Indicators in Related Incidents

Details

ID	`9a7aeb89-f57e-4caa-8148-85b6ca22cbd5`
Widget Type	table
Data Type	indicators
From Version	6.2.0
Predefined	Yes

Query

incident.id:* and expirationStatus:active and (verdict:Malicious or verdict:Suspicious or verdict:Unknown)

Source

widget-Indicators_in_Related_Incidents.json

Download History Raw

{
    "dataType": "indicators",
    "dateRange": {
        "fromDate": "0001-01-01T00:00:00Z",
        "fromDateLicense": "0001-01-01T00:00:00Z",
        "period": {
            "by": "",
            "byFrom": "days",
            "byTo": "",
            "field": "",
            "fromValue": 30,
            "toValue": null
        },
        "toDate": "0001-01-01T00:00:00Z"
    },
    "id": "9a7aeb89-f57e-4caa-8148-85b6ca22cbd5",
    "isPredefined": true,
    "name": "Indicators in Related Incidents",
    "params": {
        "tableColumns": [
            {
                "displayed": true,
                "isDefault": true,
                "key": "indicator_type",
                "width": 120
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "value",
                "width": 300
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "relatedIncCount",
                "width": 150
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "score",
                "width": 120
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "sourceBrands",
                "width": 175
            }
        ]
    },
    "query": "incident.id:* and expirationStatus:active and (verdict:Malicious or verdict:Suspicious or verdict:Unknown)",
    "size": 10,
    "sort": [
        {
            "asc": false,
            "field": "relatedIncCount",
            "fieldType": ""
        }
    ],
    "version": -1,
    "widgetType": "table",
    "fromVersion": "6.2.0",
    "description": ""
}