{ "description": "Malware Indicator Layout", "edit": { "sections": [ { "description": "", "fields": [ { "fieldId": "indicator_value", "isVisible": true }, { "fieldId": "indicator_indicatortype", "isVisible": true }, { "fieldId": "indicator_score", "isVisible": true }, { "fieldId": "indicator_expiration", "isVisible": true }, { "fieldId": "indicator_comment", "isVisible": true }, { "fieldId": "indicator_investigationids", "isVisible": true } ], "isVisible": true, "name": "Basic Information", "query": null, "queryType": "", "readOnly": false, "type": "basicInformationSection" }, { "description": "", "fields": [ { "fieldId": "indicator_communitynotes", "isVisible": true }, { "fieldId": "indicator_description", "isVisible": true }, { "fieldId": "indicator_stixid", "isVisible": true }, { "fieldId": "indicator_tags", "isVisible": true }, { "fieldId": "indicator_trafficlightprotocol", "isVisible": true } ], "isVisible": true, "name": "Custom fields - core", "query": null, "queryType": "", "readOnly": false, "type": "" }, { "description": "", "fields": [ { "fieldId": "indicator_aliases", "isVisible": true }, { "fieldId": "indicator_ismalwarefamily", "isVisible": true }, { "fieldId": "indicator_malwaretypes", "isVisible": true }, { "fieldId": "indicator_operatingsystemrefs", "isVisible": true } ], "isVisible": true, "name": "Custom fields - unique", "query": null, "queryType": "", "readOnly": false, "type": "" } ] }, "group": "indicator", "id": "STIX Malware", "indicatorsDetails": { "tabs": [ { "hidden": false, "id": "egsrf6ixwu", "name": "Summary", "sections": [ { "displayType": "ROW", "h": 3, "hideName": false, "i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-872f6040-7e82-11ec-ac42-5945e7ba8f6d", "items": [ { "endCol": 2, "fieldId": "timestamp", "height": 22, "id": "41120bc0-7e83-11ec-ac42-5945e7ba8f6d", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "modified", "height": 22, "id": "50036ca0-7e83-11ec-ac42-5945e7ba8f6d", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "stixid", "height": 22, "id": "597e7cc0-7e83-11ec-ac42-5945e7ba8f6d", "index": 2, "listId": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-872f6040-7e82-11ec-ac42-5945e7ba8f6d", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "aliases", "height": 22, "id": "470f3fc0-7e83-11ec-ac42-5945e7ba8f6d", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "ismalwarefamily", "height": 22, "id": "645b8de0-7e83-11ec-ac42-5945e7ba8f6d", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "malwaretypes", "height": 22, "id": "6c3a2c10-7e83-11ec-ac42-5945e7ba8f6d", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "capabilities", "height": 22, "id": "8b3f26b0-7e83-11ec-ac42-5945e7ba8f6d", "index": 6, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "operatingsystemrefs", "height": 22, "id": "7831fc00-7e83-11ec-ac42-5945e7ba8f6d", "index": 7, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "implementationlanguages", "height": 22, "id": "826c1660-7e83-11ec-ac42-5945e7ba8f6d", "index": 8, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "architecture", "height": 22, "id": "8786b290-7e83-11ec-ac42-5945e7ba8f6d", "index": 9, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "trafficlightprotocol", "height": 22, "id": "1a4c65c0-7e84-11ec-ac42-5945e7ba8f6d", "index": 11, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "tags", "height": 22, "id": "97d4e450-7e83-11ec-ac42-5945e7ba8f6d", "index": 12, "sectionItemType": "field", "startCol": 0 }, { "args": { "field": { "simple": "tags" } }, "endCol": 1, "fieldId": "", "height": 44, "id": "9bda3ff0-7e83-11ec-ac42-5945e7ba8f6d", "index": 12, "name": "Add tag", "scriptId": "Builtin|||appendIndicatorField", "sectionItemType": "button", "startCol": 0 }, { "args": {}, "buttonClass": "secondary", "endCol": 2, "fieldId": "", "height": 44, "id": "48587360-350c-11ee-9da7-693d42899c2b", "index": 13, "name": "Execute Malware hunt", "scriptId": "HuntingFromIndicatorLayout", "sectionItemType": "button", "startCol": 0 }, { "args": { "field": { "simple": "tags" } }, "dropEffect": "move", "endCol": 2, "fieldId": "", "height": 44, "id": "9e9e9010-7e83-11ec-ac42-5945e7ba8f6d", "index": 12, "listId": "uh0izo8oxy-872f6040-7e82-11ec-ac42-5945e7ba8f6d", "name": "Remove tag", "scriptId": "Builtin|||removeIndicatorField", "sectionItemType": "button", "startCol": 1 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Malware Details", "static": false, "w": 1, "x": 1, "y": 0 }, { "displayType": "ROW", "h": 3, "hideItemTitleOnlyOne": true, "hideName": false, "i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-8802b5d0-7e82-11ec-ac42-5945e7ba8f6d", "items": [ { "endCol": 2, "fieldId": "description", "height": 106, "id": "6ecf2770-7e86-11ec-ac42-5945e7ba8f6d", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Description", "static": false, "w": 1, "x": 0, "y": 0 }, { "h": 3, "i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-8b63bb20-7e82-11ec-ac42-5945e7ba8f6d", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Related Incidents", "static": false, "type": "relatedIncidents", "w": 