Class: Aws::Detective::Types::Indicator

Inherits:

Struct

• Object
• Struct
• Aws::Detective::Types::Indicator

Includes:

Structure

Defined in:

lib/aws-sdk-detective/types.rb

Overview

Detective investigations triages indicators of compromises such as a finding and surfaces only the most critical and suspicious issues, so you can focus on high-level investigations. An ‘Indicator` lets you determine if an Amazon Web Services resource is involved in unusual activity that could indicate malicious behavior and its impact.

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #indicator_detail ⇒ Types::IndicatorDetail

  Details about the indicators of compromise that are used to determine if a resource is involved in a security incident.

• #indicator_type ⇒ String

  The type of indicator.

Instance Attribute Details

#indicator_detail ⇒ Types::IndicatorDetail

Details about the indicators of compromise that are used to determine if a resource is involved in a security incident. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident.

Returns:

• (Types::IndicatorDetail)

# File 'lib/aws-sdk-detective/types.rb', line 716

class Indicator < Struct.new(
  :indicator_type,
  :indicator_detail)
  SENSITIVE = []
  include Aws::Structure
end

#indicator_type ⇒ String

The type of indicator.

Returns:

• (String)

# File 'lib/aws-sdk-detective/types.rb', line 716

class Indicator < Struct.new(
  :indicator_type,
  :indicator_detail)
  SENSITIVE = []
  include Aws::Structure
end