Class EntityMetadata

Information about the Entity and the product where the entity was created.

Inheritance

object

EntityMetadata

Implements

IMessage<EntityMetadata>

IEquatable<EntityMetadata>

IDeepCloneable<EntityMetadata>

IBufferMessage

IMessage

Inherited Members

object.GetHashCode()

object.GetType()

object.ToString()

Namespace: Google.Backstory

Assembly: Google.Backstory.dll

Syntax

public sealed class EntityMetadata : IMessage<EntityMetadata>, IEquatable<EntityMetadata>, IDeepCloneable<EntityMetadata>, IBufferMessage, IMessage

Constructors

EntityMetadata()

Declaration

public EntityMetadata()

EntityMetadata(EntityMetadata)

Declaration

public EntityMetadata(EntityMetadata other)

Parameters

Type	Name	Description
EntityMetadata	other

Properties

AtiPrioritization

Prioritization factors used by ATI curated rules.

Declaration

public AtiPrioritization AtiPrioritization { get; set; }

Property Value

Type	Description
AtiPrioritization

CollectedTimestamp

GMT timestamp when the entity information was collected by the vendor's local collection infrastructure.

Declaration

public Timestamp CollectedTimestamp { get; set; }

Property Value

Type	Description
Timestamp

CreationTimestamp

GMT timestamp when the entity described by the product_entity_id was created on the system where data was collected.

Declaration

public Timestamp CreationTimestamp { get; set; }

Property Value

Type	Description
Timestamp

Description

Human-readable description of the entity.

Declaration

public string Description { get; set; }

Property Value

Type	Description
string

EntityType

Entity type. If an entity has multiple possible types, this specifies the most specific type.

Declaration

public EntityMetadata.Types.EntityType EntityType { get; set; }

Property Value

Type	Description
EntityMetadata.Types.EntityType

EventMetadata

Metadata field from the event.

Declaration

public Metadata EventMetadata { get; set; }

Property Value

Type	Description
Metadata

Extracted

Flattened fields extracted from the log.

Declaration

public Struct Extracted { get; set; }

Property Value

Type	Description
Struct

Feed

Vendor feed name for a threat indicator feed.

Declaration

public string Feed { get; set; }

Property Value

Type	Description
string

Interval

Valid existence time range for the version of the entity represented by this entity data.

Declaration

public Interval Interval { get; set; }

Property Value

Type	Description
Interval

ProductEntityId

A vendor-specific identifier that uniquely identifies the entity (e.g. a GUID, LDAP, OID, or similar).

Declaration

public string ProductEntityId { get; set; }

Property Value

Type	Description
string

ProductName

Product name that produced the entity information.

Declaration

public string ProductName { get; set; }

Property Value

Type	Description
string

ProductVersion

Version of the product that produced the entity information.

Declaration

public string ProductVersion { get; set; }

Property Value

Type	Description
string

SourceLabels

Entity source metadata labels.

Declaration

public RepeatedField<Label> SourceLabels { get; }

Property Value

Type	Description
RepeatedField<Label>

SourceType

The source of the entity.

Declaration

public EntityMetadata.Types.SourceType SourceType { get; set; }

Property Value

Type	Description
EntityMetadata.Types.SourceType

StructuredFields

Structured fields extracted from the log.

Declaration

[Obsolete]
public Struct StructuredFields { get; set; }

Property Value

Type	Description
Struct

Threat

Metadata provided by a threat intelligence feed that identified the entity as malicious.

Declaration

public RepeatedField<SecurityResult> Threat { get; }

Property Value

Type	Description
RepeatedField<SecurityResult>

VendorName

Vendor name of the product that produced the entity information.

Declaration

public string VendorName { get; set; }

Property Value

Type	Description
string