detection.proto

syntax = "proto3";

option go_package = "github.com/alphasoc/protos/detection";

package detection;

message DetectionData {
  repeated Detection dets = 1;
}

message Node {
  string addr = 1;
}

message Threat {
  string threat_list_name = 1;
  repeated string threat_names = 2;
}

message Detection {
  string type = 1;
  string title = 2;
  enum Severity {
    NONE = 0;
    LOW = 1;
    MEDIUM = 2;
    HIGH = 3;
  }
  Severity sev = 3;
  string action_type = 4;
  string service_name = 5;
  string scout_name = 6;
  Node node = 7;
  repeated Threat threats = 8;
}