com.datadog.api.client.v2.model

Class ThreatHuntingJobOptions

java.lang.Object

com.datadog.api.client.v2.model.ThreatHuntingJobOptions

@Generated(value="https://github.com/DataDog/datadog-api-client-java/blob/master/.generator")
public class ThreatHuntingJobOptions
extends Object

Job options.

Field Summary

Fields

Modifier and Type	Field and Description
static String	JSON_PROPERTY_ANOMALY_DETECTION_OPTIONS
static String	JSON_PROPERTY_DETECTION_METHOD
static String	JSON_PROPERTY_EVALUATION_WINDOW
static String	JSON_PROPERTY_IMPOSSIBLE_TRAVEL_OPTIONS
static String	JSON_PROPERTY_KEEP_ALIVE
static String	JSON_PROPERTY_MAX_SIGNAL_DURATION
static String	JSON_PROPERTY_NEW_VALUE_OPTIONS
static String	JSON_PROPERTY_SEQUENCE_DETECTION_OPTIONS
static String	JSON_PROPERTY_THIRD_PARTY_RULE_OPTIONS
boolean	unparsed

Constructor Summary

Constructors

Constructor and Description
ThreatHuntingJobOptions()

Method Summary

Modifier and Type	Method and Description
ThreatHuntingJobOptions	anomalyDetectionOptions(SecurityMonitoringRuleAnomalyDetectionOptions anomalyDetectionOptions)
ThreatHuntingJobOptions	detectionMethod(SecurityMonitoringRuleDetectionMethod detectionMethod)
boolean	equals(Object o) Return true if this ThreatHuntingJobOptions object is equal to o.
ThreatHuntingJobOptions	evaluationWindow(SecurityMonitoringRuleEvaluationWindow evaluationWindow)
Map<String,Object>	getAdditionalProperties() Return the additional (undeclared) property.
Object	getAdditionalProperty(String key) Return the additional (undeclared) property with the specified name.
SecurityMonitoringRuleAnomalyDetectionOptions	getAnomalyDetectionOptions() Options on anomaly detection method.
SecurityMonitoringRuleDetectionMethod	getDetectionMethod() The detection method.
SecurityMonitoringRuleEvaluationWindow	getEvaluationWindow() A time window is specified to match when at least one of the cases matches true.
SecurityMonitoringRuleImpossibleTravelOptions	getImpossibleTravelOptions() Options on impossible travel detection method.
SecurityMonitoringRuleKeepAlive	getKeepAlive() Once a signal is generated, the signal will remain "open" if a case is matched at least once within this keep alive window.
SecurityMonitoringRuleMaxSignalDuration	getMaxSignalDuration() A signal will "close" regardless of the query being matched once the time exceeds the maximum duration.
SecurityMonitoringRuleNewValueOptions	getNewValueOptions() Options on new value detection method.
SecurityMonitoringRuleSequenceDetectionOptions	getSequenceDetectionOptions() Options on sequence detection method.
SecurityMonitoringRuleThirdPartyOptions	getThirdPartyRuleOptions() Options on third party detection method.
int	hashCode()
ThreatHuntingJobOptions	impossibleTravelOptions(SecurityMonitoringRuleImpossibleTravelOptions impossibleTravelOptions)
ThreatHuntingJobOptions	keepAlive(SecurityMonitoringRuleKeepAlive keepAlive)
ThreatHuntingJobOptions	maxSignalDuration(SecurityMonitoringRuleMaxSignalDuration maxSignalDuration)
ThreatHuntingJobOptions	newValueOptions(SecurityMonitoringRuleNewValueOptions newValueOptions)
ThreatHuntingJobOptions	putAdditionalProperty(String key, Object value) Set the additional (undeclared) property with the specified name and value.
ThreatHuntingJobOptions	sequenceDetectionOptions(SecurityMonitoringRuleSequenceDetectionOptions sequenceDetectionOptions)
void	setAnomalyDetectionOptions(SecurityMonitoringRuleAnomalyDetectionOptions anomalyDetectionOptions)
void	setDetectionMethod(SecurityMonitoringRuleDetectionMethod detectionMethod)
void	setEvaluationWindow(SecurityMonitoringRuleEvaluationWindow evaluationWindow)
void	setImpossibleTravelOptions(SecurityMonitoringRuleImpossibleTravelOptions impossibleTravelOptions)
void	setKeepAlive(SecurityMonitoringRuleKeepAlive keepAlive)
void	setMaxSignalDuration(SecurityMonitoringRuleMaxSignalDuration maxSignalDuration)
void	setNewValueOptions(SecurityMonitoringRuleNewValueOptions newValueOptions)
void	setSequenceDetectionOptions(SecurityMonitoringRuleSequenceDetectionOptions sequenceDetectionOptions)
void	setThirdPartyRuleOptions(SecurityMonitoringRuleThirdPartyOptions thirdPartyRuleOptions)
ThreatHuntingJobOptions	thirdPartyRuleOptions(SecurityMonitoringRuleThirdPartyOptions thirdPartyRuleOptions)
String	toString()

