{
    "description": "",
    "feed": false,
    "id": "AWS Security Hub - Incoming Mapper",
    "mapping": {
        "AWS Security Hub Finding": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "AWS Security Hub Action": {
                    "simple": "Action"
                },
                "AWS Security Hub Company Name": {
                    "simple": "CompanyName"
                },
                "AWS Security Hub Compliance": {
                    "simple": "Compliance"
                },
                "AWS Security Hub Confidence": {
                    "simple": "Confidence"
                },
                "AWS Security Hub Criticality": {
                    "simple": "Criticality"
                },
                "AWS Security Hub Generator Id": {
                    "simple": "GeneratorId"
                },
                "AWS Security Hub Malware": {
                    "simple": "Malware"
                },
                "AWS Security Hub Network Path": {
                    "simple": "NetworkPath"
                },
                "AWS Security Hub Product Arn": {
                    "simple": "ProductArn"
                },
                "AWS Security Hub Product Fields": {
                    "simple": "ProductFields"
                },
                "AWS Security Hub Product Name": {
                    "simple": "ProductName"
                },
                "AWS Security Hub Provider Fields": {
                    "simple": "FindingProviderFields"
                },
                "AWS Security Hub Provider Updated At": {
                    "simple": "UpdatedAt"
                },
                "AWS Security Hub Record State": {
                    "simple": "RecordState"
                },
                "AWS Security Hub Related Findings": {
                    "simple": "RelatedFindings"
                },
                "AWS Security Hub Remediation": {
                    "simple": "Remediation"
                },
                "AWS Security Hub Resources": {
                    "simple": "Resources"
                },
                "AWS Security Hub Schema Version": {
                    "simple": "SchemaVersion"
                },
                "AWS Security Hub Severity": {
                    "simple": "Severity"
                },
                "AWS Security Hub Threat Intel Indicators": {
                    "simple": "ThreatIntelIndicators"
                },
                "AWS Security Hub Threats": {
                    "simple": "Threats"
                },
                "AWS Security Hub Types": {
                    "simple": "Types"
                },
                "AWS Security Hub User Defined Fields": {
                    "simple": "UserDefinedFields"
                },
                "AWS Security Hub Verification State": {
                    "simple": "VerificationState"
                },
                "AWS Security Hub Vulnerabilities": {
                    "simple": "Vulnerabilities"
                },
                "AWS Security Hub Workflow Status": {
                    "simple": "Workflow.Status"
                },
                "Account ID": {
                    "simple": "AwsAccountId"
                },
                "Alert ID": {
                    "simple": "Id"
                },
                "Alert URL": {
                    "simple": "SourceUrl"
                },
                "Comment": {
                    "simple": "Note.Text"
                },
                "Description": {
                    "simple": "Description"
                },
                "Detection Update Time": {
                    "simple": "LastObservedAt"
                },
                "External Start Time": {
                    "simple": "FirstObservedAt"
                },
                "Last Update Time": {
                    "simple": "UpdatedAt"
                },
                "Region": {
                    "simple": "Region"
                },
                "Title": {
                    "simple": "Title"
                },
                "dbotMirrorDirection": {
                    "simple": "mirror_direction"
                },
                "dbotMirrorId": {
                    "simple": "Id"
                },
                "dbotMirrorInstance": {
                    "simple": "mirror_instance"
                },
                "occurred": {
                    "simple": "CreatedAt"
                },
                "severity": {
                    "simple": "Severity.Label"
                }
            }
        },
        "dbot_classification_incident_type_all": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "Alert ID": {
                    "simple": "Id"
                },
                "Description": {
                    "simple": "Description"
                },
                "External Confidence": {
                    "simple": "Confidence"
                },
                "Last Update Time": {
                    "simple": "UpdatedAt"
                },
                "occurred": {
                    "simple": "CreatedAt"
                },
                "severity": {
                    "complex": {
                        "accessor": "Label",
                        "filters": [],
                        "root": "Severity",
                        "transformers": []
                    }
                }
            }
        }
    },
    "name": "AWS Security Hub - Incoming Mapper",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.5.0"
}