Chronicle V1 API - Class Google::Backstory::SecurityResult::VerdictInfo (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::SecurityResult::VerdictInfo.

Describes the threat verdict provided by human analysts and machine learning models. These fields are used to model Mandiant sources.

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#benign_count

def benign_count() -> ::Integer
Returns
  • (::Integer) — Count of responses where this IoC was marked as benign.

#benign_count=

def benign_count=(value) -> ::Integer
Parameter
  • value (::Integer) — Count of responses where this IoC was marked as benign.
Returns
  • (::Integer) — Count of responses where this IoC was marked as benign.

#category_details

def category_details() -> ::String
Returns
  • (::String) — Tags related to the verdict.

#category_details=

def category_details=(value) -> ::String
Parameter
  • value (::String) — Tags related to the verdict.
Returns
  • (::String) — Tags related to the verdict.

#confidence_score

def confidence_score() -> ::Integer
Returns
  • (::Integer) — Confidence score of the verdict.

#confidence_score=

def confidence_score=(value) -> ::Integer
Parameter
  • value (::Integer) — Confidence score of the verdict.
Returns
  • (::Integer) — Confidence score of the verdict.

#global_customer_count

def global_customer_count() -> ::Integer
Returns
  • (::Integer) — Global customer count over the last 30 days

#global_customer_count=

def global_customer_count=(value) -> ::Integer
Parameter
  • value (::Integer) — Global customer count over the last 30 days
Returns
  • (::Integer) — Global customer count over the last 30 days

#global_hits_count

def global_hits_count() -> ::Integer
Returns
  • (::Integer) — Global hit count over the last 30 days.

#global_hits_count=

def global_hits_count=(value) -> ::Integer
Parameter
  • value (::Integer) — Global hit count over the last 30 days.
Returns
  • (::Integer) — Global hit count over the last 30 days.

#ioc_stats

def ioc_stats() -> ::Array<::Google::Backstory::SecurityResult::IoCStats>
Returns

#ioc_stats=

def ioc_stats=(value) -> ::Array<::Google::Backstory::SecurityResult::IoCStats>
Parameter
Returns

#malicious_count

def malicious_count() -> ::Integer
Returns
  • (::Integer) — Count of responses where this IoC was marked as malicious.

#malicious_count=

def malicious_count=(value) -> ::Integer
Parameter
  • value (::Integer) — Count of responses where this IoC was marked as malicious.
Returns
  • (::Integer) — Count of responses where this IoC was marked as malicious.

#neighbour_influence

def neighbour_influence() -> ::String
Returns
  • (::String) — Describes the near neighbor influence of the verdict.

#neighbour_influence=

def neighbour_influence=(value) -> ::String
Parameter
  • value (::String) — Describes the near neighbor influence of the verdict.
Returns
  • (::String) — Describes the near neighbor influence of the verdict.

#pwn

def pwn() -> ::Boolean
Returns
  • (::Boolean) — Whether one or more Mandiant incident response customers had this indicator in their environment.

#pwn=

def pwn=(value) -> ::Boolean
Parameter
  • value (::Boolean) — Whether one or more Mandiant incident response customers had this indicator in their environment.
Returns
  • (::Boolean) — Whether one or more Mandiant incident response customers had this indicator in their environment.

#pwn_first_tagged_time

def pwn_first_tagged_time() -> ::Google::Protobuf::Timestamp
Returns

#pwn_first_tagged_time=

def pwn_first_tagged_time=(value) -> ::Google::Protobuf::Timestamp
Parameter
Returns

#response_count

def response_count() -> ::Integer
Returns
  • (::Integer) — Total response count across all sources.

#response_count=

def response_count=(value) -> ::Integer
Parameter
  • value (::Integer) — Total response count across all sources.
Returns
  • (::Integer) — Total response count across all sources.

#source_count

def source_count() -> ::Integer
Returns
  • (::Integer) — Number of sources from which intelligence was extracted.

#source_count=

def source_count=(value) -> ::Integer
Parameter
  • value (::Integer) — Number of sources from which intelligence was extracted.
Returns
  • (::Integer) — Number of sources from which intelligence was extracted.

#source_provider

def source_provider() -> ::String
Returns
  • (::String) — Source provider giving the machine learning verdict.

#source_provider=

def source_provider=(value) -> ::String
Parameter
  • value (::String) — Source provider giving the machine learning verdict.
Returns
  • (::String) — Source provider giving the machine learning verdict.

#verdict_response

def verdict_response() -> ::Google::Backstory::SecurityResult::VerdictResponse
Returns

#verdict_response=

def verdict_response=(value) -> ::Google::Backstory::SecurityResult::VerdictResponse
Parameter
Returns

#verdict_time

def verdict_time() -> ::Google::Protobuf::Timestamp
Returns

#verdict_time=

def verdict_time=(value) -> ::Google::Protobuf::Timestamp
Parameter
Returns

#verdict_type

def verdict_type() -> ::Google::Backstory::SecurityResult::VerdictType
Returns

#verdict_type=

def verdict_type=(value) -> ::Google::Backstory::SecurityResult::VerdictType
Parameter
Returns