/AWS1/IF_GDY=>GETFINDINGS()¶
About GetFindings¶
Describes Amazon GuardDuty findings specified by finding IDs.
Method Signature¶
IMPORTING¶
Required arguments:¶
iv_detectorid TYPE /AWS1/GDYDETECTORID /AWS1/GDYDETECTORID¶
The ID of the detector that specifies the GuardDuty service whose findings you want to retrieve.
To find the
detectorIdin the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.
it_findingids TYPE /AWS1/CL_GDYFINDINGIDS_W=>TT_FINDINGIDS TT_FINDINGIDS¶
The IDs of the findings that you want to retrieve.
Optional arguments:¶
io_sortcriteria TYPE REF TO /AWS1/CL_GDYSORTCRITERIA /AWS1/CL_GDYSORTCRITERIA¶
Represents the criteria used for sorting findings.
RETURNING¶
oo_output TYPE REF TO /aws1/cl_gdygetfindingsrsp /AWS1/CL_GDYGETFINDINGSRSP¶
Domain /AWS1/RT_ACCOUNT_ID Primitive Type NUMC
Examples¶
Syntax Example¶
This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.
DATA(lo_result) = lo_client->/aws1/if_gdy~getfindings(
io_sortcriteria = new /aws1/cl_gdysortcriteria(
iv_attributename = |string|
iv_orderby = |string|
)
it_findingids = VALUE /aws1/cl_gdyfindingids_w=>tt_findingids(
( new /aws1/cl_gdyfindingids_w( |string| ) )
)
iv_detectorid = |string|
).
This is an example of reading all possible response values
lo_result = lo_result.
IF lo_result IS NOT INITIAL.
LOOP AT lo_result->get_findings( ) into lo_row.
lo_row_1 = lo_row.
IF lo_row_1 IS NOT INITIAL.
lv_string = lo_row_1->get_accountid( ).
lv_string = lo_row_1->get_arn( ).
lv_double = lo_row_1->get_confidence( ).
lv_string = lo_row_1->get_createdat( ).
lv_string = lo_row_1->get_description( ).
lv_string = lo_row_1->get_id( ).
lv_string = lo_row_1->get_partition( ).
lv_string = lo_row_1->get_region( ).
lo_resource = lo_row_1->get_resource( ).
IF lo_resource IS NOT INITIAL.
lo_accesskeydetails = lo_resource->get_accesskeydetails( ).
IF lo_accesskeydetails IS NOT INITIAL.
lv_string = lo_accesskeydetails->get_accesskeyid( ).
lv_string = lo_accesskeydetails->get_principalid( ).
lv_string = lo_accesskeydetails->get_username( ).
lv_string = lo_accesskeydetails->get_usertype( ).
ENDIF.
LOOP AT lo_resource->get_s3bucketdetails( ) into lo_row_2.
lo_row_3 = lo_row_2.
IF lo_row_3 IS NOT INITIAL.
lv_string = lo_row_3->get_arn( ).
lv_string = lo_row_3->get_name( ).
lv_string = lo_row_3->get_type( ).
lv_timestamp = lo_row_3->get_createdat( ).
lo_owner = lo_row_3->get_owner( ).
IF lo_owner IS NOT INITIAL.
lv_string = lo_owner->get_id( ).
ENDIF.
LOOP AT lo_row_3->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
lo_defaultserversideencryp = lo_row_3->get_defaultserversideenc( ).
IF lo_defaultserversideencryp IS NOT INITIAL.
lv_string = lo_defaultserversideencryp->get_encryptiontype( ).
lv_string = lo_defaultserversideencryp->get_kmsmasterkeyarn( ).
ENDIF.
lo_publicaccess = lo_row_3->get_publicaccess( ).
IF lo_publicaccess IS NOT INITIAL.
lo_permissionconfiguration = lo_publicaccess->get_permissionconfiguration( ).
IF lo_permissionconfiguration IS NOT INITIAL.
lo_bucketlevelpermissions = lo_permissionconfiguration->get_bucketlevelpermissions( ).
IF lo_bucketlevelpermissions IS NOT INITIAL.
lo_accesscontrollist = lo_bucketlevelpermissions->get_accesscontrollist( ).
IF lo_accesscontrollist IS NOT INITIAL.
lv_boolean = lo_accesscontrollist->get_allowspublicreadaccess( ).
lv_boolean = lo_accesscontrollist->get_allowspublicwriteaccess( ).
ENDIF.
lo_bucketpolicy = lo_bucketlevelpermissions->get_bucketpolicy( ).
IF lo_bucketpolicy IS NOT INITIAL.
lv_boolean = lo_bucketpolicy->get_allowspublicreadaccess( ).
lv_boolean = lo_bucketpolicy->get_allowspublicwriteaccess( ).
ENDIF.
lo_blockpublicaccess = lo_bucketlevelpermissions->get_blockpublicaccess( ).
IF lo_blockpublicaccess IS NOT INITIAL.
lv_boolean = lo_blockpublicaccess->get_ignorepublicacls( ).
lv_boolean = lo_blockpublicaccess->get_restrictpublicbuckets( ).
lv_boolean = lo_blockpublicaccess->get_blockpublicacls( ).
lv_boolean = lo_blockpublicaccess->get_blockpublicpolicy( ).
ENDIF.
ENDIF.
lo_accountlevelpermissions = lo_permissionconfiguration->get_accountlevelpermissions( ).
IF lo_accountlevelpermissions IS NOT INITIAL.
lo_blockpublicaccess = lo_accountlevelpermissions->get_blockpublicaccess( ).
IF lo_blockpublicaccess IS NOT INITIAL.
lv_boolean = lo_blockpublicaccess->get_ignorepublicacls( ).
lv_boolean = lo_blockpublicaccess->get_restrictpublicbuckets( ).
lv_boolean = lo_blockpublicaccess->get_blockpublicacls( ).
lv_boolean = lo_blockpublicaccess->get_blockpublicpolicy( ).
ENDIF.
ENDIF.
ENDIF.
lv_string = lo_publicaccess->get_effectivepermission( ).
ENDIF.
LOOP AT lo_row_3->get_s3objectdetails( ) into lo_row_6.
lo_row_7 = lo_row_6.
IF lo_row_7 IS NOT INITIAL.
lv_string = lo_row_7->get_objectarn( ).
lv_string = lo_row_7->get_key( ).
lv_string = lo_row_7->get_etag( ).
lv_string = lo_row_7->get_hash( ).
lv_string = lo_row_7->get_versionid( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDLOOP.
lo_instancedetails = lo_resource->get_instancedetails( ).
IF lo_instancedetails IS NOT INITIAL.
lv_string = lo_instancedetails->get_availabilityzone( ).
lo_iaminstanceprofile = lo_instancedetails->get_iaminstanceprofile( ).
IF lo_iaminstanceprofile IS NOT INITIAL.
lv_string = lo_iaminstanceprofile->get_arn( ).
lv_string = lo_iaminstanceprofile->get_id( ).
ENDIF.
lv_string = lo_instancedetails->get_imagedescription( ).
lv_string = lo_instancedetails->get_imageid( ).
lv_string = lo_instancedetails->get_instanceid( ).
lv_string = lo_instancedetails->get_instancestate( ).
lv_string = lo_instancedetails->get_instancetype( ).
lv_string = lo_instancedetails->get_outpostarn( ).
lv_string = lo_instancedetails->get_launchtime( ).
LOOP AT lo_instancedetails->get_networkinterfaces( ) into lo_row_8.
lo_row_9 = lo_row_8.
IF lo_row_9 IS NOT INITIAL.
LOOP AT lo_row_9->get_ipv6addresses( ) into lo_row_10.
lo_row_11 = lo_row_10.
IF lo_row_11 IS NOT INITIAL.
lv_string = lo_row_11->get_value( ).
ENDIF.
