Use Case Builder

Use Case Builder Incident

Details

IDUse Case Builder
Groupincident
Version-1
From Version6.8.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Use Case Builder 9 sections

Use Case Definition

Field IDPosition
usecasename Col 0-4, Height: 106
usecasepurpose Col 0-4, Height: 106
trigger Col 0-4, Height: 106
incidentstructureandmapping Col 0-4, Height: 106
incidentresponseprocess Col 0-4, Height: 106
enrichment Col 0-4, Height: 106
manualsteps Col 0-4, Height: 106
enduserinteractiveness Col 0-4, Height: 106
deduplicationlogic Col 0-4, Height: 106
thirdpartyintegrations Col 0-4, Height: 106
incident_customincidentdatastructure Col 0-2, Height: 53

Work Plan

Incident Classification

If you want to generate a use case using OOTB Content, select one of the use case categories below (Example, Phishing). Then Click the Generate Use Case Button

Field IDPosition
customername Col 0-1, Height: 53
usecasecategory Col 1-2, Height: 53
usecaseinitiator Col 2-4, Height: 53

Analysis Sub Playbooks

Field IDPosition
usecaserequiredmetricsandnotifications Col 0-2, Height: 22
usecaseenrichmentsteps Col 0-2, Height: 22

Containment Subplaybooks

Field IDPosition
incident_usecasebuilderusecasecontainmentsteps Col 0-2, Height: 22

New Section

Field IDPosition
usecaseadoptionmetrics Col 0-2, Height: 44

SLAs

Field IDPosition
usecaseslas Col 0-6, Height: 53

Welcome to XSOAR

Use Case Development Deadline

Field IDPosition
usecasepriority Col 0-2, Height: 53
usecasedevelopmentstage Col 0-2, Height: 53
usecasebuilderdevelopmentdeadline Col 0-2, Height: 53
Use Case Definition Report 6 sections

Use Case Definition

Field IDPosition
usecasename Col 0-6, Height: 106
usecasepurpose Col 0-6, Height: 106
usecaseenrichmentsteps Col 0-2, Height: 53
trigger Col 0-6, Height: 106
incidentstructureandmapping Col 0-6, Height: 106
incidentresponseprocess Col 0-6, Height: 106
enrichment Col 0-6, Height: 106
manualsteps Col 0-6, Height: 106
enduserinteractiveness Col 0-6, Height: 106
deduplicationlogic Col 0-6, Height: 106
thirdpartyintegrations Col 0-6, Height: 106
incident_customincidentdatastructure Col 0-2, Height: 53

Incident Classification

Field IDPosition
customername Col 0-1, Height: 53
usecasecategory Col 1-2, Height: 53
usecaseinitiator Col 2-4, Height: 53

Analysis Sub Playbooks

Field IDPosition
usecaserequiredmetricsandnotifications Col 0-2, Height: 22

Containment Subplaybooks

Field IDPosition
incident_usecasebuilderusecasecontainmentsteps Col 0-2, Height: 22

SLAs

Field IDPosition
usecaseslas Col 0-6, Height: 53

Use Case Development Deadline

Field IDPosition
usecasepriority Col 0-2, Height: 53
usecasedevelopmentstage Col 0-2, Height: 53
usecasebuilderdevelopmentdeadline Col 0-2, Height: 53
Getting Started 2 sections

XSOAR in 5 minutes

New Section

Field IDPosition
usecasebuildergettingstarted Col 0-4, Height: 106
Common Use Cases 11 sections

New Section

Field IDPosition
usecasebuilderendpoint Col 0-2, Height: 44

New Section

Field IDPosition
usecasebuilderdataenrichmentandthreatintelligence Col 0-2, Height: 106

New Section

Field IDPosition
usecasebuildercasemanagement Col 0-2, Height: 22

New Section

Field IDPosition
usecasebuilderiam Col 0-2, Height: 22

New Section

Field IDPosition
usecasebuildervulnerabilitymanagement Col 0-2, Height: 22

New Section

Field IDPosition
networksecurityids Col 0-2, Height: 22

New Section

Field IDPosition
usecasebuildernetworksecurityngfw Col 0-2, Height: 106

New Section

Field IDPosition
usecasebuilderforensicsandmalwareanalysis Col 0-2, Height: 44

New Section

Field IDPosition
usecasebuilderemailgateway Col 0-2, Height: 44

New Section

Field IDPosition
usecasebuilderauthentication Col 0-2, Height: 44

New Section

Field IDPosition
usecasebuilderseim Col 0-2, Height: 44
XSOAR Incident Flow 1 section

