public class AttackSourceEvent extends AbstractModel
header, skipSign
Constructor and Description |
---|
AttackSourceEvent() |
AttackSourceEvent(AttackSourceEvent source)
NOTE: Any ambiguous key set via .set("AnyKey", "value") will be a shallow copy,
and any explicit key, i.e Foo, set via .setFoo("value") will be a deep copy.
|
Modifier and Type | Method and Description |
---|---|
String |
getContent()
Get [Virus scanning] Virus name: VirusName, file name: FileName, file path: FilePath, file size: FileSize, file MD5: MD5, first detection time: CreateTime, last detection time: LatestScanTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
[Abnormal log-in] Source IP: SrcIp, location: Location, log-in username: UserName, log-in time: LoginTime
[Password cracking] Source IP: SrcIp, location: City and Country, protocol: Protocol, log-in username: UserName, port: Port, attempt count: Count, first attack time: CreateTime, last attack time: ModifyTime
[Malicious request] Malicious request domain name: Url, process: ProcessName, MD5: ProcessMd5, PID: Pid, request count: AccessCount, last request time: MergeTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
[High-risk command] Hit rule name: RuleName, rule category: RuleCategory, command content: BashCmd, data source: DetectBy, Log-in user: User, PID: Pid, occurrence time: CreateTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
|
String |
getCreatedTime()
Get Intrusion time
|
Long |
getEventType()
Get Event type.
|
Long |
getId()
Get Event ID
|
Long |
getLevel()
Get Unified event risk level.
|
String |
getLevelZh()
Get Risk level string in Chinese
|
String |
getUuid()
Get Host UUID
|
void |
setContent(String Content)
Set [Virus scanning] Virus name: VirusName, file name: FileName, file path: FilePath, file size: FileSize, file MD5: MD5, first detection time: CreateTime, last detection time: LatestScanTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
[Abnormal log-in] Source IP: SrcIp, location: Location, log-in username: UserName, log-in time: LoginTime
[Password cracking] Source IP: SrcIp, location: City and Country, protocol: Protocol, log-in username: UserName, port: Port, attempt count: Count, first attack time: CreateTime, last attack time: ModifyTime
[Malicious request] Malicious request domain name: Url, process: ProcessName, MD5: ProcessMd5, PID: Pid, request count: AccessCount, last request time: MergeTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
[High-risk command] Hit rule name: RuleName, rule category: RuleCategory, command content: BashCmd, data source: DetectBy, Log-in user: User, PID: Pid, occurrence time: CreateTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
|
void |
setCreatedTime(String CreatedTime)
Set Intrusion time
|
void |
setEventType(Long EventType)
Set Event type.
|
void |
setId(Long Id)
Set Event ID
|
void |
setLevel(Long Level)
Set Unified event risk level.
|
void |
setLevelZh(String LevelZh)
Set Risk level string in Chinese
|
void |
setUuid(String Uuid)
Set Host UUID
|
void |
toMap(HashMap<String,String> map,
String prefix)
Internal implementation, normal users should not use it.
|
any, fromJsonString, getBinaryParams, GetHeader, getMultipartRequestParams, getSkipSign, set, SetHeader, setParamArrayObj, setParamArraySimple, setParamObj, setParamSimple, setSkipSign, toJsonString
public AttackSourceEvent()
public AttackSourceEvent(AttackSourceEvent source)
public Long getEventType()
public void setEventType(Long EventType)
EventType
- Event type. 0: virus scanning; 1: abnormal log-in; 2: password cracking; 3: malicious request; 4: high-risk command.public String getContent()
public void setContent(String Content)
Content
- [Virus scanning] Virus name: VirusName, file name: FileName, file path: FilePath, file size: FileSize, file MD5: MD5, first detection time: CreateTime, last detection time: LatestScanTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
[Abnormal log-in] Source IP: SrcIp, location: Location, log-in username: UserName, log-in time: LoginTime
[Password cracking] Source IP: SrcIp, location: City and Country, protocol: Protocol, log-in username: UserName, port: Port, attempt count: Count, first attack time: CreateTime, last attack time: ModifyTime
[Malicious request] Malicious request domain name: Url, process: ProcessName, MD5: ProcessMd5, PID: Pid, request count: AccessCount, last request time: MergeTime, severity description: HarmDescribe, fixing suggestion: SuggestScheme
[High-risk command] Hit rule name: RuleName, rule category: RuleCategory, command content: BashCmd, data source: DetectBy, Log-in user: User, PID: Pid, occurrence time: CreateTime, severity description: HarmDescribe, fixing suggestion: SuggestSchemepublic String getCreatedTime()
public void setCreatedTime(String CreatedTime)
CreatedTime
- Intrusion timepublic Long getLevel()
public void setLevel(Long Level)
Level
- Unified event risk level. 0: prompt; 1: low; 2: medium; 3: high; 4: critical.public String getLevelZh()
public void setLevelZh(String LevelZh)
LevelZh
- Risk level string in Chinesepublic Long getId()
public void setId(Long Id)
Id
- Event IDpublic String getUuid()
public void setUuid(String Uuid)
Uuid
- Host UUIDCopyright © 2024. All rights reserved.