{ "description": "", "fromVersion": "6.0.0", "detailsV2": { "tabs": [ { "id": "summary", "name": "Legacy Summary", "type": "summary" }, { "id": "caseinfoid", "name": "Incident Info", "sections": [ { "displayType": "CARD", "h": 3, "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "type", "height": 53, "id": "incident-type-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "severity", "height": 53, "id": "incident-severity-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "owner", "height": 53, "id": "incident-owner-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourceinstance", "height": 53, "id": "incident-sourceInstance-field", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinealerttype", "height": 53, "id": "c4927280-b892-11eb-acc5-0dea9504b51a", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinesecurityseverity", "height": 53, "id": "d0439a80-b8a8-11eb-acc5-0dea9504b51a", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlineviolationtimestamp", "height": 53, "id": "a1181f90-b896-11eb-9573-bb5824dda559", "index": 6, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlineattacktype", "height": 53, "id": "985a6c00-b896-11eb-9573-bb5824dda559", "index": 7, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "destinationip", "height": 53, "id": "7cd1c6e0-b896-11eb-9573-bb5824dda559", "index": 8, "listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "destinationport", "height": 53, "id": "a8b45d90-b896-11eb-9573-bb5824dda559", "index": 9, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinegeolocationsourceip", "height": 53, "id": "b1723830-b896-11eb-9573-bb5824dda559", "index": 10, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "f5silverlinehttpclassname", "height": 53, "id": "b7f3de70-b896-11eb-9573-bb5824dda559", "index": 11, "listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "f5silverlineclientip", "height": 53, "id": "c9499520-b896-11eb-9573-bb5824dda559", "index": 12, "listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinehttpmethod", "height": 53, "id": "d476c210-b896-11eb-9573-bb5824dda559", "index": 13, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinesecuritypolicyupdatetimestamp", "height": 53, "id": "d9d8ee90-b896-11eb-9573-bb5824dda559", "index": 14, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silvelinesecuritypolicyname", "height": 53, "id": "dec15730-b896-11eb-9573-bb5824dda559", "index": 15, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "protocol", "height": 53, "id": "e3c07c20-b896-11eb-9573-bb5824dda559", "index": 16, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinehttpstringsdetected", "height": 53, "id": "eca20b60-b896-11eb-9573-bb5824dda559", "index": 17, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinerequeststatus", "height": 53, "id": "f34f0760-b896-11eb-9573-bb5824dda559", "index": 18, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlineresponsecode", "height": 53, "id": "f8533560-b896-11eb-9573-bb5824dda559", "index": 19, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlineattacksignatureid", "height": 53, "id": "072accb0-b897-11eb-9573-bb5824dda559", "index": 20, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlineattacksignaturename", "height": 53, "id": "08bcb750-b897-11eb-9573-bb5824dda559", "index": 21, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourceport", "height": 53, "id": "121fd2a0-b897-11eb-9573-bb5824dda559", "index": 22, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlineviolationsecuritysupportid", "height": 53, "id": "1650f930-b897-11eb-9573-bb5824dda559", "index": 23, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinetargeteduri", "height": 53, "id": "1e03f380-b897-11eb-9573-bb5824dda559", "index": 24, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinedetectedusernames", "height": 53, "id": "20e05f80-b897-11eb-9573-bb5824dda559", "index": 25, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlineviolationstypes", "height": 53, "id": "2ffd6440-b897-11eb-9573-bb5824dda559", "index": 26, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinewebapplicationname", "height": 53, "id": "32296c00-b897-11eb-9573-bb5824dda559", "index": 27, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinexforwarded", "height": 53, "id": "3479ebb0-b897-11eb-9573-bb5824dda559", "index": 28, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinestagedsignatureids", "height": 53, "id": "3bcec070-b897-11eb-9573-bb5824dda559", "index": 29, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinestagedsignaturenames", "height": 53, "id": "3cfd5560-b897-11eb-9573-bb5824dda559", "index": 30, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "f5silverlinesubviolations", "height": 53, "id": "429f4a00-b897-11eb-9573-bb5824dda559", "index": 31, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "f5silverlineviolationsdetails", "height": 106, "id": "4a75d1e0-b897-11eb-9573-bb5824dda559", "index": 32, "listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourcebrand", "height": 53, "id": "incident-sourceBrand-field", "index": 33, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "f5silverlinerawmessage", "height": 106, "id": "25f36990-c909-11eb-96fd-df7b1d8be585", "index": 34, "listId": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "moved": false, "name": "Case Details", "static": false, "w": 1, "x": 0, "y": 0 }, { "h": 2, "i": "caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8", "maxW": 3, "moved": false, "name": "Notes", "static": false, "type": "notes", "w": 1, "x": 2, "y": 0 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8", "maxW": 3, "moved": false, "name": "Work Plan", "static": false, "type": "workplan", "w": 1, "x": 1, "y": 0 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8", "isVisible": true, "maxW": 3, "moved": false, "name": "Linked Incidents", "static": false, "type": "linkedIncidents", "w": 1, "x": 1, "y": 2 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-842632c0-98b1-11e9-97d7-ed26ef9e46c8", "maxW": 3, "moved": false, "name": "Child Incidents", "static": false, "type": "childInv", "w": 1, "x": 2, "y": 4 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0", "maxW": 3, "moved": false, "name": "Evidence", "static": false, "type": "evidence", "w": 1, "x": 2, "y": 2 }, { "displayType": "ROW", "h": 2, "hideName": false, "i": "caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260", "maxW": 3, "moved": false, "name": "Team Members", "static": false, "type": "team", "w": 1, "x": 0, "y": 7 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-7ce69dd0-a07f-11e9-936c-5395a1acf11e", "maxW": 3, "moved": false, "name": "Indicators", "query": "", "queryType": "input", "static": false, "type": "indicators", "w": 2, "x": 1, "y": 6 }, { "displayType": "CARD", "h": 2, "i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289", "items": [ { "endCol": 1, "fieldId": "occurred", "height": 53, "id": "incident-occurred-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 1, "fieldId": "dbotmodified", "height": 53, "id": "incident-modified-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotduedate", "height": 53, "id": "incident-dueDate-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotcreated", "height": 53, "id": "incident-created-field", "index": 0, "sectionItemType": "field", "startCol": 1 }, { "endCol": 2, "fieldId": "dbotclosed", "height": 53, "id": "incident-closed-field", "index": 1, "sectionItemType": "field", "startCol": 1 } ], "maxW": 3, "moved": false, "name": "Timeline Information", "static": false, "w": 1, "x": 0, "y": 3 }, { "displayType": "ROW", "h": 2, "i": "caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "dbotclosed", "height": 22, "id": "incident-dbotClosed-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closereason", "height": 22, "id": "incident-closeReason-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closenotes", "height": 22, "id": "incident-closeNotes-field", "index": 2, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "moved": false, "name": "Closing Information", "static": false, "w": 1, "x": 1, "y": 4 }, { "displayType": "CARD", "h": 2, "i": "caseinfoid-e54b1770-a0b1-11e9-b27f-13ae1773d289", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "details", "height": 22, "id": "incident-details-field", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "moved": false, "name": "Investigation Data", "static": false, "w": 1, "x": 0, "y": 5 } ], "type": "custom" }, { "id": "warRoom", "name": "War Room", "type": "warRoom" }, { "id": "workPlan", "name": "Work Plan", "type": "workPlan" }, { "id": "evidenceBoard", "name": "Evidence Board", "type": "evidenceBoard" }, { "id": "relatedIncidents", "name": "Related Incidents", "type": "relatedIncidents" }, { "id": "canvas", "name": "Canvas", "type": "canvas" } ] }, "edit": { "sections": [] }, "group": "incident", "id": "F5 Silverline WAF Events Layout", "name": "F5 Silverline WAF Events Layout", "system": false, "version": -1, "marketplaces": ["xsoar"] }