datadog_api_client 2.52.0 → 2.53.0

data/lib/datadog_api_client/v2/models/io_c_indicator_detailed.rb

@@ -0,0 +1,435 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # An indicator of compromise with extended context from your environment.
+  class IoCIndicatorDetailed
+    include BaseGenericModel
+
+    # Additional domain-specific context from threat intelligence sources.
+    attr_accessor :additional_data
+
+    # Autonomous system CIDR block.
+    attr_accessor :as_cidr_block
+
+    # Geographic location information for an IP indicator.
+    attr_accessor :as_geo
+
+    # Autonomous system number.
+    attr_accessor :as_number
+
+    # Autonomous system organization name.
+    attr_accessor :as_organization
+
+    # Autonomous system type.
+    attr_accessor :as_type
+
+    # Threat intelligence sources that flagged this indicator as benign.
+    attr_accessor :benign_sources
+
+    # Threat categories associated with the indicator.
+    attr_accessor :categories
+
+    # Critical assets associated with this indicator.
+    attr_accessor :critical_assets
+
+    # Timestamp when the indicator was first seen.
+    attr_accessor :first_seen
+
+    # Hosts associated with this indicator.
+    attr_accessor :hosts
+
+    # Unique identifier for the indicator.
+    attr_accessor :id
+
+    # The indicator value (for example, an IP address or domain).
+    attr_accessor :indicator
+
+    # Type of indicator (for example, IP address or domain).
+    attr_accessor :indicator_type
+
+    # Timestamp when the indicator was last seen.
+    attr_accessor :last_seen
+
+    # Number of logs that matched this indicator.
+    attr_accessor :log_matches
+
+    # Log sources where this indicator was observed.
+    attr_accessor :log_sources
+
+    # Effect of a scoring factor on the indicator's threat score.
+    attr_accessor :m_as_type
+
+    # Effect of a scoring factor on the indicator's threat score.
+    attr_accessor :m_persistence
+
+    # Effect of a scoring factor on the indicator's threat score.
+    attr_accessor :m_signal
+
+    # Effect of a scoring factor on the indicator's threat score.
+    attr_accessor :m_sources
+
+    # Threat intelligence sources that flagged this indicator as malicious.
+    attr_accessor :malicious_sources
+
+    # Effect of a scoring factor on the indicator's threat score.
+    attr_accessor :max_trust_score
+
+    # Threat score for the indicator (0-100).
+    attr_accessor :score
+
+    # Services where this indicator was observed.
+    attr_accessor :services
+
+    # Number of security signals that matched this indicator.
+    attr_accessor :signal_matches
+
+    # Breakdown of security signals by severity.
+    attr_accessor :signal_severity
+
+    # Signal tier level.
+    attr_accessor :signal_tier
+
+    # Threat intelligence sources that flagged this indicator as suspicious.
+    attr_accessor :suspicious_sources
+
+    # Tags associated with the indicator.
+    attr_accessor :tags
+
+    # Users associated with this indicator, grouped by category.
+    attr_accessor :users
+
+    attr_accessor :additional_properties
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    # @!visibility private
+    def self.attribute_map
+      {
+        :'additional_data' => :'additional_data',
+        :'as_cidr_block' => :'as_cidr_block',
+        :'as_geo' => :'as_geo',
+        :'as_number' => :'as_number',
+        :'as_organization' => :'as_organization',
+        :'as_type' => :'as_type',
+        :'benign_sources' => :'benign_sources',
+        :'categories' => :'categories',
+        :'critical_assets' => :'critical_assets',
+        :'first_seen' => :'first_seen',
+        :'hosts' => :'hosts',
+        :'id' => :'id',
+        :'indicator' => :'indicator',
+        :'indicator_type' => :'indicator_type',
+        :'last_seen' => :'last_seen',
+        :'log_matches' => :'log_matches',
+        :'log_sources' => :'log_sources',
+        :'m_as_type' => :'m_as_type',
+        :'m_persistence' => :'m_persistence',
+        :'m_signal' => :'m_signal',
+        :'m_sources' => :'m_sources',
+        :'malicious_sources' => :'malicious_sources',
+        :'max_trust_score' => :'max_trust_score',
+        :'score' => :'score',
+        :'services' => :'services',
+        :'signal_matches' => :'signal_matches',
