Trend Micro CAS

TrendAI™ Cloud App Security Incident

Details

IDTrend Micro CAS
Groupincident
Version-1
From Version6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 3 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
eventtype Col 0-2, Height: 22
playbookid Col 0-2, Height: 22
cloudservice Col 0-2, Height: 22
policydetails Col 0-2, Height: 22
blockedaction Col 0-2, Height: 22
resourcename Col 0-2, Height: 22
username Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
malwarename Col 0-2, Height: 22

File Details

Field IDPosition
filename Col 0-2, Height: 22
filehash Col 0-2, Height: 22
riskscore Col 0-2, Height: 22

Email Details

Field IDPosition
emailfrom Col 0-2, Height: 22
emailto Col 0-2, Height: 22
emailsubject Col 0-2, Height: 22
attachmentname Col 0-2, Height: 22
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

{
 "detailsV2": {
  "tabs": [
   {
    "id": "summary",
    "name": "Legacy Summary",
    "type": "summary"
   },
   {
    "id": "caseinfoid",
    "name": "Incident Info",
    "sections": [
     {
      "displayType": "ROW",
      "h": 4,
      "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "type",
        "height": 22,
        "id": "incident-type-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "severity",
        "height": 22,
        "id": "incident-severity-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "owner",
        "height": 22,
        "id": "incident-owner-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourcebrand",
        "height": 22,
        "id": "incident-sourceBrand-field",
        "index": 3,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "eventtype",
        "height": 22,
        "id": "790bfee0-f8c0-11ea-86b7-e12e83629e30",
        "index": 4,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "playbookid",
        "height": 22,
        "id": "incident-playbookId-field",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "cloudservice",
        "height": 22,
        "id": "62b41600-f8c0-11ea-86b7-e12e83629e30",
        "index": 6,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "policydetails",
        "height": 22,
        "id": "8f3cfed0-f8c0-11ea-86b7-e12e83629e30",
        "index": 7,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "blockedaction",
        "height": 22,
        "id": "a05f7080-f8c0-11ea-86b7-e12e83629e30",
        "index": 8,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "resourcename",
        "height": 22,
        "id": "8288e3c0-f8c0-11ea-86b7-e12e83629e30",
        "index": 9,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "username",
        "height": 22,
        "id": "46e937c0-f8c0-11ea-86b7-e12e83629e30",
        "index": 10,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourceinstance",
        "height": 22,
        "id": "incident-sourceInstance-field",
        "index": 11,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "malwarename",
        "height": 22,
        "id": "83fa58a0-f8c1-11ea-86b7-e12e83629e30",
        "index": 12,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "moved": false,
      "name": "Case Details",
      "static": false,
      "w": 1,
      "x": 0,
      "y": 0
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-52055844-f8c1-11ea-86b7-e12e83629e30",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "filename",
        "height": 22,
        "id": "6bb804e0-f8c1-11ea-86b7-e12e83629e30",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "filehash",
        "height": 22,
        "id": "6fa7b5a0-f8c1-11ea-86b7-e12e83629e30",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "riskscore",
        "height": 22,
        "id": "74bcfaa0-f8c1-11ea-86b7-e12e83629e30",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "moved": false,
      "name": "File Details",
      "static": false,
      "w": 1,
      "x": 1,
      "y": 0
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-a8b93ce2-f8e6-11ea-8f3b-3df87fce84f1",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "emailfrom",
        "height": 22,
        "id": "bff76710-f8e6-11ea-8f3b-3df87fce84f1",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "emailto",
        "height": 22,
        "id": "c4043cc0-f8e6-11ea-8f3b-3df87fce84f1",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "emailsubject",
        "height": 22,
        "id": "c6618db0-f8e6-11ea-8f3b-3df87fce84f1",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "attachmentname",
        "height": 22,
        "id": "e04ef960-f8e6-11ea-8f3b-3df87fce84f1",
        "index": 3,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "moved": false,
      "name": "Email Details",
      "static": false,
      "w": 1,
      "x": 1,
      "y": 2
     }
    ],
    "type": "custom"
   },
   {
    "id": "warRoom",
    "name": "War Room",
    "type": "warRoom"
   },
   {
    "id": "workPlan",
    "name": "Work Plan",
    "type": "workPlan"
   },
   {
    "id": "evidenceBoard",
    "name": "Evidence Board",
    "type": "evidenceBoard"
   },
   {
    "id": "relatedIncidents",
    "name": "Related Incidents",
    "type": "relatedIncidents"
   },
   {
    "id": "canvas",
    "name": "Canvas",
    "type": "canvas"
   }
  ]
 },
 "group": "incident",
 "id": "Trend Micro CAS",
 "name": "Trend Micro CAS",
 "quickView": {
  "sections": [
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_type",
      "isVisible": true
     },
     {
