Chronicle V1 API - Module Google::Backstory::Collection::CollectionType (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API module Google::Backstory::Collection::CollectionType.

The type of the collection which will indicate which other fields are relevant. For example, detection finding collections will populate the detection field. Findings that evolve into investigations will populate the investigation field.

Constants

COLLECTION_TYPE_UNSPECIFIED

value: 0
An unspecified collection type.

TELEMETRY_ALERT

value: 1
An alert reported in customer telemetry.

GCTI_FINDING

value: 2
A finding from the Uppercase team.

UPPERCASE_ALERT

value: 2

RULE_DETECTION

value: 3
A detection found by applying a rule.

MACHINE_INTELLIGENCE_ALERT

value: 4
An alert generated by Chronicle machine learning models.

SOAR_ALERT

value: 5
An alert coming from other SIEMs via Chronicle SOAR.