+        :'signal_severity' => :'signal_severity',
+        :'signal_tier' => :'signal_tier',
+        :'suspicious_sources' => :'suspicious_sources',
+        :'tags' => :'tags',
+        :'users' => :'users'
+      }
+    end
+
+    # Attribute type mapping.
+    # @!visibility private
+    def self.openapi_types
+      {
+        :'additional_data' => :'Hash<String, Object>',
+        :'as_cidr_block' => :'String',
+        :'as_geo' => :'IoCGeoLocation',
+        :'as_number' => :'String',
+        :'as_organization' => :'String',
+        :'as_type' => :'String',
+        :'benign_sources' => :'Array<IoCSource>',
+        :'categories' => :'Array<String>',
+        :'critical_assets' => :'Array<String>',
+        :'first_seen' => :'Time',
+        :'hosts' => :'Array<String>',
+        :'id' => :'String',
+        :'indicator' => :'String',
+        :'indicator_type' => :'String',
+        :'last_seen' => :'Time',
+        :'log_matches' => :'Integer',
+        :'log_sources' => :'Array<String>',
+        :'m_as_type' => :'IoCScoreEffect',
+        :'m_persistence' => :'IoCScoreEffect',
+        :'m_signal' => :'IoCScoreEffect',
+        :'m_sources' => :'IoCScoreEffect',
+        :'malicious_sources' => :'Array<IoCSource>',
+        :'max_trust_score' => :'IoCScoreEffect',
+        :'score' => :'Float',
+        :'services' => :'Array<String>',
+        :'signal_matches' => :'Integer',
+        :'signal_severity' => :'Array<IoCSignalSeverityCount>',
+        :'signal_tier' => :'Integer',
+        :'suspicious_sources' => :'Array<IoCSource>',
+        :'tags' => :'Array<String>',
+        :'users' => :'Hash<String, Array<String>>'
+      }
+    end
+
+    # List of attributes with nullable: true
+    # @!visibility private
+    def self.openapi_nullable
+      Set.new([
+        :'benign_sources',
+        :'malicious_sources',
+        :'suspicious_sources',
+      ])
+    end
+
+    # Initializes the object
+    # @param attributes [Hash] Model attributes in the form of hash
+    # @!visibility private
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::IoCIndicatorDetailed` initialize method"
+      end
+
+      self.additional_properties = {}
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          self.additional_properties[k.to_sym] = v
+        else
+          h[k.to_sym] = v
+        end
+      }
+
+      if attributes.key?(:'additional_data')
+        self.additional_data = attributes[:'additional_data']
+      end
+
+      if attributes.key?(:'as_cidr_block')
+        self.as_cidr_block = attributes[:'as_cidr_block']
+      end
+
+      if attributes.key?(:'as_geo')
+        self.as_geo = attributes[:'as_geo']
+      end
+
+      if attributes.key?(:'as_number')
+        self.as_number = attributes[:'as_number']
+      end
+
+      if attributes.key?(:'as_organization')
+        self.as_organization = attributes[:'as_organization']
+      end
+
+      if attributes.key?(:'as_type')
+        self.as_type = attributes[:'as_type']
+      end
+
+      if attributes.key?(:'benign_sources')
+        if (value = attributes[:'benign_sources']).is_a?(Array)
+          self.benign_sources = value
+        end
+      end
+
+      if attributes.key?(:'categories')
+        if (value = attributes[:'categories']).is_a?(Array)
+          self.categories = value
+        end
+      end
+
+      if attributes.key?(:'critical_assets')
+        if (value = attributes[:'critical_assets']).is_a?(Array)
+          self.critical_assets = value
+        end
+      end
+
+      if attributes.key?(:'first_seen')
+        self.first_seen = attributes[:'first_seen']
+      end
+
+      if attributes.key?(:'hosts')
+        if (value = attributes[:'hosts']).is_a?(Array)
+          self.hosts = value
+        end
+      end
+
+      if attributes.key?(:'id')
+        self.id = attributes[:'id']
+      end
+
+      if attributes.key?(:'indicator')
+        self.indicator = attributes[:'indicator']
+      end
+
+      if attributes.key?(:'indicator_type')
+        self.indicator_type = attributes[:'indicator_type']
+      end
+
+      if attributes.key?(:'last_seen')
+        self.last_seen = attributes[:'last_seen']
+      end
+
+      if attributes.key?(:'log_matches')
+        self.log_matches = attributes[:'log_matches']
+      end
+
+      if attributes.key?(:'log_sources')
