Class: Google::Apis::SecuritycenterV1beta2::Indicator

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/securitycenter_v1beta2/classes.rb,
lib/google/apis/securitycenter_v1beta2/representations.rb,
lib/google/apis/securitycenter_v1beta2/representations.rb

Overview

Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ Indicator

Returns a new instance of Indicator.



2086
2087
2088
 
# File 'lib/google/apis/securitycenter_v1beta2/classes.rb', line 2086

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#domains ⇒ Array<String>

List of domains associated to the Finding. Corresponds to the JSON property domains

Returns:

  • (Array<String>) 


2068
2069
2070
 
# File 'lib/google/apis/securitycenter_v1beta2/classes.rb', line 2068

def domains
  @domains
end

#ip_addresses ⇒ Array<String>

List of ip addresses associated to the Finding. Corresponds to the JSON property ipAddresses

Returns:

  • (Array<String>) 


2073
2074
2075
 
# File 'lib/google/apis/securitycenter_v1beta2/classes.rb', line 2073

def ip_addresses
  @ip_addresses
end

#signatures ⇒ Array<Google::Apis::SecuritycenterV1beta2::ProcessSignature>

The list of matched signatures indicating that the given process is present in the environment. Corresponds to the JSON property signatures

Returns:



2079
2080
2081
 
# File 'lib/google/apis/securitycenter_v1beta2/classes.rb', line 2079

def signatures
  @signatures
end

#uris ⇒ Array<String>

The list of URIs associated to the Findings. Corresponds to the JSON property uris

Returns:

  • (Array<String>) 


2084
2085
2086
 
# File 'lib/google/apis/securitycenter_v1beta2/classes.rb', line 2084

def uris
  @uris
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



2091
2092
2093
2094
2095
2096
 
# File 'lib/google/apis/securitycenter_v1beta2/classes.rb', line 2091

def update!(**args)
  @domains = args[:domains] if args.key?(:domains)
  @ip_addresses = args[:ip_addresses] if args.key?(:ip_addresses)
  @signatures = args[:signatures] if args.key?(:signatures)
  @uris = args[:uris] if args.key?(:uris)
end