RuleSummary
¶
Source code in docs_src/capo_guardduty/types/rule_summary.py
arn
instance-attribute
¶
arn: NotRequired[DetectionRuleArn]
The Amazon Resource Name (ARN) of the rule.
created_at
instance-attribute
¶
created_at: NotRequired[Timestamp]
The timestamp when the rule was created.
data_source
instance-attribute
¶
data_source: NotRequired[DetectionRuleDataSource]
The data source that the rule analyzes.
description
instance-attribute
¶
description: NotRequired[DetectionRuleDescription]
A description of what the rule detects.
language
instance-attribute
¶
language: NotRequired[RuleLanguage]
The language used for the detection logic expression.
schema
instance-attribute
¶
schema: NotRequired[RuleSchema]
The schema version used by the rule definition.
service
instance-attribute
¶
service: NotRequired[DetectionRuleServiceName]
The Amazon Web Services service associated with the rule.
severity
instance-attribute
¶
severity: NotRequired[DetectionRuleSeverity]
The severity level assigned to findings generated by this rule.
tactic
instance-attribute
¶
tactic: NotRequired[MitreTactic]
The MITRE ATT&CK tactic associated with the rule.
technique
instance-attribute
¶
technique: NotRequired[MitreTechnique]
The MITRE ATT&CK technique associated with the rule.