{ "detailsV2": { "tabs": [ { "id": "summary", "name": "Legacy Summary", "type": "summary" }, { "hidden": false, "id": "qpnefeci5o", "name": "Campaign Overview", "sections": [ { "h": 1, "hideName": true, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-vvoh19d1ue-dad35280-b1a3-11eb-a261-1f85bcf500af", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Number of Campaign Incidents", "query": "ShowNumberOfCampaignIncidents", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 0 }, { "h": 1, "hideName": true, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-vvoh19d1ue-ee5278e0-b1a3-11eb-a261-1f85bcf500af", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Highest Severity", "query": "ShowCampaignHighestSeverity", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 1 }, { "description": "", "h": 1, "hideName": true, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-vvoh19d1ue-f6b3dba0-b1a3-11eb-a261-1f85bcf500af", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Senders", "query": "ShowCampaignUniqueSenders", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 2 }, { "description": "", "h": 2, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-vvoh19d1ue-a713a290-befc-11eb-b351-7bcfe92e5e24", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Campaign Duration", "query": "GetCampaignDuration", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 6 }, { "description": "Indicators that were detected in the phishing incidents of the campaign.", "displayType": "ROW", "h": 4, "hideItemTitleOnlyOne": true, "hideName": false, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-vvoh19d1ue-c5ce0e30-c142-11eb-b5c7-f39a4da1b92e", "items": [ { "endCol": 6, "fieldId": "campaignmutualindicators", "height": 106, "id": "5e1423c0-576e-11ec-ad62-537d4cf7b6ec", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "minW": 3, "moved": false, "name": "Mutual Campaign Indicators", "static": false, "w": 3, "x": 0, "y": 9 }, { "displayType": "ROW", "h": 1, "hideItemTitleOnlyOne": true, "hideName": false, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-vvoh19d1ue-f96d1510-c142-11eb-b5c7-f39a4da1b92e", "items": [ { "dropEffect": "move", "endCol": 2, "fieldId": "emailcampaigncanvas", "height": 44, "id": "098d31f0-c143-11eb-b5c7-f39a4da1b92e", "index": 0, "listId": "vvoh19d1ue-f96d1510-c142-11eb-b5c7-f39a4da1b92e", "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Campaign Canvas", "static": false, "w": 1, "x": 2, "y": 8 }, { "description": "A snippet from the latest incident, showing what the campaign email looks like. Meaningful phishing and spam words are in bold.", "displayType": "ROW", "h": 6, "hideItemTitleOnlyOne": true, "hideName": false, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-30070840-d743-11eb-aff4-fd584214073e", "items": [ { "dropEffect": "move", "endCol": 4, "fieldId": "emailcampaignsnippets", "height": 106, "id": "c339a380-d742-11eb-aff4-fd584214073e", "index": 0, "listId": "qpnefeci5o-vvoh19d1ue-e1664bf0-b1a5-11eb-a261-1f85bcf500af", "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "minW": 2, "moved": false, "name": "Campaign Snippet", "static": false, "w": 2, "x": 0, "y": 3 }, { "h": 1, "hideName": true, "i": "qpnefeci5o-field-changed-qpnefeci5o-pfjeh5flj3-qpnefeci5o-ad36df40-d7e1-11eb-a10a-1b4621c00953", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Recipients", "query": "ShowCampaignUniqueRecipients", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 3 }, { "h": 2, "hideName": true, "i": "qpnefeci5o-field-changed-qpnefeci5o-16396de0-fe85-11eb-af66-87d0b371bbf6", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Owners", "query": "ShowCampaignIncidentsOwners", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 4 }, { "description": "The information displayed in the different sections updates dynamically. Changes are expected as incidents progress.", "h": 1, "hideName": true, "i": "qpnefeci5o-a34a1b00-56a8-11ec-a307-6b5fd18fa121", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Information", "query": "GetCampaignIndicatorsByIncidentId", "queryType": "script", "static": false, "type": "dynamic", "w": 3, "x": 0, "y": 13 }, { "description": "", "h": 1, "hideName": true, "i": "qpnefeci5o-c09ebb90-576e-11ec-ad62-537d4cf7b6ec", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Similarity Range", "query": "ShowCampaignSimilarityRange", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 