Host Indicator
Common Types Indicator
{ "edit": { "sections": [ { "description": "", "fields": [ { "fieldId": "indicator_value", "isVisible": true }, { "fieldId": "indicator_indicatortype", "isVisible": true }, { "fieldId": "indicator_score", "isVisible": true }, { "fieldId": "indicator_expiration", "isVisible": true }, { "fieldId": "indicator_comment", "isVisible": true }, { "fieldId": "indicator_investigationids", "isVisible": true } ], "isVisible": true, "name": "Basic Information", "query": null, "queryType": "", "readOnly": false, "type": "basicInformationSection" }, { "description": "", "fields": [ { "fieldId": "indicator_description", "isVisible": true }, { "fieldId": "indicator_stixid", "isVisible": true }, { "fieldId": "indicator_tags", "isVisible": true }, { "fieldId": "indicator_trafficlightprotocol", "isVisible": true } ], "isVisible": true, "name": "Custom fields - core", "query": null, "queryType": "", "readOnly": false, "type": "" }, { "description": "", "fields": [ { "fieldId": "indicator_ipaddress", "isVisible": true }, { "fieldId": "indicator_macaddress", "isVisible": true }, { "fieldId": "indicator_biosversion", "isVisible": true }, { "fieldId": "indicator_devicemodel", "isVisible": true }, { "fieldId": "indicator_memory", "isVisible": true }, { "fieldId": "indicator_processors", "isVisible": true }, { "fieldId": "indicator_operatingsystem", "isVisible": true }, { "fieldId": "indicator_operatingsystemversion", "isVisible": true } ], "isVisible": true, "name": "Custom indicators - unique", "query": null, "queryType": "", "readOnly": false, "type": "" } ] }, "group": "indicator", "id": "hostRep", "indicatorsDetails": { "tabs": [ { "id": "main", "name": "Summary", "sections": [ { "displayType": "ROW", "h": 5, "hideName": false, "i": "main-9fa550a0-a2e6-11e9-a74b-a79deb2f5d2a", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "indicatortype", "height": 22, "id": "61326b10-ba22-11ea-a7c8-5116979227bb", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "source", "height": 22, "id": "ed71f1c0-ccc6-11ea-937a-6f8841d9fed1", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "internal", "height": 22, "id": "ef9d0f20-ccc6-11ea-937a-6f8841d9fed1", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "ipaddress", "height": 22, "id": "f1b05ec0-ccc6-11ea-937a-6f8841d9fed1", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "macaddress", "height": 22, "id": "f7cc8c70-ccc6-11ea-937a-6f8841d9fed1", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "biosversion", "height": 22, "id": "f9ecd460-ccc6-11ea-937a-6f8841d9fed1", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "devicemodel", "height": 22, "id": "024cfea0-ccc7-11ea-937a-6f8841d9fed1", "index": 6, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dhcpserver", "height": 22, "id": "06043a40-ccc7-11ea-937a-6f8841d9fed1", "index": 7, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "domainname", "height": 22, "id": "0edec4a0-ccc7-11ea-937a-6f8841d9fed1", "index": 8, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "memory", "height": 22, "id": "11bda1a0-ccc7-11ea-937a-6f8841d9fed1", "index": 9, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "processors", "height": 22, "id": "16568ab0-ccc7-11ea-937a-6f8841d9fed1", "index": 10, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "operatingsystem", "height": 22, "id": "1d9873b0-ccc7-11ea-937a-6f8841d9fed1", "index": 11, "listId": "main-9fa550a0-a2e6-11e9-a74b-a79deb2f5d2a", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "operatingsystemversion", "height": 22, "id": "1eca8b10-ccc7-11ea-937a-6f8841d9fed1", "index": 12, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "trafficlightprotocol", "height": 22, "id": "2faf3d30-b6de-11ea-824d-5b821ee9d562", "index": 13, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "tags", "height": 22, "id": "083ac1b0-4e75-11ea-8bf6-67db400d7da5", "index": 14, "listId": "main-ffe4f7b0-4e74-11ea-8bf6-67db400d7da5", "sectionItemType": "field", "startCol": 0 }, { "args": { "field": { "simple": "tags" } }, "buttonClass": "secondary", "dropEffect": "move", "endCol": 