Class Sighting
Sighting details.
Inherited Members
Namespace: Oci.CloudguardService.Models
Assembly: OCI.DotNetSDK.Cloudguard.dll
Syntax
public class Sighting
Properties
ActorPrincipalId
Declaration
[JsonProperty(PropertyName = "actorPrincipalId")]
public string ActorPrincipalId { get; set; }
Property Value
Type | Description |
---|---|
string | Unique identifier for principal actor |
ActorPrincipalName
Declaration
[JsonProperty(PropertyName = "actorPrincipalName")]
public string ActorPrincipalName { get; set; }
Property Value
Type | Description |
---|---|
string | Name of the principal actor |
ActorPrincipalType
Declaration
[JsonProperty(PropertyName = "actorPrincipalType")]
public string ActorPrincipalType { get; set; }
Property Value
Type | Description |
---|---|
string | Type of the principal actor |
AdditionalDetails
Declaration
[JsonProperty(PropertyName = "additionalDetails")]
public Dictionary<string, string> AdditionalDetails { get; set; }
Property Value
Type | Description |
---|---|
Dictionary<string, string> | The additional details for the sighting |
ClassificationStatus
Declaration
[Required(ErrorMessage = "ClassificationStatus is required.")]
[JsonProperty(PropertyName = "classificationStatus")]
[JsonConverter(typeof(ResponseEnumConverter))]
public ClassificationStatus? ClassificationStatus { get; set; }
Property Value
Type | Description |
---|---|
ClassificationStatus? | Classification status of the sighting |
Remarks
Required
CompartmentId
Declaration
[Required(ErrorMessage = "CompartmentId is required.")]
[JsonProperty(PropertyName = "compartmentId")]
public string CompartmentId { get; set; }
Property Value
Type | Description |
---|---|
string | Compartment OCID where the resource is created |
Remarks
Required
Confidence
Declaration
[Required(ErrorMessage = "Confidence is required.")]
[JsonProperty(PropertyName = "confidence")]
[JsonConverter(typeof(ResponseEnumConverter))]
public Confidence? Confidence { get; set; }
Property Value
Type | Description |
---|---|
Confidence? | Level of confidence that the sighting is not a false positive |
Remarks
Required
Description
Declaration
[Required(ErrorMessage = "Description is required.")]
[JsonProperty(PropertyName = "description")]
public string Description { get; set; }
Property Value
Type | Description |
---|---|
string | Description of the sighting |
Remarks
Required
Id
Declaration
[Required(ErrorMessage = "Id is required.")]
[JsonProperty(PropertyName = "id")]
public string Id { get; set; }
Property Value
Type | Description |
---|---|
string | Unique identifier for the sighting |
Remarks
Required
Locks
Declaration
[JsonProperty(PropertyName = "locks")]
public List<ResourceLock> Locks { get; set; }
Property Value
Type | Description |
---|---|
List<ResourceLock> | Locks associated with this resource. |
ProblemId
Declaration
[JsonProperty(PropertyName = "problemId")]
public string ProblemId { get; set; }
Property Value
Type | Description |
---|---|
string | Problem ID associated the sighting |
Regions
Declaration
[Required(ErrorMessage = "Regions is required.")]
[JsonProperty(PropertyName = "regions")]
public List<string> Regions { get; set; }
Property Value
Type | Description |
---|---|
List<string> | List of regions involved in the sighting |
Remarks
Required
Severity
Declaration
[Required(ErrorMessage = "Severity is required.")]
[JsonProperty(PropertyName = "severity")]
[JsonConverter(typeof(ResponseEnumConverter))]
public Severity? Severity { get; set; }
Property Value
Type | Description |
---|---|
Severity? | Severity of the sighting |
Remarks
Required
SightingScore
Declaration
[Required(ErrorMessage = "SightingScore is required.")]
[JsonProperty(PropertyName = "sightingScore")]
public int? SightingScore { get; set; }
Property Value
Type | Description |
---|---|
int? | Score for the sighting |
Remarks
Required
SightingType
Declaration
[Required(ErrorMessage = "SightingType is required.")]
[JsonProperty(PropertyName = "sightingType")]
public string SightingType { get; set; }
Property Value
Type | Description |
---|---|
string | Type of sighting |
Remarks
Required
SightingTypeDisplayName
Declaration
[Required(ErrorMessage = "SightingTypeDisplayName is required.")]
[JsonProperty(PropertyName = "sightingTypeDisplayName")]
public string SightingTypeDisplayName { get; set; }
Property Value
Type | Description |
---|---|
string | Display name of the sighting type |
Remarks
Required
TacticName
Declaration
[Required(ErrorMessage = "TacticName is required.")]
[JsonProperty(PropertyName = "tacticName")]
public string TacticName { get; set; }
Property Value
Type | Description |
---|---|
string | Name of the MITRE ATT@CK framework tactic |
Remarks
Required
TechniqueName
Declaration
[Required(ErrorMessage = "TechniqueName is required.")]
[JsonProperty(PropertyName = "techniqueName")]
public string TechniqueName { get; set; }
Property Value
Type | Description |
---|---|
string | Name of the MITRE ATT@CK framework technique |
Remarks
Required
TimeFirstDetected
Declaration
[Required(ErrorMessage = "TimeFirstDetected is required.")]
[JsonProperty(PropertyName = "timeFirstDetected")]
public DateTime? TimeFirstDetected { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were first detected. Format defined by RFC3339. |
Remarks
Required
TimeFirstOccurred
Declaration
[JsonProperty(PropertyName = "timeFirstOccurred")]
public DateTime? TimeFirstOccurred { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were first performed. Format defined by RFC3339. |
TimeLastDetected
Declaration
[Required(ErrorMessage = "TimeLastDetected is required.")]
[JsonProperty(PropertyName = "timeLastDetected")]
public DateTime? TimeLastDetected { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were last detected. Format defined by RFC3339. |
Remarks
Required
TimeLastOccurred
Declaration
[JsonProperty(PropertyName = "timeLastOccurred")]
public DateTime? TimeLastOccurred { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were last performed. Format defined by RFC3339. |