Class IndicatorSummary

Summary of a data signature observed on a network or host that indicates a potential security threat.

Inheritance

object

IndicatorSummary

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Namespace: Oci.ThreatintelligenceService.Models

Assembly: OCI.DotNetSDK.Threatintelligence.dll

Syntax

public class IndicatorSummary

Properties

Attributes

Declaration

[Required(ErrorMessage = "Attributes is required.")]
[JsonProperty(PropertyName = "attributes")]
public List<IndicatorAttributeSummary> Attributes { get; set; }

Property Value

Type	Description
List<IndicatorAttributeSummary>	A map of attributes with additional information about the indicator. Each attribute has a name (string), value (string), and attribution (supporting data).

Remarks

Required

CompartmentId

Declaration

[JsonProperty(PropertyName = "compartmentId")]
public string CompartmentId { get; set; }

Property Value

Type	Description
string	The OCID of the compartment that contains this indicator.

Confidence

Declaration

[JsonProperty(PropertyName = "confidence")]
public int? Confidence { get; set; }

Property Value

Type	Description
int?	An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources. This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator.

Geodata

Declaration

[Required(ErrorMessage = "Geodata is required.")]
[JsonProperty(PropertyName = "geodata")]
public GeodataDetails Geodata { get; set; }

Property Value

Type	Description
GeodataDetails

Remarks

Required

Id

Declaration

[Required(ErrorMessage = "Id is required.")]
[JsonProperty(PropertyName = "id")]
public string Id { get; set; }

Property Value

Type	Description
string	The OCID of the indicator.

Remarks

Required

LifecycleState

Declaration

[JsonProperty(PropertyName = "lifecycleState")]
[JsonConverter(typeof(ResponseEnumConverter))]
public LifecycleState? LifecycleState { get; set; }

Property Value

Type	Description
LifecycleState?	The state of the indicator. It will always be ACTIVE.

ThreatTypes

Declaration

[Required(ErrorMessage = "ThreatTypes is required.")]
[JsonProperty(PropertyName = "threatTypes")]
public List<string> ThreatTypes { get; set; }

Property Value

Type	Description
List<string>	Characteristics of the threat indicator based on previous observations or behavior. May include related tactics, techniques, and procedures.

Remarks

Required

TimeCreated

Declaration

[Required(ErrorMessage = "TimeCreated is required.")]
[JsonProperty(PropertyName = "timeCreated")]
public DateTime? TimeCreated { get; set; }

Property Value

Type	Description
DateTime?	The date and time that the indicator was first detected. An RFC3339 formatted string.

Remarks

Required

TimeLastSeen

Declaration

[Required(ErrorMessage = "TimeLastSeen is required.")]
[JsonProperty(PropertyName = "timeLastSeen")]
public DateTime? TimeLastSeen { get; set; }

Property Value

Type	Description
DateTime?	The date and time that this indicator was last seen. The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

Remarks

Required

TimeUpdated

Declaration

[Required(ErrorMessage = "TimeUpdated is required.")]
[JsonProperty(PropertyName = "timeUpdated")]
public DateTime? TimeUpdated { get; set; }

Property Value

Type	Description
DateTime?	The date and time that this indicator was last updated by the system. Updates can include new reports or regular updates in confidence. The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

Remarks

Required

Type

Declaration

[Required(ErrorMessage = "Type is required.")]
[JsonProperty(PropertyName = "type")]
[JsonConverter(typeof(ResponseEnumConverter))]
public IndicatorType? Type { get; set; }

Property Value

Type	Description
IndicatorType?	The type of indicator.

Remarks

Required

Value

Declaration

[Required(ErrorMessage = "Value is required.")]
[JsonProperty(PropertyName = "value")]
public string Value { get; set; }

Property Value

Type	Description
string	The indicator data value.

Remarks

Required