0 }, { "h": 1, "hideName": true, "i": "qpnefeci5o-ca2484a0-576f-11ec-ad62-537d4cf7b6ec", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Last incident occurred", "query": "ShowCampaignLastIncidentOccurred", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 1, "y": 0 }, { "description": "", "h": 2, "i": "qpnefeci5o-df917140-576f-11ec-ad62-537d4cf7b6ec", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Campaign Recipients", "query": "ShowCampaignRecipients", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 1 }, { "h": 2, "i": "qpnefeci5o-ee865490-576f-11ec-ad62-537d4cf7b6ec", "items": [], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Campaign Senders", "query": "ShowCampaignSenders", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 1, "y": 1 } ], "type": "custom" }, { "hidden": false, "id": "pfjeh5flj3", "name": "Campaign Management", "sections": [ { "description": "The following incidents were detected as part of the same campaign by the FindEmailCampaign script. With default configuration - all similar incidents are also linked to the campaign, but you can always change this using the Incident Actions section below.", "h": 3, "i": "qpnefeci5o-pfjeh5flj3-qpnefeci5o-pfjeh5flj3-7641f640-b7da-11eb-98eb-1965d2f9391a", "items": [], "maxW": 3, "minH": 1, "minW": 3, "moved": false, "name": "Campaign Incidents Info", "query": "GetCampaignIncidentsInfo", "queryType": "script", "static": false, "type": "dynamic", "w": 3, "x": 0, "y": 0 }, { "description": "Take actions on incidents that belong to the campaign.", "displayType": "CARD", "h": 3, "hideName": false, "i": "qpnefeci5o-pfjeh5flj3-qpnefeci5o-pfjeh5flj3-b3a487f0-b7da-11eb-98eb-1965d2f9391a", "items": [ { "endCol": 2, "fieldId": "selectcampaignincidents", "height": 53, "id": "d6f228c0-b7da-11eb-98eb-1965d2f9391a", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "actionsoncampaignincidents", "height": 53, "id": "cb849770-b7da-11eb-98eb-1965d2f9391a", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "campaignclosenotes", "height": 106, "id": "dc1eed60-b7da-11eb-98eb-1965d2f9391a", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "args": {}, "buttonClass": "primary", "dropEffect": "move", "endCol": 2, "fieldId": "", "height": 53, "id": "303a66f0-bcad-11eb-98fe-53f79cf41cac", "index": 3, "listId": "pfjeh5flj3-b3a487f0-b7da-11eb-98eb-1965d2f9391a", "name": "Run Selected Action", "scriptId": "PerformActionOnCampaignIncidents", "sectionItemType": "button", "startCol": 0 } ], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Incident Actions", "static": false, "w": 1, "x": 2, "y": 3 }, { "description": "Send emails to the recipients involved in the incidents. Select specific incidents, or select \"All\", to automatically detect the relevant recipients.", "displayType": "ROW", "h": 3, "hideName": false, "i": "qpnefeci5o-pfjeh5flj3-qpnefeci5o-pfjeh5flj3-5bc36bf0-bcad-11eb-98fe-53f79cf41cac", "items": [ { "endCol": 4, "fieldId": "selectcampaignincidents", "height": 22, "id": "ab788ae0-bcad-11eb-98fe-53f79cf41cac", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 4, "fieldId": "campaignemailto", "height": 22, "id": "8f070c60-bcad-11eb-98fe-53f79cf41cac", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 4, "fieldId": "campaignemailsubject", "height": 22, "id": "92b45cf0-bcad-11eb-98fe-53f79cf41cac", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 4, "fieldId": "campaignemailbody", "height": 44, "id": "a81080b0-bcad-11eb-98fe-53f79cf41cac", "index": 3, "listId": "pfjeh5flj3-5bc36bf0-bcad-11eb-98fe-53f79cf41cac", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "campaignemailsenderinstance", "height": 22, "id": "2d20bc00-6e03-11ec-8818-73c00a708d03", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "args": {}, "dropEffect": "move", "endCol": 3, "fieldId": "", "height": 44, "id": "c73ab690-bcad-11eb-98fe-53f79cf41cac", "index": 4, "listId": "pfjeh5flj3-5bc36bf0-bcad-11eb-98fe-53f79cf41cac", "name": "Send Email", "scriptId": "SendEmailToCampaignRecipients", "sectionItemType": "button", "startCol": 1 } ], "maxW": 3, "minH": 1, "minW": 2, "moved": false, "name": "Notify Recipients", "static": false, "w": 2, "x": 0, "y": 3 } ], "type": "custom" }, { "id": "caseinfoid", "name": "Case Info", "sections": [ { "displayType": "ROW", "h": 2, "i": "qpnefeci5o-caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "type", "height": 