XSOAR Incident Flow

This shows the typical XSOAR Incident process. Alerts are ingested and categorized via Incident type, then playbooks are run to enrich, calculate alert severity, send notifications, etc. Then an analyst will review prior to containing or performing remediation steps.

Field IDPosition
xsoarincidentflow Col 0-6, Height: 106
Best Practice 3 sections

New Section

Field IDPosition
usecasetimbestpractice Col 0-2, Height: 106

New Section

Field IDPosition
usecasedesignbestpractice Col 0-6, Height: 106

New Section

Field IDPosition
usecaseingestionbestpractice Col 0-4, Height: 106
Downloads 1 section

Use Cases

War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Incident Info 11 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
playbookid Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 22
dbotmodified Col 0-1, Height: 22
dbotduedate Col 0-2, Height: 22
dbotcreated Col 1-2, Height: 22
dbotclosed Col 1-2, Height: 22

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Investigation Data

Field IDPosition
details Col 0-2, Height: 22
Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

{
    "close": {
        "sections": [
            {
                "description": "",
                "fields": [
                    {
                        "fieldId": "incident_closereason",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_closenotes",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Basic Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            }
        ]
    },
    "detailsV2": {
        "tabs": [
            {
                "id": "summary",
                "name": "Legacy Summary",
                "type": "summary"
            },
            {
                "hidden": false,
                "id": "sqdqs2kfxm",
                "name": "Use Case Builder",
                "report": false,
                "sections": [
                    {
                        "displayType": "CARD",
                        "h": 6,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-e19f3700-c402-11ed-9e57-8f1be96082a8",
                        "items": [
                            {
                                "endCol": 4,
                                "fieldId": "usecasename",
                                "height": 106,
                                "id": "e68c81a0-c402-11ed-9e57-8f1be96082a8",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 4,
                                "fieldId": "usecasepurpose",
                                "height": 106,
                                "id": "488c62a0-c424-11ed-bcd7-97106dc81161",
                                "index": 1,
                                "listId": "gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-e19f3700-c402-11ed-9e57-8f1be96082a8",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 4,
                                "fieldId": "trigger",
                                "height": 106,
                                "id": "e13ab7c0-c421-11ed-8008-f768c09b421a",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 4,
                                "fieldId": "incidentstructureandmapping",
                                "height": 106,
                                "id": "eb937db0-c421-11ed-8008-f768c09b421a",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 4,
                                "fieldId": "incidentresponseprocess",
                                "height": 106,
                                "id": "eeef04c0-c421-11ed-8008-f768c09b421a",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 4,
                                "fieldId": "enrichment",
                                "height": 106,
                                "id": "f5a8d200-c421-11ed-8008-f768c09b421a",
                                "index": 5,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 4,
                                "fieldId": "manualsteps",
                                "height": 106,
                                "id": "fc620300-c421-11ed-8008-f768c09b421a",
                                "index": 6,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 4,
                                "fieldId": "enduserinteractiveness",
                                "height": 106,
                                "id": "001d0f30-c422-11ed-8008-f768c09b421a",
                                "index": 7,
                                "listId": "gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-e19f3700-c402-11ed-9e57-8f1be96082a8",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 4,
                                "fieldId": "deduplicationlogic",
                                "height": 106,
                                "id": "04a2be60-c422-11ed-8008-f768c09b421a",
                                "index": 8,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 4,
                                "fieldId": "thirdpartyintegrations",
                                "height": 106,
                                "id": "0c68f290-c422-11ed-8008-f768c09b421a",
                                "index": 9,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "incident_customincidentdatastructure",
                                "height": 53,
                                "id": "15fae610-c422-11ed-8008-f768c09b421a",
                                "index": 11,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Use Case Definition",
                        "static": false,
                        "w": 2,
                        "wrapLabels": true,
                        "x": 0,
                        "y": 3,
                        "maxH": null
                    },
                    {
                        "h": 2,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-6c6f8fb0-c403-11ed-9e57-8f1be96082a8",
                        "items": [],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Work Plan",
                        "static": false,
                        "type": "workplan",
                        "w": 1,
                        "x": 1,
                        "y": 0,
                        "maxH": null
                    },
                    {
                        "description": "If you want to generate a use case using OOTB Content, select one of the use case categories below (Example, Phishing). Then Click the Generate Use Case Button",
                        "displayType": "CARD",
