Class Investigation

Represents the aggregated state of an investigation such as categorization, severity, and status. Can be expanded to include analyst assignment details and more.

Inheritance

object

Investigation

Implements

IMessage<Investigation>

IEquatable<Investigation>

IDeepCloneable<Investigation>

IBufferMessage

IMessage

Inherited Members

object.GetHashCode()

object.GetType()

object.ToString()

Namespace: Google.Backstory

Assembly: Google.Backstory.dll

Syntax

public sealed class Investigation : IMessage<Investigation>, IEquatable<Investigation>, IDeepCloneable<Investigation>, IBufferMessage, IMessage

Constructors

Investigation()

Declaration

public Investigation()

Investigation(Investigation)

Declaration

public Investigation(Investigation other)

Parameters

Type	Name	Description
Investigation	other

Properties

Comments

Comment added by the Analyst.

Declaration

public RepeatedField<string> Comments { get; }

Property Value

Type	Description
RepeatedField<string>

HasId

Gets whether the "id" field is set

Declaration

public bool HasId { get; }

Property Value

Type	Description
bool

HasPriority

Gets whether the "priority" field is set

Declaration

public bool HasPriority { get; }

Property Value

Type	Description
bool

HasReason

Gets whether the "reason" field is set

Declaration

public bool HasReason { get; }

Property Value

Type	Description
bool

HasReputation

Gets whether the "reputation" field is set

Declaration

public bool HasReputation { get; }

Property Value

Type	Description
bool

HasRiskScore

Gets whether the "risk_score" field is set

Declaration

public bool HasRiskScore { get; }

Property Value

Type	Description
bool

HasRootCause

Gets whether the "root_cause" field is set

Declaration

public bool HasRootCause { get; }

Property Value

Type	Description
bool

HasSeverityScore

Gets whether the "severity_score" field is set

Declaration

public bool HasSeverityScore { get; }

Property Value

Type	Description
bool

HasStatus

Gets whether the "status" field is set

Declaration

public bool HasStatus { get; }

Property Value

Type	Description
bool

HasVerdict

Gets whether the "verdict" field is set

Declaration

public bool HasVerdict { get; }

Property Value

Type	Description
bool

Id

Identifier for the investigation

Declaration

public string Id { get; set; }

Property Value

Type	Description
string

Priority

Priority of the Alert or Finding set by analyst.

Declaration

public Priority Priority { get; set; }

Property Value

Type	Description
Priority

Reason

Reason for closing the Case or Alert.

Declaration

public Reason Reason { get; set; }

Property Value

Type	Description
Reason

Reputation

Describes whether a finding was useful or not-useful.

Declaration

public Reputation Reputation { get; set; }

Property Value

Type	Description
Reputation

RiskScore

Risk score for a finding set by an analyst.

Declaration

public uint RiskScore { get; set; }

Property Value

Type	Description
uint

RootCause

Root cause of the Alert or Finding set by analyst.

Declaration

public string RootCause { get; set; }

Property Value

Type	Description
string

SeverityScore

Severity score for a finding set by an analyst.

Declaration

public uint SeverityScore { get; set; }

Property Value

Type	Description
uint

Status

Describes the workflow status of a finding.

Declaration

public Status Status { get; set; }

Property Value

Type	Description
Status

Verdict

Describes reason a finding investigation was resolved.

Declaration

public Verdict Verdict { get; set; }

Property Value

Type	Description
Verdict