API Reference
Class
PkIndicator
Purple Knight indicator metadata entry.
Inheritance
- Object
- PkIndicator
Constructors
public PkIndicator() #Inherited Methods
Properties
public String UUID { get; set; } #Unique UUID supplied by vendor.
public String CategoryName { get; set; } #Category display name.
public String Description { get; set; } #Indicator description.
public List<String> Types { get; set; } #Indicator types (e.g., IoE).
public Boolean Selected { get; set; } #True when selected/enabled by default.
public Int32 Weight { get; set; } #Vendor-assigned weight.
public String Severity { get; set; } #Severity string.
public String Schedule { get; set; } #Recommended schedule (e.g., 1w).
public String LikelihoodOfCompromise { get; set; } #Likelihood of compromise note (HTML).
public String ResultMessage { get; set; } #Result message template.
public String Remediation { get; set; } #Remediation guidance snippet.
public List<String> DataSources { get; set; } #Data sources this indicator relies on (e.g., AD.LDAP, EventLog).
public List<PkField> OutputFields { get; set; } #Output fields produced by the indicator.
public List<PkFramework> Frameworks { get; set; } #Framework tags associated with this indicator.
public List<PkProduct> Products { get; set; } #Product compatibility list.
public List<PkJsonPackage> JsonPackages { get; set; } #Underlying JSON package references.