Investigation Summary

A summary report that contains various details such as evidence and investigation time line, investigation team, statistics and more
Common Reports PDF
Details

ID	`investigationSummaryReport`
Format	pdf
Report Type	investigation
Orientation	portrait
Recurrent	No
From Version	5.0.0
Created By	DBot
Sections (54)

Section 1 · placeholder
Section 2 · placeholder
Section 3 · text
Section 4 · date
Section 5 · placeholder
Section 6 · placeholder
Section 7 · divider
Section 8 · text
Section 9 · text
Section 10 · text
Section 11 · placeholder
Section 12 · placeholder
Section 13 · placeholder
Section 14 · text
Section 15 · text
Section 16 · text
Section 17 · text
Section 18 · placeholder
Section 19 · placeholder
Section 20 · placeholder
Section 21 · text
Section 22 · text
Section 23 · text
Section 24 · text
Section 25 · placeholder
Section 26 · placeholder
Section 27 · text
Section 28 · text
Section 29 · image
Section 30 · placeholder
Section 31 · text
Section 32 · placeholder
Section 33 · text
Section 34 · placeholder
Section 35 · text
Section 36 · text
Section 37 · placeholder
Section 38 · text
Section 39 · placeholder
Section 40 · text
Section 41 · table
Section 42 · text
Section 43 · placeholder
Section 44 · text
Section 45 · text
Section 46 · table
Section 47 · text
Section 48 · placeholder
Section 49 · text
Section 50 · placeholder
Section 51 · text
Section 52 · table
Section 53 · text
Section 54 · table
Source

report-investigationSummaryReport.json
Download History Raw
{
 "id": "investigationSummaryReport",
 "name": "Investigation Summary",
 "description": "A summary report that contains various details such as evidence and investigation time line, investigation team, statistics and more",
 "fromVersion": "5.0.0",
 "tags": [

 ],
 "createdBy": "DBot",
 "type": "pdf",
 "orientation": "portrait",
 "recipients": [

 ],
 "system": true,
 "reportType": "investigation",
 "decoder": {
  "incident.status.0": {
   "type": "string",
   "value": "Pending"
  },
  "incident.status.1": {
   "type": "string",
   "value": "Active"
  },
  "incident.status.2": {
   "type": "string",
   "value": "Closed"
  },
  "incident.status.3": {
   "type": "string",
   "value": "Closed"
  },
  "incident.status.4": {
   "type": "string",
   "value": "On Hold"
  },
  "incident.severity.0": {
   "type": "string",
   "value": "Unknown"
  },
  "incident.severity.0.5": {
   "type": "string",
   "value": "Informational"
  },
  "incident.severity.1": {
   "type": "string",
   "value": "Low"
  },
  "incident.severity.2": {
   "type": "string",
   "value": "Medium"
  },
  "incident.severity.3": {
   "type": "string",
   "value": "High"
  },
  "incident.severity.4": {
   "type": "string",
   "value": "Critical"
  },
  "incident.created": {
   "type": "date",
   "value": "Mon, 02 Jan 2006 15:04:05 MST"
  },
  "incident.occurred": {
   "type": "date",
   "value": "Mon, 02 Jan 2006 15:04:05 MST"
  },
  "incident.closed": {
   "type": "date",
   "value": "Mon, 02 Jan 2006 15:04:05 MST"
  },
  "incident.activated": {
   "type": "date",
   "value": "Mon, 02 Jan 2006 15:04:05 MST"
  },
  "incident.dueDate": {
   "type": "date",
   "value": "Mon, 02 Jan 2006 15:04:05 MST"
  },
  "incident.reminder": {
   "type": "date",
   "value": "Mon, 02 Jan 2006 15:04:05 MST"
  },
  "investigation.status.0": {
   "type": "string",
   "value": "Active"
  },
  "investigation.status.1": {
   "type": "string",
   "value": "Done"
  },
  "investigation.type.0": {
   "description": "Investigation Report Type 1",
   "type": "string",
   "value": "Standard"
  },
  "investigation.type.1": {
   "type": "string",
   "value": "Restricted"
  },
  "investigation.type.9": {
   "type": "string",
   "value": "Playground"
  },
  "investigation.created": {
   "type": "date",
   "value": "Mon, 02 Jan 2006 15:04:05 MST"
  },
  "investigation.closed": {
   "type": "date",
   "value": "02 Jan 2006"
  },
  "investigation.openDuration": {
   "type": "duration"
  },
  "incident.openDuration": {
   "type": "duration"
  },
  "evidences.occurred": {
   "type": "date",