                        "h": 1,
                        "hideItemTitleOnlyOne": false,
                        "hideName": true,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 1,
                                "fieldId": "customername",
                                "height": 53,
                                "id": "eab60ae0-e850-11ed-a517-45b7a9e96a13",
                                "index": 0,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasecategory",
                                "height": 53,
                                "id": "fc90f530-ca56-11ed-8ea3-95b783d87e42",
                                "index": 0,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460",
                                "sectionItemType": "field",
                                "startCol": 1
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 4,
                                "fieldId": "usecaseinitiator",
                                "height": 53,
                                "id": "ee2ffe20-cd6f-11ed-9d34-19d1f607e836",
                                "index": 2,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460",
                                "sectionItemType": "field",
                                "startCol": 2
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Incident Classification",
                        "static": false,
                        "w": 2,
                        "wrapLabels": false,
                        "x": 0,
                        "y": 2,
                        "maxH": null
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-de3c3910-cb59-11ed-a2da-436f0b94c8ec",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecaserequiredmetricsandnotifications",
                                "height": 22,
                                "id": "4b13de60-cb57-11ed-a2da-436f0b94c8ec",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "usecaseenrichmentsteps",
                                "height": 22,
                                "id": "48cc8670-cb57-11ed-a2da-436f0b94c8ec",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Analysis Sub Playbooks",
                        "static": false,
                        "w": 1,
                        "wrapLabels": true,
                        "x": 2,
                        "y": 5,
                        "maxH": null
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-0c759100-cb5a-11ed-a2da-436f0b94c8ec",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "incident_usecasebuilderusecasecontainmentsteps",
                                "height": 22,
                                "id": "e3a10830-cb5a-11ed-b65c-030bc2f7f1a6",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Containment Subplaybooks",
                        "static": false,
                        "w": 1,
                        "wrapLabels": true,
                        "x": 2,
                        "y": 7,
                        "maxH": null
                    },
                    {
                        "displayType": "ROW",
                        "h": 3,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-c3d72f10-cc9b-11ed-a2da-436f0b94c8ec",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecaseadoptionmetrics",
                                "height": 44,
                                "id": "d0f9ea70-cc9b-11ed-a2da-436f0b94c8ec",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 2,
                        "maxH": null
                    },
                    {
                        "displayType": "ROW",
                        "h": 1,
                        "hideItemTitleOnlyOne": true,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-d532ef40-d98b-11ed-8b8b-2dd91b5c16af",
                        "items": [
                            {
                                "endCol": 6,
                                "fieldId": "usecaseslas",
                                "height": 53,
                                "id": "edcdc340-d98b-11ed-8b8b-2dd91b5c16af",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "SLAs",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 9,
                        "maxH": null
                    },
                    {
                        "h": 2,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-0df2d040-da02-11ed-a62e-fb60d2f387ac",
                        "items": [],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Welcome to XSOAR",
                        "query": "PlaybookAutoGeneratorDynamicSectionMessage",
                        "queryType": "script",
                        "static": false,
                        "type": "dynamic",
                        "w": 1,
                        "x": 0,
                        "y": 0,
                        "maxH": null
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "hideItemTitleOnlyOne": true,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasepriority",
                                "height": 53,
                                "id": "2912bf80-e90b-11ed-9dc5-d18c030adc58",
                                "index": 0,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasedevelopmentstage",
                                "height": 53,
                                "id": "22927f40-e84f-11ed-8c14-711bf05ab2e9",
                                "index": 1,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasebuilderdevelopmentdeadline",
                                "height": 53,
                                "id": "6fcd36a0-da1d-11ed-9edf-1d42c4d5d3c7",
                                "index": 2,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Use Case Development Deadline",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 0,
                        "maxH": null
                    }
                ],
                "type": "custom"
            },
            {
                "hidden": true,
                "id": "ertwnfqlln",
                "name": "Use Case Definition Report",
                "sections": [
                    {
                        "h": 6,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-e19f3700-c402-11ed-9e57-8f1be96082a8",
                        "items": [
                            {
                                "endCol": 6,
                                "fieldId": "usecasename",
                                "height": 106,
