WildFire and Wildfire Post detection

This trigger is responsible for handling WildFire Malware alerts

Core

Details

ID478f3161aac3290efb445b0841eb1366
Runs PlaybookWildFire Malware
Suggestion ReasonRecommended for alerts triggered by WildFire

Alert conditions (all must match)

Field Operator Value
alert_name EQ WildFire Malware
{
  "trigger_id": "478f3161aac3290efb445b0841eb1366",
  "playbook_id": "WildFire Malware",
  "suggestion_reason": "Recommended for alerts triggered by WildFire",
  "description": "This trigger is responsible for handling WildFire Malware alerts",
  "trigger_name": "WildFire and Wildfire Post detection",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "SEARCH_FIELD": "alert_name",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "WildFire Malware"
        }
      ]
    }
  },
  "supportedModules": [
    "xsiam",
    "agentix"
  ]
}