Interface ObservedDataSdo

All Superinterfaces:
BundleableObject, DomainObject, SdoDefaultValidator, Serializable, Stix, StixCommonProperties, StixCustomProperties, StixLabels, StixModified, StixRevoked, StixSpecVersion
All Known Implementing Classes:
ObservedData

@Immutable @DefaultTypeValue(value="observed-data", groups=DefaultValuesProcessor.class) @Redactable public interface ObservedDataSdo extends DomainObject
observed-data

Observed data conveys information that was observed on systems and networks, such as log data or network traffic, using the Cyber Observable specification.

  • Method Details

    • getFirstObserved

      @NotNull @JsonPropertyDescription("The beginning of the time window that the data was observed during.") @Redactable(useMask=true) @NotNull StixInstant getFirstObserved()
    • getLastObserved

      @NotNull @JsonPropertyDescription("The end of the time window that the data was observed during.") @Redactable(useMask=true) @NotNull StixInstant getLastObserved()
    • getNumberObserved

      @NotNull @Positive @JsonPropertyDescription("The number of times the data represented in the objects property was observed. This MUST be an integer between 1 and 999,999,999 inclusive.") @Redactable(useMask=true) @Range(min=1L, max=999999999L) @NotNull @Positive @Range(min=1L,max=999999999L) Integer getNumberObserved()
    • getObjects

      @Default @NotNull @Size(min=1, message="At least one Cyber Observable Reference must be provided") @JsonPropertyDescription("A dictionary of Cyber Observable Objects that describes the single \'fact\' that was observed.") @Redactable(useMask=true) default @NotNull @Size(min=1,message="At least one Cyber Observable Reference must be provided") Set<CyberObservableObject> getObjects()