                                "id": "e68c81a0-c402-11ed-9e57-8f1be96082a8",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 6,
                                "fieldId": "usecasepurpose",
                                "height": 106,
                                "id": "488c62a0-c424-11ed-bcd7-97106dc81161",
                                "index": 1,
                                "listId": "gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-e19f3700-c402-11ed-9e57-8f1be96082a8",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "usecaseenrichmentsteps",
                                "height": 53,
                                "id": "48cc8670-cb57-11ed-a2da-436f0b94c8ec",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 6,
                                "fieldId": "trigger",
                                "height": 106,
                                "id": "e13ab7c0-c421-11ed-8008-f768c09b421a",
                                "index": 3,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 6,
                                "fieldId": "incidentstructureandmapping",
                                "height": 106,
                                "id": "eb937db0-c421-11ed-8008-f768c09b421a",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 6,
                                "fieldId": "incidentresponseprocess",
                                "height": 106,
                                "id": "eeef04c0-c421-11ed-8008-f768c09b421a",
                                "index": 5,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 6,
                                "fieldId": "enrichment",
                                "height": 106,
                                "id": "f5a8d200-c421-11ed-8008-f768c09b421a",
                                "index": 6,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 6,
                                "fieldId": "manualsteps",
                                "height": 106,
                                "id": "fc620300-c421-11ed-8008-f768c09b421a",
                                "index": 7,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 6,
                                "fieldId": "enduserinteractiveness",
                                "height": 106,
                                "id": "001d0f30-c422-11ed-8008-f768c09b421a",
                                "index": 8,
                                "listId": "gmkvpzms0z-sqdqs2kfxm-gmkvpzms0z-e19f3700-c402-11ed-9e57-8f1be96082a8",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 6,
                                "fieldId": "deduplicationlogic",
                                "height": 106,
                                "id": "04a2be60-c422-11ed-8008-f768c09b421a",
                                "index": 9,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 6,
                                "fieldId": "thirdpartyintegrations",
                                "height": 106,
                                "id": "0c68f290-c422-11ed-8008-f768c09b421a",
                                "index": 10,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "incident_customincidentdatastructure",
                                "height": 53,
                                "id": "15fae610-c422-11ed-8008-f768c09b421a",
                                "index": 12,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Use Case Definition",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 1,
                        "displayType": "CARD",
                        "wrapLabels": true
                    },
                    {
                        "displayType": "CARD",
                        "h": 1,
                        "hideItemTitleOnlyOne": false,
                        "hideName": true,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460",
                        "items": [
                            {
                                "endCol": 1,
                                "fieldId": "customername",
                                "height": 53,
                                "id": "eab60ae0-e850-11ed-a517-45b7a9e96a13",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0,
                                "dropEffect": "move",
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460"
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasecategory",
                                "height": 53,
                                "id": "fc90f530-ca56-11ed-8ea3-95b783d87e42",
                                "index": 0,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460",
                                "sectionItemType": "field",
                                "startCol": 1
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 4,
                                "fieldId": "usecaseinitiator",
                                "height": 53,
                                "id": "ee2ffe20-cd6f-11ed-9d34-19d1f607e836",
                                "index": 2,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-15158640-ca50-11ed-8889-2b1f943d7460",
                                "sectionItemType": "field",
                                "startCol": 2
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Incident Classification",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 0,
                        "description": "",
                        "wrapLabels": false
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-de3c3910-cb59-11ed-a2da-436f0b94c8ec",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecaserequiredmetricsandnotifications",
                                "height": 22,
                                "id": "4b13de60-cb57-11ed-a2da-436f0b94c8ec",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Analysis Sub Playbooks",
                        "static": false,
                        "w": 3,
                        "wrapLabels": true,
                        "x": 0,
                        "y": 7
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-0c759100-cb5a-11ed-a2da-436f0b94c8ec",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "incident_usecasebuilderusecasecontainmentsteps",
                                "height": 22,
                                "id": "e3a10830-cb5a-11ed-b65c-030bc2f7f1a6",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Containment Subplaybooks",
                        "static": false,
                        "w": 3,
