AWSGuardDuty - Classifier

Details

ID	`AWSGuardDuty - Classifier`
Type	classification
Version	-1
From Version	6.5.0
Default Incident Type	—
Feed	No

Key Type Map

Key	Incident Type
`AccessKey`	AWS Guard Duty IAM Finding
`Container`	AWS Guard Duty Malware Protection Finding
`ECSCluster`	AWS Guard Duty Malware Protection Finding
`EKSCluster`	AWS Guard Duty Kubernetes Finding
`Instance`	AWS Guard Duty EC2 Finding
`S3Bucket`	AWS Guard Duty S3 Finding

Source

classifier-AWSGuardDuty_-_Classifier.json

Download History Raw

{
    "description": "Classifies AWSGuardDuty incidents.",
    "feed": false,
    "id": "AWSGuardDuty - Classifier",
    "keyTypeMap": {
        "AccessKey": "AWS Guard Duty IAM Finding",
        "Container": "AWS Guard Duty Malware Protection Finding",
        "ECSCluster": "AWS Guard Duty Malware Protection Finding",
        "EKSCluster": "AWS Guard Duty Kubernetes Finding",
        "Instance": "AWS Guard Duty EC2 Finding",
        "S3Bucket": "AWS Guard Duty S3 Finding"
    },
    "name": "AWSGuardDuty - Classifier",
    "propagationLabels": [
        "all"
    ],
    "transformer": {
        "complex": {
            "accessor": "ResourceType",
            "filters": [],
            "root": "Resource",
            "transformers": []
        }
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.5.0"
}