events

type Cloud struct {
	Account struct {
		Type   string `json:"type,omitempty"`
		TypeID int    `json:"type_id,omitempty"`
		UID    string `json:"uid"`
	} `json:"account"`
	CloudPartition string `json:"cloud_partition,omitempty"`
	Provider       string `json:"provider"`
	Region         string `json:"region"`
}

type FindingInfo struct {
	Analytic *struct {
		Type   string `json:"type"`
		TypeID int    `json:"type_id"`
		UID    string `json:"uid"`
	} `json:"analytic,omitempty"`
	CreatedTime     int64    `json:"created_time"`
	CreatedTimeDt   string   `json:"created_time_dt"`
	Desc            string   `json:"desc"`
	FirstSeenTime   int64    `json:"first_seen_time"`
	FirstSeenTimeDt string   `json:"first_seen_time_dt"`
	LastSeenTime    int64    `json:"last_seen_time"`
	LastSeenTimeDt  string   `json:"last_seen_time_dt"`
	ModifiedTime    int64    `json:"modified_time"`
	ModifiedTimeDt  string   `json:"modified_time_dt"`
	Product         *Product `json:"product,omitempty"`
	Title           string   `json:"title"`
	Types           []string `json:"types"`
	UID             string   `json:"uid"`
	UIDalt          string   `json:"uid_alt,omitempty"`
}

type Metadata struct {
	Product  MetadataProduct `json:"product"`
	Profiles []string        `json:"profiles"`
	UID      string          `json:"uid"`
	Version  string          `json:"version"`
}

type MetadataProduct struct {
	Feature *struct {
		Name string `json:"name"`
	} `json:"feature,omitempty"`
	Name       string `json:"name"`
	UID        string `json:"uid"`
	VendorName string `json:"vendor_name"`
}

type OCSFCompliance struct {
	Assessments []struct {
		Desc          string `json:"desc"`
		MeetsCriteria bool   `json:"meets_criteria"`
		Name          string `json:"name"`
	} `json:"assessments,omitempty"`
	Control           string   `json:"control,omitempty"`
	ControlParameters []any    `json:"control_parameters,omitempty"`
	Requirements      []string `json:"requirements,omitempty"`
	Standards         []string `json:"standards,omitempty"`
	Status            string   `json:"status,omitempty"`
	StatusID          int      `json:"status_id,omitempty"`
}

type OCSFResource struct {
	CloudPartition string         `json:"cloud_partition,omitempty"`
	Data           map[string]any `json:"data,omitempty"`
	Name           string         `json:"name,omitempty"`
	Owner          *ResourceOwner `json:"owner,omitempty"`
	Region         string         `json:"region"`
	Tags           []ResourceTag  `json:"tags,omitempty"`
	Type           string         `json:"type"`
	UID            string         `json:"uid"`
}

type Product struct {
	Feature *struct {
		Name string `json:"name"`
	} `json:"feature,omitempty"`
	Name       string `json:"name,omitempty"`
	UID        string `json:"uid,omitempty"`
	VendorName string `json:"vendor_name,omitempty"`
}

type Remediation struct {
	Desc       string   `json:"desc,omitempty"`
	References []string `json:"references,omitempty"`
}

type ResourceOwner struct {
	Account struct {
		Type   string `json:"type,omitempty"`
		TypeID int    `json:"type_id,omitempty"`
		UID    string `json:"uid"`
	} `json:"account,omitempty"`
}

type ResourceTag struct {
	Name  string `json:"name"`
	Value string `json:"value"`
}

type SecurityHubEvent interface {
	GetEventID() string
	GetDetailType() string
}

type SecurityHubEventInput struct {
	EventID    string
	DetailType string
	Detail     json.RawMessage
}

type SecurityHubV2Finding struct {
	ActivityID   int             `json:"activity_id"`
	ActivityName string          `json:"activity_name"`
	CategoryName string          `json:"category_name"`
	CategoryUID  int             `json:"category_uid"`
	ClassName    string          `json:"class_name"`
	ClassUID     int             `json:"class_uid"`
	Cloud        Cloud           `json:"cloud"`
	Compliance   *OCSFCompliance `json:"compliance,omitempty"`
	FindingInfo  FindingInfo     `json:"finding_info"`
	Metadata     Metadata        `json:"metadata"`
	Remediation  *Remediation    `json:"remediation,omitempty"`
	Resources    []OCSFResource  `json:"resources"`
	Severity     string          `json:"severity"`
	SeverityID   int             `json:"severity_id"`
	Status       string          `json:"status"`
	StatusID     int             `json:"status_id"`
	Time         int64           `json:"time"`
	TimeDt       string          `json:"time_dt"`
	TypeName     string          `json:"type_name"`
	TypeUID      int             `json:"type_uid"`
}