ENDLOOP.
lv_string = lo_row_9->get_networkinterfaceid( ).
lv_string = lo_row_9->get_privatednsname( ).
lv_sensitivestring = lo_row_9->get_privateipaddress( ).
LOOP AT lo_row_9->get_privateipaddresses( ) into lo_row_12.
lo_row_13 = lo_row_12.
IF lo_row_13 IS NOT INITIAL.
lv_string = lo_row_13->get_privatednsname( ).
lv_sensitivestring = lo_row_13->get_privateipaddress( ).
ENDIF.
ENDLOOP.
lv_string = lo_row_9->get_publicdnsname( ).
lv_string = lo_row_9->get_publicip( ).
LOOP AT lo_row_9->get_securitygroups( ) into lo_row_14.
lo_row_15 = lo_row_14.
IF lo_row_15 IS NOT INITIAL.
lv_string = lo_row_15->get_groupid( ).
lv_string = lo_row_15->get_groupname( ).
ENDIF.
ENDLOOP.
lv_string = lo_row_9->get_subnetid( ).
lv_string = lo_row_9->get_vpcid( ).
ENDIF.
ENDLOOP.
lv_string = lo_instancedetails->get_platform( ).
LOOP AT lo_instancedetails->get_productcodes( ) into lo_row_16.
lo_row_17 = lo_row_16.
IF lo_row_17 IS NOT INITIAL.
lv_string = lo_row_17->get_code( ).
lv_string = lo_row_17->get_producttype( ).
ENDIF.
ENDLOOP.
LOOP AT lo_instancedetails->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_eksclusterdetails = lo_resource->get_eksclusterdetails( ).
IF lo_eksclusterdetails IS NOT INITIAL.
lv_string = lo_eksclusterdetails->get_name( ).
lv_string = lo_eksclusterdetails->get_arn( ).
lv_string = lo_eksclusterdetails->get_vpcid( ).
lv_string = lo_eksclusterdetails->get_status( ).
LOOP AT lo_eksclusterdetails->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
lv_timestamp = lo_eksclusterdetails->get_createdat( ).
ENDIF.
lo_kubernetesdetails = lo_resource->get_kubernetesdetails( ).
IF lo_kubernetesdetails IS NOT INITIAL.
lo_kubernetesuserdetails = lo_kubernetesdetails->get_kubernetesuserdetails( ).
IF lo_kubernetesuserdetails IS NOT INITIAL.
lv_string = lo_kubernetesuserdetails->get_username( ).
lv_string = lo_kubernetesuserdetails->get_uid( ).
LOOP AT lo_kubernetesuserdetails->get_groups( ) into lo_row_18.
lo_row_19 = lo_row_18.
IF lo_row_19 IS NOT INITIAL.
lv_string = lo_row_19->get_value( ).
ENDIF.
ENDLOOP.
LOOP AT lo_kubernetesuserdetails->get_sessionname( ) into lo_row_20.
lo_row_21 = lo_row_20.
IF lo_row_21 IS NOT INITIAL.
lv_string = lo_row_21->get_value( ).
ENDIF.
ENDLOOP.
lo_impersonateduser = lo_kubernetesuserdetails->get_impersonateduser( ).
IF lo_impersonateduser IS NOT INITIAL.
lv_string = lo_impersonateduser->get_username( ).
LOOP AT lo_impersonateduser->get_groups( ) into lo_row_18.
lo_row_19 = lo_row_18.
IF lo_row_19 IS NOT INITIAL.
lv_string = lo_row_19->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDIF.
lo_kubernetesworkloaddetai = lo_kubernetesdetails->get_kubernetesworkloaddets( ).
IF lo_kubernetesworkloaddetai IS NOT INITIAL.
lv_string = lo_kubernetesworkloaddetai->get_name( ).
lv_string = lo_kubernetesworkloaddetai->get_type( ).
lv_string = lo_kubernetesworkloaddetai->get_uid( ).
lv_string = lo_kubernetesworkloaddetai->get_namespace( ).
lv_boolean = lo_kubernetesworkloaddetai->get_hostnetwork( ).
LOOP AT lo_kubernetesworkloaddetai->get_containers( ) into lo_row_22.
lo_row_23 = lo_row_22.
IF lo_row_23 IS NOT INITIAL.
lv_string = lo_row_23->get_containerruntime( ).
lv_string = lo_row_23->get_id( ).
lv_string = lo_row_23->get_name( ).
lv_string = lo_row_23->get_image( ).
lv_string = lo_row_23->get_imageprefix( ).
LOOP AT lo_row_23->get_volumemounts( ) into lo_row_24.
lo_row_25 = lo_row_24.
IF lo_row_25 IS NOT INITIAL.
lv_string = lo_row_25->get_name( ).
lv_string = lo_row_25->get_mountpath( ).
ENDIF.
ENDLOOP.
lo_securitycontext = lo_row_23->get_securitycontext( ).
IF lo_securitycontext IS NOT INITIAL.
lv_boolean = lo_securitycontext->get_privileged( ).
lv_boolean = lo_securitycontext->get_allowprivilegeescalation( ).
ENDIF.
ENDIF.
ENDLOOP.
LOOP AT lo_kubernetesworkloaddetai->get_volumes( ) into lo_row_26.
lo_row_27 = lo_row_26.
IF lo_row_27 IS NOT INITIAL.
lv_string = lo_row_27->get_name( ).
lo_hostpath = lo_row_27->get_hostpath( ).
IF lo_hostpath IS NOT INITIAL.
lv_string = lo_hostpath->get_path( ).
ENDIF.
ENDIF.
ENDLOOP.
lv_string = lo_kubernetesworkloaddetai->get_serviceaccountname( ).
lv_boolean = lo_kubernetesworkloaddetai->get_hostipc( ).
lv_boolean = lo_kubernetesworkloaddetai->get_hostpid( ).
ENDIF.
ENDIF.
lv_string = lo_resource->get_resourcetype( ).
lo_ebsvolumedetails = lo_resource->get_ebsvolumedetails( ).
IF lo_ebsvolumedetails IS NOT INITIAL.
LOOP AT lo_ebsvolumedetails->get_scannedvolumedetails( ) into lo_row_28.
lo_row_29 = lo_row_28.
IF lo_row_29 IS NOT INITIAL.
lv_string = lo_row_29->get_volumearn( ).
lv_string = lo_row_29->get_volumetype( ).
lv_string = lo_row_29->get_devicename( ).
lv_integer = lo_row_29->get_volumesizeingb( ).
lv_string = lo_row_29->get_encryptiontype( ).
lv_string = lo_row_29->get_snapshotarn( ).
lv_string = lo_row_29->get_kmskeyarn( ).
ENDIF.
ENDLOOP.
LOOP AT lo_ebsvolumedetails->get_skippedvolumedetails( ) into lo_row_28.
lo_row_29 = lo_row_28.
IF lo_row_29 IS NOT INITIAL.
lv_string = lo_row_29->get_volumearn( ).
lv_string = lo_row_29->get_volumetype( ).
lv_string = lo_row_29->get_devicename( ).
lv_integer = lo_row_29->get_volumesizeingb( ).
lv_string = lo_row_29->get_encryptiontype( ).
lv_string = lo_row_29->get_snapshotarn( ).
lv_string = lo_row_29->get_kmskeyarn( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_ecsclusterdetails = lo_resource->get_ecsclusterdetails( ).
IF lo_ecsclusterdetails IS NOT INITIAL.
lv_string = lo_ecsclusterdetails->get_name( ).
lv_string = lo_ecsclusterdetails->get_arn( ).
lv_string = lo_ecsclusterdetails->get_status( ).
lv_integer = lo_ecsclusterdetails->get_activeservicescount( ).
lv_integer = lo_ecsclusterdetails->get_regedcontainerinstscount( ).
lv_integer = lo_ecsclusterdetails->get_runningtaskscount( ).
LOOP AT lo_ecsclusterdetails->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
lo_ecstaskdetails = lo_ecsclusterdetails->get_taskdetails( ).
