Class IndicatorSummary
Summary of a data signature observed on a network or host that indicates a potential security threat.
Inherited Members
Namespace: Oci.ThreatintelligenceService.Models
Assembly: OCI.DotNetSDK.Threatintelligence.dll
Syntax
public class IndicatorSummary
Properties
Attributes
Declaration
[Required(ErrorMessage = "Attributes is required.")]
[JsonProperty(PropertyName = "attributes")]
public List<IndicatorAttributeSummary> Attributes { get; set; }
Property Value
Type | Description |
---|---|
List<IndicatorAttributeSummary> | A map of attributes with additional information about the indicator. Each attribute has a name (string), value (string), and attribution (supporting data). |
Remarks
Required
CompartmentId
Declaration
[JsonProperty(PropertyName = "compartmentId")]
public string CompartmentId { get; set; }
Property Value
Type | Description |
---|---|
string | The OCID of the compartment that contains this indicator. |
Confidence
Declaration
[JsonProperty(PropertyName = "confidence")]
public int? Confidence { get; set; }
Property Value
Type | Description |
---|---|
int? | An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources. This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator. |
Geodata
Declaration
[Required(ErrorMessage = "Geodata is required.")]
[JsonProperty(PropertyName = "geodata")]
public GeodataDetails Geodata { get; set; }
Property Value
Type | Description |
---|---|
GeodataDetails |
Remarks
Required
Id
Declaration
[Required(ErrorMessage = "Id is required.")]
[JsonProperty(PropertyName = "id")]
public string Id { get; set; }
Property Value
Type | Description |
---|---|
string | The OCID of the indicator. |
Remarks
Required
LifecycleState
Declaration
[JsonProperty(PropertyName = "lifecycleState")]
[JsonConverter(typeof(ResponseEnumConverter))]
public LifecycleState? LifecycleState { get; set; }
Property Value
Type | Description |
---|---|
LifecycleState? | The state of the indicator. It will always be |
ThreatTypes
Declaration
[Required(ErrorMessage = "ThreatTypes is required.")]
[JsonProperty(PropertyName = "threatTypes")]
public List<string> ThreatTypes { get; set; }
Property Value
Type | Description |
---|---|
List<string> | Characteristics of the threat indicator based on previous observations or behavior. May include related tactics, techniques, and procedures. |
Remarks
Required
TimeCreated
Declaration
[Required(ErrorMessage = "TimeCreated is required.")]
[JsonProperty(PropertyName = "timeCreated")]
public DateTime? TimeCreated { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | The date and time that the indicator was first detected. An RFC3339 formatted string. |
Remarks
Required
TimeLastSeen
Declaration
[Required(ErrorMessage = "TimeLastSeen is required.")]
[JsonProperty(PropertyName = "timeLastSeen")]
public DateTime? TimeLastSeen { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | The date and time that this indicator was last seen. The value is the same as |
Remarks
Required
TimeUpdated
Declaration
[Required(ErrorMessage = "TimeUpdated is required.")]
[JsonProperty(PropertyName = "timeUpdated")]
public DateTime? TimeUpdated { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | The date and time that this indicator was last updated by the system. Updates can include new reports or regular updates in confidence. The value is the same as |
Remarks
Required
Type
Declaration
[Required(ErrorMessage = "Type is required.")]
[JsonProperty(PropertyName = "type")]
[JsonConverter(typeof(ResponseEnumConverter))]
public IndicatorType? Type { get; set; }
Property Value
Type | Description |
---|---|
IndicatorType? | The type of indicator. |
Remarks
Required
Value
Declaration
[Required(ErrorMessage = "Value is required.")]
[JsonProperty(PropertyName = "value")]
public string Value { get; set; }
Property Value
Type | Description |
---|---|
string | The indicator data value. |
Remarks
Required