Package com.oracle.bmc.threatintelligence.model

Class Indicator

java.lang.Object

com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel

com.oracle.bmc.threatintelligence.model.Indicator

@Generated(value="OracleSDKGenerator",
           comments="API Version: 20220901")
public final class Indicator
extends com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel

A data signature observed on a network or host that indicates a potential security threat.

Indicators can be plain text or computed (hashed) values.
Note: Objects should always be created or deserialized using the Indicator.Builder. This model distinguishes fields that are null because they are unset from fields that are explicitly set to null. This is done in the setter methods of the Indicator.Builder, which maintain a set of all explicitly set fields called Indicator.Builder.__explicitlySet__. The hashCode() and equals(Object) methods are implemented to take the explicitly set fields into account. The constructor, on the other hand, does not take the explicitly set fields into account (since the constructor cannot distinguish explicit null from unset null).

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	Indicator.Builder

Field Summary

Fields inherited from class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel

EXPLICITLY_SET_FILTER_NAME, EXPLICITLY_SET_PROPERTY_NAME

Constructor Summary

Constructors

Constructor	Description
Indicator(String id, IndicatorType type, String value, Integer confidence, String compartmentId, List<ThreatType> threatTypes, List<IndicatorAttribute> attributes, List<IndicatorRelationship> relationships, LifecycleState lifecycleState, Date timeCreated, Date timeUpdated, Date timeLastSeen, GeodataDetails geodata)	Deprecated.

Method Summary

Modifier and Type	Method	Description
static Indicator.Builder	builder()	Create a new builder.
boolean	equals(Object o)
List<IndicatorAttribute>	getAttributes()	A map of attributes with additional information about the indicator.
String	getCompartmentId()	The OCID of the compartment that contains this indicator.
Integer	getConfidence()	An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources.
GeodataDetails	getGeodata()
String	getId()	The OCID of the indicator.
LifecycleState	getLifecycleState()	The state of the indicator.
List<IndicatorRelationship>	getRelationships()	A map of relationships between the indicator and other entities.
List<ThreatType>	getThreatTypes()	Characteristics of the threat indicator based on previous observations or behavior.
Date	getTimeCreated()	The date and time that the indicator was first detected.
Date	getTimeLastSeen()	The date and time that this indicator was last seen.
Date	getTimeUpdated()	The date and time that this indicator was last updated.
IndicatorType	getType()	The type of indicator.
String	getValue()	The value for this indicator.
int	hashCode()
Indicator.Builder	toBuilder()
String	toString()
String	toString(boolean includeByteArrayContents)	Return a string representation of the object.

Methods inherited from class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel

markPropertyAsExplicitlySet, wasPropertyExplicitlySet

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

Indicator

@Deprecated
@ConstructorProperties({"id","type","value","confidence","compartmentId","threatTypes","attributes","relationships","lifecycleState","timeCreated","timeUpdated","timeLastSeen","geodata"})
public Indicator(String id,
                 IndicatorType type,
                 String value,
                 Integer confidence,
                 String compartmentId,
                 List<ThreatType> threatTypes,
                 List<IndicatorAttribute> attributes,
                 List<IndicatorRelationship> relationships,
                 LifecycleState lifecycleState,
                 Date timeCreated,
                 Date timeUpdated,
                 Date timeLastSeen,
                 GeodataDetails geodata)

Deprecated.

Method Detail

builder

public static Indicator.Builder builder()

Create a new builder.

toBuilder

public Indicator.Builder toBuilder()

getId

public String getId()

The OCID of the indicator.

Returns:

the value

getType

public IndicatorType getType()

The type of indicator.

Returns:

the value

getValue

public String getValue()

The value for this indicator.

The value’s format is dependent upon its type. Examples:

DOMAIN_NAME "evil.example.com"

MD5_HASH "44d88612fea8a8f36de82e1278abb02f"

IP_ADDRESS "2001:db8::1"

Returns:

the value

getConfidence

public Integer getConfidence()

An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources.

This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator.

Returns:

the value

getCompartmentId

public String getCompartmentId()

The OCID of the compartment that contains this indicator.

Returns:

the value

getThreatTypes

public List<ThreatType> getThreatTypes()

Characteristics of the threat indicator based on previous observations or behavior.

May include related tactics, techniques, and procedures.

Returns:

the value

getAttributes

public List<IndicatorAttribute> getAttributes()

A map of attributes with additional information about the indicator.

Each attribute has a name (string), value (string), and attribution (supporting data).

Returns:

the value

getRelationships

public List<IndicatorRelationship> getRelationships()

A map of relationships between the indicator and other entities.

Each relationship has a name (string), related entity, and attribution (supporting data).

Returns:

the value

getLifecycleState

public LifecycleState getLifecycleState()

The state of the indicator.

It will always be ACTIVE.

Returns:

the value

getTimeCreated

public Date getTimeCreated()

The date and time that the indicator was first detected.

An RFC3339 formatted string.

Returns:

the value

getTimeUpdated

public Date getTimeUpdated()

The date and time that this indicator was last updated.

The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

Returns:

the value

getTimeLastSeen

public Date getTimeLastSeen()

The date and time that this indicator was last seen.

The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

Returns:

the value

getGeodata

public GeodataDetails getGeodata()

toString

public String toString()

Overrides:

toString in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel

toString

public String toString(boolean includeByteArrayContents)

Return a string representation of the object.

Parameters:

includeByteArrayContents - true to include the full contents of byte arrays

Returns:

string representation

equals

public boolean equals(Object o)

Overrides:

equals in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel

hashCode

public int hashCode()

Overrides:

hashCode in class com.oracle.bmc.http.client.internal.ExplicitlySetBmcModel