Details
| ID | Vectra RUX Events Detection |
|---|---|
| Group | incident |
| Version | -1 |
| From Version | 6.10.0 |
Layout Structure
Legacy Summary 0 sections
No sections defined.
Incident Info 9 sections
Case Details
| Field ID | Position |
|---|---|
| type | Col 0-2, Height: 22 |
| severity | Col 0-2, Height: 22 |
| vectraruxinvestigationstatus | Col 0-2, Height: 22 |
| vectraruxexternalreferenceid | Col 0-2, Height: 22 |
| vectraruxdetectiontype | Col 0-2, Height: 22 |
| tags | Col 0-2, Height: 22 |
| owner | Col 0-2, Height: 22 |
| sourcebrand | Col 0-2, Height: 22 |
| sourceinstance | Col 0-2, Height: 22 |
| playbookid | Col 0-2, Height: 22 |
Work Plan
Linked Incidents
Child Incidents
Evidence
Team Members
Indicators
Timeline Information
| Field ID | Position |
|---|---|
| dbotcreated | Col 0-1, Height: 53 |
| occurred | Col 0-1, Height: 53 |
| dbotduedate | Col 0-1, Height: 53 |
| — | Col 0-2, Height: 53 |
| — | Col 0-2, Height: 22 |
| dbotmodified | Col 1-2, Height: 53 |
| dbotclosed | Col 1-2, Height: 53 |
Closing Information
| Field ID | Position |
|---|---|
| dbotclosed | Col 0-2, Height: 22 |
| closereason | Col 0-2, Height: 22 |
| closenotes | Col 0-2, Height: 22 |
Events Detections Info 12 sections
Detection Information
| Field ID | Position |
|---|---|
| detectionurl | Col 0-2, Height: 22 |
| vectraruxdetectionid | Col 0-2, Height: 22 |
| vectraruxinvestigationstatus | Col 0-2, Height: 22 |
| vectraruxdetectiontype | Col 0-2, Height: 22 |
| vectraruxdetectioncategory | Col 0-2, Height: 22 |
| vectraruxmitreids | Col 0-2, Height: 44 |
| tags | Col 0-2, Height: 22 |
| vectraruxiseventtriaged | Col 0-2, Height: 22 |
| vectraruxdetectionreason | Col 0-2, Height: 22 |
Entity Information
| Field ID | Position |
|---|---|
| vectraruxentityurl | Col 0-2, Height: 22 |
| vectraruxentityid | Col 0-2, Height: 22 |
| vectraruxentityname | Col 0-2, Height: 22 |
| vectraruxentitytype | Col 0-2, Height: 22 |
| vectraruxentityexternalreferenceid | Col 0-2, Height: 22 |
| vectraruxentityimportance | Col 0-2, Height: 22 |
| vectraruxentityprioritystatus | Col 0-2, Height: 22 |
| vectraruxentityunresolvedprioritystatus | Col 0-2, Height: 22 |
| vectraruxentityurgencyscore | Col 0-2, Height: 22 |
| vectraruxentityip | Col 0-2, Height: 22 |
| vectraruxentityuid | Col 0-2, Height: 22 |
| vectraruxentityprivilegecategory | Col 0-2, Height: 22 |
Entity Assignment Data
| Field ID | Position |
|---|---|
| — | Col 0-2, Height: 44 |
| vectraruxentityassignmentassignedto | Col 0-2, Height: 22 |
| vectraruxentityassignmentassignedby | Col 0-2, Height: 22 |
| vectraruxentityassignmentassigneddate | Col 0-2, Height: 22 |
| vectraruxentityassignmentid | Col 0-2, Height: 22 |
| vectraruxentityassignmentoutcome | Col 0-2, Height: 22 |
| vectraruxentityassignmentresolvedby | Col 0-2, Height: 22 |
| vectraruxentityassignmentresolveddate | Col 0-2, Height: 22 |
Event Summary Information
| Field ID | Position |
|---|---|
| vectraruxeventips | Col 0-2, Height: 44 |
| vectraruxeventdomains | Col 0-2, Height: 44 |
| vectraruxeventports | Col 0-2, Height: 44 |
| vectraruxeventdns | Col 0-2, Height: 44 |
| vectraruxeventaccounts | Col 2-4, Height: 44 |
| vectraruxeventhosts | Col 2-4, Height: 44 |
| vectraruxeventexternaltargets | Col 2-4, Height: 44 |
| vectraruxeventprotocols | Col 2-4, Height: 44 |
Data Source
| Field ID | Position |
|---|---|
| vectraruxdatasourcetype | Col 0-2, Height: 22 |
| vectraruxdatasourcesensorname | Col 0-2, Height: 22 |
| vectraruxdatasourcesensorid | Col 0-2, Height: 22 |
Destination Domain Information
| Field ID | Position |
|---|---|
| vectraruxdestinationdomaininformation | Col 0-6, Height: 106 |
Destination Host Information
| Field ID | Position |
|---|---|
| vectraruxdestinationhostinformation | Col 0-6, Height: 106 |
Destination Account Information
| Field ID | Position |
|---|---|
| vectraruxdestinationaccountinformation | Col 0-6, Height: 106 |
Detection Investigation Data
| Field ID | Position |
|---|---|
| — | Col 0-4, Height: 53 |
| details | Col 0-4, Height: 106 |
Notes
EDR Process Context
| Field ID | Position |
|---|---|
| vectraruxprocesscontextquerystatus | Col 0-2, Height: 22 |
| vectraruxprocesscontextdatecreated | Col 0-2, Height: 22 |
| vectraruxprocesscontextquerylink | Col 0-2, Height: 22 |
| vectraruxprocesscontextinvestigateentitylink | Col 0-2, Height: 22 |
| vectraruxprocesscontexterrormessage | Col 0-2, Height: 22 |
| vectraruxprocesscontextprocesses | Col 2-6, Height: 106 |
New Section
| Field ID | Position |
|---|---|
| — | Col 0-6, Height: 44 |
War Room 0 sections
No sections defined.
Work Plan 0 sections
No sections defined.
Evidence Board 0 sections
No sections defined.
Related Incidents 0 sections
No sections defined.
Canvas 0 sections
No sections defined.