public sealed class Indicator : IMessage<Indicator>, IEquatable<Indicator>, IDeepCloneable<Indicator>, IBufferMessage, IMessage
Reference documentation and code samples for the Security Command Center v2 API class Indicator.
Represents what's commonly known as an indicator of compromise (IoC) in
computer forensics. This is an artifact observed on a network or in an
operating system that, with high confidence, indicates a computer intrusion.
For more information, see Indicator of
compromise.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis documentation describes the \u003ccode\u003eIndicator\u003c/code\u003e class within the Security Command Center v2 API for .NET, version 1.0.0.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eIndicator\u003c/code\u003e class represents an "indicator of compromise" (IoC), which are artifacts that suggest a computer intrusion, and is derived from the base \u003ccode\u003eobject\u003c/code\u003e class while also implementing several interfaces such as \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, and \u003ccode\u003eIDeepCloneable\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eIndicator\u003c/code\u003e class provides properties such as \u003ccode\u003eDomains\u003c/code\u003e, \u003ccode\u003eIpAddresses\u003c/code\u003e, \u003ccode\u003eSignatures\u003c/code\u003e, and \u003ccode\u003eUris\u003c/code\u003e to store and access the various types of indicators associated with a finding.\u003c/p\u003e\n"],["\u003cp\u003eConstructors are available for creating a new \u003ccode\u003eIndicator\u003c/code\u003e object or for copying an existing one.\u003c/p\u003e\n"]]],[],null,[]]
