firstObservedAt

A timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.

For more information about the validation and formatting of timestamp fields in Security Hub, see Timestamps.