Package security.whisper.javastix.sro.objects

Interface SightingSro

All Superinterfaces:
BundleableObject, RelationshipObject, SdoDefaultValidator, Serializable, Stix, StixCommonProperties, StixCustomProperties, StixLabels, StixModified, StixRevoked, StixSpecVersion
All Known Implementing Classes:
Sighting
@Immutable @DefaultTypeValue(value="sighting", groups=DefaultValuesProcessor.class) @Redactable public interface SightingSro extends RelationshipObject
sighting

A Sighting denotes the belief that something in CTI (e.g., an indicator, malware, tool, threat actor, etc.) was seen.

  • Method Details

    • getFirstSeen

      @JsonPropertyDescription("The beginning of the time window during which the SDO referenced by the sighting_of_ref property was sighted.") @Redactable Optional<StixInstant> getFirstSeen()

    • getLastSeen

      @JsonPropertyDescription("The end of the time window during which the SDO referenced by the sighting_of_ref property was sighted.") @Redactable Optional<StixInstant> getLastSeen()

    • getCount

      @JsonPropertyDescription("This is an integer between 0 and 999,999,999 inclusive and represents the number of times the object was sighted.") @Redactable Optional<@Range(min=0L,max=999999999L) Integer> getCount()

    • getSightingOfRef

      @JsonPropertyDescription("An ID reference to the object that has been sighted.") @Redactable(useMask=true) DomainObject getSightingOfRef()

    • getObservedDataRefs

      @Default @JsonPropertyDescription("A list of ID references to the Observed Data objects that contain the raw cyber data for this Sighting.") @Redactable default Set<ObservedDataSdo> getObservedDataRefs()

    • getWhereSightedRefs

      @Default @JsonPropertyDescription("The ID of the Victim Target objects of the entities that saw the sighting.") @Redactable default Set<IdentitySdo> getWhereSightedRefs()

    • isSummary

      @NotNull @JsonPropertyDescription("The summary property indicates whether the Sighting should be considered summary data.") @Redactable @Default default @NotNull StixBoolean isSummary()