{
"edit": {
"sections": [
{
"description": "",
"fields": [
{
"fieldId": "indicator_value",
"isVisible": true
},
{
"fieldId": "indicator_indicatortype",
"isVisible": true
},
{
"fieldId": "indicator_score",
"isVisible": true
},
{
"fieldId": "indicator_expiration",
"isVisible": true
},
{
"fieldId": "indicator_comment",
"isVisible": true
},
{
"fieldId": "indicator_investigationids",
"isVisible": true
}
],
"isVisible": true,
"name": "Basic Information",
"query": null,
"queryType": "",
"readOnly": false,
"type": "basicInformationSection"
},
{
"description": "",
"fields": [
{
"fieldId": "indicator_enrichmentexcluded",
"isVisible": true
},
{
"fieldId": "indicator_blocked",
"isVisible": true
},
{
"fieldId": "indicator_communitynotes",
"isVisible": true
},
{
"fieldId": "indicator_description",
"isVisible": true
},
{
"fieldId": "indicator_stixid",
"isVisible": true
},
{
"fieldId": "indicator_tags",
"isVisible": true
},
{
"fieldId": "indicator_trafficlightprotocol",
"isVisible": true
}
],
"isVisible": true,
"name": "Custom fields - core",
"query": null,
"queryType": "",
"readOnly": false,
"type": ""
},
{
"description": "",
"fields": [
{
"fieldId": "indicator_creationdate",
"isVisible": true
},
{
"fieldId": "indicator_fileextension",
"isVisible": true
},
{
"fieldId": "indicator_associatedfilenames",
"isVisible": true
},
{
"fieldId": "indicator_filetype",
"isVisible": true
},
{
"fieldId": "indicator_imphash",
"isVisible": true
},
{
"fieldId": "indicator_md5",
"isVisible": true
},
{
"fieldId": "indicator_modified",
"isVisible": true
},
{
"fieldId": "indicator_path",
"isVisible": true
},
{
"fieldId": "indicator_quarantined",
"isVisible": true
},
{
"fieldId": "indicator_sha1",
"isVisible": true
},
{
"fieldId": "indicator_sha256",
"isVisible": true
},
{
"fieldId": "indicator_sha512",
"isVisible": true
},
{
"fieldId": "indicator_size",
"isVisible": true
},
{
"fieldId": "indicator_ssdeep",
"isVisible": true
}
],
"isVisible": true,
"name": "Custom fields - unique",
"query": null,
"queryType": "",
"readOnly": false,
"type": ""
}
]
},
"group": "indicator",
"id": "unifiedFileRep1",
"indicatorsDetails": {
"tabs": [
{
"id": "main",
"name": "Summary",
"sections": [
{
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "main-b52548e0-a09d-11e9-8956-390f602b039a",
"isVisible": true,
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Verdict",
"readOnly": true,
"static": false,
"type": "reputationSources",
"w": 1,
"x": 0,
"y": 2
},
{
"columns": [
{
"displayed": true,
"isDefault": false,
"key": "id",
"width": 110
},
{
"displayed": true,
"isDefault": true,
"key": "name",
"width": 300
},
{
"displayed": true,
"isDefault": false,
"key": "severity",
"width": 80
},
{
"displayed": true,
"isDefault": true,
"key": "type",
"width": 200
},
{
"displayed": true,
"isDefault": true,
"key": "status",
"width": 80
}
],
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "main-c1f3f0d0-a09d-11e9-8956-390f602b039a",
"isVisible": true,
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Related Incidents",
"readOnly": true,
"static": false,
"type": "relatedIncidents",
"w": 2,
"x": 0,
"y": 7
},
{
"displayType": "ROW",
"h": 4,
"hideName": false,
"i": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"isVisible": true,
"items": [
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "comment",
"height": 26,
"id": "0b9dd200-a09e-11e9-8956-390f602b039a",
"index": 0,
"listId": "e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "enrichmentexcluded",
"filters": [
[
{
"id": 0,
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"simple": "enrichmentExcluded"
}
},
"operator": "isTrue",
"right": null,
"type": "boolean"
}
]
],
"height": 26,
"id": "5105526d-69d3-4181-a9ba-00e40e7e619c",
"index": 0,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "timestamp",
"height": 26,
"id": "e702ebc0-779a-11ec-99cb-9b8c031b4139",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "modified",
