Package com.datadog.api.client.v2.model

Class IoCIndicatorDetailed

java.lang.Object
com.datadog.api.client.v2.model.IoCIndicatorDetailed
@Generated("https://github.com/DataDog/datadog-api-client-java/blob/master/.generator") public class IoCIndicatorDetailed extends Object
An indicator of compromise with extended context from your environment.

  • Field Details

  • Constructor Details

    • IoCIndicatorDetailed

      public IoCIndicatorDetailed()

  • Method Details

    • additionalData

      public IoCIndicatorDetailed additionalData(Map<String,Object> additionalData)

    • putAdditionalDataItem

      public IoCIndicatorDetailed putAdditionalDataItem(String key, Object additionalDataItem)

    • getAdditionalData

      @Nullable public Map<String,Object> getAdditionalData()
      Additional domain-specific context from threat intelligence sources.
      Returns:
      additionalData

    • setAdditionalData

      public void setAdditionalData(Map<String,Object> additionalData)

    • asCidrBlock

      public IoCIndicatorDetailed asCidrBlock(String asCidrBlock)

    • getAsCidrBlock

      @Nullable public String getAsCidrBlock()
      Autonomous system CIDR block.
      Returns:
      asCidrBlock

    • setAsCidrBlock

      public void setAsCidrBlock(String asCidrBlock)

    • asGeo

      public IoCIndicatorDetailed asGeo(IoCGeoLocation asGeo)

    • getAsGeo

      @Nullable public IoCGeoLocation getAsGeo()
      Geographic location information for an IP indicator.
      Returns:
      asGeo

    • setAsGeo

      public void setAsGeo(IoCGeoLocation asGeo)

    • asNumber

      public IoCIndicatorDetailed asNumber(String asNumber)

    • getAsNumber

      @Nullable public String getAsNumber()
      Autonomous system number.
      Returns:
      asNumber

    • setAsNumber

      public void setAsNumber(String asNumber)

    • asOrganization

      public IoCIndicatorDetailed asOrganization(String asOrganization)

    • getAsOrganization

      @Nullable public String getAsOrganization()
      Autonomous system organization name.
      Returns:
      asOrganization

    • setAsOrganization

      public void setAsOrganization(String asOrganization)

    • asType

      public IoCIndicatorDetailed asType(String asType)

    • getAsType

      @Nullable public String getAsType()
      Autonomous system type.
      Returns:
      asType

    • setAsType

      public void setAsType(String asType)

    • benignSources

      public IoCIndicatorDetailed benignSources(List<IoCSource> benignSources)

    • addBenignSourcesItem

      public IoCIndicatorDetailed addBenignSourcesItem(IoCSource benignSourcesItem)

    • getBenignSources

      @Nullable public List<IoCSource> getBenignSources()
      Threat intelligence sources that flagged this indicator as benign.
      Returns:
      benignSources

    • getBenignSources_JsonNullable

      public org.openapitools.jackson.nullable.JsonNullable<List<IoCSource>> getBenignSources_JsonNullable()

    • setBenignSources_JsonNullable

      public void setBenignSources_JsonNullable(org.openapitools.jackson.nullable.JsonNullable<List<IoCSource>> benignSources)

    • setBenignSources

      public void setBenignSources(List<IoCSource> benignSources)

    • categories

      public IoCIndicatorDetailed categories(List<String> categories)

    • addCategoriesItem

      public IoCIndicatorDetailed addCategoriesItem(String categoriesItem)

    • getCategories

      @Nullable public List<String> getCategories()
      Threat categories associated with the indicator.
      Returns:
      categories

    • setCategories

      public void setCategories(List<String> categories)

    • criticalAssets

      public IoCIndicatorDetailed criticalAssets(List<String> criticalAssets)

    • addCriticalAssetsItem

      public IoCIndicatorDetailed addCriticalAssetsItem(String criticalAssetsItem)

    • getCriticalAssets

      @Nullable public List<String> getCriticalAssets()
      Critical assets associated with this indicator.
      Returns:
      criticalAssets

    • setCriticalAssets

      public void setCriticalAssets(List<String> criticalAssets)

    • firstSeen

      public IoCIndicatorDetailed firstSeen(OffsetDateTime firstSeen)

    • getFirstSeen

      @Nullable public OffsetDateTime getFirstSeen()
      Timestamp when the indicator was first seen.
      Returns:
      firstSeen

    • setFirstSeen

      public void setFirstSeen(OffsetDateTime firstSeen)

    • hosts

      public IoCIndicatorDetailed hosts(List<String> hosts)

    • addHostsItem

      public IoCIndicatorDetailed addHostsItem(String hostsItem)

    • getHosts

      @Nullable public List<String> getHosts()
      Hosts associated with this indicator.
      Returns:
      hosts

    • setHosts

      public void setHosts(List<String> hosts)

    • id

      public IoCIndicatorDetailed id(String id)

    • getId

      @Nullable public String getId()
      Unique identifier for the indicator.
      Returns:
      id

    • setId

      public void setId(String id)

    • indicator

      public IoCIndicatorDetailed indicator(String indicator)

    • getIndicator

      @Nullable public String getIndicator()
      The indicator value (for example, an IP address or domain).
      Returns:
      indicator

    • setIndicator

      public void setIndicator(String indicator)

    • indicatorType

      public IoCIndicatorDetailed indicatorType(String indicatorType)

    • getIndicatorType

      @Nullable public String getIndicatorType()
      Type of indicator (for example, IP address or domain).
      Returns:
      indicatorType

    • setIndicatorType

      public void setIndicatorType(String indicatorType)

    • lastSeen

      public IoCIndicatorDetailed lastSeen(OffsetDateTime lastSeen)

    • getLastSeen

      @Nullable public OffsetDateTime getLastSeen()
      Timestamp when the indicator was last seen.
      Returns:
      lastSeen

    • setLastSeen

      public void setLastSeen(OffsetDateTime lastSeen)

    • logMatches

      public IoCIndicatorDetailed logMatches(Long logMatches)

    • getLogMatches

      @Nullable public Long getLogMatches()
      Number of logs that matched this indicator.
      Returns:
      logMatches

    • setLogMatches

      public void setLogMatches(Long logMatches)

    • logSources

      public IoCIndicatorDetailed logSources(List<String> logSources)

    • addLogSourcesItem

      public IoCIndicatorDetailed addLogSourcesItem(String logSourcesItem)

    • getLogSources

      @Nullable public List<String> getLogSources()
      Log sources where this indicator was observed.
      Returns:
      logSources

    • setLogSources

      public void setLogSources(List<String> logSources)

    • mAsType

      public IoCIndicatorDetailed mAsType(IoCScoreEffect mAsType)

    • getMAsType

      @Nullable public IoCScoreEffect getMAsType()
      Effect of a scoring factor on the indicator's threat score.
      Returns:
      mAsType

    • setMAsType

      public void setMAsType(IoCScoreEffect mAsType)

    • mPersistence

      public IoCIndicatorDetailed mPersistence(IoCScoreEffect mPersistence)

    • getMPersistence

      @Nullable public IoCScoreEffect getMPersistence()
      Effect of a scoring factor on the indicator's threat score.
      Returns:
      mPersistence

    • setMPersistence

      public void setMPersistence(IoCScoreEffect mPersistence)

    • mSignal

      public IoCIndicatorDetailed mSignal(IoCScoreEffect mSignal)

    • getMSignal

      @Nullable public IoCScoreEffect getMSignal()
      Effect of a scoring factor on the indicator's threat score.
      Returns:
      mSignal

    • setMSignal

      public void setMSignal(IoCScoreEffect mSignal)

    • mSources

      public IoCIndicatorDetailed mSources(IoCScoreEffect mSources)

    • getMSources

      @Nullable public IoCScoreEffect getMSources()
      Effect of a scoring factor on the indicator's threat score.
      Returns:
      mSources

    • setMSources

      public void setMSources(IoCScoreEffect mSources)

    • maliciousSources

      public IoCIndicatorDetailed maliciousSources(List<IoCSource> maliciousSources)

    • addMaliciousSourcesItem

      public IoCIndicatorDetailed addMaliciousSourcesItem(IoCSource maliciousSourcesItem)

    • getMaliciousSources

      @Nullable public List<IoCSource> getMaliciousSources()
      Threat intelligence sources that flagged this indicator as malicious.
      Returns:
      maliciousSources

    • getMaliciousSources_JsonNullable

      public org.openapitools.jackson.nullable.JsonNullable<List<IoCSource>> getMaliciousSources_JsonNullable()

    • setMaliciousSources_JsonNullable

      public void setMaliciousSources_JsonNullable(org.openapitools.jackson.nullable.JsonNullable<List<IoCSource>> maliciousSources)

    • setMaliciousSources

      public void setMaliciousSources(List<IoCSource> maliciousSources)

    • maxTrustScore

      public IoCIndicatorDetailed maxTrustScore(IoCScoreEffect maxTrustScore)

    • getMaxTrustScore

      @Nullable public IoCScoreEffect getMaxTrustScore()
      Effect of a scoring factor on the indicator's threat score.
      Returns:
      maxTrustScore

    • setMaxTrustScore

      public void setMaxTrustScore(IoCScoreEffect maxTrustScore)

    • score

      public IoCIndicatorDetailed score(Double score)

    • getScore

      @Nullable public Double getScore()
      Threat score for the indicator (0-100).
      Returns:
      score

    • setScore

      public void setScore(Double score)

    • services

      public IoCIndicatorDetailed services(List<String> services)

    • addServicesItem

      public IoCIndicatorDetailed addServicesItem(String servicesItem)

    • getServices

      @Nullable public List<String> getServices()
      Services where this indicator was observed.
      Returns:
      services

    • setServices

      public void setServices(List<String> services)

    • signalMatches

      public IoCIndicatorDetailed signalMatches(Long signalMatches)

    • getSignalMatches

      @Nullable public Long getSignalMatches()
      Number of security signals that matched this indicator.
      Returns:
      signalMatches

    • setSignalMatches

      public void setSignalMatches(Long signalMatches)

