Bug fixes and enchancements in integration

Packs/CybleEventsV2/.pack-ignore

@@ -5,4 +5,6 @@ ignore=IN126
 ignore=RM108
 
 [known_words]
-cyble
+cyble
+CVV
+autorun

Packs/CybleEventsV2/Classifiers/classifier-CybleEventsv2-Incoming-Mapper.json

@@ -0,0 +1,98 @@
+{
+    "description": "",
+    "feed": false,
+    "id": "CybleEventsv2-Incoming-Mapper",
+    "mapping": {
+        "Cyble Vision Alert V2": {
+            "dontMapEventToLabels": false,
+            "internalMapping": {
+                "Additional Data": {
+                    "simple": "data_message"
+                },
+                "CybleEventsV2 Application": {
+                    "simple": "application"
+                },
+                "CybleEventsV2 CE Filename": {
+                    "simple": "filename"
+                },
+                "CybleEventsV2 CE Username": {
+                    "simple": "username"
+                },
+                "CybleEventsV2 Card Brand": {
+                    "simple": "card_brand"
+                },
+                "CybleEventsV2 Card CVV": {
+                    "simple": "card_cvv"
+                },
+                "CybleEventsV2 Card Expiry": {
+                    "simple": "card_expiry"
+                },
+                "CybleEventsV2 Card Level": {
+                    "simple": "card_level"
+                },
+                "CybleEventsV2 Card No.": {
+                    "simple": "card_no"
+                },
+                "CybleEventsV2 Card Type": {
+                    "simple": "card_type"
+                },
+                "Event ID": {
+                    "complex": {
+                        "filters": [],
+                        "root": "event_id",
+                        "transformers": []
+                    }
+                },
+                "Event Type": {
+                    "complex": {
+                        "filters": [],
+                        "root": "event_type",
+                        "transformers": []
+                    }
+                },
+                "CybleEventsV2 Keyword": {
+                    "simple": "keyword"
+                },
+                "CybleEventsV2 Password": {
+                    "simple": "password"
+                },
+                "CybleEventsV2 URL": {
+                    "simple": "url"
+                },
+                "dbotMirrorDirection": {
+                    "simple": ".='Out'"
+                },
+                "dbotMirrorId": {
+                    "simple": "event_id"
+                },
+                "dbotMirrorInstance": {
+                    "simple": "mirrorInstance"
+                },
+                "dbotMirrorTags": {
+                    "simple": ".=['severity','status']"
+                },
+                "name": {
+                    "complex": {
+                        "filters": [],
+                        "root": "name",
+                        "transformers": []
+                    }
+                },
+                "occurred": {
+                    "simple": "created_at"
+                },
+                "severity": {
+                    "complex": {
+                        "filters": [],
+                        "root": "severity",
+                        "transformers": []
+                    }
+                }
+            }
+        }
+    },
+    "name": "CybleEventsv2-Incoming-Mapper",
+    "type": "mapping-incoming",
+    "version": -1,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/Classifiers/classifier-CybleEventsv2-Outgoing-Mapper.json

@@ -0,0 +1,22 @@
+{
+    "description": "",
+    "feed": false,
+    "id": "CybleEventsv2-Outgoing-Mapper",
+    "mapping": {
+        "Cyble Vision Alert V2": {
+            "dontMapEventToLabels": true,
+            "internalMapping": {
+                "id": {
+                    "simple": "eventid"
+                },
+                "severity": {
+                    "simple": "severity"
+                }
+            }
+        }
+    },
+    "name": "CybleEventsv2-Outgoing-Mapper",
+    "type": "mapping-outgoing",
+    "version": -1,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/IncidentFields/incidentfield-Application.json

@@ -0,0 +1,32 @@
+{
+    "id": "incident_cybleeventsv2application",
+    "version": -1,
+    "modified": "2023-11-03T08:12:46.912634844Z",
+    "name": "CybleEventsV2 Application",
+    "ownerOnly": false,
+    "description": "Compromised endpoints: Application",
+    "cliName": "cybleeventsv2application",
+    "type": "shortText",
+    "closeForm": false,
+    "editForm": true,
+    "required": false,
+    "neverSetAsRequired": false,
+    "isReadOnly": false,
+    "useAsKpi": false,
+    "locked": false,
+    "system": false,
+    "content": true,
+    "group": 0,
+    "hidden": false,
+    "openEnded": false,
+    "associatedTypes": [
+        "Cyble Vision Alert V2"
+    ],
+    "associatedToAll": false,
+    "unmapped": false,
+    "unsearchable": true,
+    "caseInsensitive": false,
+    "sla": 0,
+    "threshold": 72,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/IncidentFields/incidentfield-CE_Filename.json

@@ -0,0 +1,32 @@
+{
+    "id": "incident_cybleeventsv2cefilename",
+    "version": -1,
+    "modified": "2023-11-03T08:28:55.182914432Z",
+    "name": "CybleEventsV2 CE Filename",
+    "ownerOnly": false,
+    "description": "Compromised endpoints: Filename",
+    "cliName": "cybleeventsv2cefilename",
+    "type": "shortText",
+    "closeForm": false,
+    "editForm": true,
+    "required": false,
+    "neverSetAsRequired": false,
+    "isReadOnly": false,
+    "useAsKpi": false,
+    "locked": false,
+    "system": false,
+    "content": true,
+    "group": 0,
+    "hidden": false,
+    "openEnded": false,
+    "associatedTypes": [
+        "Cyble Vision Alert V2"
+    ],
+    "associatedToAll": false,
+    "unmapped": false,
+    "unsearchable": true,
+    "caseInsensitive": false,
+    "sla": 0,
+    "threshold": 72,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/IncidentFields/incidentfield-CE_Username.json

