public sealed class Indicator : IMessage<Indicator>, IEquatable<Indicator>, IDeepCloneable<Indicator>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Cloud Security Command Center v1 API class Indicator.
Represents what's commonly known as an indicator of compromise (IoC) in
computer forensics. This is an artifact observed on a network or in an
operating system that, with high confidence, indicates a computer intrusion.
For more information, see Indicator of
compromise.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe webpage provides documentation for the \u003ccode\u003eIndicator\u003c/code\u003e class within the Google Cloud Security Center v1 API, with version 3.18.0 being the currently viewed version and 3.24.0 being the latest version.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eIndicator\u003c/code\u003e class represents an indicator of compromise (IoC), which is an artifact indicating a potential computer intrusion, and it can be found under the \u003ccode\u003eGoogle.Cloud.SecurityCenter.V1\u003c/code\u003e namespace.\u003c/p\u003e\n"],["\u003cp\u003eThis class implements interfaces like \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e, and it provides methods for creating new \u003ccode\u003eIndicator\u003c/code\u003e objects, and deep cloning existing ones.\u003c/p\u003e\n"],["\u003cp\u003eKey properties of the \u003ccode\u003eIndicator\u003c/code\u003e class include \u003ccode\u003eDomains\u003c/code\u003e, \u003ccode\u003eIpAddresses\u003c/code\u003e, \u003ccode\u003eSignatures\u003c/code\u003e, and \u003ccode\u003eUris\u003c/code\u003e, which store lists of domains, IP addresses, matched process signatures, and URIs associated with a finding.\u003c/p\u003e\n"],["\u003cp\u003eThe content displays a comprehensive list of previous versions of the documentation, beginning with 3.24.0 and going down to 2.2.0.\u003c/p\u003e\n"]]],[],null,[]]
