Documentation
¶
Index ¶
- type AdministrativeArea
- type Artifact
- type ArtifactAddInput
- type Assignee
- type AttackPattern
- type AttackPatternConnection
- type AttackPatternEdge
- type AttributeBasedOn
- type AttributeColumn
- type AttributeColumnConfiguration
- type AttributeRef
- type AutonomousSystem
- type AutonomousSystemAddInput
- type BankAccount
- type BankAccountAddInput
- type Campaign
- type Capability
- type Case
- type CaseConnection
- type CaseEdge
- type CaseIncident
- type CaseRfi
- type CaseRft
- type CaseTemplate
- type Channel
- type City
- type ConfidenceLevel
- type ConfidenceLevelInput
- type ConfidenceLevelOverride
- type ConfidenceLevelOverrideInput
- type Connector
- type ConnectorConfig
- type ConnectorConfiguration
- type ConnectorInfo
- type ConnectorQueueDetails
- type Container
- type ContainerConnection
- type ContainerEdge
- type Country
- type CountryConnection
- type CountryEdge
- type CourseOfAction
- type CourseOfActionConnection
- type CourseOfActionEdge
- type Creator
- type Credential
- type CredentialAddInput
- type CryptocurrencyWallet
- type CryptocurrencyWalletAddInput
- type CryptographicKey
- type CryptographicKeyAddInput
- type CsvMapper
- type CsvMapperRepresentation
- type CsvMapperRepresentationAttribute
- type CsvMapperRepresentationTarget
- type CsvMapperRepresentationTargetColumn
- type CsvMapperRepresentationType
- type DataComponent
- type DataComponentConnection
- type DataComponentEdge
- type DataSource
- type DecayChartData
- type DecayHistory
- type DecayLiveDetails
- type DefaultMarking
- type DefaultValue
- type DefaultValueAttribute
- type Dictionary
- type DictionaryInput
- type Directory
- type DirectoryAddInput
- type DomainName
- type DomainNameAddInput
- type EditUserContext
- type EffectiveConfidenceLevel
- type EffectiveConfidenceLevelOverride
- type EffectiveConfidenceLevelSource
- type EffectiveConfidenceLevelSourceObject
- type EffectiveConfidenceLevelSourceType
- type EmailAddr
- type EmailAddrAddInput
- type EmailMessage
- type EmailMessageAddInput
- type EmailMimePartType
- type EmailMimePartTypeAddInput
- type EntitySetting
- type Event
- type ExternalReference
- type ExternalReferenceConnection
- type ExternalReferenceEdge
- type Feedback
- type File
- type FileConnection
- type FileEdge
- type FileMetadata
- type Group
- type GroupConnection
- type GroupEdge
- type Grouping
- type GroupingConnection
- type GroupingContext
- type GroupingEdge
- type Hash
- type HashInput
- type Hostname
- type HostnameAddInput
- type IPv4Addr
- type IPv4AddrAddInput
- type IPv6Addr
- type IPv6AddrAddInput
- type Identity
- type IdentityType
- type Incident
- type Indicator
- type IndicatorConnection
- type IndicatorDecayRule
- type IndicatorEdge
- type IndicatorType
- type Individual
- type Infrastructure
- type IntrusionSet
- type KillChainPhase
- type Label
- type Language
- type Location
- type LocationConnection
- type LocationEdge
- type MacAddr
- type MacAddrAddInput
- type Malware
- type MalwareAnalysis
- type ManagerConfiguration
- type MarkingDefinition
- type MarkingDefinitionShort
- type Measure
- type MeasureInput
- type MediaContent
- type MediaContentAddInput
- type MemberAccess
- type Mutex
- type MutexAddInput
- type Narrative
- type NarrativeConnection
- type NarrativeEdge
- type NetworkTraffic
- type NetworkTrafficAddInput
- type Note
- type NoteConnection
- type NoteEdge
- type Notifier
- type NotifierConnector
- type Number
- type ObservedData
- type Operator
- type Opinion
- type OpinionConnection
- type OpinionEdge
- type OpinionType
- type Organization
- type OrganizationConnection
- type OrganizationEdge
- type OverviewWidgetCustomization
- type PageInfo
- type Participant
- type PatternType
- type PaymentCard
- type PaymentCardAddInput
- type Persona
- type PersonaAddInput
- type PhoneNumber
- type PhoneNumberAddInput
- type Platform
- type Position
- type Process
- type ProcessAddInput
- type PublicDashboard
- type RabbitMQConnection
- type Region
- type RegionConnection
- type RegionEdge
- type Report
- type ReportConnection
- type ReportEdge
- type ReportType
- type Representative
- type Role
- type RoleConnection
- type RoleEdge
- type ScaleAttribute
- type Sector
- type SectorConnection
- type SectorEdge
- type SessionDetail
- type Software
- type SoftwareAddInput
- type SoftwareConnection
- type SoftwareEdge
- type State
- type Status
- type StatusTemplate
- type StixCoreObject
- type StixCoreRelationship
- type StixCoreRelationshipConnection
- type StixCoreRelationshipEdge
- type StixCyberObservable
- type StixCyberObservableConnection
- type StixCyberObservableEdge
- type StixCyberObservableType
- type StixDomainObject
- type StixFile
- type StixFileAddInput
- type StixFileConnection
- type StixFileEdge
- type StixObject
- type StixObjectOrStixRelationship
- type StixObjectOrStixRelationshipConnection
- type StixObjectOrStixRelationshipEdge
- type StixObjectOrStixRelationshipOrCreator
- type StixObjectOrStixRelationshipRefConnection
- type StixObjectOrStixRelationshipRefEdge
- type StixRefRelationship
- type StixSightingRelationship
- type SubType
- type System
- type Task
- type TaskConnection
- type TaskEdge
- type TaskTemplate
- type TaskTemplateConnection
- type TaskTemplateEdge
- type Text
- type TextAddInput
- type ThreatActor
- type ThreatActorGroup
- type ThreatActorIndividual
- type Tool
- type TrackingNumber
- type TrackingNumberAddInput
- type TypeAttribute
- type URL
- type URLAddInput
- type UnitSystem
- type User
- type UserAccount
- type UserAccountAddInput
- type UserAgent
- type UserAgentAddInput
- type UserConnection
- type UserEdge
- type Vocabulary
- type VocabularyDefinition
- type VocabularyFieldDefinition
- type Vulnerability
- type VulnerabilityConnection
- type VulnerabilityEdge
- type WindowsRegistryKey
- type WindowsRegistryKeyAddInput
- type WindowsRegistryValueType
- type WindowsRegistryValueTypeAddInput
- type Work
- type WorkMessage
- type WorkTracking
- type Workspace
- type X509Certificate
- type X509CertificateAddInput
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AdministrativeArea ¶
type AdministrativeArea struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Location
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Latitude float64 `gocti:"latitude" json:"latitude,omitempty"`
Longitude float64 `gocti:"longitude" json:"longitude,omitempty"`
Precision float64 `gocti:"precision" json:"precision,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
// AdministrativeArea
Country Country `gocti:"country" json:"country,omitempty"`
}
AdministrativeArea represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AdministrativeArea) MarshalJSON ¶
func (a AdministrativeArea) MarshalJSON() ([]byte, error)
type Artifact ¶
type Artifact struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// HashedObservable
Hashes []Hash `gocti:"hashes" json:"hashes,omitempty"`
// Artifact
MimeType string `gocti:"mime_type" json:"mime_type,omitempty"`
PayloadBin string `gocti:"payload_bin" json:"payload_bin,omitempty"`
URL string `gocti:"url" json:"url,omitempty"`
EncryptionAlgorithm string `gocti:"encryption_algorithm" json:"encryption_algorithm,omitempty"`
DecryptionKey string `gocti:"decryption_key" json:"decryption_key,omitempty"`
XOpenctiAdditionalNames []string `gocti:"x_opencti_additional_names" json:"x_opencti_additional_names,omitempty"`
}
Artifact represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Artifact) MarshalJSON ¶
type ArtifactAddInput ¶
type ArtifactAddInput struct {
// ArtifactAddInput
Hashes []HashInput `gocti:"hashes" json:"hashes,omitempty"`
MimeType string `gocti:"mime_type" json:"mime_type,omitempty"`
PayloadBin string `gocti:"payload_bin" json:"payload_bin,omitempty"`
URL string `gocti:"url" json:"url,omitempty"`
EncryptionAlgorithm string `gocti:"encryption_algorithm" json:"encryption_algorithm,omitempty"`
DecryptionKey string `gocti:"decryption_key" json:"decryption_key,omitempty"`
XOpenctiAdditionalNames []string `gocti:"x_opencti_additional_names" json:"x_opencti_additional_names,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
ArtifactAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ArtifactAddInput) MarshalJSON ¶
func (a ArtifactAddInput) MarshalJSON() ([]byte, error)
type Assignee ¶
type Assignee struct {
// Assignee
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
}
Assignee represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Assignee) MarshalJSON ¶
type AttackPattern ¶
type AttackPattern struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// AttackPattern
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
XMitrePlatforms []string `gocti:"x_mitre_platforms" json:"x_mitre_platforms,omitempty"`
XMitrePermissionsRequired []string `gocti:"x_mitre_permissions_required" json:"x_mitre_permissions_required,omitempty"`
XMitreDetection string `gocti:"x_mitre_detection" json:"x_mitre_detection,omitempty"`
XMitreID string `gocti:"x_mitre_id" json:"x_mitre_id,omitempty"`
KillChainPhases []KillChainPhase `gocti:"killChainPhases" json:"killChainPhases,omitempty"`
CoursesOfAction CourseOfActionConnection `gocti:"coursesOfAction" json:"coursesOfAction,omitempty"`
ParentAttackPatterns AttackPatternConnection `gocti:"parentAttackPatterns" json:"parentAttackPatterns,omitempty"`
SubAttackPatterns AttackPatternConnection `gocti:"subAttackPatterns" json:"subAttackPatterns,omitempty"`
IsSubAttackPattern bool `gocti:"isSubAttackPattern" json:"isSubAttackPattern,omitempty"`
DataComponents DataComponentConnection `gocti:"dataComponents" json:"dataComponents,omitempty"`
}
AttackPattern represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (AttackPattern) MarshalJSON ¶
func (a AttackPattern) MarshalJSON() ([]byte, error)
type AttackPatternConnection ¶
type AttackPatternConnection struct {
// AttackPatternConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []AttackPatternEdge `gocti:"edges" json:"edges,omitempty"`
}
AttackPatternConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AttackPatternConnection) MarshalJSON ¶
func (a AttackPatternConnection) MarshalJSON() ([]byte, error)
type AttackPatternEdge ¶
type AttackPatternEdge struct {
// AttackPatternEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node AttackPattern `gocti:"node" json:"node,omitempty"`
}
AttackPatternEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AttackPatternEdge) MarshalJSON ¶
func (a AttackPatternEdge) MarshalJSON() ([]byte, error)
type AttributeBasedOn ¶
type AttributeBasedOn struct {
// AttributeBasedOn
Representations []string `gocti:"representations" json:"representations,omitempty"`
}
AttributeBasedOn represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AttributeBasedOn) MarshalJSON ¶
func (a AttributeBasedOn) MarshalJSON() ([]byte, error)
type AttributeColumn ¶
type AttributeColumn struct {
// AttributeColumn
ColumnName string `gocti:"column_name" json:"column_name,omitempty"`
Configuration AttributeColumnConfiguration `gocti:"configuration" json:"configuration,omitempty"`
}
AttributeColumn represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AttributeColumn) MarshalJSON ¶
func (a AttributeColumn) MarshalJSON() ([]byte, error)
type AttributeColumnConfiguration ¶
type AttributeColumnConfiguration struct {
// AttributeColumnConfiguration
Separator string `gocti:"separator" json:"separator,omitempty"`
PatternDate string `gocti:"pattern_date" json:"pattern_date,omitempty"`
Timezone string `gocti:"timezone" json:"timezone,omitempty"`
}
AttributeColumnConfiguration represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AttributeColumnConfiguration) MarshalJSON ¶
func (a AttributeColumnConfiguration) MarshalJSON() ([]byte, error)
type AttributeRef ¶
type AttributeRef struct {
// AttributeRef
Multiple bool `gocti:"multiple" json:"multiple,omitempty"`
ID string `gocti:"id" json:"id,omitempty"`
IDs []string `gocti:"ids" json:"ids,omitempty"`
}
AttributeRef represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AttributeRef) MarshalJSON ¶
func (a AttributeRef) MarshalJSON() ([]byte, error)
type AutonomousSystem ¶
type AutonomousSystem struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// AutonomousSystem
Number int `gocti:"number" json:"number,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Rir string `gocti:"rir" json:"rir,omitempty"`
}
AutonomousSystem represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AutonomousSystem) MarshalJSON ¶
func (a AutonomousSystem) MarshalJSON() ([]byte, error)
type AutonomousSystemAddInput ¶
type AutonomousSystemAddInput struct {
// AutonomousSystemAddInput
Number int `gocti:"number" json:"number,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Rir string `gocti:"rir" json:"rir,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
AutonomousSystemAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (AutonomousSystemAddInput) MarshalJSON ¶
func (a AutonomousSystemAddInput) MarshalJSON() ([]byte, error)
type BankAccount ¶
type BankAccount struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// BankAccount
Iban string `gocti:"iban" json:"iban,omitempty"`
Bic string `gocti:"bic" json:"bic,omitempty"`
AccountNumber string `gocti:"account_number" json:"account_number,omitempty"`
}
BankAccount represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (BankAccount) MarshalJSON ¶
func (b BankAccount) MarshalJSON() ([]byte, error)
type BankAccountAddInput ¶
type BankAccountAddInput struct {
// BankAccountAddInput
Iban string `gocti:"iban" json:"iban,omitempty"`
Bic string `gocti:"bic" json:"bic,omitempty"`
AccountNumber string `gocti:"account_number" json:"account_number,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
BankAccountAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (BankAccountAddInput) MarshalJSON ¶
func (b BankAccountAddInput) MarshalJSON() ([]byte, error)
type Campaign ¶
type Campaign struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Campaign
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
Objective string `gocti:"objective" json:"objective,omitempty"`
}
Campaign represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Campaign) MarshalJSON ¶
type Capability ¶
type Capability struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// Capability
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
AttributeOrder int `gocti:"attribute_order" json:"attribute_order,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
}
Capability represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Capability) MarshalJSON ¶
func (c Capability) MarshalJSON() ([]byte, error)
type Case ¶
type Case struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Case
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
Tasks TaskConnection `gocti:"tasks" json:"tasks,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
Case represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - CaseIncident - CaseRfi - CaseRft - Feedback
(See the examples for ways to decode an interface field into an implementation).
