Class EntityProfile
EntityProfile represents the structured profile of a customer entity, containing key identifiers and descriptive attributes optimized for contextual matching against threat intelligence, particularly Initial Access Broker (IAB) offerings.
Implements
Inherited Members
Namespace: Google.Apis.ThreatIntelligenceService.v1beta.Data
Assembly: Google.Apis.ThreatIntelligenceService.v1beta.dll
Syntax
public class EntityProfile : IDirectResponseSchema
Properties
Countries
Optional. List of specific countries of operation. Purpose: Essential for matching geographically targeted threats (e.g., actor specifies victims in 'DE'). Use ISO 3166-1 alpha-2 codes (e.g., "US", "GB", "JP", "DE").
Declaration
[JsonProperty("countries")]
public virtual IList<string> Countries { get; set; }
Property Value
| Type | Description |
|---|---|
| IList<string> |
Domains
Required. List of primary internet domain names associated with the entity. Purpose: Crucial for explicit matching against domains mentioned in threat intel and can inform semantic matching. Must contain at least one domain. Example: ["acme.com", "acme.co.uk"]
Declaration
[JsonProperty("domains")]
public virtual IList<string> Domains { get; set; }
Property Value
| Type | Description |
|---|---|
| IList<string> |
ETag
The ETag of the item.
Declaration
public virtual string ETag { get; set; }
Property Value
| Type | Description |
|---|---|
| string |
Industries
Optional. List of primary industry sectors the entity operates within. Purpose: Crucial for matching industry-specific threats and understanding attacker motivation. Use standardized GTI Industry Classification values. Example: ["Technology", "Financial Services", "Healthcare"]
Declaration
[JsonProperty("industries")]
public virtual IList<string> Industries { get; set; }
Property Value
| Type | Description |
|---|---|
| IList<string> |
Name
Required. Canonical name of the entity (e.g., the legal company name). Purpose: Primary identifier for the customer.
Declaration
[JsonProperty("name")]
public virtual string Name { get; set; }
Property Value
| Type | Description |
|---|---|
| string |
OperationalAreas
Optional. Specific geographic areas of significant operational concentration or strategic importance below
the country level, if clearly identifiable and relevant. Purpose: Useful for highly localized threats, less
commonly populated than countries. Example: ["Silicon Valley", "Frankfurt am Main Metropolitan Region"]
Declaration
[JsonProperty("operationalAreas")]
public virtual IList<string> OperationalAreas { get; set; }
Property Value
| Type | Description |
|---|---|
| IList<string> |
ProfileSummary
Required. A concise, machine-generated (e.g., LLM) or human-curated summary of the entity. Purpose: Captures the semantic essence for embedding generation and similarity matching. Should synthesize key aspects like core business, scale, and market. Example: "Acme Corporation is a large, US-based multinational conglomerate operating..."
Declaration
[JsonProperty("profileSummary")]
public virtual string ProfileSummary { get; set; }
Property Value
| Type | Description |
|---|---|
| string |
Regions
Optional. List of primary geopolitical regions where the entity has significant operations. Purpose: Filters geographically relevant threats. Use standardized names or codes where possible (e.g., "North America", "EMEA", "APAC", UN M49 codes).
Declaration
[JsonProperty("regions")]
public virtual IList<string> Regions { get; set; }
Property Value
| Type | Description |
|---|---|
| IList<string> |
SubIndustries
Optional. List of more granular sub-industries, if applicable and known. Purpose: Provides finer-grained context for more specific threat matching. Should align with GTI classifications if possible. Example: ["Semiconductors", "Cloud Computing Services", "Investment Banking"]
Declaration
[JsonProperty("subIndustries")]
public virtual IList<string> SubIndustries { get; set; }
Property Value
| Type | Description |
|---|---|
| IList<string> |