Returns details for a custom detection rule in GuardDuty, including its detection logic¶

Description¶

Returns details for a custom detection rule in GuardDuty, including its detection logic.

Usage¶

guardduty_get_custom_detection_rule(RuleId)

Arguments¶

RuleId

[required] The unique identifier for the custom detection rule.

Value¶

A list with the following syntax:

list(
  Rule = list(
    RuleId = "string",
    Arn = "string",
    Name = "string",
    Description = "string",
    Severity = "CRITICAL"|"HIGH"|"MEDIUM"|"LOW",
    DataSource = "CloudTrailManagementEvent",
    Tactic = "string",
    Technique = "string",
    Service = "string",
    Definition = list(
      Expression = "string"
    ),
    Language = "SQL",
    Schema = "CloudTrail",
    CreatedAt = as.POSIXct(
      "2015-01-01"
    ),
    UpdatedAt = as.POSIXct(
      "2015-01-01"
    )
  )
)

Request syntax¶

svc$get_custom_detection_rule(
  RuleId = "string"
)