Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::Artifact.
Information about an artifact. The artifact can only be an IP.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#anonymous
def anonymous() -> ::Boolean
Returns
- (::Boolean) — Whether the VPN tunnels are configured for anonymous browsing or not.
#anonymous=
def anonymous=(value) -> ::Boolean
Parameter
- value (::Boolean) — Whether the VPN tunnels are configured for anonymous browsing or not.
Returns
- (::Boolean) — Whether the VPN tunnels are configured for anonymous browsing or not.
#artifact_client
def artifact_client() -> ::Google::Backstory::ArtifactClient
Returns
- (::Google::Backstory::ArtifactClient) — Entity or software accessing or utilizing network resources.
#artifact_client=
def artifact_client=(value) -> ::Google::Backstory::ArtifactClient
Parameter
- value (::Google::Backstory::ArtifactClient) — Entity or software accessing or utilizing network resources.
Returns
- (::Google::Backstory::ArtifactClient) — Entity or software accessing or utilizing network resources.
#as_owner
def as_owner() -> ::String
Returns
- (::String) — Owner of the Autonomous System to which the IP address belongs.
#as_owner=
def as_owner=(value) -> ::String
Parameter
- value (::String) — Owner of the Autonomous System to which the IP address belongs.
Returns
- (::String) — Owner of the Autonomous System to which the IP address belongs.
#asn
def asn() -> ::Integer
Returns
- (::Integer) — Autonomous System Number to which the IP address belongs.
#asn=
def asn=(value) -> ::Integer
Parameter
- value (::Integer) — Autonomous System Number to which the IP address belongs.
Returns
- (::Integer) — Autonomous System Number to which the IP address belongs.
#first_seen_time
def first_seen_time() -> ::Google::Protobuf::Timestamp
Returns
- (::Google::Protobuf::Timestamp) — First seen timestamp of the IP in the customer's environment.
#first_seen_time=
def first_seen_time=(value) -> ::Google::Protobuf::Timestamp
Parameter
- value (::Google::Protobuf::Timestamp) — First seen timestamp of the IP in the customer's environment.
Returns
- (::Google::Protobuf::Timestamp) — First seen timestamp of the IP in the customer's environment.
#ip
def ip() -> ::String
Returns
- (::String) — IP address of the artifact. This field can be used as an entity indicator for an external destination IP entity.
#ip=
def ip=(value) -> ::String
Parameter
- value (::String) — IP address of the artifact. This field can be used as an entity indicator for an external destination IP entity.
Returns
- (::String) — IP address of the artifact. This field can be used as an entity indicator for an external destination IP entity.
#jarm
def jarm() -> ::String
Returns
- (::String) — The JARM hash for the IP address. (https://engineering.salesforce.com/easily-identify-malicious-servers-on-the-internet-with-jarm-e095edac525a).
#jarm=
def jarm=(value) -> ::String
Parameter
- value (::String) — The JARM hash for the IP address. (https://engineering.salesforce.com/easily-identify-malicious-servers-on-the-internet-with-jarm-e095edac525a).
Returns
- (::String) — The JARM hash for the IP address. (https://engineering.salesforce.com/easily-identify-malicious-servers-on-the-internet-with-jarm-e095edac525a).
#last_https_certificate
def last_https_certificate() -> ::Google::Backstory::SSLCertificate
Returns
- (::Google::Backstory::SSLCertificate) — SSL certificate information about the IP address.
#last_https_certificate=
def last_https_certificate=(value) -> ::Google::Backstory::SSLCertificate
Parameter
- value (::Google::Backstory::SSLCertificate) — SSL certificate information about the IP address.
Returns
- (::Google::Backstory::SSLCertificate) — SSL certificate information about the IP address.
#last_https_certificate_date
def last_https_certificate_date() -> ::Google::Protobuf::Timestamp
Returns
- (::Google::Protobuf::Timestamp) — Most recent date for the certificate in VirusTotal.
#last_https_certificate_date=
def last_https_certificate_date=(value) -> ::Google::Protobuf::Timestamp
Parameter
- value (::Google::Protobuf::Timestamp) — Most recent date for the certificate in VirusTotal.
Returns
- (::Google::Protobuf::Timestamp) — Most recent date for the certificate in VirusTotal.