"height": 26,
"id": "2caa06a0-a2b6-11eb-b6c7-1f96e76b92a7",
"index": 2,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "stixid",
"height": 26,
"id": "c32a46e0-8a4f-11ec-a1ef-6369524b39c7",
"index": 3,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "filetype",
"height": 26,
"id": "03dec8e0-9880-11eb-a24d-4941fb0e06df",
"index": 4,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "blocked",
"height": 26,
"id": "48f1b8c0-779b-11ec-99cb-9b8c031b4139",
"index": 5,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "associatedfilenames",
"height": 26,
"id": "0a626af0-9880-11eb-a24d-4941fb0e06df",
"index": 6,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "fileextension",
"height": 26,
"id": "0582dbf0-9880-11eb-a24d-4941fb0e06df",
"index": 7,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "path",
"height": 26,
"id": "1021d2a0-9880-11eb-a24d-4941fb0e06df",
"index": 8,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "size",
"height": 26,
"id": "fd18edb0-987f-11eb-a24d-4941fb0e06df",
"index": 9,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "trafficlightprotocol",
"height": 26,
"id": "b36304a0-b6dd-11ea-842d-c3903a6d3bd1",
"index": 10,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "tags",
"height": 26,
"id": "1cf1e850-4e74-11ea-8bf6-67db400d7da5",
"index": 11,
"sectionItemType": "field",
"startCol": 0
},
{
"args": {
"field": {
"simple": "tags"
}
},
"endCol": 1,
"fieldId": "",
"height": 44,
"id": "78925e60-a751-11eb-8813-85174f038837",
"index": 12,
"name": "Add tags",
"scriptId": "Builtin|||appendIndicatorField",
"sectionItemType": "button",
"startCol": 0
},
{
"args": {
"field": {
"simple": "tags"
}
},
"dropEffect": "move",
"endCol": 2,
"fieldId": "",
"height": 44,
"id": "7a35ae20-a751-11eb-8813-85174f038837",
"index": 12,
"listId": "main-0e19dbd0-4e74-11ea-8bf6-67db400d7da5",
"name": "Remove tags",
"scriptId": "Builtin|||removeIndicatorField",
"sectionItemType": "button",
"startCol": 1
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "File Details",
"static": false,
"w": 1,
"x": 1,
"y": 0
},
{
"h": 1,
"hideName": true,
"i": "main-9cfd13c0-3d54-11ea-8f80-71a50769e869",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Reputation Status",
"static": false,
"type": "reputationStatus",
"w": 1,
"x": 0,
"y": 1
},
{
"h": 1,
"hideName": true,
"i": "main-a42a8a60-3d54-11ea-8f80-71a50769e869",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Expiration Status",
"static": false,
"type": "expirationStatus",
"w": 1,
"x": 0,
"y": 0
},
{
"h": 3,
"i": "main-acbc9a10-3d54-11ea-8f80-71a50769e869",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Timeline",
"static": false,
"type": "indicatorTimeline",
"w": 1,
"x": 2,
"y": 3
},
{
"h": 3,
"i": "main-e608e030-3d54-11ea-8f80-71a50769e869",
"items": null,
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Comments",
"static": false,
"type": "comments",
"w": 1,
"x": 2,
"y": 6
},
{
"displayType": "ROW",
"h": 1,
"hideName": false,
"i": "main-d59381d0-aa49-11ea-9e46-5ff91c1cf9b7",
"items": [
{
"args": {},
"endCol": 1,
"fieldId": "",
"filters": [
[
{
"id": 0,
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"simple": "enrichmentExcluded"
}
},
"operator": "isFalse",
"right": {
"isContext": false,
"value": {
"simple": ""
}
},
"type": "boolean"
},
{
"id": 1,
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"simple": "enrichmentExcluded"
}
},
"operator": "isNotExists",
"right": null,
"type": "boolean"
}
]
],
"height": 44,
"id": "e3595b00-aa49-11ea-9e46-5ff91c1cf9b7",
"index": 0,
"name": "Enrich indicator",
"scriptId": "Builtin|||enrichIndicators",
"sectionItemType": "button",
"startCol": 0
},
{
"args": {},
"buttonClass": null,
"dropEffect": "move",
"endCol": 1,
"fieldId": "",
"filters": [
[
{
"id": 0,
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"simple": "enrichmentExcluded"
}
},
