Skip to content

The Resource Details object describes details about resources that were affected by the activity/event.

  • Extends: _resource

data_classification

The Data Classification object includes information about data classification levels and data category types.

data_classifications

A list of Data Classification objects, that include information about data classification levels and data category types, indentified by a classifier.

hostname

  • Type: hostname_t
  • Requirement: recommended

The fully qualified name of the resource.

ip

  • Type: ip_t
  • Requirement: recommended

The IP address of the resource, in either IPv4 or IPv6 format.

name

  • Type: string_t
  • Requirement: recommended

The name of the resource.

owner

  • Type: user
  • Requirement: recommended

The identity of the service or user account that owns the resource.

uid

  • Type: string_t
  • Requirement: recommended

The unique identifier of the resource.

agent_list

  • Type: agent
  • Requirement: optional

A list of agent objects associated with a device, endpoint, or resource.

cloud_partition

  • Type: string_t
  • Requirement: optional

The canonical cloud partition name to which the region is assigned (e.g. AWS Partitions: aws, aws-cn, aws-us-gov).

criticality

  • Type: string_t
  • Requirement: optional

The criticality of the resource as defined by the event source.

data

  • Type: json_t
  • Requirement: optional

Additional data describing the resource.

group

  • Type: group
  • Requirement: optional

The name of the related resource group.

labels

  • Type: string_t
  • Requirement: optional

The list of labels associated to the resource.

namespace

  • Type: string_t
  • Requirement: optional

The namespace is useful when similar entities exist that you need to keep separate.

region

  • Type: string_t
  • Requirement: optional

The cloud region of the resource.

tags

The list of tags; {key:value} pairs associated to the resource.

type

  • Type: string_t
  • Requirement: optional

The resource type as defined by the event source.

version

  • Type: string_t
  • Requirement: optional

The version of the resource. For example 1.2.3.

At least one of: name, uid