{ "description": "Registry Key Indicator Layout", "edit": { "sections": [ { "description": "", "fields": [ { "fieldId": "indicator_value", "isVisible": true }, { "fieldId": "indicator_indicatortype", "isVisible": true }, { "fieldId": "indicator_score", "isVisible": true }, { "fieldId": "indicator_expiration", "isVisible": true }, { "fieldId": "indicator_comment", "isVisible": true }, { "fieldId": "indicator_investigationids", "isVisible": true } ], "isVisible": true, "name": "Basic Information", "query": null, "queryType": "", "readOnly": false, "type": "basicInformationSection" }, { "description": "", "fields": [ { "fieldId": "indicator_communitynotes", "isVisible": true }, { "fieldId": "indicator_description", "isVisible": true }, { "fieldId": "indicator_stixid", "isVisible": true }, { "fieldId": "indicator_tags", "isVisible": true }, { "fieldId": "indicator_trafficlightprotocol", "isVisible": true } ], "isVisible": true, "name": "Custom fields - core", "query": null, "queryType": "", "readOnly": false, "type": "" }, { "description": "", "fields": [ { "fieldId": "indicator_keyvalue", "isVisible": true } ], "isVisible": true, "name": "Custom fields - unique", "query": null, "queryType": "", "readOnly": false, "type": "" } ] }, "group": "indicator", "id": "registryKey", "indicatorsDetails": { "tabs": [ { "id": "main", "name": "Summary", "sections": [ { "displayType": "ROW", "h": 4, "hideName": false, "i": "main-9fa550a0-a2e6-11e9-a74b-a79deb2f5d2a", "isVisible": true, "items": [ { "endCol": 2, "fieldId": "timestamp", "height": 22, "id": "55386050-b900-11ed-bb45-976e784dad12", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "modified", "height": 22, "id": "59f15480-b900-11ed-bb45-976e784dad12", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "stixid", "height": 22, "id": "64c516d0-b900-11ed-bb45-976e784dad12", "index": 2, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "description", "height": 44, "id": "98a879b0-b900-11ed-bb45-976e784dad12", "index": 3, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "trafficlightprotocol", "height": 22, "id": "2faf3d30-b6de-11ea-824d-5b821ee9d562", "index": 4, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "tags", "height": 22, "id": "083ac1b0-4e75-11ea-8bf6-67db400d7da5", "index": 5, "listId": "main-ffe4f7b0-4e74-11ea-8bf6-67db400d7da5", "sectionItemType": "field", "startCol": 0 }, { "args": { "field": { "simple": "tags" } }, "buttonClass": "secondary", "dropEffect": "move", "endCol": 1, "fieldId": "", "height": 44, "id": "b6cab200-9db5-11ea-a17b-1d06fd239c52", "index": 6, "listId": "main-329c6710-a640-11ea-9a93-611e57d9f959", "name": "Add tags", "scriptId": "Builtin|||appendIndicatorField", "sectionItemType": "button", "startCol": 0 }, { "args": { "field": { "simple": "tags" } }, "buttonClass": "secondary", "dropEffect": "move", "endCol": 2, "fieldId": "", "height": 44, "id": "f4d78d70-9db5-11ea-a17b-1d06fd239c52", "index": 6, "listId": "main-ffe4f7b0-4e74-11ea-8bf6-67db400d7da5", "name": "Remove tags", "scriptId": "Builtin|||removeIndicatorField", "sectionItemType": "button", "startCol": 1 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Basic Information", "static": false, "w": 1, "x": 1, "y": 0 }, { "columns": [ { "displayed": true, "isDefault": false, "key": "id", "width": 110 }, { "displayed": true, "isDefault": true, "key": "name", "width": 120 }, { "displayed": true, "isDefault": false, "key": "severity", "width": 80 }, { "displayed": true, "isDefault": true, "key": "type", "width": 104 }, { "displayed": true, "isDefault": true, "key": "status", "width": 80 }, { "displayed": true, "isDefault": false, "key": "owner", "width": 160 } ], "displayType": "ROW", "h": 2, "hideName": false, "i": "main-374a4120-ac5d-11e9-82f1-b168a5ac3417", "isVisible": true, "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Related Incidents", "readOnly": true, "static": false, "type": "relatedIncidents", "w": 2, "x": 0, "y": 7 }, { "h": 1, "hideName": true, "i": "main-8f8aedf0-3d56-11ea-9dff-c57e8949d2f9", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Expiration Status", "static": false, "type": "expirationStatus", "w": 1, "x": 0, "y": 0 }, { "h": 1, "hideName": true, "i": "main-981b9e10-3d56-11ea-9dff-c57e8949d2f9", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Reputation Status", "static": false, "type": "reputationStatus", "w": 1, "x": 0, "y": 1 }, { "h": 4, "i": "main-174e7bd0-3d57-11ea-9dff-c57e8949d2f9", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Comments", "static": false, "type": "comments", "w": 1, "x": 2, "y": 5 }, { "displayType": "ROW", "h": 1, "hideName": false, "i": "main-fafa73b0-a9af-11ea-a4b1-a5bbd1788c5a", "items": [ { "args": {}, "endCol": 1, "fieldId": "", "height": 44, "id": "fe326d30-a9af-11ea-a4b1-a5bbd1788c5a", "index": 0, "name": "Enrich indicator", "scriptId": "Builtin|||enrichIndicators", "sectionItemType": "button", "startCol": 0 }, { "args": {}, "dropEffect": "move", "endCol": 2, "fieldId": "", "height": 44, "id": "64422e90-bf71-11ea-b085-3f354e53d3e6", "index": 0, "listId": "main-fafa73b0-a9af-11ea-a4b1-a5bbd1788c5a", "name": "Expire indicator", "scriptId": "Builtin|||expireIndicators", "sectionItemType": "button", "startCol": 1 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Actions", "static": false, "w": 1, "x": 2, "y": 0 }, { "h": 2, "i": "main-fa9ae5a0-b8ff-11ed-bb45-976e784dad12", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Timeline", "static": false, "type": "indicatorTimeline", "w": 1, "x": 2, "y": 1 }, { "h": 2, "i": "main-4e01e900-b900-11ed-bb45-976e784dad12", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Verdict", "static": false, "type": "reputationSources", "w": 1, "x": 0, "y": 2 }, { "h": 3, "i": "main-a7ac2a10-b900-11ed-bb45-976e784dad12", "items": [], "maxW": 3, "minH": 1, "moved": false, "name": "Relationships", "static": false, "type": "relationshipsTable", "w": 2, "x": 0, "y": 4 }, { "columns": [ { "displayName": "Name", "fieldCalcScript": "", "isDefault": true, "isReadOnly": false, "key": "name", "orgType": "shortText", "required": false, "script": "", "selectValues": null, "type": "shortText", "width": 176 }, { "displayName": "Type", "fieldCalcScript": "", "isDefault": true, "isReadOnly": false, "key": "type", "orgType": "singleSelect", "required": false, "script": "", "selectValues": [ "REG_NONE", "REG_SZ", "REG_EXPAND_SZ", "REG_BINARY", "REG_DWORD", "REG_DWORD_LITTLE_ENDIAN", "REG_DWORD_BIG_ENDIAN", "REG_LINK", "REG_MULTI_SZ", "REG_RESOURCE_LIST", "REG_FULL_RESOURCE_DESCRIPTOR", "0REG_RESOURCE_REQUIREMENTS_LIST", "1REG_QWORD", "REG_QWORD_LITTLE_ENDIAN" ], "type": "singleSelect", "width": 107 }, { "displayName": "Data", "fieldCalcScript": "", "isDefault": true, "isReadOnly": false, "key": "data", "orgType": "shortText", "required": false, "script": "", "selectValues": null, "type": "shortText", "width": 150 } ], "displayType": "ROW", "h": 2, "hideItemTitleOnlyOne": true, "hideName": false, "i": "main-b8e9ebf0-b900-11ed-bb45-976e784dad12", "items": [ { "endCol": 2, "fieldId": "keyvalue", "height": 106, "id": "beed6180-b900-11ed-bb45-976e784dad12", "index": 0, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Values", "static": false, "w": 1, "x": 2, "y": 3 } ], "type": "custom" }, { "hidden": false, "id": "kopixekjqw", "name": "Additional Details", "sections": [ { "displayType": "ROW", "h": 4, "i": "kopixekjqw-27fffce0-beb4-11ea-b519-21bdfb6f5a43", "items": null, "maxW": 3, "minH": 1, "moved": false, "name": "Custom Details", "static": false, "type": "customDetails", "w": 3, "x": 0, "y": 4 }, { "displayType": "ROW", "h": 4, "hideName": false, "i": "kopixekjqw-0d4c0da0-b900-11ed-bb45-976e784dad12", "items": [ { "endCol": 6, "fieldId": "communitynotes", "height": 106, "id": "1d76fff0-b900-11ed-bb45-976e784dad12", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 6, "fieldId": "publications", "height": 106, "id": "2bb3dde0-b900-11ed-bb45-976e784dad12", "index": 1, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "moved": false, "name": "Additional Details", "static": false, "w": 3, "x": 0, "y": 0 } ], "type": "custom" }, { "id": "canvas", "name": "Canvas", "type": "canvas", "hidden": false } ] }, "indicatorsQuickView": { "tabs": [ { "id": "indicator-quick-view-info", "name": "Info", "sections": [ { "h": 1, "hideName": true, "i": "indicator-quick-view-info-expirationStatus", "moved": false, "name": "Expiration Status", "static": false, "type": "expirationStatus", "w": 1, "x": 0, "y": 0 }, { "h": 2, "i": "indicator-quick-view-info-reputationSources", "moved": false, "name": "Verdict", "static": false, "type": "reputationSources", "w": 1, "x": 0, "y": 1 }, { "displayType": "ROW", "h": 1, "hideItemTitleOnlyOne": true, "i": "indicator-quick-view-info-tags-section", "items": [ { "endCol": 2, "fieldId": "tags", "height": 53, "id": "indicator-quick-view-info-tags-field", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "trafficlightprotocol", "height": 22, "id": "05c96c70-cccd-11ea-937a-6f8841d9fed1", "index": 1, "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Tags and TLP", "static": false, "w": 1, "x": 0, "y": 3 }, { "h": 2, "i": "indicator-quick-view-info-relatedIncidents", "moved": false, "name": "Related Incidents", "static": false, "type": "relatedIncidents", "w": 1, "x": 0, "y": 6 }, { "h": 2, "i": "indicator-quick-view-info-comments", "moved": false, "name": "Comments", "static": false, "type": "comments", "w": 1, "x": 0, "y": 8 }, { "displayType": "ROW", "h": 2, "hideName": false, "i": "indicator-quick-view-info-e3154c80-cccc-11ea-937a-6f8841d9fed1", "items": [ { "endCol": 2, "fieldId": "indicatortype", "height": 22, "id": "fcfaf000-cccc-11ea-937a-6f8841d9fed1", "index": 0, "sectionItemType": "field", "startCol": 0 }, { "endCol": 2, "fieldId": "source", "height": 22, "id": "f90fac10-cccc-11ea-937a-6f8841d9fed1", "index": 1, "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "name", "height": 22, "id": "f5930870-cccc-11ea-937a-6f8841d9fed1", "index": 2, "listId": "indicator-quick-view-info-e3154c80-cccc-11ea-937a-6f8841d9fed1", "sectionItemType": "field", "startCol": 0 }, { "dropEffect": "move", "endCol": 2, "fieldId": "path", "height": 22, "id": "f1e801d0-cccc-11ea-937a-6f8841d9fed1", "index": 3, "listId": "indicator-quick-view-info-e3154c80-cccc-11ea-937a-6f8841d9fed1", "sectionItemType": "field", "startCol": 0 } ], "maxW": 3, "minH": 1, "minW": 1, "moved": false, "name": "Registry Key details", "static": false, "w": 1, "x": 0, "y": 4 } ], "type": "custom" } ] }, "name": "Registry Key Indicator", "system": false, "version": -1, "fromVersion": "6.10.0", "supportedModules": [ "agentix", "xsiam" ] }