{ "detailsV2": { "tabs": [ { "id": "summary", "name": "Legacy Summary", "type": "summary" }, { "id": "caseinfoid", "name": "Incident Info", "sections": [ { "displayType": "ROW", "h": 2, "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "owner", "height": 22, "id": "incident-owner-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotsource", "height": 22, "id": "incident-source-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "type", "height": 22, "id": "incident-type-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourcebrand", "height": 22, "id": "incident-sourceBrand-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "sourceinstance", "height": 22, "id": "incident-sourceInstance-field", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "severity", "height": 22, "id": "incident-severity-field", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "playbookid", "height": 22, "id": "incident-playbookId-field", "index": 5, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Case Details", "static": false, "w": 1, "x": 0, "y": 0 }, { "displayType": "CARD", "h": 2, "i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289", "items": [ { "endCol": 1, "fieldId": "occurred", "height": 22, "id": "incident-occurred-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 1, "fieldId": "dbotmodified", "height": 22, "id": "incident-modified-field", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotduedate", "height": 22, "id": "incident-dueDate-field", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "dbotcreated", "height": 22, "id": "incident-created-field", "index": 0, "sectionItemType": "field", "startCol": 1 }, { "endCol": 2, "fieldId": "dbotclosed", "height": 22, "id": "incident-closed-field", "index": 1, "sectionItemType": "field", "startCol": 1 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Timeline Information", "static": false, "w": 1, "x": 0, "y": 6 }, { "displayType": "CARD", "h": 3, "hideName": false, "i": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05", "items": [ { "dropEffect": "move", "endCol": 2, "fieldId": "rubrikpolarisobjectname", "height": 53, "id": "fca80bf0-6fd9-11eb-befe-85443460d735", "index": 0, "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarisobjectid", "height": 53, "id": "0445a980-6fda-11eb-befe-85443460d735", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolariscdmclustername", "height": 53, "id": "056ff8b0-6fda-11eb-befe-85443460d735", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarisobjecttype", "height": 53, "id": "181f24e0-6fda-11eb-befe-85443460d735", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikobjectlocation", "height": 53, "id": "a2c14a60-85b4-11f1-bafa-f3703f9851d4", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarisactivityseriesid", "height": 53, "id": "3d547210-f9a1-11ef-98dc-ef869f4670b6", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "rubrikpolarislastactivitystatus", "height": 53, "id": "55d3ced0-f9a1-11ef-98dc-ef869f4670b6", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 4, "fieldId": "incidentlink", "height": 53, "id": "f84a9ec0-7f4b-11f0-9017-992963622ec4", "index": 0, "sectionItemType": "field", "startCol": 2, "dropEffect": "move", "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05" }, { "endCol": 4, "fieldId": "rubrikpolarisstarttime", "height": 53, "id": "f8d44410-37bd-11ec-8878-41b30c8936ff", "index": 1, "sectionItemType": "field", "startCol": 2, "dropEffect": "move", "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05" }, { "endCol": 4, "fieldId": "rubrikcdmclusterid", "height": 53, "id": "62032d90-a44b-11eb-82ca-4d054531f5f7", "index": 2, "sectionItemType": "field", "startCol": 2, "dropEffect": "move", "listId": "caseinfoid-2ec41170-454a-11eb-ba5e-05d9566e6d05" }, { "endCol": 4, "fieldId": "rubrikcdmclustername", "height": 53, "id": "f12222d0-a4ee-11eb-9bb3-6df13f2ef3ea", "index": 3, "sectionItemType": "field", "startCol": 2 }, { "endCol": 4, "fieldId": "rubrikcdmclusterlocation", "height": 53, "id": "6658a500-a44b-11eb-82ca-4d054531f5f7", "index": 4, "sectionItemType": "field", "startCol": 2 }, { "endCol": 4, "fieldId": "rubrikpolarisclusterlocationpath", "height": 53, "id": "07b02120-37be-11ec-8878-41b30c8936ff", "index": 5, "sectionItemType": "field", "startCol": 2 }, { "endCol": 4, "fieldId": "rubrikpolarisactivitytype", "height": 53, "id": "412c7c20-f9a1-11ef-98dc-ef869f4670b6", "index": 6, "sectionItemType": "field", "startCol": 2 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Rubrik Basic Information", "static": false, "w": 2, "x": 1, "y": 0 }, { "h": 1, "i": "caseinfoid-fafdf7c0-a255-11eb-86d3-ed6ff0cf2050", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Data Classification Hits", "query": "RubrikSonarTotalHits", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 4 }, { "h": 1, "i": "caseinfoid-2f160900-a6a5-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "CDM Cluster Status", "query": "RubrikCDMClusterConnectionState", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 