{
"detailsV2": {
"tabs": [
{
"id": "summary",
"name": "Legacy Summary",
"type": "summary"
},
{
"id": "caseinfoid",
"name": "Incident Info",
"sections": [
{
"displayType": "ROW",
"h": 2,
"i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
"isVisible": true,
"items": [
{
"endCol": 2,
"fieldId": "type",
"height": 22,
"id": "incident-type-field",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "severity",
"height": 22,
"id": "incident-severity-field",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "owner",
"height": 22,
"id": "incident-owner-field",
"index": 2,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "dbotsource",
"height": 22,
"id": "incident-source-field",
"index": 3,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "sourcebrand",
"height": 22,
"id": "incident-sourceBrand-field",
"index": 4,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "sourceinstance",
"height": 22,
"id": "incident-sourceInstance-field",
"index": 5,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "playbookid",
"height": 22,
"id": "incident-playbookId-field",
"index": 6,
"sectionItemType": "field",
"startCol": 0
}
],
"name": "Case Details",
"w": 1,
"x": 0,
"y": 0,
"maxW": 3
},
{
"h": 2,
"i": "caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
"name": "Notes",
"type": "notes",
"w": 1,
"x": 2,
"y": 0,
"maxW": 3
},
{
"displayType": "ROW",
"h": 2,
"i": "caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
"name": "Work Plan",
"type": "workplan",
"w": 1,
"x": 1,
"y": 0,
"maxW": 3
},
{
"displayType": "ROW",
"h": 2,
"i": "caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
"isVisible": true,
"name": "Linked Incidents",
"type": "linkedIncidents",
"w": 1,
"x": 1,
"y": 6,
"maxW": 3
},
{
"displayType": "ROW",
"h": 2,
"i": "caseinfoid-842632c0-98b1-11e9-97d7-ed26ef9e46c8",
"name": "Child Incidents",
"type": "childInv",
"w": 1,
"x": 2,
"y": 4,
"maxW": 3
},
{
"displayType": "ROW",
"h": 2,
"i": "caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0",
"name": "Evidence",
"type": "evidence",
"w": 1,
"x": 2,
"y": 2,
"maxW": 3
},
{
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
"name": "Team Members",
"type": "team",
"w": 1,
"x": 2,
"y": 6,
"maxW": 3
},
{
"displayType": "ROW",
"h": 2,
"i": "caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
"name": "Indicators",
"query": "",
"queryType": "input",
"type": "indicators",
"w": 2,
"x": 0,
"y": 4,
"maxW": 3
},
{
"displayType": "CARD",
"h": 2,
"i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
"items": [
{
"endCol": 1,
"fieldId": "occurred",
"height": 22,
"id": "incident-occurred-field",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 1,
"fieldId": "dbotmodified",
"height": 22,
"id": "incident-modified-field",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "dbotduedate",
"height": 22,
"id": "incident-dueDate-field",
"index": 2,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "dbotcreated",
"height": 22,
"id": "incident-created-field",
"index": 0,
"sectionItemType": "field",
"startCol": 1
},
{
"endCol": 2,
"fieldId": "dbotclosed",
"height": 22,
"id": "incident-closed-field",
"index": 1,
"sectionItemType": "field",
"startCol": 1
}
],
"name": "Timeline Information",
"w": 1,
"x": 0,
"y": 2,
"maxW": 3
},
{
"displayType": "ROW",
"h": 2,
"i": "caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
"isVisible": true,
"items": [
{
"endCol": 2,
"fieldId": "dbotclosed",
"height": 22,
"id": "incident-dbotClosed-field",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "closereason",
"height": 22,
"id": "incident-closeReason-field",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "closenotes",
"height": 22,
"id": "incident-closeNotes-field",
"index": 2,
"sectionItemType": "field",
"startCol": 0
}
],
"name": "Closing Information",
"w": 1,