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

unparsed

public boolean unparsed

JSON_PROPERTY_ANOMALY_DETECTION_OPTIONS

public static final String JSON_PROPERTY_ANOMALY_DETECTION_OPTIONS

See Also:

Constant Field Values

JSON_PROPERTY_DETECTION_METHOD

public static final String JSON_PROPERTY_DETECTION_METHOD

See Also:

Constant Field Values

JSON_PROPERTY_EVALUATION_WINDOW

public static final String JSON_PROPERTY_EVALUATION_WINDOW

See Also:

Constant Field Values

JSON_PROPERTY_IMPOSSIBLE_TRAVEL_OPTIONS

public static final String JSON_PROPERTY_IMPOSSIBLE_TRAVEL_OPTIONS

See Also:

Constant Field Values

JSON_PROPERTY_KEEP_ALIVE

public static final String JSON_PROPERTY_KEEP_ALIVE

See Also:

Constant Field Values

JSON_PROPERTY_MAX_SIGNAL_DURATION

public static final String JSON_PROPERTY_MAX_SIGNAL_DURATION

See Also:

Constant Field Values

JSON_PROPERTY_NEW_VALUE_OPTIONS

public static final String JSON_PROPERTY_NEW_VALUE_OPTIONS

See Also:

Constant Field Values

JSON_PROPERTY_SEQUENCE_DETECTION_OPTIONS

public static final String JSON_PROPERTY_SEQUENCE_DETECTION_OPTIONS

See Also:

Constant Field Values

JSON_PROPERTY_THIRD_PARTY_RULE_OPTIONS

public static final String JSON_PROPERTY_THIRD_PARTY_RULE_OPTIONS

See Also:

Constant Field Values

Constructor Detail

ThreatHuntingJobOptions

public ThreatHuntingJobOptions()

Method Detail

anomalyDetectionOptions

public ThreatHuntingJobOptions anomalyDetectionOptions(SecurityMonitoringRuleAnomalyDetectionOptions anomalyDetectionOptions)

getAnomalyDetectionOptions

@Nullable
public SecurityMonitoringRuleAnomalyDetectionOptions getAnomalyDetectionOptions()

Options on anomaly detection method.

Returns:

anomalyDetectionOptions

setAnomalyDetectionOptions

public void setAnomalyDetectionOptions(SecurityMonitoringRuleAnomalyDetectionOptions anomalyDetectionOptions)

detectionMethod

public ThreatHuntingJobOptions detectionMethod(SecurityMonitoringRuleDetectionMethod detectionMethod)

getDetectionMethod

@Nullable
public SecurityMonitoringRuleDetectionMethod getDetectionMethod()

The detection method.

Returns:

detectionMethod

setDetectionMethod

public void setDetectionMethod(SecurityMonitoringRuleDetectionMethod detectionMethod)

evaluationWindow

public ThreatHuntingJobOptions evaluationWindow(SecurityMonitoringRuleEvaluationWindow evaluationWindow)

getEvaluationWindow

@Nullable
public SecurityMonitoringRuleEvaluationWindow getEvaluationWindow()

A time window is specified to match when at least one of the cases matches true. This is a sliding window and evaluates in real time. For third party detection method, this field is not used.

