Top 10 File Indicators in Related Incidents

Details

ID	`ba01f493-c293-4da1-8ddf-ebba4d922f50`
Widget Type	table
Data Type	indicators
From Version	6.2.0
Predefined	Yes

Query

type:File and (verdict:Malicious or verdict:Suspicious) and incident.id:*

Source

widget-Top_10_File_Indicators_in_Related_Incidents.json

Download History Raw

{
    "dataType": "indicators",
    "dateRange": {
        "fromDate": "0001-01-01T00:00:00Z",
        "fromDateLicense": "0001-01-01T00:00:00Z",
        "period": {
            "by": "",
            "byFrom": "days",
            "byTo": "",
            "field": "",
            "fromValue": 180,
            "toValue": null
        },
        "toDate": "0001-01-01T00:00:00Z"
    },
    "id": "ba01f493-c293-4da1-8ddf-ebba4d922f50",
    "isPredefined": true,
    "name": "Top 10 File Indicators in Related Incidents",
    "params": {
        "enablePagination": true,
        "tableColumns": [
            {
                "displayed": true,
                "isDefault": true,
                "key": "indicator_type",
                "width": 120
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "value",
                "width": 300
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "score",
                "width": 120
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "relatedIncCount",
                "width": 150
            },
            {
                "displayed": true,
                "isDefault": true,
                "key": "sourceInstances",
                "width": 175
            }
        ]
    },
    "query": "type:File and (verdict:Malicious or verdict:Suspicious) and incident.id:*",
    "size": 10,
    "sort": [
        {
            "asc": false,
            "field": "relatedIncCount",
            "fieldType": ""
        }
    ],
    "version": -1,
    "widgetType": "table",
    "fromVersion": "6.2.0",
    "description": ""
}