/AWS1/CL_SAGCREATETHREATOUTPUT¶
Output for the CreateThreat operation.
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_threatid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
The unique identifier of the created threat.
iv_threatjobid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
The unique identifier of the threat model job the threat belongs to.
Optional arguments:¶
iv_title TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
A short title summarizing the threat.
iv_statement TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
The natural-language threat statement.
iv_severity TYPE /AWS1/SAGTHREATSEVERITY /AWS1/SAGTHREATSEVERITY¶
The severity level of the threat.
iv_status TYPE /AWS1/SAGTHREATSTATUS /AWS1/SAGTHREATSTATUS¶
The current status of the threat.
iv_comments TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
Optional customer comment on the threat.
it_stride TYPE /AWS1/CL_SAGSTRIDECATLIST_W=>TT_STRIDECATEGORYLIST TT_STRIDECATEGORYLIST¶
The STRIDE categories applicable to this threat.
iv_threatsource TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
The actor or origin of the threat.
iv_prerequisites TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
The conditions required for the threat to be exploitable.
iv_threataction TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
What the threat source can do.
iv_threatimpact TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
The direct consequence of the threat action.
it_impactedgoal TYPE /AWS1/CL_SAGSTRINGLIST_W=>TT_STRINGLIST TT_STRINGLIST¶
The security goals affected by the threat.
it_impactedassets TYPE /AWS1/CL_SAGSTRINGLIST_W=>TT_STRINGLIST TT_STRINGLIST¶
The specific assets affected by the threat.
io_anchor TYPE REF TO /AWS1/CL_SAGTHREATANCHORSHAPE /AWS1/CL_SAGTHREATANCHORSHAPE¶
The DFD element this threat is anchored to.
it_evidence TYPE /AWS1/CL_SAGTHRTEVIDENCESHAPE=>TT_THREATEVIDENCELIST TT_THREATEVIDENCELIST¶
The source code files supporting the threat.
iv_recommendation TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING¶
The recommended mitigation guidance for this threat.
iv_createdby TYPE /AWS1/SAGTHREATACTOR /AWS1/SAGTHREATACTOR¶
Who created this threat.
iv_updatedby TYPE /AWS1/SAGTHREATACTOR /AWS1/SAGTHREATACTOR¶
Who last updated this threat.
iv_createdat TYPE /AWS1/SAGTIMESTAMP /AWS1/SAGTIMESTAMP¶
The date and time the threat was created, in UTC format.
iv_updatedat TYPE /AWS1/SAGTIMESTAMP /AWS1/SAGTIMESTAMP¶
The date and time the threat was last updated, in UTC format.
Queryable Attributes¶
threatId¶
The unique identifier of the created threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_THREATID() |
Getter for THREATID, with configurable default |
ASK_THREATID() |
Getter for THREATID w/ exceptions if field has no value |
HAS_THREATID() |
Determine if THREATID has a value |
threatJobId¶
The unique identifier of the threat model job the threat belongs to.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_THREATJOBID() |
Getter for THREATJOBID, with configurable default |
ASK_THREATJOBID() |
Getter for THREATJOBID w/ exceptions if field has no value |
HAS_THREATJOBID() |
Determine if THREATJOBID has a value |
title¶
A short title summarizing the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_TITLE() |
Getter for TITLE, with configurable default |
ASK_TITLE() |
Getter for TITLE w/ exceptions if field has no value |
HAS_TITLE() |
Determine if TITLE has a value |
statement¶
The natural-language threat statement.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_STATEMENT() |
Getter for STATEMENT, with configurable default |
ASK_STATEMENT() |
Getter for STATEMENT w/ exceptions if field has no value |
HAS_STATEMENT() |
Determine if STATEMENT has a value |
severity¶
The severity level of the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_SEVERITY() |
Getter for SEVERITY, with configurable default |
ASK_SEVERITY() |
Getter for SEVERITY w/ exceptions if field has no value |
HAS_SEVERITY() |
Determine if SEVERITY has a value |
status¶
The current status of the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_STATUS() |
Getter for STATUS, with configurable default |
ASK_STATUS() |
Getter for STATUS w/ exceptions if field has no value |
HAS_STATUS() |
Determine if STATUS has a value |
comments¶
Optional customer comment on the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_COMMENTS() |