"operator": "isTrue",
"right": null,
"type": "boolean"
}
]
],
"height": 44,
"hexColor": "#979797",
"id": "bfa3078e-690d-4e60-874f-6fc17050b1f5",
"index": 1,
"listId": "main-d59381d0-aa49-11ea-9e46-5ff91c1cf9b7",
"name": "Enrich indicator",
"scriptId": "enrich_exclude_button",
"sectionItemType": "button",
"startCol": 0
},
{
"args": {},
"endCol": 2,
"fieldId": "",
"height": 44,
"id": "012a4ae0-bf71-11ea-b085-3f354e53d3e6",
"index": 0,
"name": "Expire indicator",
"scriptId": "Builtin|||expireIndicators",
"sectionItemType": "button",
"startCol": 1
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Actions",
"static": false,
"w": 1,
"x": 2,
"y": 0
},
{
"h": 3,
"i": "main-2e126740-96e4-11eb-a8d1-098e2c945225",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Relationships",
"static": false,
"type": "relationshipsTable",
"w": 2,
"x": 0,
"y": 4
},
{
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "main-c7da3c80-779a-11ec-99cb-9b8c031b4139",
"items": [
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "md5",
"height": 22,
"id": "edc102d0-987f-11eb-a24d-4941fb0e06df",
"index": 1,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "sha1",
"height": 22,
"id": "ea561270-987f-11eb-a24d-4941fb0e06df",
"index": 1,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "sha256",
"height": 22,
"id": "e74947a0-987f-11eb-a24d-4941fb0e06df",
"index": 2,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "sha512",
"height": 22,
"id": "e832e450-987f-11eb-a24d-4941fb0e06df",
"index": 3,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "imphash",
"height": 22,
"id": "f5d752d0-987f-11eb-a24d-4941fb0e06df",
"index": 4,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "ssdeep",
"height": 22,
"id": "fa12b290-987f-11eb-a24d-4941fb0e06df",
"index": 5,
"listId": "main-e2c8c970-a09d-11e9-8956-390f602b039a",
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Hashes",
"static": false,
"w": 1,
"x": 2,
"y": 1
}
],
"type": "custom"
},
{
"hidden": false,
"id": "rrcrivpfll",
"name": "Additional Details",
"sections": [
{
"displayType": "CARD",
"h": 3,
"i": "rrcrivpfll-ztqyjv2jej-c11873d0-de2a-11eb-b5cc-73114eddb812",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Custom Details",
"static": false,
"type": "customDetails",
"w": 3,
"x": 0,
"y": 3
},
{
"displayType": "ROW",
"h": 3,
"hideName": false,
"i": "rrcrivpfll-ztqyjv2jej-894aad80-76df-11ec-a07d-2796602c12c6",
"items": [
{
"endCol": 6,
"fieldId": "description",
"height": 44,
"id": "99ec7d80-76df-11ec-a07d-2796602c12c6",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 6,
"fieldId": "communitynotes",
"height": 106,
"id": "a3096810-76df-11ec-a07d-2796602c12c6",
"index": 1,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Additional Details",
"static": false,
"w": 3,
"x": 0,
"y": 0
}
],
"type": "custom"
},
{
"id": "canvas",
"name": "Canvas",
"type": "canvas",
"hidden": false
}
]
},
"indicatorsQuickView": {
"tabs": [
{
"id": "indicator-quick-view-info",
"name": "Info",
"sections": [
{
"h": 1,
"hideName": true,
"i": "indicator-quick-view-info-expirationStatus",
"maxW": 3,
"moved": false,
"name": "Expiration Status",
"static": false,
"type": "expirationStatus",
"w": 1,
"x": 0,
"y": 0
},
{
"h": 2,
"i": "indicator-quick-view-info-relatedIncidents",
"maxW": 3,
"moved": false,
"name": "Related Incidents",
"static": false,
"type": "relatedIncidents",
"w": 1,
"x": 0,
"y": 8
},
{
"h": 3,
"i": "indicator-quick-view-info-comments",
"maxW": 3,
"moved": false,
"name": "Comments",
"static": false,
"type": "comments",
"w": 1,
"x": 0,
"y": 10
},
{
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "indicator-quick-view-info-34c55dc0-ba19-11ea-96e1-0b84fdedf11e",
"items": [
{
"endCol": 2,
"fieldId": "enrichmentexcluded",
"filters": [
[
{
"id": 0,
"ignoreCase": false,
"left": {
"isContext": true,
"value": {
"simple": "enrichmentExcluded"
}
},
"operator": "isTrue",
"right": null,
