Saas Security Layout

Layout for the Saas Security incident type.

SaaS Security by Palo Alto Networks Incident

Details

IDSaas Security Layout
Groupincident
Version-1
From Version6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 15 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
playbookid Col 0-2, Height: 22
tenantname Col 0-2, Height: 22
saassecurityincidentseveritylevel Col 0-2, Height: 53
saassecurityassetowner Col 0-2, Height: 53
saassecurityassetowneremail Col 0-2, Height: 53
exposurelevel Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 53
dbotmodified Col 0-1, Height: 53
dbotduedate Col 0-2, Height: 53
dbotcreated Col 1-2, Height: 53
dbotclosed Col 1-2, Height: 53

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Investigation Data

Field IDPosition
details Col 0-2, Height: 106

Policy Information

Field IDPosition
policydetails Col 0-2, Height: 22
policyid Col 0-2, Height: 22
policyuri Col 0-2, Height: 22

Mirroring Information

Field IDPosition
dbotmirrorid Col 0-2, Height: 22
dbotmirrorinstance Col 0-2, Height: 22
dbotmirrordirection Col 0-2, Height: 22
dbotmirrorlastsync Col 0-2, Height: 22
incomingmirrorerror Col 0-2, Height: 44

Additional Info

Field IDPosition
saassecuritystate Col 0-2, Height: 53
saassecuritycategory Col 0-2, Height: 53
saassecuritystatus Col 0-2, Height: 53
saassecurityassignedto Col 0-2, Height: 53
saassecurityresolvedby Col 0-2, Height: 53
sha256 Col 0-2, Height: 22

Remediation Action

Field IDPosition
saassecurityassetid Col 0-2, Height: 22
saassecurityasseturl Col 0-2, Height: 53
saassecurityremediationtype Col 0-2, Height: 22
saassecurityremoveinheritedsharing Col 0-2, Height: 22
Col 0-2, Height: 44
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

{
    "description": "Layout for the Saas Security incident type.",
    "detailsV2": {
        "tabs": [
            {
                "id": "summary",
                "name": "Legacy Summary",
                "type": "summary"
            },
            {
                "id": "caseinfoid",
                "name": "Incident Info",
                "sections": [
                    {
                        "displayType": "ROW",
                        "h": 3,
                        "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
                        "isVisible": true,
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "type",
                                "height": 22,
                                "id": "incident-type-field",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "owner",
                                "height": 22,
                                "id": "incident-owner-field",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "sourcebrand",
                                "height": 22,
                                "id": "incident-sourceBrand-field",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "sourceinstance",
                                "height": 22,
                                "id": "incident-sourceInstance-field",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "playbookid",
                                "height": 22,
                                "id": "incident-playbookId-field",
                                "index": 5,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "tenantname",
                                "height": 22,
                                "id": "96f11130-0999-11ec-b39d-d7a2d3b2c97a",
                                "index": 6,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityincidentseveritylevel",
                                "height": 53,
                                "id": "27a6ba10-6cf8-11ec-a92c-e96e9e41083c",
                                "index": 6,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityassetowner",
                                "height": 53,
                                "id": "6a7c0170-6e55-11ec-bd52-4bc31e059b51",
                                "index": 7,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityassetowneremail",
                                "height": 53,
                                "id": "6e4676f0-6e55-11ec-bd52-4bc31e059b51",
                                "index": 8,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "exposurelevel",
                                "height": 22,
                                "id": "53e5fb30-0999-11ec-b39d-d7a2d3b2c97a",
                                "index": 9,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Case Details",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 0
                    },
                    {
                        "h": 2,
                        "i": "caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
                        "maxW": 3,
                        "moved": false,
                        "name": "Notes",
                        "static": false,
                        "type": "notes",
                        "w": 1,
                        "x": 2,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
                        "maxW": 3,
                        "moved": false,
                        "name": "Work Plan",
                        "static": false,
                        "type": "workplan",
                        "w": 1,
                        "x": 1,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
                        "isVisible": true,
                        "maxW": 3,
                        "moved": false,
                        "name": "Linked Incidents",
                        "static": false,
                        "type": "linkedIncidents",
                        "w": 1,
                        "x": 1,
                        "y": 10
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "caseinfoid-842632c0-98b1-11e9-97d7-ed26ef9e46c8",
                        "maxW": 3,
                        "moved": false,
                        "name": "Child Incidents",
                        "static": false,
                        "type": "childInv",
                        "w": 1,
                        "x": 2,
                        "y": 4
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0",
                        "maxW": 3,
                        "moved": false,
                        "name": "Evidence",
                        "static": false,
                        "type": "evidence",
                        "w": 1,
                        "x": 2,
                        "y": 2
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
                        "maxW": 3,
                        "moved": false,
                        "name": "Team Members",
                        "static": false,
                        "type": "team",
                        "w": 1,
                        "x": 2,
                        "y": 6
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
                        "maxW": 3,
                        "moved": false,
                        "name": "Indicators",
                        "query": "",
                        "queryType": "input",
                        "static": false,
                        "type": "indicators",
                        "w": 2,
                        "x": 0,
                        "y": 8
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
                        "items": [
                            {
                                "endCol": 1,
                                "fieldId": "occurred",
                                "height": 53,
                                "id": "incident-occurred-field",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 1,
                                "fieldId": "dbotmodified",
                                "height": 53,
                                "id": "incident-modified-field",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotduedate",
                                "height": 53,
                                "id": "incident-dueDate-field",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotcreated",
                                "height": 53,
                                "id": "incident-created-field",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 1
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotclosed",
                                "height": 53,
                                "id": "incident-closed-field",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 1
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Timeline Information",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 6
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
                        "isVisible": true,
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "dbotclosed",
                                "height": 22,
                                "id": "incident-dbotClosed-field",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "closereason",
                                "height": 22,
                                "id": "incident-closeReason-field",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "closenotes",
                                "height": 22,
                                "id": "incident-closeNotes-field",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Closing Information",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 10
                    },
                    {
                        "displayType": "CARD",
                        "h": 1,
                        "i": "caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
                        "isVisible": true,
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "details",
                                "height": 106,
                                "id": "incident-details-field",
                                "index": 0,
                                "listId": "caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Investigation Data",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 2
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-c5092970-0a31-11ec-8bac-b9323cf50828",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "policydetails",
                                "height": 22,
                                "id": "f04baf90-0a31-11ec-8bac-b9323cf50828",
                                "index": 1,
                                "listId": "caseinfoid-c5092970-0a31-11ec-8bac-b9323cf50828",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "policyid",
                                "height": 22,
                                "id": "e0dd5680-0a31-11ec-8bac-b9323cf50828",
                                "index": 2,
                                "listId": "caseinfoid-c5092970-0a31-11ec-8bac-b9323cf50828",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "policyuri",
                                "height": 22,
                                "id": "e348ff50-0a31-11ec-8bac-b9323cf50828",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "Policy Information",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 6
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "caseinfoid-60527d30-2b8b-11ec-a22a-850748d0ef51",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "dbotmirrorid",
                                "height": 22,
                                "id": "793fb6f0-2b8b-11ec-a22a-850748d0ef51",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotmirrorinstance",
                                "height": 22,
                                "id": "7b905db0-2b8b-11ec-a22a-850748d0ef51",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotmirrordirection",
                                "height": 22,
                                "id": "7d776d30-2b8b-11ec-a22a-850748d0ef51",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotmirrorlastsync",
                                "height": 22,
                                "id": "7ffd54c0-2b8b-11ec-a22a-850748d0ef51",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "incomingmirrorerror",
                                "height": 44,
                                "id": "826f1810-2b8b-11ec-a22a-850748d0ef51",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "Mirroring Information",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 8
                    },
                    {
                        "displayType": "CARD",
                        "h": 3,
                        "hideName": false,
                        "i": "caseinfoid-48f1fa50-2c01-11ec-abe9-ff04fcb691b4",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "saassecuritystate",
                                "height": 53,
                                "id": "52166290-2b8b-11ec-a22a-850748d0ef51",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecuritycategory",
                                "height": 53,
                                "id": "5756fd50-2b8b-11ec-a22a-850748d0ef51",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecuritystatus",
                                "height": 53,
                                "id": "6e1d34c0-2c01-11ec-abe9-ff04fcb691b4",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityassignedto",
                                "height": 53,
                                "id": "685abfd0-2c01-11ec-abe9-ff04fcb691b4",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityresolvedby",
                                "height": 53,
                                "id": "6ce0bd20-2c01-11ec-abe9-ff04fcb691b4",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "sha256",
                                "height": 22,
                                "id": "31435ed0-3638-11ec-89f9-7f3391e8f889",
                                "index": 5,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "Additional Info",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 3
                    },
                    {
                        "displayType": "CARD",
                        "h": 3,
                        "hideName": false,
                        "i": "caseinfoid-56502550-2c33-11ec-890f-9fd8e3babc6e",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityassetid",
                                "height": 22,
                                "id": "0dfd0fa0-2c35-11ec-890f-9fd8e3babc6e",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "saassecurityasseturl",
                                "height": 53,
                                "id": "417a1bf0-46d6-11ec-a2fc-a7b522c8a67e",
                                "index": 1,
                                "listId": "caseinfoid-56502550-2c33-11ec-890f-9fd8e3babc6e",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityremediationtype",
                                "height": 22,
                                "id": "11929270-2c35-11ec-890f-9fd8e3babc6e",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "saassecurityremoveinheritedsharing",
                                "height": 22,
                                "id": "d057a460-2c3b-11ec-b316-4dcfe81cc5c2",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "args": {
                                    "asset_id": {
                                        "simple": "${incident.saassecurityassetid}"
                                    },
                                    "remediation_type": {
                                        "simple": "${incident.saassecurityremediationtype}"
                                    },
                                    "remove_inherited_sharing": {
                                        "simple": "${incident.saassecurityremoveinheritedsharing}"
                                    }
                                },
                                "endCol": 2,
                                "fieldId": "",
                                "height": 44,
                                "id": "07fd7c90-2c33-11ec-890f-9fd8e3babc6e",
                                "index": 3,
                                "name": "Run Remediate Asset Command",
                                "scriptId": "SaasSecurity|||saas-security-asset-remediate",
                                "sectionItemType": "button",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "Remediation Action",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 3
                    }
                ],
                "type": "custom"
            },
            {
                "id": "warRoom",
                "name": "War Room",
                "type": "warRoom"
            },
            {
                "id": "workPlan",
                "name": "Work Plan",
                "type": "workPlan"
            },
            {
                "id": "evidenceBoard",
                "name": "Evidence Board",
                "type": "evidenceBoard"
            },
            {
                "id": "relatedIncidents",
                "name": "Related Incidents",
                "type": "relatedIncidents"
            },
            {
                "id": "canvas",
                "name": "Canvas",
                "type": "canvas"
            }
        ]
    },
    "group": "incident",
    "id": "Saas Security Layout",
    "name": "Saas Security Layout",
    "system": false,
    "version": -1,
    "fromVersion": "6.0.0",
    "marketplaces": ["xsoar"]
}