@@ -0,0 +1,32 @@
+{
+    "id": "incident_cybleeventsv2ceusername",
+    "version": -1,
+    "modified": "2023-11-03T08:14:57.291377526Z",
+    "name": "CybleEventsV2 CE Username",
+    "ownerOnly": false,
+    "description": "Compromised endpoints: Username",
+    "cliName": "cybleeventsv2ceusername",
+    "type": "shortText",
+    "closeForm": false,
+    "editForm": true,
+    "required": false,
+    "neverSetAsRequired": false,
+    "isReadOnly": false,
+    "useAsKpi": false,
+    "locked": false,
+    "system": false,
+    "content": true,
+    "group": 0,
+    "hidden": false,
+    "openEnded": false,
+    "associatedTypes": [
+        "Cyble Vision Alert V2"
+    ],
+    "associatedToAll": false,
+    "unmapped": false,
+    "unsearchable": true,
+    "caseInsensitive": false,
+    "sla": 0,
+    "threshold": 72,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/IncidentFields/incidentfield-Card_Brand.json

@@ -0,0 +1,32 @@
+{
+    "id": "incident_cybleeventsv2cardbrand",
+    "version": -1,
+    "modified": "2023-11-01T17:28:52.96473009Z",
+    "name": "CybleEventsV2 Card Brand",
+    "ownerOnly": false,
+    "description": "Card Brand",
+    "cliName": "cybleeventsv2cardbrand",
+    "type": "shortText",
+    "closeForm": false,
+    "editForm": true,
+    "required": false,
+    "neverSetAsRequired": false,
+    "isReadOnly": false,
+    "useAsKpi": false,
+    "locked": false,
+    "system": false,
+    "content": true,
+    "group": 0,
+    "hidden": false,
+    "openEnded": false,
+    "associatedTypes": [
+        "Cyble Vision Alert V2"
+    ],
+    "associatedToAll": false,
+    "unmapped": false,
+    "unsearchable": true,
+    "caseInsensitive": false,
+    "sla": 0,
+    "threshold": 72,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/IncidentFields/incidentfield-Card_CVV.json

@@ -0,0 +1,32 @@
+{
+    "id": "incident_cybleeventsv2cardcvv",
+    "version": -1,
+    "modified": "2023-11-01T17:28:53.399763556Z",
+    "name": "CybleEventsV2 Card CVV",
+    "ownerOnly": false,
+    "description": "Card CVV",
+    "cliName": "cybleeventsv2cardcvv",
+    "type": "shortText",
+    "closeForm": false,
+    "editForm": true,
+    "required": false,
+    "neverSetAsRequired": false,
+    "isReadOnly": false,
+    "useAsKpi": false,
+    "locked": false,
+    "system": false,
+    "content": true,
+    "group": 0,
+    "hidden": false,
+    "openEnded": false,
+    "associatedTypes": [
+        "Cyble Vision Alert V2"
+    ],
+    "associatedToAll": false,
+    "unmapped": false,
+    "unsearchable": true,
+    "caseInsensitive": false,
+    "sla": 0,
+    "threshold": 72,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/IncidentFields/incidentfield-Card_Expiry.json

@@ -0,0 +1,32 @@
+{
+    "id": "incident_cybleeventsv2cardexpiry",
+    "version": -1,
+    "modified": "2023-11-01T17:28:53.790728925Z",
+    "name": "CybleEventsV2 Card Expiry",
+    "ownerOnly": false,
+    "description": "Card Expiry",
+    "cliName": "cybleeventsv2cardexpiry",
+    "type": "shortText",
+    "closeForm": false,
+    "editForm": true,
+    "required": false,
+    "neverSetAsRequired": false,
+    "isReadOnly": false,
+    "useAsKpi": false,
+    "locked": false,
+    "system": false,
+    "content": true,
+    "group": 0,
+    "hidden": false,
+    "openEnded": false,
+    "associatedTypes": [
+        "Cyble Vision Alert V2"
+    ],
+    "associatedToAll": false,
+    "unmapped": false,
+    "unsearchable": true,
+    "caseInsensitive": false,
+    "sla": 0,
+    "threshold": 72,
+    "fromVersion": "6.10.0"
+}

Packs/CybleEventsV2/IncidentFields/incidentfield-Card_Level.json

@@ -0,0 +1,32 @@
+{
+    "id": "incident_cybleeventsv2cardlevel",
+    "version": -1,
+    "modified": "2023-11-01T17:28:54.409441163Z",
+    "name": "CybleEventsV2 Card Level",
+    "ownerOnly": false,
+    "description": "Card Level",
+    "cliName": "cybleeventsv2cardlevel",
+    "type": "shortText",
+    "closeForm": false,
+    "editForm": true,
+    "required": false,
+    "neverSetAsRequired": false,
+    "isReadOnly": false,
+    "useAsKpi": false,
+    "locked": false,
+    "system": false,
+    "content": true,
+    "group": 0,
+    "hidden": false,
+    "openEnded": false,
+    "associatedTypes": [
+        "Cyble Vision Alert V2"
+    ],
+    "associatedToAll": false,
+    "unmapped": false,
+    "unsearchable": true,
+    "caseInsensitive": false,
+    "sla": 0,
+    "threshold": 72,
+    "fromVersion": "6.10.0"
+}