Getter for COMMENTS, with configurable default |
ASK_COMMENTS() |
Getter for COMMENTS w/ exceptions if field has no value |
HAS_COMMENTS() |
Determine if COMMENTS has a value |
stride¶
The STRIDE categories applicable to this threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_STRIDE() |
Getter for STRIDE, with configurable default |
ASK_STRIDE() |
Getter for STRIDE w/ exceptions if field has no value |
HAS_STRIDE() |
Determine if STRIDE has a value |
threatSource¶
The actor or origin of the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_THREATSOURCE() |
Getter for THREATSOURCE, with configurable default |
ASK_THREATSOURCE() |
Getter for THREATSOURCE w/ exceptions if field has no value |
HAS_THREATSOURCE() |
Determine if THREATSOURCE has a value |
prerequisites¶
The conditions required for the threat to be exploitable.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_PREREQUISITES() |
Getter for PREREQUISITES, with configurable default |
ASK_PREREQUISITES() |
Getter for PREREQUISITES w/ exceptions if field has no value |
HAS_PREREQUISITES() |
Determine if PREREQUISITES has a value |
threatAction¶
What the threat source can do.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_THREATACTION() |
Getter for THREATACTION, with configurable default |
ASK_THREATACTION() |
Getter for THREATACTION w/ exceptions if field has no value |
HAS_THREATACTION() |
Determine if THREATACTION has a value |
threatImpact¶
The direct consequence of the threat action.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_THREATIMPACT() |
Getter for THREATIMPACT, with configurable default |
ASK_THREATIMPACT() |
Getter for THREATIMPACT w/ exceptions if field has no value |
HAS_THREATIMPACT() |
Determine if THREATIMPACT has a value |
impactedGoal¶
The security goals affected by the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_IMPACTEDGOAL() |
Getter for IMPACTEDGOAL, with configurable default |
ASK_IMPACTEDGOAL() |
Getter for IMPACTEDGOAL w/ exceptions if field has no value |
HAS_IMPACTEDGOAL() |
Determine if IMPACTEDGOAL has a value |
impactedAssets¶
The specific assets affected by the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_IMPACTEDASSETS() |
Getter for IMPACTEDASSETS, with configurable default |
ASK_IMPACTEDASSETS() |
Getter for IMPACTEDASSETS w/ exceptions if field has no valu |
HAS_IMPACTEDASSETS() |
Determine if IMPACTEDASSETS has a value |
anchor¶
The DFD element this threat is anchored to.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ANCHOR() |
Getter for ANCHOR |
evidence¶
The source code files supporting the threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_EVIDENCE() |
Getter for EVIDENCE, with configurable default |
ASK_EVIDENCE() |
Getter for EVIDENCE w/ exceptions if field has no value |
HAS_EVIDENCE() |
Determine if EVIDENCE has a value |
recommendation¶
The recommended mitigation guidance for this threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_RECOMMENDATION() |
Getter for RECOMMENDATION, with configurable default |
ASK_RECOMMENDATION() |
Getter for RECOMMENDATION w/ exceptions if field has no valu |
HAS_RECOMMENDATION() |
Determine if RECOMMENDATION has a value |
createdBy¶
Who created this threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_CREATEDBY() |
Getter for CREATEDBY, with configurable default |
ASK_CREATEDBY() |
Getter for CREATEDBY w/ exceptions if field has no value |
HAS_CREATEDBY() |
Determine if CREATEDBY has a value |
updatedBy¶
Who last updated this threat.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_UPDATEDBY() |
Getter for UPDATEDBY, with configurable default |
ASK_UPDATEDBY() |
Getter for UPDATEDBY w/ exceptions if field has no value |
HAS_UPDATEDBY() |
Determine if UPDATEDBY has a value |
createdAt¶
The date and time the threat was created, in UTC format.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_CREATEDAT() |
Getter for CREATEDAT, with configurable default |
ASK_CREATEDAT() |
Getter for CREATEDAT w/ exceptions if field has no value |
HAS_CREATEDAT() |
Determine if CREATEDAT has a value |
updatedAt¶
The date and time the threat was last updated, in UTC format.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_UPDATEDAT() |
Getter for UPDATEDAT, with configurable default |
ASK_UPDATEDAT() |
Getter for UPDATEDAT w/ exceptions if field has no value |
HAS_UPDATEDAT() |
Determine if UPDATEDAT has a value |