Class SightingSummary
Sighting summary definition.
Inherited Members
Namespace: Oci.CloudguardService.Models
Assembly: OCI.DotNetSDK.Cloudguard.dll
Syntax
public class SightingSummary
Properties
ActorPrincipalId
Declaration
[JsonProperty(PropertyName = "actorPrincipalId")]
public string ActorPrincipalId { get; set; }
Property Value
Type | Description |
---|---|
string | Unique identifier for principal actor |
ActorPrincipalName
Declaration
[JsonProperty(PropertyName = "actorPrincipalName")]
public string ActorPrincipalName { get; set; }
Property Value
Type | Description |
---|---|
string | Name of principal actor |
ActorPrincipalType
Declaration
[JsonProperty(PropertyName = "actorPrincipalType")]
public string ActorPrincipalType { get; set; }
Property Value
Type | Description |
---|---|
string | Type of principal actor |
ClassificationStatus
Declaration
[Required(ErrorMessage = "ClassificationStatus is required.")]
[JsonProperty(PropertyName = "classificationStatus")]
[JsonConverter(typeof(ResponseEnumConverter))]
public ClassificationStatus? ClassificationStatus { get; set; }
Property Value
Type | Description |
---|---|
ClassificationStatus? | Classification status of the sighting |
Remarks
Required
CompartmentId
Declaration
[Required(ErrorMessage = "CompartmentId is required.")]
[JsonProperty(PropertyName = "compartmentId")]
public string CompartmentId { get; set; }
Property Value
Type | Description |
---|---|
string | Compartment OCID where the impacted resource is created |
Remarks
Required
Confidence
Declaration
[Required(ErrorMessage = "Confidence is required.")]
[JsonProperty(PropertyName = "confidence")]
[JsonConverter(typeof(ResponseEnumConverter))]
public Confidence? Confidence { get; set; }
Property Value
Type | Description |
---|---|
Confidence? | Confidence level that the sighting is not a false positive |
Remarks
Required
DetectorRuleId
Declaration
[Required(ErrorMessage = "DetectorRuleId is required.")]
[JsonProperty(PropertyName = "detectorRuleId")]
public string DetectorRuleId { get; set; }
Property Value
Type | Description |
---|---|
string | Unique identifier of the detector rule that was triggered |
Remarks
Required
Id
Declaration
[Required(ErrorMessage = "Id is required.")]
[JsonProperty(PropertyName = "id")]
public string Id { get; set; }
Property Value
Type | Description |
---|---|
string | Unique identifier for sighting |
Remarks
Required
ProblemId
Declaration
[JsonProperty(PropertyName = "problemId")]
public string ProblemId { get; set; }
Property Value
Type | Description |
---|---|
string | Problem ID associated with sighting |
Regions
Declaration
[Required(ErrorMessage = "Regions is required.")]
[JsonProperty(PropertyName = "regions")]
public List<string> Regions { get; set; }
Property Value
Type | Description |
---|---|
List<string> | List of regions involved in the sighting |
Remarks
Required
Severity
Declaration
[Required(ErrorMessage = "Severity is required.")]
[JsonProperty(PropertyName = "severity")]
[JsonConverter(typeof(ResponseEnumConverter))]
public Severity? Severity { get; set; }
Property Value
Type | Description |
---|---|
Severity? | Severity of the sighting |
Remarks
Required
SightingScore
Declaration
[Required(ErrorMessage = "SightingScore is required.")]
[JsonProperty(PropertyName = "sightingScore")]
public int? SightingScore { get; set; }
Property Value
Type | Description |
---|---|
int? | Score for the sighting |
Remarks
Required
SightingType
Declaration
[Required(ErrorMessage = "SightingType is required.")]
[JsonProperty(PropertyName = "sightingType")]
public string SightingType { get; set; }
Property Value
Type | Description |
---|---|
string | Type of sighting |
Remarks
Required
SightingTypeDisplayName
Declaration
[Required(ErrorMessage = "SightingTypeDisplayName is required.")]
[JsonProperty(PropertyName = "sightingTypeDisplayName")]
public string SightingTypeDisplayName { get; set; }
Property Value
Type | Description |
---|---|
string | Display name of the sighting type |
Remarks
Required
TacticName
Declaration
[Required(ErrorMessage = "TacticName is required.")]
[JsonProperty(PropertyName = "tacticName")]
public string TacticName { get; set; }
Property Value
Type | Description |
---|---|
string | Name of the MITRE ATT@CK framework tactic |
Remarks
Required
TechniqueName
Declaration
[Required(ErrorMessage = "TechniqueName is required.")]
[JsonProperty(PropertyName = "techniqueName")]
public string TechniqueName { get; set; }
Property Value
Type | Description |
---|---|
string | Name of the MITRE ATT@CK framework technique |
Remarks
Required
TimeFirstDetected
Declaration
[Required(ErrorMessage = "TimeFirstDetected is required.")]
[JsonProperty(PropertyName = "timeFirstDetected")]
public DateTime? TimeFirstDetected { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were first detected. Format defined by RFC3339. |
Remarks
Required
TimeFirstOccurred
Declaration
[JsonProperty(PropertyName = "timeFirstOccurred")]
public DateTime? TimeFirstOccurred { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were first performed. Format defined by RFC3339. |
TimeLastDetected
Declaration
[Required(ErrorMessage = "TimeLastDetected is required.")]
[JsonProperty(PropertyName = "timeLastDetected")]
public DateTime? TimeLastDetected { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were last detected. Format defined by RFC3339. |
Remarks
Required
TimeLastOccurred
Declaration
[JsonProperty(PropertyName = "timeLastOccurred")]
public DateTime? TimeLastOccurred { get; set; }
Property Value
Type | Description |
---|---|
DateTime? | Time the activities were last performed. Format defined by RFC3339. |