"x": 0,
"y": 6,
"maxW": 3
},
{
"displayType": "CARD",
"h": 2,
"i": "caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
"isVisible": true,
"items": [
{
"endCol": 2,
"fieldId": "details",
"height": 22,
"id": "incident-details-field",
"index": 0,
"sectionItemType": "field",
"startCol": 0
}
],
"name": "Investigation Data",
"w": 1,
"x": 1,
"y": 2,
"maxW": 3
}
],
"type": "custom"
},
{
"hidden": false,
"id": "vewmjsl5lu",
"name": "Proofpoint TAP Message",
"sections": [
{
"displayType": "CARD",
"h": 5,
"hideName": false,
"i": "caseinfoid-vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"items": [
{
"endCol": 2,
"fieldId": "proofpointtaptype",
"height": 53,
"id": "55b22810-ab04-11eb-838e-0d868af172e9",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 1,
"fieldId": "proofpointtapid",
"height": 53,
"id": "029a60b0-ab05-11eb-838e-0d868af172e9",
"index": 1,
"listId": "vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 1,
"fieldId": "proofpointtapmessageid",
"height": 53,
"id": "0f518900-ab05-11eb-838e-0d868af172e9",
"index": 2,
"listId": "vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapsubject",
"height": 53,
"id": "2cf6a580-ab05-11eb-838e-0d868af172e9",
"index": 3,
"listId": "vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "proofpointtaplongsubject",
"height": 106,
"id": "5ea3f110-e64f-11ec-acc4-138e22b7c366",
"index": 4,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "proofpointtappolicies",
"height": 53,
"id": "26fd9030-ab05-11eb-838e-0d868af172e9",
"index": 5,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "proofpointtapquarantinefolder",
"height": 53,
"id": "284d41b0-ab05-11eb-838e-0d868af172e9",
"index": 6,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "proofpointtapquarantinerule",
"height": 53,
"id": "29121850-ab05-11eb-838e-0d868af172e9",
"index": 7,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapcluster",
"height": 53,
"id": "fe66a210-ab04-11eb-838e-0d868af172e9",
"index": 8,
"listId": "vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapexaminedby",
"height": 53,
"id": "0028c470-ab05-11eb-838e-0d868af172e9",
"index": 9,
"listId": "vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapguid",
"height": 53,
"id": "12635ce0-ab05-11eb-838e-0d868af172e9",
"index": 1,
"listId": "vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 1
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapmessagesize",
"height": 53,
"id": "0d78aa50-ab05-11eb-838e-0d868af172e9",
"index": 2,
"listId": "vewmjsl5lu-2c73af50-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 1
}
],
"maxW": 3,
"minH": 1,
"minW": 1,
"moved": false,
"name": "General Information",
"static": false,
"w": 1,
"x": 0,
"y": 0
},
{
"displayType": "CARD",
"h": 2,
"hideItemTitleOnlyOne": true,
"hideName": false,
"i": "caseinfoid-vewmjsl5lu-33849d40-ab04-11eb-838e-0d868af172e9",
"items": [
{
"dropEffect": "move",
"endCol": 4,
"fieldId": "proofpointtapthreatinfomap",
"height": 106,
"id": "489008f0-ab04-11eb-838e-0d868af172e9",
"index": 0,
"listId": "vewmjsl5lu-33849d40-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"minW": 2,
"moved": false,
"name": "Threat Info Map",
"static": false,
"w": 2,
"x": 1,
"y": 1
},
{
"displayType": "ROW",
"h": 2,
"hideItemTitleOnlyOne": true,
"hideName": false,
"i": "caseinfoid-vewmjsl5lu-34c9ee80-ab04-11eb-838e-0d868af172e9",
"items": [
{
"endCol": 4,
"fieldId": "proofpointtapmessageparts",
"height": 106,
"id": "845f9fb0-ae53-11eb-a8fe-5d08a15d268e",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 4,
"fieldId": "proofpointtaptmessageparts",
"height": 22,
"id": "3d02baa0-ab04-11eb-838e-0d868af172e9",
"index": 2,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"minW": 2,
"moved": false,
"name": "Message Parts",
"static": false,
"w": 2,
"x": 1,
"y": 3
},
{
"displayType": "CARD",
