Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::Investigation.
Represents the aggregated state of an investigation such as categorization, severity, and status. Can be expanded to include analyst assignment details and more.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#comments
def comments() -> ::Array<::String>
Returns
- (::Array<::String>) — Comment added by the Analyst.
#comments=
def comments=(value) -> ::Array<::String>
Parameter
- value (::Array<::String>) — Comment added by the Analyst.
Returns
- (::Array<::String>) — Comment added by the Analyst.
#id
def id() -> ::String
Returns
- (::String) — Identifier for the investigation
#id=
def id=(value) -> ::String
Parameter
- value (::String) — Identifier for the investigation
Returns
- (::String) — Identifier for the investigation
#priority
def priority() -> ::Google::Backstory::Priority
Returns
- (::Google::Backstory::Priority) — Priority of the Alert or Finding set by analyst.
#priority=
def priority=(value) -> ::Google::Backstory::Priority
Parameter
- value (::Google::Backstory::Priority) — Priority of the Alert or Finding set by analyst.
Returns
- (::Google::Backstory::Priority) — Priority of the Alert or Finding set by analyst.
#reason
def reason() -> ::Google::Backstory::Reason
Returns
- (::Google::Backstory::Reason) — Reason for closing the Case or Alert.
#reason=
def reason=(value) -> ::Google::Backstory::Reason
Parameter
- value (::Google::Backstory::Reason) — Reason for closing the Case or Alert.
Returns
- (::Google::Backstory::Reason) — Reason for closing the Case or Alert.
#reputation
def reputation() -> ::Google::Backstory::Reputation
Returns
- (::Google::Backstory::Reputation) — Describes whether a finding was useful or not-useful.
#reputation=
def reputation=(value) -> ::Google::Backstory::Reputation
Parameter
- value (::Google::Backstory::Reputation) — Describes whether a finding was useful or not-useful.
Returns
- (::Google::Backstory::Reputation) — Describes whether a finding was useful or not-useful.
#risk_score
def risk_score() -> ::Integer
Returns
- (::Integer) — Risk score for a finding set by an analyst.
#risk_score=
def risk_score=(value) -> ::Integer
Parameter
- value (::Integer) — Risk score for a finding set by an analyst.
Returns
- (::Integer) — Risk score for a finding set by an analyst.
#root_cause
def root_cause() -> ::String
Returns
- (::String) — Root cause of the Alert or Finding set by analyst.
#root_cause=
def root_cause=(value) -> ::String
Parameter
- value (::String) — Root cause of the Alert or Finding set by analyst.
Returns
- (::String) — Root cause of the Alert or Finding set by analyst.
#severity_score
def severity_score() -> ::Integer
Returns
- (::Integer) — Severity score for a finding set by an analyst.
#severity_score=
def severity_score=(value) -> ::Integer
Parameter
- value (::Integer) — Severity score for a finding set by an analyst.
Returns
- (::Integer) — Severity score for a finding set by an analyst.
#status
def status() -> ::Google::Backstory::Status
Returns
- (::Google::Backstory::Status) — Describes the workflow status of a finding.
#status=
def status=(value) -> ::Google::Backstory::Status
Parameter
- value (::Google::Backstory::Status) — Describes the workflow status of a finding.
Returns
- (::Google::Backstory::Status) — Describes the workflow status of a finding.
#verdict
def verdict() -> ::Google::Backstory::Verdict
Returns
- (::Google::Backstory::Verdict) — Describes reason a finding investigation was resolved.
#verdict=
def verdict=(value) -> ::Google::Backstory::Verdict
Parameter
- value (::Google::Backstory::Verdict) — Describes reason a finding investigation was resolved.
Returns
- (::Google::Backstory::Verdict) — Describes reason a finding investigation was resolved.