Gatewatcher Incident Layout
Gatewatcher AionIQ Incident
Details
| ID | Gatewatcher Incident Layout |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.5.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 28 sections
Quick info
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 53 |
| gatewatchereventmodule | Col 0-2, Height: 53 |
| severity | Col 0-2, Height: 53 |
| gatewatcherflowid | Col 0-2, Height: 53 |
| sourceip | Col 0-2, Height: 53 |
| sourceport | Col 0-2, Height: 53 |
| sourcemacaddress | Col 0-2, Height: 53 |
| destinationip | Col 0-2, Height: 53 |
| destinationport | Col 0-2, Height: 53 |
| destinationmacaddress | Col 0-2, Height: 53 |
| protocol | Col 0-2, Height: 53 |
| gatewatchernetworktransport | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 53 |
| sourceinstance | Col 0-2, Height: 53 |
Timeline Information
| Field ID | Position |
|---|---|
| occurred | Col 0-1, Height: 53 |
| dbotmodified | Col 0-1, Height: 53 |
| dbotduedate | Col 0-2, Height: 53 |
| dbotcreated | Col 1-2, Height: 53 |
| dbotclosed | Col 1-2, Height: 53 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 22 |
| closereason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 44 |
Gatewatcher equipment
| Field ID | Position |
|---|---|
| gatewatchergcap | Col 0-2, Height: 53 |
| gatewatchergcapinterface | Col 0-2, Height: 53 |
| gatewatchergcenter | Col 0-2, Height: 53 |
Raw Event
| Field ID | Position |
|---|---|
| gatewatcherrawevent | Col 0-2, Height: 22 |
file
| Field ID | Position |
|---|---|
| gatewatcherfilename | Col 0-2, Height: 53 |
| gatewatcherfilemagic | Col 0-2, Height: 53 |
| gatewatcherfilehash | Col 0-2, Height: 53 |
http
| Field ID | Position |
|---|---|
| gatewatcherhttpaccept | Col 0-2, Height: 53 |
| gatewatcherhttpdate | Col 0-2, Height: 53 |
| gatewatcherhttphostname | Col 0-2, Height: 53 |
| gatewatcherhttphttprefer | Col 0-2, Height: 53 |
| gatewatcherhttphttp2 | Col 0-2, Height: 53 |
| gatewatcherhttplastmodified | Col 0-2, Height: 53 |
| gatewatcherhttprequestmethod | Col 0-2, Height: 53 |
| gatewatcherhttprequestmimetype | Col 0-2, Height: 53 |
| gatewatcherhttpresponsemimetype | Col 0-2, Height: 53 |
| gatewatcherhttpresponsestatus | Col 0-2, Height: 53 |
| gatewatcherhttpversion | Col 0-2, Height: 53 |
dns
| Field ID | Position |
|---|---|
| gatewatcherdnsanswers | Col 0-2, Height: 53 |
| gatewatcherdnsauthorities | Col 0-2, Height: 53 |
| gatewatcherdnsresponsecode | Col 0-2, Height: 53 |
| gatewatcherdnstype | Col 0-2, Height: 53 |
smb
| Field ID | Position |
|---|---|
| gatewatchersmbcommand | Col 0-2, Height: 53 |
| gatewatchersmbdialect | Col 0-2, Height: 53 |
| gatewatchersmbfilename | Col 0-2, Height: 53 |
| gatewatchersmbfuid | Col 0-2, Height: 53 |
| gatewatchersmbid | Col 0-2, Height: 53 |
| gatewatchersmbsessionid | Col 0-2, Height: 53 |
| gatewatchersmbshare | Col 0-2, Height: 53 |
| gatewatchersmbstatus | Col 0-2, Height: 53 |
| gatewatchersmbstatuscode | Col 0-2, Height: 53 |
| gatewatchersmbtreeid | Col 0-2, Height: 53 |
http2
| Field ID | Position |
|---|---|
| gatewatcherhttp2httpmethod | Col 0-2, Height: 53 |
