public sealed class Exfiltration : IMessage<Exfiltration>, IEquatable<Exfiltration>, IDeepCloneable<Exfiltration>, IBufferMessage, IMessage
Reference documentation and code samples for the Security Command Center v2 API class Exfiltration.
Exfiltration represents a data exfiltration attempt from one or more sources
to one or more targets. The sources attribute lists the sources of the
exfiltrated data. The targets attribute lists the destinations the data was
copied to.
public RepeatedField<ExfilResource> Sources { get; }
If there are multiple sources, then the data is considered "joined" between
them. For instance, BigQuery can join multiple tables, and each
table would be considered a source.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eExfiltration\u003c/code\u003e class in the Security Command Center v2 API represents an attempt to exfiltrate data from one or more sources to one or more destinations.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eSources\u003c/code\u003e property of the \u003ccode\u003eExfiltration\u003c/code\u003e class is a \u003ccode\u003eRepeatedField\u003c/code\u003e of \u003ccode\u003eExfilResource\u003c/code\u003e objects, indicating the origins of the data being exfiltrated, and if multiple sources exist it means that the data is "joined" between them.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eTargets\u003c/code\u003e property, also a \u003ccode\u003eRepeatedField\u003c/code\u003e of \u003ccode\u003eExfilResource\u003c/code\u003e, lists the destinations where the exfiltrated data was copied, with each target receiving a full copy of the joined source data if multiple are present.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eTotalExfiltratedBytes\u003c/code\u003e property, of type \u003ccode\u003elong\u003c/code\u003e, represents the overall quantity of data, measured in bytes, that was processed during the entire data exfiltration attempt.\u003c/p\u003e\n"]]],[],null,[]]