func (Case) Implementations ¶
func (Case) MarshalJSON ¶
type CaseConnection ¶
type CaseConnection struct {
// CaseConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []CaseEdge `gocti:"edges" json:"edges,omitempty"`
}
CaseConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CaseConnection) MarshalJSON ¶
func (c CaseConnection) MarshalJSON() ([]byte, error)
type CaseEdge ¶
type CaseEdge struct {
// CaseEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Case `gocti:"node" json:"node,omitempty"`
}
CaseEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CaseEdge) MarshalJSON ¶
type CaseIncident ¶
type CaseIncident struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Case
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
Tasks TaskConnection `gocti:"tasks" json:"tasks,omitempty"`
// CaseIncident
Rating int `gocti:"rating" json:"rating,omitempty"`
ResponseTypes []string `gocti:"response_types" json:"response_types,omitempty"`
Severity string `gocti:"severity" json:"severity,omitempty"`
Priority string `gocti:"priority" json:"priority,omitempty"`
}
CaseIncident represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CaseIncident) MarshalJSON ¶
func (c CaseIncident) MarshalJSON() ([]byte, error)
type CaseRfi ¶
type CaseRfi struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Case
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
Tasks TaskConnection `gocti:"tasks" json:"tasks,omitempty"`
// CaseRfi
InformationTypes []string `gocti:"information_types" json:"information_types,omitempty"`
Severity string `gocti:"severity" json:"severity,omitempty"`
Priority string `gocti:"priority" json:"priority,omitempty"`
}
CaseRfi represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CaseRfi) MarshalJSON ¶
type CaseRft ¶
type CaseRft struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Case
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
Tasks TaskConnection `gocti:"tasks" json:"tasks,omitempty"`
// CaseRft
TakedownTypes []string `gocti:"takedown_types" json:"takedown_types,omitempty"`
Severity string `gocti:"severity" json:"severity,omitempty"`
Priority string `gocti:"priority" json:"priority,omitempty"`
}
CaseRft represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CaseRft) MarshalJSON ¶
type CaseTemplate ¶
type CaseTemplate struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// CaseTemplate
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Tasks TaskTemplateConnection `gocti:"tasks" json:"tasks,omitempty"`
}
CaseTemplate represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CaseTemplate) MarshalJSON ¶
func (c CaseTemplate) MarshalJSON() ([]byte, error)
type Channel ¶
type Channel struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Channel
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
ChannelTypes []string `gocti:"channel_types" json:"channel_types,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
}
Channel represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Channel) MarshalJSON ¶
type City ¶
type City struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Location
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Latitude float64 `gocti:"latitude" json:"latitude,omitempty"`
Longitude float64 `gocti:"longitude" json:"longitude,omitempty"`
Precision float64 `gocti:"precision" json:"precision,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
// City
Country Country `gocti:"country" json:"country,omitempty"`
AdministrativeArea AdministrativeArea `gocti:"administrativeArea" json:"administrativeArea,omitempty"`
}
City represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (City) MarshalJSON ¶
type ConfidenceLevel ¶
type ConfidenceLevel struct {
// ConfidenceLevel
MaxConfidence int `gocti:"max_confidence" json:"max_confidence,omitempty"`
Overrides []ConfidenceLevelOverride `gocti:"overrides" json:"overrides,omitempty"`
}
ConfidenceLevel represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ConfidenceLevel) MarshalJSON ¶
func (c ConfidenceLevel) MarshalJSON() ([]byte, error)
type ConfidenceLevelInput ¶
type ConfidenceLevelInput struct {
MaxConfidence int `json:"max_confidence"`
Overrides []ConfidenceLevelOverrideInput `json:"overrides,omitempty"`
}
func (ConfidenceLevelInput) MarshalJSON ¶
func (c ConfidenceLevelInput) MarshalJSON() ([]byte, error)
type ConfidenceLevelOverride ¶
type ConfidenceLevelOverride struct {
// ConfidenceLevelOverride
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
MaxConfidence int `gocti:"max_confidence" json:"max_confidence,omitempty"`
}
ConfidenceLevelOverride represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ConfidenceLevelOverride) MarshalJSON ¶
func (c ConfidenceLevelOverride) MarshalJSON() ([]byte, error)
type ConfidenceLevelOverrideInput ¶
type ConfidenceLevelOverrideInput struct {
EntityType string `json:"entity_type,omitempty"`
MaxConfidence int `json:"max_confidence,omitempty"`
}
func (ConfidenceLevelOverrideInput) MarshalJSON ¶
func (c ConfidenceLevelOverrideInput) MarshalJSON() ([]byte, error)
type Connector ¶
type Connector struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// Connector
Name string `gocti:"name" json:"name,omitempty"`
Active bool `gocti:"active" json:"active,omitempty"`
Auto bool `gocti:"auto" json:"auto,omitempty"`
OnlyContextual bool `gocti:"only_contextual" json:"only_contextual,omitempty"`
PlaybookCompatible bool `gocti:"playbook_compatible" json:"playbook_compatible,omitempty"`
ConnectorTriggerFilters string `gocti:"connector_trigger_filters" json:"connector_trigger_filters,omitempty"`
ConnectorType string `gocti:"connector_type" json:"connector_type,omitempty"`
ConnectorScope []string `gocti:"connector_scope" json:"connector_scope,omitempty"`
ConnectorState string `gocti:"connector_state" json:"connector_state,omitempty"`
ConnectorSchema string `gocti:"connector_schema" json:"connector_schema,omitempty"`
ConnectorSchemaUi string `gocti:"connector_schema_ui" json:"connector_schema_ui,omitempty"`
ConnectorStateReset bool `gocti:"connector_state_reset" json:"connector_state_reset,omitempty"`
ConnectorUserID string `gocti:"connector_user_id" json:"connector_user_id,omitempty"`
ConnectorUser User `gocti:"connector_user" json:"connector_user,omitempty"`
ConnectorQueueDetails ConnectorQueueDetails `gocti:"connector_queue_details" json:"connector_queue_details,omitempty"`
ConnectorInfo ConnectorInfo `gocti:"connector_info" json:"connector_info,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
Config ConnectorConfig `gocti:"config" json:"config,omitempty"`
Works []Work `gocti:"works" json:"works,omitempty"`
BuiltIn bool `gocti:"built_in" json:"built_in,omitempty"`
Configurations []ConnectorConfiguration `gocti:"configurations" json:"configurations,omitempty"`
}
Connector represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Connector) MarshalJSON ¶
type ConnectorConfig ¶
type ConnectorConfig struct {
// ConnectorConfig
Connection RabbitMQConnection `gocti:"connection" json:"connection,omitempty"`
Listen string `gocti:"listen" json:"listen,omitempty"`
ListenRouting string `gocti:"listen_routing" json:"listen_routing,omitempty"`
ListenExchange string `gocti:"listen_exchange" json:"listen_exchange,omitempty"`
Push string `gocti:"push" json:"push,omitempty"`
PushRouting string `gocti:"push_routing" json:"push_routing,omitempty"`
PushExchange string `gocti:"push_exchange" json:"push_exchange,omitempty"`
}
ConnectorConfig represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ConnectorConfig) MarshalJSON ¶
func (c ConnectorConfig) MarshalJSON() ([]byte, error)
type ConnectorConfiguration ¶
type ConnectorConfiguration struct {
// ConnectorConfiguration
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Configuration string `gocti:"configuration" json:"configuration,omitempty"`
}
ConnectorConfiguration represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ConnectorConfiguration) MarshalJSON ¶
func (c ConnectorConfiguration) MarshalJSON() ([]byte, error)
type ConnectorInfo ¶
type ConnectorInfo struct {
// ConnectorInfo
RunAndTerminate bool `gocti:"run_and_terminate" json:"run_and_terminate,omitempty"`
Buffering bool `gocti:"buffering" json:"buffering,omitempty"`
QueueThreshold float64 `gocti:"queue_threshold" json:"queue_threshold,omitempty"`
QueueMessagesSize float64 `gocti:"queue_messages_size" json:"queue_messages_size,omitempty"`
NextRunDatetime *time.Time `gocti:"next_run_datetime" json:"next_run_datetime,omitempty"`
LastRunDatetime *time.Time `gocti:"last_run_datetime" json:"last_run_datetime,omitempty"`
}
ConnectorInfo represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ConnectorInfo) MarshalJSON ¶
func (c ConnectorInfo) MarshalJSON() ([]byte, error)
type ConnectorQueueDetails ¶
type ConnectorQueueDetails struct {
// ConnectorQueueDetails
MessagesNumber float64 `gocti:"messages_number" json:"messages_number,omitempty"`
MessagesSize float64 `gocti:"messages_size" json:"messages_size,omitempty"`
}
ConnectorQueueDetails represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ConnectorQueueDetails) MarshalJSON ¶
func (c ConnectorQueueDetails) MarshalJSON() ([]byte, error)
type Container ¶
type Container struct {
// Container
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
Container represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - Note - ObservedData - Opinion - Report - Grouping - Task - CaseIncident - CaseRfi - CaseRft - Feedback
(See the examples for ways to decode an interface field into an implementation)
func (Container) Implementations ¶
func (Container) MarshalJSON ¶
type ContainerConnection ¶
type ContainerConnection struct {
// ContainerConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []ContainerEdge `gocti:"edges" json:"edges,omitempty"`
}
ContainerConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ContainerConnection) MarshalJSON ¶
func (c ContainerConnection) MarshalJSON() ([]byte, error)
type ContainerEdge ¶
type ContainerEdge struct {
// ContainerEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Container `gocti:"node" json:"node,omitempty"`
}
ContainerEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ContainerEdge) MarshalJSON ¶
func (c ContainerEdge) MarshalJSON() ([]byte, error)
type Country ¶
type Country struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Location
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Latitude float64 `gocti:"latitude" json:"latitude,omitempty"`
Longitude float64 `gocti:"longitude" json:"longitude,omitempty"`
Precision float64 `gocti:"precision" json:"precision,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
// Country
Region Region `gocti:"region" json:"region,omitempty"`
}
Country represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Country) MarshalJSON ¶
type CountryConnection ¶
type CountryConnection struct {
// CountryConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []CountryEdge `gocti:"edges" json:"edges,omitempty"`
}
CountryConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CountryConnection) MarshalJSON ¶
func (c CountryConnection) MarshalJSON() ([]byte, error)
type CountryEdge ¶
type CountryEdge struct {
// CountryEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Country `gocti:"node" json:"node,omitempty"`
}
CountryEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CountryEdge) MarshalJSON ¶
func (c CountryEdge) MarshalJSON() ([]byte, error)
type CourseOfAction ¶
type CourseOfAction struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// CourseOfAction
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
XMitreID string `gocti:"x_mitre_id" json:"x_mitre_id,omitempty"`
XOpenctiThreatHunting string `gocti:"x_opencti_threat_hunting" json:"x_opencti_threat_hunting,omitempty"`
XOpenctiLogSources []string `gocti:"x_opencti_log_sources" json:"x_opencti_log_sources,omitempty"`
AttackPatterns AttackPatternConnection `gocti:"attackPatterns" json:"attackPatterns,omitempty"`
}
CourseOfAction represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (CourseOfAction) MarshalJSON ¶
func (c CourseOfAction) MarshalJSON() ([]byte, error)
type CourseOfActionConnection ¶
type CourseOfActionConnection struct {
// CourseOfActionConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []CourseOfActionEdge `gocti:"edges" json:"edges,omitempty"`
}
CourseOfActionConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CourseOfActionConnection) MarshalJSON ¶
func (c CourseOfActionConnection) MarshalJSON() ([]byte, error)
type CourseOfActionEdge ¶
type CourseOfActionEdge struct {
// CourseOfActionEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node CourseOfAction `gocti:"node" json:"node,omitempty"`
}
CourseOfActionEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CourseOfActionEdge) MarshalJSON ¶
func (c CourseOfActionEdge) MarshalJSON() ([]byte, error)
type Creator ¶
type Creator struct {
// Creator
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
Representative Representative `gocti:"representative" json:"representative,omitempty"`
}
Creator represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Creator) MarshalJSON ¶
type Credential ¶
type Credential struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Credential
Value string `gocti:"value" json:"value,omitempty"`
}
Credential represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Credential) MarshalJSON ¶
func (c Credential) MarshalJSON() ([]byte, error)
type CredentialAddInput ¶
type CredentialAddInput struct {
// CredentialAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
CredentialAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CredentialAddInput) MarshalJSON ¶
func (c CredentialAddInput) MarshalJSON() ([]byte, error)
type CryptocurrencyWallet ¶
type CryptocurrencyWallet struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// CryptocurrencyWallet
Value string `gocti:"value" json:"value,omitempty"`
}
CryptocurrencyWallet represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CryptocurrencyWallet) MarshalJSON ¶
func (c CryptocurrencyWallet) MarshalJSON() ([]byte, error)
type CryptocurrencyWalletAddInput ¶
type CryptocurrencyWalletAddInput struct {
// CryptocurrencyWalletAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
CryptocurrencyWalletAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CryptocurrencyWalletAddInput) MarshalJSON ¶
func (c CryptocurrencyWalletAddInput) MarshalJSON() ([]byte, error)
type CryptographicKey ¶
type CryptographicKey struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// CryptographicKey
Value string `gocti:"value" json:"value,omitempty"`
}
CryptographicKey represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CryptographicKey) MarshalJSON ¶
func (c CryptographicKey) MarshalJSON() ([]byte, error)
type CryptographicKeyAddInput ¶
type CryptographicKeyAddInput struct {
// CryptographicKeyAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
CryptographicKeyAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CryptographicKeyAddInput) MarshalJSON ¶
func (c CryptographicKeyAddInput) MarshalJSON() ([]byte, error)
type CsvMapper ¶
type CsvMapper struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// CsvMapper
Name string `gocti:"name" json:"name,omitempty"`
HasHeader bool `gocti:"has_header" json:"has_header,omitempty"`
Separator string `gocti:"separator" json:"separator,omitempty"`
SkipLineChar string `gocti:"skipLineChar" json:"skipLineChar,omitempty"`
Representations []CsvMapperRepresentation `gocti:"representations" json:"representations,omitempty"`
Errors string `gocti:"errors" json:"errors,omitempty"`
}
CsvMapper represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CsvMapper) MarshalJSON ¶
type CsvMapperRepresentation ¶
type CsvMapperRepresentation struct {
// CsvMapperRepresentation
ID string `gocti:"id" json:"id,omitempty"`
Type CsvMapperRepresentationType `gocti:"type" json:"type,omitempty"`
Target CsvMapperRepresentationTarget `gocti:"target" json:"target,omitempty"`
Attributes []CsvMapperRepresentationAttribute `gocti:"attributes" json:"attributes,omitempty"`
From string `gocti:"from" json:"from,omitempty"`
To string `gocti:"to" json:"to,omitempty"`
}
CsvMapperRepresentation represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CsvMapperRepresentation) MarshalJSON ¶
func (c CsvMapperRepresentation) MarshalJSON() ([]byte, error)
type CsvMapperRepresentationAttribute ¶
type CsvMapperRepresentationAttribute struct {
// CsvMapperRepresentationAttribute
Key string `gocti:"key" json:"key,omitempty"`
Column AttributeColumn `gocti:"column" json:"column,omitempty"`
BasedOn AttributeBasedOn `gocti:"based_on" json:"based_on,omitempty"`
Ref AttributeRef `gocti:"ref" json:"ref,omitempty"`
DefaultValues []DefaultValue `gocti:"default_values" json:"default_values,omitempty"`
}
CsvMapperRepresentationAttribute represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CsvMapperRepresentationAttribute) MarshalJSON ¶
func (c CsvMapperRepresentationAttribute) MarshalJSON() ([]byte, error)
type CsvMapperRepresentationTarget ¶
type CsvMapperRepresentationTarget struct {
// CsvMapperRepresentationTarget
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ColumnBased CsvMapperRepresentationTargetColumn `gocti:"column_based" json:"column_based,omitempty"`
}
CsvMapperRepresentationTarget represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CsvMapperRepresentationTarget) MarshalJSON ¶
func (c CsvMapperRepresentationTarget) MarshalJSON() ([]byte, error)
type CsvMapperRepresentationTargetColumn ¶
type CsvMapperRepresentationTargetColumn struct {
// CsvMapperRepresentationTargetColumn
ColumnReference string `gocti:"column_reference" json:"column_reference,omitempty"`
Operator Operator `gocti:"operator" json:"operator,omitempty"`
Value string `gocti:"value" json:"value,omitempty"`
}
CsvMapperRepresentationTargetColumn represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (CsvMapperRepresentationTargetColumn) MarshalJSON ¶
func (c CsvMapperRepresentationTargetColumn) MarshalJSON() ([]byte, error)
type CsvMapperRepresentationType ¶
type CsvMapperRepresentationType string
const ( CsvMapperRepresentationTypeEntity CsvMapperRepresentationType = "entity" CsvMapperRepresentationTypeRelationship CsvMapperRepresentationType = "relationship" )
func (CsvMapperRepresentationType) MarshalJSON ¶
func (c CsvMapperRepresentationType) MarshalJSON() ([]byte, error)
type DataComponent ¶
type DataComponent struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// DataComponent
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
DataSource DataSource `gocti:"dataSource" json:"dataSource,omitempty"`
AttackPatterns AttackPatternConnection `gocti:"attackPatterns" json:"attackPatterns,omitempty"`
}
DataComponent represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DataComponent) MarshalJSON ¶
func (d DataComponent) MarshalJSON() ([]byte, error)
type DataComponentConnection ¶
type DataComponentConnection struct {
// DataComponentConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []DataComponentEdge `gocti:"edges" json:"edges,omitempty"`
}
DataComponentConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DataComponentConnection) MarshalJSON ¶
func (d DataComponentConnection) MarshalJSON() ([]byte, error)
type DataComponentEdge ¶
type DataComponentEdge struct {
// DataComponentEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node DataComponent `gocti:"node" json:"node,omitempty"`
}
DataComponentEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DataComponentEdge) MarshalJSON ¶
func (d DataComponentEdge) MarshalJSON() ([]byte, error)
type DataSource ¶
type DataSource struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// DataSource
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
XMitrePlatforms []string `gocti:"x_mitre_platforms" json:"x_mitre_platforms,omitempty"`
CollectionLayers []string `gocti:"collection_layers" json:"collection_layers,omitempty"`
DataComponents DataComponentConnection `gocti:"dataComponents" json:"dataComponents,omitempty"`
}
DataSource represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DataSource) MarshalJSON ¶
func (d DataSource) MarshalJSON() ([]byte, error)
type DecayChartData ¶
type DecayChartData struct {
// DecayChartData
LiveScoreSerie []DecayHistory `gocti:"live_score_serie" json:"live_score_serie,omitempty"`
}
DecayChartData represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DecayChartData) MarshalJSON ¶
func (d DecayChartData) MarshalJSON() ([]byte, error)
type DecayHistory ¶
type DecayHistory struct {
// DecayHistory
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Score int `gocti:"score" json:"score,omitempty"`
}
DecayHistory represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DecayHistory) MarshalJSON ¶
func (d DecayHistory) MarshalJSON() ([]byte, error)
type DecayLiveDetails ¶
type DecayLiveDetails struct {
// DecayLiveDetails
LiveScore int `gocti:"live_score" json:"live_score,omitempty"`
LivePoints []DecayHistory `gocti:"live_points" json:"live_points,omitempty"`
}
DecayLiveDetails represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DecayLiveDetails) MarshalJSON ¶
func (d DecayLiveDetails) MarshalJSON() ([]byte, error)
type DefaultMarking ¶
type DefaultMarking struct {
// DefaultMarking
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
Values []MarkingDefinition `gocti:"values" json:"values,omitempty"`
}
DefaultMarking represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DefaultMarking) MarshalJSON ¶
func (d DefaultMarking) MarshalJSON() ([]byte, error)
type DefaultValue ¶
type DefaultValue struct {
// DefaultValue
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
}
DefaultValue represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DefaultValue) MarshalJSON ¶
func (d DefaultValue) MarshalJSON() ([]byte, error)
type DefaultValueAttribute ¶
type DefaultValueAttribute struct {
// DefaultValueAttribute
Name string `gocti:"name" json:"name,omitempty"`
Type string `gocti:"type" json:"type,omitempty"`
DefaultValues []DefaultValue `gocti:"defaultValues" json:"defaultValues,omitempty"`
}
DefaultValueAttribute represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DefaultValueAttribute) MarshalJSON ¶
func (d DefaultValueAttribute) MarshalJSON() ([]byte, error)
type Dictionary ¶
type Dictionary struct {
// Dictionary
Key string `gocti:"key" json:"key,omitempty"`
Value string `gocti:"value" json:"value,omitempty"`
}
Dictionary represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Dictionary) MarshalJSON ¶
func (d Dictionary) MarshalJSON() ([]byte, error)
type DictionaryInput ¶
type DictionaryInput struct {
// DictionaryInput
Key string `gocti:"key" json:"key,omitempty"`
Value string `gocti:"value" json:"value,omitempty"`
}
DictionaryInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DictionaryInput) MarshalJSON ¶
func (d DictionaryInput) MarshalJSON() ([]byte, error)
type Directory ¶
type Directory struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Directory
Path string `gocti:"path" json:"path,omitempty"`
PathEnc string `gocti:"path_enc" json:"path_enc,omitempty"`
Ctime *time.Time `gocti:"ctime" json:"ctime,omitempty"`
Mtime *time.Time `gocti:"mtime" json:"mtime,omitempty"`
Atime *time.Time `gocti:"atime" json:"atime,omitempty"`
}
Directory represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Directory) MarshalJSON ¶
type DirectoryAddInput ¶
type DirectoryAddInput struct {
// DirectoryAddInput
Path string `gocti:"path" json:"path,omitempty"`
PathEnc string `gocti:"path_enc" json:"path_enc,omitempty"`
Ctime *time.Time `gocti:"ctime" json:"ctime,omitempty"`
Mtime *time.Time `gocti:"mtime" json:"mtime,omitempty"`
Atime *time.Time `gocti:"atime" json:"atime,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
DirectoryAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DirectoryAddInput) MarshalJSON ¶
func (d DirectoryAddInput) MarshalJSON() ([]byte, error)
type DomainName ¶
type DomainName struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// DomainName
Value string `gocti:"value" json:"value,omitempty"`
}
DomainName represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DomainName) MarshalJSON ¶
func (d DomainName) MarshalJSON() ([]byte, error)
type DomainNameAddInput ¶
type DomainNameAddInput struct {
// DomainNameAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
DomainNameAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (DomainNameAddInput) MarshalJSON ¶
func (d DomainNameAddInput) MarshalJSON() ([]byte, error)
type EditUserContext ¶
type EditUserContext struct {
// EditUserContext
Name string `gocti:"name" json:"name,omitempty"`
FocusOn string `gocti:"focusOn" json:"focusOn,omitempty"`
}
EditUserContext represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EditUserContext) MarshalJSON ¶
func (e EditUserContext) MarshalJSON() ([]byte, error)
type EffectiveConfidenceLevel ¶
type EffectiveConfidenceLevel struct {
// EffectiveConfidenceLevel
MaxConfidence int `gocti:"max_confidence" json:"max_confidence,omitempty"`
Overrides []EffectiveConfidenceLevelOverride `gocti:"overrides" json:"overrides,omitempty"`
Source EffectiveConfidenceLevelSource `gocti:"source" json:"source,omitempty"`
}
EffectiveConfidenceLevel represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EffectiveConfidenceLevel) MarshalJSON ¶
func (e EffectiveConfidenceLevel) MarshalJSON() ([]byte, error)
type EffectiveConfidenceLevelOverride ¶
type EffectiveConfidenceLevelOverride struct {
// EffectiveConfidenceLevelOverride
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
MaxConfidence int `gocti:"max_confidence" json:"max_confidence,omitempty"`
Source EffectiveConfidenceLevelSource `gocti:"source" json:"source,omitempty"`
}
EffectiveConfidenceLevelOverride represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EffectiveConfidenceLevelOverride) MarshalJSON ¶
func (e EffectiveConfidenceLevelOverride) MarshalJSON() ([]byte, error)
type EffectiveConfidenceLevelSource ¶
type EffectiveConfidenceLevelSource struct {
// EffectiveConfidenceLevelSource
Type EffectiveConfidenceLevelSourceType `gocti:"type" json:"type,omitempty"`
Object EffectiveConfidenceLevelSourceObject `gocti:"object" json:"object,omitempty"`
}
EffectiveConfidenceLevelSource represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EffectiveConfidenceLevelSource) MarshalJSON ¶
func (e EffectiveConfidenceLevelSource) MarshalJSON() ([]byte, error)
type EffectiveConfidenceLevelSourceObject ¶
type EffectiveConfidenceLevelSourceObject struct {
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
EffectiveConfidenceLevelSourceObject represents a GraphQL UNION Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - Group - User
(See the examples for ways to decode an interface field into an implementation).
func (EffectiveConfidenceLevelSourceObject) Implementations ¶
func (e EffectiveConfidenceLevelSourceObject) Implementations() []reflect.Type
func (EffectiveConfidenceLevelSourceObject) MarshalJSON ¶
func (e EffectiveConfidenceLevelSourceObject) MarshalJSON() ([]byte, error)
func (EffectiveConfidenceLevelSourceObject) Remainder ¶
func (e EffectiveConfidenceLevelSourceObject) Remainder() map[string]any
type EffectiveConfidenceLevelSourceType ¶
type EffectiveConfidenceLevelSourceType string
const ( EffectiveConfidenceLevelSourceTypeUser EffectiveConfidenceLevelSourceType = "User" EffectiveConfidenceLevelSourceTypeGroup EffectiveConfidenceLevelSourceType = "Group" EffectiveConfidenceLevelSourceTypeBypass EffectiveConfidenceLevelSourceType = "Bypass" )
func (EffectiveConfidenceLevelSourceType) MarshalJSON ¶
func (e EffectiveConfidenceLevelSourceType) MarshalJSON() ([]byte, error)
type EmailAddr ¶
type EmailAddr struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// EmailAddr
Value string `gocti:"value" json:"value,omitempty"`
DisplayName string `gocti:"display_name" json:"display_name,omitempty"`
}
EmailAddr represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EmailAddr) MarshalJSON ¶
type EmailAddrAddInput ¶
type EmailAddrAddInput struct {
// EmailAddrAddInput
Value string `gocti:"value" json:"value,omitempty"`
DisplayName string `gocti:"display_name" json:"display_name,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
EmailAddrAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EmailAddrAddInput) MarshalJSON ¶
func (e EmailAddrAddInput) MarshalJSON() ([]byte, error)
type EmailMessage ¶
type EmailMessage struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// EmailMessage
IsMultipart bool `gocti:"is_multipart" json:"is_multipart,omitempty"`
AttributeDate *time.Time `gocti:"attribute_date" json:"attribute_date,omitempty"`
ContentType string `gocti:"content_type" json:"content_type,omitempty"`
MessageID string `gocti:"message_id" json:"message_id,omitempty"`
Subject string `gocti:"subject" json:"subject,omitempty"`
ReceivedLines []string `gocti:"received_lines" json:"received_lines,omitempty"`
Body string `gocti:"body" json:"body,omitempty"`
}
EmailMessage represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EmailMessage) MarshalJSON ¶
func (e EmailMessage) MarshalJSON() ([]byte, error)
type EmailMessageAddInput ¶
type EmailMessageAddInput struct {
// EmailMessageAddInput
IsMultipart bool `gocti:"is_multipart" json:"is_multipart,omitempty"`
AttributeDate *time.Time `gocti:"attribute_date" json:"attribute_date,omitempty"`
ContentType string `gocti:"content_type" json:"content_type,omitempty"`
MessageID string `gocti:"message_id" json:"message_id,omitempty"`
Subject string `gocti:"subject" json:"subject,omitempty"`
ReceivedLines []string `gocti:"received_lines" json:"received_lines,omitempty"`
Body string `gocti:"body" json:"body,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
EmailMessageAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EmailMessageAddInput) MarshalJSON ¶
func (e EmailMessageAddInput) MarshalJSON() ([]byte, error)
type EmailMimePartType ¶
type EmailMimePartType struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// EmailMimePartType
Body string `gocti:"body" json:"body,omitempty"`
ContentType string `gocti:"content_type" json:"content_type,omitempty"`
ContentDisposition string `gocti:"content_disposition" json:"content_disposition,omitempty"`
}
EmailMimePartType represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EmailMimePartType) MarshalJSON ¶
func (e EmailMimePartType) MarshalJSON() ([]byte, error)
type EmailMimePartTypeAddInput ¶
type EmailMimePartTypeAddInput struct {
// EmailMimePartTypeAddInput
Body string `gocti:"body" json:"body,omitempty"`
ContentType string `gocti:"content_type" json:"content_type,omitempty"`
ContentDisposition string `gocti:"content_disposition" json:"content_disposition,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
EmailMimePartTypeAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (EmailMimePartTypeAddInput) MarshalJSON ¶
func (e EmailMimePartTypeAddInput) MarshalJSON() ([]byte, error)
type EntitySetting ¶
type EntitySetting struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// EntitySetting
TargetType string `gocti:"target_type" json:"target_type,omitempty"`
PlatformEntityFilesRef bool `gocti:"platform_entity_files_ref" json:"platform_entity_files_ref,omitempty"`
PlatformHiddenType bool `gocti:"platform_hidden_type" json:"platform_hidden_type,omitempty"`
EnforceReference bool `gocti:"enforce_reference" json:"enforce_reference,omitempty"`
AttributesConfiguration string `gocti:"attributes_configuration" json:"attributes_configuration,omitempty"`
AttributesDefinitions []TypeAttribute `gocti:"attributesDefinitions" json:"attributesDefinitions,omitempty"`
MandatoryAttributes []string `gocti:"mandatoryAttributes" json:"mandatoryAttributes,omitempty"`
ScaleAttributes []ScaleAttribute `gocti:"scaleAttributes" json:"scaleAttributes,omitempty"`
DefaultValuesAttributes []DefaultValueAttribute `gocti:"defaultValuesAttributes" json:"defaultValuesAttributes,omitempty"`
AvailableSettings []string `gocti:"availableSettings" json:"availableSettings,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
OverviewLayoutCustomization []OverviewWidgetCustomization `gocti:"overview_layout_customization" json:"overview_layout_customization,omitempty"`
}
EntitySetting represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (EntitySetting) MarshalJSON ¶
func (e EntitySetting) MarshalJSON() ([]byte, error)
type Event ¶
type Event struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Event
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
EventTypes []string `gocti:"event_types" json:"event_types,omitempty"`
StartTime *time.Time `gocti:"start_time" json:"start_time,omitempty"`
StopTime *time.Time `gocti:"stop_time" json:"stop_time,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
}
Event represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Event) MarshalJSON ¶
type ExternalReference ¶
type ExternalReference struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixMetaObject
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
// ExternalReference
SourceName string `gocti:"source_name" json:"source_name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
URL string `gocti:"url" json:"url,omitempty"`
Hash string `gocti:"hash" json:"hash,omitempty"`
ExternalID string `gocti:"external_id" json:"external_id,omitempty"`
References StixObjectOrStixRelationshipConnection `gocti:"references" json:"references,omitempty"`
FileID string `gocti:"fileId" json:"fileId,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
PendingFiles FileConnection `gocti:"pendingFiles" json:"pendingFiles,omitempty"`
ExportFiles FileConnection `gocti:"exportFiles" json:"exportFiles,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
Connectors []Connector `gocti:"connectors" json:"connectors,omitempty"`
Jobs []Work `gocti:"jobs" json:"jobs,omitempty"`
}
ExternalReference represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ExternalReference) MarshalJSON ¶
func (e ExternalReference) MarshalJSON() ([]byte, error)
type ExternalReferenceConnection ¶
type ExternalReferenceConnection struct {
// ExternalReferenceConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []ExternalReferenceEdge `gocti:"edges" json:"edges,omitempty"`
}
ExternalReferenceConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ExternalReferenceConnection) MarshalJSON ¶
func (e ExternalReferenceConnection) MarshalJSON() ([]byte, error)
type ExternalReferenceEdge ¶
type ExternalReferenceEdge struct {
// ExternalReferenceEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node ExternalReference `gocti:"node" json:"node,omitempty"`
}
ExternalReferenceEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ExternalReferenceEdge) MarshalJSON ¶
func (e ExternalReferenceEdge) MarshalJSON() ([]byte, error)
type Feedback ¶
type Feedback struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Case
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
Tasks TaskConnection `gocti:"tasks" json:"tasks,omitempty"`
// Feedback
Rating int `gocti:"rating" json:"rating,omitempty"`
}
Feedback represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Feedback) MarshalJSON ¶
type File ¶
type File struct {
// File
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Size int `gocti:"size" json:"size,omitempty"`
LastModified *time.Time `gocti:"lastModified" json:"lastModified,omitempty"`
LastModifiedSinceMin int `gocti:"lastModifiedSinceMin" json:"lastModifiedSinceMin,omitempty"`
MetaData FileMetadata `gocti:"metaData" json:"metaData,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
UploadStatus State `gocti:"uploadStatus" json:"uploadStatus,omitempty"`
Works []Work `gocti:"works" json:"works,omitempty"`
}
File represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (File) MarshalJSON ¶
type FileConnection ¶
type FileConnection struct {
// FileConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []FileEdge `gocti:"edges" json:"edges,omitempty"`
}
FileConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (FileConnection) MarshalJSON ¶
func (f FileConnection) MarshalJSON() ([]byte, error)
type FileEdge ¶
type FileEdge struct {
// FileEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node File `gocti:"node" json:"node,omitempty"`
}
FileEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (FileEdge) MarshalJSON ¶
type FileMetadata ¶
type FileMetadata struct {
// FileMetadata
Encoding string `gocti:"encoding" json:"encoding,omitempty"`
Mimetype string `gocti:"mimetype" json:"mimetype,omitempty"`
Version string `gocti:"version" json:"version,omitempty"`
Messages []WorkMessage `gocti:"messages" json:"messages,omitempty"`
Errors []WorkMessage `gocti:"errors" json:"errors,omitempty"`
ListFilters string `gocti:"list_filters" json:"list_filters,omitempty"`
EntityID string `gocti:"entity_id" json:"entity_id,omitempty"`
Entity StixObject `gocti:"entity" json:"entity,omitempty"`
LabelsText string `gocti:"labels_text" json:"labels_text,omitempty"`
Labels []string `gocti:"labels" json:"labels,omitempty"`
FileMarkings []string `gocti:"file_markings" json:"file_markings,omitempty"`
CreatorID string `gocti:"creator_id" json:"creator_id,omitempty"`
ExternalReferenceID string `gocti:"external_reference_id" json:"external_reference_id,omitempty"`
Creator Creator `gocti:"creator" json:"creator,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Order int `gocti:"order" json:"order,omitempty"`
InCarousel bool `gocti:"inCarousel" json:"inCarousel,omitempty"`
AnalysisContentSource string `gocti:"analysis_content_source" json:"analysis_content_source,omitempty"`
AnalysisContentType string `gocti:"analysis_content_type" json:"analysis_content_type,omitempty"`
AnalysisType string `gocti:"analysis_type" json:"analysis_type,omitempty"`
}
FileMetadata represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (FileMetadata) MarshalJSON ¶
func (f FileMetadata) MarshalJSON() ([]byte, error)
type Group ¶
type Group struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// Group
Name string `gocti:"name" json:"name,omitempty"`
DefaultAssignation bool `gocti:"default_assignation" json:"default_assignation,omitempty"`
NoCreators bool `gocti:"no_creators" json:"no_creators,omitempty"`
RestrictDelete bool `gocti:"restrict_delete" json:"restrict_delete,omitempty"`
AutoNewMarking bool `gocti:"auto_new_marking" json:"auto_new_marking,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
DefaultDashboard Workspace `gocti:"default_dashboard" json:"default_dashboard,omitempty"`
Members UserConnection `gocti:"members" json:"members,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Roles RoleConnection `gocti:"roles" json:"roles,omitempty"`
AllowedMarking []MarkingDefinition `gocti:"allowed_marking" json:"allowed_marking,omitempty"`
DefaultMarking []DefaultMarking `gocti:"default_marking" json:"default_marking,omitempty"`
DefaultHiddenTypes []string `gocti:"default_hidden_types" json:"default_hidden_types,omitempty"`
GroupConfidenceLevel ConfidenceLevel `gocti:"group_confidence_level" json:"group_confidence_level,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
}
Group represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Group) MarshalJSON ¶
type GroupConnection ¶
type GroupConnection struct {
// GroupConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []GroupEdge `gocti:"edges" json:"edges,omitempty"`
}
GroupConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (GroupConnection) MarshalJSON ¶
func (g GroupConnection) MarshalJSON() ([]byte, error)
type GroupEdge ¶
type GroupEdge struct {
// GroupEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Group `gocti:"node" json:"node,omitempty"`
}
GroupEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (GroupEdge) MarshalJSON ¶
type Grouping ¶
type Grouping struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Grouping
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
ContentMapping string `gocti:"content_mapping" json:"content_mapping,omitempty"`
Context string `gocti:"context" json:"context,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
}
Grouping represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Grouping) MarshalJSON ¶
type GroupingConnection ¶
type GroupingConnection struct {
// GroupingConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []GroupingEdge `gocti:"edges" json:"edges,omitempty"`
}
GroupingConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (GroupingConnection) MarshalJSON ¶
func (g GroupingConnection) MarshalJSON() ([]byte, error)
type GroupingContext ¶
type GroupingContext string
const ( GroupingContextMalwareAnalysis GroupingContext = "malware-analysis" GroupingContextSuspiciousActivity GroupingContext = "suspicious-activity" GroupingContextUnspecified GroupingContext = "unspecified" )
type GroupingEdge ¶
type GroupingEdge struct {
// GroupingEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Grouping `gocti:"node" json:"node,omitempty"`
}
GroupingEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (GroupingEdge) MarshalJSON ¶
func (g GroupingEdge) MarshalJSON() ([]byte, error)
type Hash ¶
type Hash struct {
// Hash
Algorithm string `gocti:"algorithm" json:"algorithm,omitempty"`
Hash string `gocti:"hash" json:"hash,omitempty"`
}
Hash represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Hash) MarshalJSON ¶
type HashInput ¶
type HashInput struct {
// HashInput
Algorithm string `gocti:"algorithm" json:"algorithm,omitempty"`
Hash string `gocti:"hash" json:"hash,omitempty"`
}
HashInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (HashInput) MarshalJSON ¶
type Hostname ¶
type Hostname struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Hostname
Value string `gocti:"value" json:"value,omitempty"`
}
Hostname represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Hostname) MarshalJSON ¶
type HostnameAddInput ¶
type HostnameAddInput struct {
// HostnameAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
HostnameAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (HostnameAddInput) MarshalJSON ¶
func (h HostnameAddInput) MarshalJSON() ([]byte, error)
type IPv4Addr ¶
type IPv4Addr struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// IPv4Addr
Value string `gocti:"value" json:"value,omitempty"`
Countries CountryConnection `gocti:"countries" json:"countries,omitempty"`
}
IPv4Addr represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IPv4Addr) MarshalJSON ¶
type IPv4AddrAddInput ¶
type IPv4AddrAddInput struct {
// IPv4AddrAddInput
Value string `gocti:"value" json:"value,omitempty"`
BelongsTo []string `gocti:"belongsTo" json:"belongsTo,omitempty"`
ResolvesTo []string `gocti:"resolvesTo" json:"resolvesTo,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
IPv4AddrAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IPv4AddrAddInput) MarshalJSON ¶
func (i IPv4AddrAddInput) MarshalJSON() ([]byte, error)
type IPv6Addr ¶
type IPv6Addr struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// IPv6Addr
Value string `gocti:"value" json:"value,omitempty"`
Countries CountryConnection `gocti:"countries" json:"countries,omitempty"`
}
IPv6Addr represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IPv6Addr) MarshalJSON ¶
type IPv6AddrAddInput ¶
type IPv6AddrAddInput struct {
// IPv6AddrAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
IPv6AddrAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IPv6AddrAddInput) MarshalJSON ¶
func (i IPv6AddrAddInput) MarshalJSON() ([]byte, error)
type Identity ¶
type Identity struct {
// Identity
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
CreatedBy *Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
IdentityClass string `gocti:"identity_class" json:"identity_class,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
ContactInformation string `gocti:"contact_information" json:"contact_information,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
XOpenctiReliability string `gocti:"x_opencti_reliability" json:"x_opencti_reliability,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
Identity represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - Individual - Sector - System - Organization
(See the examples for ways to decode an interface field into an implementation).