                        "wrapLabels": true,
                        "x": 0,
                        "y": 9
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideItemTitleOnlyOne": true,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-d532ef40-d98b-11ed-8b8b-2dd91b5c16af",
                        "items": [
                            {
                                "endCol": 6,
                                "fieldId": "usecaseslas",
                                "height": 53,
                                "id": "edcdc340-d98b-11ed-8b8b-2dd91b5c16af",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "SLAs",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 11
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "hideItemTitleOnlyOne": true,
                        "hideName": false,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasepriority",
                                "height": 53,
                                "id": "2912bf80-e90b-11ed-9dc5-d18c030adc58",
                                "index": 0,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasedevelopmentstage",
                                "height": 53,
                                "id": "22927f40-e84f-11ed-8c14-711bf05ab2e9",
                                "index": 1,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasebuilderdevelopmentdeadline",
                                "height": 53,
                                "id": "6fcd36a0-da1d-11ed-9edf-1d42c4d5d3c7",
                                "index": 2,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-7b7b21c0-da1c-11ed-9edf-1d42c4d5d3c7",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "Use Case Development Deadline",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 13
                    }
                ],
                "type": "custom",
                "report": true
            },
            {
                "hidden": false,
                "id": "kvrp35jwwn",
                "name": "Getting Started",
                "sections": [
                    {
                        "h": 7,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-field-changed-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-mimjkfjeok-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-kvrp35jwwn-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-9d2e8b10-d23b-11ed-b86b-397a28d9e92b",
                        "items": [],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "XSOAR in 5 minutes",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 0,
                        "query": {
                            "categories": [],
                            "lastId": "",
                            "pageSize": 100,
                            "tags": [
                                "Getting Started with XSOAR"
                            ],
                            "users": []
                        },
                        "queryType": "warRoomFilter",
                        "type": "invTimeline"
                    },
                    {
                        "displayType": "ROW",
                        "h": 10,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-field-changed-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-9fae1580-d2f5-11ed-bd38-c7053a2159de",
                        "items": [
                            {
                                "endCol": 4,
                                "fieldId": "usecasebuildergettingstarted",
                                "height": 106,
                                "id": "e5c05330-d304-11ed-af63-f198ecf1b034",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 2,
                        "minH": 1,
                        "minW": 2,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 2,
                        "x": 0,
                        "y": 0
                    }
                ],
                "type": "custom"
            },
            {
                "hidden": false,
                "id": "hhnsd8m7vl",
                "name": "Common Use Cases",
                "report": false,
                "sections": [
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-0a7697a0-d2f8-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasebuilderendpoint",
                                "height": 44,
                                "id": "aaa86a40-d303-11ed-af63-f198ecf1b034",
                                "index": 1,
                                "listId": "sqdqs2kfxm-0a7697a0-d2f8-11ed-8339-57a8ff7353df",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-5577f8e0-d300-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecasebuilderdataenrichmentandthreatintelligence",
                                "height": 106,
                                "id": "6a6db9b0-d300-11ed-8339-57a8ff7353df",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-5f2e3d40-d300-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecasebuildercasemanagement",
                                "height": 22,
                                "id": "7680d9d0-d300-11ed-8339-57a8ff7353df",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-dd4f7200-d302-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecasebuilderiam",
                                "height": 22,
                                "id": "6528f8e0-d303-11ed-8339-57a8ff7353df",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 12
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-de0bbd20-d302-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecasebuildervulnerabilitymanagement",
                                "height": 22,
                                "id": "5f7a5a10-d303-11ed-8339-57a8ff7353df",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 8
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-df705630-d302-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "networksecurityids",
                                "height": 22,
                                "id": "59daaf60-d303-11ed-8339-57a8ff7353df",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 8
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-01fd1800-d303-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasebuildernetworksecurityngfw",
                                "height": 106,
                                "id": "50124290-d303-11ed-8339-57a8ff7353df",
                                "index": 0,
