public final class AtiPrioritization extends GeneratedMessage implements AtiPrioritizationOrBuilder
AtiPrioritization contains various fields used to calculate a priority score
for an entity identified as a threat.
Protobuf type google.backstory.AtiPrioritization
Inherited Members
com.google.protobuf.GeneratedMessage.<ContainingT,T>newFileScopedGeneratedExtension(java.lang.Class<?>,com.google.protobuf.Message)
com.google.protobuf.GeneratedMessage.<ContainingT,T>newMessageScopedGeneratedExtension(com.google.protobuf.Message,int,java.lang.Class<?>,com.google.protobuf.Message)
com.google.protobuf.GeneratedMessage.<ListT>makeMutableCopy(ListT)
com.google.protobuf.GeneratedMessage.<ListT>makeMutableCopy(ListT,int)
com.google.protobuf.GeneratedMessage.<T>emptyList(java.lang.Class<T>)
com.google.protobuf.GeneratedMessage.<V>serializeBooleanMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.Boolean,V>,com.google.protobuf.MapEntry<java.lang.Boolean,V>,int)
com.google.protobuf.GeneratedMessage.<V>serializeIntegerMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.Integer,V>,com.google.protobuf.MapEntry<java.lang.Integer,V>,int)
com.google.protobuf.GeneratedMessage.<V>serializeLongMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.Long,V>,com.google.protobuf.MapEntry<java.lang.Long,V>,int)
com.google.protobuf.GeneratedMessage.<V>serializeStringMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.String,V>,com.google.protobuf.MapEntry<java.lang.String,V>,int)
com.google.protobuf.GeneratedMessage.canUseUnsafe()
com.google.protobuf.GeneratedMessage.emptyBooleanList()
com.google.protobuf.GeneratedMessage.emptyDoubleList()
com.google.protobuf.GeneratedMessage.emptyFloatList()
com.google.protobuf.GeneratedMessage.emptyIntList()
com.google.protobuf.GeneratedMessage.emptyLongList()
com.google.protobuf.GeneratedMessage.internalGetMapFieldReflection(int)
com.google.protobuf.GeneratedMessage.isStringEmpty(java.lang.Object)
com.google.protobuf.GeneratedMessage.mergeFromAndMakeImmutableInternal(com.google.protobuf.CodedInputStream,com.google.protobuf.ExtensionRegistryLite)
com.google.protobuf.GeneratedMessage.newInstance(com.google.protobuf.GeneratedMessage.UnusedPrivateParameter)
com.google.protobuf.GeneratedMessage.parseUnknownFieldProto3(com.google.protobuf.CodedInputStream,com.google.protobuf.UnknownFieldSet.Builder,com.google.protobuf.ExtensionRegistryLite,int)
Static Fields
ACTIVE_IR_FIELD_NUMBER
public static final int ACTIVE_IR_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
ACTIVE_IR_FIRST_TAGGED_TIME_FIELD_NUMBER
public static final int ACTIVE_IR_FIRST_TAGGED_TIME_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
ATTRIBUTED_MALWARE_FIELD_NUMBER
public static final int ATTRIBUTED_MALWARE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
ATTRIBUTED_THREAT_ACTORS_FIELD_NUMBER
public static final int ATTRIBUTED_THREAT_ACTORS_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
EXCLUSIVE_FIELD_NUMBER
public static final int EXCLUSIVE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
GLOBAL_CUSTOMER_COUNT_FIELD_NUMBER
public static final int GLOBAL_CUSTOMER_COUNT_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
GLOBAL_HIT_COUNT_FIELD_NUMBER
public static final int GLOBAL_HIT_COUNT_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
GTI_SEVERITY_FIELD_NUMBER
public static final int GTI_SEVERITY_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
GTI_THREAT_SCORE_FIELD_NUMBER
public static final int GTI_THREAT_SCORE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
GTI_UPDATE_TIME_FIELD_NUMBER
public static final int GTI_UPDATE_TIME_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
GTI_VERDICT_FIELD_NUMBER
public static final int GTI_VERDICT_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
MANDIANT_ANALYST_CONFIDENCE_FIELD_NUMBER
public static final int MANDIANT_ANALYST_CONFIDENCE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
OSINT_FIELD_NUMBER
public static final int OSINT_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
REVIEWED_FIELD_NUMBER
public static final int REVIEWED_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
SCANNER_FIELD_NUMBER
public static final int SCANNER_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
Static Methods
getDefaultInstance()
public static AtiPrioritization getDefaultInstance()
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
newBuilder()
public static AtiPrioritization.Builder newBuilder()
newBuilder(AtiPrioritization prototype)
public static AtiPrioritization.Builder newBuilder(AtiPrioritization prototype)