| gatewatcherhttp2httpuseragent | Col 0-2, Height: 53 |
| gatewatcherhttphttp2 | Col 0-2, Height: 53 |
| gatewatcherhttp2length | Col 0-2, Height: 53 |
| gatewatcherhttp2requestheaders | Col 0-2, Height: 53 |
| gatewatcherhttp2responseheaders | Col 0-2, Height: 53 |
| gatewatcherhttp2status | Col 0-2, Height: 53 |
| gatewatcherhttp2url | Col 0-2, Height: 53 |
| gatewatcherhttp2version | Col 0-2, Height: 53 |
tls
| Field ID | Position |
|---|---|
| gatewatchertlsclient | Col 0-2, Height: 53 |
| gatewatchertlsja3 | Col 0-2, Height: 53 |
| gatewatchertlsja3s | Col 0-2, Height: 53 |
| gatewatchertlsserial | Col 0-2, Height: 53 |
| gatewatchertlsserver | Col 0-2, Height: 53 |
| gatewatchertlssni | Col 0-2, Height: 53 |
| gatewatchertlsversion | Col 0-2, Height: 53 |
smtp
| Field ID | Position |
|---|---|
| gatewatchersmtphelo | Col 0-2, Height: 53 |
| gatewatchersmtpmailfrom | Col 0-2, Height: 53 |
| gatewatchersmtprcptto | Col 0-2, Height: 53 |
nfs
| Field ID | Position |
|---|---|
| gatewatchernfsfiletx | Col 0-2, Height: 53 |
| gatewatchernfsfilename | Col 0-2, Height: 53 |
| gatewatchernfshhash | Col 0-2, Height: 53 |
| gatewatchernfsid | Col 0-2, Height: 53 |
| gatewatchernfsprocedure | Col 0-2, Height: 53 |
| gatewatchernfsstatus | Col 0-2, Height: 53 |
| gatewatchernfstype | Col 0-2, Height: 53 |
| gatewatchernfsversion | Col 0-2, Height: 53 |
ftp
| Field ID | Position |
|---|---|
| gatewatcherftpcommand | Col 0-2, Height: 53 |
| gatewatcherftpcompletioncode | Col 0-2, Height: 53 |
| gatewatcherftpdynamicport | Col 0-2, Height: 53 |
| gatewatcherftpreply | Col 0-2, Height: 53 |
| gatewatcherftpreplyreceived | Col 0-2, Height: 53 |
| gatewatcherftpreplytruncated | Col 0-2, Height: 53 |
tftp
| Field ID | Position |
|---|---|
| gatewatchertftpfile | Col 0-2, Height: 53 |
| gatewatchertftpmode | Col 0-2, Height: 53 |
| gatewatchertftppacket | Col 0-2, Height: 22 |
ssh
| Field ID | Position |
|---|---|
| gatewatchersshclient | Col 0-2, Height: 53 |
| gatewatchersshserver | Col 0-2, Height: 22 |
krb
| Field ID | Position |
|---|---|
| gatewatcherkrbcname | Col 0-2, Height: 53 |
| gatewatcherkrbencryption | Col 0-2, Height: 53 |
| gatewatcherkrbmsgtype | Col 0-2, Height: 53 |
| gatewatcherkrbrealm | Col 0-2, Height: 53 |
| gatewatcherkrbsname | Col 0-2, Height: 53 |
| gatewatcherkrbweakencryption | Col 0-2, Height: 53 |
dhcp
| Field ID | Position |
|---|---|
| gatewatcherdhcpassignedip | Col 0-2, Height: 53 |
| gatewatcherdhcpclientip | Col 0-2, Height: 53 |
| gatewatcherdhcpclientmac | Col 0-2, Height: 53 |
| gatewatcherdhcpdhcptype | Col 0-2, Height: 53 |
| gatewatcherdhcpdnsservers | Col 0-2, Height: 53 |
| gatewatcherdhcphostname | Col 0-2, Height: 53 |
| gatewatcherdhcpid | Col 0-2, Height: 53 |
| gatewatcherdhcpleasetime | Col 0-2, Height: 53 |
| gatewatcherdhcpnextserverip | Col 0-2, Height: 53 |
| gatewatcherdhcprelayip | Col 0-2, Height: 53 |
| gatewatcherdhcprouters | Col 0-2, Height: 53 |
| gatewatcherdhcpsubnetmask | Col 0-2, Height: 53 |
| gatewatcherdhcptype | Col 0-2, Height: 53 |
snmp
| Field ID | Position |
|---|---|
