public sealed class Indicator : IMessage<Indicator>, IEquatable<Indicator>, IDeepCloneable<Indicator>, IBufferMessage, IMessage
Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise
Implements
IMessage<Indicator>, IEquatable<Indicator>, IDeepCloneable<Indicator>, IBufferMessage, IMessageNamespace
Google.Cloud.SecurityCenter.V1Assembly
Google.Cloud.SecurityCenter.V1.dll
Constructors
Indicator()
public Indicator()
Indicator(Indicator)
public Indicator(Indicator other)
Parameter | |
---|---|
Name | Description |
other | Indicator |
Properties
Domains
public RepeatedField<string> Domains { get; }
List of domains associated to the Finding.
Property Value | |
---|---|
Type | Description |
RepeatedField<String> |
IpAddresses
public RepeatedField<string> IpAddresses { get; }
List of ip addresses associated to the Finding.
Property Value | |
---|---|
Type | Description |
RepeatedField<String> |
Signatures
public RepeatedField<Indicator.Types.ProcessSignature> Signatures { get; }
The list of matched signatures indicating that the given process is present in the environment.
Property Value | |
---|---|
Type | Description |
RepeatedField<Indicator.Types.ProcessSignature> |