22, "id": "incident-type-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "severity", "height": 22, "id": "incident-severity-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "owner", "height": 22, "id": "incident-owner-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourcebrand", "height": 22, "id": "incident-sourceBrand-field", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourceinstance", "height": 22, "id": "incident-sourceInstance-field", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "playbookid", "height": 22, "id": "incident-playbookId-field", "index": 6, "sectionItemType": "field", "startCol": 0 } ], "maxH": null, "maxW": 1, "minH": 1, "minW": 1, "moved": false, "name": "Case Details", "static": false, "w": 1, "x": 0, "y": 0 }, { "h": 2, "i": "qpnefeci5o-caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8", "maxH": null, "maxW": 1, "minH": 1, "minW": 1, "moved": false, "name": "Notes", "static": false, "type": "notes", "w": 1, "x": 2, "y": 0 }, { "displayType": "ROW", "h": 4, "i": "qpnefeci5o-caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8", "isVisible": true, "maxH": null, "maxW": 3, "minH": 1, "minW": 3, "moved": false, "name": "Linked Incidents", "static": false, "type": "linkedIncidents", "w": 3, "x": 0, "y": 2 }, { "displayType": "ROW", "h": 2, "i": "qpnefeci5o-caseinfoid-4a31afa0-98ba-11e9-a519-93a53c759fe0", "maxH": null, "maxW": 1, "minH": 1, "minW": 1, "moved": false, "name": "Evidence", "static": false, "type": "evidence", "w": 1, "x": 0, "y": 7 }, { "displayType": "ROW", "h": 2, "hideName": false, "i": "qpnefeci5o-caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260", "maxH": null, "maxW": 1, "minH": 1, "minW": 1, "moved": false, "name": "Team Members", "static": false, "type": "team", "w": 1, "x": 2, "y": 7 }, { "displayType": "CARD", "h": 2, "i": "qpnefeci5o-caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289", "items": [ { "endCol": 1, "fieldId": "occurred", "height": 22, "id": "incident-occurred-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 1, "fieldId": "dbotmodified", "height": 22, "id": "incident-modified-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotduedate", "height": 22, "id": "incident-dueDate-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotcreated", "height": 22, "id": "incident-created-field", "index": 0, "sectionItemType": "field", "startCol": 1 }, { "endCol": 2, "fieldId": "dbotclosed", "height": 22, "id": "incident-closed-field", "index": 1, "sectionItemType": "field", "startCol": 1 } ], "maxH": null, "maxW": 1, "minH": 1, "minW": 1, "moved": false, "name": "Timeline Information", "static": false, "w": 1, "x": 1, "y": 0 }, { "displayType": "ROW", "h": 2, "i": "qpnefeci5o-caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "dbotclosed", "height": 22, "id": "incident-dbotClosed-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closereason", "height": 22, "id": "incident-closeReason-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closenotes", "height": 22, "id": "incident-closeNotes-field", "index": 2, "sectionItemType": "field", "startCol": 0 } ], "maxH": null, "maxW": 1, "minH": 1, "minW": 1, "moved": false, "name": "Closing Information", "static": false, "w": 1, "x": 1, "y": 7 }, { "description": "Not all linked incidents may actually be related to the phishing campaign, and not all related incidents may be linked. This behavior customized via configuration of the Detect \u0026 Manage Phishing Campaigns playbook, or changed by the user through the Campaign Management tab under the Incident Actions section.", "displayType": "ROW", "h": 1, "hideName": false, "i": "qpnefeci5o-caseinfoid-ea80f0c0-e001-11eb-a75f-3b984a55fdc6", "items": [], "maxH": null, "maxW": 3, "minH": 1, "minW": 3, "moved": false, "name": "Note About Linked Incidents", "static": false, "w": 3, "x": 0, "y": 6 } ], "type": "custom" }, { "id": "warRoom", "name": "War Room", "type": "warRoom" }, { "hidden": false, "id": "workPlan", "name": "Work Plan", "type": "workPlan" }, { "id": "evidenceBoard", "name": "Evidence Board", "type": "evidenceBoard" }, { "id": "relatedIncidents", "name": "Related Incidents", "type": "relatedIncidents" }, { "id": "canvas", "name": "Canvas", "type": "canvas" } ] }, "group": "incident", "id": "Phishing Campaign", "name": "Phishing Campaign", "system": true, "version": -1, "fromVersion": "6.0.0", "description": "" }