NetworkConnection - Amazon Security Hub
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

NetworkConnection

Contains information about the network connection involved in an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Amazon Security Hub, you must have GuardDuty enabled. For more information, see GuardDuty Extended Threat Detection in the Amazon GuardDuty User Guide.

Contents

Direction

The direction in which the network traffic is flowing.

Type: String

Valid Values: INBOUND | OUTBOUND

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: