securityhub/aws.sdk.kotlin.services.securityhub.model/Signal/Builder

Builder

Properties

var actorIds: List<String>?

The IDs of the threat actors involved in the signal.

var count: Int?

The number of times this signal was observed.

var createdAt: Long?

The timestamp when the first finding or activity related to this signal was observed.

var endpointIds: List<String>?

Information about the endpoint IDs associated with this signal.

var firstSeenAt: Long?

The timestamp when the first finding or activity related to this signal was observed.

var id: String?

The identifier of the signal.

var lastSeenAt: Long?

The timestamp when the last finding or activity related to this signal was observed.

var name: String?

The name of the GuardDuty signal. For example, when signal type is FINDING, the signal name is the name of the finding.

var productArn: String?

The Amazon Resource Name (ARN) of the product that generated the signal.

var resourceIds: List<String>?

The ARN or ID of the Amazon Web Services resource associated with the signal.

var severity: Double?

The severity associated with the signal. For more information about severity, see Severity levels for GuardDuty findings in the Amazon GuardDuty User Guide.

signalIndicators

var signalIndicators: List<Indicator>?

Contains information about the indicators associated with the signals in this attack sequence finding. The values for SignalIndicators are a subset of the values for SequenceIndicators, but the values for these fields don't always match 1:1.

var title: String?

The description of the GuardDuty finding.

var type: String?

The type of the signal used to identify an attack sequence.

var updatedAt: Long?

The timestamp when this signal was last observed.