Microsoft Sentinel - default layout
This is the default layout for Microsoft Sentinel incidents.
Microsoft Sentinel Incident
Details
| ID | Microsoft Sentinel - default layout |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.5.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 6 sections
Case Details
| Field ID | Position |
|---|---|
| microsoftsentinelincidentnumber | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| sourceid | Col 0-2, Height: 22 |
| resourceid | Col 0-2, Height: 22 |
| — | Col 0-2, Height: 44 |
| microsoftsentinelowner | Col 0-2, Height: 106 |
Timeline Information
| Field ID | Position |
|---|---|
| starttime | Col 0-1, Height: 53 |
| lastupdatetime | Col 0-1, Height: 53 |
| lastseen | Col 1-2, Height: 53 |
| sourcecreatetime | Col 1-2, Height: 53 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 22 |
| microsoftsentinelclassificationcomment | Col 0-2, Height: 22 |
| closereason | Col 0-2, Height: 22 |
| microsoftsentinelclassificationreason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 44 |
Incident Info
| Field ID | Position |
|---|---|
| name | Col 0-2, Height: 22 |
| description | Col 0-2, Height: 22 |
| sourcestatus | Col 0-2, Height: 22 |
| tactic | Col 0-2, Height: 22 |
| tags | Col 0-2, Height: 22 |
| microsoftsentinelalertcount | Col 0-2, Height: 22 |
| vendorproduct | Col 0-2, Height: 22 |
| tactic | Col 0-2, Height: 22 |
| microsoftsentinelruleid | Col 0-2, Height: 22 |
| incidentlink | Col 0-2, Height: 22 |
Microsoft Sentinel Comments
| Field ID | Position |
|---|---|
| — | Col 0-4, Height: 44 |
Microsoft Sentinel Comments
Investigation 3 sections
Microsoft Sentinel Relations
Microsoft Sentinel Entities
Microsoft Sentinel Alerts
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.