Class AtiPrioritization (0.3.0)

public final class AtiPrioritization extends GeneratedMessage implements AtiPrioritizationOrBuilder

AtiPrioritization contains various fields used to calculate a priority score for an entity identified as a threat.

Protobuf type google.backstory.AtiPrioritization

Static Fields

ACTIVE_IR_FIELD_NUMBER

public static final int ACTIVE_IR_FIELD_NUMBER
Field Value
Type Description
int

ACTIVE_IR_FIRST_TAGGED_TIME_FIELD_NUMBER

public static final int ACTIVE_IR_FIRST_TAGGED_TIME_FIELD_NUMBER
Field Value
Type Description
int

ATTRIBUTED_MALWARE_FIELD_NUMBER

public static final int ATTRIBUTED_MALWARE_FIELD_NUMBER
Field Value
Type Description
int

ATTRIBUTED_THREAT_ACTORS_FIELD_NUMBER

public static final int ATTRIBUTED_THREAT_ACTORS_FIELD_NUMBER
Field Value
Type Description
int

EXCLUSIVE_FIELD_NUMBER

public static final int EXCLUSIVE_FIELD_NUMBER
Field Value
Type Description
int

GLOBAL_CUSTOMER_COUNT_FIELD_NUMBER

public static final int GLOBAL_CUSTOMER_COUNT_FIELD_NUMBER
Field Value
Type Description
int

GLOBAL_HIT_COUNT_FIELD_NUMBER

public static final int GLOBAL_HIT_COUNT_FIELD_NUMBER
Field Value
Type Description
int

GTI_SEVERITY_FIELD_NUMBER

public static final int GTI_SEVERITY_FIELD_NUMBER
Field Value
Type Description
int

GTI_THREAT_SCORE_FIELD_NUMBER

public static final int GTI_THREAT_SCORE_FIELD_NUMBER
Field Value
Type Description
int

GTI_UPDATE_TIME_FIELD_NUMBER

public static final int GTI_UPDATE_TIME_FIELD_NUMBER
Field Value
Type Description
int

GTI_VERDICT_FIELD_NUMBER

public static final int GTI_VERDICT_FIELD_NUMBER
Field Value
Type Description
int

MANDIANT_ANALYST_CONFIDENCE_FIELD_NUMBER

public static final int MANDIANT_ANALYST_CONFIDENCE_FIELD_NUMBER
Field Value
Type Description
int

OSINT_FIELD_NUMBER

public static final int OSINT_FIELD_NUMBER
Field Value
Type Description
int

REVIEWED_FIELD_NUMBER

public static final int REVIEWED_FIELD_NUMBER
Field Value
Type Description
int

SCANNER_FIELD_NUMBER

public static final int SCANNER_FIELD_NUMBER
Field Value
Type Description
int

Static Methods

getDefaultInstance()

public static AtiPrioritization getDefaultInstance()
Returns
Type Description
AtiPrioritization

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()
Returns
Type Description
Descriptor

newBuilder()

public static AtiPrioritization.Builder newBuilder()
Returns
Type Description
AtiPrioritization.Builder

newBuilder(AtiPrioritization prototype)

public static AtiPrioritization.Builder newBuilder(AtiPrioritization prototype)
Parameter
Name Description
prototype AtiPrioritization
Returns
Type Description
AtiPrioritization.Builder

parseDelimitedFrom(InputStream input)

public static AtiPrioritization parseDelimitedFrom(InputStream input)
Parameter
Name Description
input InputStream
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
IOException

parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static AtiPrioritization parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input InputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
IOException

parseFrom(byte[] data)

public static AtiPrioritization parseFrom(byte[] data)
Parameter
Name Description
data byte[]
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

public static AtiPrioritization parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data byte[]
extensionRegistry ExtensionRegistryLite
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteString data)

public static AtiPrioritization parseFrom(ByteString data)
Parameter
Name Description
data ByteString
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

public static AtiPrioritization parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data ByteString
extensionRegistry ExtensionRegistryLite
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(CodedInputStream input)

public static AtiPrioritization parseFrom(CodedInputStream input)
Parameter
Name Description
input CodedInputStream
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
IOException

parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public static AtiPrioritization parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input CodedInputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
IOException

parseFrom(InputStream input)

public static AtiPrioritization parseFrom(InputStream input)
Parameter
Name Description
input InputStream
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
IOException

parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static AtiPrioritization parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input InputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
IOException

parseFrom(ByteBuffer data)

public static AtiPrioritization parseFrom(ByteBuffer data)
Parameter
Name Description
data ByteBuffer
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

public static AtiPrioritization parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data ByteBuffer
extensionRegistry ExtensionRegistryLite
Returns
Type Description
AtiPrioritization
Exceptions
Type Description
InvalidProtocolBufferException

parser()

public static Parser<AtiPrioritization> parser()
Returns
Type Description
Parser<AtiPrioritization>

Methods

equals(Object obj)

public boolean equals(Object obj)
Parameter
Name Description
obj Object
Returns
Type Description
boolean
Overrides

getActiveIr()

public boolean getActiveIr()

Whether one or more Mandiant incident response customers had this indicator in their environment.

bool active_ir = 6;

Returns
Type Description
boolean

The activeIr.

getActiveIrFirstTaggedTime()

public Timestamp getActiveIrFirstTaggedTime()

The timestamp of the first time an active IR was applied to this entity.

.google.protobuf.Timestamp active_ir_first_tagged_time = 7;

Returns
Type Description
Timestamp

The activeIrFirstTaggedTime.

getActiveIrFirstTaggedTimeOrBuilder()

public TimestampOrBuilder getActiveIrFirstTaggedTimeOrBuilder()

The timestamp of the first time an active IR was applied to this entity.

.google.protobuf.Timestamp active_ir_first_tagged_time = 7;

Returns
Type Description
TimestampOrBuilder

getAttributedMalware(int index)

public SecurityResult.Association getAttributedMalware(int index)

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Parameter
Name Description
index int
Returns
Type Description
SecurityResult.Association

getAttributedMalwareCount()

public int getAttributedMalwareCount()

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Returns
Type Description
int

getAttributedMalwareList()

public List<SecurityResult.Association> getAttributedMalwareList()

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Returns
Type Description
List<Association>

getAttributedMalwareOrBuilder(int index)

public SecurityResult.AssociationOrBuilder getAttributedMalwareOrBuilder(int index)

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Parameter
Name Description
index int
Returns
Type Description
SecurityResult.AssociationOrBuilder

getAttributedMalwareOrBuilderList()

public List<? extends SecurityResult.AssociationOrBuilder> getAttributedMalwareOrBuilderList()

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Returns
Type Description
List<? extends com.google.backstory.SecurityResult.AssociationOrBuilder>

getAttributedThreatActors(int index)

public SecurityResult.Association getAttributedThreatActors(int index)

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Parameter
Name Description
index int
Returns
Type Description
SecurityResult.Association

getAttributedThreatActorsCount()

public int getAttributedThreatActorsCount()

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Returns
Type Description
int

getAttributedThreatActorsList()

public List<SecurityResult.Association> getAttributedThreatActorsList()

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Returns
Type Description
List<Association>

getAttributedThreatActorsOrBuilder(int index)

public SecurityResult.AssociationOrBuilder getAttributedThreatActorsOrBuilder(int index)

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Parameter
Name Description
index int
Returns
Type Description
SecurityResult.AssociationOrBuilder

getAttributedThreatActorsOrBuilderList()

public List<? extends SecurityResult.AssociationOrBuilder> getAttributedThreatActorsOrBuilderList()

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Returns
Type Description
List<? extends com.google.backstory.SecurityResult.AssociationOrBuilder>

getDefaultInstanceForType()

public AtiPrioritization getDefaultInstanceForType()
Returns
Type Description
AtiPrioritization

getExclusive()

public boolean getExclusive()

Whether the indicator is being used by a maximum of one threat actor.

bool exclusive = 10;

Returns
Type Description
boolean

The exclusive.