   "value": "02/01/06 3:04:05 PM"
  },
  "evidences.markedDate": {
   "type": "date",
   "value": "02/01/06 3:04:05 PM"
  },
  "evidences.fetched": {
   "type": "date",
   "value": "02/01/06 3:04:05 PM"
  },
  "indicators.score.0": {
   "type": "string",
   "value": "None"
  },
  "indicators.score.1": {
   "type": "string",
   "value": "Good"
  },
  "indicators.score.2": {
   "type": "string",
   "value": "suspicious"
  },
  "indicators.score.3": {
   "type": "string",
   "value": "Bad"
  }
 },
 "sections": [
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "investigation",
    "keys": [
     "name"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 200,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 22,
     "color": "#4e6767"
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "investigation",
    "keys": [
     "id"
    ]
   },
   "data": "#{0}",
   "layout": {
    "rowPos": 200,
    "columnPos": 200,
    "style": {
     "textAlign": "right",
     "color": "gray",
     "fontSize": 12
    }
   }
  },
  {
   "type": "text",
   "data": "Summary Report",
   "layout": {
    "rowPos": 300,
    "columnPos": 100,
    "sectionStyle": {
     "width": 180
    },
    "style": {
     "textAlign": "left",
     "fontSize": 16
    }
   }
  },
  {
   "type": "date",
   "layout": {
    "rowPos": 300,
    "columnPos": 200,
    "style": {
     "textAlign": "right",
     "color": "gray",
     "fontSize": 12,
     "marginBottom:": 12
    },
    "format": "MMMM Do YYYY, h:mm:ss a z",
    "useCurrentTime": true
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "sessionUser",
    "keys": [
     "name"
    ]
   },
   "data": "Generated by: {0}",
   "layout": {
    "rowPos": 400,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -17,
     "marginBottom": -27
    },
    "sectionStyle": {
     "width": 280
    },
    "style": {
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "sessionUser",
    "keys": [
     "email"
    ]
   },
   "data": "({0})",
   "layout": {
    "rowPos": 400,
    "columnPos": 200,
    "style": {
     "color": "gray",
     "textAlign": "right",
     "fontSize": 12
    }
   }
  },
  {
   "type": "divider",
   "layout": {
    "rowPos": 500
   }
  },
  {
   "type": "text",
   "data": "Breach Type",
   "layout": {
    "rowPos": 600,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -20
    },
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "text",
   "data": "Severity",
   "layout": {
    "rowPos": 600,
    "columnPos": 200,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "text",
   "data": "Occurred",
   "layout": {
    "rowPos": 600,
    "columnPos": 300,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "investigation",
    "keys": [
     "type"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 700,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -15
    },
    "style": {
     "textAlign": "left",
     "fontSize": 16
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "incident",
    "keys": [
     "severity"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 700,
    "columnPos": 200,
    "style": {
     "textAlign": "left",
     "fontSize": 16
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "incident",
    "keys": [
     "occurred"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 700,
    "columnPos": 300,
    "style": {
     "textAlign": "left",
     "fontSize": 16,
     "marginBottom:": 12
    }
   }
  },
  {
   "type": "text",
   "layout": {
    "rowPos": 800,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -17
    }
   }
  },
  {
   "type": "text",
   "data": "Closure",
   "layout": {
    "rowPos": 900,
    "columnPos": 100,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "text",
   "data": "Time to resolve",
   "layout": {
    "rowPos": 900,
    "columnPos": 200,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "text",
   "data": "Reason for closing",
   "layout": {
    "rowPos": 900,
    "columnPos": 300,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "investigation",
    "keys": [
     "closed"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 1000,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -15
