Interface AtiPrioritizationOrBuilder (0.3.0)

public interface AtiPrioritizationOrBuilder extends MessageOrBuilder

Implements

MessageOrBuilder

Methods

getActiveIr()

public abstract boolean getActiveIr()

Whether one or more Mandiant incident response customers had this indicator in their environment.

bool active_ir = 6;

Returns
Type	Description
`boolean`	The activeIr.

getActiveIrFirstTaggedTime()

public abstract Timestamp getActiveIrFirstTaggedTime()

The timestamp of the first time an active IR was applied to this entity.

.google.protobuf.Timestamp active_ir_first_tagged_time = 7;

Returns
Type	Description
`Timestamp`	The activeIrFirstTaggedTime.

getActiveIrFirstTaggedTimeOrBuilder()

public abstract TimestampOrBuilder getActiveIrFirstTaggedTimeOrBuilder()

The timestamp of the first time an active IR was applied to this entity.

.google.protobuf.Timestamp active_ir_first_tagged_time = 7;

Returns
Type	Description
`TimestampOrBuilder`

getAttributedMalware(int index)

public abstract SecurityResult.Association getAttributedMalware(int index)

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Parameter
Name	Description
`index`	`int`

Returns
Type	Description
`SecurityResult.Association`

getAttributedMalwareCount()

public abstract int getAttributedMalwareCount()

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Returns
Type	Description
`int`

getAttributedMalwareList()

public abstract List<SecurityResult.Association> getAttributedMalwareList()

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Returns
Type	Description
`List<Association>`

getAttributedMalwareOrBuilder(int index)

public abstract SecurityResult.AssociationOrBuilder getAttributedMalwareOrBuilder(int index)

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Parameter
Name	Description
`index`	`int`

Returns
Type	Description
`SecurityResult.AssociationOrBuilder`

getAttributedMalwareOrBuilderList()

public abstract List<? extends SecurityResult.AssociationOrBuilder> getAttributedMalwareOrBuilderList()

Malware families associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_malware = 14;

Returns
Type	Description
`List<? extends com.google.backstory.SecurityResult.AssociationOrBuilder>`

getAttributedThreatActors(int index)

public abstract SecurityResult.Association getAttributedThreatActors(int index)

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Parameter
Name	Description
`index`	`int`

Returns
Type	Description
`SecurityResult.Association`

getAttributedThreatActorsCount()

public abstract int getAttributedThreatActorsCount()

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Returns
Type	Description
`int`

getAttributedThreatActorsList()

public abstract List<SecurityResult.Association> getAttributedThreatActorsList()

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Returns
Type	Description
`List<Association>`

getAttributedThreatActorsOrBuilder(int index)

public abstract SecurityResult.AssociationOrBuilder getAttributedThreatActorsOrBuilder(int index)

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Parameter
Name	Description
`index`	`int`

Returns
Type	Description
`SecurityResult.AssociationOrBuilder`

getAttributedThreatActorsOrBuilderList()

public abstract List<? extends SecurityResult.AssociationOrBuilder> getAttributedThreatActorsOrBuilderList()

Threat actors associated with this indicator.

repeated .google.backstory.SecurityResult.Association attributed_threat_actors = 15;

Returns
Type	Description
`List<? extends com.google.backstory.SecurityResult.AssociationOrBuilder>`

getExclusive()

public abstract boolean getExclusive()

Whether the indicator is being used by a maximum of one threat actor.

bool exclusive = 10;

Returns
Type	Description
`boolean`	The exclusive.

getGlobalCustomerCount()

public abstract long getGlobalCustomerCount()

Global customer count over the last 30 days

int64 global_customer_count = 8;

Returns
Type	Description
`long`	The globalCustomerCount.

getGlobalHitCount()

public abstract long getGlobalHitCount()

Global hit count over the last 30 days

int64 global_hit_count = 9;

Returns
Type	Description
`long`	The globalHitCount.

getGtiSeverity()

public abstract int getGtiSeverity()

The confidence score from "GTI severity" source.

int32 gti_severity = 2;

Returns
Type	Description
`int`	The gtiSeverity.

getGtiThreatScore()

public abstract int getGtiThreatScore()

The confidence score from "GTI threat score" source.

int32 gti_threat_score = 3;

Returns
Type	Description
`int`	The gtiThreatScore.

getGtiUpdateTime()

public abstract Timestamp getGtiUpdateTime()

Timestamp of the latest update for GTI verdict, severity, or threat score.

.google.protobuf.Timestamp gti_update_time = 5;

Returns
Type	Description
`Timestamp`	The gtiUpdateTime.

getGtiUpdateTimeOrBuilder()

public abstract TimestampOrBuilder getGtiUpdateTimeOrBuilder()

Timestamp of the latest update for GTI verdict, severity, or threat score.

.google.protobuf.Timestamp gti_update_time = 5;

Returns
Type	Description
`TimestampOrBuilder`

getGtiVerdict()

public abstract int getGtiVerdict()

The confidence score from "GTI verdict" source.

int32 gti_verdict = 1;

Returns
Type	Description
`int`	The gtiVerdict.

getMandiantAnalystConfidence()

public abstract int getMandiantAnalystConfidence()

The confidence score from "Mandiant Analyst Intel" source.

int32 mandiant_analyst_confidence = 4;

Returns
Type	Description
`int`	The mandiantAnalystConfidence.

getOsint()

public abstract boolean getOsint()

Whether the indicator details are available in open source.

bool osint = 11;

Returns
Type	Description
`boolean`	The osint.

getReviewed()

public abstract boolean getReviewed()

Whether the indicator verdict has passed review.

bool reviewed = 13;

Returns
Type	Description
`boolean`	The reviewed.

getScanner()

public abstract boolean getScanner()

Whether the indicator is a scanner.

bool scanner = 12;

Returns
Type	Description
`boolean`	The scanner.

hasActiveIrFirstTaggedTime()

public abstract boolean hasActiveIrFirstTaggedTime()

The timestamp of the first time an active IR was applied to this entity.

.google.protobuf.Timestamp active_ir_first_tagged_time = 7;

Returns
Type	Description
`boolean`	Whether the activeIrFirstTaggedTime field is set.

hasGtiUpdateTime()

public abstract boolean hasGtiUpdateTime()

Timestamp of the latest update for GTI verdict, severity, or threat score.

.google.protobuf.Timestamp gti_update_time = 5;

Returns
Type	Description
`boolean`	Whether the gtiUpdateTime field is set.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-08-06 UTC.