{

	"id": "MicrosoftCloudAppSecurity-mapper",
	"name": "Microsoft CAS",
	"type": "mapping-incoming",
	"description": "Maps incoming Microsoft CAS fields",
	"version": -1,
	"defaultIncidentType": "",
	"mapping": {
		"Microsoft CAS Alert": {
			"dontMapEventToLabels": true,
			"internalMapping": {
				"Account Name": {
					"complex": null,
					"simple": "account.pa"
				},
				"Cloud Service": {
					"complex": null,
					"simple": "service.label"
				},
				"Country": {
					"complex": null,
					"simple": "country.label"
				},
				"Policy Description": {
					"complex": null,
					"simple": "policyRule.label"
				},
				"Policy Type": {
					"complex": null,
					"simple": "policyRule.policyType"
				},
				"Risk Score": {
					"complex": null,
					"simple": "threatScore"
				},
				"Username": {
					"complex": null,
					"simple": "user.label"
				}
			}
		}
	},
	"fromVersion": "6.0.0"
}