"type": "boolean"
}
]
],
"height": 26,
"id": "a85bf1ed-0165-44a8-94db-4d6850d89012",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "timestamp",
"height": 26,
"id": "f4fdcf40-84ee-11ec-a589-e73aadc98c9a",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "modified",
"height": 26,
"id": "faca7d60-84ee-11ec-a589-e73aadc98c9a",
"index": 2,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "stixid",
"height": 26,
"id": "1c1e4a00-84ef-11ec-a589-e73aadc98c9a",
"index": 3,
"sectionItemType": "field",
"startCol": 0
},
{
"dropEffect": "move",
"endCol": 2,
"fieldId": "filetype",
"height": 26,
"id": "6601cfd0-9881-11eb-a24d-4941fb0e06df",
"index": 4,
"listId": "indicator-quick-view-info-34c55dc0-ba19-11ea-96e1-0b84fdedf11e",
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "blocked",
"height": 26,
"id": "070ebfa0-84ef-11ec-a589-e73aadc98c9a",
"index": 5,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "associatedfilenames",
"height": 26,
"id": "26e49ed0-84ef-11ec-a589-e73aadc98c9a",
"index": 6,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "fileextension",
"height": 26,
"id": "36c2d0b0-84ef-11ec-a589-e73aadc98c9a",
"index": 7,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "path",
"height": 26,
"id": "3ce12140-84ef-11ec-a589-e73aadc98c9a",
"index": 8,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "size",
"height": 26,
"id": "408ceb30-84ef-11ec-a589-e73aadc98c9a",
"index": 9,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "trafficlightprotocol",
"height": 26,
"id": "45046990-84ef-11ec-a589-e73aadc98c9a",
"index": 10,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "tags",
"height": 26,
"id": "4830ca50-84ef-11ec-a589-e73aadc98c9a",
"index": 11,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "File Details",
"static": false,
"w": 1,
"x": 0,
"y": 4
},
{
"h": 1,
"hideName": true,
"i": "indicator-quick-view-info-8524f2b0-871b-11eb-a029-7dc36024189f",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Reputation Status",
"static": false,
"type": "reputationStatus",
"w": 1,
"x": 0,
"y": 1
},
{
"displayType": "ROW",
"h": 2,
"hideName": false,
"i": "indicator-quick-view-info-54ef93c0-84ef-11ec-a589-e73aadc98c9a",
"items": [
{
"endCol": 2,
"fieldId": "md5",
"height": 22,
"id": "6013c000-84ef-11ec-a589-e73aadc98c9a",
"index": 0,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "sha1",
"height": 22,
"id": "62be6da0-84ef-11ec-a589-e73aadc98c9a",
"index": 1,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "sha256",
"height": 22,
"id": "63a8a690-84ef-11ec-a589-e73aadc98c9a",
"index": 2,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "sha512",
"height": 22,
"id": "6476f310-84ef-11ec-a589-e73aadc98c9a",
"index": 3,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "imphash",
"height": 22,
"id": "68d28500-84ef-11ec-a589-e73aadc98c9a",
"index": 4,
"sectionItemType": "field",
"startCol": 0
},
{
"endCol": 2,
"fieldId": "ssdeep",
"height": 22,
"id": "6af89950-84ef-11ec-a589-e73aadc98c9a",
"index": 5,
"sectionItemType": "field",
"startCol": 0
}
],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Hashes",
"static": false,
"w": 1,
"x": 0,
"y": 6
},
{
"h": 2,
"i": "indicator-quick-view-info-70b39430-84ef-11ec-a589-e73aadc98c9a",
"items": [],
"maxW": 3,
"minH": 1,
"moved": false,
"name": "Verdict",
"static": false,
"type": "reputationSources",
"w": 1,
"x": 0,
"y": 2
}
],
"type": "custom"
},
{
"hidden": false,
"id": "dmxl1iqhix",
"name": "Relationships",
"sections": [
{
"h": 4,
"i": "dmxl1iqhix-8049eb50-96e4-11eb-a8d1-098e2c945225",
"items": [],
"maxW": 3,
"minH": 1,
"minW": 1,
"moved": false,
"name": "Relationships",
"static": false,
"type": "relationshipsTable",
"w": 1,
"x": 0,
"y": 0
}
],
"type": "custom"
}
]
},
"name": "File Indicator",
"system": false,
"version": -1,
"fromVersion": "6.10.0",
"description": "File Indicator Layout",
"supportedModules": [
"agentix",
"xsiam"
]
}