{
  "trigger_id": "c8a93aad286ff93763120c0e47696f82",
  "playbook_id": "Prisma Cloud - Network API and Anomaly Incidents",
  "suggestion_reason": "Recommended for Prisma Cloud Network, API and Anomaly alerts",
  "description": "This trigger is responsible for handling  Prisma Cloud Network, API and Anomaly alerts",
  "trigger_name": "Prisma Cloud Network API and Anomaly alerts",
  "fromVersion": "6.10.0",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "OR": [
            {
              "SEARCH_FIELD": "policy_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "network"
            },
            {
              "SEARCH_FIELD": "policy_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "api"
            },
            {
              "SEARCH_FIELD": "policy_type",
              "SEARCH_TYPE": "EQ",
              "SEARCH_VALUE": "anomaly"
            }
          ]
        },
        {
          "SEARCH_FIELD": "category",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "Incident"
        }
      ]
    }
  },
  "supportedModules": [
    "xsiam",
    "edr",
    "cloud",
    "cloud_runtime_security"
  ]
}