IF lo_ecstaskdetails IS NOT INITIAL.
lv_string = lo_ecstaskdetails->get_arn( ).
lv_string = lo_ecstaskdetails->get_definitionarn( ).
lv_string = lo_ecstaskdetails->get_version( ).
lv_timestamp = lo_ecstaskdetails->get_taskcreatedat( ).
lv_timestamp = lo_ecstaskdetails->get_startedat( ).
lv_string = lo_ecstaskdetails->get_startedby( ).
LOOP AT lo_ecstaskdetails->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
LOOP AT lo_ecstaskdetails->get_volumes( ) into lo_row_26.
lo_row_27 = lo_row_26.
IF lo_row_27 IS NOT INITIAL.
lv_string = lo_row_27->get_name( ).
lo_hostpath = lo_row_27->get_hostpath( ).
IF lo_hostpath IS NOT INITIAL.
lv_string = lo_hostpath->get_path( ).
ENDIF.
ENDIF.
ENDLOOP.
LOOP AT lo_ecstaskdetails->get_containers( ) into lo_row_22.
lo_row_23 = lo_row_22.
IF lo_row_23 IS NOT INITIAL.
lv_string = lo_row_23->get_containerruntime( ).
lv_string = lo_row_23->get_id( ).
lv_string = lo_row_23->get_name( ).
lv_string = lo_row_23->get_image( ).
lv_string = lo_row_23->get_imageprefix( ).
LOOP AT lo_row_23->get_volumemounts( ) into lo_row_24.
lo_row_25 = lo_row_24.
IF lo_row_25 IS NOT INITIAL.
lv_string = lo_row_25->get_name( ).
lv_string = lo_row_25->get_mountpath( ).
ENDIF.
ENDLOOP.
lo_securitycontext = lo_row_23->get_securitycontext( ).
IF lo_securitycontext IS NOT INITIAL.
lv_boolean = lo_securitycontext->get_privileged( ).
lv_boolean = lo_securitycontext->get_allowprivilegeescalation( ).
ENDIF.
ENDIF.
ENDLOOP.
lv_string = lo_ecstaskdetails->get_group( ).
lv_string = lo_ecstaskdetails->get_launchtype( ).
ENDIF.
ENDIF.
lo_container = lo_resource->get_containerdetails( ).
IF lo_container IS NOT INITIAL.
lv_string = lo_container->get_containerruntime( ).
lv_string = lo_container->get_id( ).
lv_string = lo_container->get_name( ).
lv_string = lo_container->get_image( ).
lv_string = lo_container->get_imageprefix( ).
LOOP AT lo_container->get_volumemounts( ) into lo_row_24.
lo_row_25 = lo_row_24.
IF lo_row_25 IS NOT INITIAL.
lv_string = lo_row_25->get_name( ).
lv_string = lo_row_25->get_mountpath( ).
ENDIF.
ENDLOOP.
lo_securitycontext = lo_container->get_securitycontext( ).
IF lo_securitycontext IS NOT INITIAL.
lv_boolean = lo_securitycontext->get_privileged( ).
lv_boolean = lo_securitycontext->get_allowprivilegeescalation( ).
ENDIF.
ENDIF.
lo_rdsdbinstancedetails = lo_resource->get_rdsdbinstancedetails( ).
IF lo_rdsdbinstancedetails IS NOT INITIAL.
lv_string = lo_rdsdbinstancedetails->get_dbinstanceidentifier( ).
lv_string = lo_rdsdbinstancedetails->get_engine( ).
lv_string = lo_rdsdbinstancedetails->get_engineversion( ).
lv_string = lo_rdsdbinstancedetails->get_dbclusteridentifier( ).
lv_string = lo_rdsdbinstancedetails->get_dbinstancearn( ).
LOOP AT lo_rdsdbinstancedetails->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_rdslimitlessdbdetails = lo_resource->get_rdslimitlessdbdetails( ).
IF lo_rdslimitlessdbdetails IS NOT INITIAL.
lv_string = lo_rdslimitlessdbdetails->get_dbshardgroupidentifier( ).
lv_string = lo_rdslimitlessdbdetails->get_dbshardgroupresourceid( ).
lv_string = lo_rdslimitlessdbdetails->get_dbshardgrouparn( ).
lv_string = lo_rdslimitlessdbdetails->get_engine( ).
lv_string = lo_rdslimitlessdbdetails->get_engineversion( ).
lv_string = lo_rdslimitlessdbdetails->get_dbclusteridentifier( ).
LOOP AT lo_rdslimitlessdbdetails->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_rdsdbuserdetails = lo_resource->get_rdsdbuserdetails( ).
IF lo_rdsdbuserdetails IS NOT INITIAL.
lv_string = lo_rdsdbuserdetails->get_user( ).
lv_string = lo_rdsdbuserdetails->get_application( ).
lv_string = lo_rdsdbuserdetails->get_database( ).
lv_string = lo_rdsdbuserdetails->get_ssl( ).
lv_string = lo_rdsdbuserdetails->get_authmethod( ).
ENDIF.
lo_lambdadetails = lo_resource->get_lambdadetails( ).
IF lo_lambdadetails IS NOT INITIAL.
lv_string = lo_lambdadetails->get_functionarn( ).
lv_string = lo_lambdadetails->get_functionname( ).
lv_string = lo_lambdadetails->get_description( ).
lv_timestamp = lo_lambdadetails->get_lastmodifiedat( ).
lv_string = lo_lambdadetails->get_revisionid( ).
lv_string = lo_lambdadetails->get_functionversion( ).
lv_string = lo_lambdadetails->get_role( ).
lo_vpcconfig = lo_lambdadetails->get_vpcconfig( ).
IF lo_vpcconfig IS NOT INITIAL.
LOOP AT lo_vpcconfig->get_subnetids( ) into lo_row_30.
lo_row_31 = lo_row_30.
IF lo_row_31 IS NOT INITIAL.
lv_string = lo_row_31->get_value( ).
ENDIF.
ENDLOOP.
lv_string = lo_vpcconfig->get_vpcid( ).
LOOP AT lo_vpcconfig->get_securitygroups( ) into lo_row_14.
lo_row_15 = lo_row_14.
IF lo_row_15 IS NOT INITIAL.
lv_string = lo_row_15->get_groupid( ).
lv_string = lo_row_15->get_groupname( ).
ENDIF.
ENDLOOP.
ENDIF.
LOOP AT lo_lambdadetails->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDIF.
lv_string = lo_row_1->get_schemaversion( ).
lo_service = lo_row_1->get_service( ).
IF lo_service IS NOT INITIAL.
lo_action = lo_service->get_action( ).
IF lo_action IS NOT INITIAL.
lv_string = lo_action->get_actiontype( ).
lo_awsapicallaction = lo_action->get_awsapicallaction( ).
IF lo_awsapicallaction IS NOT INITIAL.
lv_string = lo_awsapicallaction->get_api( ).
lv_string = lo_awsapicallaction->get_callertype( ).
lo_domaindetails = lo_awsapicallaction->get_domaindetails( ).
IF lo_domaindetails IS NOT INITIAL.
lv_string = lo_domaindetails->get_domain( ).
ENDIF.
lv_string = lo_awsapicallaction->get_errorcode( ).
lv_string = lo_awsapicallaction->get_useragent( ).
lo_remoteipdetails = lo_awsapicallaction->get_remoteipdetails( ).
IF lo_remoteipdetails IS NOT INITIAL.
lo_city = lo_remoteipdetails->get_city( ).
IF lo_city IS NOT INITIAL.
lv_string = lo_city->get_cityname( ).
ENDIF.
lo_country = lo_remoteipdetails->get_country( ).
IF lo_country IS NOT INITIAL.
lv_string = lo_country->get_countrycode( ).
lv_string = lo_country->get_countryname( ).
ENDIF.
lo_geolocation = lo_remoteipdetails->get_geolocation( ).
IF lo_geolocation IS NOT INITIAL.
lv_double = lo_geolocation->get_lat( ).
lv_double = lo_geolocation->get_lon( ).
ENDIF.
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv4( ).
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv6( ).
lo_organization = lo_remoteipdetails->get_organization( ).
IF lo_organization IS NOT INITIAL.
lv_string = lo_organization->get_asn( ).
lv_string = lo_organization->get_asnorg( ).
lv_string = lo_organization->get_isp( ).
lv_string = lo_organization->get_org( ).
ENDIF.
ENDIF.
lv_string = lo_awsapicallaction->get_servicename( ).
lo_remoteaccountdetails = lo_awsapicallaction->get_remoteaccountdetails( ).
IF lo_remoteaccountdetails IS NOT INITIAL.
lv_string = lo_remoteaccountdetails->get_accountid( ).
lv_boolean = lo_remoteaccountdetails->get_affiliated( ).
ENDIF.
LOOP AT lo_awsapicallaction->get_affectedresources( ) into ls_row_32.
lv_key = ls_row_32-key.
lo_value = ls_row_32-value.
IF lo_value IS NOT INITIAL.
lv_string = lo_value->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_dnsrequestaction = lo_action->get_dnsrequestaction( ).
IF lo_dnsrequestaction IS NOT INITIAL.
lv_string = lo_dnsrequestaction->get_domain( ).
lv_string = lo_dnsrequestaction->get_protocol( ).
lv_boolean = lo_dnsrequestaction->get_blocked( ).
lv_string = lo_dnsrequestaction->get_domainwithsuffix( ).
lv_accountid = lo_dnsrequestaction->get_vpcowneraccountid( ).
ENDIF.
lo_networkconnectionaction = lo_action->get_networkconnectionaction( ).
IF lo_networkconnectionaction IS NOT INITIAL.
lv_boolean = lo_networkconnectionaction->get_blocked( ).
lv_string = lo_networkconnectionaction->get_connectiondirection( ).
lo_localportdetails = lo_networkconnectionaction->get_localportdetails( ).
IF lo_localportdetails IS NOT INITIAL.
lv_integer = lo_localportdetails->get_port( ).
lv_string = lo_localportdetails->get_portname( ).
ENDIF.
lv_string = lo_networkconnectionaction->get_protocol( ).
lo_localipdetails = lo_networkconnectionaction->get_localipdetails( ).
IF lo_localipdetails IS NOT INITIAL.
lv_sensitivestring = lo_localipdetails->get_ipaddressv4( ).
lv_sensitivestring = lo_localipdetails->get_ipaddressv6( ).
ENDIF.
lv_string = lo_networkconnectionaction->get_localnetworkinterface( ).
lo_remoteipdetails = lo_networkconnectionaction->get_remoteipdetails( ).
IF lo_remoteipdetails IS NOT INITIAL.
lo_city = lo_remoteipdetails->get_city( ).
IF lo_city IS NOT INITIAL.
lv_string = lo_city->get_cityname( ).
ENDIF.
lo_country = lo_remoteipdetails->get_country( ).
IF lo_country IS NOT INITIAL.
lv_string = lo_country->get_countrycode( ).
lv_string = lo_country->get_countryname( ).
ENDIF.
lo_geolocation = lo_remoteipdetails->get_geolocation( ).
IF lo_geolocation IS NOT INITIAL.
lv_double = lo_geolocation->get_lat( ).
lv_double = lo_geolocation->get_lon( ).
ENDIF.
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv4( ).
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv6( ).
lo_organization = lo_remoteipdetails->get_organization( ).
IF lo_organization IS NOT INITIAL.
lv_string = lo_organization->get_asn( ).
lv_string = lo_organization->get_asnorg( ).
lv_string = lo_organization->get_isp( ).
lv_string = lo_organization->get_org( ).
ENDIF.
ENDIF.
lo_remoteportdetails = lo_networkconnectionaction->get_remoteportdetails( ).
IF lo_remoteportdetails IS NOT INITIAL.
lv_integer = lo_remoteportdetails->get_port( ).
lv_string = lo_remoteportdetails->get_portname( ).
ENDIF.
ENDIF.
lo_portprobeaction = lo_action->get_portprobeaction( ).
IF lo_portprobeaction IS NOT INITIAL.
lv_boolean = lo_portprobeaction->get_blocked( ).
LOOP AT lo_portprobeaction->get_portprobedetails( ) into lo_row_33.
lo_row_34 = lo_row_33.
IF lo_row_34 IS NOT INITIAL.
lo_localportdetails = lo_row_34->get_localportdetails( ).
IF lo_localportdetails IS NOT INITIAL.
lv_integer = lo_localportdetails->get_port( ).
lv_string = lo_localportdetails->get_portname( ).
ENDIF.
lo_localipdetails = lo_row_34->get_localipdetails( ).
IF lo_localipdetails IS NOT INITIAL.
lv_sensitivestring = lo_localipdetails->get_ipaddressv4( ).
lv_sensitivestring = lo_localipdetails->get_ipaddressv6( ).
ENDIF.
lo_remoteipdetails = lo_row_34->get_remoteipdetails( ).
IF lo_remoteipdetails IS NOT INITIAL.
lo_city = lo_remoteipdetails->get_city( ).
IF lo_city IS NOT INITIAL.
lv_string = lo_city->get_cityname( ).
ENDIF.
lo_country = lo_remoteipdetails->get_country( ).
IF lo_country IS NOT INITIAL.
lv_string = lo_country->get_countrycode( ).
lv_string = lo_country->get_countryname( ).
ENDIF.
lo_geolocation = lo_remoteipdetails->get_geolocation( ).
IF lo_geolocation IS NOT INITIAL.
lv_double = lo_geolocation->get_lat( ).
lv_double = lo_geolocation->get_lon( ).
ENDIF.
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv4( ).
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv6( ).
lo_organization = lo_remoteipdetails->get_organization( ).
IF lo_organization IS NOT INITIAL.
lv_string = lo_organization->get_asn( ).
lv_string = lo_organization->get_asnorg( ).
lv_string = lo_organization->get_isp( ).
lv_string = lo_organization->get_org( ).
ENDIF.
ENDIF.
ENDIF.
ENDLOOP.
ENDIF.
lo_kubernetesapicallaction = lo_action->get_kubernetesapicallaction( ).
IF lo_kubernetesapicallaction IS NOT INITIAL.
lv_string = lo_kubernetesapicallaction->get_requesturi( ).
lv_string = lo_kubernetesapicallaction->get_verb( ).
LOOP AT lo_kubernetesapicallaction->get_sourceips( ) into lo_row_35.
lo_row_36 = lo_row_35.
IF lo_row_36 IS NOT INITIAL.
lv_string = lo_row_36->get_value( ).
ENDIF.
ENDLOOP.
lv_string = lo_kubernetesapicallaction->get_useragent( ).
lo_remoteipdetails = lo_kubernetesapicallaction->get_remoteipdetails( ).
IF lo_remoteipdetails IS NOT INITIAL.
lo_city = lo_remoteipdetails->get_city( ).
IF lo_city IS NOT INITIAL.
lv_string = lo_city->get_cityname( ).
ENDIF.
lo_country = lo_remoteipdetails->get_country( ).
IF lo_country IS NOT INITIAL.
lv_string = lo_country->get_countrycode( ).
lv_string = lo_country->get_countryname( ).
ENDIF.
lo_geolocation = lo_remoteipdetails->get_geolocation( ).
IF lo_geolocation IS NOT INITIAL.
lv_double = lo_geolocation->get_lat( ).
lv_double = lo_geolocation->get_lon( ).
ENDIF.
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv4( ).
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv6( ).
lo_organization = lo_remoteipdetails->get_organization( ).
IF lo_organization IS NOT INITIAL.
lv_string = lo_organization->get_asn( ).
lv_string = lo_organization->get_asnorg( ).
lv_string = lo_organization->get_isp( ).
lv_string = lo_organization->get_org( ).
