public class AbnormalProcessEventInfo extends AbstractModel
header, skipSign| Constructor and Description | 
|---|
| AbnormalProcessEventInfo() | 
| AbnormalProcessEventInfo(AbnormalProcessEventInfo source)NOTE: Any ambiguous key set via .set("AnyKey", "value") will be a shallow copy,
       and any explicit key, i.e Foo, set via .setFoo("value") will be a deep copy. | 
| Modifier and Type | Method and Description | 
|---|---|
| String | getBehavior()Get Action execution result. | 
| String | getClusterID()Get Cluster ID | 
| String | getClusterName()Get Cluster name | 
| String | getContainerId()Get Container ID, which is used for redirect. | 
| String | getContainerIsolateOperationSrc()Get Container isolation operation source
Note: This field may return null, indicating that no valid values can be obtained. | 
| String | getContainerName()Get Container name | 
| String | getContainerNetStatus()Get Network status
`NORMAL`:       Not isolated. | 
| String | getContainerNetSubStatus()Get Sub-status of the container
"AGENT_OFFLINE"       // The agent is offline. | 
| String | getContainerStatus()Get Container status
`RUNNING`: Running. | 
| String | getDescription()Get Event description | 
| Long | getEventCount()Get Number of events | 
| String | getEventType()Get Event type. | 
| String | getFoundTime()Get Generation time | 
| String | getHostID()Get uuid | 
| String | getHostIP()Get Private IP of the node | 
| String | getId()Get Unique event ID | 
| String | getImageId()Get Image ID, which is used for redirect. | 
| String | getImageName()Get Image name | 
| String | getLatestFoundTime()Get Last generation time | 
| String | getMatchAction()Get Action of the hit rule:
`RULE_MODE_RELEASE`: Allow. | 
| String | getMatchGroupName()Get Name of the hit policy. | 
| String | getMatchProcessPath()Get Information of the process that hits the rule | 
| String | getMatchRuleId()Get Hit policy ID | 
| String | getMatchRuleLevel()Get Level of the hit rule. | 
| String | getMatchRuleName()Get Name of the hit rule. | 
| String | getNodeID()Get Node ID | 
| String | getNodeName()Get Node name | 
| String | getNodeType()Get Node type. | 
| String | getNodeUniqueID()Get Cluster ID | 
| String | getPodIP()Get Pod IP | 
| String | getPodName()Get Pod name | 
| String | getProcessPath()Get Process directory | 
| String | getPublicIP()Get Node public IP | 
| Boolean | getRuleExist()Get Whether the rule exists | 
| String | getRuleId()Get Rule group ID | 
| String | getSolution()Get Event solution | 
| String | getStatus()Get Status. | 
| void | setBehavior(String Behavior)Set Action execution result. | 
| void | setClusterID(String ClusterID)Set Cluster ID | 
| void | setClusterName(String ClusterName)Set Cluster name | 
| void | setContainerId(String ContainerId)Set Container ID, which is used for redirect. | 
| void | setContainerIsolateOperationSrc(String ContainerIsolateOperationSrc)Set Container isolation operation source
Note: This field may return null, indicating that no valid values can be obtained. | 
| void | setContainerName(String ContainerName)Set Container name | 
| void | setContainerNetStatus(String ContainerNetStatus)Set Network status
`NORMAL`:       Not isolated. | 
| void | setContainerNetSubStatus(String ContainerNetSubStatus)Set Sub-status of the container
"AGENT_OFFLINE"       // The agent is offline. | 
| void | setContainerStatus(String ContainerStatus)Set Container status
`RUNNING`: Running. | 
| void | setDescription(String Description)Set Event description | 
| void | setEventCount(Long EventCount)Set Number of events | 
| void | setEventType(String EventType)Set Event type. | 
| void | setFoundTime(String FoundTime)Set Generation time | 
| void | setHostID(String HostID)Set uuid | 
| void | setHostIP(String HostIP)Set Private IP of the node | 
| void | setId(String Id)Set Unique event ID | 
| void | setImageId(String ImageId)Set Image ID, which is used for redirect. | 
