{
  "defaultIncidentType": "Armis Alert - Anomaly Detection",
  "description": "Maps incoming Armis alerts.",
  "feed": false,
  "id": "Armis - Incoming Mapper",
  "mapping": {
    "Armis Alert": {
      "dontMapEventToLabels": false,
      "internalMapping": {
        "Alert ID": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "alertId",
            "transformers": []
          },
          "simple": ""
        },
        "Alert Name": {
          "complex": null,
          "simple": "title"
        },
        "Armis Alert Description": {
          "complex": null,
          "simple": "title"
        },
        "Armis Alert ID": {
          "complex": null,
          "simple": "alertId"
        },
        "Armis Alert Severity": {
          "complex": null,
          "simple": "severity"
        },
        "Armis Alert Status ": {
          "complex": null,
          "simple": "status"
        },
        "Armis Alert Type": {
          "complex": null,
          "simple": "type"
        },
        "Armis Device Identifier": {
          "complex": null,
          "simple": "deviceIds.[0]"
        },
        "Armis Device IDs": {
          "complex": null,
          "simple": "deviceIds.[0]"
        },
        "State": {
          "complex": null,
          "simple": "status"
        },
        "details": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "description",
            "transformers": []
          },
          "simple": ""
        },
        "name": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "title",
            "transformers": []
          },
          "simple": ""
        },
        "severity": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "severity",
            "transformers": []
          },
          "simple": ""
        }
      }
    },
    "Armis Alert - Anomaly Detection": {
      "dontMapEventToLabels": false,
      "internalMapping": {
        "Alert ID": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "alertId",
            "transformers": []
          },
          "simple": ""
        },
        "Alert Name": {
          "complex": null,
          "simple": "title"
        },
        "Armis Alert Description": {
          "complex": null,
          "simple": "description"
        },
        "Armis Alert ID": {
          "complex": null,
          "simple": "alertId"
        },
        "Armis Alert Severity": {
          "complex": null,
          "simple": "severity"
        },
        "Armis Alert Status ": {
          "complex": null,
          "simple": "status"
        },
        "Armis Alert Type": {
          "complex": null,
          "simple": "type"
        },
        "details": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "description",
            "transformers": []
          },
          "simple": ""
        },
        "name": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "title",
            "transformers": []
          },
          "simple": ""
        },
        "severity": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "severity",
            "transformers": []
          },
          "simple": ""
        }
      }
    },
    "Armis Alert - Policy Violation": {
      "dontMapEventToLabels": false,
      "internalMapping": {
        "Alert ID": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "alertId",
            "transformers": []
          },
          "simple": ""
        },
        "Alert Name": {
          "complex": null,
          "simple": "title"
        },
        "Armis Alert Description": {
          "complex": null,
          "simple": "description"
        },
        "Armis Alert ID": {
          "complex": null,
          "simple": "alertId"
        },
        "Armis Alert Severity": {
          "complex": null,
          "simple": "severity"
        },
        "Armis Alert Status ": {
          "complex": null,
          "simple": "status"
        },
        "Armis Alert Type": {
          "complex": null,
          "simple": "type"
        },
        "details": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "description",
            "transformers": []
          },
          "simple": ""
        },
        "name": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "title",
            "transformers": []
          },
          "simple": ""
        },
        "severity": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "severity",
            "transformers": []
          },
          "simple": ""
        }
      }
    },
    "Armis Alert - System Policy Violation": {
      "dontMapEventToLabels": false,
      "internalMapping": {
        "Alert ID": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "alertId",
            "transformers": []
          },
          "simple": ""
        },
        "Alert Name": {
          "complex": null,
          "simple": "title"
        },
        "Armis Alert Description": {
          "complex": null,
          "simple": "description"
        },
        "Armis Alert ID": {
          "complex": null,
          "simple": "alertId"
        },
        "Armis Alert Severity": {
          "complex": null,
          "simple": "severity"
        },
        "Armis Alert Status ": {
          "complex": null,
          "simple": "status"
        },
        "Armis Alert Type": {
          "complex": null,
          "simple": "type"
        },
        "details": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "description",
            "transformers": []
          },
          "simple": ""
        },
        "name": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "title",
            "transformers": []
          },
          "simple": ""
        },
        "severity": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "severity",
            "transformers": []
          },
          "simple": ""
        }
      }
    },
    "dbot_classification_incident_type_all": {
      "dontMapEventToLabels": false,
      "internalMapping": {
        "Alert ID": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "alertId",
            "transformers": []
          },
          "simple": ""
        },
        "Alert Name": {
          "complex": null,
          "simple": "title"
        },
        "Armis Device Identifier": {
          "complex": null,
          "simple": "deviceIds.[0]"
        },
        "Armis Device IDs": {
          "complex": null,
          "simple": "deviceIds.[0]"
        },
        "Event Type": {
          "complex": null,
          "simple": "type"
        },
        "details": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "description",
            "transformers": []
          },
          "simple": ""
        },
        "name": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "title",
            "transformers": []
          },
          "simple": ""
        },
        "severity": {
          "complex": {
            "accessor": "",
            "filters": [],
            "root": "severity",
            "transformers": []
          },
          "simple": ""
        }
      }
    }
  },
  "name": "Armis - Incoming Mapper",
  "type": "mapping-incoming",
  "version": -1,
  "fromVersion": "6.0.0"
}