IndicatorType module-attribute ¶

IndicatorType: TypeAlias = Literal[
    "SUSPICIOUS_USER_AGENT",
    "SUSPICIOUS_NETWORK",
    "MALICIOUS_IP",
    "TOR_IP",
    "ATTACK_TACTIC",
    "HIGH_RISK_API",
    "ATTACK_TECHNIQUE",
    "UNUSUAL_API_FOR_ACCOUNT",
    "UNUSUAL_ASN_FOR_ACCOUNT",
    "UNUSUAL_ASN_FOR_USER",
    "SUSPICIOUS_PROCESS",
    "MALICIOUS_DOMAIN",
    "MALICIOUS_PROCESS",
    "CRYPTOMINING_IP",
    "CRYPTOMINING_DOMAIN",
    "CRYPTOMINING_PROCESS",
    "MALICIOUS_FILE",
    "VULNERABILITY",
    "MALICIOUS_PACKAGE",
    "MISCONFIGURATION",
    "REACHABILITY",
    "SENSITIVE_DATA",
]