Class Indicator (1.11.1)

Indicator(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference:


ip_addresses Sequence[str]
List of ip addresses associated to the Finding.
domains Sequence[str]
List of domains associated to the Finding.


builtins.object > proto.message.Message > Indicator