Returns:

evaluationWindow

setEvaluationWindow

public void setEvaluationWindow(SecurityMonitoringRuleEvaluationWindow evaluationWindow)

impossibleTravelOptions

public ThreatHuntingJobOptions impossibleTravelOptions(SecurityMonitoringRuleImpossibleTravelOptions impossibleTravelOptions)

getImpossibleTravelOptions

@Nullable
public SecurityMonitoringRuleImpossibleTravelOptions getImpossibleTravelOptions()

Options on impossible travel detection method.

Returns:

impossibleTravelOptions

setImpossibleTravelOptions

public void setImpossibleTravelOptions(SecurityMonitoringRuleImpossibleTravelOptions impossibleTravelOptions)

keepAlive

public ThreatHuntingJobOptions keepAlive(SecurityMonitoringRuleKeepAlive keepAlive)

getKeepAlive

@Nullable
public SecurityMonitoringRuleKeepAlive getKeepAlive()

Once a signal is generated, the signal will remain "open" if a case is matched at least once within this keep alive window. For third party detection method, this field is not used.

Returns:

keepAlive

setKeepAlive

public void setKeepAlive(SecurityMonitoringRuleKeepAlive keepAlive)

maxSignalDuration

public ThreatHuntingJobOptions maxSignalDuration(SecurityMonitoringRuleMaxSignalDuration maxSignalDuration)

getMaxSignalDuration

@Nullable
public SecurityMonitoringRuleMaxSignalDuration getMaxSignalDuration()

A signal will "close" regardless of the query being matched once the time exceeds the maximum duration. This time is calculated from the first seen timestamp.

Returns:

maxSignalDuration

setMaxSignalDuration

public void setMaxSignalDuration(SecurityMonitoringRuleMaxSignalDuration maxSignalDuration)

newValueOptions

public ThreatHuntingJobOptions newValueOptions(SecurityMonitoringRuleNewValueOptions newValueOptions)

getNewValueOptions

@Nullable
public SecurityMonitoringRuleNewValueOptions getNewValueOptions()

Options on new value detection method.

Returns:

newValueOptions

setNewValueOptions

public void setNewValueOptions(SecurityMonitoringRuleNewValueOptions newValueOptions)

sequenceDetectionOptions

public ThreatHuntingJobOptions sequenceDetectionOptions(SecurityMonitoringRuleSequenceDetectionOptions sequenceDetectionOptions)

getSequenceDetectionOptions

@Nullable
public SecurityMonitoringRuleSequenceDetectionOptions getSequenceDetectionOptions()

Options on sequence detection method.

Returns:

sequenceDetectionOptions

setSequenceDetectionOptions

public void setSequenceDetectionOptions(SecurityMonitoringRuleSequenceDetectionOptions sequenceDetectionOptions)

thirdPartyRuleOptions

public ThreatHuntingJobOptions thirdPartyRuleOptions(SecurityMonitoringRuleThirdPartyOptions thirdPartyRuleOptions)

getThirdPartyRuleOptions

@Nullable
public SecurityMonitoringRuleThirdPartyOptions getThirdPartyRuleOptions()

Options on third party detection method.

Returns:

thirdPartyRuleOptions

setThirdPartyRuleOptions

public void setThirdPartyRuleOptions(SecurityMonitoringRuleThirdPartyOptions thirdPartyRuleOptions)

putAdditionalProperty

public ThreatHuntingJobOptions putAdditionalProperty(String key,
                                                     Object value)

Set the additional (undeclared) property with the specified name and value. If the property does not already exist, create it otherwise replace it.

Parameters:

key - The arbitrary key to set

value - The associated value

Returns:

ThreatHuntingJobOptions

getAdditionalProperties

public Map<String,Object> getAdditionalProperties()

Return the additional (undeclared) property.

Returns:

The additional properties

getAdditionalProperty

public Object getAdditionalProperty(String key)

Return the additional (undeclared) property with the specified name.

Parameters:

key - The arbitrary key to get

Returns:

The specific additional property for the given key

equals

public boolean equals(Object o)

Return true if this ThreatHuntingJobOptions object is equal to o.

Overrides:

equals in class Object

hashCode

public int hashCode()

Overrides:

hashCode in class Object

toString

public String toString()

Overrides:

toString in class Object