func (Identity) Implementations ¶
func (Identity) MarshalJSON ¶
type IdentityType ¶
type IdentityType string
const ( IdentityTypeSector IdentityType = "Sector" IdentityTypeOrganization IdentityType = "Organization" IdentityTypeIndividual IdentityType = "Individual" IdentityTypeSystem IdentityType = "System" )
func (IdentityType) MarshalJSON ¶
func (i IdentityType) MarshalJSON() ([]byte, error)
type Incident ¶
type Incident struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Incident
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
Objective string `gocti:"objective" json:"objective,omitempty"`
IncidentType string `gocti:"incident_type" json:"incident_type,omitempty"`
Severity string `gocti:"severity" json:"severity,omitempty"`
Source string `gocti:"source" json:"source,omitempty"`
ObjectParticipant []Participant `gocti:"objectParticipant" json:"objectParticipant,omitempty"`
}
Incident represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Incident) MarshalJSON ¶
type Indicator ¶
type Indicator struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Indicator
PatternType string `gocti:"pattern_type" json:"pattern_type,omitempty"`
PatternVersion string `gocti:"pattern_version" json:"pattern_version,omitempty"`
Pattern string `gocti:"pattern" json:"pattern,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
IndicatorTypes []string `gocti:"indicator_types" json:"indicator_types,omitempty"`
ValidFrom *time.Time `gocti:"valid_from" json:"valid_from,omitempty"`
ValidUntil *time.Time `gocti:"valid_until" json:"valid_until,omitempty"`
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDetection bool `gocti:"x_opencti_detection" json:"x_opencti_detection,omitempty"`
XOpenctiMainObservableType string `gocti:"x_opencti_main_observable_type" json:"x_opencti_main_observable_type,omitempty"`
XMitrePlatforms []string `gocti:"x_mitre_platforms" json:"x_mitre_platforms,omitempty"`
KillChainPhases []KillChainPhase `gocti:"killChainPhases" json:"killChainPhases,omitempty"`
Observables StixCyberObservableConnection `gocti:"observables" json:"observables,omitempty"`
DecayBaseScore int `gocti:"decay_base_score" json:"decay_base_score,omitempty"`
DecayBaseScoreDate *time.Time `gocti:"decay_base_score_date" json:"decay_base_score_date,omitempty"`
DecayAppliedRule IndicatorDecayRule `gocti:"decay_applied_rule" json:"decay_applied_rule,omitempty"`
DecayHistory []DecayHistory `gocti:"decay_history" json:"decay_history,omitempty"`
DecayLiveDetails DecayLiveDetails `gocti:"decayLiveDetails" json:"decayLiveDetails,omitempty"`
DecayChartData DecayChartData `gocti:"decayChartData" json:"decayChartData,omitempty"`
}
Indicator represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Indicator) MarshalJSON ¶
type IndicatorConnection ¶
type IndicatorConnection struct {
// IndicatorConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []IndicatorEdge `gocti:"edges" json:"edges,omitempty"`
}
IndicatorConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IndicatorConnection) MarshalJSON ¶
func (i IndicatorConnection) MarshalJSON() ([]byte, error)
type IndicatorDecayRule ¶
type IndicatorDecayRule struct {
// IndicatorDecayRule
DecayRuleID string `gocti:"decay_rule_id" json:"decay_rule_id,omitempty"`
DecayLifetime int `gocti:"decay_lifetime" json:"decay_lifetime,omitempty"`
DecayPound float64 `gocti:"decay_pound" json:"decay_pound,omitempty"`
DecayPoints []int `gocti:"decay_points" json:"decay_points,omitempty"`
DecayRevokeScore int `gocti:"decay_revoke_score" json:"decay_revoke_score,omitempty"`
}
IndicatorDecayRule represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IndicatorDecayRule) MarshalJSON ¶
func (i IndicatorDecayRule) MarshalJSON() ([]byte, error)
type IndicatorEdge ¶
type IndicatorEdge struct {
// IndicatorEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Indicator `gocti:"node" json:"node,omitempty"`
}
IndicatorEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IndicatorEdge) MarshalJSON ¶
func (i IndicatorEdge) MarshalJSON() ([]byte, error)
type IndicatorType ¶
type IndicatorType string
const ( IndicatorTypeAnomalousActivity IndicatorType = "anomalous-activity" IndicatorTypeAnonymization IndicatorType = "anonymization" IndicatorTypeAttribution IndicatorType = "attribution" IndicatorTypeBenign IndicatorType = "benign" IndicatorTypeCompromised IndicatorType = "compromised" IndicatorTypeMaliciousActivity IndicatorType = "malicious-activity" IndicatorTypeUnknown IndicatorType = "unknown" )
type Individual ¶
type Individual struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Identity
IdentityClass string `gocti:"identity_class" json:"identity_class,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
ContactInformation string `gocti:"contact_information" json:"contact_information,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
XOpenctiReliability string `gocti:"x_opencti_reliability" json:"x_opencti_reliability,omitempty"`
// Individual
XOpenctiFirstname string `gocti:"x_opencti_firstname" json:"x_opencti_firstname,omitempty"`
XOpenctiLastname string `gocti:"x_opencti_lastname" json:"x_opencti_lastname,omitempty"`
Organizations OrganizationConnection `gocti:"organizations" json:"organizations,omitempty"`
IsUser bool `gocti:"isUser" json:"isUser,omitempty"`
}
Individual represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Individual) MarshalJSON ¶
func (i Individual) MarshalJSON() ([]byte, error)
type Infrastructure ¶
type Infrastructure struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Infrastructure
Name string `gocti:"name" json:"name,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
InfrastructureTypes []string `gocti:"infrastructure_types" json:"infrastructure_types,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
KillChainPhases []KillChainPhase `gocti:"killChainPhases" json:"killChainPhases,omitempty"`
}
Infrastructure represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Infrastructure) MarshalJSON ¶
func (i Infrastructure) MarshalJSON() ([]byte, error)
type IntrusionSet ¶
type IntrusionSet struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// IntrusionSet
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
Goals []string `gocti:"goals" json:"goals,omitempty"`
ResourceLevel string `gocti:"resource_level" json:"resource_level,omitempty"`
PrimaryMotivation string `gocti:"primary_motivation" json:"primary_motivation,omitempty"`
SecondaryMotivations []string `gocti:"secondary_motivations" json:"secondary_motivations,omitempty"`
Locations LocationConnection `gocti:"locations" json:"locations,omitempty"`
}
IntrusionSet represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (IntrusionSet) MarshalJSON ¶
func (i IntrusionSet) MarshalJSON() ([]byte, error)
type KillChainPhase ¶
type KillChainPhase struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixMetaObject
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
// KillChainPhase
KillChainName string `gocti:"kill_chain_name" json:"kill_chain_name,omitempty"`
PhaseName string `gocti:"phase_name" json:"phase_name,omitempty"`
XOpenctiOrder int `gocti:"x_opencti_order" json:"x_opencti_order,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
}
KillChainPhase represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (KillChainPhase) MarshalJSON ¶
func (k KillChainPhase) MarshalJSON() ([]byte, error)
type Label ¶
type Label struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixMetaObject
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
// Label
Value string `gocti:"value" json:"value,omitempty"`
Color string `gocti:"color" json:"color,omitempty"`
ToStix string `gocti:"toStix" json:"toStix,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
}
Label represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Label) MarshalJSON ¶
type Language ¶
type Language struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Language
Name string `gocti:"name" json:"name,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
}
Language represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Language) MarshalJSON ¶
type Location ¶
type Location struct {
// Location
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Latitude float64 `gocti:"latitude" json:"latitude,omitempty"`
Longitude float64 `gocti:"longitude" json:"longitude,omitempty"`
Precision float64 `gocti:"precision" json:"precision,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
Location represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - Position - City - Country - Region - AdministrativeArea
(See the examples for ways to decode an interface field into an implementation).
func (Location) Implementations ¶
func (Location) MarshalJSON ¶
type LocationConnection ¶
type LocationConnection struct {
// LocationConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []LocationEdge `gocti:"edges" json:"edges,omitempty"`
}
LocationConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (LocationConnection) MarshalJSON ¶
func (l LocationConnection) MarshalJSON() ([]byte, error)
type LocationEdge ¶
type LocationEdge struct {
// LocationEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Types []string `gocti:"types" json:"types,omitempty"`
Node Location `gocti:"node" json:"node,omitempty"`
}
LocationEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (LocationEdge) MarshalJSON ¶
func (l LocationEdge) MarshalJSON() ([]byte, error)
type MacAddr ¶
type MacAddr struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// MacAddr
Value string `gocti:"value" json:"value,omitempty"`
}
MacAddr represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MacAddr) MarshalJSON ¶
type MacAddrAddInput ¶
type MacAddrAddInput struct {
// MacAddrAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
MacAddrAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MacAddrAddInput) MarshalJSON ¶
func (m MacAddrAddInput) MarshalJSON() ([]byte, error)
type Malware ¶
type Malware struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Malware
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
MalwareTypes []string `gocti:"malware_types" json:"malware_types,omitempty"`
IsFamily bool `gocti:"is_family" json:"is_family,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
ArchitectureExecutionEnvs []string `gocti:"architecture_execution_envs" json:"architecture_execution_envs,omitempty"`
ImplementationLanguages []string `gocti:"implementation_languages" json:"implementation_languages,omitempty"`
Capabilities []string `gocti:"capabilities" json:"capabilities,omitempty"`
KillChainPhases []KillChainPhase `gocti:"killChainPhases" json:"killChainPhases,omitempty"`
Samples []StixCyberObservable `gocti:"samples" json:"samples,omitempty"`
}
Malware represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Malware) MarshalJSON ¶
type MalwareAnalysis ¶
type MalwareAnalysis struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// MalwareAnalysis
Product string `gocti:"product" json:"product,omitempty"`
Version string `gocti:"version" json:"version,omitempty"`
HostVM Software `gocti:"hostVm" json:"hostVm,omitempty"`
OperatingSystem Software `gocti:"operatingSystem" json:"operatingSystem,omitempty"`
InstalledSoftware SoftwareConnection `gocti:"installedSoftware" json:"installedSoftware,omitempty"`
ConfigurationVersion string `gocti:"configuration_version" json:"configuration_version,omitempty"`
Modules []string `gocti:"modules" json:"modules,omitempty"`
AnalysisEngineVersion string `gocti:"analysis_engine_version" json:"analysis_engine_version,omitempty"`
AnalysisDefinitionVersion string `gocti:"analysis_definition_version" json:"analysis_definition_version,omitempty"`
Submitted *time.Time `gocti:"submitted" json:"submitted,omitempty"`
AnalysisStarted *time.Time `gocti:"analysis_started" json:"analysis_started,omitempty"`
AnalysisEnded *time.Time `gocti:"analysis_ended" json:"analysis_ended,omitempty"`
ResultName string `gocti:"result_name" json:"result_name,omitempty"`
Result string `gocti:"result" json:"result,omitempty"`
AnalysisSco StixCyberObservableConnection `gocti:"analysisSco" json:"analysisSco,omitempty"`
Sample StixCyberObservable `gocti:"sample" json:"sample,omitempty"`
}
MalwareAnalysis represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (MalwareAnalysis) MarshalJSON ¶
func (m MalwareAnalysis) MarshalJSON() ([]byte, error)
type ManagerConfiguration ¶
type ManagerConfiguration struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// ManagerConfiguration
ManagerID string `gocti:"manager_id" json:"manager_id,omitempty"`
ManagerRunning bool `gocti:"manager_running" json:"manager_running,omitempty"`
LastRunStartDate *time.Time `gocti:"last_run_start_date" json:"last_run_start_date,omitempty"`
LastRunEndDate *time.Time `gocti:"last_run_end_date" json:"last_run_end_date,omitempty"`
ManagerSetting string `gocti:"manager_setting" json:"manager_setting,omitempty"`
}
ManagerConfiguration represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ManagerConfiguration) MarshalJSON ¶
func (m ManagerConfiguration) MarshalJSON() ([]byte, error)
type MarkingDefinition ¶
type MarkingDefinition struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixMetaObject
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
// MarkingDefinition
DefinitionType string `gocti:"definition_type" json:"definition_type,omitempty"`
Definition string `gocti:"definition" json:"definition,omitempty"`
XOpenctiOrder int `gocti:"x_opencti_order" json:"x_opencti_order,omitempty"`
XOpenctiColor string `gocti:"x_opencti_color" json:"x_opencti_color,omitempty"`
ToStix string `gocti:"toStix" json:"toStix,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
}
MarkingDefinition represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MarkingDefinition) MarshalJSON ¶
func (m MarkingDefinition) MarshalJSON() ([]byte, error)
type MarkingDefinitionShort ¶
type MarkingDefinitionShort struct {
// MarkingDefinitionShort
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
Representative Representative `gocti:"representative" json:"representative,omitempty"`
DefinitionType string `gocti:"definition_type" json:"definition_type,omitempty"`
Definition string `gocti:"definition" json:"definition,omitempty"`
XOpenctiOrder int `gocti:"x_opencti_order" json:"x_opencti_order,omitempty"`
XOpenctiColor string `gocti:"x_opencti_color" json:"x_opencti_color,omitempty"`
}
MarkingDefinitionShort represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MarkingDefinitionShort) MarshalJSON ¶
func (m MarkingDefinitionShort) MarshalJSON() ([]byte, error)
type Measure ¶
type Measure struct {
// Measure
Index int `gocti:"index" json:"index,omitempty"`
Measure float64 `gocti:"measure" json:"measure,omitempty"`
DateSeen *time.Time `gocti:"date_seen" json:"date_seen,omitempty"`
}
Measure represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Measure) MarshalJSON ¶
type MeasureInput ¶
type MeasureInput struct {
// MeasureInput
Measure float64 `gocti:"measure" json:"measure,omitempty"`
DateSeen *time.Time `gocti:"date_seen" json:"date_seen,omitempty"`
}
MeasureInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MeasureInput) MarshalJSON ¶
func (m MeasureInput) MarshalJSON() ([]byte, error)
type MediaContent ¶
type MediaContent struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// MediaContent
Title string `gocti:"title" json:"title,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
MediaCategory string `gocti:"media_category" json:"media_category,omitempty"`
URL string `gocti:"url" json:"url,omitempty"`
PublicationDate *time.Time `gocti:"publication_date" json:"publication_date,omitempty"`
}
MediaContent represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MediaContent) MarshalJSON ¶
func (m MediaContent) MarshalJSON() ([]byte, error)
type MediaContentAddInput ¶
type MediaContentAddInput struct {
// MediaContentAddInput
Title string `gocti:"title" json:"title,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
MediaCategory string `gocti:"media_category" json:"media_category,omitempty"`
URL string `gocti:"url" json:"url,omitempty"`
PublicationDate *time.Time `gocti:"publication_date" json:"publication_date,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
MediaContentAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MediaContentAddInput) MarshalJSON ¶
func (m MediaContentAddInput) MarshalJSON() ([]byte, error)
type MemberAccess ¶
type MemberAccess struct {
// MemberAccess
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
AccessRight string `gocti:"access_right" json:"access_right,omitempty"`
}
MemberAccess represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MemberAccess) MarshalJSON ¶
func (m MemberAccess) MarshalJSON() ([]byte, error)
type Mutex ¶
type Mutex struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Mutex
Name string `gocti:"name" json:"name,omitempty"`
}
Mutex represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Mutex) MarshalJSON ¶
type MutexAddInput ¶
type MutexAddInput struct {
// MutexAddInput
Name string `gocti:"name" json:"name,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
MutexAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (MutexAddInput) MarshalJSON ¶
func (m MutexAddInput) MarshalJSON() ([]byte, error)
type Narrative ¶
type Narrative struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Narrative
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
NarrativeTypes []string `gocti:"narrative_types" json:"narrative_types,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
ParentNarratives NarrativeConnection `gocti:"parentNarratives" json:"parentNarratives,omitempty"`
SubNarratives NarrativeConnection `gocti:"subNarratives" json:"subNarratives,omitempty"`
IsSubNarrative bool `gocti:"isSubNarrative" json:"isSubNarrative,omitempty"`
}
Narrative represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Narrative) MarshalJSON ¶
type NarrativeConnection ¶
type NarrativeConnection struct {
// NarrativeConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []NarrativeEdge `gocti:"edges" json:"edges,omitempty"`
}
NarrativeConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (NarrativeConnection) MarshalJSON ¶
func (n NarrativeConnection) MarshalJSON() ([]byte, error)
type NarrativeEdge ¶
type NarrativeEdge struct {
// NarrativeEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Narrative `gocti:"node" json:"node,omitempty"`
}
NarrativeEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (NarrativeEdge) MarshalJSON ¶
func (n NarrativeEdge) MarshalJSON() ([]byte, error)
type NetworkTraffic ¶
type NetworkTraffic struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// NetworkTraffic
Extensions string `gocti:"extensions" json:"extensions,omitempty"`
Start *time.Time `gocti:"start" json:"start,omitempty"`
End *time.Time `gocti:"end" json:"end,omitempty"`
IsActive bool `gocti:"is_active" json:"is_active,omitempty"`
SrcPort int `gocti:"src_port" json:"src_port,omitempty"`
DstPort int `gocti:"dst_port" json:"dst_port,omitempty"`
Protocols []string `gocti:"protocols" json:"protocols,omitempty"`
SrcByteCount int `gocti:"src_byte_count" json:"src_byte_count,omitempty"`
DstByteCount int `gocti:"dst_byte_count" json:"dst_byte_count,omitempty"`
SrcPackets int `gocti:"src_packets" json:"src_packets,omitempty"`
DstPackets int `gocti:"dst_packets" json:"dst_packets,omitempty"`
}
NetworkTraffic represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (NetworkTraffic) MarshalJSON ¶
func (n NetworkTraffic) MarshalJSON() ([]byte, error)
type NetworkTrafficAddInput ¶
type NetworkTrafficAddInput struct {
// NetworkTrafficAddInput
Start *time.Time `gocti:"start" json:"start,omitempty"`
End *time.Time `gocti:"end" json:"end,omitempty"`
IsActive bool `gocti:"is_active" json:"is_active,omitempty"`
NetworkSrc string `gocti:"networkSrc" json:"networkSrc,omitempty"`
NetworkDst string `gocti:"networkDst" json:"networkDst,omitempty"`
SrcPort int `gocti:"src_port" json:"src_port,omitempty"`
DstPort int `gocti:"dst_port" json:"dst_port,omitempty"`
Protocols []string `gocti:"protocols" json:"protocols,omitempty"`
SrcByteCount int `gocti:"src_byte_count" json:"src_byte_count,omitempty"`
DstByteCount int `gocti:"dst_byte_count" json:"dst_byte_count,omitempty"`
SrcPackets int `gocti:"src_packets" json:"src_packets,omitempty"`
DstPackets int `gocti:"dst_packets" json:"dst_packets,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
NetworkTrafficAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (NetworkTrafficAddInput) MarshalJSON ¶
func (n NetworkTrafficAddInput) MarshalJSON() ([]byte, error)
type Note ¶
type Note struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Note
AttributeAbstract string `gocti:"attribute_abstract" json:"attribute_abstract,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
Authors []string `gocti:"authors" json:"authors,omitempty"`
NoteTypes []string `gocti:"note_types" json:"note_types,omitempty"`
Likelihood int `gocti:"likelihood" json:"likelihood,omitempty"`
}
Note represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Note) MarshalJSON ¶
type NoteConnection ¶
type NoteConnection struct {
// NoteConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []NoteEdge `gocti:"edges" json:"edges,omitempty"`
}
NoteConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (NoteConnection) MarshalJSON ¶
func (n NoteConnection) MarshalJSON() ([]byte, error)
type NoteEdge ¶
type NoteEdge struct {
// NoteEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Note `gocti:"node" json:"node,omitempty"`
}
NoteEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (NoteEdge) MarshalJSON ¶
type Notifier ¶
type Notifier struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// Notifier
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
NotifierConnector NotifierConnector `gocti:"notifier_connector" json:"notifier_connector,omitempty"`
NotifierConnectorID string `gocti:"notifier_connector_id" json:"notifier_connector_id,omitempty"`
NotifierConfiguration string `gocti:"notifier_configuration" json:"notifier_configuration,omitempty"`
AuthorizedMembers []MemberAccess `gocti:"authorized_members" json:"authorized_members,omitempty"`
}
Notifier represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Notifier) MarshalJSON ¶
type NotifierConnector ¶
type NotifierConnector struct {
// NotifierConnector
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
ConnectorType string `gocti:"connector_type" json:"connector_type,omitempty"`
ConnectorSchema string `gocti:"connector_schema" json:"connector_schema,omitempty"`
ConnectorSchemaUi string `gocti:"connector_schema_ui" json:"connector_schema_ui,omitempty"`
BuiltIn bool `gocti:"built_in" json:"built_in,omitempty"`
}
NotifierConnector represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (NotifierConnector) MarshalJSON ¶
func (n NotifierConnector) MarshalJSON() ([]byte, error)
type Number ¶
type Number struct {
// Number
Total int `gocti:"total" json:"total,omitempty"`
Count int `gocti:"count" json:"count,omitempty"`
}
Number represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Number) MarshalJSON ¶
type ObservedData ¶
type ObservedData struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// ObservedData
FirstObserved *time.Time `gocti:"first_observed" json:"first_observed,omitempty"`
LastObserved *time.Time `gocti:"last_observed" json:"last_observed,omitempty"`
NumberObserved int `gocti:"number_observed" json:"number_observed,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
}
ObservedData represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ObservedData) MarshalJSON ¶
func (o ObservedData) MarshalJSON() ([]byte, error)
type Opinion ¶
type Opinion struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Opinion
Explanation string `gocti:"explanation" json:"explanation,omitempty"`
