Sequence

class Sequence

Contains information about an Amazon GuardDuty Extended Threat Detection attack sequence finding. GuardDuty generates an attack sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you must have GuardDuty enabled. For more information, see GuardDuty Extended Threat Detection in the Amazon GuardDuty User Guide.

Types

Link copied to clipboard
class Builder
Link copied to clipboard
object Companion

Properties

Link copied to clipboard

Provides information about the actors involved in the attack sequence.

Link copied to clipboard

Contains information about the network endpoints that were used in the attack sequence.

Link copied to clipboard

Contains information about the indicators observed in the attack sequence. The values for SignalIndicators are a subset of the values for SequenceIndicators, but the values for these fields don't always match 1:1.

Link copied to clipboard

Contains information about the signals involved in the attack sequence.

Link copied to clipboard
val uid: String?

Unique identifier of the attack sequence.

Functions

Link copied to clipboard
inline fun copy(block: Sequence.Builder.() -> Unit = {}): Sequence
Link copied to clipboard
open operator override fun equals(other: Any?): Boolean
Link copied to clipboard
open override fun hashCode(): Int
Link copied to clipboard
open override fun toString(): String