getGlobalCustomerCount()

public long getGlobalCustomerCount()

Global customer count over the last 30 days

int64 global_customer_count = 8;

Returns
Type Description
long

The globalCustomerCount.

getGlobalHitCount()

public long getGlobalHitCount()

Global hit count over the last 30 days

int64 global_hit_count = 9;

Returns
Type Description
long

The globalHitCount.

getGtiSeverity()

public int getGtiSeverity()

The confidence score from "GTI severity" source.

int32 gti_severity = 2;

Returns
Type Description
int

The gtiSeverity.

getGtiThreatScore()

public int getGtiThreatScore()

The confidence score from "GTI threat score" source.

int32 gti_threat_score = 3;

Returns
Type Description
int

The gtiThreatScore.

getGtiUpdateTime()

public Timestamp getGtiUpdateTime()

Timestamp of the latest update for GTI verdict, severity, or threat score.

.google.protobuf.Timestamp gti_update_time = 5;

Returns
Type Description
Timestamp

The gtiUpdateTime.

getGtiUpdateTimeOrBuilder()

public TimestampOrBuilder getGtiUpdateTimeOrBuilder()

Timestamp of the latest update for GTI verdict, severity, or threat score.

.google.protobuf.Timestamp gti_update_time = 5;

Returns
Type Description
TimestampOrBuilder

getGtiVerdict()

public int getGtiVerdict()

The confidence score from "GTI verdict" source.

int32 gti_verdict = 1;

Returns
Type Description
int

The gtiVerdict.

getMandiantAnalystConfidence()

public int getMandiantAnalystConfidence()

The confidence score from "Mandiant Analyst Intel" source.

int32 mandiant_analyst_confidence = 4;

Returns
Type Description
int

The mandiantAnalystConfidence.

getOsint()

public boolean getOsint()

Whether the indicator details are available in open source.

bool osint = 11;

Returns
Type Description
boolean

The osint.

getParserForType()

public Parser<AtiPrioritization> getParserForType()
Returns
Type Description
Parser<AtiPrioritization>
Overrides

getReviewed()

public boolean getReviewed()

Whether the indicator verdict has passed review.

bool reviewed = 13;

Returns
Type Description
boolean

The reviewed.

getScanner()

public boolean getScanner()

Whether the indicator is a scanner.

bool scanner = 12;

Returns
Type Description
boolean

The scanner.

getSerializedSize()

public int getSerializedSize()
Returns
Type Description
int
Overrides

hasActiveIrFirstTaggedTime()

public boolean hasActiveIrFirstTaggedTime()

The timestamp of the first time an active IR was applied to this entity.

.google.protobuf.Timestamp active_ir_first_tagged_time = 7;

Returns
Type Description
boolean

Whether the activeIrFirstTaggedTime field is set.

hasGtiUpdateTime()

public boolean hasGtiUpdateTime()

Timestamp of the latest update for GTI verdict, severity, or threat score.

.google.protobuf.Timestamp gti_update_time = 5;

Returns
Type Description
boolean

Whether the gtiUpdateTime field is set.

hashCode()

public int hashCode()
Returns
Type Description
int
Overrides

internalGetFieldAccessorTable()

protected GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Type Description
FieldAccessorTable
Overrides

isInitialized()

public final boolean isInitialized()
Returns
Type Description
boolean
Overrides

newBuilderForType()

public AtiPrioritization.Builder newBuilderForType()
Returns
Type Description
AtiPrioritization.Builder

newBuilderForType(AbstractMessage.BuilderParent parent)

protected AtiPrioritization.Builder newBuilderForType(AbstractMessage.BuilderParent parent)
Parameter
Name Description
parent BuilderParent
Returns
Type Description
AtiPrioritization.Builder
Overrides

toBuilder()

public AtiPrioritization.Builder toBuilder()
Returns
Type Description
AtiPrioritization.Builder

writeTo(CodedOutputStream output)

public void writeTo(CodedOutputStream output)
Parameter
Name Description
output CodedOutputStream
Overrides
Exceptions
Type Description
IOException