Identity Analytics Alerts
Core Incident
Details
| ID | Identity Analytics Alerts |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.10.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Alert Overview 7 sections
Alert Details
| Field ID | Position |
|---|---|
| details | Col 0-2, Height: 52 |
| timestamp | Col 0-2, Height: 26 |
| type | Col 0-2, Height: 26 |
| playbookid | Col 0-2, Height: 26 |
| severity | Col 0-2, Height: 26 |
| sourcebrand | Col 0-2, Height: 26 |
| tags | Col 0-2, Height: 26 |
| sourceip | Col 0-2, Height: 26 |
| mitreattcktactic | Col 0-2, Height: 26 |
| mitreattcktechnique | Col 0-2, Height: 26 |
Work Plan
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 26 |
| closereason | Col 0-2, Height: 26 |
| closenotes | Col 0-2, Height: 52 |
Indicators Handling
| Field ID | Position |
|---|---|
| — | Col 0-2, Height: 44 |
| — | Col 0-2, Height: 44 |
Analytics Prevalence Check
| Field ID | Position |
|---|---|
| — | Col 0-2, Height: 44 |
| — | Col 0-2, Height: 44 |
Identity Details
| Field ID | Position |
|---|---|
| username | Col 0-2, Height: 26 |
| samaccountname | Col 0-2, Height: 26 |
| accountstatus | Col 0-2, Height: 26 |
| Col 0-2, Height: 26 | |
| accountmemberof | Col 0-2, Height: 26 |
| cloudaccountid | Col 0-2, Height: 26 |
| accountid | Col 0-2, Height: 26 |
| manageremailaddress | Col 0-2, Height: 26 |
Response Actions
| Field ID | Position |
|---|---|
| — | Col 0-2, Height: 44 |
| — | Col 0-2, Height: 44 |
| — | Col 0-2, Height: 44 |
| — | Col 0-2, Height: 44 |
Technical Information 5 sections
Mapped Fields
Found Related Alerts
Additional Found alerts by Mitre tactics related to the user.
| Field ID | Position |
|---|---|
| alertsearchresults | Col 0-6, Height: 106 |
Investigation Results
| Field ID | Position |
|---|---|
| numberoffoundrelatedalerts | Col 0-2, Height: 53 |
| failedlogonevents | Col 0-2, Height: 53 |
| userrisklevel | Col 0-2, Height: 53 |
Investigation Verdict
Malicious or Suspicious Indicators
Investigation Tools 6 sections
Data Formats
| Field ID | Position |
|---|---|
| — | Col 0-1, Height: 44 |
| — | Col 0-1, Height: 44 |
| — | Col 1-2, Height: 44 |
| — | Col 1-2, Height: 44 |
En/Decoding
| Field ID | Position |
|---|---|
| — | Col 0-1, Height: 44 |
| — | Col 1-2, Height: 44 |
File Analysis
| Field ID | Position |
|---|---|
| — | Col 0-1, Height: 44 |
Network Utils
| Field ID | Position |
|---|---|
| — | Col 0-1, Height: 44 |
| — | Col 0-1, Height: 44 |
| — | Col 1-2, Height: 44 |
| — | Col 1-2, Height: 44 |
Results
When you click a button in this tab - the execution results will be displayed here. To clear this table click “clear results“.
Clear Results
Clear the results table
| Field ID | Position |
|---|---|
| — | Col 2-4, Height: 44 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Canvas 0 sections
No sections defined.