    },
    "style": {
     "textAlign": "left",
     "fontSize": 16,
     "marginBottom:": 12
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "investigation",
    "keys": [
     "openDuration"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 1000,
    "columnPos": 200,
    "style": {
     "textAlign": "left",
     "fontSize": 16,
     "marginBottom:": 12
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "investigation",
    "keys": [
     "Close Reason"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 1000,
    "columnPos": 300,
    "style": {
     "textAlign": "left",
     "fontSize": 16,
     "marginBottom:": 12
    }
   }
  },
  {
   "type": "text",
   "layout": {
    "rowPos": 1100,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -17
    }
   }
  },
  {
   "type": "text",
   "data": "Earliest flagged evidence",
   "layout": {
    "rowPos": 1200,
    "columnPos": 100,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "text",
   "data": "Most recent flagged evidence",
   "layout": {
    "rowPos": 1200,
    "columnPos": 200,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "text",
   "layout": {
    "rowPos": 1200,
    "columnPos": 300
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "evidences",
    "filter": {
     "type": "earliestEvidence"
    }
   },
   "layout": {
    "rowPos": 1300,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -15
    },
    "style": {
     "textAlign": "left",
     "fontSize": 16,
     "marginBottom:": 12
    },
    "format": "Do MMM YYYY",
    "useCurrentTime": true
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "evidences",
    "filter": {
     "type": "latestEvidence"
    }
   },
   "layout": {
    "rowPos": 1300,
    "columnPos": 200,
    "style": {
     "textAlign": "left",
     "fontSize": 16,
     "marginBottom:": 12
    },
    "format": "Do MMM YYYY",
    "useCurrentTime": true
   }
  },
  {
   "type": "text",
   "layout": {
    "rowPos": 1300,
    "columnPos": 300
   }
  },
  {
   "type": "text",
   "data": "Owner",
   "layout": {
    "rowPos": 1500,
    "columnPos": 100,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "image",
   "query": {
    "type": "sessionData",
    "filter": "incidentOwner",
    "keys": [
     "image"
    ]
   },
   "layout": {
    "rowStyle": {
     "marginTop": -15
    },
    "sectionStyle": {
     "width": 60
    },
    "rowPos": 1600,
    "columnPos": 100,
    "classes": "small circular"
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "incidentOwner",
    "keys": [
     "name",
     "email"
    ]
   },
   "data": "{0} ({1})",
   "layout": {
    "sectionStyle": {
     "verticalAlign": "middle"
    },
    "rowPos": 1600,
    "columnPos": 200,
    "style": {
     "textAlign": "left",
     "fontSize": 16
    }
   }
  },
  {
   "type": "text",
   "data": "Playbook Used",
   "layout": {
    "rowPos": 1800,
    "columnPos": 100,
    "style": {
     "color": "#4e6767",
     "textAlign": "left",
     "fontSize": 12
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "workplan",
    "keys": [
     "name"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 1900,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -15
    },
    "style": {
     "textAlign": "left",
     "fontSize": 16
    }
   }
  },
  {
   "type": "text",
   "data": "Close Notes",
   "layout": {
    "rowPos": 2250,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "investigation",
    "keys": [
     "Close Notes"
    ]
   },
   "data": "{0}",
   "layout": {
    "rowPos": 2255,
    "columnPos": 100,
    "rowStyle": {
     "marginTop": -15
    },
    "style": {
     "textAlign": "left",
     "fontSize": 16
    }
   }
  },
  {
   "type": "text",
   "layout": {
    "rowPos": 2270,
    "columnPos": 100
   }
  },
  {
   "type": "text",
   "data": "Custom Data",
   "layout": {
    "rowPos": 2300,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767"
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "sessionData",
    "filter": "incidentCustomData"
   },
   "layout": {