                                "listId": "sqdqs2kfxm-0542f430-d303-11ed-8339-57a8ff7353df",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 8
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-0386c540-d303-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecasebuilderforensicsandmalwareanalysis",
                                "height": 44,
                                "id": "38ba75e0-d303-11ed-8339-57a8ff7353df",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 4
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-04717360-d303-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecasebuilderemailgateway",
                                "height": 44,
                                "id": "2a63a750-d303-11ed-8339-57a8ff7353df",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 4
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-0542f430-d303-11ed-8339-57a8ff7353df",
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "usecasebuilderauthentication",
                                "height": 44,
                                "id": "24f65740-d303-11ed-8339-57a8ff7353df",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 12
                    },
                    {
                        "displayType": "ROW",
                        "h": 4,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-a3b11ed0-d303-11ed-af63-f198ecf1b034",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasebuilderseim",
                                "height": 44,
                                "id": "0cf10d80-d2f8-11ed-8339-57a8ff7353df",
                                "index": 0,
                                "listId": "sqdqs2kfxm-0a7697a0-d2f8-11ed-8339-57a8ff7353df",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 4
                    }
                ],
                "type": "custom"
            },
            {
                "hidden": false,
                "id": "ftol4yjpvj",
                "name": "XSOAR Incident Flow",
                "report": false,
                "sections": [
                    {
                        "displayType": "ROW",
                        "h": 16,
                        "hideItemTitleOnlyOne": true,
                        "hideName": false,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-mimjkfjeok-field-changed-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-ba02d830-cc97-11ed-a2da-436f0b94c8ec",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 6,
                                "fieldId": "xsoarincidentflow",
                                "height": 106,
                                "id": "21a80f50-d242-11ed-a057-d5736b9b4e0a",
                                "index": 0,
                                "listId": "sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-ftol4yjpvj-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-field-changed-sqdqs2kfxm-ba02d830-cc97-11ed-a2da-436f0b94c8ec",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "minH": 1,
                        "moved": false,
                        "name": "XSOAR Incident Flow",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 0,
                        "description": "This shows the typical XSOAR Incident process. Alerts are ingested and categorized via Incident type, then playbooks are run to enrich, calculate alert severity, send notifications, etc. Then an analyst will review prior to containing or performing remediation steps.",
                        "maxH": null,
                        "minW": 3
                    }
                ],
                "type": "custom"
            },
            {
                "hidden": false,
                "id": "6llmfuetuv",
                "name": "Best Practice",
                "sections": [
                    {
                        "h": 5,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-6llmfuetuv-sqdqs2kfxm-6llmfuetuv-field-changed-6llmfuetuv-sqdqs2kfxm-a12dfaa0-e831-11ed-8c14-711bf05ab2e9",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 2,
                                "fieldId": "usecasetimbestpractice",
                                "height": 106,
                                "id": "a4a59530-e831-11ed-8c14-711bf05ab2e9",
                                "index": 0,
                                "listId": "sqdqs2kfxm-6llmfuetuv-field-changed-6llmfuetuv-sqdqs2kfxm-a12dfaa0-e831-11ed-8c14-711bf05ab2e9",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 1,
                        "minH": 1,
                        "minW": 1,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 1,
                        "x": 2,
                        "y": 0,
                        "displayType": "ROW",
                        "hideItemTitleOnlyOne": true,
                        "hideName": true
                    },
                    {
                        "displayType": "ROW",
                        "h": 6,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-6llmfuetuv-sqdqs2kfxm-974dfc40-e833-11ed-a914-253169c8d4dd",
                        "items": [
                            {
                                "endCol": 6,
                                "fieldId": "usecasedesignbestpractice",
                                "height": 106,
                                "id": "dbd13de0-e834-11ed-8c14-711bf05ab2e9",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "minW": 3,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 3,
                        "x": 0,
                        "y": 5
                    },
                    {
                        "displayType": "ROW",
                        "h": 5,
                        "hideItemTitleOnlyOne": true,
                        "hideName": true,
                        "i": "sqdqs2kfxm-6llmfuetuv-field-changed-6llmfuetuv-sqdqs2kfxm-57c4f960-e839-11ed-8c14-711bf05ab2e9",
                        "items": [
                            {
                                "dropEffect": "move",
                                "endCol": 4,
                                "fieldId": "usecaseingestionbestpractice",
                                "height": 106,
                                "id": "6603ac10-e839-11ed-8c14-711bf05ab2e9",
                                "index": 0,
                                "listId": "sqdqs2kfxm-57c4f960-e839-11ed-8c14-711bf05ab2e9",
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxH": null,
                        "maxW": 2,
                        "minH": 1,