Authors []string `gocti:"authors" json:"authors,omitempty"`
Opinion string `gocti:"opinion" json:"opinion,omitempty"`
}
Opinion represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Opinion) MarshalJSON ¶
type OpinionConnection ¶
type OpinionConnection struct {
// OpinionConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []OpinionEdge `gocti:"edges" json:"edges,omitempty"`
}
OpinionConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (OpinionConnection) MarshalJSON ¶
func (o OpinionConnection) MarshalJSON() ([]byte, error)
type OpinionEdge ¶
type OpinionEdge struct {
// OpinionEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Opinion `gocti:"node" json:"node,omitempty"`
}
OpinionEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (OpinionEdge) MarshalJSON ¶
func (o OpinionEdge) MarshalJSON() ([]byte, error)
type OpinionType ¶
type OpinionType string
const ( OpinionTypeStronglyDisagree OpinionType = "strongly-disagree" OpinionTypeDisagree OpinionType = "disagree" OpinionTypeNeutral OpinionType = "neutral" OpinionTypeAgree OpinionType = "agree" OpinionTypeStronglyAgree OpinionType = "strongly-agree" )
type Organization ¶
type Organization struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization *[]Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Identity
IdentityClass string `gocti:"identity_class" json:"identity_class,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
ContactInformation string `gocti:"contact_information" json:"contact_information,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
XOpenctiReliability string `gocti:"x_opencti_reliability" json:"x_opencti_reliability,omitempty"`
// Organization
XOpenctiOrganizationType string `gocti:"x_opencti_organization_type" json:"x_opencti_organization_type,omitempty"`
Sectors SectorConnection `gocti:"sectors" json:"sectors,omitempty"`
Members UserConnection `gocti:"members" json:"members,omitempty"`
AuthorizedAuthorities []string `gocti:"authorized_authorities" json:"authorized_authorities,omitempty"`
GrantableGroups []Group `gocti:"grantable_groups" json:"grantable_groups,omitempty"`
SubOrganizations OrganizationConnection `gocti:"subOrganizations" json:"subOrganizations,omitempty"`
ParentOrganizations OrganizationConnection `gocti:"parentOrganizations" json:"parentOrganizations,omitempty"`
DefaultDashboard Workspace `gocti:"default_dashboard" json:"default_dashboard,omitempty"`
DefaultHiddenTypes []string `gocti:"default_hidden_types" json:"default_hidden_types,omitempty"`
}
Organization represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Organization) MarshalJSON ¶
func (o Organization) MarshalJSON() ([]byte, error)
type OrganizationConnection ¶
type OrganizationConnection struct {
// OrganizationConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []OrganizationEdge `gocti:"edges" json:"edges,omitempty"`
}
OrganizationConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (OrganizationConnection) MarshalJSON ¶
func (o OrganizationConnection) MarshalJSON() ([]byte, error)
type OrganizationEdge ¶
type OrganizationEdge struct {
// OrganizationEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Organization `gocti:"node" json:"node,omitempty"`
}
OrganizationEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (OrganizationEdge) MarshalJSON ¶
func (o OrganizationEdge) MarshalJSON() ([]byte, error)
type OverviewWidgetCustomization ¶
type OverviewWidgetCustomization struct {
// OverviewWidgetCustomization
Key string `gocti:"key" json:"key,omitempty"`
Width int `gocti:"width" json:"width,omitempty"`
Label string `gocti:"label" json:"label,omitempty"`
}
OverviewWidgetCustomization represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (OverviewWidgetCustomization) MarshalJSON ¶
func (o OverviewWidgetCustomization) MarshalJSON() ([]byte, error)
type PageInfo ¶
type PageInfo struct {
// PageInfo
StartCursor string `gocti:"startCursor" json:"startCursor,omitempty"`
EndCursor string `gocti:"endCursor" json:"endCursor,omitempty"`
HasNextPage bool `gocti:"hasNextPage" json:"hasNextPage,omitempty"`
HasPreviousPage bool `gocti:"hasPreviousPage" json:"hasPreviousPage,omitempty"`
GlobalCount int `gocti:"globalCount" json:"globalCount,omitempty"`
}
PageInfo represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (PageInfo) MarshalJSON ¶
type Participant ¶
type Participant struct {
// Participant
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
}
Participant represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Participant) MarshalJSON ¶
func (p Participant) MarshalJSON() ([]byte, error)
type PatternType ¶
type PatternType string
const ( PatternTypeEql PatternType = "eql" PatternTypePcre PatternType = "pcre" PatternTypeShodan PatternType = "shodan" PatternTypeSigma PatternType = "sigma" PatternTypeSnort PatternType = "snort" PatternTypeSpl PatternType = "spl" PatternTypeStix PatternType = "stix" PatternTypeSuricata PatternType = "suricata" PatternTypeTaniumSignal PatternType = "tanium-signal" PatternTypeYara PatternType = "yara" )
type PaymentCard ¶
type PaymentCard struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// PaymentCard
CardNumber string `gocti:"card_number" json:"card_number,omitempty"`
ExpirationDate *time.Time `gocti:"expiration_date" json:"expiration_date,omitempty"`
Cvv int `gocti:"cvv" json:"cvv,omitempty"`
HolderName string `gocti:"holder_name" json:"holder_name,omitempty"`
}
PaymentCard represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (PaymentCard) MarshalJSON ¶
func (p PaymentCard) MarshalJSON() ([]byte, error)
type PaymentCardAddInput ¶
type PaymentCardAddInput struct {
// PaymentCardAddInput
CardNumber string `gocti:"card_number" json:"card_number,omitempty"`
ExpirationDate *time.Time `gocti:"expiration_date" json:"expiration_date,omitempty"`
Cvv int `gocti:"cvv" json:"cvv,omitempty"`
HolderName string `gocti:"holder_name" json:"holder_name,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
PaymentCardAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (PaymentCardAddInput) MarshalJSON ¶
func (p PaymentCardAddInput) MarshalJSON() ([]byte, error)
type Persona ¶
type Persona struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Persona
PersonaName string `gocti:"persona_name" json:"persona_name,omitempty"`
PersonaType string `gocti:"persona_type" json:"persona_type,omitempty"`
}
Persona represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Persona) MarshalJSON ¶
type PersonaAddInput ¶
type PersonaAddInput struct {
// PersonaAddInput
PersonaName string `gocti:"persona_name" json:"persona_name,omitempty"`
PersonaType string `gocti:"persona_type" json:"persona_type,omitempty"`
}
PersonaAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (PersonaAddInput) MarshalJSON ¶
func (p PersonaAddInput) MarshalJSON() ([]byte, error)
type PhoneNumber ¶
type PhoneNumber struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// PhoneNumber
Value string `gocti:"value" json:"value,omitempty"`
}
PhoneNumber represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (PhoneNumber) MarshalJSON ¶
func (p PhoneNumber) MarshalJSON() ([]byte, error)
type PhoneNumberAddInput ¶
type PhoneNumberAddInput struct {
// PhoneNumberAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
PhoneNumberAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (PhoneNumberAddInput) MarshalJSON ¶
func (p PhoneNumberAddInput) MarshalJSON() ([]byte, error)
type Position ¶
type Position struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Location
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Latitude float64 `gocti:"latitude" json:"latitude,omitempty"`
Longitude float64 `gocti:"longitude" json:"longitude,omitempty"`
Precision float64 `gocti:"precision" json:"precision,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
// Position
StreetAddress string `gocti:"street_address" json:"street_address,omitempty"`
PostalCode string `gocti:"postal_code" json:"postal_code,omitempty"`
City City `gocti:"city" json:"city,omitempty"`
}
Position represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Position) MarshalJSON ¶
type Process ¶
type Process struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Process
Extensions string `gocti:"extensions" json:"extensions,omitempty"`
IsHidden bool `gocti:"is_hidden" json:"is_hidden,omitempty"`
PID int `gocti:"pid" json:"pid,omitempty"`
CreatedTime *time.Time `gocti:"created_time" json:"created_time,omitempty"`
Cwd string `gocti:"cwd" json:"cwd,omitempty"`
CommandLine string `gocti:"command_line" json:"command_line,omitempty"`
EnvironmentVariables []string `gocti:"environment_variables" json:"environment_variables,omitempty"`
AslrEnabled bool `gocti:"aslr_enabled" json:"aslr_enabled,omitempty"`
DepEnabled bool `gocti:"dep_enabled" json:"dep_enabled,omitempty"`
Priority string `gocti:"priority" json:"priority,omitempty"`
OwnerSID string `gocti:"owner_sid" json:"owner_sid,omitempty"`
WindowTitle string `gocti:"window_title" json:"window_title,omitempty"`
StartupInfo []Dictionary `gocti:"startup_info" json:"startup_info,omitempty"`
IntegrityLevel string `gocti:"integrity_level" json:"integrity_level,omitempty"`
ServiceName string `gocti:"service_name" json:"service_name,omitempty"`
Descriptions []string `gocti:"descriptions" json:"descriptions,omitempty"`
DisplayName string `gocti:"display_name" json:"display_name,omitempty"`
GroupName string `gocti:"group_name" json:"group_name,omitempty"`
StartType string `gocti:"start_type" json:"start_type,omitempty"`
ServiceDlls StixFileConnection `gocti:"serviceDlls" json:"serviceDlls,omitempty"`
ServiceType string `gocti:"service_type" json:"service_type,omitempty"`
ServiceStatus string `gocti:"service_status" json:"service_status,omitempty"`
}
Process represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Process) MarshalJSON ¶
type ProcessAddInput ¶
type ProcessAddInput struct {
// ProcessAddInput
IsHidden bool `gocti:"is_hidden" json:"is_hidden,omitempty"`
PID int `gocti:"pid" json:"pid,omitempty"`
CreatedTime *time.Time `gocti:"created_time" json:"created_time,omitempty"`
Cwd string `gocti:"cwd" json:"cwd,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
CommandLine string `gocti:"command_line" json:"command_line,omitempty"`
EnvironmentVariables []string `gocti:"environment_variables" json:"environment_variables,omitempty"`
AslrEnabled bool `gocti:"aslr_enabled" json:"aslr_enabled,omitempty"`
DepEnabled bool `gocti:"dep_enabled" json:"dep_enabled,omitempty"`
Priority string `gocti:"priority" json:"priority,omitempty"`
OwnerSID string `gocti:"owner_sid" json:"owner_sid,omitempty"`
WindowTitle string `gocti:"window_title" json:"window_title,omitempty"`
StartupInfo []DictionaryInput `gocti:"startup_info" json:"startup_info,omitempty"`
IntegrityLevel string `gocti:"integrity_level" json:"integrity_level,omitempty"`
ServiceName string `gocti:"service_name" json:"service_name,omitempty"`
Descriptions []string `gocti:"descriptions" json:"descriptions,omitempty"`
DisplayName string `gocti:"display_name" json:"display_name,omitempty"`
GroupName string `gocti:"group_name" json:"group_name,omitempty"`
StartType string `gocti:"start_type" json:"start_type,omitempty"`
ServiceDlls []string `gocti:"serviceDlls" json:"serviceDlls,omitempty"`
ServiceType string `gocti:"service_type" json:"service_type,omitempty"`
ServiceStatus string `gocti:"service_status" json:"service_status,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
ProcessAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ProcessAddInput) MarshalJSON ¶
func (p ProcessAddInput) MarshalJSON() ([]byte, error)
type PublicDashboard ¶
type PublicDashboard struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// PublicDashboard
Name string `gocti:"name" json:"name,omitempty"`
Owner Creator `gocti:"owner" json:"owner,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
DashboardID string `gocti:"dashboard_id" json:"dashboard_id,omitempty"`
Dashboard Workspace `gocti:"dashboard" json:"dashboard,omitempty"`
UserID string `gocti:"user_id" json:"user_id,omitempty"`
PublicManifest string `gocti:"public_manifest" json:"public_manifest,omitempty"`
PrivateManifest string `gocti:"private_manifest" json:"private_manifest,omitempty"`
UriKey string `gocti:"uri_key" json:"uri_key,omitempty"`
AllowedMarkingsIDs []string `gocti:"allowed_markings_ids" json:"allowed_markings_ids,omitempty"`
AllowedMarkings []MarkingDefinitionShort `gocti:"allowed_markings" json:"allowed_markings,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
Enabled bool `gocti:"enabled" json:"enabled,omitempty"`
}
PublicDashboard represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (PublicDashboard) MarshalJSON ¶
func (p PublicDashboard) MarshalJSON() ([]byte, error)
type RabbitMQConnection ¶
type RabbitMQConnection struct {
// RabbitMQConnection
Host string `gocti:"host" json:"host,omitempty"`
Vhost string `gocti:"vhost" json:"vhost,omitempty"`
UseSsl bool `gocti:"use_ssl" json:"use_ssl,omitempty"`
Port int `gocti:"port" json:"port,omitempty"`
User string `gocti:"user" json:"user,omitempty"`
Pass string `gocti:"pass" json:"pass,omitempty"`
}
RabbitMQConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (RabbitMQConnection) MarshalJSON ¶
func (r RabbitMQConnection) MarshalJSON() ([]byte, error)
type Region ¶
type Region struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Location
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Latitude float64 `gocti:"latitude" json:"latitude,omitempty"`
Longitude float64 `gocti:"longitude" json:"longitude,omitempty"`
Precision float64 `gocti:"precision" json:"precision,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
// Region
ParentRegions RegionConnection `gocti:"parentRegions" json:"parentRegions,omitempty"`
SubRegions RegionConnection `gocti:"subRegions" json:"subRegions,omitempty"`
Countries CountryConnection `gocti:"countries" json:"countries,omitempty"`
}
Region represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Region) MarshalJSON ¶
type RegionConnection ¶
type RegionConnection struct {
// RegionConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []RegionEdge `gocti:"edges" json:"edges,omitempty"`
}
RegionConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (RegionConnection) MarshalJSON ¶
func (r RegionConnection) MarshalJSON() ([]byte, error)
type RegionEdge ¶
type RegionEdge struct {
// RegionEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Region `gocti:"node" json:"node,omitempty"`
}
RegionEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (RegionEdge) MarshalJSON ¶
func (r RegionEdge) MarshalJSON() ([]byte, error)
type Report ¶
type Report struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Report
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Content string `gocti:"content" json:"content,omitempty"`
ContentMapping string `gocti:"content_mapping" json:"content_mapping,omitempty"`
ReportTypes []string `gocti:"report_types" json:"report_types,omitempty"`
XOpenctiReliability string `gocti:"x_opencti_reliability" json:"x_opencti_reliability,omitempty"`
Published *time.Time `gocti:"published" json:"published,omitempty"`
ObjectParticipant []Participant `gocti:"objectParticipant" json:"objectParticipant,omitempty"`
DeleteWithElementsCount int `gocti:"deleteWithElementsCount" json:"deleteWithElementsCount,omitempty"`
}
Report represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Report) MarshalJSON ¶
type ReportConnection ¶
type ReportConnection struct {
// ReportConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []ReportEdge `gocti:"edges" json:"edges,omitempty"`
}
ReportConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ReportConnection) MarshalJSON ¶
func (r ReportConnection) MarshalJSON() ([]byte, error)
type ReportEdge ¶
type ReportEdge struct {
// ReportEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Report `gocti:"node" json:"node,omitempty"`
}
ReportEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ReportEdge) MarshalJSON ¶
func (r ReportEdge) MarshalJSON() ([]byte, error)
type ReportType ¶
type ReportType string
const ( ReportTypeInternal ReportType = "internal-report" ReportTypeThreat ReportType = "threat-report" )
type Representative ¶
type Representative struct {
// Representative
Main string `gocti:"main" json:"main,omitempty"`
Secondary string `gocti:"secondary" json:"secondary,omitempty"`
}
Representative represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Representative) MarshalJSON ¶
func (r Representative) MarshalJSON() ([]byte, error)
type Role ¶
type Role struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// Role
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Capabilities []Capability `gocti:"capabilities" json:"capabilities,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
CanManageSensitiveConfig bool `gocti:"can_manage_sensitive_config" json:"can_manage_sensitive_config,omitempty"`
}
Role represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Role) MarshalJSON ¶
type RoleConnection ¶
type RoleConnection struct {
// RoleConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []RoleEdge `gocti:"edges" json:"edges,omitempty"`
}
RoleConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (RoleConnection) MarshalJSON ¶
func (r RoleConnection) MarshalJSON() ([]byte, error)
type RoleEdge ¶
type RoleEdge struct {
// RoleEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Role `gocti:"node" json:"node,omitempty"`
}
RoleEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (RoleEdge) MarshalJSON ¶
type ScaleAttribute ¶
type ScaleAttribute struct {
// ScaleAttribute
Name string `gocti:"name" json:"name,omitempty"`
Scale string `gocti:"scale" json:"scale,omitempty"`
}
ScaleAttribute represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ScaleAttribute) MarshalJSON ¶
func (s ScaleAttribute) MarshalJSON() ([]byte, error)
type Sector ¶
type Sector struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Identity
IdentityClass string `gocti:"identity_class" json:"identity_class,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
ContactInformation string `gocti:"contact_information" json:"contact_information,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
XOpenctiReliability string `gocti:"x_opencti_reliability" json:"x_opencti_reliability,omitempty"`
// Sector
ParentSectors SectorConnection `gocti:"parentSectors" json:"parentSectors,omitempty"`
SubSectors SectorConnection `gocti:"subSectors" json:"subSectors,omitempty"`
IsSubSector bool `gocti:"isSubSector" json:"isSubSector,omitempty"`
TargetedOrganizations StixCoreRelationshipConnection `gocti:"targetedOrganizations" json:"targetedOrganizations,omitempty"`
}
Sector represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Sector) MarshalJSON ¶
type SectorConnection ¶
type SectorConnection struct {
// SectorConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []SectorEdge `gocti:"edges" json:"edges,omitempty"`
}
SectorConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (SectorConnection) MarshalJSON ¶
func (s SectorConnection) MarshalJSON() ([]byte, error)
type SectorEdge ¶
type SectorEdge struct {
// SectorEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Types []string `gocti:"types" json:"types,omitempty"`
Node Sector `gocti:"node" json:"node,omitempty"`
}
SectorEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (SectorEdge) MarshalJSON ¶
func (s SectorEdge) MarshalJSON() ([]byte, error)
type SessionDetail ¶
type SessionDetail struct {
// SessionDetail
ID string `gocti:"id" json:"id,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Ttl int `gocti:"ttl" json:"ttl,omitempty"`
OriginalMaxAge int `gocti:"originalMaxAge" json:"originalMaxAge,omitempty"`
}
SessionDetail represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (SessionDetail) MarshalJSON ¶
func (s SessionDetail) MarshalJSON() ([]byte, error)
type Software ¶
type Software struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Software
Name string `gocti:"name" json:"name,omitempty"`
Cpe string `gocti:"cpe" json:"cpe,omitempty"`
SwID string `gocti:"swid" json:"swid,omitempty"`
Languages []string `gocti:"languages" json:"languages,omitempty"`
Vendor string `gocti:"vendor" json:"vendor,omitempty"`
Version string `gocti:"version" json:"version,omitempty"`
Vulnerabilities VulnerabilityConnection `gocti:"vulnerabilities" json:"vulnerabilities,omitempty"`
}
Software represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Software) MarshalJSON ¶
type SoftwareAddInput ¶
type SoftwareAddInput struct {
// SoftwareAddInput
Name string `gocti:"name" json:"name,omitempty"`
Cpe string `gocti:"cpe" json:"cpe,omitempty"`
SwID string `gocti:"swid" json:"swid,omitempty"`
Languages []string `gocti:"languages" json:"languages,omitempty"`
Vendor string `gocti:"vendor" json:"vendor,omitempty"`
Version string `gocti:"version" json:"version,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
SoftwareAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (SoftwareAddInput) MarshalJSON ¶
func (s SoftwareAddInput) MarshalJSON() ([]byte, error)
type SoftwareConnection ¶
type SoftwareConnection struct {
// SoftwareConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []SoftwareEdge `gocti:"edges" json:"edges,omitempty"`
}
SoftwareConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (SoftwareConnection) MarshalJSON ¶
func (s SoftwareConnection) MarshalJSON() ([]byte, error)
type SoftwareEdge ¶
type SoftwareEdge struct {
// SoftwareEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Software `gocti:"node" json:"node,omitempty"`
}
SoftwareEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (SoftwareEdge) MarshalJSON ¶
func (s SoftwareEdge) MarshalJSON() ([]byte, error)
type Status ¶
type Status struct {
// Status
ID string `gocti:"id" json:"id,omitempty"`
TemplateID string `gocti:"template_id" json:"template_id,omitempty"`
Template StatusTemplate `gocti:"template" json:"template,omitempty"`
Type string `gocti:"type" json:"type,omitempty"`
Order int `gocti:"order" json:"order,omitempty"`
Disabled bool `gocti:"disabled" json:"disabled,omitempty"`
}
Status represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Status) MarshalJSON ¶
type StatusTemplate ¶
type StatusTemplate struct {
// StatusTemplate
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Color string `gocti:"color" json:"color,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
Usages int `gocti:"usages" json:"usages,omitempty"`
}
StatusTemplate represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StatusTemplate) MarshalJSON ¶
func (s StatusTemplate) MarshalJSON() ([]byte, error)
type StixCoreObject ¶
type StixCoreObject struct {
// StixCoreObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
StixCoreObject represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - AttackPattern - Campaign - Note - ObservedData - Opinion - Report - CourseOfAction - Individual - Sector - System - Infrastructure - IntrusionSet - Position - City - Country - Region - Malware - ThreatActorGroup - Tool - Vulnerability - Incident - AutonomousSystem - Directory - DomainName - EmailAddr - EmailMessage - EmailMimePartType - Artifact - StixFile - X509Certificate - IPv4Addr - IPv6Addr - MacAddr - Mutex - NetworkTraffic - Process - Software - [Url] - UserAccount - WindowsRegistryKey - WindowsRegistryValueType - CryptographicKey - CryptocurrencyWallet - Hostname - Text - UserAgent - BankAccount - TrackingNumber - Credential - PhoneNumber - PaymentCard - MediaContent - Persona - Channel - Language - Event - Grouping - Narrative - DataComponent - DataSource - AdministrativeArea - Task - CaseIncident - CaseRfi - CaseRft - Feedback - MalwareAnalysis - ThreatActorIndividual - Indicator - Organization
(See the examples for ways to decode an interface field into an implementation).
