Finding class

Security Command Center finding.

A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.

Constructors

Finding({Access? access, Application? application, AttackExposure? attackExposure, BackupDisasterRecovery? backupDisasterRecovery, String? canonicalName, String? category, CloudDlpDataProfile? cloudDlpDataProfile, CloudDlpInspection? cloudDlpInspection, List<Compliance>? compliances, List<Connection>? connections, Map<String, ContactDetails>? contacts, List<Container>? containers, String? createTime, Database? database, String? description, String? eventTime, Exfiltration? exfiltration, Map<String, GoogleCloudSecuritycenterV1ExternalSystem>? externalSystems, String? externalUri, List<File>? files, String? findingClass, List<IamBinding>? iamBindings, Indicator? indicator, KernelRootkit? kernelRootkit, Kubernetes? kubernetes, List<LoadBalancer>? loadBalancers, List<LogEntry>? logEntries, MitreAttack? mitreAttack, String? moduleName, String? mute, String? muteInitiator, String? muteUpdateTime, String? name, String? nextSteps, List<OrgPolicy>? orgPolicies, String? parent, String? parentDisplayName, List<Process>? processes, String? resourceName, SecurityMarks? securityMarks, SecurityPosture? securityPosture, String? severity, Map<String, Object?>? sourceProperties, String? state, Vulnerability? vulnerability})
Finding.fromJson(Map json_)

Properties

access Access?
Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
getter/setter pair
application Application?
Represents an application associated with the finding.
getter/setter pair
attackExposure AttackExposure?
The results of an attack path simulation relevant to this finding.
getter/setter pair
backupDisasterRecovery BackupDisasterRecovery?
Fields related to Backup and DR findings.
getter/setter pair
canonicalName String?
The canonical name of the finding.
getter/setter pair
category String?
The additional taxonomy group within findings from a given source.
getter/setter pair
cloudDlpDataProfile CloudDlpDataProfile?
Cloud DLP data profile that is associated with the finding.
getter/setter pair
cloudDlpInspection CloudDlpInspection?
Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.
getter/setter pair
compliances List<Compliance>?
Contains compliance information for security standards associated to the finding.
getter/setter pair
connections List<Connection>?
Contains information about the IP connection associated with the finding.
getter/setter pair
contacts Map<String, ContactDetails>?
Map containing the points of contact for the given finding.
getter/setter pair
containers List<Container>?
Containers associated with the finding.
getter/setter pair
createTime String?
The time at which the finding was created in Security Command Center.
getter/setter pair
database Database?
Database associated with the finding.
getter/setter pair
description String?
Contains more details about the finding.
getter/setter pair
eventTime String?
The time the finding was first detected.
getter/setter pair
exfiltration Exfiltration?
Represents exfiltrations associated with the finding.
getter/setter pair
externalSystems Map<String, GoogleCloudSecuritycenterV1ExternalSystem>?
Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
getter/setter pair
externalUri String?
The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found.
getter/setter pair
files List<File>?
File associated with the finding.
getter/setter pair
findingClass String?
The class of the finding. Possible string values are:
getter/setter pair
hashCode int
The hash code for this object.
no setterinherited
iamBindings List<IamBinding>?
Represents IAM bindings associated with the finding.
getter/setter pair
indicator Indicator?
Represents what's commonly known as an indicator of compromise (IoC) in computer forensics.
getter/setter pair
kernelRootkit KernelRootkit?
Signature of the kernel rootkit.
getter/setter pair
kubernetes Kubernetes?
Kubernetes resources associated with the finding.
getter/setter pair
loadBalancers List<LoadBalancer>?
The load balancers associated with the finding.
getter/setter pair
logEntries List<LogEntry>?
Log entries that are relevant to the finding.
getter/setter pair
mitreAttack MitreAttack?
MITRE ATT&CK tactics and techniques related to this finding.
getter/setter pair
moduleName String?
Unique identifier of the module which generated the finding.
getter/setter pair
mute String?
Indicates the mute state of a finding (either muted, unmuted or undefined).
getter/setter pair
muteInitiator String?
Records additional information about the mute operation, for example, the [mute configuration](/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
getter/setter pair
muteUpdateTime String?
The most recent time this finding was muted or unmuted.
getter/setter pair
name String?
The relative resource name of the finding.
getter/setter pair
nextSteps String?
Steps to address the finding.
getter/setter pair
orgPolicies List<OrgPolicy>?
Contains information about the org policies associated with the finding.
getter/setter pair
parent String?
The relative resource name of the source the finding belongs to.
getter/setter pair
parentDisplayName String?
The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
getter/setter pair
processes List<Process>?
Represents operating system processes associated with the Finding.
getter/setter pair
resourceName String?
For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for.
getter/setter pair
runtimeType Type
A representation of the runtime type of the object.
no setterinherited
securityMarks SecurityMarks?
User specified security marks.
getter/setter pair
securityPosture SecurityPosture?
The security posture associated with the finding.
getter/setter pair
severity String?
The severity of the finding.
getter/setter pair
sourceProperties Map<String, Object?>?
Source specific properties.
getter/setter pair
state String?
The state of the finding. Possible string values are:
getter/setter pair
vulnerability Vulnerability?
Represents vulnerability-specific fields like CVE and CVSS scores.
getter/setter pair

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toJson() Map<String, dynamic>
toString() String
A string representation of this object.
inherited

Operators

operator ==(Object other) bool
The equality operator.
inherited