ENDIF.
ENDIF.
lv_integer = lo_kubernetesapicallaction->get_statuscode( ).
lv_string = lo_kubernetesapicallaction->get_parameters( ).
lv_string = lo_kubernetesapicallaction->get_resource( ).
lv_string = lo_kubernetesapicallaction->get_subresource( ).
lv_string = lo_kubernetesapicallaction->get_namespace( ).
lv_string = lo_kubernetesapicallaction->get_resourcename( ).
ENDIF.
lo_rdsloginattemptaction = lo_action->get_rdsloginattemptaction( ).
IF lo_rdsloginattemptaction IS NOT INITIAL.
lo_remoteipdetails = lo_rdsloginattemptaction->get_remoteipdetails( ).
IF lo_remoteipdetails IS NOT INITIAL.
lo_city = lo_remoteipdetails->get_city( ).
IF lo_city IS NOT INITIAL.
lv_string = lo_city->get_cityname( ).
ENDIF.
lo_country = lo_remoteipdetails->get_country( ).
IF lo_country IS NOT INITIAL.
lv_string = lo_country->get_countrycode( ).
lv_string = lo_country->get_countryname( ).
ENDIF.
lo_geolocation = lo_remoteipdetails->get_geolocation( ).
IF lo_geolocation IS NOT INITIAL.
lv_double = lo_geolocation->get_lat( ).
lv_double = lo_geolocation->get_lon( ).
ENDIF.
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv4( ).
lv_sensitivestring = lo_remoteipdetails->get_ipaddressv6( ).
lo_organization = lo_remoteipdetails->get_organization( ).
IF lo_organization IS NOT INITIAL.
lv_string = lo_organization->get_asn( ).
lv_string = lo_organization->get_asnorg( ).
lv_string = lo_organization->get_isp( ).
lv_string = lo_organization->get_org( ).
ENDIF.
ENDIF.
LOOP AT lo_rdsloginattemptaction->get_loginattributes( ) into lo_row_37.
lo_row_38 = lo_row_37.
IF lo_row_38 IS NOT INITIAL.
lv_string = lo_row_38->get_user( ).
lv_string = lo_row_38->get_application( ).
lv_integer = lo_row_38->get_failedloginattempts( ).
lv_integer = lo_row_38->get_successfulloginattempts( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_kubernetespermissionche = lo_action->get_kubernetespermcheckedd00( ).
IF lo_kubernetespermissionche IS NOT INITIAL.
lv_string = lo_kubernetespermissionche->get_verb( ).
lv_string = lo_kubernetespermissionche->get_resource( ).
lv_string = lo_kubernetespermissionche->get_namespace( ).
lv_boolean = lo_kubernetespermissionche->get_allowed( ).
ENDIF.
lo_kubernetesrolebindingde = lo_action->get_kubernetesrolebindingd00( ).
IF lo_kubernetesrolebindingde IS NOT INITIAL.
lv_string = lo_kubernetesrolebindingde->get_kind( ).
lv_string = lo_kubernetesrolebindingde->get_name( ).
lv_string = lo_kubernetesrolebindingde->get_uid( ).
lv_string = lo_kubernetesrolebindingde->get_rolerefname( ).
lv_string = lo_kubernetesrolebindingde->get_rolerefkind( ).
ENDIF.
lo_kubernetesroledetails = lo_action->get_kubernetesroledetails( ).
IF lo_kubernetesroledetails IS NOT INITIAL.
lv_string = lo_kubernetesroledetails->get_kind( ).
lv_string = lo_kubernetesroledetails->get_name( ).
lv_string = lo_kubernetesroledetails->get_uid( ).
ENDIF.
ENDIF.
lo_evidence = lo_service->get_evidence( ).
IF lo_evidence IS NOT INITIAL.
LOOP AT lo_evidence->get_threatintelligencedets( ) into lo_row_39.
lo_row_40 = lo_row_39.
IF lo_row_40 IS NOT INITIAL.
lv_string = lo_row_40->get_threatlistname( ).
LOOP AT lo_row_40->get_threatnames( ) into lo_row_41.
lo_row_42 = lo_row_41.
IF lo_row_42 IS NOT INITIAL.
lv_string = lo_row_42->get_value( ).
ENDIF.
ENDLOOP.
lv_string = lo_row_40->get_threatfilesha256( ).
ENDIF.
ENDLOOP.
ENDIF.
lv_boolean = lo_service->get_archived( ).
lv_integer = lo_service->get_count( ).
lv_detectorid = lo_service->get_detectorid( ).
lv_string = lo_service->get_eventfirstseen( ).
lv_string = lo_service->get_eventlastseen( ).
lv_string = lo_service->get_resourcerole( ).
lv_string = lo_service->get_servicename( ).
lv_string = lo_service->get_userfeedback( ).
lo_serviceadditionalinfo = lo_service->get_additionalinfo( ).
IF lo_serviceadditionalinfo IS NOT INITIAL.
lv_string = lo_serviceadditionalinfo->get_value( ).
lv_string = lo_serviceadditionalinfo->get_type( ).
ENDIF.
lv_string = lo_service->get_featurename( ).
lo_ebsvolumescandetails = lo_service->get_ebsvolumescandetails( ).
IF lo_ebsvolumescandetails IS NOT INITIAL.
lv_string = lo_ebsvolumescandetails->get_scanid( ).
lv_timestamp = lo_ebsvolumescandetails->get_scanstartedat( ).
lv_timestamp = lo_ebsvolumescandetails->get_scancompletedat( ).
lv_string = lo_ebsvolumescandetails->get_triggerfindingid( ).
LOOP AT lo_ebsvolumescandetails->get_sources( ) into lo_row_43.
lo_row_44 = lo_row_43.
IF lo_row_44 IS NOT INITIAL.
lv_string = lo_row_44->get_value( ).
ENDIF.
ENDLOOP.
lo_scandetections = lo_ebsvolumescandetails->get_scandetections( ).
IF lo_scandetections IS NOT INITIAL.
lo_scanneditemcount = lo_scandetections->get_scanneditemcount( ).
IF lo_scanneditemcount IS NOT INITIAL.
lv_integer = lo_scanneditemcount->get_totalgb( ).
lv_integer = lo_scanneditemcount->get_files( ).
lv_integer = lo_scanneditemcount->get_volumes( ).
ENDIF.
lo_threatsdetecteditemcoun = lo_scandetections->get_threatsdetecteditemcount( ).
IF lo_threatsdetecteditemcoun IS NOT INITIAL.
lv_integer = lo_threatsdetecteditemcoun->get_files( ).
ENDIF.
lo_highestseveritythreatde = lo_scandetections->get_highestseveritythreatd00( ).
IF lo_highestseveritythreatde IS NOT INITIAL.
lv_string = lo_highestseveritythreatde->get_severity( ).
lv_string = lo_highestseveritythreatde->get_threatname( ).
lv_integer = lo_highestseveritythreatde->get_count( ).
ENDIF.
lo_threatdetectedbyname = lo_scandetections->get_threatdetectedbyname( ).
IF lo_threatdetectedbyname IS NOT INITIAL.
lv_integer = lo_threatdetectedbyname->get_itemcount( ).
lv_integer = lo_threatdetectedbyname->get_uniquethreatnamecount( ).
lv_boolean = lo_threatdetectedbyname->get_shortened( ).
LOOP AT lo_threatdetectedbyname->get_threatnames( ) into lo_row_45.
lo_row_46 = lo_row_45.
IF lo_row_46 IS NOT INITIAL.
lv_string = lo_row_46->get_name( ).
lv_string = lo_row_46->get_severity( ).
lv_integer = lo_row_46->get_itemcount( ).
LOOP AT lo_row_46->get_filepaths( ) into lo_row_47.
lo_row_48 = lo_row_47.
