View a markdown version of this page

InvestigationIndicator - Amazon GuardDuty

InvestigationIndicator

Contains a threat indicator, such as an IP address, a domain, or a file hash.

Contents

value

The value of the indicator.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 1024.

Required: Yes

type

The type of the indicator. Possible values are IP, DOMAIN, and FILE.

Type: String

Valid Values: IP | DOMAIN | FILE

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: