@Generated(value="OracleSDKGenerator",
comments="API Version: 20220901")
public final class Indicator
extends com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel
A data signature observed on a network or host that indicates a potential security threat.
Indicators can be plain text or computed (hashed) values.
Note: Objects should always be created or deserialized using the Indicator.Builder. This model
distinguishes fields that are null because they are unset from fields that are explicitly
set to null. This is done in the setter methods of the Indicator.Builder, which maintain a
set of all explicitly set fields called Indicator.Builder.__explicitlySet__. The hashCode() and equals(Object) methods are implemented to take the explicitly set
fields into account. The constructor, on the other hand, does not take the explicitly set fields
into account (since the constructor cannot distinguish explicit null from unset null).
| Modifier and Type | Class and Description |
|---|---|
static class |
Indicator.Builder |
EXPLICITLY_SET_FILTER_NAME, EXPLICITLY_SET_PROPERTY_NAME| Constructor and Description |
|---|
Indicator(String id,
IndicatorType type,
String value,
Integer confidence,
String compartmentId,
List<ThreatType> threatTypes,
List<IndicatorAttribute> attributes,
List<IndicatorRelationship> relationships,
LifecycleState lifecycleState,
Date timeCreated,
Date timeUpdated,
Date timeLastSeen,
GeodataDetails geodata)
Deprecated.
|
| Modifier and Type | Method and Description |
|---|---|
static Indicator.Builder |
builder()
Create a new builder.
|
boolean |
equals(Object o) |
List<IndicatorAttribute> |
getAttributes()
A map of attributes with additional information about the indicator.
|
String |
getCompartmentId()
The OCID of the compartment that contains this indicator.
|
Integer |
getConfidence()
An integer from 0 to 100 that represents how certain we are that the indicator is malicious
and a potential threat if it is detected communicating with your cloud resources.
|
GeodataDetails |
getGeodata() |
String |
getId()
The OCID of the indicator.
|
LifecycleState |
getLifecycleState()
The state of the indicator.
|
List<IndicatorRelationship> |
getRelationships()
A map of relationships between the indicator and other entities.
|
List<ThreatType> |
getThreatTypes()
Characteristics of the threat indicator based on previous observations or behavior.
|
Date |
getTimeCreated()
The date and time that the indicator was first detected.
|
Date |
getTimeLastSeen()
The date and time that this indicator was last seen.
|
Date |
getTimeUpdated()
The date and time that this indicator was last updated.
|
IndicatorType |
getType()
The type of indicator.
|
String |
getValue()
The value for this indicator.
|
int |
hashCode() |
Indicator.Builder |
toBuilder() |
String |
toString() |
String |
toString(boolean includeByteArrayContents)
Return a string representation of the object.
|
markPropertyAsExplicitlySet, wasPropertyExplicitlySet@Deprecated @ConstructorProperties(value={"id","type","value","confidence","compartmentId","threatTypes","attributes","relationships","lifecycleState","timeCreated","timeUpdated","timeLastSeen","geodata"}) public Indicator(String id, IndicatorType type, String value, Integer confidence, String compartmentId, List<ThreatType> threatTypes, List<IndicatorAttribute> attributes, List<IndicatorRelationship> relationships, LifecycleState lifecycleState, Date timeCreated, Date timeUpdated, Date timeLastSeen, GeodataDetails geodata)
public static Indicator.Builder builder()
Create a new builder.
public Indicator.Builder toBuilder()
public String getId()
The OCID of the indicator.
public IndicatorType getType()
The type of indicator.
public String getValue()
The value for this indicator. The value’s format is dependent upon its type.
Examples:
DOMAIN_NAME "evil.example.com"
MD5_HASH "44d88612fea8a8f36de82e1278abb02f"
IP_ADDRESS "2001:db8::1"
public Integer getConfidence()
An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources. This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator.
public String getCompartmentId()
The OCID of the compartment that contains this indicator.
public List<ThreatType> getThreatTypes()
Characteristics of the threat indicator based on previous observations or behavior. May include related tactics, techniques, and procedures.
public List<IndicatorAttribute> getAttributes()
A map of attributes with additional information about the indicator. Each attribute has a name (string), value (string), and attribution (supporting data).
public List<IndicatorRelationship> getRelationships()
A map of relationships between the indicator and other entities. Each relationship has a name (string), related entity, and attribution (supporting data).
public LifecycleState getLifecycleState()
The state of the indicator. It will always be ACTIVE.
public Date getTimeCreated()
The date and time that the indicator was first detected. An RFC3339 formatted string.
public Date getTimeUpdated()
The date and time that this indicator was last updated. The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.
public Date getTimeLastSeen()
The date and time that this indicator was last seen. The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.
public GeodataDetails getGeodata()
public String toString()
toString in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModelpublic String toString(boolean includeByteArrayContents)
Return a string representation of the object.
includeByteArrayContents - true to include the full contents of byte arrayspublic boolean equals(Object o)
equals in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModelpublic int hashCode()
hashCode in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModelCopyright © 2016–2024. All rights reserved.