IF lo_row_48 IS NOT INITIAL.
lv_string = lo_row_48->get_filepath( ).
lv_string = lo_row_48->get_volumearn( ).
lv_string = lo_row_48->get_hash( ).
lv_string = lo_row_48->get_filename( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDLOOP.
ENDIF.
ENDIF.
lv_scantype = lo_ebsvolumescandetails->get_scantype( ).
ENDIF.
lo_runtimedetails = lo_service->get_runtimedetails( ).
IF lo_runtimedetails IS NOT INITIAL.
lo_processdetails = lo_runtimedetails->get_process( ).
IF lo_processdetails IS NOT INITIAL.
lv_string = lo_processdetails->get_name( ).
lv_string = lo_processdetails->get_executablepath( ).
lv_string = lo_processdetails->get_executablesha256( ).
lv_integer = lo_processdetails->get_namespacepid( ).
lv_string = lo_processdetails->get_pwd( ).
lv_integer = lo_processdetails->get_pid( ).
lv_timestamp = lo_processdetails->get_starttime( ).
lv_string = lo_processdetails->get_uuid( ).
lv_string = lo_processdetails->get_parentuuid( ).
lv_string = lo_processdetails->get_user( ).
lv_integer = lo_processdetails->get_userid( ).
lv_integer = lo_processdetails->get_euid( ).
LOOP AT lo_processdetails->get_lineage( ) into lo_row_49.
lo_row_50 = lo_row_49.
IF lo_row_50 IS NOT INITIAL.
lv_timestamp = lo_row_50->get_starttime( ).
lv_integer = lo_row_50->get_namespacepid( ).
lv_integer = lo_row_50->get_userid( ).
lv_string = lo_row_50->get_name( ).
lv_integer = lo_row_50->get_pid( ).
lv_string = lo_row_50->get_uuid( ).
lv_string = lo_row_50->get_executablepath( ).
lv_integer = lo_row_50->get_euid( ).
lv_string = lo_row_50->get_parentuuid( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_runtimecontext = lo_runtimedetails->get_context( ).
IF lo_runtimecontext IS NOT INITIAL.
lo_processdetails = lo_runtimecontext->get_modifyingprocess( ).
IF lo_processdetails IS NOT INITIAL.
lv_string = lo_processdetails->get_name( ).
lv_string = lo_processdetails->get_executablepath( ).
lv_string = lo_processdetails->get_executablesha256( ).
lv_integer = lo_processdetails->get_namespacepid( ).
lv_string = lo_processdetails->get_pwd( ).
lv_integer = lo_processdetails->get_pid( ).
lv_timestamp = lo_processdetails->get_starttime( ).
lv_string = lo_processdetails->get_uuid( ).
lv_string = lo_processdetails->get_parentuuid( ).
lv_string = lo_processdetails->get_user( ).
lv_integer = lo_processdetails->get_userid( ).
lv_integer = lo_processdetails->get_euid( ).
LOOP AT lo_processdetails->get_lineage( ) into lo_row_49.
lo_row_50 = lo_row_49.
IF lo_row_50 IS NOT INITIAL.
lv_timestamp = lo_row_50->get_starttime( ).
lv_integer = lo_row_50->get_namespacepid( ).
lv_integer = lo_row_50->get_userid( ).
lv_string = lo_row_50->get_name( ).
lv_integer = lo_row_50->get_pid( ).
lv_string = lo_row_50->get_uuid( ).
lv_string = lo_row_50->get_executablepath( ).
lv_integer = lo_row_50->get_euid( ).
lv_string = lo_row_50->get_parentuuid( ).
ENDIF.
ENDLOOP.
ENDIF.
lv_timestamp = lo_runtimecontext->get_modifiedat( ).
lv_string = lo_runtimecontext->get_scriptpath( ).
lv_string = lo_runtimecontext->get_librarypath( ).
lv_string = lo_runtimecontext->get_ldpreloadvalue( ).
lv_string = lo_runtimecontext->get_socketpath( ).
lv_string = lo_runtimecontext->get_runcbinarypath( ).
lv_string = lo_runtimecontext->get_releaseagentpath( ).
lv_string = lo_runtimecontext->get_mountsource( ).
lv_string = lo_runtimecontext->get_mounttarget( ).
lv_string = lo_runtimecontext->get_filesystemtype( ).
LOOP AT lo_runtimecontext->get_flags( ) into lo_row_51.
lo_row_52 = lo_row_51.
IF lo_row_52 IS NOT INITIAL.
lv_string = lo_row_52->get_value( ).
ENDIF.
ENDLOOP.
lv_string = lo_runtimecontext->get_modulename( ).
lv_string = lo_runtimecontext->get_modulefilepath( ).
lv_string = lo_runtimecontext->get_modulesha256( ).
lv_string = lo_runtimecontext->get_shellhistoryfilepath( ).
lo_processdetails = lo_runtimecontext->get_targetprocess( ).
IF lo_processdetails IS NOT INITIAL.
lv_string = lo_processdetails->get_name( ).
lv_string = lo_processdetails->get_executablepath( ).
lv_string = lo_processdetails->get_executablesha256( ).
lv_integer = lo_processdetails->get_namespacepid( ).
lv_string = lo_processdetails->get_pwd( ).
lv_integer = lo_processdetails->get_pid( ).
lv_timestamp = lo_processdetails->get_starttime( ).
lv_string = lo_processdetails->get_uuid( ).
lv_string = lo_processdetails->get_parentuuid( ).
lv_string = lo_processdetails->get_user( ).
lv_integer = lo_processdetails->get_userid( ).
lv_integer = lo_processdetails->get_euid( ).
LOOP AT lo_processdetails->get_lineage( ) into lo_row_49.
lo_row_50 = lo_row_49.
IF lo_row_50 IS NOT INITIAL.
lv_timestamp = lo_row_50->get_starttime( ).
lv_integer = lo_row_50->get_namespacepid( ).
lv_integer = lo_row_50->get_userid( ).
lv_string = lo_row_50->get_name( ).
lv_integer = lo_row_50->get_pid( ).
lv_string = lo_row_50->get_uuid( ).
lv_string = lo_row_50->get_executablepath( ).
lv_integer = lo_row_50->get_euid( ).
lv_string = lo_row_50->get_parentuuid( ).
ENDIF.
ENDLOOP.
ENDIF.
lv_string = lo_runtimecontext->get_addressfamily( ).
lv_integer = lo_runtimecontext->get_ianaprotocolnumber( ).
LOOP AT lo_runtimecontext->get_memoryregions( ) into lo_row_53.
lo_row_54 = lo_row_53.
IF lo_row_54 IS NOT INITIAL.
lv_string = lo_row_54->get_value( ).
ENDIF.
ENDLOOP.
lv_string = lo_runtimecontext->get_toolname( ).
lv_string = lo_runtimecontext->get_toolcategory( ).
lv_string = lo_runtimecontext->get_servicename( ).
lv_string = lo_runtimecontext->get_commandlineexample( ).
lv_string = lo_runtimecontext->get_threatfilepath( ).
ENDIF.
ENDIF.
lo_detection = lo_service->get_detection( ).
IF lo_detection IS NOT INITIAL.
lo_anomaly = lo_detection->get_anomaly( ).
IF lo_anomaly IS NOT INITIAL.
LOOP AT lo_anomaly->get_profiles( ) into ls_row_55.
lv_key = ls_row_55-key.
LOOP AT ls_row_55-value into ls_row_56.
lv_key = ls_row_56-key.
LOOP AT ls_row_56-value into lo_row_57.
lo_row_58 = lo_row_57.
IF lo_row_58 IS NOT INITIAL.
lv_profiletype = lo_row_58->get_profiletype( ).
lv_profilesubtype = lo_row_58->get_profilesubtype( ).
lo_observations = lo_row_58->get_observations( ).
IF lo_observations IS NOT INITIAL.
LOOP AT lo_observations->get_text( ) into lo_row_59.
lo_row_60 = lo_row_59.