3, "x": 0, "y": 6 }, { "h": 3, "i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-8e2dfeb0-7e82-11ec-ac42-5945e7ba8f6d", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Relationships", "static": false, "type": "relationshipsTable", "w": 2, "x": 0, "y": 3 }, { "h": 3, "i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-983b63c0-7e82-11ec-ac42-5945e7ba8f6d", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Comments", "static": false, "type": "comments", "w": 1, "x": 2, "y": 3 }, { "h": 3, "i": "egsrf6ixwu-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9c718e36-f483-4683-80e4-dd613c2d7fa1-uh0izo8oxy-9aa55ee0-7e82-11ec-ac42-5945e7ba8f6d", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Timeline", "static": false, "type": "indicatorTimeline", "w": 1, "x": 2, "y": 0 } ], "type": "custom" }, { "hidden": false, "id": "yu4gnpwkgq", "name": "Publications and Notes", "sections": [ { "displayType": "ROW", "h": 8, "hideItemTitleOnlyOne": false, "hideName": true, "i": "yu4gnpwkgq-pcs9inogeh-b35b6cf0-7e8b-11ec-897f-8beae8d0977c", "items": [ { "endCol": 6, "fieldId": "publications", "height": 106, "id": "be49bc20-7e8b-11ec-897f-8beae8d0977c", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 6, "fieldId": "communitynotes", "height": 106, "id": "e8665fe0-7e8b-11ec-897f-8beae8d0977c", "index": 1, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Publications", "static": false, "w": 3, "x": 0, "y": 0 } ], "type": "custom" }, { "id": "canvas", "name": "Canvas", "type": "canvas", "hidden": false } ] }, "indicatorsQuickView": { "tabs": [ { "hidden": false, "id": "fgs8qszuj0", "name": "Info", "sections": [ { "displayType": "ROW", "h": 3, "hideName": false, "i": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc", "items": [ { "endCol": 2, "fieldId": "timestamp", "height": 22, "id": "5db9c2a0-8a4e-11ec-a1ef-6369524b39c7", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "modified", "height": 22, "id": "79b71aa0-b30a-11eb-941c-e725acf1fbbc", "index": 1, "listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc", "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "stixid", "height": 22, "id": "5d54b750-b30a-11eb-941c-e725acf1fbbc", "index": 2, "listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc", "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "aliases", "height": 22, "id": "637bba70-b30a-11eb-941c-e725acf1fbbc", "index": 3, "listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "ismalwarefamily", "height": 22, "id": "5f1f6530-b30a-11eb-941c-e725acf1fbbc", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "malwaretypes", "height": 22, "id": "5fe09250-b30a-11eb-941c-e725acf1fbbc", "index": 5, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "capabilities", "height": 22, "id": "73fbf8b0-b30a-11eb-941c-e725acf1fbbc", "index": 6, "listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc", "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "operatingsystemrefs", "height": 22, "id": "6dc209d0-b30a-11eb-941c-e725acf1fbbc", "index": 7, "listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "implementationlanguages", "height": 22, "id": "76806190-8a4e-11ec-a1ef-6369524b39c7", "index": 8, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "architecture", "height": 22, "id": "6f6fb9d0-b30a-11eb-941c-e725acf1fbbc", "index": 9, "listId": "fgs8qszuj0-536e8950-b30a-11eb-941c-e725acf1fbbc", "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "trafficlightprotocol", "height": 22, "id": "97fae820-b30a-11eb-941c-e725acf1fbbc", "index": 10, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "tags", "height": 22, "id": "9659e250-b30a-11eb-941c-e725acf1fbbc", "index": 11, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Malware Details", "static": false, "w": 1, "x": 0, "y": 2 }, { "displayType": "ROW", "h": 2, "hideItemTitleOnlyOne": true, "hideName": false, "i": "fgs8qszuj0-8653dd20-b30a-11eb-941c-e725acf1fbbc", "items": [ { "endCol": 2, "fieldId": "description", "height": 22, "id": "8d209620-b30a-11eb-941c-e725acf1fbbc", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Malware Description", "static": false, "w": 1, "x": 0, "y": 0 }, { "h": 2, "i": "fgs8qszuj0-9bd14480-b30a-11eb-941c-e725acf1fbbc", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Related Incidents", "static": false, "type": "relatedIncidents", "w": 1, "x": 0, "y": 5 }, { "h": 2, "i": "fgs8qszuj0-9e1a2310-b30a-11eb-941c-e725acf1fbbc", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Comments", "static": false, "type": "comments", "w": 1, "x": 0, "y": 7 } ], "type": "custom" }, { "hidden": false, "id": "se889tdxik", "name": "Relationships", "sections": [ { "h": 8, "i": "se889tdxik-09585430-979f-11eb-a8d1-098e2c945225", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Relationships", "static": false, "type": "relationshipsTable", "w": 1, "x": 0, "y": 0 } ], "type": "custom" } ] }, "name": "Malware Indicator", "system": false, "version": -1, "fromVersion": "6.10.0", "marketplaces": ["xsoar", "xsoar_saas", "xsoar_on_prem"] }