| gatewatchersnmpcomm | Col 0-2, Height: 53 |
| gatewatchersnmppdutype | Col 0-2, Height: 53 |
| gatewatchersnmpvars | Col 0-2, Height: 53 |
| gatewatchersnmpversion | Col 0-2, Height: 22 |
ikev2
| Field ID | Position |
|---|---|
| gatewatcherikev2algauth | Col 0-2, Height: 53 |
| gatewatcherikev2algdh | Col 0-2, Height: 53 |
| gatewatcherikev2algenc | Col 0-2, Height: 53 |
| gatewatcherikev2algperf | Col 0-2, Height: 53 |
| gatewatcherikev2errors | Col 0-2, Height: 53 |
| gatewatcherikev2esn | Col 0-2, Height: 53 |
| gatewatcherikev2exchangetype | Col 0-2, Height: 53 |
| gatewatcherikev2initspi | Col 0-2, Height: 53 |
| gatewatcherikev2messageid | Col 0-2, Height: 53 |
| gatewatcherikev2notify | Col 0-2, Height: 53 |
| gatewatcherikev2payload | Col 0-2, Height: 53 |
| gatewatcherikev2respspi | Col 0-2, Height: 53 |
| gatewatcherikev2role | Col 0-2, Height: 53 |
| gatewatcherikev2versionmajor | Col 0-2, Height: 53 |
| gatewatcherikev2versionminor | Col 0-2, Height: 53 |
rfb
| Field ID | Position |
|---|---|
| gatewatcherrfbauthentication | Col 0-2, Height: 53 |
| gatewatcherrfbclientprotocolversion | Col 0-2, Height: 53 |
| gatewatcherrfbserverprotocolversion | Col 0-2, Height: 53 |
| gatewatcherrfbserversecurityfailurereason | Col 0-2, Height: 53 |
rdp
| Field ID | Position |
|---|---|
| gatewatcherrdpchannels | Col 0-2, Height: 53 |
| gatewatcherrdpclient | Col 0-2, Height: 53 |
| gatewatcherrdpeventtype | Col 0-2, Height: 53 |
| gatewatcherrdptxid | Col 0-2, Height: 53 |
sip
| Field ID | Position |
|---|---|
| gatewatchersipcode | Col 0-2, Height: 53 |
| gatewatchersipreason | Col 0-2, Height: 53 |
| gatewatchersipresponseline | Col 0-2, Height: 53 |
| gatewatchersipversion | Col 0-2, Height: 53 |
dnp3
| Field ID | Position |
|---|---|
| gatewatcherdnp3application | Col 0-2, Height: 53 |
| gatewatcherdnp3control | Col 0-2, Height: 53 |
| gatewatcherdnp3dst | Col 0-2, Height: 53 |
| gatewatcherdnp3iin | Col 0-2, Height: 53 |
| gatewatcherdnp3src | Col 0-2, Height: 53 |
| gatewatcherdnp3type | Col 0-2, Height: 53 |
dcerpc
| Field ID | Position |
|---|---|
| gatewatcherdcerpccallid | Col 0-2, Height: 53 |
| gatewatcherdcerpcreq | Col 0-2, Height: 53 |
| gatewatcherdcerpcrequest | Col 0-2, Height: 53 |
| gatewatcherdcerpcres | Col 0-2, Height: 53 |
| gatewatcherdcerpcresponse | Col 0-2, Height: 53 |
| gatewatcherdcerpcrpcversion | Col 0-2, Height: 22 |
mqtt
| Field ID | Position |
|---|---|
| gatewatchermqttconnack | Col 0-2, Height: 53 |
nba
| Field ID | Position |
|---|---|
| gatewatchernbaaction | Col 0-2, Height: 53 |
| gatewatchernbacategory | Col 0-2, Height: 53 |
| gatewatchernbagid | Col 0-2, Height: 53 |
| gatewatchernbametadata | Col 0-2, Height: 53 |
| gatewatchernbapacket | Col 0-2, Height: 53 |
| gatewatchernbapayload | Col 0-2, Height: 53 |
| gatewatchernbapayloadprintable | Col 0-2, Height: 53 |
| gatewatchernbarev | Col 0-2, Height: 53 |
| gatewatchernbasignature | Col 0-2, Height: 53 |
| gatewatchernbasignatureid | Col 0-2, Height: 53 |
| gatewatchernbastream | Col 0-2, Height: 22 |
Indicators
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.