TacticCoverage
Contains information about the findings associated with a MITRE ATT&CK tactic.
Contents
- findingCount
-
The number of findings associated with the tactic.
Type: Integer
Required: No
- findingTypes
-
The finding types associated with the tactic.
Type: Array of strings
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Required: No
- phase
-
The name of the tactic. Possible values are
Reconnaissance,Resource Development,Initial Access,Execution,Persistence,Privilege Escalation,Defense Evasion,Credential Access,Discovery,Lateral Movement,Collection,Command and Control,Exfiltration, andImpact.Type: String
Valid Values:
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | ImpactRequired: No
- techniques
-
The MITRE ATT&CK techniques within the tactic that are associated with findings.
Type: Array of TechniqueCoverage objects
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
