Indicator

import type { Indicator } from "https://googleapis.deno.dev/v1/securitycenter:v1.ts";

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise.

interface Indicator {

domains?: string[];

ipAddresses?: string[];

signatures?: ProcessSignature[];

uris?: string[];

}

§Properties

domains?: string[]

[src]

List of domains associated to the Finding.

ipAddresses?: string[]

[src]

The list of IP addresses that are associated with the finding.

signatures?: ProcessSignature[]

[src]

The list of matched signatures indicating that the given process is present in the environment.

uris?: string[]

[src]

The list of URIs associated to the Findings.