Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::SecurityResult::Association.
Associations represents different metadata about malware and threat actors involved with an IoC.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#alias
def alias() -> ::Array<::Google::Backstory::SecurityResult::Association::AssociationAlias>
Returns
- (::Array<::Google::Backstory::SecurityResult::Association::AssociationAlias>) — Different aliases of the threat actor given by different sources.
#alias=
def alias=(value) -> ::Array<::Google::Backstory::SecurityResult::Association::AssociationAlias>
Parameter
- value (::Array<::Google::Backstory::SecurityResult::Association::AssociationAlias>) — Different aliases of the threat actor given by different sources.
Returns
- (::Array<::Google::Backstory::SecurityResult::Association::AssociationAlias>) — Different aliases of the threat actor given by different sources.
#associated_actors
def associated_actors() -> ::Array<::Google::Backstory::SecurityResult::Association>
Returns
- (::Array<::Google::Backstory::SecurityResult::Association>) — List of associated threat actors for a malware. Not applicable for threat actors.
#associated_actors=
def associated_actors=(value) -> ::Array<::Google::Backstory::SecurityResult::Association>
Parameter
- value (::Array<::Google::Backstory::SecurityResult::Association>) — List of associated threat actors for a malware. Not applicable for threat actors.
Returns
- (::Array<::Google::Backstory::SecurityResult::Association>) — List of associated threat actors for a malware. Not applicable for threat actors.
#country_code
def country_code() -> ::Array<::String>
Returns
- (::Array<::String>) — Country from which the threat actor/ malware is originated.
#country_code=
def country_code=(value) -> ::Array<::String>
Parameter
- value (::Array<::String>) — Country from which the threat actor/ malware is originated.
Returns
- (::Array<::String>) — Country from which the threat actor/ malware is originated.
#description
def description() -> ::String
Returns
- (::String) — Human readable description about the association.
#description=
def description=(value) -> ::String
Parameter
- value (::String) — Human readable description about the association.
Returns
- (::String) — Human readable description about the association.
#first_reference_time
def first_reference_time() -> ::Google::Protobuf::Timestamp
Returns
- (::Google::Protobuf::Timestamp) — First time the threat actor was referenced or seen.
#first_reference_time=
def first_reference_time=(value) -> ::Google::Protobuf::Timestamp
Parameter
- value (::Google::Protobuf::Timestamp) — First time the threat actor was referenced or seen.
Returns
- (::Google::Protobuf::Timestamp) — First time the threat actor was referenced or seen.
#id
def id() -> ::String
Returns
- (::String) — Unique association id generated by mandiant.
#id=
def id=(value) -> ::String
Parameter
- value (::String) — Unique association id generated by mandiant.
Returns
- (::String) — Unique association id generated by mandiant.
#industries_affected
def industries_affected() -> ::Array<::String>
Returns
- (::Array<::String>) — List of industries the threat actor affects.
#industries_affected=
def industries_affected=(value) -> ::Array<::String>
Parameter
- value (::Array<::String>) — List of industries the threat actor affects.
Returns
- (::Array<::String>) — List of industries the threat actor affects.
#last_reference_time
def last_reference_time() -> ::Google::Protobuf::Timestamp
Returns
- (::Google::Protobuf::Timestamp) — Last time the threat actor was referenced or seen.
#last_reference_time=
def last_reference_time=(value) -> ::Google::Protobuf::Timestamp
Parameter
- value (::Google::Protobuf::Timestamp) — Last time the threat actor was referenced or seen.
Returns
- (::Google::Protobuf::Timestamp) — Last time the threat actor was referenced or seen.
#name
def name() -> ::String
Returns
- (::String) — Name of the threat actor/malware.
#name=
def name=(value) -> ::String
Parameter
- value (::String) — Name of the threat actor/malware.
Returns
- (::String) — Name of the threat actor/malware.
#region_code
def region_code() -> ::Google::Backstory::Location
Returns
- (::Google::Backstory::Location) — Name of the country, the threat is originating from.
#region_code=
def region_code=(value) -> ::Google::Backstory::Location
Parameter
- value (::Google::Backstory::Location) — Name of the country, the threat is originating from.
Returns
- (::Google::Backstory::Location) — Name of the country, the threat is originating from.
#role
def role() -> ::String
Returns
- (::String) — Role of the malware. Not applicable for threat actor.
#role=
def role=(value) -> ::String
Parameter
- value (::String) — Role of the malware. Not applicable for threat actor.
Returns
- (::String) — Role of the malware. Not applicable for threat actor.
#source_country
def source_country() -> ::String
Returns
- (::String) — Name of the country the threat originated from.
#source_country=
def source_country=(value) -> ::String
Parameter
- value (::String) — Name of the country the threat originated from.
Returns
- (::String) — Name of the country the threat originated from.
#sponsor_region
def sponsor_region() -> ::Google::Backstory::Location
Returns
- (::Google::Backstory::Location) — Sponsor region of the threat actor.
#sponsor_region=
def sponsor_region=(value) -> ::Google::Backstory::Location
Parameter
- value (::Google::Backstory::Location) — Sponsor region of the threat actor.
Returns
- (::Google::Backstory::Location) — Sponsor region of the threat actor.
#tags
def tags() -> ::Array<::String>
Returns
- (::Array<::String>) — Tags.
#tags=
def tags=(value) -> ::Array<::String>
Parameter
- value (::Array<::String>) — Tags.
Returns
- (::Array<::String>) — Tags.
#targeted_regions
def targeted_regions() -> ::Array<::Google::Backstory::Location>
Returns
- (::Array<::Google::Backstory::Location>) — Targeted regions.
#targeted_regions=
def targeted_regions=(value) -> ::Array<::Google::Backstory::Location>
Parameter
- value (::Array<::Google::Backstory::Location>) — Targeted regions.
Returns
- (::Array<::Google::Backstory::Location>) — Targeted regions.
#type
def type() -> ::Google::Backstory::SecurityResult::Association::AssociationType
Returns
- (::Google::Backstory::SecurityResult::Association::AssociationType) — Signifies the type of association.
#type=
def type=(value) -> ::Google::Backstory::SecurityResult::Association::AssociationType
Parameter
- value (::Google::Backstory::SecurityResult::Association::AssociationType) — Signifies the type of association.
Returns
- (::Google::Backstory::SecurityResult::Association::AssociationType) — Signifies the type of association.