{
"description": "Registry Key Indicator Layout",
"edit": {
"sections": [
{
"description": "",
"fields": [
{
"fieldId": "indicator_value",
"isVisible": true
},
{
"fieldId": "indicator_indicatortype",
"isVisible": true
},
{
"fieldId": "indicator_score",
"isVisible": true
},
{
"fieldId": "indicator_expiration",
"isVisible": true
},
{
"fieldId": "indicator_comment",
"isVisible": true
},
{
"fieldId": "indicator_investigationids",
"isVisible": true
}
],
"isVisible": true,
"name": "Basic Information",
"query": null,
"queryType": "",
"readOnly": false,
"type": "basicInformationSection"
},
{
"description": "",
"fields": [
{
"fieldId": "indicator_communitynotes",
"isVisible": true
},
{
"fieldId": "indicator_description",
"isVisible": true
},
{
"fieldId": "indicator_stixid",
"isVisible": true
},
{
"fieldId": "indicator_tags",
"isVisible": true
},
{
"fieldId": "indicator_trafficlightprotocol",
"isVisible": true
}
],
"isVisible": true,
"name": "Custom fields - core",
"query": null,
"queryType": "",
"readOnly": false,
"type": ""
},
{
"description": "",
"fields": [
{
"fieldId": "indicator_keyvalue",
"isVisible": true
}
],
"isVisible": true,
"name": "Custom fields - unique",
"query": null,
"queryType": "",
"readOnly": false,
"type": ""
}
]
},
"group": "indicator",
"id": "registryKey",
"indicatorsDetails": {
"tabs": [
{
"id": "main",
"name": "Summary",
"sections": [
{
"displayType": "ROW",
"h": 4,
"hideName": false,
"i": "main-9fa550a0-a2e6-11e9-a74b-a79deb2f5d2a",
"isVisible": true,
"items": [
{
"endCol": 2,
"fieldId": "timestamp",
"height": 22,
"id": "55386050-b900-11ed-bb45-976e784dad12",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "modified",
"height": 22,
"id": "59f15480-b900-11ed-bb45-976e784dad12",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "stixid",
"height": 22,
"id": "64c516d0-b900-11ed-bb45-976e784dad12",
"index": 2,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "description",
"height": 44,
"id": "98a879b0-b900-11ed-bb45-976e784dad12",
"index": 3,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "trafficlightprotocol",
"height": 22,
"id": "2faf3d30-b6de-11ea-824d-5b821ee9d562",
"index": 4,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "tags",
"height": 22,
"id": "083ac1b0-4e75-11ea-8bf6-67db400d7da5",
"index": 5,
"listId": "main-ffe4f7b0-4e74-11ea-8bf6-67db400d7da5",
"sectionItemType": "field",
"startCol": 0
},
{
"args": {
"field": {
"simple": "tags"
}
},
"buttonClass": "secondary",
"dropEffect": "move",
"endCol": 1,
"fieldId": "",
"height": 44,
"id": "b6cab200-9db5-11ea-a17b-1d06fd239c52",
"index": 6,
"listId": "main-329c6710-a640-11ea-9a93-611e57d9f959",
"name": "Add tags",
"scriptId": "Builtin|||appendIndicatorField",
"sectionItemType": "button",
"startCol": 0
},
{
"args": {
"field": {
"simple": "tags"
}
},
"buttonClass": "secondary",
"dropEffect": "move",
"endCol": 2,
"fieldId": "",
"height": 44,
"id": "f4d78d70-9db5-11ea-a17b-1d06fd239c52",
"index": 6,
"listId": "main-ffe4f7b0-4e74-11ea-8bf6-67db400d7da5",
"name": "Remove tags",
"scriptId": "Builtin|||removeIndicatorField",
"sectionItemType": "button",
"startCol": 1
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Basic Information",
"static": false,
"w": 1,
"x": 1,
"y": 0
},
{
"columns": [
{
"displayed": true,
"isDefault": false,
"key": "id",
"width": 110
},
{
"displayed": true,
"isDefault": true,
"key": "name",
"width": 120
},
{
"displayed": true,
"isDefault": false,
"key": "severity",
"width": 80
},
{
"displayed": true,
"isDefault": true,
"key": "type",
"width": 104