    • signalSeverity

      public IoCIndicatorDetailed signalSeverity(List<IoCSignalSeverityCount> signalSeverity)

    • addSignalSeverityItem

      public IoCIndicatorDetailed addSignalSeverityItem(IoCSignalSeverityCount signalSeverityItem)

    • getSignalSeverity

      @Nullable public List<IoCSignalSeverityCount> getSignalSeverity()
      Breakdown of security signals by severity.
      Returns:
      signalSeverity

    • setSignalSeverity

      public void setSignalSeverity(List<IoCSignalSeverityCount> signalSeverity)

    • signalTier

      public IoCIndicatorDetailed signalTier(Long signalTier)

    • getSignalTier

      @Nullable public Long getSignalTier()
      Signal tier level.
      Returns:
      signalTier

    • setSignalTier

      public void setSignalTier(Long signalTier)

    • suspiciousSources

      public IoCIndicatorDetailed suspiciousSources(List<IoCSource> suspiciousSources)

    • addSuspiciousSourcesItem

      public IoCIndicatorDetailed addSuspiciousSourcesItem(IoCSource suspiciousSourcesItem)

    • getSuspiciousSources

      @Nullable public List<IoCSource> getSuspiciousSources()
      Threat intelligence sources that flagged this indicator as suspicious.
      Returns:
      suspiciousSources

    • getSuspiciousSources_JsonNullable

      public org.openapitools.jackson.nullable.JsonNullable<List<IoCSource>> getSuspiciousSources_JsonNullable()

    • setSuspiciousSources_JsonNullable

      public void setSuspiciousSources_JsonNullable(org.openapitools.jackson.nullable.JsonNullable<List<IoCSource>> suspiciousSources)

    • setSuspiciousSources

      public void setSuspiciousSources(List<IoCSource> suspiciousSources)

    • tags

      public IoCIndicatorDetailed tags(List<String> tags)

    • addTagsItem

      public IoCIndicatorDetailed addTagsItem(String tagsItem)

    • getTags

      @Nullable public List<String> getTags()
      Tags associated with the indicator.
      Returns:
      tags

    • setTags

      public void setTags(List<String> tags)

    • triageHistory

      public IoCIndicatorDetailed triageHistory(List<IoCTriageEvent> triageHistory)

    • addTriageHistoryItem

      public IoCIndicatorDetailed addTriageHistoryItem(IoCTriageEvent triageHistoryItem)

    • getTriageHistory

      @Nullable public List<IoCTriageEvent> getTriageHistory()
      Full triage history timeline. Returned only when include_triage_history is true.
      Returns:
      triageHistory

    • setTriageHistory

      public void setTriageHistory(List<IoCTriageEvent> triageHistory)

    • triageState

      public IoCIndicatorDetailed triageState(IoCTriageState triageState)

    • getTriageState

      @Nullable public IoCTriageState getTriageState()
      Current triage state of the indicator.
      Returns:
      triageState

    • setTriageState

      public void setTriageState(IoCTriageState triageState)

    • triagedAt

      public IoCIndicatorDetailed triagedAt(OffsetDateTime triagedAt)

    • getTriagedAt

      @Nullable public OffsetDateTime getTriagedAt()
      Timestamp when the indicator was last triaged.
      Returns:
      triagedAt

    • setTriagedAt

      public void setTriagedAt(OffsetDateTime triagedAt)

    • triagedBy

      public IoCIndicatorDetailed triagedBy(String triagedBy)

    • getTriagedBy

      @Nullable public String getTriagedBy()
      UUID of the user who last triaged the indicator.
      Returns:
      triagedBy

    • setTriagedBy

      public void setTriagedBy(String triagedBy)

    • users

      public IoCIndicatorDetailed users(Map<String,List<String>> users)

    • putUsersItem

      public IoCIndicatorDetailed putUsersItem(String key, List<String> usersItem)

    • getUsers

      @Nullable public Map<String,List<String>> getUsers()
      Users associated with this indicator, grouped by category.
      Returns:
      users

    • setUsers

      public void setUsers(Map<String,List<String>> users)

    • putAdditionalProperty

      public IoCIndicatorDetailed putAdditionalProperty(String key, Object value)
      Set the additional (undeclared) property with the specified name and value. If the property does not already exist, create it otherwise replace it.
      Parameters:
      key - The arbitrary key to set
      value - The associated value
      Returns:
      IoCIndicatorDetailed

    • getAdditionalProperties

      public Map<String,Object> getAdditionalProperties()
      Return the additional (undeclared) property.
      Returns:
      The additional properties

    • getAdditionalProperty

      public Object getAdditionalProperty(String key)
      Return the additional (undeclared) property with the specified name.
      Parameters:
      key - The arbitrary key to get
      Returns:
      The specific additional property for the given key

    • equals

      public boolean equals(Object o)
      Return true if this IoCIndicatorDetailed object is equal to o.
      Overrides:
      equals in class Object

    • hashCode

      public int hashCode()
      Overrides:
      hashCode in class Object

    • toString

      public String toString()
      Overrides:
      toString in class Object