Interface IntrusionSetSdo

All Superinterfaces:
BundleableObject, DomainObject, SdoDefaultValidator, Serializable, Stix, StixCommonProperties, StixCustomProperties, StixLabels, StixModified, StixRevoked, StixSpecVersion
All Known Implementing Classes:
IntrusionSet

@Immutable @DefaultTypeValue(value="intrusion-set", groups=DefaultValuesProcessor.class) @Redactable public interface IntrusionSetSdo extends DomainObject
intrusion-set

An Intrusion Set is a grouped set of adversary behavior and resources with common properties that is believed to be orchestrated by a single organization.

  • Method Details

    • getName

      @NotBlank @JsonPropertyDescription("The name used to identify the Intrusion Set.") @Redactable(useMask=true) @NotBlank String getName()
    • getDescription

      @JsonPropertyDescription("Provides more context and details about the Intrusion Set object.") @Redactable Optional<String> getDescription()
    • getAliases

      @Default @NotNull @JsonPropertyDescription("Alternative names used to identify this Intrusion Set.") @Redactable default @NotNull Set<String> getAliases()
    • getFirstSeen

      @JsonPropertyDescription("The time that this Intrusion Set was first seen.") @Redactable Optional<StixInstant> getFirstSeen()
    • getLastSeen

      @JsonPropertyDescription("The time that this Intrusion Set was last seen.") @Redactable Optional<StixInstant> getLastSeen()
    • getGoals

      @Default @NotNull @JsonPropertyDescription("The high level goals of this Intrusion Set, namely, what are they trying to do.") @Redactable default @NotNull Set<String> getGoals()
    • getResourceLevel

      @JsonPropertyDescription("This defines the organizational level at which this Intrusion Set typically works. Open Vocab - attack-resource-level-ov") @Redactable Optional<@Vocab(AttackResourceLevels.class) String> getResourceLevel()
    • getPrimaryMotivation

      @JsonPropertyDescription("The primary reason, motivation, or purpose behind this Intrusion Set. Open Vocab - attack-motivation-ov") @Redactable Optional<@Vocab(AttackMotivations.class) String> getPrimaryMotivation()
    • getSecondaryMotivations

      @Default @NotNull @Vocab(AttackMotivations.class) @JsonPropertyDescription("The secondary reasons, motivations, or purposes behind this Intrusion Set. Open Vocab - attack-motivation-ov") @Redactable default @NotNull @Vocab(AttackMotivations.class) Set<String> getSecondaryMotivations()