Interface ReportSdo

All Superinterfaces:
BundleableObject, DomainObject, SdoDefaultValidator, Serializable, Stix, StixCommonProperties, StixCustomProperties, StixLabels, StixModified, StixRevoked, StixSpecVersion
All Known Implementing Classes:
Report

@Immutable @DefaultTypeValue(value="report", groups=DefaultValuesProcessor.class) @Redactable public interface ReportSdo extends DomainObject
report

Reports are collections of threat intelligence focused on one or more topics, such as a description of a threat actor, malware, or attack technique, including context and related details.

  • Method Details

    • getLabels

      @Default @NotNull @JsonPropertyDescription("This field is an Open Vocabulary that specifies the primary subject of this report. The suggested values for this field are in report-label-ov.") @Redactable(useMask=true) @Size(min=1) default @NotNull @Size(min=1) Set<@Vocab(ReportLabels.class) String> getLabels()
      Specified by:
      getLabels in interface StixLabels
    • getName

      @NotBlank @JsonPropertyDescription("A description that provides more details and context about Report.") @Redactable(useMask=true) @NotBlank String getName()
    • getDescription

      @JsonPropertyDescription("A description that provides more details and context about Report.") @Redactable Optional<String> getDescription()
    • getPublished

      @NotNull @JsonPropertyDescription("The date that this report object was officially published by the creator of this report.") @Redactable(useMask=true) @NotNull StixInstant getPublished()
    • getObjectRefs

      @Default @NotNull @Size(min=1, message="Must have at least one Report object reference") @JsonPropertyDescription("Specifies the STIX Objects that are referred to by this Report.") @Redactable(useMask=true) default @NotNull @Size(min=1,message="Must have at least one Report object reference") Set<BundleableObject> getObjectRefs()