Class SecurityResult.Types.VerdictInfo

Describes the threat verdict provided by human analysts and machine learning models. These fields are used to model Mandiant sources.

Inheritance

object

SecurityResult.Types.VerdictInfo

Implements

IMessage<SecurityResult.Types.VerdictInfo>

IEquatable<SecurityResult.Types.VerdictInfo>

IDeepCloneable<SecurityResult.Types.VerdictInfo>

IBufferMessage

IMessage

Inherited Members

object.GetHashCode()

object.GetType()

object.ToString()

Namespace: Google.Backstory

Assembly: Google.Backstory.dll

Syntax

public sealed class SecurityResult.Types.VerdictInfo : IMessage<SecurityResult.Types.VerdictInfo>, IEquatable<SecurityResult.Types.VerdictInfo>, IDeepCloneable<SecurityResult.Types.VerdictInfo>, IBufferMessage, IMessage

Constructors

VerdictInfo()

Declaration

public VerdictInfo()

VerdictInfo(VerdictInfo)

Declaration

public VerdictInfo(SecurityResult.Types.VerdictInfo other)

Parameters

Type	Name	Description
SecurityResult.Types.VerdictInfo	other

Properties

BenignCount

Count of responses where this IoC was marked as benign.

Declaration

public int BenignCount { get; set; }

Property Value

Type	Description
int

CategoryDetails

Tags related to the verdict.

Declaration

public string CategoryDetails { get; set; }

Property Value

Type	Description
string

ConfidenceScore

Confidence score of the verdict.

Declaration

public int ConfidenceScore { get; set; }

Property Value

Type	Description
int

GlobalCustomerCount

Global customer count over the last 30 days

Declaration

public int GlobalCustomerCount { get; set; }

Property Value

Type	Description
int

GlobalHitsCount

Global hit count over the last 30 days.

Declaration

public int GlobalHitsCount { get; set; }

Property Value

Type	Description
int

IocStats

List of IoCStats from which the verdict was generated.

Declaration

public RepeatedField<SecurityResult.Types.IoCStats> IocStats { get; }

Property Value

Type	Description
RepeatedField<SecurityResult.Types.IoCStats>

MaliciousCount

Count of responses where this IoC was marked as malicious.

Declaration

public int MaliciousCount { get; set; }

Property Value

Type	Description
int

NeighbourInfluence

Describes the near neighbor influence of the verdict.

Declaration

public string NeighbourInfluence { get; set; }

Property Value

Type	Description
string

Pwn

Whether one or more Mandiant incident response customers had this indicator in their environment.

Declaration

public bool Pwn { get; set; }

Property Value

Type	Description
bool

PwnFirstTaggedTime

The timestamp of the first time a pwn was associated to this entity.

Declaration

public Timestamp PwnFirstTaggedTime { get; set; }

Property Value

Type	Description
Timestamp

ResponseCount

Total response count across all sources.

Declaration

public int ResponseCount { get; set; }

Property Value

Type	Description
int

SourceCount

Number of sources from which intelligence was extracted.

Declaration

public int SourceCount { get; set; }

Property Value

Type	Description
int

SourceProvider

Source provider giving the machine learning verdict.

Declaration

public string SourceProvider { get; set; }

Property Value

Type	Description
string

VerdictResponse

Details about the verdict.

Declaration

public SecurityResult.Types.VerdictResponse VerdictResponse { get; set; }

Property Value

Type	Description
SecurityResult.Types.VerdictResponse

VerdictTime

Timestamp when the verdict was generated.

Declaration

public Timestamp VerdictTime { get; set; }

Property Value

Type	Description
Timestamp

VerdictType

Type of verdict.

Declaration

public SecurityResult.Types.VerdictType VerdictType { get; set; }

Property Value

Type	Description
SecurityResult.Types.VerdictType