Class Indicator
A data signature observed on a network or host that indicates a potential security threat. Indicators can be plain text or computed (hashed) values.
Inherited Members
Namespace: Oci.ThreatintelligenceService.Models
Assembly: OCI.DotNetSDK.Threatintelligence.dll
Syntax
public class IndicatorProperties
Attributes
Declaration
[Required(ErrorMessage = "Attributes is required.")]
[JsonProperty(PropertyName = "attributes")]
public List<IndicatorAttribute> Attributes { get; set; }Property Value
| Type | Description |
|---|---|
| List<IndicatorAttribute> | A map of attributes with additional information about the indicator. Each attribute has a name (string), value (string), and attribution (supporting data). |
Remarks
Required
CompartmentId
Declaration
[JsonProperty(PropertyName = "compartmentId")]
public string CompartmentId { get; set; }Property Value
| Type | Description |
|---|---|
| string | The OCID of the compartment that contains this indicator. |
Confidence
Declaration
[JsonProperty(PropertyName = "confidence")]
public int? Confidence { get; set; }Property Value
| Type | Description |
|---|---|
| int? | An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources. This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator. |
Geodata
Declaration
[Required(ErrorMessage = "Geodata is required.")]
[JsonProperty(PropertyName = "geodata")]
public GeodataDetails Geodata { get; set; }Property Value
| Type | Description |
|---|---|
| GeodataDetails |
Remarks
Required
Id
Declaration
[Required(ErrorMessage = "Id is required.")]
[JsonProperty(PropertyName = "id")]
public string Id { get; set; }Property Value
| Type | Description |
|---|---|
| string | The OCID of the indicator. |
Remarks
Required
LifecycleState
Declaration
[JsonProperty(PropertyName = "lifecycleState")]
[JsonConverter(typeof(ResponseEnumConverter))]
public LifecycleState? LifecycleState { get; set; }Property Value
| Type | Description |
|---|---|
| LifecycleState? | The state of the indicator. It will always be |
Relationships
Declaration
[Required(ErrorMessage = "Relationships is required.")]
[JsonProperty(PropertyName = "relationships")]
public List<IndicatorRelationship> Relationships { get; set; }Property Value
| Type | Description |
|---|---|
| List<IndicatorRelationship> | A map of relationships between the indicator and other entities. Each relationship has a name (string), related entity, and attribution (supporting data). |
Remarks
Required
ThreatTypes
Declaration
[Required(ErrorMessage = "ThreatTypes is required.")]
[JsonProperty(PropertyName = "threatTypes")]
public List<ThreatType> ThreatTypes { get; set; }Property Value
| Type | Description |
|---|---|
| List<ThreatType> | Characteristics of the threat indicator based on previous observations or behavior. May include related tactics, techniques, and procedures. |
Remarks
Required
TimeCreated
Declaration
[Required(ErrorMessage = "TimeCreated is required.")]
[JsonProperty(PropertyName = "timeCreated")]
public DateTime? TimeCreated { get; set; }Property Value
| Type | Description |
|---|---|
| DateTime? | The date and time that the indicator was first detected. An RFC3339 formatted string. |
Remarks
Required
TimeLastSeen
Declaration
[Required(ErrorMessage = "TimeLastSeen is required.")]
[JsonProperty(PropertyName = "timeLastSeen")]
public DateTime? TimeLastSeen { get; set; }Property Value
| Type | Description |
|---|---|
| DateTime? | The date and time that this indicator was last seen. The value is the same as |
Remarks
Required
TimeUpdated
Declaration
[Required(ErrorMessage = "TimeUpdated is required.")]
[JsonProperty(PropertyName = "timeUpdated")]
public DateTime? TimeUpdated { get; set; }Property Value
| Type | Description |
|---|---|
| DateTime? | The date and time that this indicator was last updated. The value is the same as |
Remarks
Required
Type
Declaration
[Required(ErrorMessage = "Type is required.")]
[JsonProperty(PropertyName = "type")]
[JsonConverter(typeof(ResponseEnumConverter))]
public IndicatorType? Type { get; set; }Property Value
| Type | Description |
|---|---|
| IndicatorType? | The type of indicator. |
Remarks
Required
Value
Declaration
[Required(ErrorMessage = "Value is required.")]
[JsonProperty(PropertyName = "value")]
public string Value { get; set; }Property Value
| Type | Description |
|---|---|
| string | The value for this indicator.
The value's format is dependent upon its |
Remarks
Required