func (StixCoreObject) Implementations ¶
func (s StixCoreObject) Implementations() []reflect.Type
func (StixCoreObject) MarshalJSON ¶
func (s StixCoreObject) MarshalJSON() ([]byte, error)
func (StixCoreObject) Remainder ¶
func (s StixCoreObject) Remainder() map[string]any
type StixCoreRelationship ¶
type StixCoreRelationship struct {
// BasicRelationship
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixRelationship
From StixObjectOrStixRelationshipOrCreator `gocti:"from" json:"from,omitempty"`
To StixObjectOrStixRelationshipOrCreator `gocti:"to" json:"to,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
RelationshipType string `gocti:"relationship_type" json:"relationship_type,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
// StixCoreRelationship
FromID string `gocti:"fromId" json:"fromId,omitempty"`
FromType string `gocti:"fromType" json:"fromType,omitempty"`
ToID string `gocti:"toId" json:"toId,omitempty"`
ToType string `gocti:"toType" json:"toType,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
StartTime *time.Time `gocti:"start_time" json:"start_time,omitempty"`
StopTime *time.Time `gocti:"stop_time" json:"stop_time,omitempty"`
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ContainersNumber Number `gocti:"containersNumber" json:"containersNumber,omitempty"`
Containers ContainerConnection `gocti:"containers" json:"containers,omitempty"`
Reports ReportConnection `gocti:"reports" json:"reports,omitempty"`
Notes NoteConnection `gocti:"notes" json:"notes,omitempty"`
Opinions OpinionConnection `gocti:"opinions" json:"opinions,omitempty"`
Groupings GroupingConnection `gocti:"groupings" json:"groupings,omitempty"`
Cases CaseConnection `gocti:"cases" json:"cases,omitempty"`
StixCoreRelationships StixCoreRelationshipConnection `gocti:"stixCoreRelationships" json:"stixCoreRelationships,omitempty"`
KillChainPhases []KillChainPhase `gocti:"killChainPhases" json:"killChainPhases,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
}
StixCoreRelationship represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (StixCoreRelationship) MarshalJSON ¶
func (s StixCoreRelationship) MarshalJSON() ([]byte, error)
type StixCoreRelationshipConnection ¶
type StixCoreRelationshipConnection struct {
// StixCoreRelationshipConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []StixCoreRelationshipEdge `gocti:"edges" json:"edges,omitempty"`
}
StixCoreRelationshipConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixCoreRelationshipConnection) MarshalJSON ¶
func (s StixCoreRelationshipConnection) MarshalJSON() ([]byte, error)
type StixCoreRelationshipEdge ¶
type StixCoreRelationshipEdge struct {
// StixCoreRelationshipEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node StixCoreRelationship `gocti:"node" json:"node,omitempty"`
}
StixCoreRelationshipEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixCoreRelationshipEdge) MarshalJSON ¶
func (s StixCoreRelationshipEdge) MarshalJSON() ([]byte, error)
type StixCyberObservable ¶
type StixCyberObservable struct {
// StixCyberObservable
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
StixCyberObservable represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - AutonomousSystem - Directory - DomainName - EmailAddr - EmailMessage - EmailMimePartType - Artifact - StixFile - X509Certificate - IPv4Addr - IPv6Addr - MacAddr - Mutex - NetworkTraffic - Process - Software - [Url] - UserAccount - WindowsRegistryKey - WindowsRegistryValueType - CryptographicKey - CryptocurrencyWallet - Hostname - Text - UserAgent - BankAccount - TrackingNumber - Credential - PhoneNumber - PaymentCard - MediaContent - Persona
(See the examples for ways to decode an interface field into an implementation).
func (StixCyberObservable) Implementations ¶
func (s StixCyberObservable) Implementations() []reflect.Type
func (StixCyberObservable) MarshalJSON ¶
func (s StixCyberObservable) MarshalJSON() ([]byte, error)
func (StixCyberObservable) Remainder ¶
func (s StixCyberObservable) Remainder() map[string]any
type StixCyberObservableConnection ¶
type StixCyberObservableConnection struct {
// StixCyberObservableConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []StixCyberObservableEdge `gocti:"edges" json:"edges,omitempty"`
}
StixCyberObservableConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixCyberObservableConnection) MarshalJSON ¶
func (s StixCyberObservableConnection) MarshalJSON() ([]byte, error)
type StixCyberObservableEdge ¶
type StixCyberObservableEdge struct {
// StixCyberObservableEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node StixCyberObservable `gocti:"node" json:"node,omitempty"`
}
StixCyberObservableEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixCyberObservableEdge) MarshalJSON ¶
func (s StixCyberObservableEdge) MarshalJSON() ([]byte, error)
type StixCyberObservableType ¶
type StixCyberObservableType string
const ( StixCyberObservableTypeArtifact StixCyberObservableType = "Artifact" StixCyberObservableTypeAutonomousSystem StixCyberObservableType = "Autonomous-System" StixCyberObservableTypeBankAccount StixCyberObservableType = "Bank-Account" StixCyberObservableTypeCryptocurrencyWallet StixCyberObservableType = "Cryptocurrency-Wallet" StixCyberObservableTypeCryptographicKey StixCyberObservableType = "Cryptographic-Key" StixCyberObservableTypeCredential StixCyberObservableType = "Credential" StixCyberObservableTypeDirectory StixCyberObservableType = "Directory" StixCyberObservableTypeDomainName StixCyberObservableType = "Domain-Name" StixCyberObservableTypeEmailAddr StixCyberObservableType = "Email-Addr" StixCyberObservableTypeEmailMessage StixCyberObservableType = "Email-Message" StixCyberObservableTypeEmailMimePartType StixCyberObservableType = "Email-Mime-Part-Type" StixCyberObservableTypeFile StixCyberObservableType = "File" StixCyberObservableTypeHostname StixCyberObservableType = "Hostname" StixCyberObservableTypeIPV4Addr StixCyberObservableType = "IPv4-Addr" StixCyberObservableTypeIPV6Addr StixCyberObservableType = "IPv6-Addr" StixCyberObservableTypeMacAddr StixCyberObservableType = "Mac-Addr" StixCyberObservableTypeMediaContent StixCyberObservableType = "Media-Content" StixCyberObservableTypeMutex StixCyberObservableType = "Mutex" StixCyberObservableTypeNetworkTraffic StixCyberObservableType = "Network-Traffic" StixCyberObservableTypePaymentCard StixCyberObservableType = "Payment-Card" StixCyberObservableTypePersona StixCyberObservableType = "Persona" StixCyberObservableTypePhoneNumber StixCyberObservableType = "Phone-Number" StixCyberObservableTypeProcess StixCyberObservableType = "Process" StixCyberObservableTypeSimpleObservable StixCyberObservableType = "Simple-Observable" StixCyberObservableTypeSoftware StixCyberObservableType = "Software" StixCyberObservableTypeStixFile StixCyberObservableType = "StixFile" StixCyberObservableTypeText StixCyberObservableType = "Text" StixCyberObservableTypeTrackingNumber StixCyberObservableType = "TrackingNumber" StixCyberObservableTypeURL StixCyberObservableType = "Url" StixCyberObservableTypeUserAccount StixCyberObservableType = "User-Account" StixCyberObservableTypeUserAgent StixCyberObservableType = "User-Agent" StixCyberObservableTypeWindowsRegistryKey StixCyberObservableType = "Windows-Registry-Key" StixCyberObservableTypeWindowsRegistryValueType StixCyberObservableType = "Windows-Registry-Value-Type" StixCyberObservableTypeX509Certificate StixCyberObservableType = "X509-Certificate" )
type StixDomainObject ¶
type StixDomainObject struct {
// StixDomainObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
StixDomainObject represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - AttackPattern - Campaign - Note - ObservedData - Opinion - Report - CourseOfAction - Individual - Sector - System - Infrastructure - IntrusionSet - Position - City - Country - Region - Malware - ThreatActorGroup - Tool - Vulnerability - Incident - Channel - Language - Event - Grouping - Narrative - DataComponent - DataSource - AdministrativeArea - Task - CaseIncident - CaseRfi - CaseRft - Feedback - MalwareAnalysis - ThreatActorIndividual - Indicator - Organization
(See the examples for ways to decode an interface field into an implementation).
func (StixDomainObject) Implementations ¶
func (s StixDomainObject) Implementations() []reflect.Type
func (StixDomainObject) MarshalJSON ¶
func (s StixDomainObject) MarshalJSON() ([]byte, error)
func (StixDomainObject) Remainder ¶
func (s StixDomainObject) Remainder() map[string]any
type StixFile ¶
type StixFile struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// HashedObservable
Hashes []Hash `gocti:"hashes" json:"hashes,omitempty"`
// StixFile
Extensions string `gocti:"extensions" json:"extensions,omitempty"`
Size int `gocti:"size" json:"size,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
NameEnc string `gocti:"name_enc" json:"name_enc,omitempty"`
MagicNumberHex string `gocti:"magic_number_hex" json:"magic_number_hex,omitempty"`
MimeType string `gocti:"mime_type" json:"mime_type,omitempty"`
Ctime *time.Time `gocti:"ctime" json:"ctime,omitempty"`
Mtime *time.Time `gocti:"mtime" json:"mtime,omitempty"`
Atime *time.Time `gocti:"atime" json:"atime,omitempty"`
XOpenctiAdditionalNames []string `gocti:"x_opencti_additional_names" json:"x_opencti_additional_names,omitempty"`
ObsContent Artifact `gocti:"obsContent" json:"obsContent,omitempty"`
}
StixFile represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixFile) MarshalJSON ¶
type StixFileAddInput ¶
type StixFileAddInput struct {
// StixFileAddInput
Hashes []HashInput `gocti:"hashes" json:"hashes,omitempty"`
Size int `gocti:"size" json:"size,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
NameEnc string `gocti:"name_enc" json:"name_enc,omitempty"`
MagicNumberHex string `gocti:"magic_number_hex" json:"magic_number_hex,omitempty"`
MimeType string `gocti:"mime_type" json:"mime_type,omitempty"`
Ctime *time.Time `gocti:"ctime" json:"ctime,omitempty"`
Mtime *time.Time `gocti:"mtime" json:"mtime,omitempty"`
Atime *time.Time `gocti:"atime" json:"atime,omitempty"`
XOpenctiAdditionalNames []string `gocti:"x_opencti_additional_names" json:"x_opencti_additional_names,omitempty"`
ObsContent string `gocti:"obsContent" json:"obsContent,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
StixFileAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixFileAddInput) MarshalJSON ¶
func (s StixFileAddInput) MarshalJSON() ([]byte, error)
type StixFileConnection ¶
type StixFileConnection struct {
// StixFileConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []StixFileEdge `gocti:"edges" json:"edges,omitempty"`
}
StixFileConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixFileConnection) MarshalJSON ¶
func (s StixFileConnection) MarshalJSON() ([]byte, error)
type StixFileEdge ¶
type StixFileEdge struct {
// StixFileEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node StixFile `gocti:"node" json:"node,omitempty"`
}
StixFileEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixFileEdge) MarshalJSON ¶
func (s StixFileEdge) MarshalJSON() ([]byte, error)
type StixObject ¶
type StixObject struct {
// StixObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
StixObject represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - MarkingDefinition - Label - ExternalReference - KillChainPhase - AttackPattern - Campaign - Note - ObservedData - Opinion - Report - CourseOfAction - Individual - Sector - System - Infrastructure - IntrusionSet - Position - City - Country - Region - Malware - ThreatActorGroup - Tool - Vulnerability - Incident - AutonomousSystem - Directory - DomainName - EmailAddr - EmailMessage - EmailMimePartType - Artifact - StixFile - X509Certificate - IPv4Addr - IPv6Addr - MacAddr - Mutex - NetworkTraffic - Process - Software - [Url] - UserAccount - WindowsRegistryKey - WindowsRegistryValueType - CryptographicKey - CryptocurrencyWallet - Hostname - Text - UserAgent - BankAccount - TrackingNumber - Credential - PhoneNumber - PaymentCard - MediaContent - Persona - Channel - Language - Event - Grouping - Narrative - DataComponent - DataSource - Vocabulary - AdministrativeArea - Task - CaseIncident - CaseRfi - CaseRft - Feedback - MalwareAnalysis - ThreatActorIndividual - Indicator - Organization
(See the examples for ways to decode an interface field into an implementation).
func (StixObject) Implementations ¶
func (s StixObject) Implementations() []reflect.Type
func (StixObject) MarshalJSON ¶
func (s StixObject) MarshalJSON() ([]byte, error)
func (StixObject) Remainder ¶
func (s StixObject) Remainder() map[string]any
type StixObjectOrStixRelationship ¶
type StixObjectOrStixRelationship struct {
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
StixObjectOrStixRelationship represents a GraphQL UNION Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - MarkingDefinition - Label - KillChainPhase - ExternalReference - AttackPattern - Campaign - Channel - Event - Narrative - Note - ObservedData - Opinion - Report - Grouping - CourseOfAction - Individual - Organization - Sector - System - Indicator - Infrastructure - IntrusionSet - Language - City - AdministrativeArea - Country - Region - Position - Malware - MalwareAnalysis - ThreatActorGroup - ThreatActorIndividual - Tool - Vulnerability - Incident - AutonomousSystem - Directory - DomainName - EmailAddr - EmailMessage - EmailMimePartType - Artifact - StixFile - X509Certificate - IPv4Addr - IPv6Addr - MacAddr - Mutex - NetworkTraffic - Process - Software - [Url] - UserAccount - WindowsRegistryKey - WindowsRegistryValueType - CryptographicKey - CryptocurrencyWallet - Hostname - Text - UserAgent - BankAccount - Credential - TrackingNumber - PhoneNumber - PaymentCard - MediaContent - Persona - StixCoreRelationship - StixSightingRelationship - StixRefRelationship - DataComponent - DataSource - CaseIncident - CaseRfi - CaseRft - Feedback - CaseTemplate - Task - EntitySetting - ManagerConfiguration - Workspace - CsvMapper - PublicDashboard
(See the examples for ways to decode an interface field into an implementation).
func (StixObjectOrStixRelationship) Implementations ¶
func (s StixObjectOrStixRelationship) Implementations() []reflect.Type
func (StixObjectOrStixRelationship) MarshalJSON ¶
func (s StixObjectOrStixRelationship) MarshalJSON() ([]byte, error)
func (StixObjectOrStixRelationship) Remainder ¶
func (s StixObjectOrStixRelationship) Remainder() map[string]any
type StixObjectOrStixRelationshipConnection ¶
type StixObjectOrStixRelationshipConnection struct {
// StixObjectOrStixRelationshipConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []StixObjectOrStixRelationshipEdge `gocti:"edges" json:"edges,omitempty"`
}
StixObjectOrStixRelationshipConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixObjectOrStixRelationshipConnection) MarshalJSON ¶
func (s StixObjectOrStixRelationshipConnection) MarshalJSON() ([]byte, error)
type StixObjectOrStixRelationshipEdge ¶
type StixObjectOrStixRelationshipEdge struct {
// StixObjectOrStixRelationshipEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node StixObjectOrStixRelationship `gocti:"node" json:"node,omitempty"`
}
StixObjectOrStixRelationshipEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixObjectOrStixRelationshipEdge) MarshalJSON ¶
func (s StixObjectOrStixRelationshipEdge) MarshalJSON() ([]byte, error)
type StixObjectOrStixRelationshipOrCreator ¶
type StixObjectOrStixRelationshipOrCreator struct {
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
StixObjectOrStixRelationshipOrCreator represents a GraphQL UNION Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - MarkingDefinition - Label - KillChainPhase - ExternalReference - AttackPattern - Campaign - Channel - Event - Narrative - Note - ObservedData - Opinion - Report - Grouping - CourseOfAction - Individual - Organization - Sector - System - Indicator - Infrastructure - IntrusionSet - Language - City - AdministrativeArea - Country - Region - Position - Malware - MalwareAnalysis - ThreatActorGroup - ThreatActorIndividual - Tool - Vulnerability - Incident - AutonomousSystem - Directory - DomainName - EmailAddr - EmailMessage - EmailMimePartType - Artifact - StixFile - X509Certificate - IPv4Addr - IPv6Addr - MacAddr - Mutex - NetworkTraffic - Process - Software - [Url] - UserAccount - WindowsRegistryKey - WindowsRegistryValueType - CryptographicKey - CryptocurrencyWallet - Hostname - Text - UserAgent - BankAccount - Credential - TrackingNumber - PhoneNumber - PaymentCard - MediaContent - Persona - StixCoreRelationship - StixSightingRelationship - StixRefRelationship - Task - DataComponent - DataSource - CaseIncident - CaseRfi - CaseRft - Feedback - CaseTemplate - EntitySetting - ManagerConfiguration - Creator - Group - Workspace - CsvMapper - Status - PublicDashboard
(See the examples for ways to decode an interface field into an implementation).
