public sealed class Indicator : IMessage<Indicator>, IEquatable<Indicator>, IDeepCloneable<Indicator>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Cloud Security Command Center v1 API class Indicator.
Represents what's commonly known as an indicator of compromise (IoC) in
computer forensics. This is an artifact observed on a network or in an
operating system that, with high confidence, indicates a computer intrusion.
For more information, see Indicator of
compromise.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis webpage provides reference documentation for the \u003ccode\u003eIndicator\u003c/code\u003e class within the Google Cloud Security Center v1 API, detailing its role as an "indicator of compromise" in computer forensics.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eIndicator\u003c/code\u003e class is a .NET class implementing interfaces like \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, and \u003ccode\u003eIDeepCloneable\u003c/code\u003e, among others.\u003c/p\u003e\n"],["\u003cp\u003eThe webpage lists various versions of the API documentation, ranging from version 3.24.0 (latest) down to version 2.2.0, with each version linking to the \u003ccode\u003eIndicator\u003c/code\u003e class's specific documentation for that release.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eIndicator\u003c/code\u003e class includes properties such as \u003ccode\u003eDomains\u003c/code\u003e, \u003ccode\u003eIpAddresses\u003c/code\u003e, \u003ccode\u003eSignatures\u003c/code\u003e, and \u003ccode\u003eUris\u003c/code\u003e, which provide details about potential security compromises, associated domains, IP addresses, matched process signatures, and URIs.\u003c/p\u003e\n"],["\u003cp\u003eThe webpage lists the contructors for the Indicator class, the default and one which passes in an other Indicator class as a parameter, which can be used to make a copy.\u003c/p\u003e\n"]]],[],null,[]]