IF lo_row_60 IS NOT INITIAL.
lv_string = lo_row_60->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDIF.
ENDLOOP.
ENDLOOP.
ENDLOOP.
lo_anomalyunusual = lo_anomaly->get_unusual( ).
IF lo_anomalyunusual IS NOT INITIAL.
LOOP AT lo_anomalyunusual->get_behavior( ) into ls_row_61.
lv_key = ls_row_61-key.
LOOP AT ls_row_61-value into ls_row_62.
lv_key = ls_row_62-key.
lo_value_1 = ls_row_62-value.
IF lo_value_1 IS NOT INITIAL.
lv_profiletype = lo_value_1->get_profiletype( ).
lv_profilesubtype = lo_value_1->get_profilesubtype( ).
lo_observations = lo_value_1->get_observations( ).
IF lo_observations IS NOT INITIAL.
LOOP AT lo_observations->get_text( ) into lo_row_59.
lo_row_60 = lo_row_59.
IF lo_row_60 IS NOT INITIAL.
lv_string = lo_row_60->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDIF.
ENDLOOP.
ENDLOOP.
ENDIF.
ENDIF.
lo_sequence = lo_detection->get_sequence( ).
IF lo_sequence IS NOT INITIAL.
lv_string = lo_sequence->get_uid( ).
lv_sequencedescription = lo_sequence->get_description( ).
LOOP AT lo_sequence->get_actors( ) into lo_row_63.
lo_row_64 = lo_row_63.
IF lo_row_64 IS NOT INITIAL.
lv_string = lo_row_64->get_id( ).
lo_user = lo_row_64->get_user( ).
IF lo_user IS NOT INITIAL.
lv_string = lo_user->get_name( ).
lv_string = lo_user->get_uid( ).
lv_string = lo_user->get_type( ).
lv_string = lo_user->get_credentialuid( ).
lo_account = lo_user->get_account( ).
IF lo_account IS NOT INITIAL.
lv_string = lo_account->get_uid( ).
lv_string = lo_account->get_name( ).
ENDIF.
ENDIF.
lo_session = lo_row_64->get_session( ).
IF lo_session IS NOT INITIAL.
lv_string = lo_session->get_uid( ).
lv_mfastatus = lo_session->get_mfastatus( ).
lv_timestamp = lo_session->get_createdtime( ).
lv_string = lo_session->get_issuer( ).
ENDIF.
lo_actorprocess = lo_row_64->get_process( ).
IF lo_actorprocess IS NOT INITIAL.
lv_processname = lo_actorprocess->get_name( ).
lv_processpath = lo_actorprocess->get_path( ).
lv_processsha256 = lo_actorprocess->get_sha256( ).
ENDIF.
ENDIF.
ENDLOOP.
LOOP AT lo_sequence->get_resources( ) into lo_row_65.
lo_row_66 = lo_row_65.
IF lo_row_66 IS NOT INITIAL.
lv_string = lo_row_66->get_uid( ).
lv_string = lo_row_66->get_name( ).
lv_string = lo_row_66->get_accountid( ).
lv_findingresourcetype = lo_row_66->get_resourcetype( ).
lv_string = lo_row_66->get_region( ).
lv_string = lo_row_66->get_service( ).
lv_string = lo_row_66->get_cloudpartition( ).
LOOP AT lo_row_66->get_tags( ) into lo_row_4.
lo_row_5 = lo_row_4.
IF lo_row_5 IS NOT INITIAL.
lv_string = lo_row_5->get_key( ).
lv_string = lo_row_5->get_value( ).
ENDIF.
ENDLOOP.
lo_resourcedata = lo_row_66->get_data( ).
IF lo_resourcedata IS NOT INITIAL.
lo_s3bucket = lo_resourcedata->get_s3bucket( ).
IF lo_s3bucket IS NOT INITIAL.
lv_string = lo_s3bucket->get_ownerid( ).
lv_timestamp = lo_s3bucket->get_createdat( ).
lv_string = lo_s3bucket->get_encryptiontype( ).
lv_string = lo_s3bucket->get_encryptionkeyarn( ).
lv_string = lo_s3bucket->get_effectivepermission( ).
lv_publicaccessstatus = lo_s3bucket->get_publicreadaccess( ).
lv_publicaccessstatus = lo_s3bucket->get_publicwriteaccess( ).
lo_publicaccessconfigurati = lo_s3bucket->get_accountpublicaccess( ).
IF lo_publicaccessconfigurati IS NOT INITIAL.
lv_publicaccessstatus = lo_publicaccessconfigurati->get_publicaclaccess( ).
lv_publicaccessstatus = lo_publicaccessconfigurati->get_publicpolicyaccess( ).
lv_publicaclignorebehavior = lo_publicaccessconfigurati->get_publicaclignorebehavior( ).
lv_publicbucketrestrictbeh = lo_publicaccessconfigurati->get_publicbktrestrictbehav( ).
ENDIF.
lo_publicaccessconfigurati = lo_s3bucket->get_bucketpublicaccess( ).
IF lo_publicaccessconfigurati IS NOT INITIAL.
lv_publicaccessstatus = lo_publicaccessconfigurati->get_publicaclaccess( ).
lv_publicaccessstatus = lo_publicaccessconfigurati->get_publicpolicyaccess( ).
lv_publicaclignorebehavior = lo_publicaccessconfigurati->get_publicaclignorebehavior( ).
lv_publicbucketrestrictbeh = lo_publicaccessconfigurati->get_publicbktrestrictbehav( ).
ENDIF.
LOOP AT lo_s3bucket->get_s3objectuids( ) into lo_row_67.
lo_row_68 = lo_row_67.
IF lo_row_68 IS NOT INITIAL.
lv_string = lo_row_68->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_ec2instance = lo_resourcedata->get_ec2instance( ).
IF lo_ec2instance IS NOT INITIAL.
lv_string = lo_ec2instance->get_availabilityzone( ).
lv_string = lo_ec2instance->get_imagedescription( ).
lv_string = lo_ec2instance->get_instancestate( ).
lo_iaminstanceprofile = lo_ec2instance->get_iaminstanceprofile( ).
IF lo_iaminstanceprofile IS NOT INITIAL.
lv_string = lo_iaminstanceprofile->get_arn( ).
lv_string = lo_iaminstanceprofile->get_id( ).
ENDIF.
lv_string = lo_ec2instance->get_instancetype( ).
lv_string = lo_ec2instance->get_outpostarn( ).
lv_string = lo_ec2instance->get_platform( ).
LOOP AT lo_ec2instance->get_productcodes( ) into lo_row_16.
lo_row_17 = lo_row_16.
IF lo_row_17 IS NOT INITIAL.
lv_string = lo_row_17->get_code( ).
lv_string = lo_row_17->get_producttype( ).
ENDIF.
ENDLOOP.
LOOP AT lo_ec2instance->get_ec2networkinterfaceuids( ) into lo_row_69.
lo_row_70 = lo_row_69.
IF lo_row_70 IS NOT INITIAL.
lv_string = lo_row_70->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_accesskey = lo_resourcedata->get_accesskey( ).
IF lo_accesskey IS NOT INITIAL.
lv_string = lo_accesskey->get_principalid( ).
lv_string = lo_accesskey->get_username( ).
lv_string = lo_accesskey->get_usertype( ).
ENDIF.
lo_ec2networkinterface = lo_resourcedata->get_ec2networkinterface( ).
IF lo_ec2networkinterface IS NOT INITIAL.
LOOP AT lo_ec2networkinterface->get_ipv6addresses( ) into lo_row_10.
lo_row_11 = lo_row_10.
IF lo_row_11 IS NOT INITIAL.
lv_string = lo_row_11->get_value( ).
ENDIF.
ENDLOOP.
LOOP AT lo_ec2networkinterface->get_privateipaddresses( ) into lo_row_12.
lo_row_13 = lo_row_12.