                        "minW": 2,
                        "moved": false,
                        "name": "New Section",
                        "static": false,
                        "w": 2,
                        "x": 0,
                        "y": 0
                    }
                ],
                "type": "custom",
                "report": true
            },
            {
                "hidden": false,
                "id": "us0fyi1dhf",
                "name": "Downloads",
                "type": "custom",
                "sections": [
                    {
                        "h": 9,
                        "i": "sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-field-changed-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-hhnsd8m7vl-sqdqs2kfxm-us0fyi1dhf-sqdqs2kfxm-kvrp35jwwn-us0fyi1dhf-sqdqs2kfxm-4d4c0ad0-cfdb-11ed-9a2a-3d4d02bff60d",
                        "items": [],
                        "maxH": null,
                        "maxW": 3,
                        "minH": 1,
                        "minW": 3,
                        "moved": false,
                        "name": "Use Cases",
                        "query": {
                            "categories": [],
                            "tags": [
                                "UseCaseDownload"
                            ]
                        },
                        "queryType": "warRoomFilter",
                        "static": false,
                        "type": "invTimeline",
                        "w": 3,
                        "x": 0,
                        "y": 0
                    }
                ]
            },
            {
                "id": "warRoom",
                "name": "War Room",
                "type": "warRoom",
                "hidden": false
            },
            {
                "id": "workPlan",
                "name": "Work Plan",
                "type": "workPlan"
            },
            {
                "hidden": true,
                "id": "evidenceBoard",
                "name": "Evidence Board",
                "type": "evidenceBoard"
            },
            {
                "hidden": true,
                "id": "caseinfoid",
                "name": "Incident Info",
                "type": "custom",
                "sections": [
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
                        "isVisible": true,
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "type",
                                "height": 22,
                                "id": "incident-type-field",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "severity",
                                "height": 22,
                                "id": "incident-severity-field",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "owner",
                                "height": 22,
                                "id": "incident-owner-field",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "sourcebrand",
                                "height": 22,
                                "id": "incident-sourceBrand-field",
                                "index": 4,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "sourceinstance",
                                "height": 22,
                                "id": "incident-sourceInstance-field",
                                "index": 5,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "playbookid",
                                "height": 22,
                                "id": "incident-playbookId-field",
                                "index": 6,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Case Details",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 0
                    },
                    {
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
                        "maxW": 3,
                        "moved": false,
                        "name": "Notes",
                        "static": false,
                        "type": "notes",
                        "w": 1,
                        "x": 2,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
                        "maxW": 3,
                        "moved": false,
                        "name": "Work Plan",
                        "static": false,
                        "type": "workplan",
                        "w": 1,
                        "x": 1,
                        "y": 0
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
                        "isVisible": true,
                        "maxW": 3,
                        "moved": false,
                        "name": "Linked Incidents",
                        "static": false,
                        "type": "linkedIncidents",
                        "w": 1,
                        "x": 1,
                        "y": 6
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-842632c0-98b1-11e9-97d7-ed26ef9e46c8",
                        "maxW": 3,
                        "moved": false,
                        "name": "Child Incidents",
                        "static": false,
                        "type": "childInv",
                        "w": 1,
                        "x": 2,
                        "y": 4
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0",
                        "maxW": 3,
                        "moved": false,
                        "name": "Evidence",
                        "static": false,
                        "type": "evidence",
                        "w": 1,
                        "x": 2,
                        "y": 2
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "hideName": false,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
                        "maxW": 3,
                        "moved": false,
                        "name": "Team Members",
                        "static": false,
                        "type": "team",
                        "w": 1,
                        "x": 2,
                        "y": 6
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
                        "maxW": 3,
                        "moved": false,
                        "name": "Indicators",
                        "query": "",
                        "queryType": "input",
                        "static": false,
                        "type": "indicators",
                        "w": 2,