func (StixObjectOrStixRelationshipOrCreator) Implementations ¶
func (s StixObjectOrStixRelationshipOrCreator) Implementations() []reflect.Type
func (StixObjectOrStixRelationshipOrCreator) MarshalJSON ¶
func (s StixObjectOrStixRelationshipOrCreator) MarshalJSON() ([]byte, error)
func (StixObjectOrStixRelationshipOrCreator) Remainder ¶
func (s StixObjectOrStixRelationshipOrCreator) Remainder() map[string]any
type StixObjectOrStixRelationshipRefConnection ¶
type StixObjectOrStixRelationshipRefConnection struct {
// StixObjectOrStixRelationshipRefConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []StixObjectOrStixRelationshipRefEdge `gocti:"edges" json:"edges,omitempty"`
}
StixObjectOrStixRelationshipRefConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixObjectOrStixRelationshipRefConnection) MarshalJSON ¶
func (s StixObjectOrStixRelationshipRefConnection) MarshalJSON() ([]byte, error)
type StixObjectOrStixRelationshipRefEdge ¶
type StixObjectOrStixRelationshipRefEdge struct {
// StixObjectOrStixRelationshipRefEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Types []string `gocti:"types" json:"types,omitempty"`
Node StixObjectOrStixRelationship `gocti:"node" json:"node,omitempty"`
}
StixObjectOrStixRelationshipRefEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixObjectOrStixRelationshipRefEdge) MarshalJSON ¶
func (s StixObjectOrStixRelationshipRefEdge) MarshalJSON() ([]byte, error)
type StixRefRelationship ¶
type StixRefRelationship struct {
// BasicRelationship
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixRelationship
From StixObjectOrStixRelationshipOrCreator `gocti:"from" json:"from,omitempty"`
To StixObjectOrStixRelationshipOrCreator `gocti:"to" json:"to,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
RelationshipType string `gocti:"relationship_type" json:"relationship_type,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
// StixRefRelationship
StartTime *time.Time `gocti:"start_time" json:"start_time,omitempty"`
StopTime *time.Time `gocti:"stop_time" json:"stop_time,omitempty"`
Datable bool `gocti:"datable" json:"datable,omitempty"`
ContainersNumber Number `gocti:"containersNumber" json:"containersNumber,omitempty"`
Containers ContainerConnection `gocti:"containers" json:"containers,omitempty"`
Notes NoteConnection `gocti:"notes" json:"notes,omitempty"`
Reports ReportConnection `gocti:"reports" json:"reports,omitempty"`
Opinions OpinionConnection `gocti:"opinions" json:"opinions,omitempty"`
Groupings GroupingConnection `gocti:"groupings" json:"groupings,omitempty"`
Cases CaseConnection `gocti:"cases" json:"cases,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
}
StixRefRelationship represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixRefRelationship) MarshalJSON ¶
func (s StixRefRelationship) MarshalJSON() ([]byte, error)
type StixSightingRelationship ¶
type StixSightingRelationship struct {
// BasicRelationship
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixRelationship
From StixObjectOrStixRelationshipOrCreator `gocti:"from" json:"from,omitempty"`
To StixObjectOrStixRelationshipOrCreator `gocti:"to" json:"to,omitempty"`
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
RelationshipType string `gocti:"relationship_type" json:"relationship_type,omitempty"`
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
// StixSightingRelationship
FromID string `gocti:"fromId" json:"fromId,omitempty"`
FromType string `gocti:"fromType" json:"fromType,omitempty"`
ToID string `gocti:"toId" json:"toId,omitempty"`
ToType string `gocti:"toType" json:"toType,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
AttributeCount int `gocti:"attribute_count" json:"attribute_count,omitempty"`
XOpenctiNegative bool `gocti:"x_opencti_negative" json:"x_opencti_negative,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ContainersNumber Number `gocti:"containersNumber" json:"containersNumber,omitempty"`
Containers ContainerConnection `gocti:"containers" json:"containers,omitempty"`
Reports ReportConnection `gocti:"reports" json:"reports,omitempty"`
Notes NoteConnection `gocti:"notes" json:"notes,omitempty"`
Opinions OpinionConnection `gocti:"opinions" json:"opinions,omitempty"`
Groupings GroupingConnection `gocti:"groupings" json:"groupings,omitempty"`
Cases CaseConnection `gocti:"cases" json:"cases,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
}
StixSightingRelationship represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (StixSightingRelationship) MarshalJSON ¶
func (s StixSightingRelationship) MarshalJSON() ([]byte, error)
type SubType ¶
type SubType struct {
// SubType
ID string `gocti:"id" json:"id,omitempty"`
Label string `gocti:"label" json:"label,omitempty"`
Statuses []Status `gocti:"statuses" json:"statuses,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
Settings EntitySetting `gocti:"settings" json:"settings,omitempty"`
}
SubType represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (SubType) MarshalJSON ¶
type System ¶
type System struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Identity
IdentityClass string `gocti:"identity_class" json:"identity_class,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
ContactInformation string `gocti:"contact_information" json:"contact_information,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
XOpenctiReliability string `gocti:"x_opencti_reliability" json:"x_opencti_reliability,omitempty"`
// System
XOpenctiFirstname string `gocti:"x_opencti_firstname" json:"x_opencti_firstname,omitempty"`
XOpenctiLastname string `gocti:"x_opencti_lastname" json:"x_opencti_lastname,omitempty"`
Organizations OrganizationConnection `gocti:"organizations" json:"organizations,omitempty"`
}
System represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (System) MarshalJSON ¶
type Task ¶
type Task struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Container
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
// Task
ObjectParticipant []Participant `gocti:"objectParticipant" json:"objectParticipant,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
DueDate *time.Time `gocti:"due_date" json:"due_date,omitempty"`
}
Task represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Task) MarshalJSON ¶
type TaskConnection ¶
type TaskConnection struct {
// TaskConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []TaskEdge `gocti:"edges" json:"edges,omitempty"`
}
TaskConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TaskConnection) MarshalJSON ¶
func (t TaskConnection) MarshalJSON() ([]byte, error)
type TaskEdge ¶
type TaskEdge struct {
// TaskEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Task `gocti:"node" json:"node,omitempty"`
}
TaskEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TaskEdge) MarshalJSON ¶
type TaskTemplate ¶
type TaskTemplate struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// TaskTemplate
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
}
TaskTemplate represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TaskTemplate) MarshalJSON ¶
func (t TaskTemplate) MarshalJSON() ([]byte, error)
type TaskTemplateConnection ¶
type TaskTemplateConnection struct {
// TaskTemplateConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []TaskTemplateEdge `gocti:"edges" json:"edges,omitempty"`
}
TaskTemplateConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TaskTemplateConnection) MarshalJSON ¶
func (t TaskTemplateConnection) MarshalJSON() ([]byte, error)
type TaskTemplateEdge ¶
type TaskTemplateEdge struct {
// TaskTemplateEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node TaskTemplate `gocti:"node" json:"node,omitempty"`
}
TaskTemplateEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TaskTemplateEdge) MarshalJSON ¶
func (t TaskTemplateEdge) MarshalJSON() ([]byte, error)
type Text ¶
type Text struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Text
Value string `gocti:"value" json:"value,omitempty"`
}
Text represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Text) MarshalJSON ¶
type TextAddInput ¶
type TextAddInput struct {
// TextAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
TextAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TextAddInput) MarshalJSON ¶
func (t TextAddInput) MarshalJSON() ([]byte, error)
type ThreatActor ¶
type ThreatActor struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// ThreatActor
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
ThreatActorTypes []string `gocti:"threat_actor_types" json:"threat_actor_types,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
Goals []string `gocti:"goals" json:"goals,omitempty"`
Sophistication string `gocti:"sophistication" json:"sophistication,omitempty"`
ResourceLevel string `gocti:"resource_level" json:"resource_level,omitempty"`
PrimaryMotivation string `gocti:"primary_motivation" json:"primary_motivation,omitempty"`
SecondaryMotivations []string `gocti:"secondary_motivations" json:"secondary_motivations,omitempty"`
PersonalMotivations []string `gocti:"personal_motivations" json:"personal_motivations,omitempty"`
Locations LocationConnection `gocti:"locations" json:"locations,omitempty"`
Countries CountryConnection `gocti:"countries" json:"countries,omitempty"`
// For storing interface implementations' data
Remain map[string]any `gocti:",remain"`
}
ThreatActor represents a GraphQL INTERFACE Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
Available implementations are: - ThreatActorGroup - ThreatActorIndividual
(See the examples for ways to decode an interface field into an implementation).
func (ThreatActor) Implementations ¶
func (t ThreatActor) Implementations() []reflect.Type
func (ThreatActor) MarshalJSON ¶
func (t ThreatActor) MarshalJSON() ([]byte, error)
func (ThreatActor) Remainder ¶
func (t ThreatActor) Remainder() map[string]any
type ThreatActorGroup ¶
type ThreatActorGroup struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// ThreatActor
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
ThreatActorTypes []string `gocti:"threat_actor_types" json:"threat_actor_types,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
Goals []string `gocti:"goals" json:"goals,omitempty"`
Sophistication string `gocti:"sophistication" json:"sophistication,omitempty"`
ResourceLevel string `gocti:"resource_level" json:"resource_level,omitempty"`
PrimaryMotivation string `gocti:"primary_motivation" json:"primary_motivation,omitempty"`
SecondaryMotivations []string `gocti:"secondary_motivations" json:"secondary_motivations,omitempty"`
PersonalMotivations []string `gocti:"personal_motivations" json:"personal_motivations,omitempty"`
Locations LocationConnection `gocti:"locations" json:"locations,omitempty"`
Countries CountryConnection `gocti:"countries" json:"countries,omitempty"`
}
ThreatActorGroup represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ThreatActorGroup) MarshalJSON ¶
func (t ThreatActorGroup) MarshalJSON() ([]byte, error)
type ThreatActorIndividual ¶
type ThreatActorIndividual struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// ThreatActor
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
ThreatActorTypes []string `gocti:"threat_actor_types" json:"threat_actor_types,omitempty"`
FirstSeen *time.Time `gocti:"first_seen" json:"first_seen,omitempty"`
LastSeen *time.Time `gocti:"last_seen" json:"last_seen,omitempty"`
Roles []string `gocti:"roles" json:"roles,omitempty"`
Goals []string `gocti:"goals" json:"goals,omitempty"`
Sophistication string `gocti:"sophistication" json:"sophistication,omitempty"`
ResourceLevel string `gocti:"resource_level" json:"resource_level,omitempty"`
PrimaryMotivation string `gocti:"primary_motivation" json:"primary_motivation,omitempty"`
SecondaryMotivations []string `gocti:"secondary_motivations" json:"secondary_motivations,omitempty"`
PersonalMotivations []string `gocti:"personal_motivations" json:"personal_motivations,omitempty"`
Locations LocationConnection `gocti:"locations" json:"locations,omitempty"`
Countries CountryConnection `gocti:"countries" json:"countries,omitempty"`
// ThreatActorIndividual
DateOfBirth *time.Time `gocti:"date_of_birth" json:"date_of_birth,omitempty"`
Gender string `gocti:"gender" json:"gender,omitempty"`
JobTitle string `gocti:"job_title" json:"job_title,omitempty"`
MaritalStatus string `gocti:"marital_status" json:"marital_status,omitempty"`
EyeColor string `gocti:"eye_color" json:"eye_color,omitempty"`
HairColor string `gocti:"hair_color" json:"hair_color,omitempty"`
Height []Measure `gocti:"height" json:"height,omitempty"`
Weight []Measure `gocti:"weight" json:"weight,omitempty"`
BornIn Country `gocti:"bornIn" json:"bornIn,omitempty"`
Ethnicity Country `gocti:"ethnicity" json:"ethnicity,omitempty"`
}
ThreatActorIndividual represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (ThreatActorIndividual) MarshalJSON ¶
func (t ThreatActorIndividual) MarshalJSON() ([]byte, error)
type Tool ¶
type Tool struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Tool
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
ToolTypes []string `gocti:"tool_types" json:"tool_types,omitempty"`
ToolVersion string `gocti:"tool_version" json:"tool_version,omitempty"`
KillChainPhases []KillChainPhase `gocti:"killChainPhases" json:"killChainPhases,omitempty"`
}
Tool represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Tool) MarshalJSON ¶
type TrackingNumber ¶
type TrackingNumber struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// TrackingNumber
Value string `gocti:"value" json:"value,omitempty"`
}
TrackingNumber represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TrackingNumber) MarshalJSON ¶
func (t TrackingNumber) MarshalJSON() ([]byte, error)
type TrackingNumberAddInput ¶
type TrackingNumberAddInput struct {
// TrackingNumberAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
TrackingNumberAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TrackingNumberAddInput) MarshalJSON ¶
func (t TrackingNumberAddInput) MarshalJSON() ([]byte, error)
type TypeAttribute ¶
type TypeAttribute struct {
// TypeAttribute
Name string `gocti:"name" json:"name,omitempty"`
Type string `gocti:"type" json:"type,omitempty"`
Mandatory bool `gocti:"mandatory" json:"mandatory,omitempty"`
MandatoryType string `gocti:"mandatoryType" json:"mandatoryType,omitempty"`
EditDefault bool `gocti:"editDefault" json:"editDefault,omitempty"`
Multiple bool `gocti:"multiple" json:"multiple,omitempty"`
Label string `gocti:"label" json:"label,omitempty"`
DefaultValues []DefaultValue `gocti:"defaultValues" json:"defaultValues,omitempty"`
Scale string `gocti:"scale" json:"scale,omitempty"`
}
TypeAttribute represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (TypeAttribute) MarshalJSON ¶
func (t TypeAttribute) MarshalJSON() ([]byte, error)
type URL ¶
type URL struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// Url
Value string `gocti:"value" json:"value,omitempty"`
}
Url represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (URL) MarshalJSON ¶
type URLAddInput ¶
type URLAddInput struct {
// UrlAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
UrlAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (URLAddInput) MarshalJSON ¶
func (u URLAddInput) MarshalJSON() ([]byte, error)
type UnitSystem ¶
type UnitSystem string
const ( UnitSystemAuto UnitSystem = "auto" UnitSystemMetric UnitSystem = "Metric" UnitSystemImperial UnitSystem = "Imperial" )
func (UnitSystem) MarshalJSON ¶
func (u UnitSystem) MarshalJSON() ([]byte, error)
type User ¶
type User struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// User
UserEmail string `gocti:"user_email" json:"user_email,omitempty"`
ApiToken string `gocti:"api_token" json:"api_token,omitempty"`
PersonalNotifiers []Notifier `gocti:"personal_notifiers" json:"personal_notifiers,omitempty"`
IndividualID string `gocti:"individual_id" json:"individual_id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Firstname string `gocti:"firstname" json:"firstname,omitempty"`
OtpActivated bool `gocti:"otp_activated" json:"otp_activated,omitempty"`
StatelessSession bool `gocti:"stateless_session" json:"stateless_session,omitempty"`
OtpQr string `gocti:"otp_qr" json:"otp_qr,omitempty"`
OtpMandatory bool `gocti:"otp_mandatory" json:"otp_mandatory,omitempty"`
Lastname string `gocti:"lastname" json:"lastname,omitempty"`
Theme string `gocti:"theme" json:"theme,omitempty"`
Language string `gocti:"language" json:"language,omitempty"`
External bool `gocti:"external" json:"external,omitempty"`
Roles []Role `gocti:"roles" json:"roles,omitempty"`
Capabilities []Capability `gocti:"capabilities" json:"capabilities,omitempty"`
DefaultHiddenTypes []string `gocti:"default_hidden_types" json:"default_hidden_types,omitempty"`
UserConfidenceLevel ConfidenceLevel `gocti:"user_confidence_level" json:"user_confidence_level,omitempty"`
EffectiveConfidenceLevel EffectiveConfidenceLevel `gocti:"effective_confidence_level" json:"effective_confidence_level,omitempty"`
NoCreators bool `gocti:"no_creators" json:"no_creators,omitempty"`
RestrictDelete bool `gocti:"restrict_delete" json:"restrict_delete,omitempty"`
Groups GroupConnection `gocti:"groups" json:"groups,omitempty"`
ObjectOrganization OrganizationConnection `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Sessions []SessionDetail `gocti:"sessions" json:"sessions,omitempty"`
DefaultTimeField string `gocti:"default_time_field" json:"default_time_field,omitempty"`
AccountStatus string `gocti:"account_status" json:"account_status,omitempty"`
AccountLockAfterDate *time.Time `gocti:"account_lock_after_date" json:"account_lock_after_date,omitempty"`
AdministratedOrganizations []Organization `gocti:"administrated_organizations" json:"administrated_organizations,omitempty"`
UnitSystem UnitSystem `gocti:"unit_system" json:"unit_system,omitempty"`
MonochromeLabels bool `gocti:"monochrome_labels" json:"monochrome_labels,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
}
User represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (User) MarshalJSON ¶
type UserAccount ¶
type UserAccount struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// UserAccount
Extensions string `gocti:"extensions" json:"extensions,omitempty"`
UserID string `gocti:"user_id" json:"user_id,omitempty"`
Credential string `gocti:"credential" json:"credential,omitempty"`
AccountLogin string `gocti:"account_login" json:"account_login,omitempty"`
AccountType string `gocti:"account_type" json:"account_type,omitempty"`
DisplayName string `gocti:"display_name" json:"display_name,omitempty"`
IsServiceAccount bool `gocti:"is_service_account" json:"is_service_account,omitempty"`
IsPrivileged bool `gocti:"is_privileged" json:"is_privileged,omitempty"`
CanEscalatePrivs bool `gocti:"can_escalate_privs" json:"can_escalate_privs,omitempty"`
IsDisabled bool `gocti:"is_disabled" json:"is_disabled,omitempty"`
AccountCreated *time.Time `gocti:"account_created" json:"account_created,omitempty"`
AccountExpires *time.Time `gocti:"account_expires" json:"account_expires,omitempty"`
CredentialLastChanged *time.Time `gocti:"credential_last_changed" json:"credential_last_changed,omitempty"`
AccountFirstLogin *time.Time `gocti:"account_first_login" json:"account_first_login,omitempty"`
AccountLastLogin *time.Time `gocti:"account_last_login" json:"account_last_login,omitempty"`
}
UserAccount represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (UserAccount) MarshalJSON ¶
func (u UserAccount) MarshalJSON() ([]byte, error)
type UserAccountAddInput ¶
type UserAccountAddInput struct {
// UserAccountAddInput
UserID string `gocti:"user_id" json:"user_id,omitempty"`
Credential string `gocti:"credential" json:"credential,omitempty"`
AccountLogin string `gocti:"account_login" json:"account_login,omitempty"`
AccountType string `gocti:"account_type" json:"account_type,omitempty"`
