Package com.oracle.bmc.threatintelligence.model

Class Indicator.Builder

  • Enclosing class:
    Indicator
    public static class Indicator.Builder
extends Object

    • Constructor Detail

      • Builder

        public Builder()

    • Method Detail

      • id

        public Indicator.Builder id​(String id)
        The OCID of the indicator.
        Parameters:
        id - the value to set
        Returns:
        this builder

      • value

        public Indicator.Builder value​(String value)
        The value for this indicator.

        The value’s format is dependent upon its type. Examples:

        DOMAIN_NAME "evil.example.com"

        MD5_HASH "44d88612fea8a8f36de82e1278abb02f"

        IP_ADDRESS "2001:db8::1"

        Parameters:
        value - the value to set
        Returns:
        this builder

      • confidence

        public Indicator.Builder confidence​(Integer confidence)
        An integer from 0 to 100 that represents how certain we are that the indicator is malicious and a potential threat if it is detected communicating with your cloud resources.

        This confidence value is aggregated from the confidence in the threat types, attributes, and relationships to create an overall value for the indicator.

        Parameters:
        confidence - the value to set
        Returns:
        this builder

      • compartmentId

        public Indicator.Builder compartmentId​(String compartmentId)
        The OCID of the compartment that contains this indicator.
        Parameters:
        compartmentId - the value to set
        Returns:
        this builder

      • threatTypes

        public Indicator.Builder threatTypes​(List<ThreatType> threatTypes)
        Characteristics of the threat indicator based on previous observations or behavior.

        May include related tactics, techniques, and procedures.

        Parameters:
        threatTypes - the value to set
        Returns:
        this builder

      • attributes

        public Indicator.Builder attributes​(List<IndicatorAttribute> attributes)
        A map of attributes with additional information about the indicator.

        Each attribute has a name (string), value (string), and attribution (supporting data).

        Parameters:
        attributes - the value to set
        Returns:
        this builder

      • relationships

        public Indicator.Builder relationships​(List<IndicatorRelationship> relationships)
        A map of relationships between the indicator and other entities.

        Each relationship has a name (string), related entity, and attribution (supporting data).

        Parameters:
        relationships - the value to set
        Returns:
        this builder

      • lifecycleState

        public Indicator.Builder lifecycleState​(LifecycleState lifecycleState)
        The state of the indicator.

        It will always be ACTIVE.

        Parameters:
        lifecycleState - the value to set
        Returns:
        this builder

      • timeCreated

        public Indicator.Builder timeCreated​(Date timeCreated)
        The date and time that the indicator was first detected.

        An RFC3339 formatted string.

        Parameters:
        timeCreated - the value to set
        Returns:
        this builder

      • timeUpdated

        public Indicator.Builder timeUpdated​(Date timeUpdated)
        The date and time that this indicator was last updated.

        The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

        Parameters:
        timeUpdated - the value to set
        Returns:
        this builder

      • timeLastSeen

        public Indicator.Builder timeLastSeen​(Date timeLastSeen)
        The date and time that this indicator was last seen.

        The value is the same as timeCreated for a new indicator. An RFC3339 formatted string.

        Parameters:
        timeLastSeen - the value to set
        Returns:
        this builder