                        "x": 0,
                        "y": 4
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
                        "items": [
                            {
                                "endCol": 1,
                                "fieldId": "occurred",
                                "height": 22,
                                "id": "incident-occurred-field",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 1,
                                "fieldId": "dbotmodified",
                                "height": 22,
                                "id": "incident-modified-field",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotduedate",
                                "height": 22,
                                "id": "incident-dueDate-field",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotcreated",
                                "height": 22,
                                "id": "incident-created-field",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 1
                            },
                            {
                                "endCol": 2,
                                "fieldId": "dbotclosed",
                                "height": 22,
                                "id": "incident-closed-field",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 1
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Timeline Information",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 2
                    },
                    {
                        "displayType": "ROW",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
                        "isVisible": true,
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "dbotclosed",
                                "height": 22,
                                "id": "incident-dbotClosed-field",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "closereason",
                                "height": 22,
                                "id": "incident-closeReason-field",
                                "index": 1,
                                "sectionItemType": "field",
                                "startCol": 0
                            },
                            {
                                "endCol": 2,
                                "fieldId": "closenotes",
                                "height": 22,
                                "id": "incident-closeNotes-field",
                                "index": 2,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Closing Information",
                        "static": false,
                        "w": 1,
                        "x": 0,
                        "y": 6
                    },
                    {
                        "displayType": "CARD",
                        "h": 2,
                        "i": "sqdqs2kfxm-gmkvpzms0z-caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
                        "isVisible": true,
                        "items": [
                            {
                                "endCol": 2,
                                "fieldId": "details",
                                "height": 22,
                                "id": "incident-details-field",
                                "index": 0,
                                "sectionItemType": "field",
                                "startCol": 0
                            }
                        ],
                        "maxW": 3,
                        "moved": false,
                        "name": "Investigation Data",
                        "static": false,
                        "w": 1,
                        "x": 1,
                        "y": 2
                    }
                ]
            },
            {
                "hidden": true,
                "id": "relatedIncidents",
                "name": "Related Incidents",
                "type": "relatedIncidents"
            },
            {
                "hidden": true,
                "id": "canvas",
                "name": "Canvas",
                "type": "canvas"
            }
        ]
    },
    "edit": {
        "sections": [
            {
                "description": "To create a new use case, click the \"Create New Incident\" button below. Then, navigate to the incidents page  (the bomb icon) and open the blank use case builder incident.",
                "fields": [
                    {
                        "fieldId": "incident_customername",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasetype",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecaseinitiator",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasecategory",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecaseenrichmentsteps",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasebuilderusecasecontainmentsteps",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecaserequiredmetricsandnotifications",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecaseslas",
                        "isVisible": true
                    }
                ],
                "isVisible": true,
                "name": "Welcome to XSOAR",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": ""
            }
        ]
    },
    "group": "incident",
    "id": "Use Case Builder",
    "name": "Use Case Builder",
    "quickView": {
        "sections": [
            {
                "description": "",
                "isVisible": true,
                "name": "Basic Information",
                "query": null,
                "queryType": "",
                "readOnly": false,
                "type": "",
                "fields": [
                    {
                        "fieldId": "incident_customername",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasename",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasedescription",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasepurpose",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasetype",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasepriority",
                        "isVisible": true
                    },
                    {
                        "fieldId": "incident_usecasedevelopmentstage",
                        "isVisible": true
                    }
                ]
            }
        ]
    },
    "system": false,
    "version": -1,
    "fromVersion": "6.8.0",
    "description": ""
}