NGFW Scanning Alerts

This trigger is responsible for handling alerts involving scanning activity identified by our NGFW

Core

Details

ID73545719a1bdeba6ba91f6a16044c021
Runs PlaybookNGFW Scan
Suggestion ReasonRecommended for NGFW scan related alerts

Alert conditions (all must match)

Field Operator Value
alert_name CONTAINS scan
alert_source EQ FW

Source

Trigger_-_NGFW_Scan.json
Download History Raw 
{
  "trigger_id": "73545719a1bdeba6ba91f6a16044c021",
  "playbook_id": "NGFW Scan",
  "suggestion_reason": "Recommended for NGFW scan related alerts",
  "description": "This trigger is responsible for handling alerts involving scanning activity identified by our NGFW",
  "trigger_name": "NGFW Scanning Alerts",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "SEARCH_FIELD": "alert_name",
          "SEARCH_TYPE": "CONTAINS",
          "SEARCH_VALUE": "scan"
        },
        {
          "SEARCH_FIELD": "alert_source",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "FW"
        }
      ]
    }
  },
  "supportedModules": [
    "xsiam",
    "agentix"
  ]
}