+        if (value = attributes[:'log_sources']).is_a?(Array)
+          self.log_sources = value
+        end
+      end
+
+      if attributes.key?(:'m_as_type')
+        self.m_as_type = attributes[:'m_as_type']
+      end
+
+      if attributes.key?(:'m_persistence')
+        self.m_persistence = attributes[:'m_persistence']
+      end
+
+      if attributes.key?(:'m_signal')
+        self.m_signal = attributes[:'m_signal']
+      end
+
+      if attributes.key?(:'m_sources')
+        self.m_sources = attributes[:'m_sources']
+      end
+
+      if attributes.key?(:'malicious_sources')
+        if (value = attributes[:'malicious_sources']).is_a?(Array)
+          self.malicious_sources = value
+        end
+      end
+
+      if attributes.key?(:'max_trust_score')
+        self.max_trust_score = attributes[:'max_trust_score']
+      end
+
+      if attributes.key?(:'score')
+        self.score = attributes[:'score']
+      end
+
+      if attributes.key?(:'services')
+        if (value = attributes[:'services']).is_a?(Array)
+          self.services = value
+        end
+      end
+
+      if attributes.key?(:'signal_matches')
+        self.signal_matches = attributes[:'signal_matches']
+      end
+
+      if attributes.key?(:'signal_severity')
+        if (value = attributes[:'signal_severity']).is_a?(Array)
+          self.signal_severity = value
+        end
+      end
+
+      if attributes.key?(:'signal_tier')
+        self.signal_tier = attributes[:'signal_tier']
+      end
+
+      if attributes.key?(:'suspicious_sources')
+        if (value = attributes[:'suspicious_sources']).is_a?(Array)
+          self.suspicious_sources = value
+        end
+      end
+
+      if attributes.key?(:'tags')
+        if (value = attributes[:'tags']).is_a?(Array)
+          self.tags = value
+        end
+      end
+
+      if attributes.key?(:'users')
+        self.users = attributes[:'users']
+      end
+    end
+
+    # Returns the object in the form of hash, with additionalProperties support.
+    # @return [Hash] Returns the object in the form of hash
+    # @!visibility private
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      self.additional_properties.each_pair do |attr, value|
+        hash[attr] = value
+      end
+      hash
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param o [Object] Object to be compared
+    # @!visibility private
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          additional_data == o.additional_data &&
+          as_cidr_block == o.as_cidr_block &&
+          as_geo == o.as_geo &&
+          as_number == o.as_number &&
+          as_organization == o.as_organization &&
+          as_type == o.as_type &&
+          benign_sources == o.benign_sources &&
+          categories == o.categories &&
+          critical_assets == o.critical_assets &&
+          first_seen == o.first_seen &&
+          hosts == o.hosts &&
+          id == o.id &&
+          indicator == o.indicator &&
+          indicator_type == o.indicator_type &&
+          last_seen == o.last_seen &&
+          log_matches == o.log_matches &&
+          log_sources == o.log_sources &&
+          m_as_type == o.m_as_type &&
+          m_persistence == o.m_persistence &&
+          m_signal == o.m_signal &&
+          m_sources == o.m_sources &&
+          malicious_sources == o.malicious_sources &&
+          max_trust_score == o.max_trust_score &&
+          score == o.score &&
+          services == o.services &&
+          signal_matches == o.signal_matches &&
+          signal_severity == o.signal_severity &&
+          signal_tier == o.signal_tier &&
+          suspicious_sources == o.suspicious_sources &&
+          tags == o.tags &&
+          users == o.users &&
+          additional_properties == o.additional_properties
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    # @!visibility private
+    def hash
+      [additional_data, as_cidr_block, as_geo, as_number, as_organization, as_type, benign_sources, categories, critical_assets, first_seen, hosts, id, indicator, indicator_type, last_seen, log_matches, log_sources, m_as_type, m_persistence, m_signal, m_sources, malicious_sources, max_trust_score, score, services, signal_matches, signal_severity, signal_tier, suspicious_sources, tags, users, additional_properties].hash
+    end
+  end
+end

