Trend Micro CAS
TrendAI™ Cloud App Security Incident
Details
| ID | Trend Micro CAS |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.0.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 3 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| eventtype | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
| cloudservice | Col 0-2, Height: 22 |
| policydetails | Col 0-2, Height: 22 |
| blockedaction | Col 0-2, Height: 22 |
| resourcename | Col 0-2, Height: 22 |
| username | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| malwarename | Col 0-2, Height: 22 |
File Details
| Field ID | Position |
|---|---|
| filename | Col 0-2, Height: 22 |
| filehash | Col 0-2, Height: 22 |
| riskscore | Col 0-2, Height: 22 |
Email Details
| Field ID | Position |
|---|---|
| emailfrom | Col 0-2, Height: 22 |
| emailto | Col 0-2, Height: 22 |
| emailsubject | Col 0-2, Height: 22 |
| attachmentname | Col 0-2, Height: 22 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.
{ "detailsV2": { "tabs": [ { "id": "summary", "name": "Legacy Summary", "type": "summary" }, { "id": "caseinfoid", "name": "Incident Info", "sections": [ { "displayType": "ROW", "h": 4, "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "type", "height": 22, "id": "incident-type-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "severity", "height": 22, "id": "incident-severity-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "owner", "height": 22, "id": "incident-owner-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourcebrand", "height": 22, "id": "incident-sourceBrand-field", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "eventtype", "height": 22, "id": "790bfee0-f8c0-11ea-86b7-e12e83629e30", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "playbookid", "height": 22, "id": "incident-playbookId-field", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "cloudservice", "height": 22, "id": "62b41600-f8c0-11ea-86b7-e12e83629e30", "index": 6, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "policydetails", "height": 22, "id": "8f3cfed0-f8c0-11ea-86b7-e12e83629e30", "index": 7, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "blockedaction", "height": 22, "id": "a05f7080-f8c0-11ea-86b7-e12e83629e30", "index": 8, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "resourcename", "height": 22, "id": "8288e3c0-f8c0-11ea-86b7-e12e83629e30", "index": 9, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "username", "height": 22, "id": "46e937c0-f8c0-11ea-86b7-e12e83629e30", "index": 10, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourceinstance", "height": 22, "id": "incident-sourceInstance-field", "index": 11, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "malwarename", "height": 22, "id": "83fa58a0-f8c1-11ea-86b7-e12e83629e30", "index": 12, "sectionItemType": "field", "startCol": 0 } ], "moved": false, "name": "Case Details", "static": false, "w": 1, "x": 0, "y": 0 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-52055844-f8c1-11ea-86b7-e12e83629e30", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "filename", "height": 22, "id": "6bb804e0-f8c1-11ea-86b7-e12e83629e30", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "filehash", "height": 22, "id": "6fa7b5a0-f8c1-11ea-86b7-e12e83629e30", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "riskscore", "height": 22, "id": "74bcfaa0-f8c1-11ea-86b7-e12e83629e30", "index": 2, "sectionItemType": "field", "startCol": 0 } ], "moved": false, "name": "File Details", "static": false, "w": 1, "x": 1, "y": 0 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-a8b93ce2-f8e6-11ea-8f3b-3df87fce84f1", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "emailfrom", "height": 22, "id": "bff76710-f8e6-11ea-8f3b-3df87fce84f1", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "emailto", "height": 22, "id": "c4043cc0-f8e6-11ea-8f3b-3df87fce84f1", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "emailsubject", "height": 22, "id": "c6618db0-f8e6-11ea-8f3b-3df87fce84f1", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "attachmentname", "height": 22, "id": "e04ef960-f8e6-11ea-8f3b-3df87fce84f1", "index": 3, "sectionItemType": "field", "startCol": 0 } ], "moved": false, "name": "Email Details", "static": false, "w": 1, "x": 1, "y": 2 } ], "type": "custom" }, { "id": "warRoom", "name": "War Room", "type": "warRoom" }, { "id": "workPlan", "name": "Work Plan", "type": "workPlan" }, { "id": "evidenceBoard", "name": "Evidence Board", "type": "evidenceBoard" }, { "id": "relatedIncidents", "name": "Related