DisplayName string `gocti:"display_name" json:"display_name,omitempty"`
IsServiceAccount bool `gocti:"is_service_account" json:"is_service_account,omitempty"`
IsPrivileged bool `gocti:"is_privileged" json:"is_privileged,omitempty"`
CanEscalatePrivs bool `gocti:"can_escalate_privs" json:"can_escalate_privs,omitempty"`
IsDisabled bool `gocti:"is_disabled" json:"is_disabled,omitempty"`
AccountCreated *time.Time `gocti:"account_created" json:"account_created,omitempty"`
AccountExpires *time.Time `gocti:"account_expires" json:"account_expires,omitempty"`
CredentialLastChanged *time.Time `gocti:"credential_last_changed" json:"credential_last_changed,omitempty"`
AccountFirstLogin *time.Time `gocti:"account_first_login" json:"account_first_login,omitempty"`
AccountLastLogin *time.Time `gocti:"account_last_login" json:"account_last_login,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
UserAccountAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (UserAccountAddInput) MarshalJSON ¶
func (u UserAccountAddInput) MarshalJSON() ([]byte, error)
type UserAgent ¶
type UserAgent struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// UserAgent
Value string `gocti:"value" json:"value,omitempty"`
}
UserAgent represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (UserAgent) MarshalJSON ¶
type UserAgentAddInput ¶
type UserAgentAddInput struct {
// UserAgentAddInput
Value string `gocti:"value" json:"value,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
UserAgentAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (UserAgentAddInput) MarshalJSON ¶
func (u UserAgentAddInput) MarshalJSON() ([]byte, error)
type UserConnection ¶
type UserConnection struct {
// UserConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []UserEdge `gocti:"edges" json:"edges,omitempty"`
}
UserConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (UserConnection) MarshalJSON ¶
func (u UserConnection) MarshalJSON() ([]byte, error)
type UserEdge ¶
type UserEdge struct {
// UserEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node User `gocti:"node" json:"node,omitempty"`
}
UserEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (UserEdge) MarshalJSON ¶
type Vocabulary ¶
type Vocabulary struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixMetaObject
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
// Vocabulary
Category VocabularyDefinition `gocti:"category" json:"category,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Usages int `gocti:"usages" json:"usages,omitempty"`
Aliases []string `gocti:"aliases" json:"aliases,omitempty"`
BuiltIn bool `gocti:"builtIn" json:"builtIn,omitempty"`
Order int `gocti:"order" json:"order,omitempty"`
}
Vocabulary represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Vocabulary) MarshalJSON ¶
func (v Vocabulary) MarshalJSON() ([]byte, error)
type VocabularyDefinition ¶
type VocabularyDefinition struct {
// VocabularyDefinition
Key string `gocti:"key" json:"key,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
EntityTypes []string `gocti:"entity_types" json:"entity_types,omitempty"`
Fields []VocabularyFieldDefinition `gocti:"fields" json:"fields,omitempty"`
}
VocabularyDefinition represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (VocabularyDefinition) MarshalJSON ¶
func (v VocabularyDefinition) MarshalJSON() ([]byte, error)
type VocabularyFieldDefinition ¶
type VocabularyFieldDefinition struct {
// VocabularyFieldDefinition
Key string `gocti:"key" json:"key,omitempty"`
Required bool `gocti:"required" json:"required,omitempty"`
Multiple bool `gocti:"multiple" json:"multiple,omitempty"`
}
VocabularyFieldDefinition represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (VocabularyFieldDefinition) MarshalJSON ¶
func (v VocabularyFieldDefinition) MarshalJSON() ([]byte, error)
type Vulnerability ¶
type Vulnerability struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixDomainObject
Revoked bool `gocti:"revoked" json:"revoked,omitempty"`
Confidence int `gocti:"confidence" json:"confidence,omitempty"`
Lang string `gocti:"lang" json:"lang,omitempty"`
Created *time.Time `gocti:"created" json:"created,omitempty"`
Modified *time.Time `gocti:"modified" json:"modified,omitempty"`
ObjectAssignee []Assignee `gocti:"objectAssignee" json:"objectAssignee,omitempty"`
Status Status `gocti:"status" json:"status,omitempty"`
WorkflowEnabled bool `gocti:"workflowEnabled" json:"workflowEnabled,omitempty"`
// Vulnerability
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
XOpenctiAliases []string `gocti:"x_opencti_aliases" json:"x_opencti_aliases,omitempty"`
XOpenctiCvssBaseScore float64 `gocti:"x_opencti_cvss_base_score" json:"x_opencti_cvss_base_score,omitempty"`
XOpenctiCvssBaseSeverity string `gocti:"x_opencti_cvss_base_severity" json:"x_opencti_cvss_base_severity,omitempty"`
XOpenctiCvssAttackVector string `gocti:"x_opencti_cvss_attack_vector" json:"x_opencti_cvss_attack_vector,omitempty"`
XOpenctiCvssIntegrityImpact string `gocti:"x_opencti_cvss_integrity_impact" json:"x_opencti_cvss_integrity_impact,omitempty"`
XOpenctiCvssAvailabilityImpact string `gocti:"x_opencti_cvss_availability_impact" json:"x_opencti_cvss_availability_impact,omitempty"`
XOpenctiCvssConfidentialityImpact string `gocti:"x_opencti_cvss_confidentiality_impact" json:"x_opencti_cvss_confidentiality_impact,omitempty"`
XOpenctiCisaKev bool `gocti:"x_opencti_cisa_kev" json:"x_opencti_cisa_kev,omitempty"`
XOpenctiEpssScore float64 `gocti:"x_opencti_epss_score" json:"x_opencti_epss_score,omitempty"`
XOpenctiEpssPercentile float64 `gocti:"x_opencti_epss_percentile" json:"x_opencti_epss_percentile,omitempty"`
Softwares StixCyberObservableConnection `gocti:"softwares" json:"softwares,omitempty"`
}
Vulnerability represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Vulnerability) MarshalJSON ¶
func (v Vulnerability) MarshalJSON() ([]byte, error)
type VulnerabilityConnection ¶
type VulnerabilityConnection struct {
// VulnerabilityConnection
PageInfo PageInfo `gocti:"pageInfo" json:"pageInfo,omitempty"`
Edges []VulnerabilityEdge `gocti:"edges" json:"edges,omitempty"`
}
VulnerabilityConnection represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (VulnerabilityConnection) MarshalJSON ¶
func (v VulnerabilityConnection) MarshalJSON() ([]byte, error)
type VulnerabilityEdge ¶
type VulnerabilityEdge struct {
// VulnerabilityEdge
Cursor string `gocti:"cursor" json:"cursor,omitempty"`
Node Vulnerability `gocti:"node" json:"node,omitempty"`
}
VulnerabilityEdge represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (VulnerabilityEdge) MarshalJSON ¶
func (v VulnerabilityEdge) MarshalJSON() ([]byte, error)
type WindowsRegistryKey ¶
type WindowsRegistryKey struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// WindowsRegistryKey
AttributeKey string `gocti:"attribute_key" json:"attribute_key,omitempty"`
ModifiedTime *time.Time `gocti:"modified_time" json:"modified_time,omitempty"`
NumberOfSubkeys int `gocti:"number_of_subkeys" json:"number_of_subkeys,omitempty"`
}
WindowsRegistryKey represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (WindowsRegistryKey) MarshalJSON ¶
func (w WindowsRegistryKey) MarshalJSON() ([]byte, error)
type WindowsRegistryKeyAddInput ¶
type WindowsRegistryKeyAddInput struct {
// WindowsRegistryKeyAddInput
AttributeKey string `gocti:"attribute_key" json:"attribute_key,omitempty"`
ModifiedTime *time.Time `gocti:"modified_time" json:"modified_time,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
NumberOfSubkeys int `gocti:"number_of_subkeys" json:"number_of_subkeys,omitempty"`
}
WindowsRegistryKeyAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (WindowsRegistryKeyAddInput) MarshalJSON ¶
func (w WindowsRegistryKeyAddInput) MarshalJSON() ([]byte, error)
type WindowsRegistryValueType ¶
type WindowsRegistryValueType struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// WindowsRegistryValueType
Name string `gocti:"name" json:"name,omitempty"`
Data string `gocti:"data" json:"data,omitempty"`
DataType string `gocti:"data_type" json:"data_type,omitempty"`
}
WindowsRegistryValueType represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (WindowsRegistryValueType) MarshalJSON ¶
func (w WindowsRegistryValueType) MarshalJSON() ([]byte, error)
type WindowsRegistryValueTypeAddInput ¶
type WindowsRegistryValueTypeAddInput struct {
// WindowsRegistryValueTypeAddInput
Name string `gocti:"name" json:"name,omitempty"`
Data string `gocti:"data" json:"data,omitempty"`
DataType string `gocti:"data_type" json:"data_type,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
WindowsRegistryValueTypeAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (WindowsRegistryValueTypeAddInput) MarshalJSON ¶
func (w WindowsRegistryValueTypeAddInput) MarshalJSON() ([]byte, error)
type Work ¶
type Work struct {
// Work
ID string `gocti:"id" json:"id,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
User Creator `gocti:"user" json:"user,omitempty"`
Connector Connector `gocti:"connector" json:"connector,omitempty"`
Timestamp *time.Time `gocti:"timestamp" json:"timestamp,omitempty"`
Status State `gocti:"status" json:"status,omitempty"`
EventSourceID string `gocti:"event_source_id" json:"event_source_id,omitempty"`
ReceivedTime *time.Time `gocti:"received_time" json:"received_time,omitempty"`
ProcessedTime *time.Time `gocti:"processed_time" json:"processed_time,omitempty"`
CompletedTime *time.Time `gocti:"completed_time" json:"completed_time,omitempty"`
CompletedNumber int `gocti:"completed_number" json:"completed_number,omitempty"`
Messages []WorkMessage `gocti:"messages" json:"messages,omitempty"`
Errors []WorkMessage `gocti:"errors" json:"errors,omitempty"`
Tracking WorkTracking `gocti:"tracking" json:"tracking,omitempty"`
}
Work represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (Work) MarshalJSON ¶
type WorkMessage ¶
type WorkMessage struct {
// WorkMessage
Timestamp *time.Time `gocti:"timestamp" json:"timestamp,omitempty"`
Message string `gocti:"message" json:"message,omitempty"`
Sequence int `gocti:"sequence" json:"sequence,omitempty"`
Source string `gocti:"source" json:"source,omitempty"`
}
WorkMessage represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (WorkMessage) MarshalJSON ¶
func (w WorkMessage) MarshalJSON() ([]byte, error)
type WorkTracking ¶
type WorkTracking struct {
// WorkTracking
ImportExpectedNumber int `gocti:"import_expected_number" json:"import_expected_number,omitempty"`
ImportLastProcessed *time.Time `gocti:"import_last_processed" json:"import_last_processed,omitempty"`
ImportProcessedNumber int `gocti:"import_processed_number" json:"import_processed_number,omitempty"`
}
WorkTracking represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type).
func (WorkTracking) MarshalJSON ¶
func (w WorkTracking) MarshalJSON() ([]byte, error)
type Workspace ¶
type Workspace struct {
// InternalObject
ID string `gocti:"id" json:"id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
// BasicObject
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// Workspace
Type string `gocti:"type" json:"type,omitempty"`
Name string `gocti:"name" json:"name,omitempty"`
Description string `gocti:"description" json:"description,omitempty"`
Owner Creator `gocti:"owner" json:"owner,omitempty"`
Tags []string `gocti:"tags" json:"tags,omitempty"`
Manifest string `gocti:"manifest" json:"manifest,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
EditContext []EditUserContext `gocti:"editContext" json:"editContext,omitempty"`
InvestigatedEntitiesIDs []string `gocti:"investigated_entities_ids" json:"investigated_entities_ids,omitempty"`
Objects StixObjectOrStixRelationshipRefConnection `gocti:"objects" json:"objects,omitempty"`
GraphData string `gocti:"graph_data" json:"graph_data,omitempty"`
AuthorizedMembers []MemberAccess `gocti:"authorizedMembers" json:"authorizedMembers,omitempty"`
CurrentUserAccessRight string `gocti:"currentUserAccessRight" json:"currentUserAccessRight,omitempty"`
ToStixReportBundle string `gocti:"toStixReportBundle" json:"toStixReportBundle,omitempty"`
ToConfigurationExport string `gocti:"toConfigurationExport" json:"toConfigurationExport,omitempty"`
ToWidgetExport string `gocti:"toWidgetExport" json:"toWidgetExport,omitempty"`
}
Workspace represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (Workspace) MarshalJSON ¶
type X509Certificate ¶
type X509Certificate struct {
// BasicObject
ID string `gocti:"id" json:"id,omitempty"`
StandardID string `gocti:"standard_id" json:"standard_id,omitempty"`
EntityType string `gocti:"entity_type" json:"entity_type,omitempty"`
ParentTypes []string `gocti:"parent_types" json:"parent_types,omitempty"`
// StixObject
SpecVersion string `gocti:"spec_version" json:"spec_version,omitempty"`
CreatedAt *time.Time `gocti:"created_at" json:"created_at,omitempty"`
UpdatedAt *time.Time `gocti:"updated_at" json:"updated_at,omitempty"`
Creators []Creator `gocti:"creators" json:"creators,omitempty"`
// StixCoreObject
CreatedBy Identity `gocti:"createdBy" json:"createdBy,omitempty"`
ObjectMarking []MarkingDefinition `gocti:"objectMarking" json:"objectMarking,omitempty"`
ObjectOrganization []Organization `gocti:"objectOrganization" json:"objectOrganization,omitempty"`
ObjectLabel []Label `gocti:"objectLabel" json:"objectLabel,omitempty"`
ExternalReferences ExternalReferenceConnection `gocti:"externalReferences" json:"externalReferences,omitempty"`
ImportFiles FileConnection `gocti:"importFiles" json:"importFiles,omitempty"`
// StixCyberObservable
XOpenctiScore int `gocti:"x_opencti_score" json:"x_opencti_score,omitempty"`
XOpenctiDescription string `gocti:"x_opencti_description" json:"x_opencti_description,omitempty"`
ObservableValue string `gocti:"observable_value" json:"observable_value,omitempty"`
Indicators IndicatorConnection `gocti:"indicators" json:"indicators,omitempty"`
// HashedObservable
Hashes []Hash `gocti:"hashes" json:"hashes,omitempty"`
// X509Certificate
IsSelfSigned bool `gocti:"is_self_signed" json:"is_self_signed,omitempty"`
Version string `gocti:"version" json:"version,omitempty"`
SerialNumber string `gocti:"serial_number" json:"serial_number,omitempty"`
SignatureAlgorithm string `gocti:"signature_algorithm" json:"signature_algorithm,omitempty"`
Issuer string `gocti:"issuer" json:"issuer,omitempty"`
Subject string `gocti:"subject" json:"subject,omitempty"`
SubjectPublicKeyAlgorithm string `gocti:"subject_public_key_algorithm" json:"subject_public_key_algorithm,omitempty"`
SubjectPublicKeyModulus string `gocti:"subject_public_key_modulus" json:"subject_public_key_modulus,omitempty"`
SubjectPublicKeyExponent int `gocti:"subject_public_key_exponent" json:"subject_public_key_exponent,omitempty"`
ValidityNotBefore *time.Time `gocti:"validity_not_before" json:"validity_not_before,omitempty"`
ValidityNotAfter *time.Time `gocti:"validity_not_after" json:"validity_not_after,omitempty"`
BasicConstraints string `gocti:"basic_constraints" json:"basic_constraints,omitempty"`
NameConstraints string `gocti:"name_constraints" json:"name_constraints,omitempty"`
PolicyConstraints string `gocti:"policy_constraints" json:"policy_constraints,omitempty"`
KeyUsage string `gocti:"key_usage" json:"key_usage,omitempty"`
ExtendedKeyUsage string `gocti:"extended_key_usage" json:"extended_key_usage,omitempty"`
SubjectKeyIdentifier string `gocti:"subject_key_identifier" json:"subject_key_identifier,omitempty"`
AuthorityKeyIdentifier string `gocti:"authority_key_identifier" json:"authority_key_identifier,omitempty"`
SubjectAlternativeName string `gocti:"subject_alternative_name" json:"subject_alternative_name,omitempty"`
IssuerAlternativeName string `gocti:"issuer_alternative_name" json:"issuer_alternative_name,omitempty"`
SubjectDirectoryAttributes string `gocti:"subject_directory_attributes" json:"subject_directory_attributes,omitempty"`
CrlDistributionPoints string `gocti:"crl_distribution_points" json:"crl_distribution_points,omitempty"`
InhibitAnyPolicy string `gocti:"inhibit_any_policy" json:"inhibit_any_policy,omitempty"`
PrivateKeyUsagePeriodNotBefore *time.Time `gocti:"private_key_usage_period_not_before" json:"private_key_usage_period_not_before,omitempty"`
PrivateKeyUsagePeriodNotAfter *time.Time `gocti:"private_key_usage_period_not_after" json:"private_key_usage_period_not_after,omitempty"`
CertificatePolicies string `gocti:"certificate_policies" json:"certificate_policies,omitempty"`
PolicyMappings string `gocti:"policy_mappings" json:"policy_mappings,omitempty"`
}
X509Certificate represents a GraphQL OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (X509Certificate) MarshalJSON ¶
func (x X509Certificate) MarshalJSON() ([]byte, error)
type X509CertificateAddInput ¶
type X509CertificateAddInput struct {
// X509CertificateAddInput
Hashes []HashInput `gocti:"hashes" json:"hashes,omitempty"`
IsSelfSigned bool `gocti:"is_self_signed" json:"is_self_signed,omitempty"`
Version string `gocti:"version" json:"version,omitempty"`
SerialNumber string `gocti:"serial_number" json:"serial_number,omitempty"`
SignatureAlgorithm string `gocti:"signature_algorithm" json:"signature_algorithm,omitempty"`
Issuer string `gocti:"issuer" json:"issuer,omitempty"`
Subject string `gocti:"subject" json:"subject,omitempty"`
SubjectPublicKeyAlgorithm string `gocti:"subject_public_key_algorithm" json:"subject_public_key_algorithm,omitempty"`
SubjectPublicKeyModulus string `gocti:"subject_public_key_modulus" json:"subject_public_key_modulus,omitempty"`
SubjectPublicKeyExponent int `gocti:"subject_public_key_exponent" json:"subject_public_key_exponent,omitempty"`
ValidityNotBefore *time.Time `gocti:"validity_not_before" json:"validity_not_before,omitempty"`
ValidityNotAfter *time.Time `gocti:"validity_not_after" json:"validity_not_after,omitempty"`
BasicConstraints string `gocti:"basic_constraints" json:"basic_constraints,omitempty"`
NameConstraints string `gocti:"name_constraints" json:"name_constraints,omitempty"`
PolicyConstraints string `gocti:"policy_constraints" json:"policy_constraints,omitempty"`
KeyUsage string `gocti:"key_usage" json:"key_usage,omitempty"`
ExtendedKeyUsage string `gocti:"extended_key_usage" json:"extended_key_usage,omitempty"`
SubjectKeyIdentifier string `gocti:"subject_key_identifier" json:"subject_key_identifier,omitempty"`
AuthorityKeyIdentifier string `gocti:"authority_key_identifier" json:"authority_key_identifier,omitempty"`
SubjectAlternativeName string `gocti:"subject_alternative_name" json:"subject_alternative_name,omitempty"`
IssuerAlternativeName string `gocti:"issuer_alternative_name" json:"issuer_alternative_name,omitempty"`
SubjectDirectoryAttributes string `gocti:"subject_directory_attributes" json:"subject_directory_attributes,omitempty"`
CrlDistributionPoints string `gocti:"crl_distribution_points" json:"crl_distribution_points,omitempty"`
InhibitAnyPolicy string `gocti:"inhibit_any_policy" json:"inhibit_any_policy,omitempty"`
PrivateKeyUsagePeriodNotBefore *time.Time `gocti:"private_key_usage_period_not_before" json:"private_key_usage_period_not_before,omitempty"`
PrivateKeyUsagePeriodNotAfter *time.Time `gocti:"private_key_usage_period_not_after" json:"private_key_usage_period_not_after,omitempty"`
CertificatePolicies string `gocti:"certificate_policies" json:"certificate_policies,omitempty"`
PolicyMappings string `gocti:"policy_mappings" json:"policy_mappings,omitempty"`
File []byte `gocti:"file" json:"file,omitempty"`
}
X509CertificateAddInput represents a GraphQL INPUT_OBJECT Some fields from the OpenCTI schema may be missing (See the examples for ways to expand an existing type)
func (X509CertificateAddInput) MarshalJSON ¶
func (x X509CertificateAddInput) MarshalJSON() ([]byte, error)
Source Files
Click to show internal directories.
Click to hide internal directories.