Malware Incident V2
Malware Core Incident
Details
| ID | Malware Incident V2 |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 11 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| dbotsource | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
| vendorid | Col 0-2, Height: 22 |
| vendorproduct | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
Notes
Work Plan
Linked Incidents
Child Incidents
Team Members
Timeline Information
| Field ID | Position |
|---|---|
| occurred | Col 0-1, Height: 55 |
| dbotmodified | Col 0-1, Height: 55 |
| dbotduedate | Col 0-1, Height: 55 |
| dbotcreated | Col 1-2, Height: 55 |
| dbotclosed | Col 1-2, Height: 55 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 24 |
| closereason | Col 0-2, Height: 24 |
| closenotes | Col 0-2, Height: 24 |
Source Details
| Field ID | Position |
|---|---|
| users | Col 0-2, Height: 22 |
| src | Col 0-2, Height: 22 |
| hostname | Col 0-2, Height: 22 |
| srcntdomain | Col 0-2, Height: 22 |
| isolated | Col 0-2, Height: 22 |
| srcos | Col 0-2, Height: 22 |
File Attributes
| Field ID | Position |
|---|---|
| filenames | Col 0-2, Height: 22 |
| filesize | Col 0-2, Height: 22 |
| filesha256 | Col 0-2, Height: 22 |
| filesha1 | Col 0-2, Height: 22 |
| filemd5 | Col 0-2, Height: 22 |
| filepaths | Col 0-2, Height: 22 |
| signature | Col 0-2, Height: 22 |
Threat Hunting Results
| Field ID | Position |
|---|---|
| hostnames | Col 0-2, Height: 22 |
| detectedips | Col 0-2, Height: 22 |
| detecteduser | Col 0-2, Height: 22 |
Investigation 5 sections
Malware Details
Malicious File details.
| Field ID | Position |
|---|---|
| cmd | Col 0-2, Height: 22 |
| scenario | Col 0-2, Height: 22 |
| objective | Col 0-2, Height: 22 |
| tactic | Col 0-2, Height: 22 |
| tacticid | Col 0-2, Height: 22 |
| technique | Col 0-2, Height: 22 |
| techniqueid | Col 0-2, Height: 22 |
| displayname | Col 0-2, Height: 22 |
| description | Col 0-2, Height: 22 |
Indicators
Forensics
Related malicious files that are found during the investigation.
Endpoint details
| Field ID | Position |
|---|---|
| endpoint | Col 0-4, Height: 106 |
Investigation Report
Similar Incidents 1 section
Similar Incidents
| Field ID | Position |
|---|---|
| similarincidentsdbot | Col 0-6, Height: 106 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.