#last_seen_time
def last_seen_time() -> ::Google::Protobuf::Timestamp
Returns
- (::Google::Protobuf::Timestamp) — Last seen timestamp of the IP address in the customer's environment.
#last_seen_time=
def last_seen_time=(value) -> ::Google::Protobuf::Timestamp
Parameter
- value (::Google::Protobuf::Timestamp) — Last seen timestamp of the IP address in the customer's environment.
Returns
- (::Google::Protobuf::Timestamp) — Last seen timestamp of the IP address in the customer's environment.
#location
def location() -> ::Google::Backstory::Location
Returns
- (::Google::Backstory::Location) — Location of the Artifact's IP address.
#location=
def location=(value) -> ::Google::Backstory::Location
Parameter
- value (::Google::Backstory::Location) — Location of the Artifact's IP address.
Returns
- (::Google::Backstory::Location) — Location of the Artifact's IP address.
#network
def network() -> ::Google::Backstory::Network
Returns
- (::Google::Backstory::Network) — Network information related to the Artifact's IP address.
#network=
def network=(value) -> ::Google::Backstory::Network
Parameter
- value (::Google::Backstory::Network) — Network information related to the Artifact's IP address.
Returns
- (::Google::Backstory::Network) — Network information related to the Artifact's IP address.
#prevalence
def prevalence() -> ::Google::Backstory::Prevalence
Returns
- (::Google::Backstory::Prevalence) — The prevalence of the artifact within the customer's environment.
#prevalence=
def prevalence=(value) -> ::Google::Backstory::Prevalence
Parameter
- value (::Google::Backstory::Prevalence) — The prevalence of the artifact within the customer's environment.
Returns
- (::Google::Backstory::Prevalence) — The prevalence of the artifact within the customer's environment.
#regional_internet_registry
def regional_internet_registry() -> ::String
Returns
- (::String) — RIR (one of the current RIRs: AFRINIC, ARIN, APNIC, LACNIC or RIPE NCC).
#regional_internet_registry=
def regional_internet_registry=(value) -> ::String
Parameter
- value (::String) — RIR (one of the current RIRs: AFRINIC, ARIN, APNIC, LACNIC or RIPE NCC).
Returns
- (::String) — RIR (one of the current RIRs: AFRINIC, ARIN, APNIC, LACNIC or RIPE NCC).
#risks
def risks() -> ::Array<::String>
Returns
- (::Array<::String>) — This field lists potential risks associated with the network activity.
#risks=
def risks=(value) -> ::Array<::String>
Parameter
- value (::Array<::String>) — This field lists potential risks associated with the network activity.
Returns
- (::Array<::String>) — This field lists potential risks associated with the network activity.
#tags
def tags() -> ::Array<::String>
Returns
- (::Array<::String>) — Identification attributes
#tags=
def tags=(value) -> ::Array<::String>
Parameter
- value (::Array<::String>) — Identification attributes
Returns
- (::Array<::String>) — Identification attributes
#tunnels
def tunnels() -> ::Array<::Google::Backstory::Tunnels>
Returns
- (::Array<::Google::Backstory::Tunnels>) — VPN tunnels.
#tunnels=
def tunnels=(value) -> ::Array<::Google::Backstory::Tunnels>
Parameter
- value (::Array<::Google::Backstory::Tunnels>) — VPN tunnels.
Returns
- (::Array<::Google::Backstory::Tunnels>) — VPN tunnels.
#whois
def whois() -> ::String
Returns
- (::String) — WHOIS information as returned from the pertinent WHOIS server.
#whois=
def whois=(value) -> ::String
Parameter
- value (::String) — WHOIS information as returned from the pertinent WHOIS server.
Returns
- (::String) — WHOIS information as returned from the pertinent WHOIS server.
#whois_date
def whois_date() -> ::Google::Protobuf::Timestamp
Returns
- (::Google::Protobuf::Timestamp) — Date of the last update of the WHOIS record in VirusTotal.
#whois_date=
def whois_date=(value) -> ::Google::Protobuf::Timestamp
Parameter
- value (::Google::Protobuf::Timestamp) — Date of the last update of the WHOIS record in VirusTotal.
Returns
- (::Google::Protobuf::Timestamp) — Date of the last update of the WHOIS record in VirusTotal.