Unique identifier for principal actor
Name of principal actor
Type of principal actor
Classification status of the sighting
Compartment OCID where the impacted resource is created
Confidence level that the sighting is not a false positive
Unique identifier of the detector rule that was triggered
Unique identifier for sighting
Problem ID associated with sighting
List of regions involved in the sighting
Severity of the sighting
Score for the sighting Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.
Type of sighting
Display name of the sighting type
Name of the MITRE ATT@CK framework tactic
Name of the MITRE ATT@CK framework technique
Time the activities were first detected. Format defined by RFC3339.
Time the activities were first performed. Format defined by RFC3339.
Time the activities were last detected. Format defined by RFC3339.
Time the activities were last performed. Format defined by RFC3339.
Sighting summary definition.