| Name | Type | Description | Notes |
|---|---|---|---|
| description | String | What the indicator means | |
| functionId | Long | ID of the function it was found in. Null when the source does not resolve to one. | |
| functionName | String | Name of the function it was found in. Null when the source does not resolve to one. | |
| source | String | Where in the binary it was found, usually a hex address. Null when the agent did not report one. | |
| type | String | Indicator type | |
| value | String | The indicator itself |