},
{
"displayed": true,
"isDefault": true,
"key": "status",
"width": 80
},
{
"displayed": true,
"isDefault": false,
"key": "owner",
"width": 160
}
],
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "main-374a4120-ac5d-11e9-82f1-b168a5ac3417",
"isVisible": true,
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Related Incidents",
"readOnly": true,
"static": false,
"type": "relatedIncidents",
"w": 2,
"x": 0,
"y": 7
},
{
"h": 1,
"hideName": true,
"i": "main-8f8aedf0-3d56-11ea-9dff-c57e8949d2f9",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Expiration Status",
"static": false,
"type": "expirationStatus",
"w": 1,
"x": 0,
"y": 0
},
{
"h": 1,
"hideName": true,
"i": "main-981b9e10-3d56-11ea-9dff-c57e8949d2f9",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Reputation Status",
"static": false,
"type": "reputationStatus",
"w": 1,
"x": 0,
"y": 1
},
{
"h": 4,
"i": "main-174e7bd0-3d57-11ea-9dff-c57e8949d2f9",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Comments",
"static": false,
"type": "comments",
"w": 1,
"x": 2,
"y": 5
},
{
"displayType": "ROW",
"h": 1,
"hideName": false,
"i": "main-fafa73b0-a9af-11ea-a4b1-a5bbd1788c5a",
"items": [
{
"args": {},
"endCol": 1,
"fieldId": "",
"height": 44,
"id": "fe326d30-a9af-11ea-a4b1-a5bbd1788c5a",
"index": 0,
"name": "Enrich indicator",
"scriptId": "Builtin|||enrichIndicators",
"sectionItemType": "button",
"startCol": 0
},
{
"args": {},
"dropEffect": "move",
"endCol": 2,
"fieldId": "",
"height": 44,
"id": "64422e90-bf71-11ea-b085-3f354e53d3e6",
"index": 0,
"listId": "main-fafa73b0-a9af-11ea-a4b1-a5bbd1788c5a",
"name": "Expire indicator",
"scriptId": "Builtin|||expireIndicators",
"sectionItemType": "button",
"startCol": 1
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Actions",
"static": false,
"w": 1,
"x": 2,
"y": 0
},
{
"h": 2,
"i": "main-fa9ae5a0-b8ff-11ed-bb45-976e784dad12",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Timeline",
"static": false,
"type": "indicatorTimeline",
"w": 1,
"x": 2,
"y": 1
},
{
"h": 2,
"i": "main-4e01e900-b900-11ed-bb45-976e784dad12",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Verdict",
"static": false,
"type": "reputationSources",
"w": 1,
"x": 0,
"y": 2
},
{
"h": 3,
"i": "main-a7ac2a10-b900-11ed-bb45-976e784dad12",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Relationships",
"static": false,
"type": "relationshipsTable",
"w": 2,
"x": 0,
"y": 4
},
{
"columns": [
{
"displayName": "Name",
"fieldCalcScript": "",
"isDefault": true,
"isReadOnly": false,
"key": "name",
"orgType": "shortText",
"required": false,
"script": "",
"selectValues": null,
"type": "shortText",
"width": 176
},
{
"displayName": "Type",
"fieldCalcScript": "",
"isDefault": true,
"isReadOnly": false,
"key": "type",
"orgType": "singleSelect",
"required": false,
"script": "",
"selectValues": [
"REG_NONE",
"REG_SZ",
"REG_EXPAND_SZ",
"REG_BINARY",
"REG_DWORD",
"REG_DWORD_LITTLE_ENDIAN",
"REG_DWORD_BIG_ENDIAN",
"REG_LINK",
"REG_MULTI_SZ",
"REG_RESOURCE_LIST",
"REG_FULL_RESOURCE_DESCRIPTOR",
"0REG_RESOURCE_REQUIREMENTS_LIST",
"1REG_QWORD",
"REG_QWORD_LITTLE_ENDIAN"
],
"type": "singleSelect",
"width": 107
},
{
"displayName": "Data",
"fieldCalcScript": "",
"isDefault": true,
"isReadOnly": false,
"key": "data",
"orgType": "shortText",
"required": false,
"script": "",
"selectValues": null,
"type": "shortText",
"width": 150
}
],
"displayType": "ROW",
"h": 2,
"hideItemTitleOnlyOne": true,
"hideName": false,
"i": "main-b8e9ebf0-b900-11ed-bb45-976e784dad12",
"items": [
{
"endCol": 2,
