Skip to content

Indicator

Source code in docs_src/capo_detective/types/indicator.py 
12
13
14
15
16
17
18
class Indicator(TypedDict, closed=True):
    indicator_type: NotRequired["capo_detective.types.indicator_type.IndicatorType"]
    """<p>The type of indicator. </p>"""
    indicator_detail: NotRequired[
        "capo_detective.types.indicator_detail.IndicatorDetail"
    ]
    """<p>Details about the indicators of compromise that are used to determine if a resource is involved in a security incident. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident.</p>"""

indicator_detail instance-attribute 

indicator_detail: NotRequired[IndicatorDetail]

Details about the indicators of compromise that are used to determine if a resource is involved in a security incident. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident.

indicator_type instance-attribute 

indicator_type: NotRequired[IndicatorType]

The type of indicator.