Class SecurityResult.Types.Association

Associations represents different metadata about malware and threat actors involved with an IoC.

Inheritance
object
SecurityResult.Types.Association
Implements
Inherited Members
Namespace: Google.Backstory
Assembly: Google.Backstory.dll
Syntax
public sealed class SecurityResult.Types.Association : IMessage<SecurityResult.Types.Association>, IEquatable<SecurityResult.Types.Association>, IDeepCloneable<SecurityResult.Types.Association>, IBufferMessage, IMessage

Constructors

Association()

Declaration
public Association()

Association(Association)

Declaration
public Association(SecurityResult.Types.Association other)
Parameters
Type Name Description
SecurityResult.Types.Association other

Properties

Alias

Different aliases of the threat actor given by different sources.

Declaration
public RepeatedField<SecurityResult.Types.Association.Types.AssociationAlias> Alias { get; }
Property Value
Type Description
RepeatedField<SecurityResult.Types.Association.Types.AssociationAlias>

AssociatedActors

List of associated threat actors for a malware. Not applicable for threat actors.

Declaration
public RepeatedField<SecurityResult.Types.Association> AssociatedActors { get; }
Property Value
Type Description
RepeatedField<SecurityResult.Types.Association>

CountryCode

Country from which the threat actor/ malware is originated.

Declaration
public RepeatedField<string> CountryCode { get; }
Property Value
Type Description
RepeatedField<string>

Description

Human readable description about the association.

Declaration
public string Description { get; set; }
Property Value
Type Description
string

FirstReferenceTime

First time the threat actor was referenced or seen.

Declaration
public Timestamp FirstReferenceTime { get; set; }
Property Value
Type Description
Timestamp

Id

Unique association id generated by mandiant.

Declaration
public string Id { get; set; }
Property Value
Type Description
string

IndustriesAffected

List of industries the threat actor affects.

Declaration
public RepeatedField<string> IndustriesAffected { get; }
Property Value
Type Description
RepeatedField<string>

LastReferenceTime

Last time the threat actor was referenced or seen.

Declaration
public Timestamp LastReferenceTime { get; set; }
Property Value
Type Description
Timestamp

Name

Name of the threat actor/malware.

Declaration
public string Name { get; set; }
Property Value
Type Description
string

RegionCode

Name of the country, the threat is originating from.

Declaration
public Location RegionCode { get; set; }
Property Value
Type Description
Location

Role

Role of the malware. Not applicable for threat actor.

Declaration
public string Role { get; set; }
Property Value
Type Description
string

SourceCountry

Name of the country the threat originated from.

Declaration
[Obsolete]
public string SourceCountry { get; set; }
Property Value
Type Description
string

SponsorRegion

Sponsor region of the threat actor.

Declaration
public Location SponsorRegion { get; set; }
Property Value
Type Description
Location

Tags

Tags.

Declaration
public RepeatedField<string> Tags { get; }
Property Value
Type Description
RepeatedField<string>

TargetedRegions

Targeted regions.

Declaration
public RepeatedField<Location> TargetedRegions { get; }
Property Value
Type Description
RepeatedField<Location>

Type

Signifies the type of association.

Declaration
public SecurityResult.Types.Association.Types.AssociationType Type { get; set; }
Property Value
Type Description
SecurityResult.Types.Association.Types.AssociationType