Palo Alto Networks · Example Payload

Dlp Api Dlp Incident Example

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Dlp Api Dlp Incident Example is an example object payload from Palo Alto Networks, with 18 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

incident_idstatusseveritydata_pattern_namedata_pattern_idmatch_countchannelusertimestampapplicationfile_namefile_typefile_sizedirectionaction_takenreviewer_commentsreviewed_byreviewed_at

Example Payload

Raw ↑ 
{
  "incident_id": "293044",
  "status": "in_review",
  "severity": "medium",
  "data_pattern_name": "Remote Firewall 55",
  "data_pattern_id": "420838",
  "match_count": 674,
  "channel": "web",
  "user": "soc-analyst",
  "timestamp": "2024-06-16T10:12:49Z",
  "application": "office365",
  "file_name": "Remote Sensor 35",
  "file_type": "advanced",
  "file_size": 999,
  "direction": "download",
  "action_taken": "encrypt",
  "reviewer_comments": "Threat configured network rule security on threat for response.",
  "reviewed_by": "example-reviewed_by",
  "reviewed_at": "2024-10-14T03:34:46Z"
}