"h": 1,
"hideName": false,
"i": "caseinfoid-vewmjsl5lu-5a811540-ab04-11eb-838e-0d868af172e9",
"items": [
{
"dropEffect": "move",
"endCol": 1,
"fieldId": "proofpointtapspamscore",
"height": 53,
"id": "8fedb030-ab04-11eb-838e-0d868af172e9",
"index": 0,
"listId": "vewmjsl5lu-5a811540-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapmalwarescore",
"height": 53,
"id": "83f962b0-ab04-11eb-838e-0d868af172e9",
"index": 0,
"listId": "vewmjsl5lu-5a811540-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 1
},
{
"dropEffect": "move",
"endCol": 3,
"fieldId": "proofpointtapimposterscore",
"height": 53,
"id": "8000b140-ab04-11eb-838e-0d868af172e9",
"index": 1,
"listId": "vewmjsl5lu-5a811540-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 2
},
{
"dropEffect": "move",
"endCol": 4,
"fieldId": "proofpointtapphishingscore",
"height": 53,
"id": "8b7ce890-ab04-11eb-838e-0d868af172e9",
"index": 0,
"listId": "vewmjsl5lu-5a811540-ab04-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 3
}
],
"maxW": 3,
"minH": 1,
"minW": 2,
"moved": false,
"name": "Proofpoint TAP Scores",
"static": false,
"w": 2,
"x": 1,
"y": 0
},
{
"displayType": "CARD",
"h": 2,
"hideName": false,
"i": "caseinfoid-vewmjsl5lu-4945cef0-ab05-11eb-838e-0d868af172e9",
"items": [
{
"endCol": 2,
"fieldId": "proofpointtapsenderaddress",
"height": 53,
"id": "6c903b70-ab05-11eb-838e-0d868af172e9",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "proofpointtapsmtprecipient",
"height": 53,
"id": "6e4c4350-ab05-11eb-838e-0d868af172e9",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "proofpointtapreplytoaddress",
"height": 53,
"id": "6b9fc0f0-ab05-11eb-838e-0d868af172e9",
"index": 2,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "proofpointtapsmtpsender",
"height": 53,
"id": "6f596d90-ab05-11eb-838e-0d868af172e9",
"index": 3,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapheadersfrom",
"height": 53,
"id": "669662d0-ab05-11eb-838e-0d868af172e9",
"index": 4,
"listId": "vewmjsl5lu-4945cef0-ab05-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapheaderto",
"height": 53,
"id": "637573c0-ab05-11eb-838e-0d868af172e9",
"index": 5,
"listId": "vewmjsl5lu-4945cef0-ab05-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapheadercc",
"height": 53,
"id": "654c0880-ab05-11eb-838e-0d868af172e9",
"index": 6,
"listId": "vewmjsl5lu-4945cef0-ab05-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapheadersreplyto",
"height": 53,
"id": "67eb1d60-ab05-11eb-838e-0d868af172e9",
"index": 7,
"listId": "vewmjsl5lu-4945cef0-ab05-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "proofpointtapxmailer",
"height": 53,
"id": "43d1c820-ab05-11eb-838e-0d868af172e9",
"index": 8,
"listId": "vewmjsl5lu-4945cef0-ab05-11eb-838e-0d868af172e9",
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"minW": 1,
"moved": false,
"name": "Headers",
"static": false,
"w": 1,
"x": 0,
"y": 5
},
{
"h": 2,
"i": "caseinfoid-vewmjsl5lu-8f9c7030-ab36-11eb-8d94-1dcb215b3004",
"items": [],
"maxW": 3,
"minH": 1,
"minW": 1,
"moved": false,
"name": "Bad or Suspicious Indicators",
"query": "reputation:Bad or reputation:Suspicious",
"queryType": "input",
"static": false,
"type": "indicators",
"w": 2,
"x": 1,
"y": 5
}
],
"type": "custom"
},
{
"id": "warRoom",
"name": "War Room",
"type": "warRoom"
},
{
"id": "workPlan",
"name": "Work Plan",
"type": "workPlan"
},
{
"id": "evidenceBoard",
"name": "Evidence Board",
"type": "evidenceBoard"
},
{
"id": "relatedIncidents",
"name": "Related Incidents",
"type": "relatedIncidents"
},
{
"id": "canvas",
"name": "Canvas",
"type": "canvas"
}
]
},
"group": "incident",
"id": "Proofpoint TAP Message Layout",
"name": "Proofpoint TAP Message Layout",
"system": false,
"version": -1,
"fromVersion": "6.0.0",
"description": "",
"marketplaces": ["xsoar"]
}