IRONSCALES Modeling Rule

Modeling Rule

Ironscales Event Collector

Details

IDIronscales_ModelingRule
From Version8.15.0
Tagsironscales

Schema

ironscales_ironscales_raw

Field Type Array?
attachments string
classification string
email string
first_reported_date string
headers string
incident_id int
links string
mail_server string
name string
original_email_body string
reports string
sender_email string
subject string
themis_verdict string
{
    "ironscales_ironscales_raw": {
        "incident_id": {
            "type": "int",
            "is_array": false
        },
        "classification": {
            "type": "string",
            "is_array": false
        },
        "first_reported_date": {
            "type": "string",
            "is_array": false
        },
        "sender_email": {
            "type": "string",
            "is_array": false
        },
        "themis_verdict": {
            "type": "string",
            "is_array": false
        },
        "mail_server": {
            "type": "string",
            "is_array": false
        },
        "reports": {
            "type": "string",
            "is_array": false
        },
        "links": {
            "type": "string",
            "is_array": false
        },
        "attachments": {
            "type": "string",
            "is_array": false
        },
        "name": {
            "type": "string",
            "is_array": false
        },
        "email": {
            "type": "string",
            "is_array": false
        },
        "subject": {
            "type": "string",
            "is_array": false
        },
        "headers": {
            "type": "string",
            "is_array": false
        },
        "original_email_body": {
            "type": "string",
            "is_array": false
        }
    }
}