      "fieldId": "incident_severity",
      "isVisible": true
     },
     {
      "fieldId": "incident_owner",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotstatus",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourcebrand",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourceinstance",
      "isVisible": true
     },
     {
      "fieldId": "incident_playbookid",
      "isVisible": true
     },
     {
      "fieldId": "incident_phase",
      "isVisible": true
     },
     {
      "fieldId": "incident_roles",
      "isVisible": true
     }
    ],
    "isVisible": true,
    "name": "Basic Information",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "type": ""
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_occurred",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotcreated",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotduedate",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotmodified",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbottotaltime",
      "isVisible": true
     }
    ],
    "isVisible": true,
    "name": "Timeline Information",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "type": ""
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_agentid",
      "isVisible": true
     },
     {
      "fieldId": "incident_app",
      "isVisible": true
     },
     {
      "fieldId": "incident_assignmentgroup",
      "isVisible": true
     },
     {
      "fieldId": "incident_caller",
      "isVisible": true
     },
     {
      "fieldId": "incident_commandline",
      "isVisible": true
     },
     {
      "fieldId": "incident_country",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotprediction",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotpredictionprobability",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationhostname",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationip",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationnetwork",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationport",
      "isVisible": true
     },
     {
      "fieldId": "incident_detectionsla",
      "isVisible": true
     },
     {
      "fieldId": "incident_detectionurl",
      "isVisible": true
     },
     {
      "fieldId": "incident_devicehash",
      "isVisible": true
     },
     {
      "fieldId": "incident_devicename",
      "isVisible": true
     },
     {
      "fieldId": "incident_escalation",
      "isVisible": true
     },
     {
      "fieldId": "incident_eventid",
      "isVisible": true
     },
     {
      "fieldId": "incident_eventtype",
      "isVisible": true
     },
     {
      "fieldId": "incident_filehash",
      "isVisible": true
     },
     {
      "fieldId": "incident_filename",
      "isVisible": true
     },
     {
      "fieldId": "incident_filepath",
      "isVisible": true
     },
     {
      "fieldId": "incident_filesize",
      "isVisible": true
     },
     {
      "fieldId": "incident_firstname",
      "isVisible": true
     },
     {
      "fieldId": "incident_investigationstage",
      "isVisible": true
     },
     {
      "fieldId": "incident_lastname",
      "isVisible": true
     },
     {
      "fieldId": "incident_logsource",
      "isVisible": true
     },
     {
      "fieldId": "incident_macaddress",
      "isVisible": true
     },
     {
      "fieldId": "incident_mobiledevicemodel",
      "isVisible": true
     },
     {
      "fieldId": "incident_os",
      "isVisible": true
     },
     {
      "fieldId": "incident_osversion",
      "isVisible": true
     },
     {
      "fieldId": "incident_phonenumber",
      "isVisible": true
     },
     {
      "fieldId": "incident_pid",
      "isVisible": true
     },
     {
      "fieldId": "incident_protocol",
      "isVisible": true
     },
     {
      "fieldId": "incident_remediationsla",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourcehostname",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourceip",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourcenetwork",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourceport",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourceusername",
      "isVisible": true
     },
     {
      "fieldId": "incident_state",
      "isVisible": true
     },
     {
      "fieldId": "incident_subcategory",
      "isVisible": true
     },
     {
      "fieldId": "incident_tenantname",
      "isVisible": true
     },
     {
      "fieldId": "incident_ticketcloseddate",
      "isVisible": true
     },
     {
      "fieldId": "incident_ticketnumber",
      "isVisible": true
     },
     {
      "fieldId": "incident_ticketopeneddate",
      "isVisible": true
     },
     {
      "fieldId": "incident_timetoassignment",
      "isVisible": true
     },
     {
      "fieldId": "incident_urlsslverification",
      "isVisible": true
     },
     {
      "fieldId": "incident_useraccountcontrol",
      "isVisible": true
     }
    ],
    "isVisible": true,
    "name": "Custom Fields",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "type": ""
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_labels",
      "isVisible": true
     }
    ],
    "isVisible": true,
    "name": "Labels",
    "query": null,
    "queryType": "",
    "readOnly": true,
    "type": "labels"
   }
  ]
 },
 "system": false,
 "version": -1,
 "fromVersion": "6.0.0",
 "description": "",
 "marketplaces": ["xsoar"]
}