Indicator
¶
Source code in docs_src/capo_securityhub/types/indicator.py
key
instance-attribute
¶
key: NotRequired[NonEmptyString]
The name of the indicator that’s present in the attack sequence finding.
values
instance-attribute
¶
values: NotRequired[NonEmptyStringList]
Values associated with each indicator key. For example, if the indicator key is SUSPICIOUS_NETWORK, then the value will be the name of the network. If the indicator key is ATTACK_TACTIC, then the value will be one of the MITRE tactics.