Class Indicator

    • Method Detail

      • key

        public final IndicatorType key()

        Specific indicator keys observed in the attack sequence.

        If the service returns an enum value that is not available in the current SDK version, key will return IndicatorType.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available from keyAsString().

        Returns:
        Specific indicator keys observed in the attack sequence.
        See Also:
        IndicatorType
      • keyAsString

        public final String keyAsString()

        Specific indicator keys observed in the attack sequence.

        If the service returns an enum value that is not available in the current SDK version, key will return IndicatorType.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available from keyAsString().

        Returns:
        Specific indicator keys observed in the attack sequence.
        See Also:
        IndicatorType
      • hasValues

        public final boolean hasValues()
        For responses, this returns true if the service returned a value for the Values property. This DOES NOT check that the value is non-empty (for which, you should check the isEmpty() method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified.
      • values

        public final List<String> values()

        Values associated with each indicator key. For example, if the indicator key is SUSPICIOUS_NETWORK, then the value will be the name of the network. If the indicator key is ATTACK_TACTIC, then the value will be one of the MITRE tactics.

        For more information about the values associated with the key, see GuardDuty Extended Threat Detection in the GuardDuty User Guide.

        Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.

        This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the hasValues() method.

        Returns:
        Values associated with each indicator key. For example, if the indicator key is SUSPICIOUS_NETWORK, then the value will be the name of the network. If the indicator key is ATTACK_TACTIC, then the value will be one of the MITRE tactics.

        For more information about the values associated with the key, see GuardDuty Extended Threat Detection in the GuardDuty User Guide.

      • title

        public final String title()

        Title describing the indicator.

        Returns:
        Title describing the indicator.
      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object
      • equals

        public final boolean equals​(Object obj)
        Overrides:
        equals in class Object
      • toString

        public final String toString()
        Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.
        Overrides:
        toString in class Object
      • getValueForField

        public final <T> Optional<T> getValueForField​(String fieldName,
                                                      Class<T> clazz)