IndicatorDetail ¶

class IndicatorDetail(TypedDict, closed=True):
    tt_ps_observed_detail: NotRequired[
        "capo_detective.types.tt_ps_observed_detail.TTPsObservedDetail"
    ]
    """<p>Details about the indicator of compromise.</p>"""
    impossible_travel_detail: NotRequired[
        "capo_detective.types.impossible_travel_detail.ImpossibleTravelDetail"
    ]
    """<p>Identifies unusual and impossible user activity for an account. </p>"""
    flagged_ip_address_detail: NotRequired[
        "capo_detective.types.flagged_ip_address_detail.FlaggedIpAddressDetail"
    ]
    """<p>Suspicious IP addresses that are flagged, which indicates critical or severe threats based on threat intelligence by Detective. This indicator is derived from Amazon Web Services threat intelligence.</p>"""
    new_geolocation_detail: NotRequired[
        "capo_detective.types.new_geolocation_detail.NewGeolocationDetail"
    ]
    """<p>Contains details about the new geographic location.</p>"""
    new_aso_detail: NotRequired["capo_detective.types.new_aso_detail.NewAsoDetail"]
    """<p>Contains details about the new Autonomous System Organization (ASO).</p>"""
    new_user_agent_detail: NotRequired[
        "capo_detective.types.new_user_agent_detail.NewUserAgentDetail"
    ]
    """<p>Contains details about the new user agent.</p>"""
    related_finding_detail: NotRequired[
        "capo_detective.types.related_finding_detail.RelatedFindingDetail"
    ]
    """<p>Contains details about related findings.</p>"""
    related_finding_group_detail: NotRequired[
        "capo_detective.types.related_finding_group_detail.RelatedFindingGroupDetail"
    ]
    """<p>Contains details about related finding groups.</p>"""