View a markdown version of this page

NetworkActivity - Amazon GuardDuty

NetworkActivity

Contains details about network activity.

Contents

anomaly

Details about how the network activity deviates from normal behavior.

Type: NetworkAnomaly object

Required: No

blocked

Indicates whether the network connection was blocked.

Type: String

Required: No

counts

Counts that describe the network activity, such as the number of requests or connection attempts.

Type: NetworkCounts object

Required: No

direction

The direction of the network connection, such as inbound or outbound.

Type: String

Required: No

dns

DNS details about the network activity.

Type: DnsContext object

Required: No

enrichment

Additional context about the network activity, such as geolocation and threat intelligence information.

Type: Enrichment object

Required: No

method

The method that the network activity used.

Type: String

Required: No

platform

The platform on which the network activity was observed.

Type: String

Required: No

ports

The ports that the network activity involved.

Type: NetworkPorts object

Required: No

protocol

The network protocol of the activity.

Type: String

Required: No

traffic

The amount of data that the network activity transferred.

Type: NetworkTraffic object

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: