Skip to content

Indicator

Source code in docs_src/capo_guardduty/types/indicator.py 
13
14
15
16
17
18
19
class Indicator(TypedDict, closed=True):
    key: NotRequired["capo_guardduty.types.indicator_type.IndicatorType"]
    """<p>Specific indicator keys observed in the attack sequence. For description of the valid values for key, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-summary.html#guardduty-extended-threat-detection-attack-sequence-finding-details">Attack sequence finding details</a> in the <i>Amazon GuardDuty User Guide</i>.</p>"""
    values: NotRequired["capo_guardduty.types.indicator_values.IndicatorValues"]
    """<p>Values associated with each indicator key. For example, if the indicator key is <code>SUSPICIOUS_NETWORK</code>, then the value will be the name of the network. If the indicator key is <code>ATTACK_TACTIC</code>, then the value will be one of the MITRE tactics. </p>"""
    title: NotRequired["capo_guardduty.types.indicator_title.IndicatorTitle"]
    """<p>Title describing the indicator.</p>"""

key instance-attribute 

key: NotRequired[IndicatorType]

Specific indicator keys observed in the attack sequence. For description of the valid values for key, see Attack sequence finding details in the Amazon GuardDuty User Guide.

title instance-attribute 

title: NotRequired[IndicatorTitle]

Title describing the indicator.

values instance-attribute 

values: NotRequired[IndicatorValues]

Values associated with each indicator key. For example, if the indicator key is SUSPICIOUS_NETWORK, then the value will be the name of the network. If the indicator key is ATTACK_TACTIC, then the value will be one of the MITRE tactics.