Rapid Breach Response
Rapid Breach Response Incident
Details
| ID | Rapid Breach Response |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 12 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
Linked Incidents
IP Indicators
Playbook Description
| Field ID | Position |
|---|---|
| playbookdescription | Col 0-2, Height: 106 |
URL Indicators
File Indicators
Notes
Signature Files
Source Of Indicators
| Field ID | Position |
|---|---|
| sourceofindicators | Col 0-2, Height: 22 |
CVE Indicators
Domain Indicators
Total Indicators
IR Procedures 8 sections
Number of Completed Hunting Tasks
Number of Completed Remediation Tasks
Number of Completed Mitigation Tasks
Number of Completed Eradication Tasks
Number of Total Tasks
Number of Remaining Tasks
Number of Completed Tasks
IR Tasks Tracker
Hunting Results 3 sections
SIEM Results
Panorama & Cortex Data Lake Results
Threat Hunting Results
Unified fields for the results of PANW, Splunk and QRadar.
| Field ID | Position |
|---|---|
| detectedusers | Col 0-2, Height: 22 |
| detectedendpoints | Col 0-2, Height: 22 |
| detectedinternalips | Col 0-2, Height: 22 |
| detectedexternalips | Col 0-2, Height: 22 |
| detectedexternalhosts | Col 0-2, Height: 22 |
| detectedinternalhosts | Col 0-2, Height: 22 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.
New tab 0 sections
No sections defined.