"fieldId": "keyvalue",
"height": 106,
"id": "beed6180-b900-11ed-bb45-976e784dad12",
"index": 0,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Values",
"static": false,
"w": 1,
"x": 2,
"y": 3
}
],
"type": "custom"
},
{
"hidden": false,
"id": "kopixekjqw",
"name": "Additional Details",
"sections": [
{
"displayType": "ROW",
"h": 4,
"i": "kopixekjqw-27fffce0-beb4-11ea-b519-21bdfb6f5a43",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Custom Details",
"static": false,
"type": "customDetails",
"w": 3,
"x": 0,
"y": 4
},
{
"displayType": "ROW",
"h": 4,
"hideName": false,
"i": "kopixekjqw-0d4c0da0-b900-11ed-bb45-976e784dad12",
"items": [
{
"endCol": 6,
"fieldId": "communitynotes",
"height": 106,
"id": "1d76fff0-b900-11ed-bb45-976e784dad12",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 6,
"fieldId": "publications",
"height": 106,
"id": "2bb3dde0-b900-11ed-bb45-976e784dad12",
"index": 1,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Additional Details",
"static": false,
"w": 3,
"x": 0,
"y": 0
}
],
"type": "custom"
},
{
"id": "canvas",
"name": "Canvas",
"type": "canvas",
"hidden": false
}
]
},
"indicatorsQuickView": {
"tabs": [
{
"id": "indicator-quick-view-info",
"name": "Info",
"sections": [
{
"h": 1,
"hideName": true,
"i": "indicator-quick-view-info-expirationStatus",
"moved": false,
"name": "Expiration Status",
"static": false,
"type": "expirationStatus",
"w": 1,
"x": 0,
"y": 0
},
{
"h": 2,
"i": "indicator-quick-view-info-reputationSources",
"moved": false,
"name": "Verdict",
"static": false,
"type": "reputationSources",
"w": 1,
"x": 0,
"y": 1
},
{
"displayType": "ROW",
"h": 1,
"hideItemTitleOnlyOne": true,
"i": "indicator-quick-view-info-tags-section",
"items": [
{
"endCol": 2,
"fieldId": "tags",
"height": 53,
"id": "indicator-quick-view-info-tags-field",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "trafficlightprotocol",
"height": 22,
"id": "05c96c70-cccd-11ea-937a-6f8841d9fed1",
"index": 1,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"minW": 1,
"moved": false,
"name": "Tags and TLP",
"static": false,
"w": 1,
"x": 0,
"y": 3
},
{
"h": 2,
"i": "indicator-quick-view-info-relatedIncidents",
"moved": false,
"name": "Related Incidents",
"static": false,
"type": "relatedIncidents",
"w": 1,
"x": 0,
"y": 6
},
{
"h": 2,
"i": "indicator-quick-view-info-comments",
"moved": false,
"name": "Comments",
"static": false,
"type": "comments",
"w": 1,
"x": 0,
"y": 8
},
{
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "indicator-quick-view-info-e3154c80-cccc-11ea-937a-6f8841d9fed1",
"items": [
{
"endCol": 2,
"fieldId": "indicatortype",
"height": 22,
"id": "fcfaf000-cccc-11ea-937a-6f8841d9fed1",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "source",
"height": 22,
"id": "f90fac10-cccc-11ea-937a-6f8841d9fed1",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "name",
"height": 22,
"id": "f5930870-cccc-11ea-937a-6f8841d9fed1",
"index": 2,
"listId": "indicator-quick-view-info-e3154c80-cccc-11ea-937a-6f8841d9fed1",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "path",
"height": 22,
"id": "f1e801d0-cccc-11ea-937a-6f8841d9fed1",
"index": 3,
"listId": "indicator-quick-view-info-e3154c80-cccc-11ea-937a-6f8841d9fed1",
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"minW": 1,
"moved": false,
"name": "Registry Key details",
"static": false,
"w": 1,
"x": 0,
"y": 4
}
],
"type": "custom"
}
]
},
"name": "Registry Key Indicator",
"system": false,
"version": -1,
"fromVersion": "6.10.0",
"supportedModules": [
"agentix",
"xsiam"
]
}