Actor (p.awso.0.9.0.doc.awso.guardduty.Awso

Sourcetype nonrec t = {

id : String_.t option;
(*
ID of the threat actor.
*)
user : User.t option;
(*
Contains information about the user credentials used by the threat actor.
*)
session : Session.t option;
(*
Contains information about the user session where the activity initiated.
*)
process : ActorProcess.t option;
(*
Contains information about the process associated with the threat actor. This includes details such as process name, path, execution time, and unique identifiers that help track the actor's activities within the system.
*)

}

Sourceval make : ?id:??? -> ?user:??? -> ?session:??? -> ?process:??? -> unit -> t

val to_value : 
  t ->
  [> `Structure of
       (string
        * [> `String of String_.t
          | `Structure of
            (string
             * [> `Enum of string
               | `String of String_.t
               | `Structure of (string * [> `String of String_.t ]) list
               | `Timestamp of Timestamp.t ])
              list ])
         list ]

Sourceval to_query : t -> Awso.Client.Query.t

Sourceval of_xml : Awso.Xml.t -> t

Sourceval of_string : string -> t

Sourceval of_json : Yojson.Safe.t -> t

Sourceval to_json : t -> Yojson.Safe.t