| void | setImageName(String ImageName)Set Image name | 
| void | setLatestFoundTime(String LatestFoundTime)Set Last generation time | 
| void | setMatchAction(String MatchAction)Set Action of the hit rule:
`RULE_MODE_RELEASE`: Allow. | 
| void | setMatchGroupName(String MatchGroupName)Set Name of the hit policy. | 
| void | setMatchProcessPath(String MatchProcessPath)Set Information of the process that hits the rule | 
| void | setMatchRuleId(String MatchRuleId)Set Hit policy ID | 
| void | setMatchRuleLevel(String MatchRuleLevel)Set Level of the hit rule. | 
| void | setMatchRuleName(String MatchRuleName)Set Name of the hit rule. | 
| void | setNodeID(String NodeID)Set Node ID | 
| void | setNodeName(String NodeName)Set Node name | 
| void | setNodeType(String NodeType)Set Node type. | 
| void | setNodeUniqueID(String NodeUniqueID)Set Cluster ID | 
| void | setPodIP(String PodIP)Set Pod IP | 
| void | setPodName(String PodName)Set Pod name | 
| void | setProcessPath(String ProcessPath)Set Process directory | 
| void | setPublicIP(String PublicIP)Set Node public IP | 
| void | setRuleExist(Boolean RuleExist)Set Whether the rule exists | 
| void | setRuleId(String RuleId)Set Rule group ID | 
| void | setSolution(String Solution)Set Event solution | 
| void | setStatus(String Status)Set Status. | 
| void | toMap(HashMap<String,String> map,
     String prefix)Internal implementation, normal users should not use it. | 
any, fromJsonString, getBinaryParams, GetHeader, getMultipartRequestParams, getSkipSign, set, SetHeader, setParamArrayObj, setParamArraySimple, setParamObj, setParamSimple, setSkipSign, toJsonStringpublic AbnormalProcessEventInfo()
public AbnormalProcessEventInfo(AbnormalProcessEventInfo source)
public String getProcessPath()
public void setProcessPath(String ProcessPath)
ProcessPath - Process directorypublic String getEventType()
public void setEventType(String EventType)
EventType - Event type. `MALICE_PROCESS_START`: Malicious process startup.public String getMatchRuleName()
public void setMatchRuleName(String MatchRuleName)
MatchRuleName - Name of the hit rule. Valid values: `PROXY_TOOL` (proxy); `TRANSFER_CONTROL` (lateral movement); `ATTACK_CMD` (malicious command); `REVERSE_SHELL` (reverse shell); `FILELESS` (fileless execution); `RISK_CMD` (high-risk command); `ABNORMAL_CHILD_PROC` (unusual start found in the child process of the sensitive service); `USER_DEFINED_RULE` (custom rule).public String getFoundTime()
public void setFoundTime(String FoundTime)
FoundTime - Generation timepublic String getContainerName()
public void setContainerName(String ContainerName)
ContainerName - Container namepublic String getImageName()
public void setImageName(String ImageName)
ImageName - Image namepublic String getBehavior()
public void setBehavior(String Behavior)
Behavior - Action execution result. `BEHAVIOR_NONE`: None.
    `BEHAVIOR_ALERT`: Alert.
    `BEHAVIOR_RELEASE`: Allow.
    `BEHAVIOR_HOLDUP_FAILED`: Failed to block.
    `BEHAVIOR_HOLDUP_SUCCESSED`: Blocked.public String getStatus()
public void setStatus(String Status)
Status - Status. `EVENT_UNDEAL`: Pending.
    `EVENT_DEALED`: Processed.
    `EVENT_INGNORE`: Ignored.public String getId()
public void setId(String Id)
Id - Unique event IDpublic String getImageId()
public void setImageId(String ImageId)
ImageId - Image ID, which is used for redirect.public String getContainerId()
public void setContainerId(String ContainerId)
ContainerId - Container ID, which is used for redirect.public String getSolution()
public void setSolution(String Solution)
Solution - Event solutionpublic String getDescription()
public void setDescription(String Description)
Description - Event descriptionpublic String getMatchRuleId()
public void setMatchRuleId(String MatchRuleId)
MatchRuleId - Hit policy IDpublic String getMatchAction()
public void setMatchAction(String MatchAction)
MatchAction - Action of the hit rule:
`RULE_MODE_RELEASE`: Allow.
`RULE_MODE_ALERT`: Alert.
`RULE_MODE_HOLDUP`: Block.public String getMatchProcessPath()
public void setMatchProcessPath(String MatchProcessPath)
MatchProcessPath - Information of the process that hits the rulepublic Boolean getRuleExist()
public void setRuleExist(Boolean RuleExist)
RuleExist - Whether the rule existspublic Long getEventCount()
public void setEventCount(Long EventCount)
EventCount - Number of eventspublic String getLatestFoundTime()
public void setLatestFoundTime(String LatestFoundTime)
LatestFoundTime - Last generation timepublic String getRuleId()
public void setRuleId(String RuleId)
RuleId - Rule group IDpublic String getMatchGroupName()
public void setMatchGroupName(String MatchGroupName)
MatchGroupName - Name of the hit policy. Valid values: `SYSTEM_DEFINED_RULE` (preset policy); name of the custom policy.public String getMatchRuleLevel()
public void setMatchRuleLevel(String MatchRuleLevel)
MatchRuleLevel - Level of the hit rule. Valid values: `HIGH` (high); `MIDDLE` (medium); `LOW` (low).public String getContainerNetStatus()
public void setContainerNetStatus(String ContainerNetStatus)
ContainerNetStatus - Network status
`NORMAL`:       Not isolated.
`ISOLATED`:             Isolated.
`ISOLATING`:            Isolating.
`ISOLATE_FAILED`:       Isolation failed.
`RESTORING`: Recovering.
`RESTORE_FAILED`: Recovery failed.
Note: This field may return null, indicating that no valid values can be obtained.public String getContainerNetSubStatus()
public void setContainerNetSubStatus(String ContainerNetSubStatus)
ContainerNetSubStatus - Sub-status of the container
"AGENT_OFFLINE"       // The agent is offline.
"NODE_DESTROYED"      // The node is terminated.
"CONTAINER_EXITED"    // The container exited.
"CONTAINER_DESTROYED" // The container was terminated.
"SHARED_HOST"         // The container shares the network with the server.
"RESOURCE_LIMIT"      // The number of resources to be isolated exceeds the limit.
"UNKNOW"              // The reason is unknown.
Note: This field may return null, indicating that no valid values can be obtained.public String getContainerIsolateOperationSrc()
public void setContainerIsolateOperationSrc(String ContainerIsolateOperationSrc)
ContainerIsolateOperationSrc - Container isolation operation source
Note: This field may return null, indicating that no valid values can be obtained.public String getContainerStatus()
public void setContainerStatus(String ContainerStatus)
ContainerStatus - Container status
`RUNNING`: Running.
`PAUSED`: Paused.
`STOPPED`: Stopped.
`CREATED`: Created.
`DESTROYED`: Terminated.
`RESTARTING`: Restarting.
`REMOVING`: Removing.public String getClusterID()
public void setClusterID(String ClusterID)
ClusterID - Cluster IDpublic String getNodeType()
public void setNodeType(String NodeType)
NodeType - Node type. Values: `NORMAL` (general node), `SUPER` (super node).public String getPodName()
public void setPodName(String PodName)
PodName - Pod namepublic String getPodIP()
public void setPodIP(String PodIP)
PodIP - Pod IPpublic String getNodeUniqueID()
public void setNodeUniqueID(String NodeUniqueID)
NodeUniqueID - Cluster IDpublic String getPublicIP()
public void setPublicIP(String PublicIP)
PublicIP - Node public IPpublic String getNodeName()
public void setNodeName(String NodeName)
NodeName - Node namepublic String getNodeID()
public void setNodeID(String NodeID)
NodeID - Node IDpublic String getHostID()
public void setHostID(String HostID)
HostID - uuidpublic String getHostIP()
public void setHostIP(String HostIP)
HostIP - Private IP of the nodepublic String getClusterName()
public void setClusterName(String ClusterName)
ClusterName - Cluster nameCopyright © 2025. All rights reserved.