XM Cyber Layout

Contains a tab XMCyber with fields for XM Cyber Incident

Details

ID	`XM_Cyber_Layout`
Group	incident
Version	-1
From Version	6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 11 sections

Case Details

Field ID	Position
type	Col 0-2, Height: 22
severity	Col 0-2, Height: 22
owner	Col 0-2, Height: 22
dbotsource	Col 0-2, Height: 22
sourcebrand	Col 0-2, Height: 22
sourceinstance	Col 0-2, Height: 22
playbookid	Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field ID	Position
occurred	Col 0-1, Height: 22
dbotmodified	Col 0-1, Height: 22
dbotduedate	Col 0-2, Height: 22
dbotcreated	Col 1-2, Height: 22
dbotclosed	Col 1-2, Height: 22

Closing Information

Field ID	Position
dbotclosed	Col 0-2, Height: 22
closereason	Col 0-2, Height: 22
closenotes	Col 0-2, Height: 22

Investigation Data

Field ID	Position
details	Col 0-2, Height: 22

War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

XM Cyber 4 sections

Inbound

Below are attack techniques that an attacker could use to compromise the entity.

Field ID	Position
compromisingtechniques	Col 0-2, Height: 106

Outbound: Critical assets

Below are the critical assets that the entity puts at risk in future steps, and the complexity of the attack paths to each critical asset.

Field ID	Position
criticalassetsatrisk	Col 0-2, Height: 22
criticalassetsatrisklist	Col 0-2, Height: 106

Summary

Field ID	Position
entitytype	Col 0-2, Height: 22
entityreport	Col 0-2, Height: 22
entityname	Col 0-2, Height: 22
entityid	Col 0-2, Height: 22
entityisacriticalasset	Col 0-2, Height: 22
xmcyberavgcomplexitylevel	Col 2-4, Height: 22
xmcyberavgcomplexityscore	Col 2-4, Height: 22

Outbound: Affected entities

Below are the entities, including critical assets, that the entity compromises in the next step, as well as which attack technique the attacker would use to compromise each entity.

Field ID	Position
affectedentities	Col 0-2, Height: 22
affectedentitieslist	Col 0-2, Height: 106

