Class: Aws::GuardDuty::Types::Finding

Inherits:

Struct

• Object
• Struct
• Aws::GuardDuty::Types::Finding

Defined in:

gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb

Overview

Contains information about the finding that is generated when abnormal or suspicious activity is detected.

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #account_id ⇒ String

  The ID of the account in which the finding was generated.

• #arn ⇒ String

  The ARN of the finding.

• #associated_attack_sequence_arn ⇒ String

  Amazon Resource Name (ARN) associated with the attack sequence finding.

• #confidence ⇒ Float

  The confidence score for the finding.

• #created_at ⇒ String

  The time and date when the finding was created.

• #custom_detection_rule_name ⇒ String

  The name of the custom detection rule that generated this finding.

• #description ⇒ String

  The description of the finding.

• #id ⇒ String

  The ID of the finding.

• #partition ⇒ String

  The partition associated with the finding.

• #region ⇒ String

  The Region where the finding was generated.

• #resource ⇒ Types::Resource

  Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.

• #schema_version ⇒ String

  The version of the schema used for the finding.

• #service ⇒ Types::Service

  Contains additional information about the generated finding.

• #severity ⇒ Float

  The severity of the finding.

• #title ⇒ String

  The title of the finding.

• #type ⇒ String

  The type of finding.

• #updated_at ⇒ String

  The time and date when the finding was last updated.

Instance Attribute Details

#account_id ⇒ String

The ID of the account in which the finding was generated.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#arn ⇒ String

The ARN of the finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#associated_attack_sequence_arn ⇒ String

Amazon Resource Name (ARN) associated with the attack sequence finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#confidence ⇒ Float

The confidence score for the finding.

Returns:

• (Float)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#created_at ⇒ String

The time and date when the finding was created.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#custom_detection_rule_name ⇒ String

The name of the custom detection rule that generated this finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#description ⇒ String

The description of the finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#id ⇒ String

The ID of the finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#partition ⇒ String

The partition associated with the finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#region ⇒ String

The Region where the finding was generated. For findings generated from Global Service Events, the Region value in the finding might differ from the Region where GuardDuty identifies the potential threat. For more information, see How GuardDuty handles Amazon Web Services CloudTrail global events in the Amazon GuardDuty User Guide.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#resource ⇒ Types::Resource

Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.

Returns:

• (Types::Resource)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#schema_version ⇒ String

The version of the schema used for the finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#service ⇒ Types::Service

Contains additional information about the generated finding.

Returns:

• (Types::Service)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#severity ⇒ Float

The severity of the finding.

Returns:

• (Float)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#title ⇒ String

The title of the finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#type ⇒ String

The type of finding.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end

#updated_at ⇒ String

The time and date when the finding was last updated.

Returns:

• (String)

# File 'gems/aws-sdk-guardduty/lib/aws-sdk-guardduty/types.rb', line 6021

class Finding < Struct.new(
  :account_id,
  :arn,
  :confidence,
  :created_at,
  :description,
  :id,
  :partition,
  :region,
  :resource,
  :schema_version,
  :service,
  :severity,
  :title,
  :type,
  :updated_at,
  :associated_attack_sequence_arn,
  :custom_detection_rule_name)
  SENSITIVE = []
  include Aws::Structure
end