Guardduty  >  Structures  >  Actor

Actor

Structure Class

Actor dataclass

Information about the actors involved in an attack sequence.

Attributes

id class-attribute instance-attribute

id: str | None = None

ID of the threat actor.

process class-attribute instance-attribute

process: ActorProcess | None = None

Contains information about the process associated with the threat actor. This includes details such as process name, path, execution time, and unique identifiers that help track the actor's activities within the system.

session class-attribute instance-attribute

session: Session | None = None

Contains information about the user session where the activity initiated.

user class-attribute instance-attribute

user: User | None = None

Contains information about the user credentials used by the threat actor.