Returns all available custom detection rules in GuardDuty¶

Description¶

Returns all available custom detection rules in GuardDuty. You can filter the results by data source, severity, tactic, technique, and service.

Usage¶

guardduty_list_custom_detection_rules(MaxResults, NextToken, Filters)

Arguments¶

MaxResults

The maximum number of results to return in a single page. Minimum value of 1, maximum value of 100.

NextToken

A pagination token from a previous response. Use this token to retrieve the next page of results.

Filters

A list of filter criteria to apply when listing custom detection rules.

Value¶

A list with the following syntax:

list(
  Rules = list(
    list(
      RuleId = "string",
      Arn = "string",
      Name = "string",
      Description = "string",
      Severity = "CRITICAL"|"HIGH"|"MEDIUM"|"LOW",
      DataSource = "CloudTrailManagementEvent",
      Tactic = "string",
      Technique = "string",
      Service = "string",
      Language = "SQL",
      Schema = "CloudTrail",
      CreatedAt = as.POSIXct(
        "2015-01-01"
      ),
      UpdatedAt = as.POSIXct(
        "2015-01-01"
      )
    )
  ),
  NextToken = "string"
)

Request syntax¶

svc$list_custom_detection_rules(
  MaxResults = 123,
  NextToken = "string",
  Filters = list(
    list(
      Name = "name"|"description"|"dataSource"|"severity"|"tactic"|"technique"|"service",
      Values = list(
        "string"
      ),
      Condition = "EQUALS"|"CONTAINS"
    )
  )
)