Class SecurityMonitoringRuleSequenceDetectionStep

Step definition for sequence detection containing the step name, condition, and evaluation window.

Hierarchy

  • SecurityMonitoringRuleSequenceDetectionStep

Constructors

Properties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any
condition?: string

Condition referencing rule queries (e.g., a > 0).

A time window is specified to match when at least one of the cases matches true. This is a sliding window and evaluates in real time. For third party detection method, this field is not used.

name?: string

Unique name identifying the step.

Generated using TypeDoc