Source

layoutscontainer-XM_Cyber_Layout.json

Download History Raw

{
    "description": "Contains a tab XMCyber with fields for XM Cyber Incident",
    "fromVersion": "6.0.0",
    "group": "incident",
    "id": "XM_Cyber_Layout",
    "name": "XM Cyber Layout",
    "system": false,
    "version": -1,
    "detailsV2": {
        "tabs": [
			{
				"id": "summary",
				"name": "Legacy Summary",
				"type": "summary"
			},
			{
				"id": "caseinfoid",
				"name": "Incident Info",
				"sections": [
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "type",
								"height": 22,
								"id": "incident-type-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "severity",
								"height": 22,
								"id": "incident-severity-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "owner",
								"height": 22,
								"id": "incident-owner-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "dbotsource",
								"height": 22,
								"id": "incident-source-field",
								"index": 3,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "sourcebrand",
								"height": 22,
								"id": "incident-sourceBrand-field",
								"index": 4,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "sourceinstance",
								"height": 22,
								"id": "incident-sourceInstance-field",
								"index": 5,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "playbookid",
								"height": 22,
								"id": "incident-playbookId-field",
								"index": 6,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Case Details",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 0
					},
					{
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Notes",
						"static": false,
						"type": "notes",
						"w": 1,
						"x": 2,
						"y": 0
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Work Plan",
						"static": false,
						"type": "workplan",
						"w": 1,
						"x": 1,
						"y": 0
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
						"isVisible": true,
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Linked Incidents",
						"static": false,
						"type": "linkedIncidents",
						"w": 1,
						"x": 1,
						"y": 6
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-842632c0-98b1-11e9-97d7-ed26ef9e46c8",
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Child Incidents",
						"static": false,
						"type": "childInv",
						"w": 1,
						"x": 2,
						"y": 4
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0",
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Evidence",
						"static": false,
						"type": "evidence",
						"w": 1,
						"x": 2,
						"y": 2
					},
					{
						"displayType": "ROW",
						"h": 2,
						"hideName": false,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Team Members",
						"static": false,
						"type": "team",
						"w": 1,
						"x": 2,
						"y": 6
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e",
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Indicators",
						"query": "",
						"queryType": "input",
						"static": false,
						"type": "indicators",
						"w": 2,
						"x": 0,
						"y": 4
					},
					{
						"displayType": "CARD",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
						"items": [
							{
								"endCol": 1,
								"fieldId": "occurred",
								"height": 22,
								"id": "incident-occurred-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 1,
								"fieldId": "dbotmodified",
								"height": 22,
								"id": "incident-modified-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "dbotduedate",
								"height": 22,
								"id": "incident-dueDate-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "dbotcreated",
								"height": 22,
								"id": "incident-created-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 1
							},
							{
								"endCol": 2,
								"fieldId": "dbotclosed",
								"height": 22,
								"id": "incident-closed-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 1
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Timeline Information",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 2
					},
					{
						"displayType": "ROW",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "dbotclosed",
								"height": 22,
								"id": "incident-dbotClosed-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "closereason",
								"height": 22,
								"id": "incident-closeReason-field",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "closenotes",
								"height": 22,
								"id": "incident-closeNotes-field",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Closing Information",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 6
					},
					{
						"displayType": "CARD",
						"h": 2,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289",
						"isVisible": true,
						"items": [
							{
								"endCol": 2,
								"fieldId": "details",
								"height": 22,
								"id": "incident-details-field",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Investigation Data",
						"static": false,
						"w": 1,
						"x": 1,
						"y": 2
					}
				],
				"type": "custom"
			},
			{
				"id": "warRoom",
				"name": "War Room",
				"type": "warRoom"
			},
			{
				"id": "workPlan",
				"name": "Work Plan",
				"type": "workPlan"
			},
			{
				"id": "evidenceBoard",
				"name": "Evidence Board",
				"type": "evidenceBoard"
			},
			{
				"id": "relatedIncidents",
				"name": "Related Incidents",
				"type": "relatedIncidents"
			},
			{
				"id": "canvas",
				"name": "Canvas",
				"type": "canvas"
			},
			{
				"hidden": false,
				"id": "sqsw8wv4hm",
				"name": "XM Cyber",
				"sections": [
					{
						"description": "Below are attack techniques that an attacker could use to compromise the entity.",
						"displayType": "ROW",
						"h": 6,
						"hideName": false,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-6a7d6a50-08cf-11ed-aa39-c3aebd42cfee",
						"items": [
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "compromisingtechniques",
								"height": 106,
								"id": "d88f0ee0-08cf-11ed-aa39-c3aebd42cfee",
								"index": 0,
								"listId": "sqsw8wv4hm-6a7d6a50-08cf-11ed-aa39-c3aebd42cfee",
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Inbound",
						"static": false,
						"w": 1,
						"x": 0,
						"y": 2
					},
					{
						"description": "Below are the critical assets that the entity puts at risk in future steps, and the complexity of the attack paths to each critical asset.",
						"displayType": "ROW",
						"h": 6,
						"hideName": false,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-1d56f010-08d0-11ed-aa39-c3aebd42cfee",
						"items": [
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "criticalassetsatrisk",
								"height": 22,
								"id": "f7e8be00-0f14-11eb-acc7-97278328b66f",
								"index": 0,
								"listId": "sqsw8wv4hm-1d56f010-08d0-11ed-aa39-c3aebd42cfee",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "criticalassetsatrisklist",
								"height": 106,
								"id": "24ed8070-187f-11eb-b34a-395d056e24a8",
								"index": 2,
								"listId": "sqsw8wv4hm-1d56f010-08d0-11ed-aa39-c3aebd42cfee",
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Outbound: Critical assets",
						"static": false,
						"w": 1,
						"x": 1,
						"y": 2
					},
					{
						"displayType": "ROW",
						"h": 2,
						"hideName": false,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-a7877530-0b13-11ed-bfde-f9c2149a144c",
						"items": [
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "entitytype",
								"height": 22,
								"id": "1e324220-1325-11eb-8c8a-31e6f7de4330",
								"index": 0,
								"listId": "sqsw8wv4hm-1f08b430-08cf-11ed-aa39-c3aebd42cfee",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "entityreport",
								"height": 22,
								"id": "6be4bf80-1473-11eb-8e98-c1f918d6dfb0",
								"index": 1,
								"listId": "sqsw8wv4hm-1f08b430-08cf-11ed-aa39-c3aebd42cfee",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "entityname",
								"height": 22,
								"id": "2bd10050-1880-11eb-b34a-395d056e24a8",
								"index": 2,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "entityid",
								"height": 22,
								"id": "4928f760-1313-11eb-8c4e-19d649fb0001",
								"index": 3,
								"listId": "sqsw8wv4hm-1f08b430-08cf-11ed-aa39-c3aebd42cfee",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"dropEffect": "move",
								"endCol": 2,
								"fieldId": "entityisacriticalasset",
								"height": 22,
								"id": "89960d20-1317-11eb-8677-ed095e9aa5f3",
								"index": 4,
								"listId": "sqsw8wv4hm-77acfbc0-0f14-11eb-acc7-97278328b66f",
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 4,
								"fieldId": "xmcyberavgcomplexitylevel",
								"height": 22,
								"id": "edbe5870-325f-11ed-9f3b-1919f4cc0d55",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 2
							},
							{
								"endCol": 4,
								"fieldId": "xmcyberavgcomplexityscore",
								"height": 22,
								"id": "eeb4ed70-325f-11ed-9f3b-1919f4cc0d55",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 2
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Summary",
						"static": false,
						"w": 3,
						"x": 0,
						"y": 0
					},
					{
						"description": "Below are the entities, including critical assets, that the entity compromises in the next step, as well as which attack technique the attacker would use to compromise each entity.",
						"displayType": "ROW",
						"h": 6,
						"hideName": false,
						"i": "caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-caseinfoid-sqsw8wv4hm-c82908d0-0b13-11ed-bfde-f9c2149a144c",
						"items": [
							{
								"endCol": 2,
								"fieldId": "affectedentities",
								"height": 22,
								"id": "62ed1570-187f-11eb-b34a-395d056e24a8",
								"index": 0,
								"sectionItemType": "field",
								"startCol": 0
							},
							{
								"endCol": 2,
								"fieldId": "affectedentitieslist",
								"height": 106,
								"id": "64f6c820-187f-11eb-b34a-395d056e24a8",
								"index": 1,
								"sectionItemType": "field",
								"startCol": 0
							}
						],
						"maxH": null,
						"maxW": 3,
						"minH": 1,
						"moved": false,
						"name": "Outbound: Affected entities",
						"static": false,
						"w": 1,
						"x": 2,
						"y": 2
					}
				],
				"type": "custom"
			}
		]
    },
    "marketplaces": ["xsoar"]
}