{
  "associatedToAll": false,
  "associatedTypes": [
    "Qradar Generic",
    "FW change management",
    "CrowdStrike Falcon Detection",
    "CrowdStrike Falcon Incident",
    "Malware",
    "Microsoft Defender For Endpoint",
    "Skyhigh Security Alert",
    "Skyhigh Security Threat",
    "CrowdStrike Falcon NGSIEM Detection",
    "CrowdStrike Falcon NGSIEM Incident"
  ],
  "breachScript": "",
  "caseInsensitive": true,
  "cliName": "sourceips",
  "closeForm": false,
  "columns": null,
  "content": true,
  "defaultRows": null,
  "description": "The source IPs of the event.",
  "editForm": true,
  "extractIndicatorTypesIDs": [],
  "fieldCalcScript": "",
  "group": 0,
  "hidden": false,
  "id": "incident_sourceips",
  "isExtractingSpecificIndicatorTypes": false,
  "isReadOnly": false,
  "itemVersion": "",
  "locked": false,
  "name": "Source IPs",
  "neverSetAsRequired": false,
  "ownerOnly": false,
  "placeholder": "",
  "propagationLabels": [
    "all"
  ],
  "required": false,
  "script": "",
  "selectValues": [],
  "sla": 0,
  "system": false,
  "systemAssociatedTypes": [
    "Qradar Generic",
    "FW change management",
    "CrowdStrike Falcon Detection",
    "CrowdStrike Falcon Incident",
    "Malware",
    "Microsoft Defender For Endpoint"
  ],
  "threshold": 72,
  "toServerVersion": "",
  "type": "multiSelect",
  "unmapped": false,
  "unsearchable": false,
  "useAsKpi": false,
  "validationRegex": "",
  "version": -1,
  "fromVersion": "6.0.0",
  "openEnded": true,
  "marketplaces": [
    "xsoar"
  ]
}