Class Indicator (1.31.0)

Version latest

• 1.31.0 (latest)
• 1.30.1
• 1.29.0
• 1.28.0
• 1.27.0
• 1.26.1
• 1.25.0
• 1.24.1
• 1.23.2
• 1.22.0
• 1.21.0
• 1.20.0
• 1.19.1
• 1.18.2
• 1.17.0
• 1.16.2
• 1.15.0
• 1.14.0
• 1.13.0
• 1.12.0
• 1.11.1
• 1.10.0
• 1.9.0
• 1.8.0
• 1.7.0
• 1.6.0
• 1.5.2
• 1.4.0
• 1.3.1
• 1.2.0
• 1.1.0
• 1.0.0
• 0.7.3
• 0.6.0
• 0.5.0
• 0.4.0
• 0.3.0

Indicator(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise <https://en.wikipedia.org/wiki/Indicator_of_compromise>__.

Attributes
Name	Description
ip_addresses	MutableSequence[str] The list of IP addresses that are associated with the finding.
domains	MutableSequence[str] List of domains associated to the Finding.
signatures	MutableSequence[google.cloud.securitycenter_v1.types.Indicator.ProcessSignature] The list of matched signatures indicating that the given process is present in the environment.
uris	MutableSequence[str] The list of URIs associated to the Findings.

Classes

ProcessSignature

ProcessSignature(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Indicates what signature matched this process.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields