Rapid7 ThreatCommand - Layout

Layout for Rapid7 ThreatCommand

Rapid7 - Threat Command (IntSights) Incident

Details

IDRapid7 ThreatCommand - Layout
Groupincident
Version-1
From Version6.8.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 11 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
playbookid Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 22
dbotmodified Col 0-1, Height: 22
dbotduedate Col 0-2, Height: 22
dbotcreated Col 1-2, Height: 22
dbotclosed Col 1-2, Height: 22

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Investigation Data

Field IDPosition
details Col 0-2, Height: 22
Threat Command Alert Info 7 sections

Alert Details

Field IDPosition
alertid Col 0-2, Height: 53
occurred Col 0-2, Height: 53
lastupdatetime Col 0-2, Height: 53
eventtype Col 0-2, Height: 53
subtype Col 0-2, Height: 53
severity Col 0-2, Height: 53
title Col 0-2, Height: 53
description Col 0-2, Height: 53
rapid7threatcommandtags Col 0-2, Height: 53

Alert Source Details

Field IDPosition
rapid7threatcommandsourcetype Col 0-2, Height: 53
rapid7threatcommandsourcenetworktype Col 0-2, Height: 53
rapid7threatcommandsourceemail Col 0-2, Height: 53
rapid7threatcommandsourceurl Col 0-2, Height: 53
rapid7threatcommandsourcedate Col 0-2, Height: 53

Alert Status

Field IDPosition
rapid7threatcommandstatus Col 0-2, Height: 53
externalseverity Col 0-2, Height: 53
rapid7threatcommandtakedownstatus Col 0-2, Height: 53

Alert CSV

Field IDPosition
rapid7threatcommandcsv Col 0-6, Height: 106

ThreatCommand IOCs

Field IDPosition
rapid7threatcommandrelatediocs Col 0-2, Height: 53

Extracted Indicators

Incident Files

War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.