2 }, { "h": 1, "i": "caseinfoid-e449ae90-a6a9-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Files Added", "query": "RubrikRadarFilesAdded", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 1, "y": 3 }, { "h": 1, "i": "caseinfoid-f0b3c850-a6a9-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Files Modified", "query": "RubrikRadarFilesModified", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 2, "y": 3 }, { "h": 1, "i": "caseinfoid-fb65d1d0-a6a9-11eb-aa9a-55967479e045", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Files Removed", "query": "RubrikRadarFilesDeleted", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 1, "y": 4 }, { "h": 3, "i": "caseinfoid-f98cd270-a6b1-11eb-bada-87dc9a8c0b9b", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Work Plan", "static": false, "type": "workplan", "w": 2, "x": 1, "y": 7 }, { "h": 2, "i": "caseinfoid-0b443120-a6b2-11eb-bada-87dc9a8c0b9b", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Linked Incidents", "static": false, "type": "linkedIncidents", "w": 1, "x": 0, "y": 12 }, { "h": 1, "i": "caseinfoid-f72ff2b0-3f46-11ef-b346-cdbc4d18c742", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Sensitive Files with Open Access Permissions", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 3, "description": "", "query": "RubrikSonarOpenAccessFileHits", "queryType": "script" }, { "description": "", "h": 1, "i": "caseinfoid-1738c8c0-3f47-11ef-b346-cdbc4d18c742", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Total Number of Files with Sensitive Data", "query": "RubrikSonarFileHits", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 4 }, { "h": 2, "i": "caseinfoid-aa68ec80-5930-11ef-84f9-f1d4aee2db17", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Indicators", "query": "", "queryType": "input", "static": false, "type": "indicators", "w": 2, "x": 1, "y": 12 }, { "h": 2, "i": "caseinfoid-f1b18520-5930-11ef-84f9-f1d4aee2db17", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Notes", "static": false, "type": "notes", "w": 1, "x": 0, "y": 8 }, { "h": 2, "i": "caseinfoid-b692ce70-c809-11ef-b02b-91540fae8b93", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Incident Files", "query": { "categories": [ "attachments" ], "lastId": "", "pageSize": 100, "tags": [], "users": [] }, "queryType": "warRoomFilter", "static": false, "type": "invTimeline", "w": 2, "x": 1, "y": 10 }, { "displayType": "ROW", "h": 2, "hideName": false, "i": "caseinfoid-88875ed0-fa52-11ef-bb2f-17b30e867719", "items": [ { "endCol": 2, "fieldId": "dbotclosed", "height": 22, "id": "b8ff5c20-fa52-11ef-bb2f-17b30e867719", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closereason", "height": 22, "id": "bb136f10-fa52-11ef-bb2f-17b30e867719", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "closenotes", "height": 22, "id": "bc4e3900-fa52-11ef-bb2f-17b30e867719", "index": 2, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Closing Information", "static": false, "w": 1, "x": 0, "y": 10 }, { "displayType": "ROW", "h": 2, "hideItemTitleOnlyOne": true, "hideName": false, "i": "caseinfoid-90593b6f-08f1-44af-a8de-2b5fc17d0f2e", "items": [ { "endCol": 4, "fieldId": "rubriksuspiciousfilelist", "height": 106, "id": "ab09e4c8-fab2-4765-baf9-d74fecf84373", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Suspicious File List", "static": false, "w": 2, "x": 1, "y": 5 }, { "description": "", "h": 1, "i": "caseinfoid-4c774e30-a40e-11f0-add7-f941fa334f23", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Total Number of Suspicious Files", "query": "RubrikSuspiciousFileCount", "queryType": "script", "static": false, "type": "dynamic", "w": 1, "x": 0, "y": 5 } ], "type": "custom" }, { "id": "warRoom", "name": "War Room", "type": "warRoom" }, { "hidden": false, "id": "rubrikPolaris", "name": "Rubrik Polaris", "sections": [ { "displayType": "ROW", "h": 3, "hideName": false, "i": "caseinfoid-rubrikPolaris-35620770-a14e-11eb-a966-5fbb5aa7e80a", "items": [ { "endCol": 6, "fieldId": "rubrikpolarisanalysispipeline", "height": 106, "id": "422e74f0-bf28-11eb-adf0-1dd6a5e74ad5", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Anomaly Detection Event Timeline", "static": false, "w": 3, "x": 0, "y": 0 }, { "h": 4, "i": "caseinfoid-rubrikPolaris-344948e0-9e37-11eb-ac95-f33fbce9c16e", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Data Classification", "query": "RubrikSonarSensitiveHits", "queryType": "script", "static": false, "type": "dynamic", "w": 3, "x": 0, "y": 3 } ], "type": "custom" }, { "id": "workPlan", "name": "Work Plan", "type": "workPlan" }, { "id": "evidenceBoard", "name": "Evidence Board", "type": "evidenceBoard" }, { "id": "relatedIncidents", "name": "Related Incidents", "type": "relatedIncidents" }, { "id": "canvas", "name": "Canvas", "type": "canvas" } ] }, "group": "incident", "id": "Rubrik Polaris Radar", "name": "Rubrik Polaris Radar", "system": false, "version": -1, "fromVersion": "6.0.0", "description": "", "marketplaces": [ "xsoar" ] }