Incidents", "type": "relatedIncidents" }, { "id": "canvas", "name": "Canvas", "type": "canvas" } ] }, "group": "incident", "id": "Trend Micro CAS", "name": "Trend Micro CAS", "quickView": { "sections": [ { "description": "", "fields": [ { "fieldId": "incident_type", "isVisible": true }, { "fieldId": "incident_severity", "isVisible": true }, { "fieldId": "incident_owner", "isVisible": true }, { "fieldId": "incident_dbotstatus", "isVisible": true }, { "fieldId": "incident_sourcebrand", "isVisible": true }, { "fieldId": "incident_sourceinstance", "isVisible": true }, { "fieldId": "incident_playbookid", "isVisible": true }, { "fieldId": "incident_phase", "isVisible": true }, { "fieldId": "incident_roles", "isVisible": true } ], "isVisible": true, "name": "Basic Information", "query": null, "queryType": "", "readOnly": false, "type": "" }, { "description": "", "fields": [ { "fieldId": "incident_occurred", "isVisible": true }, { "fieldId": "incident_dbotcreated", "isVisible": true }, { "fieldId": "incident_dbotduedate", "isVisible": true }, { "fieldId": "incident_dbotmodified", "isVisible": true }, { "fieldId": "incident_dbottotaltime", "isVisible": true } ], "isVisible": true, "name": "Timeline Information", "query": null, "queryType": "", "readOnly": false, "type": "" }, { "description": "", "fields": [ { "fieldId": "incident_agentid", "isVisible": true }, { "fieldId": "incident_app", "isVisible": true }, { "fieldId": "incident_assignmentgroup", "isVisible": true }, { "fieldId": "incident_caller", "isVisible": true }, { "fieldId": "incident_commandline", "isVisible": true }, { "fieldId": "incident_country", "isVisible": true }, { "fieldId": "incident_dbotprediction", "isVisible": true }, { "fieldId": "incident_dbotpredictionprobability", "isVisible": true }, { "fieldId": "incident_destinationhostname", "isVisible": true }, { "fieldId": "incident_destinationip", "isVisible": true }, { "fieldId": "incident_destinationnetwork", "isVisible": true }, { "fieldId": "incident_destinationport", "isVisible": true }, { "fieldId": "incident_detectionsla", "isVisible": true }, { "fieldId": "incident_detectionurl", "isVisible": true }, { "fieldId": "incident_devicehash", "isVisible": true }, { "fieldId": "incident_devicename", "isVisible": true }, { "fieldId": "incident_escalation", "isVisible": true }, { "fieldId": "incident_eventid", "isVisible": true }, { "fieldId": "incident_eventtype", "isVisible": true }, { "fieldId": "incident_filehash", "isVisible": true }, { "fieldId": "incident_filename", "isVisible": true }, { "fieldId": "incident_filepath", "isVisible": true }, { "fieldId": "incident_filesize", "isVisible": true }, { "fieldId": "incident_firstname", "isVisible": true }, { "fieldId": "incident_investigationstage", "isVisible": true }, { "fieldId": "incident_lastname", "isVisible": true }, { "fieldId": "incident_logsource", "isVisible": true }, { "fieldId": "incident_macaddress", "isVisible": true }, { "fieldId": "incident_mobiledevicemodel", "isVisible": true }, { "fieldId": "incident_os", "isVisible": true }, { "fieldId": "incident_osversion", "isVisible": true }, { "fieldId": "incident_phonenumber", "isVisible": true }, { "fieldId": "incident_pid", "isVisible": true }, { "fieldId": "incident_protocol", "isVisible": true }, { "fieldId": "incident_remediationsla", "isVisible": true }, { "fieldId": "incident_sourcehostname", "isVisible": true }, { "fieldId": "incident_sourceip", "isVisible": true }, { "fieldId": "incident_sourcenetwork", "isVisible": true }, { "fieldId": "incident_sourceport", "isVisible": true }, { "fieldId": "incident_sourceusername", "isVisible": true }, { "fieldId": "incident_state", "isVisible": true }, { "fieldId": "incident_subcategory", "isVisible": true }, { "fieldId": "incident_tenantname", "isVisible": true }, { "fieldId": "incident_ticketcloseddate", "isVisible": true }, { "fieldId": "incident_ticketnumber", "isVisible": true }, { "fieldId": "incident_ticketopeneddate", "isVisible": true }, { "fieldId": "incident_timetoassignment", "isVisible": true }, { "fieldId": "incident_urlsslverification", "isVisible": true }, { "fieldId": "incident_useraccountcontrol", "isVisible": true } ], "isVisible": true, "name": "Custom Fields", "query": null, "queryType": "", "readOnly": false, "type": "" }, { "description": "", "fields": [ { "fieldId": "incident_labels", "isVisible": true } ], "isVisible": true, "name": "Labels", "query": null, "queryType": "", "readOnly": true, "type": "labels" } ] }, "system": false, "version": -1, "fromVersion": "6.0.0", "description": "", "marketplaces": ["xsoar"] }