data/lib/datadog_api_client/v2/models/io_c_score_effect.rb

@@ -0,0 +1,28 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # Effect of a scoring factor on the indicator's threat score.
+  class IoCScoreEffect
+    include BaseEnumModel
+
+    RAISE_SCORE = "RAISE_SCORE".freeze
+    LOWER_SCORE = "LOWER_SCORE".freeze
+    NO_EFFECT = "NO_EFFECT".freeze
+  end
+end

data/lib/datadog_api_client/v2/models/io_c_signal_severity_count.rb

@@ -0,0 +1,115 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # Count of security signals by severity level.
+  class IoCSignalSeverityCount
+    include BaseGenericModel
+
+    # Number of signals at this severity level.
+    attr_accessor :count
+
+    # Severity level (for example, critical, high, medium, low, info).
+    attr_accessor :severity
+
+    attr_accessor :additional_properties
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    # @!visibility private
+    def self.attribute_map
+      {
+        :'count' => :'count',
+        :'severity' => :'severity'
+      }
+    end
+
+    # Attribute type mapping.
+    # @!visibility private
+    def self.openapi_types
+      {
+        :'count' => :'Integer',
+        :'severity' => :'String'
+      }
+    end
+
+    # Initializes the object
+    # @param attributes [Hash] Model attributes in the form of hash
+    # @!visibility private
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::IoCSignalSeverityCount` initialize method"
+      end
+
+      self.additional_properties = {}
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          self.additional_properties[k.to_sym] = v
+        else
+          h[k.to_sym] = v
+        end
+      }
+
+      if attributes.key?(:'count')
+        self.count = attributes[:'count']
+      end
+
+      if attributes.key?(:'severity')
+        self.severity = attributes[:'severity']
+      end
+    end
+
+    # Returns the object in the form of hash, with additionalProperties support.
+    # @return [Hash] Returns the object in the form of hash
+    # @!visibility private
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      self.additional_properties.each_pair do |attr, value|
+        hash[attr] = value
+      end
+      hash
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param o [Object] Object to be compared
+    # @!visibility private
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          count == o.count &&
+          severity == o.severity &&
+          additional_properties == o.additional_properties
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    # @!visibility private
+    def hash
+      [count, severity, additional_properties].hash
+    end
+  end
+end

data/lib/datadog_api_client/v2/models/{synthetics_fast_test_result_device.rb → io_c_source.rb}

@@ -17,14 +17,11 @@ require 'date'
 require 'time'
 
 module DatadogAPIClient::V2
-  # Device information for browser-based fast tests.
-  class SyntheticsFastTestResultDevice
+  # A threat intelligence source that has flagged an indicator.
+  class IoCSource
     include BaseGenericModel
 
-    # Device identifier.
-    attr_accessor :id
-
-    # Display name of the device.
+    # Name of the threat intelligence source.
     attr_accessor :name
 
     attr_accessor :additional_properties
@@ -33,7 +30,6 @@ module DatadogAPIClient::V2
     # @!visibility private
     def self.attribute_map
       {
-        :'id' => :'id',
         :'name' => :'name'
       }
     end
@@ -42,7 +38,6 @@ module DatadogAPIClient::V2
     # @!visibility private
     def self.openapi_types
       {
-        :'id' => :'String',
         :'name' => :'String'
       }
     end
@@ -52,7 +47,7 @@ module DatadogAPIClient::V2
     # @!visibility private
     def initialize(attributes = {})
       if (!attributes.is_a?(Hash))
-        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::SyntheticsFastTestResultDevice` initialize method"
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::IoCSource` initialize method"
       end
 
       self.additional_properties = {}
@@ -65,10 +60,6 @@ module DatadogAPIClient::V2
         end
       }
 
-      if attributes.key?(:'id')
-        self.id = attributes[:'id']
-      end
-
       if attributes.key?(:'name')
         self.name = attributes[:'name']
       end
@@ -100,7 +91,6 @@ module DatadogAPIClient::V2
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
-          id == o.id &&
           name == o.name &&
           additional_properties == o.additional_properties
     end
@@ -109,7 +99,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [id, name, additional_properties].hash
+      [name, additional_properties].hash
     end
   end
 end