    "rowPos": 2301,
    "columnPos": 100
   }
  },
  {
   "type": "text",
   "data": "Investigation Timeline",
   "layout": {
    "rowPos": 4000,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "entries",
    "filter": {
     "pageSize": 10000,
     "categories": [
      "incidentInfo"
     ]
    }
   },
   "layout": {
    "rowPos": 4001,
    "columnPos": 100
   }
  },
  {
   "type": "text",
   "data": "Investigation Indicators",
   "layout": {
    "rowPos": 10000,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "table",
   "query": {
    "type": "indicators",
    "filter": {
     "query": "investigationIDs:{{.investigationID}} and (reputation:Bad or reputation:Suspicious)"
    }
   },
   "layout": {
    "rowPos": 10001,
    "columnPos": 100,
    "tableColumns": [
     "Value",
     "Reputation",
     "Type",
     "Source",
     "First Seen",
     "Last Seen"
    ],
    "readableHeaders": {
     "value": "Value",
     "score": "Reputation",
     "indicator_type": "Type",
     "source": "Source",
     "firstSeen": "First Seen",
     "lastSeen": "Last Seen"
    },
    "classes": "striped stackable small very compact"
   }
  },
  {
   "type": "text",
   "data": "War Room Notes",
   "layout": {
    "rowPos": 200000,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "placeholder",
   "query": {
    "type": "entries",
    "filter": {
     "pageSize": 10000,
     "categories": [
      "notes"
     ]
    }
   },
   "layout": {
    "rowPos": 300000,
    "columnPos": 100
   }
  },
  {
   "type": "text",
   "data": "Evidence Timeline",
   "layout": {
    "rowPos": 300001,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "text",
   "data": "Showing all Evidences as of start of investigation",
   "layout": {
    "rowPos": 300010,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 12,
     "color": "#999999",
     "fontStyle": "italic",
     "marginTop": -15
    }
   }
  },
  {
   "type": "table",
   "query": {
    "type": "evidences",
    "filter": {
     "query": ""
    }
   },
   "layout": {
    "rowPos": 300020,
    "columnPos": 100,
    "tableColumns": [
     "Occurred",
     "Description",
     "ID"
    ],
    "readableHeaders": {
     "occurred": "Occurred",
     "description": "Description",
     "id": "ID"
    },
    "classes": "selectable celled fixed unstackable"
   }
  },
  {
   "type": "text",
   "data": "Detailed Evidence",
   "layout": {
    "rowPos": 300030,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "placeholder",
   "data": "{0}",
   "query": {
    "type": "evidences",
    "filter": {
     "type": "evidenceTimeline",
     "filter": {
      "query": ""
     }
    }
   },
   "layout": {
    "rowPos": 300042,
    "columnPos": 100
   }
  },
  {
   "type": "text",
   "data": "Skipped Tasks",
   "layout": {
    "rowPos": 400000,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "placeholder",
   "data": "{0}",
   "query": {
    "type": "sessionData",
    "filter": "skippedTasks"
   },
   "layout": {
    "rowPos": 400001,
    "columnPos": 100
   }
  },
  {
   "type": "text",
   "data": "Team",
   "layout": {
    "rowPos": 500000,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "table",
   "query": {
    "type": "sessionData",
    "filter": "investigationUsers"
   },
   "layout": {
    "rowPos": 500001,
    "columnPos": 100,
    "tableColumns": [
     {
      "key": "Avatar",
      "hidden": true
     },
     "Name",
     "Email",
     "Phone Number"
    ],
    "classes": "collapsing selectable unstackable"
   }
  },
  {
   "type": "text",
   "data": "Linked Incidents",
   "layout": {
    "rowPos": 600000,
    "columnPos": 100,
    "style": {
     "textAlign": "left",
     "fontSize": 24,
     "color": "#4e6767",
     "pageBreakBefore": "always"
    }
   }
  },
  {
   "type": "table",
   "query": {
    "type": "sessionData",
    "filter": "linkedIncidents"
   },
   "layout": {
    "rowPos": 600001,
    "columnPos": 100,
    "tableColumns": [
     "ID",
     "Name",
     "Status",
     "Closure Reason",
     "Close Notes"
    ],
    "classes": "collapsing selectable unstackable"
   }
  }
 ]
}