com.oracle.bmc.threatintelligence.model

Class Indicator.Builder

java.lang.Object

com.oracle.bmc.threatintelligence.model.Indicator.Builder

Enclosing class:

Indicator

public static class Indicator.Builder
extends Object

Constructor Summary

Constructors

Constructor and Description
Builder()

Method Summary

Modifier and Type	Method and Description
Indicator.Builder	attributes(List<IndicatorAttribute> attributes) A map of attributes with additional information about the indicator.
Indicator	build()
Indicator.Builder	compartmentId(String compartmentId) The OCID of the compartment that contains this indicator.
Indicator.Builder	confidence(Integer confidence) An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources.
Indicator.Builder	copy(Indicator model)
Indicator.Builder	geodata(GeodataDetails geodata)
Indicator.Builder	id(String id) The OCID of the indicator.
Indicator.Builder	lifecycleState(LifecycleState lifecycleState) The state of the indicator.
Indicator.Builder	relationships(List<IndicatorRelationship> relationships) A map of relationships between the indicator and other entities.
Indicator.Builder	threatTypes(List<ThreatType> threatTypes) Characteristics of the threat indicator based on previous observations or behavior.
Indicator.Builder	timeCreated(Date timeCreated) The date and time that the indicator was first detected.
Indicator.Builder	timeLastSeen(Date timeLastSeen) The date and time that this indicator was last seen.
Indicator.Builder	timeUpdated(Date timeUpdated) The date and time that this indicator was last updated.
Indicator.Builder	type(IndicatorType type) The type of indicator.
Indicator.Builder	value(String value) The value for this indicator.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Builder

public Builder()

Method Detail

id

public Indicator.Builder id(String id)

The OCID of the indicator.

Parameters:

id - the value to set

Returns:

this builder

type

public Indicator.Builder type(IndicatorType type)

The type of indicator.

Parameters:

type - the value to set

Returns:

this builder

value

public Indicator.Builder value(String value)

The value for this indicator. The value’s format is dependent upon its type. Examples:

DOMAIN_NAME "evil.example.com"

MD5_HASH "44d88612fea8a8f36de82e1278abb02f"

IP_ADDRESS "2001:db8::1"

Parameters:

value - the value to set

Returns:

this builder

confidence

public Indicator.Builder confidence(Integer confidence)

An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources. This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator.

Parameters:

confidence - the value to set

Returns:

this builder

compartmentId

public Indicator.Builder compartmentId(String compartmentId)

The OCID of the compartment that contains this indicator.

Parameters:

compartmentId - the value to set

Returns:

this builder

threatTypes

public Indicator.Builder threatTypes(List<ThreatType> threatTypes)

Characteristics of the threat indicator based on previous observations or behavior. May include related tactics, techniques, and procedures.

Parameters:

threatTypes - the value to set

Returns:

this builder

attributes

public Indicator.Builder attributes(List<IndicatorAttribute> attributes)

A map of attributes with additional information about the indicator. Each attribute has a name (string), value (string), and attribution (supporting data).

Parameters:

attributes - the value to set

Returns:

this builder

relationships

public Indicator.Builder relationships(List<IndicatorRelationship> relationships)

A map of relationships between the indicator and other entities. Each relationship has a name (string), related entity, and attribution (supporting data).

Parameters:

relationships - the value to set

Returns:

this builder

lifecycleState

public Indicator.Builder lifecycleState(LifecycleState lifecycleState)

The state of the indicator. It will always be ACTIVE.

Parameters:

lifecycleState - the value to set

Returns:

this builder

timeCreated

public Indicator.Builder timeCreated(Date timeCreated)

The date and time that the indicator was first detected. An RFC3339 formatted string.

Parameters:

timeCreated - the value to set

Returns:

this builder

timeUpdated

public Indicator.Builder timeUpdated(Date timeUpdated)

The date and time that this indicator was last updated. The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

Parameters:

timeUpdated - the value to set

Returns:

this builder

timeLastSeen

public Indicator.Builder timeLastSeen(Date timeLastSeen)

The date and time that this indicator was last seen. The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

Parameters:

timeLastSeen - the value to set

Returns:

this builder

geodata

public Indicator.Builder geodata(GeodataDetails geodata)

build

public Indicator build()

copy

public Indicator.Builder copy(Indicator model)