XCloud Cryptojacking

This trigger is responsible for handling Cryptojacking alerts

Details

ID	`b88deee0ef3c1325b7b3f583d2550bc0`
Runs Playbook	XCloud Cryptojacking
Suggestion Reason	Recommended for Cryptojacking alerts

Alert conditions (all must match)

Field	Operator	Value
`alert_name`	CONTAINS	Unusual allocation of multiple cloud compute resources

Source

Trigger_-_XCloud_Cryptojacking.json

Download History Raw

{
  "trigger_id": "b88deee0ef3c1325b7b3f583d2550bc0",
  "playbook_id": "XCloud Cryptomining",
  "suggestion_reason": "Recommended for Cryptojacking alerts",
  "description": "This trigger is responsible for handling Cryptojacking alerts",
  "trigger_name": "XCloud Cryptojacking",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "SEARCH_FIELD": "alert_name",
          "SEARCH_TYPE": "CONTAINS",
          "SEARCH_VALUE": "Unusual allocation of multiple cloud compute resources"
        }
      ]
    }
  },
  "supportedModules": [
    "xsiam"
  ]
}