Class: Aws::SecurityHub::Types::NetworkEndpoint

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb

Overview

Contains information about network endpoints involved in an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you must have GuardDuty enabled. For more information, see GuardDuty Extended Threat Detection in the Amazon GuardDuty User Guide.

This field can provide information about the network endpoints associated with the resource in the attack sequence finding, or about a specific network endpoint used for the attack.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#autonomous_system ⇒ Types::NetworkAutonomousSystem

The Autonomous System Number (ASN) of the network endpoint.

Returns:



27735
27736
27737
27738
27739
27740
27741
27742
27743
27744
27745
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 27735

class NetworkEndpoint < Struct.new(
  :id,
  :ip,
  :domain,
  :port,
  :location,
  :autonomous_system,
  :connection)
  SENSITIVE = []
  include Aws::Structure
end

#connection ⇒ Types::NetworkConnection

Information about the network connection.

Returns:



27735
27736
27737
27738
27739
27740
27741
27742
27743
27744
27745
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 27735

class NetworkEndpoint < Struct.new(
  :id,
  :ip,
  :domain,
  :port,
  :location,
  :autonomous_system,
  :connection)
  SENSITIVE = []
  include Aws::Structure
end

#domain ⇒ String

The domain information for the network endpoint.

Returns:

  • (String) 


27735
27736
27737
27738
27739
27740
27741
27742
27743
27744
27745
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 27735

class NetworkEndpoint < Struct.new(
  :id,
  :ip,
  :domain,
  :port,
  :location,
  :autonomous_system,
  :connection)
  SENSITIVE = []
  include Aws::Structure
end

#id ⇒ String

The identifier of the network endpoint involved in the attack sequence.

Returns:

  • (String) 


27735
27736
27737
27738
27739
27740
27741
27742
27743
27744
27745
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 27735

class NetworkEndpoint < Struct.new(
  :id,
  :ip,
  :domain,
  :port,
  :location,
  :autonomous_system,
  :connection)
  SENSITIVE = []
  include Aws::Structure
end

#ip ⇒ String

The IP address used in the network endpoint.

Returns:

  • (String) 


27735
27736
27737
27738
27739
27740
27741
27742
27743
27744
27745
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 27735

class NetworkEndpoint < Struct.new(
  :id,
  :ip,
  :domain,
  :port,
  :location,
  :autonomous_system,
  :connection)
  SENSITIVE = []
  include Aws::Structure
end

#location ⇒ Types::NetworkGeoLocation

Information about the location of the network endpoint.

Returns:



27735
27736
27737
27738
27739
27740
27741
27742
27743
27744
27745
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 27735

class NetworkEndpoint < Struct.new(
  :id,
  :ip,
  :domain,
  :port,
  :location,
  :autonomous_system,
  :connection)
  SENSITIVE = []
  include Aws::Structure
end

#port ⇒ Integer

The port number associated with the network endpoint.

Returns:

  • (Integer) 


27735
27736
27737
27738
27739
27740
27741
27742
27743
27744
27745
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 27735

class NetworkEndpoint < Struct.new(
  :id,
  :ip,
  :domain,
  :port,
  :location,
  :autonomous_system,
  :connection)
  SENSITIVE = []
  include Aws::Structure
end