Class Indicator
A data signature observed on a network or host that indicates a potential security threat. Indicators can be plain text or computed (hashed) values.
Inherited Members
Namespace: Oci.ThreatintelligenceService.Models
Assembly: OCI.DotNetSDK.Threatintelligence.dll
Syntax
public class Indicator
Properties
Attributes
Declaration
[Required(ErrorMessage = "Attributes is required.")]
[JsonProperty(PropertyName = "attributes")]
public List<IndicatorAttribute> Attributes { get; set; }
Property Value
Type | Description |
---|---|
List<IndicatorAttribute> | A map of attributes with additional information about the indicator. Each attribute has a name (string), value (string), and attribution (supporting data). |
Remarks
Required
CompartmentId
Declaration
[JsonProperty(PropertyName = "compartmentId")]
public string CompartmentId { get; set; }
Property Value
Type | Description |
---|---|
string | The OCID of the compartment that contains this indicator. |
Confidence
Declaration
[JsonProperty(PropertyName = "confidence")]
public int? Confidence { get; set; }
Property Value
Type | Description |
---|---|
int? | An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources. This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator. |
Geodata
Declaration
[Required(ErrorMessage = "Geodata is required.")]
[JsonProperty(PropertyName = "geodata")]
public GeodataDetails Geodata { get; set; }
Property Value
Type | Description |
---|---|
GeodataDetails |
Remarks
Required
Id
Declaration
[Required(ErrorMessage = "Id is required.")]
[JsonProperty(PropertyName = "id")]
public string Id { get; set; }
Property Value
Type | Description |
---|---|
string | The OCID of the indicator. |
Remarks
Required
LifecycleState
Declaration
[JsonProperty(PropertyName = "lifecycleState")]
[JsonConverter(typeof(ResponseEnumConverter))]
public LifecycleState? LifecycleState { get; set; }
Property Value
Type | Description |
---|---|
LifecycleState? | The state of the indicator. It will always be |
Relationships
Declaration
[Required(ErrorMessage = "Relationships is required.")]
[JsonProperty(PropertyName = "relationships")]
public List<IndicatorRelationship> Relationships { get; set; }
Property Value
Type | Description |
---|---|
List<IndicatorRelationship> | A map of relationships between the indicator and other entities. Each relationship has a name (string), related entity, and attribution (supporting data). |
Remarks
Required
ThreatTypes
Declaration
[Required(ErrorMessage = "ThreatTypes is required.")]
[JsonProperty(PropertyName = "threatTypes")]
public List<ThreatType> ThreatTypes { get; set; }
Property Value
Type | Description |
---|---|
List<ThreatType> | Characteristics of the threat indicator based on previous observations or behavior. May include related tactics, techniques, and procedures. |
Remarks
Required
TimeCreated
Declaration
[Required(ErrorMessage = "TimeCreated is required.")]
[JsonProperty(PropertyName = "timeCreated")]
public DateTime? TimeCreated { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | The date and time that the indicator was first detected. An RFC3339 formatted string. |
Remarks
Required
TimeLastSeen
Declaration
[Required(ErrorMessage = "TimeLastSeen is required.")]
[JsonProperty(PropertyName = "timeLastSeen")]
public DateTime? TimeLastSeen { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | The date and time that this indicator was last seen. The value is the same as |
Remarks
Required
TimeUpdated
Declaration
[Required(ErrorMessage = "TimeUpdated is required.")]
[JsonProperty(PropertyName = "timeUpdated")]
public DateTime? TimeUpdated { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | The date and time that this indicator was last updated. The value is the same as |
Remarks
Required
Type
Declaration
[Required(ErrorMessage = "Type is required.")]
[JsonProperty(PropertyName = "type")]
[JsonConverter(typeof(ResponseEnumConverter))]
public IndicatorType? Type { get; set; }
Property Value
Type | Description |
---|---|
IndicatorType? | The type of indicator. |
Remarks
Required
Value
Declaration
[Required(ErrorMessage = "Value is required.")]
[JsonProperty(PropertyName = "value")]
public string Value { get; set; }
Property Value
Type | Description |
---|---|
string | The value for this indicator.
The value's format is dependent upon its |
Remarks
Required