MalwareScanDetails - Amazon GuardDuty
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 2, 2026.

MalwareScanDetails

Information about the malware scan that generated a GuardDuty finding.

Contents

scanCategory

The category of the malware scan.

Type: String

Valid Values: FULL_SCAN | INCREMENTAL_SCAN

Required: No

scanConfiguration

The configuration settings used for the malware scan.

Type: MalwareProtectionFindingsScanConfiguration object

Required: No

scanId

The unique identifier for the malware scan.

Type: String

Required: No

scanType

The type of malware scan performed.

Type: String

Valid Values: BACKUP_INITIATED | ON_DEMAND | GUARDDUTY_INITIATED

Required: No

threats

Information about the detected threats associated with the generated GuardDuty finding.

Type: Array of Threat objects

Required: No

uniqueThreatCount

The number of unique malware threats detected during the scan.

Type: Integer

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: