 0-2, Height: 22 |
Incident Entities
| Field ID | Position |
|---|---|
| sourceip | Col 0-1, Height: 53 |
| sourceport | Col 0-1, Height: 53 |
| sourcehostname | Col 0-1, Height: 53 |
| sourceusername | Col 0-1, Height: 53 |
| destinationip | Col 1-2, Height: 53 |
| destinationport | Col 1-2, Height: 53 |
| destinationhostname | Col 1-2, Height: 53 |
| fortisiemdestinationuser | Col 1-2, Height: 53 |
FortiSIEM Additional Info
| Field ID | Position |
|---|---|
| title | Col 0-2, Height: 53 |
| alertcategory | Col 0-1, Height: 53 |
| fortisiemincidentreportdevicename | Col 0-1, Height: 53 |
| fortisiemresolutionstatus | Col 0-2, Height: 53 |
| fortisiemincidentid | Col 0-1, Height: 53 |
| fortisiemattacktactics | Col 0-2, Height: 106 |
| fortisiemeventtype | Col 1-2, Height: 53 |
| fortisiemincidentreporterip | Col 1-2, Height: 53 |
| fortisiemstatus | Col 1-2, Height: 53 |
Indicators
FortiSIEM Events 1 section
FortiSIEM Events
| Field ID | Position |
|---|---|
| fortisiemevents | Col 0-6, Height: 106 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.