{
"description": "Malware Indicator Layout",
"edit": {
"sections": [
{
"description": "",
"fields": [
{
"fieldId": "indicator_value",
"isVisible": true
},
{
"fieldId": "indicator_indicatortype",
"isVisible": true
},
{
"fieldId": "indicator_score",
"isVisible": true
},
{
"fieldId": "indicator_expiration",
"isVisible": true
},
{
"fieldId": "indicator_comment",
"isVisible": true
},
{
"fieldId": "indicator_investigationids",
"isVisible": true
}
],
"isVisible": true,
"name": "Basic Information",
"query": null,
"queryType": "",
"readOnly": false,
"type": "basicInformationSection"
},
{
"description": "",
"fields": [
{
"fieldId": "indicator_communitynotes",
"isVisible": true
},
{
"fieldId": "indicator_description",
"isVisible": true
},
{
"fieldId": "indicator_stixid",
"isVisible": true
},
{
"fieldId": "indicator_tags",
"isVisible": true
},
{
"fieldId": "indicator_trafficlightprotocol",
"isVisible": true
}
],
"isVisible": true,
"name": "Custom fields - core",
"query": null,
"queryType": "",
"readOnly": false,
"type": ""
},
{
"description": "",
"fields": [
{
"fieldId": "indicator_aliases",
"isVisible": true
},
{
"fieldId": "indicator_ismalwarefamily",
"isVisible": true
},
{
"fieldId": "indicator_malwaretypes",
"isVisible": true
},
{
"fieldId": "indicator_operatingsystemrefs",
"isVisible": true
}
],
"isVisible": true,
"name": "Custom fields - unique",
"query": null,
"queryType": "",
"readOnly": false,
"type": ""
}
]
},
"group": "indicator",
"id": "STIX Malware",
"indicatorsDetails": {
"tabs": [
{
"hidden": false,
"id": "egsrf6ixwu",
"name": "Summary",
"sections": [
{
"displayType": "ROW",
"h": 3,
"hideName": false,
"i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-872f6040-7e82-11ec-ac42-5945e7ba8f6d",
"items": [
{
"endCol": 2,
"fieldId": "timestamp",
"height": 22,
"id": "41120bc0-7e83-11ec-ac42-5945e7ba8f6d",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "modified",
"height": 22,
"id": "50036ca0-7e83-11ec-ac42-5945e7ba8f6d",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "stixid",
"height": 22,
"id": "597e7cc0-7e83-11ec-ac42-5945e7ba8f6d",
"index": 2,
"listId": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-872f6040-7e82-11ec-ac42-5945e7ba8f6d",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "aliases",
"height": 22,
"id": "470f3fc0-7e83-11ec-ac42-5945e7ba8f6d",
"index": 3,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "ismalwarefamily",
"height": 22,
"id": "645b8de0-7e83-11ec-ac42-5945e7ba8f6d",
"index": 4,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "malwaretypes",
"height": 22,
"id": "6c3a2c10-7e83-11ec-ac42-5945e7ba8f6d",
"index": 5,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "capabilities",
"height": 22,
"id": "8b3f26b0-7e83-11ec-ac42-5945e7ba8f6d",
"index": 6,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "operatingsystemrefs",
"height": 22,
"id": "7831fc00-7e83-11ec-ac42-5945e7ba8f6d",
"index": 7,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "implementationlanguages",
"height": 22,
"id": "826c1660-7e83-11ec-ac42-5945e7ba8f6d",
"index": 8,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "architecture",
"height": 22,
"id": "8786b290-7e83-11ec-ac42-5945e7ba8f6d",
"index": 9,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "trafficlightprotocol",
"height": 22,
"id": "1a4c65c0-7e84-11ec-ac42-5945e7ba8f6d",
"index": 11,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "tags",
"height": 22,
"id": "97d4e450-7e83-11ec-ac42-5945e7ba8f6d",
"index": 12,
"sectionItemType": "field",
"startCol": 0
},
{
"args": {
"field": {
"simple": "tags"
}
},
"endCol": 1,
"fieldId": "",
"height": 44,
"id": "9bda3ff0-7e83-11ec-ac42-5945e7ba8f6d",
"index": 12,
"name": "Add tag",
"scriptId": "Builtin|||appendIndicatorField",
"sectionItemType": "button",
"startCol": 0
},
{
"args": {},
"buttonClass": "secondary",
"endCol": 2,
"fieldId": "",
"height": 44,
"id": "48587360-350c-11ee-9da7-693d42899c2b",
"index": 13,
"name": "Execute Malware hunt",
"scriptId": "HuntingFromIndicatorLayout",
"sectionItemType": "button",
"startCol": 0
},
{
"args": {
"field": {
"simple": "tags"
}
},
"dropEffect": "move",
"endCol": 2,
"fieldId": "",
"height": 44,
"id": "9e9e9010-7e83-11ec-ac42-5945e7ba8f6d",
"index": 12,
"listId": "uh0izo8oxy-872f6040-7e82-11ec-ac42-5945e7ba8f6d",
"name": "Remove tag",
"scriptId": "Builtin|||removeIndicatorField",
"sectionItemType": "button",
"startCol": 1
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Malware Details",
"static": false,
"w": 1,
"x": 1,
"y": 0
},
{
"displayType": "ROW",
"h": 3,
"hideItemTitleOnlyOne": true,
"hideName": false,
"i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-8802b5d0-7e82-11ec-ac42-5945e7ba8f6d",
"items": [
{
"endCol": 2,
"fieldId": "description",
"height": 106,
"id": "6ecf2770-7e86-11ec-ac42-5945e7ba8f6d",
"index": 0,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Description",
"static": false,
"w": 1,
"x": 0,
"y": 0
},
{
"h": 3,
"i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-8b63bb20-7e82-11ec-ac42-5945e7ba8f6d",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Related Incidents",
"static": false,
"type": "relatedIncidents",
"w": 3,
"x": 0,
"y": 6
},
{
"h": 3,
"i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-8e2dfeb0-7e82-11ec-ac42-5945e7ba8f6d",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Relationships",
"static": false,
"type": "relationshipsTable",
"w": 2,
"x": 0,
"y": 3
},
{
"h": 3,
"i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-983b63c0-7e82-11ec-ac42-5945e7ba8f6d",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Comments",
"static": false,
"type": "comments",
"w": 1,
"x": 2,
"y": 3
},
{
"h": 3,
"i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9aa55ee0-7e82-11ec-ac42-5945e7ba8f6d",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Timeline",
"static": false,
"type": "indicatorTimeline",
"w": 1,
"x": 2,
"y": 0
}
],
"type": "custom"
},
{
"hidden": false,
"id": "yu4gnpwkgq",
"name": "Publications and Notes",
"sections": [
{
"displayType": "ROW",
"h": 8,
"hideItemTitleOnlyOne": false,
"hideName": true,
"i": "yu4gnpwkgq-pcs9inogeh-b35b6cf0-7e8b-11ec-897f-8beae8d0977c",
"items": [
{
"endCol": 6,
"fieldId": "publications",
"height": 106,
"id": "be49bc20-7e8b-11ec-897f-8beae8d0977c",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 6,
"fieldId": "communitynotes",
"height": 106,
"id": "e8665fe0-7e8b-11ec-897f-8beae8d0977c",
"index": 1,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Publications",
"static": false,
"w": 3,
"x": 0,
"y": 0
}
],
"type": "custom"
},
{
"id": "canvas",
"name": "Canvas",
"type": "canvas",
"hidden": false
}
]
},
"indicatorsQuickView": {
"tabs": [
{
"hidden": false,
"id": "fgs8qszuj0",
"name": "Info",
"sections": [
{
"displayType": "ROW",
"h": 3,
"hideName": false,
"i": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc",
"items": [
{
"endCol": 2,
"fieldId": "timestamp",
"height": 22,
"id": "5db9c2a0-8a4e-11ec-a1ef-6369524b39c7",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "modified",
"height": 22,
"id": "79b71aa0-b30a-11eb-941c-e725acf1fbbc",
"index": 1,
"listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "stixid",
"height": 22,
"id": "5d54b750-b30a-11eb-941c-e725acf1fbbc",
"index": 2,
"listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "aliases",
"height": 22,
"id": "637bba70-b30a-11eb-941c-e725acf1fbbc",
"index": 3,
"listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "ismalwarefamily",
"height": 22,
"id": "5f1f6530-b30a-11eb-941c-e725acf1fbbc",
"index": 4,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "malwaretypes",
"height": 22,
"id": "5fe09250-b30a-11eb-941c-e725acf1fbbc",
"index": 5,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "capabilities",
"height": 22,
"id": "73fbf8b0-b30a-11eb-941c-e725acf1fbbc",
"index": 6,
"listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "operatingsystemrefs",
"height": 22,
"id": "6dc209d0-b30a-11eb-941c-e725acf1fbbc",
"index": 7,
"listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "implementationlanguages",
"height": 22,
"id": "76806190-8a4e-11ec-a1ef-6369524b39c7",
"index": 8,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "architecture",
"height": 22,
"id": "6f6fb9d0-b30a-11eb-941c-e725acf1fbbc",
"index": 9,
"listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "trafficlightprotocol",
"height": 22,
"id": "97fae820-b30a-11eb-941c-e725acf1fbbc",
"index": 10,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "tags",
"height": 22,
"id": "9659e250-b30a-11eb-941c-e725acf1fbbc",
"index": 11,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Malware Details",
"static": false,
"w": 1,
"x": 0,
"y": 2
},
{
"displayType": "ROW",
"h": 2,
"hideItemTitleOnlyOne": true,
"hideName": false,
"i": "fgs8qszuj0-8653dd20-b30a-11eb-941c-e725acf1fbbc",
"items": [
{
"endCol": 2,
"fieldId": "description",
"height": 22,
"id": "8d209620-b30a-11eb-941c-e725acf1fbbc",
"index": 0,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Malware Description",
"static": false,
"w": 1,
"x": 0,
"y": 0
},
{
"h": 2,
"i": "fgs8qszuj0-9bd14480-b30a-11eb-941c-e725acf1fbbc",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Related Incidents",
"static": false,
"type": "relatedIncidents",
"w": 1,
"x": 0,
"y": 5
},
{
"h": 2,
"i": "fgs8qszuj0-9e1a2310-b30a-11eb-941c-e725acf1fbbc",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Comments",
"static": false,
"type": "comments",
"w": 1,
"x": 0,
"y": 7
}
],
"type": "custom"
},
{
"hidden": false,
"id": "se889tdxik",
"name": "Relationships",
"sections": [
{
"h": 8,
"i": "se889tdxik-09585430-979f-11eb-a8d1-098e2c945225",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Relationships",
"static": false,
"type": "relationshipsTable",
"w": 1,
"x": 0,
"y": 0
}
],
"type": "custom"
}
]
},
"name": "Malware Indicator",
"system": false,
"version": -1,
"fromVersion": "6.10.0",
"marketplaces": ["xsoar", "xsoar_saas", "xsoar_on_prem"]
}