XM Cyber Layout

Contains a tab XMCyber with fields for XM Cyber Incident

XM Cyber Incident

Details

IDXM_Cyber_Layout
Groupincident
Version-1
From Version6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 11 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
dbotsource Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
playbookid Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 22
dbotmodified Col 0-1, Height: 22
dbotduedate Col 0-2, Height: 22
dbotcreated Col 1-2, Height: 22
dbotclosed Col 1-2, Height: 22

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Investigation Data

Field IDPosition
details Col 0-2, Height: 22
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

XM Cyber 4 sections

Inbound

Below are attack techniques that an attacker could use to compromise the entity.

Field IDPosition
compromisingtechniques Col 0-2, Height: 106

Outbound: Critical assets

Below are the critical assets that the entity puts at risk in future steps, and the complexity of the attack paths to each critical asset.

Field IDPosition
criticalassetsatrisk Col 0-2, Height: 22
criticalassetsatrisklist Col 0-2, Height: 106

Summary

Field IDPosition
entitytype Col 0-2, Height: 22
entityreport Col 0-2, Height: 22
entityname Col 0-2, Height: 22
entityid Col 0-2, Height: 22
entityisacriticalasset Col 0-2, Height: 22
xmcyberavgcomplexitylevel Col 2-4, Height: 22
xmcyberavgcomplexityscore Col 2-4, Height: 22

Outbound: Affected entities

Below are the entities, including critical assets, that the entity compromises in the next step, as well as which attack technique the attacker would use to compromise each entity.

Field IDPosition
affectedentities Col 0-2, Height: 22
affectedentitieslist Col 0-2, Height: 106