NetworkGeoLocation
Contains information about the location of a network endpoint involved in an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Amazon Security Hub, you must have GuardDuty enabled. For more information, see GuardDuty Extended Threat Detection in the Amazon GuardDuty User Guide.
Contents
- City
-
The name of the city.
Type: String
Pattern:
.*\S.*Required: No
- Country
-
The name of the country.
Type: String
Pattern:
.*\S.*Required: No
- Lat
-
The latitude information of the endpoint location.
Type: Double
Required: No
- Lon
-
The longitude information of the endpoint location.
Type: Double
Required: No
See Also
For more information about using this API in one of the language-specific Amazon SDKs, see the following: