Traps Incident
Details
| ID | Traps |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Case info 10 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 24 |
| details | Col 0-2, Height: 48 |
| subtype | Col 0-2, Height: 24 |
| dbotsource | Col 0-2, Height: 24 |
| sourcebrand | Col 0-2, Height: 24 |
| severity | Col 0-2, Height: 24 |
| playbookid | Col 0-2, Height: 24 |
| owner | Col 0-2, Height: 24 |
| sourceinstance | Col 0-2, Height: 24 |
| trapsid | Col 0-2, Height: 24 |
Notes
Linked Incidents
Child Incidents
Evidence
Team Members
Timeline Information
| Field ID | Position |
|---|---|
| dbotcreated | Col 0-2, Height: 24 |
| occurred | Col 0-2, Height: 24 |
| dbotmodified | Col 0-2, Height: 24 |
| dbotclosed | Col 0-2, Height: 24 |
| remediationsla | Col 0-2, Height: 24 |
| detectionsla | Col 0-2, Height: 24 |
| dbotduedate | Col 0-2, Height: 24 |
Closing Information
| Field ID | Position |
|---|---|
| xdrresolvecomment | Col 0-2, Height: 24 |
| dbotclosed | Col 0-2, Height: 24 |
| closereason | Col 0-2, Height: 24 |
| closinguserid | Col 0-2, Height: 24 |
| closenotes | Col 0-2, Height: 48 |
Source Details
| Field ID | Position |
|---|---|
| agentid | Col 0-2, Height: 24 |
| src | Col 0-2, Height: 24 |
| devicename | Col 0-2, Height: 24 |
| srcntdomain | Col 0-2, Height: 24 |
| srcuser | Col 0-2, Height: 24 |
| srcos | Col 0-2, Height: 24 |
| isolated | Col 0-2, Height: 24 |
File Attributes
| Field ID | Position |
|---|---|
| filename | Col 0-2, Height: 24 |
| filepath | Col 0-2, Height: 24 |
| filehash | Col 0-2, Height: 24 |
| filesize | Col 0-2, Height: 24 |
| quarantined | Col 0-2, Height: 24 |
| blockedaction | Col 0-2, Height: 24 |
| signature | Col 0-2, Height: 24 |
| terminatedaction | Col 0-2, Height: 24 |
Investigation 4 sections
Incident Files
Indicators
Malware Investigation Details
| Field ID | Position |
|---|---|
| malwarefamily | Col 0-2, Height: 24 |
| maliciousbehavior | Col 0-2, Height: 24 |
| pid | Col 0-2, Height: 24 |
| parentprocessid | Col 0-2, Height: 24 |
| commandline | Col 0-2, Height: 24 |
Infected Endpoints
| Field ID | Position |
|---|---|
| src | Col 0-2, Height: 24 |
| devicename | Col 2-4, Height: 24 |
| infectedhosts | Col 0-4, Height: 110 |
| detectedips | Col 0-2, Height: 24 |
| detectedhosts | Col 2-4, Height: 24 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.