Evidence - Amazon GuardDuty
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 9, 2026.

Evidence

Contains information about the reason that the finding was generated.

Contents

threatIntelligenceDetails

A list of threat intelligence details related to the evidence.

Type: Array of ThreatIntelligenceDetail objects

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: