Rubrik Polaris Radar
Rubrik Security Cloud Incident
Details
| ID | Rubrik Polaris Radar |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 18 sections
Case Details
| Field ID | Position |
|---|---|
| owner | Col 0-2, Height: 22 |
| dbotsource | Col 0-2, Height: 22 |
| type | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
Timeline Information
| Field ID | Position |
|---|---|
| occurred | Col 0-1, Height: 22 |
| dbotmodified | Col 0-1, Height: 22 |
| dbotduedate | Col 0-2, Height: 22 |
| dbotcreated | Col 1-2, Height: 22 |
| dbotclosed | Col 1-2, Height: 22 |
Rubrik Basic Information
| Field ID | Position |
|---|---|
| rubrikpolarisobjectname | Col 0-2, Height: 53 |
| rubrikpolarisobjectid | Col 0-2, Height: 53 |
| rubrikpolariscdmclustername | Col 0-2, Height: 53 |
| rubrikpolarisobjecttype | Col 0-2, Height: 53 |
| rubrikobjectlocation | Col 0-2, Height: 53 |
| rubrikpolarisactivityseriesid | Col 0-2, Height: 53 |
| rubrikpolarislastactivitystatus | Col 0-2, Height: 53 |
| incidentlink | Col 2-4, Height: 53 |
| rubrikpolarisstarttime | Col 2-4, Height: 53 |
| rubrikcdmclusterid | Col 2-4, Height: 53 |
| rubrikcdmclustername | Col 2-4, Height: 53 |
| rubrikcdmclusterlocation | Col 2-4, Height: 53 |
| rubrikpolarisclusterlocationpath | Col 2-4, Height: 53 |
| rubrikpolarisactivitytype | Col 2-4, Height: 53 |
Data Classification Hits
CDM Cluster Status
Files Added
Files Modified
Files Removed
Work Plan
Linked Incidents
Sensitive Files with Open Access Permissions
Total Number of Files with Sensitive Data
Indicators
Notes
Incident Files
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 22 |
| closereason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 22 |
Suspicious File List
| Field ID | Position |
|---|---|
| rubriksuspiciousfilelist | Col 0-4, Height: 106 |
Total Number of Suspicious Files
War Room 0 sections
No sections defined.
Rubrik Polaris 2 sections
Anomaly Detection Event Timeline
| Field ID | Position |
|---|---|
| rubrikpolarisanalysispipeline | Col 0-6, Height: 106 |
Data Classification
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.
{ "detailsV2": { "tabs": [ { "id": "summary", "name": "Legacy Summary", "type": "summary" }, { "id": "caseinfoid", "name": "Incident Info", "sections": [ { "displayType": "ROW", "h": 2, "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "owner", "height": 22, "id": "incident-owner-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotsource", "height": 22, "id": "incident-source-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "type", "height": 22, "id": "incident-type-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourcebrand", "height": 22, "id": "incident-sourceBrand-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourceinstance", "height": 22, "id": "incident-sourceInstance-field", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "severity", "height": 22, "id": "incident-severity-field", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "playbookid", "height": 22, "id": "incident-playbookId-field", "index": 5, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Case Details", "static": false, "w": 1, "x": 0, "y": 0 }, { "displayType": "CARD", "h": 2, "i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289", "items": [ { "endCol": 1, "fieldId": "occurred", "height": 22, "id": "incident-occurred-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 1, "fieldId": "dbotmodified", "height": 22, "id": "incident-modified-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotduedate", "height": 22, "id": "incident-dueDate-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotcreated", "height": 22, "id": "incident-created-field", "index": 0, "sectionItemType": "field", "startCol": 1 }, { "endCol": 2, "fieldId": "dbotclosed", "height": 22, "id": "incident-closed-field", "index": 1, "sectionItemType": "field", "startCol": 1 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Timeline Information", "static": false, "w": 1, "x": 0, "y": 6 }, { "displayType": "CARD", "h": 3, "hideName": false, "i": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05", "items": [ { "dropEffect": "move", "endCol": 2, "fieldId": "rubrikpolarisobjectname", "height": 53, "id": "fca80bf0-6fd9-11eb-befe-85443460d735", "index": 0, "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarisobjectid", "height": 53, "id": "0445a980-6fda-11eb-befe-85443460d735", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolariscdmclustername", "height": 53, "id": "056ff8b0-6fda-11eb-befe-85443460d735", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarisobjecttype", "height": 53, "id": "181f24e0-6fda-11eb-befe-85443460d735", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikobjectlocation", "height": 53, "id": "a2c14a60-85b4-11f1-bafa-f3703f9851d4", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarisactivityseriesid", "height": 53, "id": "3d547210-f9a1-11ef-98dc-ef869f4670b6", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarislastactivitystatus", "height": 53, "id": "55d3ced0-f9a1-11ef-98dc-ef869f4670b6", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 4, "fieldId": "incidentlink", "height": 53, "id": "f84a9ec0-7f4b-11f0-9017-992963622ec4", "index": 0, "sectionItemType": "field", "startCol": 2, "dropEffect": "move", "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05" }, { "endCol": 4, "fieldId": "rubrikpolarisstarttime", "height": 53, "id": "f8d44410-37bd-11ec-8878-41b30c8936ff", "index": 1, "sectionItemType": "field", "startCol": 2, "dropEffect": "move", "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05" }, { "endCol": 4, "fieldId": "rubrikcdmclusterid", "height": 53, "id": "62032d90-a44b-11eb-82ca-4d054531f5f7", "index": 2, "sectionItemType": "field", "startCol": 2, "dropEffect": "move", "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05" }, { "endCol": 4, "fieldId": "rubrikcdmclustername", "height": 53, "id": "f12222d0-a4ee-11eb-9bb3-6df13f2ef3ea", "index": 3, "sectionItemType": "field", "startCol": 2 }, { "endCol": 4, "fieldId": "rubrikcdmclusterlocation", "height": 53, "id": "6658a500-a44b-11eb-82ca-4d054531f5f7", "index": 4, "sectionItemType": "field", "startCol": 2 }, { "endCol": 4, "fieldId": "rubrikpolarisclusterlocationpath", "height": 53, "id": "07b02120-37be-11ec-8878-41b30c8936ff", "index": 5, "sectionItemType": "field", "startCol": 2 }, { "endCol": 4, "fieldId": "rubrikpolarisactivitytype", "height": 53, "id": "412c7c20-f9a1-11ef-98dc-ef869f4670b6", "index": 6, "sectionItemType": "field", "startCol": 2 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Rubrik Basic Information", "static": false, "w": 2, "x": 1, "y": 0 }, { "h": 1, "i": "caseinfoid-fafdf7c0-a255-11eb-86d3-ed6ff0cf2050", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Data Classification Hits", "query": "RubrikSonarTotalHits", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 4 }, { "h": 1, "i": "caseinfoid-2f160900-a6a5-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "CDM Cluster Status", "query": "RubrikCDMClusterConnectionState", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 2 }, { "h": 1, "i": "caseinfoid-e449ae90-a6a9-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Files Added", "query": "RubrikRadarFilesAdded", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 1, "y": 3 }, { "h": 1, "i": "caseinfoid-f0b3c850-a6a9-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Files Modified", "query": "RubrikRadarFilesModified", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 3 }, { "h": 1, "i": "caseinfoid-fb65d1d0-a6a9-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Files Removed", "query": "RubrikRadarFilesDeleted", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 1, "y": 4 }, { "h": 3, "i": "caseinfoid-f98cd270-a6b1-11eb-bada-87dc9a8c0b9b", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Work Plan", "static": false, "type": "workplan", "w": 2, "x": 1, "y": 7 }, { "h": 2, "i": "caseinfoid-0b443120-a6b2-11eb-bada-87dc9a8c0b9b", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Linked Incidents", "static": false, "type": "linkedIncidents", "w": 1, "x": 0, "y": 12 }, { "h": 1, "i": "caseinfoid-f72ff2b0-3f46-11ef-b346-cdbc4d18c742", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Sensitive Files with Open Access Permissions", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 3, "description": "", "query": "RubrikSonarOpenAccessFileHits", "queryType": "script" }, { "description": "", "h": 1, "i": "caseinfoid-1738c8c0-3f47-11ef-b346-cdbc4d18c742", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Total Number of Files with Sensitive Data", "query": "RubrikSonarFileHits", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 4 }, { "h": 2, "i": "caseinfoid-aa68ec80-5930-11ef-84f9-f1d4aee2db17", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Indicators", "query": "", "queryType": "input", "static": false, "type": "indicators", "w": 2, "x": 1, "y": 12 }, { "h": 2, "i": "caseinfoid-f1b18520-5930-11ef-84f9-f1d4aee2db17", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Notes", "static": false, "type": "notes", "w": 1, "x": 0, "y": 8 }, { "h": 2, "i": "caseinfoid-b692ce70-c809-11ef-b02b-91540fae8b93", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Incident Files", "query": { "categories": [ "attachments" ], "lastId": "", "pageSize": 100, "tags": [], "users": [] }, "queryType": "warRoomFilter", "static": false, "type": "invTimeline", "w": 2, "x": 1, "y": 10 }, { "displayType": "ROW", "h": 2, "hideName": false, "i": "caseinfoid-88875ed0-fa52-11ef-bb2f-17b30e867719", "items": [ { "endCol": 2, "fieldId": "dbotclosed", "height": 22, "id": "b8ff5c20-fa52-11ef-bb2f-17b30e867719", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closereason", "height": 22, "id": "bb136f10-fa52-11ef-bb2f-17b30e867719", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closenotes", "height": 22, "id": "bc4e3900-fa52-11ef-bb2f-17b30e867719", "index": 2, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Closing Information", "static": false, "w": 1, "x": 0, "y": 10 }, { "displayType": "ROW", "h": 2, "hideItemTitleOnlyOne": true, "hideName": false, "i": "caseinfoid-90593b6f-08f1-44af-a8de-2b5fc17d0f2e", "items": [ { "endCol": 4, "fieldId": "rubriksuspiciousfilelist", "height": 106, "id": "ab09e4c8-fab2-4765-baf9-d74fecf84373", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Suspicious File List", "static": false, "w": 2, "x": 1, "y": 5 }, { "description": "", "h": 1, "i": "caseinfoid-4c774e30-a40e-11f0-add7-f941fa334f23", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Total Number of Suspicious Files", "query": "RubrikSuspiciousFileCount", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 5 } ], "type": "custom" }, { "id": "warRoom", "name": "War Room", "type": "warRoom" }, { "hidden": false, "id": "rubrikPolaris", "name": "Rubrik Polaris", "sections": [ { "displayType": "ROW", "h": 3, "hideName": false, "i": "caseinfoid-rubrikPolaris-35620770-a14e-11eb-a966-5fbb5aa7e80a", "items": [ { "endCol": 6, "fieldId": "rubrikpolarisanalysispipeline", "height": 106, "id": "422e74f0-bf28-11eb-adf0-1dd6a5e74ad5", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Anomaly Detection Event Timeline", "static": false, "w": 3, "x": 0, "y": 0 }, { "h": 4, "i": "caseinfoid-rubrikPolaris-344948e0-9e37-11eb-ac95-f33fbce9c16e", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Data Classification", "query": "RubrikSonarSensitiveHits", "queryType": "script", "static": false, "type": "dynamic", "w": 3, "x": 0, "y": 3 } ], "type": "custom" }, { "id": "workPlan", "name": "Work Plan", "type": "workPlan" }, { "id": "evidenceBoard", "name": "Evidence Board", "type": "evidenceBoard" }, { "id": "relatedIncidents", "name": "Related Incidents", "type": "relatedIncidents" }, { "id": "canvas", "name": "Canvas", "type": "canvas" } ] }, "group": "incident", "id": "Rubrik Polaris Radar", "name": "Rubrik Polaris Radar", "system": false, "version": -1, "fromVersion": "6.0.0", "description": "", "marketplaces": [ "xsoar" ] }