{ "fromDate": "0001-01-01T00:00:00Z", "fromDateLicense": "0001-01-01T00:00:00Z", "id": "My Threat Landscape", "layout": [ { "forceRange": false, "h": 6, "i": "4fb10b40-0971-11ec-bec9-8fb9dbbe5fb4", "id": "4fb10b40-0971-11ec-bec9-8fb9dbbe5fb4", "reflectDimensions": true, "w": 4, "widget": { "Cache": null, "category": "", "commitMessage": "", "dataType": "scripts", "dateRange": { "fromDate": "0001-01-01T00:00:00Z", "fromDateLicense": "0001-01-01T00:00:00Z", "period": { "by": "", "byFrom": "", "byTo": "", "field": "", "fromValue": null, "toValue": null }, "toDate": "0001-01-01T00:00:00Z" }, "definitionId": "", "fromServerVersion": "", "id": "24b8c823-873e-4153-81bf-a79d04743d28", "isPredefined": false, "itemVersion": "", "modified": "2021-08-30T09:04:40.421253809Z", "name": "Unit42 Blog Feed", "packID": "", "params": { "insecure": "true", "url": "https://unit42.paloaltonetworks.com/feed/" }, "prevName": "Unit42 Blog Feed", "propagationLabels": [ "all" ], "query": "RSSWidget", "shouldCommit": false, "toServerVersion": "", "vcShouldIgnore": false, "vcShouldKeepItemLegacyProdMachine": false, "version": 1, "widgetType": "text" }, "x": 0, "y": 2 }, { "forceRange": false, "h": 3, "i": "3cddaf60-1bb3-11ec-9e41-67129ae73e48", "id": "3cddaf60-1bb3-11ec-9e41-67129ae73e48", "reflectDimensions": true, "w": 8, "widget": { "Cache": null, "category": "", "commitMessage": "", "dataType": "indicators", "dateRange": { "fromDate": "0001-01-01T00:00:00Z", "fromDateLicense": "0001-01-01T00:00:00Z", "period": { "by": "", "byFrom": "days", "byTo": "", "field": "", "fromValue": 180, "toValue": null }, "toDate": "0001-01-01T00:00:00Z" }, "definitionId": "", "fromServerVersion": "", "id": "ba01f493-c293-4da1-8ddf-ebba4d922f50", "isPredefined": false, "itemVersion": "", "modified": "2021-09-22T14:41:56.747459572Z", "name": "Top 10 File Indicators in Related Incidents", "packID": "", "params": { "enablePagination": false, "tableColumns": [ { "displayed": true, "isDefault": true, "key": "value", "width": 300 }, { "displayed": true, "isDefault": true, "key": "score", "width": 120 }, { "displayed": true, "isDefault": true, "key": "relatedIncCount", "width": 124 }, { "displayed": true, "isDefault": true, "key": "sourceInstances", "width": 175 } ] }, "prevName": "Top File Indicators in Related Incidents", "propagationLabels": [ "all" ], "query": "type:File and (verdict:Malicious or verdict:Suspicious) and investigationIDs:*", "shouldCommit": false, "size": 10, "sort": [ { "asc": false, "field": "relatedIncCount", "fieldType": "" } ], "toServerVersion": "", "vcShouldIgnore": false, "vcShouldKeepItemLegacyProdMachine": false, "version": 4, "widgetType": "table" }, "x": 4, "y": 5 }, { "forceRange": false, "h": 3, "i": "998d60e0-1bb6-11ec-9e41-67129ae73e48", "id": "998d60e0-1bb6-11ec-9e41-67129ae73e48", "reflectDimensions": true, "w": 8, "widget": { "Cache": null, "category": "", "commitMessage": "", "dataType": "indicators", "dateRange": { "fromDate": "0001-01-01T00:00:00Z", "fromDateLicense": "0001-01-01T00:00:00Z", "period": { "by": "", "byFrom": "days", "byTo": "", "field": "", "fromValue": 180, "toValue": null }, "toDate": "0001-01-01T00:00:00Z" }, "definitionId": "", "fromServerVersion": "", "id": "8d75816f-f9c2-451d-8479-08af6b18c3e9", "isPredefined": false, "itemVersion": "", "modified": "2021-09-22T15:06:00.322460607Z", "name": "Top 10 Attack Pattern Indicators in Related Incidents", "packID": "", "params": { "enablePagination": false, "tableColumns": [ { "displayed": true, "isDefault": true, "key": "value", "width": 222 }, { "displayed": true, "key": "Tags", "width": 200 }, { "displayed": true, "isDefault": true, "key": "relatedIncCount", "width": 100 }, { "displayed": true, "key": "Kill Chain Phases", "width": 200 } ] }, "prevName": "Top Attack Pattern Indicators in Related Incidents", "propagationLabels": [ "all" ], "query": "type:\"Attack Pattern\" and (verdict:Malicious or verdict:Suspicious) and investigationIDs:*", "shouldCommit": false, "size": 10, "sort": [ { "asc": false, "field": "relatedIncCount", "fieldType": "" } ], "toServerVersion": "", "vcShouldIgnore": false, "vcShouldKeepItemLegacyProdMachine": false, "version": 3, "widgetType": "table" }, "x": 4, "y": 2 }, { "forceRange": false, "h": 2, "i": "655c93f0-2aa1-11ec-a172-3d0d6ceca5b8", "id": "655c93f0-2aa1-11ec-a172-3d0d6ceca5b8", "reflectDimensions": true, "w": 4, "widget": { "Cache": null, "category": "", "commitMessage": "", "dataType": "indicators", "dateRange": { "fromDate": "0001-01-01T00:00:00Z", "fromDateLicense": "0001-01-01T00:00:00Z", "period": { "by": "", "byFrom": "days", "byTo": "", "field": "", "fromValue": 180, "toValue": null }, "toDate": "0001-01-01T00:00:00Z" }, "definitionId": "", "fromServerVersion": "", "id": "5139168e-f555-442c-84a6-ee98aac55c1e", "isPredefined": false, "itemVersion": "", "modified": "2021-10-11T14:41:52.765053897Z", "name": "Malicious/Suspicious Indicators in Incidents", "packID": "", "params": { "groupBy": [ "firstSeen(d)", "score" ], "timeFrame": "days", "valuesFormat": "abbreviated" }, "prevName": "Malicious/Suspicious Indicators in Incidents", "propagationLabels": [ "all" ], "query": "(verdict:Malicious or verdict:Suspicious) and investigationIDs:*", "shouldCommit": false, "toServerVersion": "", "vcShouldIgnore": false, "vcShouldKeepItemLegacyProdMachine": false, "version": 3, "widgetType": "line" }, "x": 0, "y": 0 }, { "forceRange": false, "h": 2, "i": "fb35c8b0-2aa1-11ec-a172-3d0d6ceca5b8", "id": "fb35c8b0-2aa1-11ec-a172-3d0d6ceca5b8", "reflectDimensions": true, "w": 8, "widget": { "Cache": null, "category": "", "commitMessage": "", "dataType": "indicators", "dateRange": { "fromDate": "0001-01-01T00:00:00Z", "fromDateLicense": "0001-01-01T00:00:00Z", "period": { "by": "", "byFrom": "days", "byTo": "", "field": "", "fromValue": 30, "toValue": null }, "toDate": "0001-01-01T00:00:00Z" }, "definitionId": "", "fromServerVersion": "", "id": "9a7aeb89-f57e-4caa-8148-85b6ca22cbd5", "isPredefined": false, "itemVersion": "", "modified": "2021-10-11T14:46:11.982732187Z", "name": "Top 10 Indicators in Related Incidents", "packID": "", "params": { "tableColumns": [ { "displayed": true, "isDefault": true, "key": "indicator_type", "width": 120 }, { "displayed": true, "isDefault": true, "key": "value", "width": 300 }, { "displayed": true, "isDefault": true, "key": "relatedIncCount", "width": 150 }, { "displayed": true, "isDefault": true, "key": "score", "width": 120 }, { "displayed": true, "isDefault": true, "key": "sourceBrands", "width": 175 } ] }, "prevName": "Indicators in Related Incidents", "propagationLabels": [ "all" ], "query": "investigationIDs:* and expirationStatus:active and (verdict:Malicious or verdict:Suspicious or verdict:Unknown)", "shouldCommit": false, "size": 10, "sort": [ { "asc": false, "field": "relatedIncCount", "fieldType": "" } ], "toServerVersion": "", "vcShouldIgnore": false, "vcShouldKeepItemLegacyProdMachine": false, "version": 5, "widgetType": "table" }, "x": 4, "y": 0 } ], "name": "My Threat Landscape", "period": { "by": "", "byFrom": "days", "byTo": "", "field": "", "fromValue": 30, "toValue": null }, "toDate": "0001-01-01T00:00:00Z", "version": -1, "fromVersion": "6.2.0", "description": "", "isPredefined": true, "marketplaces": [ "xsoar" ] }