- JSON representation
- AttackPath
- AttackPathNode
- PathNodeAssociatedFinding
- AttackStepNode
- NodeType
- AttackPathEdge
Response message for listing the attack paths for a given simulation or valued resource.
JSON representation |
---|
{
"attackPaths"
:
[
{
object (
|
Fields | |
---|---|
attackPaths[]
|
The attack paths that the attack path simulation identified. |
nextPageToken
|
Token to retrieve the next page of results, or empty if there are no more results. |
AttackPath
A path that an attacker could take to reach an exposed resource.
JSON representation |
---|
{ "name" : string , "pathNodes" : [ { object ( |
Fields | |
---|---|
name
|
The attack path name, for example, |
pathNodes[]
|
A list of nodes that exist in this attack path. |
edges[]
|
A list of the edges between nodes in this attack path. |
AttackPathNode
Represents one point that an attacker passes through in this attack path.
JSON representation |
---|
{ "resource" : string , "resourceType" : string , "displayName" : string , "associatedFindings" : [ { object ( |
Fields | |
---|---|
resource
|
The name of the resource at this point in the attack path. The format of the name follows the Cloud Asset Inventory resource name format |
resourceType
|
|
displayName
|
Human-readable name of this resource. |
associatedFindings[]
|
The findings associated with this node in the attack path. |
uuid
|
Unique id of the attack path node. |
attackSteps[]
|
A list of attack step nodes that exist in this attack path node. |
PathNodeAssociatedFinding
A finding that is associated with this node in the attack path.
JSON representation |
---|
{ "canonicalFinding" : string , "findingCategory" : string , "name" : string } |
Fields | |
---|---|
canonicalFinding
|
Canonical name of the associated findings. Example: |
findingCategory
|
The additional taxonomy group within findings from a given source. |
name
|
Full resource name of the finding. |
AttackStepNode
Detailed steps the attack can take between path nodes.
JSON representation |
---|
{
"uuid"
:
string
,
"type"
:
enum (
|
Fields | |
---|---|
uuid
|
Unique ID for one Node |
type
|
Attack step type. Can be either AND, OR or DEFENSE |
displayName
|
User friendly name of the attack step |
labels
|
Attack step labels for metadata An object containing a list of |
description
|
Attack step description |
NodeType
The type of the incoming attack step node.
Enums | |
---|---|
NODE_TYPE_UNSPECIFIED
|
Type not specified |
NODE_TYPE_AND
|
Incoming edge joined with AND |
NODE_TYPE_OR
|
Incoming edge joined with OR |
NODE_TYPE_DEFENSE
|
Incoming edge is defense |
NODE_TYPE_ATTACKER
|
Incoming edge is attacker |
AttackPathEdge
Represents a connection between a source node and a destination node in this attack path.
JSON representation |
---|
{ "source" : string , "destination" : string } |
Fields | |
---|---|
source
|
The attack node uuid of the source node. |
destination
|
The attack node uuid of the destination node. |