struct

ECS::LogEntry::Threat

Inherits JSON::Serializable < Struct < Value < Object

Constructors

new(pull : JSON::PullParser)
Source
new

Initialize all values as nil

Source
new(*, __pull_for_json_serializable pull : JSON::PullParser)
Source

Instance methods

framework(new_value : String)

A chainable setter for framework

Source
framework

threat.framework

Name of the threat framework used to further categorize and classify the tactic and technique of the reported threat. Framework classification can be provided by detecting systems, evaluated at ingest time, or retrospectively tagged to events.

Level: Extended Type: Keyword Example:

MITRE ATT&CK
Source
framework=(framework : String | Nil)

threat.framework

Name of the threat framework used to further categorize and classify the tactic and technique of the reported threat. Framework classification can be provided by detecting systems, evaluated at ingest time, or retrospectively tagged to events.

Level: Extended Type: Keyword Example:

MITRE ATT&CK
Source
tactic(value : Tactic)

A chainable setter for tactic

Source
tactic
Source
tactic

Initialize a new Tactic, yield it to the block

Source
tactic=(tactic : Tactic | Nil)
Source
technique(value : Technique)

A chainable setter for technique

Source
technique
Source
technique

Initialize a new Technique, yield it to the block

Source
technique=(technique : Technique | Nil)
Source

Nested types