{
    "name": "Code42 - Mapping",
    "type": "mapping-incoming",
    "id": "Code42 - Mapping",
    "description": "Maps Code42 Alert fields to Incident",
    "mapping": {
        "Code42 Security Alert": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "Code42 File Events": {
                    "complex": {
                        "filters": [],
                        "root": "fileevents",
                        "transformers": [
                            {
                                "operator": "ConvertKeysToTableFieldFormat"
                            }
                        ]
                    }
                },
                "Code42 File Events Version": {
                    "complex": {
                        "filters": [],
                        "root": "fileevents_version",
                        "transformers": []
                    }
                },
                "Code42 SecurityAlert Description": {
                    "complex": {
                        "filters": [],
                        "root": "rule_names",
                        "transformers": []
                    }
                },
                "Code42 Alert ID": {
                    "complex": {
                        "filters": [],
                        "root": "sessionId",
                        "transformers": []
                    }
                },
                "Code42 SecurityAlert Name": {
                    "complex": {
                        "filters": [],
                        "root": "exfiltrationSummary",
                        "transformers": []
                    }
                },
                "Code42 SecurityAlert State": {
                    "complex": {
                        "filters": [],
                        "root": "state",
                        "transformers": []
                    }
                },
                "Code42 SecurityAlert Timestamp": {
                    "complex": {
                        "filters": [],
                        "root": "beginTimeIso",
                        "transformers": []
                    }
                },
                "Code42 Severity": {
                    "complex": {
                        "filters": [],
                        "root": "riskSeverity",
                        "transformers": []
                    }
                },
                "Code42 Username": {
                    "complex": {
                        "filters": [],
                        "root": "actor",
                        "transformers": []
                    }
                },
                "name": {
                    "complex": {
                        "filters": [],
                        "root": "name",
                        "transformers": []
                    }
                },
                "severity": {
                    "complex": {
                        "filters": [],
                        "root": "riskSeverity",
                        "transformers": [
                            {
                                "args": {
                                    "input_values": {
                                        "value": {
                                            "simple": "MODERATE"
                                        }
                                    },
                                    "mapped_values": {
                                        "value": {
                                            "simple": "MEDIUM"
                                        }
                                    }
                                },
                                "operator": "MapValuesTransformer"
                            }
                        ]
                    }
                },
                "Code42 Alert Risk Severity Summary": {
                    "complex": {
                        "filters": [],
                        "root": "exfiltrationSummary",
                        "transformers": []
                    }
                },
                "Code42 Alert URL": {
                    "complex": {
                        "filters": [],
                        "root": "alertUrl",
                        "transformers": []
                    }
                },
                "Code42 File Events V2": {
                    "complex": {
                        "filters": [],
                        "root": "fileevents_v2",
                        "transformers": []
                    }
                }
            }
        }
    },
    "version": -1,
    "fromVersion": "6.5.0",
    "feed": false,
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}