parseDelimitedFrom(InputStream input)
public static AtiPrioritization parseDelimitedFrom(InputStream input)
parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static AtiPrioritization parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(byte[] data)
public static AtiPrioritization parseFrom(byte[] data)
| Parameter |
| Name |
Description |
data |
byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static AtiPrioritization parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteString data)
public static AtiPrioritization parseFrom(ByteString data)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static AtiPrioritization parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
parseFrom(CodedInputStream input)
public static AtiPrioritization parseFrom(CodedInputStream input)
parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static AtiPrioritization parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(InputStream input)
public static AtiPrioritization parseFrom(InputStream input)
parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
public static AtiPrioritization parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteBuffer data)
public static AtiPrioritization parseFrom(ByteBuffer data)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static AtiPrioritization parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
parser()
public static Parser<AtiPrioritization> parser()
Methods
equals(Object obj)
public boolean equals(Object obj)
| Parameter |
| Name |
Description |
obj |
Object
|
Overrides
getActiveIr()
public boolean getActiveIr()
Whether one or more Mandiant incident response customers had this indicator
in their environment.
bool active_ir = 6;
| Returns |
| Type |
Description |
boolean |
The activeIr.
|
getActiveIrFirstTaggedTime()
public Timestamp getActiveIrFirstTaggedTime()
The timestamp of the first time an active IR was applied to this entity.
.google.protobuf.Timestamp active_ir_first_tagged_time = 7;
| Returns |
| Type |
Description |
Timestamp |
The activeIrFirstTaggedTime.
|
getActiveIrFirstTaggedTimeOrBuilder()
public TimestampOrBuilder getActiveIrFirstTaggedTimeOrBuilder()
The timestamp of the first time an active IR was applied to this entity.
.google.protobuf.Timestamp active_ir_first_tagged_time = 7;
getAttributedMalware(int index)
public SecurityResult.Association getAttributedMalware(int index)
Malware families associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_malware = 14;
| Parameter |
| Name |
Description |
index |
int
|
getAttributedMalwareCount()
public int getAttributedMalwareCount()
Malware families associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_malware = 14;
| Returns |
| Type |
Description |
int |
|
getAttributedMalwareList()
public List<SecurityResult.Association> getAttributedMalwareList()
Malware families associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_malware = 14;
getAttributedMalwareOrBuilder(int index)
public SecurityResult.AssociationOrBuilder getAttributedMalwareOrBuilder(int index)
Malware families associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_malware = 14;
| Parameter |
| Name |
Description |
index |
int
|
getAttributedMalwareOrBuilderList()
public List<? extends SecurityResult.AssociationOrBuilder> getAttributedMalwareOrBuilderList()
Malware families associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_malware = 14;
| Returns |
| Type |
Description |
List<? extends com.google.backstory.SecurityResult.AssociationOrBuilder> |
|
getAttributedThreatActors(int index)
public SecurityResult.Association getAttributedThreatActors(int index)
Threat actors associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;
| Parameter |
| Name |
Description |
index |
int
|
getAttributedThreatActorsCount()
public int getAttributedThreatActorsCount()
Threat actors associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;
| Returns |
| Type |
Description |
int |
|
getAttributedThreatActorsList()
public List<SecurityResult.Association> getAttributedThreatActorsList()
Threat actors associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;
getAttributedThreatActorsOrBuilder(int index)
public SecurityResult.AssociationOrBuilder getAttributedThreatActorsOrBuilder(int index)
Threat actors associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;
| Parameter |
| Name |
Description |
index |
int
|
getAttributedThreatActorsOrBuilderList()
public List<? extends SecurityResult.AssociationOrBuilder> getAttributedThreatActorsOrBuilderList()
Threat actors associated with this indicator.
repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;
| Returns |
| Type |
Description |
List<? extends com.google.backstory.SecurityResult.AssociationOrBuilder> |
|
getDefaultInstanceForType()
public AtiPrioritization getDefaultInstanceForType()
getExclusive()
public boolean getExclusive()
Whether the indicator is being used by a maximum of one threat actor.
bool exclusive = 10;
| Returns |
| Type |
Description |
boolean |
The exclusive.
|
getGlobalCustomerCount()
public long getGlobalCustomerCount()
Global customer count over the last 30 days
int64 global_customer_count = 8;
| Returns |
| Type |
Description |
long |
The globalCustomerCount.
|
getGlobalHitCount()
public long getGlobalHitCount()
Global hit count over the last 30 days
int64 global_hit_count = 9;
| Returns |
| Type |
Description |
long |
The globalHitCount.
|
getGtiSeverity()
public int getGtiSeverity()
The confidence score from "GTI severity" source.
int32 gti_severity = 2;
| Returns |
| Type |
Description |
int |
The gtiSeverity.
|
getGtiThreatScore()
public int getGtiThreatScore()
The confidence score from "GTI threat score" source.
int32 gti_threat_score = 3;
| Returns |
| Type |
Description |
int |
The gtiThreatScore.
|
getGtiUpdateTime()
public Timestamp getGtiUpdateTime()
Timestamp of the latest update for GTI verdict, severity, or threat score.
.google.protobuf.Timestamp gti_update_time = 5;
| Returns |
| Type |
Description |
Timestamp |
The gtiUpdateTime.
|
getGtiUpdateTimeOrBuilder()
public TimestampOrBuilder getGtiUpdateTimeOrBuilder()
Timestamp of the latest update for GTI verdict, severity, or threat score.
.google.protobuf.Timestamp gti_update_time = 5;
getGtiVerdict()
public int getGtiVerdict()
The confidence score from "GTI verdict" source.
int32 gti_verdict = 1;
| Returns |
| Type |
Description |
int |
The gtiVerdict.
|
getMandiantAnalystConfidence()
public int getMandiantAnalystConfidence()
The confidence score from "Mandiant Analyst Intel" source.
int32 mandiant_analyst_confidence = 4;
| Returns |
| Type |
Description |
int |
The mandiantAnalystConfidence.
|
getOsint()
public boolean getOsint()
Whether the indicator details are available in open source.
bool osint = 11;
| Returns |
| Type |
Description |
boolean |
The osint.
|
getParserForType()
public Parser<AtiPrioritization> getParserForType()
Overrides
getReviewed()
public boolean getReviewed()
Whether the indicator verdict has passed review.
bool reviewed = 13;
| Returns |
| Type |
Description |
boolean |
The reviewed.
|
getScanner()
public boolean getScanner()
Whether the indicator is a scanner.
bool scanner = 12;
| Returns |
| Type |
Description |
boolean |
The scanner.
|
getSerializedSize()
public int getSerializedSize()
| Returns |
| Type |
Description |
int |
|
Overrides
hasActiveIrFirstTaggedTime()
public boolean hasActiveIrFirstTaggedTime()
The timestamp of the first time an active IR was applied to this entity.
.google.protobuf.Timestamp active_ir_first_tagged_time = 7;
| Returns |
| Type |
Description |
boolean |
Whether the activeIrFirstTaggedTime field is set.
|
hasGtiUpdateTime()
public boolean hasGtiUpdateTime()
Timestamp of the latest update for GTI verdict, severity, or threat score.
.google.protobuf.Timestamp gti_update_time = 5;
| Returns |
| Type |
Description |
boolean |
Whether the gtiUpdateTime field is set.
|
hashCode()
| Returns |
| Type |
Description |
int |
|
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
newBuilderForType()
public AtiPrioritization.Builder newBuilderForType()
newBuilderForType(AbstractMessage.BuilderParent parent)
protected AtiPrioritization.Builder newBuilderForType(AbstractMessage.BuilderParent parent)
Overrides
toBuilder()
public AtiPrioritization.Builder toBuilder()
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Overrides