Values.TTPsObservedDetailSourceDetails tactics, techniques, and procedures (TTPs) used in a potential security event. Tactics are based on MITRE ATT&CK Matrix for Enterprise.
type nonrec t = {tactic : Tactic.t option;The tactic used, identified by the investigation.
*)technique : Technique.t option;The technique used, identified by the investigation.
*)procedure : Procedure.t option;The procedure used, identified by the investigation.
*)ipAddress : IpAddress.t option;The IP address where the tactics, techniques, and procedure (TTP) was observed.
*)aPIName : APIName.t option;The name of the API where the tactics, techniques, and procedure (TTP) was observed.
*)aPISuccessCount : APISuccessCount.t option;The total number of successful API requests.
*)aPIFailureCount : APIFailureCount.t option;The total number of failed API requests.
*)}val to_value :
t ->
[> `Structure of
(string * [> `Long of APISuccessCount.t | `String of Tactic.t ]) list ]