Class: Aws::Detective::Types::TTPsObservedDetail

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-detective/types.rb

Overview

Details tactics, techniques, and procedures (TTPs) used in a potential security event. Tactics are based on [MITRE ATT&CK Matrix for Enterprise].

[1]: attack.mitre.org/matrices/enterprise/

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#api_failure_count ⇒ Integer

The total number of failed API requests.

Returns:

  • (Integer) 


1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
 
# File 'lib/aws-sdk-detective/types.rb', line 1712

class TTPsObservedDetail < Struct.new(
  :tactic,
  :technique,
  :procedure,
  :ip_address,
  :api_name,
  :api_success_count,
  :api_failure_count)
  SENSITIVE = []
  include Aws::Structure
end

#api_name ⇒ String

The name of the API where the tactics, techniques, and procedure (TTP) was observed.

Returns:

  • (String) 


1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
 
# File 'lib/aws-sdk-detective/types.rb', line 1712

class TTPsObservedDetail < Struct.new(
  :tactic,
  :technique,
  :procedure,
  :ip_address,
  :api_name,
  :api_success_count,
  :api_failure_count)
  SENSITIVE = []
  include Aws::Structure
end

#api_success_count ⇒ Integer

The total number of successful API requests.

Returns:

  • (Integer) 


1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
 
# File 'lib/aws-sdk-detective/types.rb', line 1712

class TTPsObservedDetail < Struct.new(
  :tactic,
  :technique,
  :procedure,
  :ip_address,
  :api_name,
  :api_success_count,
  :api_failure_count)
  SENSITIVE = []
  include Aws::Structure
end

#ip_address ⇒ String

The IP address where the tactics, techniques, and procedure (TTP) was observed.

Returns:

  • (String) 


1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
 
# File 'lib/aws-sdk-detective/types.rb', line 1712

class TTPsObservedDetail < Struct.new(
  :tactic,
  :technique,
  :procedure,
  :ip_address,
  :api_name,
  :api_success_count,
  :api_failure_count)
  SENSITIVE = []
  include Aws::Structure
end

#procedure ⇒ String

The procedure used, identified by the investigation.

Returns:

  • (String) 


1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
 
# File 'lib/aws-sdk-detective/types.rb', line 1712

class TTPsObservedDetail < Struct.new(
  :tactic,
  :technique,
  :procedure,
  :ip_address,
  :api_name,
  :api_success_count,
  :api_failure_count)
  SENSITIVE = []
  include Aws::Structure
end

#tactic ⇒ String

The tactic used, identified by the investigation.

Returns:

  • (String) 


1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
 
# File 'lib/aws-sdk-detective/types.rb', line 1712

class TTPsObservedDetail < Struct.new(
  :tactic,
  :technique,
  :procedure,
  :ip_address,
  :api_name,
  :api_success_count,
  :api_failure_count)
  SENSITIVE = []
  include Aws::Structure
end

#technique ⇒ String

The technique used, identified by the investigation.

Returns:

  • (String) 


1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
 
# File 'lib/aws-sdk-detective/types.rb', line 1712

class TTPsObservedDetail < Struct.new(
  :tactic,
  :technique,
  :procedure,
  :ip_address,
  :api_name,
  :api_success_count,
  :api_failure_count)
  SENSITIVE = []
  include Aws::Structure
end