{
    "id": "incident_xdrriskyusers",
    "version": -1,
    "modified": "2023-08-31T11:51:08.505460804Z",
    "name": "XDR Risky Users",
    "ownerOnly": false,
    "description": "Users that pose a risk, along with their scores retrieved from XDR.",
    "cliName": "xdrriskyusers",
    "type": "grid",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 0,
    "hidden": false,
    "openEnded": false,
    "associatedTypes": [
        "Cortex XDR - XCLOUD",
        "Cortex XDR - XCLOUD Cryptomining",
        "Cortex XDR Device Control Violations",
        "Cortex XDR Disconnected endpoints",
        "Cortex XDR Incident",
        "Cortex XDR Port Scan",
        "Cortex XDR - Lite"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "columns": [
        {
            "key": "userid",
            "displayName": "User ID",
            "type": "shortText",
            "orgType": "shortText",
            "required": false,
            "script": "",
            "width": 150,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        },
        {
            "key": "risklevel",
            "displayName": "Risk Level",
            "type": "shortText",
            "orgType": "shortText",
            "required": false,
            "script": "",
            "width": 150,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        },
        {
            "key": "reasons",
            "displayName": "Reasons",
            "type": "shortText",
            "orgType": "shortText",
            "required": false,
            "script": "",
            "width": 150,
            "isDefault": true,
            "fieldCalcScript": "",
            "isReadOnly": false,
            "selectValues": null
        }
    ],
    "defaultRows": [
        {},
        {},
        {}
    ],
    "sla": 0,
    "threshold": 72,
    "fromVersion": "6.5.0"
}