Enum Collection.Types.CollectionType
The type of the collection which will indicate which other fields are relevant. For example, detection finding collections will populate the detection field. Findings that evolve into investigations will populate the investigation field.
Namespace: Google.Backstory
Assembly: Google.Backstory.dll
Syntax
public enum Collection.Types.CollectionTypeFields
| Name | Description |
|---|---|
| GctiFinding | A finding from the Uppercase team. |
| MachineIntelligenceAlert | An alert generated by Chronicle machine learning models. |
| RuleDetection | A detection found by applying a rule. |
| SoarAlert | An alert coming from other SIEMs via Chronicle SOAR. |
| TelemetryAlert | An alert reported in customer telemetry. |
| Unspecified | An unspecified collection type. |
| UppercaseAlert |