GetCaseResponse ¶

class GetCaseResponse(TypedDict, closed=True):
    title: NotRequired["capo_security_ir.types.case_title.CaseTitle"]
    """<p>Response element for GetCase that provides the case title.</p>"""
    case_arn: NotRequired["capo_security_ir.types.case_arn.CaseArn"]
    """<p>Response element for GetCase that provides the case ARN</p>"""
    description: NotRequired["capo_security_ir.types.case_description.CaseDescription"]
    """<p>Response element for GetCase that provides contents of the case description.</p>"""
    case_status: NotRequired["capo_security_ir.types.case_status.CaseStatus"]
    """<p>Response element for GetCase that provides the case status. Options for statuses include <code>Submitted | Detection and Analysis | Eradication, Containment and Recovery | Post-Incident Activities | Closed </code> </p>"""
    engagement_type: NotRequired[
        "capo_security_ir.types.engagement_type.EngagementType"
    ]
    """<p>Response element for GetCase that provides the engagement type. Options for engagement type include <code>Active Security Event | Investigations</code> </p>"""
    reported_incident_start_date: NotRequired["datetime.datetime"]
    """<p>Response element for GetCase that provides the customer provided incident start date.</p>"""
    actual_incident_start_date: NotRequired["datetime.datetime"]
    """<p>Response element for GetCase that provides the actual incident start date as identified by data analysis during the investigation. </p>"""
    impacted_aws_regions: NotRequired[
        "capo_security_ir.types.impacted_aws_region_list.ImpactedAwsRegionList"
    ]
    """<p>Response element for GetCase that provides the impacted regions.</p>"""
    threat_actor_ip_addresses: NotRequired[
        "capo_security_ir.types.threat_actor_ip_list.ThreatActorIpList"
    ]
    """<p>Response element for GetCase that provides a list of suspicious IP addresses associated with unauthorized activity. </p>"""
    pending_action: NotRequired["capo_security_ir.types.pending_action.PendingAction"]
    """<p>Response element for GetCase that identifies the case is waiting on customer input.</p>"""
    impacted_accounts: NotRequired[
        "capo_security_ir.types.impacted_accounts.ImpactedAccounts"
    ]
    """<p>Response element for GetCase that provides a list of impacted accounts.</p>"""
    watchers: NotRequired["capo_security_ir.types.watchers.Watchers"]
    """<p>Response element for GetCase that provides a list of Watchers added to the case.</p>"""
    created_date: NotRequired["datetime.datetime"]
    """<p>Response element for GetCase that provides the date the case was created.</p>"""
    last_updated_date: NotRequired["datetime.datetime"]
    """<p>Response element for GetCase that provides the date a case was last modified.</p>"""
    closure_code: NotRequired["capo_security_ir.types.closure_code.ClosureCode"]
    """<p>Response element for GetCase that provides the summary code for why a case was closed.</p>"""
    resolver_type: NotRequired["capo_security_ir.types.resolver_type.ResolverType"]
    """<p>Response element for GetCase that provides the current resolver types.</p>"""
    impacted_services: NotRequired[
        "capo_security_ir.types.impacted_services_list.ImpactedServicesList"
    ]
    """<p>Response element for GetCase that provides a list of impacted services.</p>"""
    case_attachments: NotRequired[
        "capo_security_ir.types.case_attachments_list.CaseAttachmentsList"
    ]
    """<p>Response element for GetCase that provides a list of current case attachments.</p>"""
    closed_date: NotRequired["datetime.datetime"]
    """<p>Response element for GetCase that provides the date a specified case was closed.</p>"""
    case_metadata: NotRequired["capo_security_ir.types.case_metadata.CaseMetadata"]
    """<p>Case response metadata</p>"""