案例事件 - AWS 安全事件應變 使用者指南

本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。

案例事件

AWS 回應者建立的案例

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Created", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T00:00:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "createdBy": "AWS Responder" } }

服務建立的案例

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Created", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T00:00:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "createdBy": "security-ir.amazonaws.com" } }

客戶建立的案例

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Created", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T00:00:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "createdBy": "111122223333" } }

AWS 回應者更新的案例

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Updated", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T01:30:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "updatedBy": "AWS Responder" } }

AWS 客戶更新的案例

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Updated", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T02:15:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "updatedBy": "111122223333" } }

AWS 安全事件應變 服務更新的案例

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Updated", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T03:45:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "updatedBy": "security-ir.amazonaws.com" } }

案例已關閉

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Closed", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-15T14:22:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890" } }