Up – Package index » awso » Library awso.securityhub » Awso_securityhub » Values » NetworkEndpoint

Module `Values.NetworkEndpoint`Source

Contains information about network endpoints involved in an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub CSPM, you must have GuardDuty enabled. For more information, see GuardDuty Extended Threat Detection in the Amazon GuardDuty User Guide. This field can provide information about the network endpoints associated with the resource in the attack sequence finding, or about a specific network endpoint used for the attack.

Sourcetype nonrec t = {

id : NonEmptyString.t option;
(*
The identifier of the network endpoint involved in the attack sequence.
*)
ip : NonEmptyString.t option;
(*
The IP address used in the network endpoint.
*)
domain : NonEmptyString.t option;
(*
The domain information for the network endpoint.
*)
port : Integer.t option;
(*
The port number associated with the network endpoint.
*)
location : NetworkGeoLocation.t option;
(*
Information about the location of the network endpoint.
*)
autonomousSystem : NetworkAutonomousSystem.t option;
(*
The Autonomous System Number (ASN) of the network endpoint.
*)
connection : NetworkConnection.t option;
(*
Information about the network connection.
*)

}

Source

val make : 
  ?id:??? ->
  ?ip:??? ->
  ?domain:??? ->
  ?port:??? ->
  ?location:??? ->
  ?autonomousSystem:??? ->
  ?connection:??? ->
  unit ->
  t

Source

val to_value : 
  t ->
  [> `Structure of
       (string
        * [> `Integer of Integer.t
          | `String of NonEmptyString.t
          | `Structure of
            (string
             * [> `Double of Double.t
               | `Enum of string
               | `Integer of Integer.t
               | `String of NonEmptyString.t ])
              list ])
         list ]

Sourceval to_query : t -> Awso.Client.Query.t

Sourceval of_xml : Awso.Xml.t -> t

Sourceval of_string : string -> t

Sourceval of_json : Yojson.Safe.t -> t

Sourceval to_json : t -> Yojson.Safe.t