Malicious/Suspicious Indicators in Incidents

Common Widgets line

Details

ID5139168e-f555-442c-84a6-ee98aac55c1e
Widget Typeline
Data Typeindicators
From Version6.2.0
PredefinedYes

Query

(verdict:Malicious or verdict:Suspicious) and incident.id:*

Source

widget-Malicious_Suspicious_Indicators_in_Incidents.json
Download History Raw 
{
    "dataType": "indicators",
    "dateRange": {
        "fromDate": "0001-01-01T00:00:00Z",
        "fromDateLicense": "0001-01-01T00:00:00Z",
        "period": {
            "by": "",
            "byFrom": "days",
            "byTo": "",
            "field": "",
            "fromValue": 30,
            "toValue": null
        },
        "toDate": "0001-01-01T00:00:00Z"
    },
    "id": "5139168e-f555-442c-84a6-ee98aac55c1e",
    "isPredefined": true,
    "name": "Malicious/Suspicious Indicators in Incidents",
    "params": {
        "groupBy": [
            "firstSeen(d)",
            "score"
        ],
        "timeFrame": "days",
        "valuesFormat": "abbreviated"
    },
    "query": "(verdict:Malicious or verdict:Suspicious) and incident.id:*",
    "version": -1,
    "widgetType": "line",
    "fromVersion": "6.2.0",
    "description": ""
}