Module Values.ThreatIntelIndicatorSource

Details about the threat intelligence related to a finding.

Sourcetype nonrec t = {
  1. type_ : ThreatIntelIndicatorType.t option;
    (*

    The type of threat intelligence indicator.

    *)
  2. value : NonEmptyString.t option;
    (*

    The value of a threat intelligence indicator. Length Constraints: Minimum of 1 length. Maximum of 512 length.

    *)
  3. category : ThreatIntelIndicatorCategory.t option;
    (*

    The category of a threat intelligence indicator.

    *)
  4. lastObservedAt : NonEmptyString.t option;
    (*

    Indicates when the most recent instance of a threat intelligence indicator was observed. For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

    *)
  5. source : NonEmptyString.t option;
    (*

    The source of the threat intelligence indicator. Length Constraints: Minimum of 1 length. Maximum of 64 length.

    *)
  6. sourceUrl : NonEmptyString.t option;
    (*

    The URL to the page or site where you can get more information about the threat intelligence indicator.

    *)
}
Sourceval make : ?type_:??? -> ?value:??? -> ?category:??? -> ?lastObservedAt:??? -> ?source:??? -> ?sourceUrl:??? -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Enum of string | `String of NonEmptyString.t ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t