Class FusionAlertRuleProperties


  • public final class FusionAlertRuleProperties
    extends Object
    Fusion alert rule base property bag.
    • Constructor Detail

      • FusionAlertRuleProperties

        public FusionAlertRuleProperties()
    • Method Detail

      • alertRuleTemplateName

        public String alertRuleTemplateName()
        Get the alertRuleTemplateName property: The Name of the alert rule template used to create this rule.
        Returns:
        the alertRuleTemplateName value.
      • withAlertRuleTemplateName

        public FusionAlertRuleProperties withAlertRuleTemplateName​(String alertRuleTemplateName)
        Set the alertRuleTemplateName property: The Name of the alert rule template used to create this rule.
        Parameters:
        alertRuleTemplateName - the alertRuleTemplateName value to set.
        Returns:
        the FusionAlertRuleProperties object itself.
      • description

        public String description()
        Get the description property: The description of the alert rule.
        Returns:
        the description value.
      • displayName

        public String displayName()
        Get the displayName property: The display name for alerts created by this alert rule.
        Returns:
        the displayName value.
      • enabled

        public boolean enabled()
        Get the enabled property: Determines whether this alert rule is enabled or disabled.
        Returns:
        the enabled value.
      • withEnabled

        public FusionAlertRuleProperties withEnabled​(boolean enabled)
        Set the enabled property: Determines whether this alert rule is enabled or disabled.
        Parameters:
        enabled - the enabled value to set.
        Returns:
        the FusionAlertRuleProperties object itself.
      • sourceSettings

        public List<FusionSourceSettings> sourceSettings()
        Get the sourceSettings property: Configuration for all supported source signals in fusion detection.
        Returns:
        the sourceSettings value.
      • withSourceSettings

        public FusionAlertRuleProperties withSourceSettings​(List<FusionSourceSettings> sourceSettings)
        Set the sourceSettings property: Configuration for all supported source signals in fusion detection.
        Parameters:
        sourceSettings - the sourceSettings value to set.
        Returns:
        the FusionAlertRuleProperties object itself.
      • scenarioExclusionPatterns

        public List<FusionScenarioExclusionPattern> scenarioExclusionPatterns()
        Get the scenarioExclusionPatterns property: Configuration to exclude scenarios in fusion detection.
        Returns:
        the scenarioExclusionPatterns value.
      • withScenarioExclusionPatterns

        public FusionAlertRuleProperties withScenarioExclusionPatterns​(List<FusionScenarioExclusionPattern> scenarioExclusionPatterns)
        Set the scenarioExclusionPatterns property: Configuration to exclude scenarios in fusion detection.
        Parameters:
        scenarioExclusionPatterns - the scenarioExclusionPatterns value to set.
        Returns:
        the FusionAlertRuleProperties object itself.
      • lastModifiedUtc

        public OffsetDateTime lastModifiedUtc()
        Get the lastModifiedUtc property: The last time that this alert has been modified.
        Returns:
        the lastModifiedUtc value.
      • severity

        public AlertSeverity severity()
        Get the severity property: The severity for alerts created by this alert rule.
        Returns:
        the severity value.
      • tactics

        public List<AttackTactic> tactics()
        Get the tactics property: The tactics of the alert rule.
        Returns:
        the tactics value.
      • techniques

        public List<String> techniques()
        Get the techniques property: The techniques of the alert rule.
        Returns:
        the techniques value.
      • validate

        public void validate()
        Validates the instance.
        Throws:
        IllegalArgumentException - thrown if the instance is not valid.