Guardduty  >  Structures  >  ThreatIntelligenceDetail

ThreatIntelligenceDetail

Structure Class

ThreatIntelligenceDetail dataclass

An instance of a threat intelligence detail that constitutes evidence for the finding.

Attributes

threat_file_sha256 class-attribute instance-attribute

threat_file_sha256: str | None = None

SHA256 of the file that generated the finding.

threat_list_name class-attribute instance-attribute

threat_list_name: str | None = None

The name of the threat intelligence list that triggered the finding.

threat_names class-attribute instance-attribute

threat_names: list[str] | None = None

A list of names of the threats in the threat intelligence list that triggered the finding.