IF lo_row_13 IS NOT INITIAL.
lv_string = lo_row_13->get_privatednsname( ).
lv_sensitivestring = lo_row_13->get_privateipaddress( ).
ENDIF.
ENDLOOP.
lv_string = lo_ec2networkinterface->get_publicip( ).
LOOP AT lo_ec2networkinterface->get_securitygroups( ) into lo_row_14.
lo_row_15 = lo_row_14.
IF lo_row_15 IS NOT INITIAL.
lv_string = lo_row_15->get_groupid( ).
lv_string = lo_row_15->get_groupname( ).
ENDIF.
ENDLOOP.
lv_string = lo_ec2networkinterface->get_subnetid( ).
lv_string = lo_ec2networkinterface->get_vpcid( ).
ENDIF.
lo_s3object = lo_resourcedata->get_s3object( ).
IF lo_s3object IS NOT INITIAL.
lv_string = lo_s3object->get_etag( ).
lv_string = lo_s3object->get_key( ).
lv_string = lo_s3object->get_versionid( ).
ENDIF.
lo_ekscluster = lo_resourcedata->get_ekscluster( ).
IF lo_ekscluster IS NOT INITIAL.
lv_string = lo_ekscluster->get_arn( ).
lv_timestamp = lo_ekscluster->get_createdat( ).
lv_clusterstatus = lo_ekscluster->get_status( ).
lv_string = lo_ekscluster->get_vpcid( ).
LOOP AT lo_ekscluster->get_ec2instanceuids( ) into lo_row_71.
lo_row_72 = lo_row_71.
IF lo_row_72 IS NOT INITIAL.
lv_ec2instanceuid = lo_row_72->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
lo_kubernetesworkload = lo_resourcedata->get_kubernetesworkload( ).
IF lo_kubernetesworkload IS NOT INITIAL.
LOOP AT lo_kubernetesworkload->get_containeruids( ) into lo_row_73.
lo_row_74 = lo_row_73.
IF lo_row_74 IS NOT INITIAL.
lv_containeruid = lo_row_74->get_value( ).
ENDIF.
ENDLOOP.
lv_string = lo_kubernetesworkload->get_namespace( ).
lv_kubernetesresourcestype = lo_kubernetesworkload->get_kubernetesresourcestypes( ).
ENDIF.
lo_containerfindingresourc = lo_resourcedata->get_container( ).
IF lo_containerfindingresourc IS NOT INITIAL.
lv_string = lo_containerfindingresourc->get_image( ).
lv_containerimageuid = lo_containerfindingresourc->get_imageuid( ).
ENDIF.
ENDIF.
ENDIF.
ENDLOOP.
LOOP AT lo_sequence->get_endpoints( ) into lo_row_75.
lo_row_76 = lo_row_75.
IF lo_row_76 IS NOT INITIAL.
lv_string = lo_row_76->get_id( ).
lv_string = lo_row_76->get_ip( ).
lv_string = lo_row_76->get_domain( ).
lv_integer = lo_row_76->get_port( ).
lo_networkgeolocation = lo_row_76->get_location( ).
IF lo_networkgeolocation IS NOT INITIAL.
lv_string = lo_networkgeolocation->get_city( ).
lv_string = lo_networkgeolocation->get_country( ).
lv_double = lo_networkgeolocation->get_latitude( ).
lv_double = lo_networkgeolocation->get_longitude( ).
ENDIF.
lo_autonomoussystem = lo_row_76->get_autonomoussystem( ).
IF lo_autonomoussystem IS NOT INITIAL.
lv_string = lo_autonomoussystem->get_name( ).
lv_integer = lo_autonomoussystem->get_number( ).
ENDIF.
lo_networkconnection = lo_row_76->get_connection( ).
IF lo_networkconnection IS NOT INITIAL.
lv_networkdirection = lo_networkconnection->get_direction( ).
ENDIF.
ENDIF.
ENDLOOP.
LOOP AT lo_sequence->get_signals( ) into lo_row_77.
lo_row_78 = lo_row_77.
IF lo_row_78 IS NOT INITIAL.
lv_string = lo_row_78->get_uid( ).
lv_signaltype = lo_row_78->get_type( ).
lv_signaldescription = lo_row_78->get_description( ).
lv_string = lo_row_78->get_name( ).
lv_timestamp = lo_row_78->get_createdat( ).
lv_timestamp = lo_row_78->get_updatedat( ).
lv_timestamp = lo_row_78->get_firstseenat( ).
lv_timestamp = lo_row_78->get_lastseenat( ).
lv_double = lo_row_78->get_severity( ).
lv_integer = lo_row_78->get_count( ).
LOOP AT lo_row_78->get_resourceuids( ) into lo_row_79.
lo_row_80 = lo_row_79.
IF lo_row_80 IS NOT INITIAL.
lv_string = lo_row_80->get_value( ).
ENDIF.
ENDLOOP.
LOOP AT lo_row_78->get_actorids( ) into lo_row_81.
lo_row_82 = lo_row_81.
IF lo_row_82 IS NOT INITIAL.
lv_string = lo_row_82->get_value( ).
ENDIF.
ENDLOOP.
LOOP AT lo_row_78->get_endpointids( ) into lo_row_83.
lo_row_84 = lo_row_83.
IF lo_row_84 IS NOT INITIAL.
lv_string = lo_row_84->get_value( ).
ENDIF.
ENDLOOP.
LOOP AT lo_row_78->get_signalindicators( ) into lo_row_85.
lo_row_86 = lo_row_85.
IF lo_row_86 IS NOT INITIAL.
lv_indicatortype = lo_row_86->get_key( ).
LOOP AT lo_row_86->get_values( ) into lo_row_87.
lo_row_88 = lo_row_87.
IF lo_row_88 IS NOT INITIAL.
lv_indicatorvaluestring = lo_row_88->get_value( ).
ENDIF.
ENDLOOP.
lv_indicatortitle = lo_row_86->get_title( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDLOOP.
LOOP AT lo_sequence->get_sequenceindicators( ) into lo_row_85.
lo_row_86 = lo_row_85.
IF lo_row_86 IS NOT INITIAL.
lv_indicatortype = lo_row_86->get_key( ).
LOOP AT lo_row_86->get_values( ) into lo_row_87.
lo_row_88 = lo_row_87.
IF lo_row_88 IS NOT INITIAL.
lv_indicatorvaluestring = lo_row_88->get_value( ).
ENDIF.
ENDLOOP.
lv_indicatortitle = lo_row_86->get_title( ).
ENDIF.
ENDLOOP.
LOOP AT lo_sequence->get_additionalsequencetypes( ) into lo_row_89.
lo_row_90 = lo_row_89.
IF lo_row_90 IS NOT INITIAL.
lv_findingtype = lo_row_90->get_value( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDIF.
lo_malwarescandetails = lo_service->get_malwarescandetails( ).
IF lo_malwarescandetails IS NOT INITIAL.
LOOP AT lo_malwarescandetails->get_threats( ) into lo_row_91.
lo_row_92 = lo_row_91.
IF lo_row_92 IS NOT INITIAL.
lv_string = lo_row_92->get_name( ).
lv_string = lo_row_92->get_source( ).
LOOP AT lo_row_92->get_itempaths( ) into lo_row_93.
lo_row_94 = lo_row_93.
IF lo_row_94 IS NOT INITIAL.
lv_string = lo_row_94->get_nesteditempath( ).
lv_string = lo_row_94->get_hash( ).
ENDIF.
ENDLOOP.
ENDIF.
ENDLOOP.
ENDIF.
ENDIF.
lv_double = lo_row_1->get_severity( ).
lv_string = lo_row_1->get_title( ).
lv_findingtype = lo_row_1->get_type( ).
lv_string = lo_row_1->get_updatedat( ).
lv_string = lo_row_1->get_assocdattacksequencearn( ).
ENDIF.
ENDLOOP.
ENDIF.