1, "fieldId": "", "height": 44, "id": "b6cab200-9db5-11ea-a17b-1d06fd239c52", "index": 15, "listId": "main-329c6710-a640-11ea-9a93-611e57d9f959", "name": "Add tags", "scriptId": "Builtin|||appendIndicatorField", "sectionItemType": "button", "startCol": 0 }, { "args": { "field": { "simple": "tags" } }, "buttonClass": "secondary", "dropEffect": "move", "endCol": 2, "fieldId": "", "height": 44, "id": "f4d78d70-9db5-11ea-a17b-1d06fd239c52", "index": 15, "listId": "main-ffe4f7b0-4e74-11ea-8bf6-67db400d7da5", "name": "Remove tags", "scriptId": "Builtin|||removeIndicatorField", "sectionItemType": "button", "startCol": 1 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Host details", "static": false, "w": 1, "x": 1, "y": 0 }, { "columns": [ { "displayed": true, "isDefault": false, "key": "id", "width": 110 }, { "displayed": true, "isDefault": true, "key": "name", "width": 120 }, { "displayed": true, "isDefault": false, "key": "severity", "width": 80 }, { "displayed": true, "isDefault": true, "key": "type", "width": 104 }, { "displayed": true, "isDefault": true, "key": "status", "width": 80 }, { "displayed": true, "isDefault": false, "key": "owner", "width": 160 } ], "displayType": "ROW", "h": 2, "hideName": false, "i": "main-374a4120-ac5d-11e9-82f1-b168a5ac3417", "isVisible": true, "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Related Incidents", "readOnly": true, "static": false, "type": "relatedIncidents", "w": 2, "x": 0, "y": 7 }, { "columns": [ { "displayed": true, "isDefault": true, "key": "created", "width": 150 }, { "displayed": true, "isDefault": true, "key": "content", "width": 200 }, { "displayed": true, "isDefault": true, "key": "source", "width": 100 } ], "h": 4, "i": "main-7f557450-3d56-11ea-9dff-c57e8949d2f9", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Timeline", "static": false, "type": "indicatorTimeline", "w": 1, "x": 2, "y": 1 }, { "h": 1, "hideName": true, "i": "main-8f8aedf0-3d56-11ea-9dff-c57e8949d2f9", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Expiration Status", "static": false, "type": "expirationStatus", "w": 1, "x": 0, "y": 0 }, { "h": 1, "hideName": true, "i": "main-981b9e10-3d56-11ea-9dff-c57e8949d2f9", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Reputation Status", "static": false, "type": "reputationStatus", "w": 1, "x": 0, "y": 1 }, { "h": 4, "i": "main-174e7bd0-3d57-11ea-9dff-c57e8949d2f9", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Comments", "static": false, "type": "comments", "w": 1, "x": 2, "y": 5 }, { "displayType": "ROW", "h": 1, "hideName": false, "i": "main-fafa73b0-a9af-11ea-a4b1-a5bbd1788c5a", "items": [ { "args": {}, "endCol": 1, "fieldId": "", "height": 44, "id": "fe326d30-a9af-11ea-a4b1-a5bbd1788c5a", "index": 0, "name": "Enrich indicator", "scriptId": "Builtin|||enrichIndicators", "sectionItemType": "button", "startCol": 0 }, { "args": {}, "dropEffect": "move", "endCol": 2, "fieldId": "", "height": 44, "id": "64422e90-bf71-11ea-b085-3f354e53d3e6", "index": 0, "listId": "main-fafa73b0-a9af-11ea-a4b1-a5bbd1788c5a", "name": "Expire indicator", "scriptId": "Builtin|||expireIndicators", "sectionItemType": "button", "startCol": 1 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Actions", "static": false, "w": 1, "x": 2, "y": 0 }, { "h": 3, "i": "main-d64ee060-b298-11ed-8b1a-09c2852d7221", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Verdict", "static": false, "type": "reputationSources", "w": 1, "x": 0, "y": 2 }, { "h": 2, "i": "main-00215bc0-b299-11ed-8b1a-09c2852d7221", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Relationships", "static": false, "type": "relationshipsTable", "w": 2, "x": 0, "y": 5 } ], "type": "custom" }, { "hidden": false, "id": "kopixekjqw", "name": "Additional Details", "sections": [ { "displayType": "ROW", "h": 5, "i": "kopixekjqw-27fffce0-beb4-11ea-b519-21bdfb6f5a43", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Custom Details", "static": false, "type": "customDetails", "w": 3, "x": 0, "y": 5 }, { "displayType": "ROW", "h": 5, "hideName": false, "i": "kopixekjqw-2be2d5e0-b299-11ed-8b1a-09c2852d7221", "items": [ { "endCol": 6, "fieldId": "communitynotes", "height": 106, "id": "3fb7bd60-b299-11ed-8b1a-09c2852d7221", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 6, "fieldId": "publications", "height": 106, "id": "4240d940-b299-11ed-8b1a-09c2852d7221", "index": 1, "listId": "kopixekjqw-2be2d5e0-b299-11ed-8b1a-09c2852d7221", "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Additional details", "static": false, "w": 3, "x": 0, "y": 0 } ], "type": "custom" }, { "id": "canvas", "name": "Canvas", "type": "canvas", "hidden": false } ] }, "indicatorsQuickView": { "tabs": [ { "id": "indicator-quick-view-info", "name": "Info", "sections": [ { "h": 1, "hideName": true, "i": "indicator-quick-view-info-expirationStatus", "maxW": 3, "moved": false, "name": "Expiration Status", "static": false, "type": "expirationStatus", "w": 1, "x": 0, "y": 0 }, { "h": 2, "i": "indicator-quick-view-info-relatedIncidents", "maxW": 3, "moved": false, "name": "Related Incidents", "static": false, "type": "relatedIncidents", "w": 1, "x": 0, "y": 7 }, { "h": 3, "i": "indicator-quick-view-info-comments", "maxW": 3, "moved": false, "name": "Comments", "static": false, "type": "comments", "w": 1, "x": 0, "y": 9 }, { "displayType": "ROW", "h": 4, "hideName": false, "i": "indicator-quick-view-info-8dc2a6e0-ba22-11ea-a7c8-5116979227bb", "items": [ { "endCol": 2, "fieldId": "indicatortype", "height": 22, "id": "98a647b0-ba22-11ea-a7c8-5116979227bb", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "source", "height": 22, "id": "4587fe40-ccc7-11ea-937a-6f8841d9fed1", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "ipaddress", "height": 22, "id": "497712c0-ccc7-11ea-937a-6f8841d9fed1", "index": 2, "listId": "indicator-quick-view-info-8dc2a6e0-ba22-11ea-a7c8-5116979227bb", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "macaddress", "height": 22, "id": "4c20fd10-ccc7-11ea-937a-6f8841d9fed1", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "biosversion", "height": 22, "id": "4edf32b0-ccc7-11ea-937a-6f8841d9fed1", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dhcpserver", "height": 22, "id": "5b0f0290-ccc7-11ea-937a-6f8841d9fed1", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "devicemodel", "height": 22, "id": "67ad4bb0-ccc7-11ea-937a-6f8841d9fed1", "index": 6, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "domainname", "height": 22, "id": "75d3e280-ccc7-11ea-937a-6f8841d9fed1", "index": 7, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "memory", "height": 22, "id": "6b5237d0-ccc7-11ea-937a-6f8841d9fed1", "index": 8, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "processors", "height": 22, "id": "424fddb0-ccc7-11ea-937a-6f8841d9fed1", "index": 9, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "operatingsystem", "height": 22, "id": "bdfae3f0-b299-11ed-8b1a-09c2852d7221", "index": 10, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "operatingsystemversion", "height": 22, "id": "3e6276e0-ccc7-11ea-937a-6f8841d9fed1", "index": 11, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "trafficlightprotocol", "height": 22, "id": "db356250-c035-11ea-b496-ed7c34e038e0", "index": 12, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "tags", "height": 22, "id": "indicator-quick-view-info-tags-field", "index": 13, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Host details", "static": false, "w": 1, "x": 0, "y": 3 }, { "h": 2, "i": "indicator-quick-view-info-ca194eb0-b299-11ed-8b1a-09c2852d7221", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Verdict", "static": false, "type": "reputationSources", "w": 1, "x": 0, "y": 1 } ], "type": "custom" }, { "hidden": false, "id": "tp9mh2khfd", "name": "Relationships", "sections": [ { "h": 8, "i": "tp9mh2khfd-da75d850-b299-11ed-8b1a-09c2852d7221", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Relationships", "static": false, "type": "relationshipsTable", "w": 1, "x": 0, "y": 0 } ], "type": "custom" } ] }, "name": "Host Indicator", "system": false, "version": -1, "fromVersion": "6.10.0", "description": "Host indicator layout", "supportedModules": [ "agentix", "xsiam" ] }