Skip to content

ThreatIntelIndicator

Source code in docs_src/capo_securityhub/types/threat_intel_indicator.py 
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
class ThreatIntelIndicator(TypedDict, closed=True):
    type: NotRequired[
        "capo_securityhub.types.threat_intel_indicator_type.ThreatIntelIndicatorType"
    ]
    """<p>The type of threat intelligence indicator.</p>"""
    value: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
    """<p>The value of a threat intelligence indicator.</p> <p>Length Constraints: Minimum of 1 length. Maximum of 512 length.</p>"""
    category: NotRequired[
        "capo_securityhub.types.threat_intel_indicator_category.ThreatIntelIndicatorCategory"
    ]
    """<p>The category of a threat intelligence indicator.</p>"""
    last_observed_at: NotRequired[
        "capo_securityhub.types.non_empty_string.NonEmptyString"
    ]
    """<p>Indicates when the most recent instance of a threat intelligence indicator was observed.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps">Timestamps</a>.</p>"""
    source: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
    """<p>The source of the threat intelligence indicator.</p> <p>Length Constraints: Minimum of 1 length. Maximum of 64 length.</p>"""
    source_url: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
    """<p>The URL to the page or site where you can get more information about the threat intelligence indicator.</p>"""

category instance-attribute 

category: NotRequired[ThreatIntelIndicatorCategory]

The category of a threat intelligence indicator.

last_observed_at instance-attribute 

last_observed_at: NotRequired[NonEmptyString]

Indicates when the most recent instance of a threat intelligence indicator was observed.

For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

source instance-attribute 

source: NotRequired[NonEmptyString]

The source of the threat intelligence indicator.

Length Constraints: Minimum of 1 length. Maximum of 64 length.

source_url instance-attribute 

source_url: NotRequired[NonEmptyString]

The URL to the page or site where you can get more information about the threat intelligence indicator.

type instance-attribute 

type: NotRequired[ThreatIntelIndicatorType]

The type of threat intelligence indicator.

value instance-attribute 

value: NotRequired[NonEmptyString]

The value of a threat intelligence indicator.

Length Constraints: Minimum of 1 length. Maximum of 512 length.