public class AbnormalProcessEventDescription extends AbstractModel
header, skipSign| Constructor and Description | 
|---|
AbnormalProcessEventDescription()  | 
AbnormalProcessEventDescription(AbnormalProcessEventDescription source)
NOTE: Any ambiguous key set via .set("AnyKey", "value") will be a shallow copy,
       and any explicit key, i.e Foo, set via .setFoo("value") will be a deep copy. 
 | 
| Modifier and Type | Method and Description | 
|---|---|
String | 
getDescription()
Get Event rule 
 | 
String | 
getGroupName()
Get Name of the hit policy. 
 | 
AbnormalProcessChildRuleInfo | 
getMatchRule()
Get Details of the hit rule 
 | 
String | 
getOperationTime()
Get Last processing time of the event
Note: This field may return null, indicating that no valid values can be obtained. 
 | 
String | 
getRemark()
Get Event remarks
Note: This field may return null, indicating that no valid values can be obtained. 
 | 
String | 
getRuleId()
Get ID of the hit rule 
 | 
String | 
getRuleName()
Get Name of the hit rule. 
 | 
String | 
getSolution()
Get Solution 
 | 
void | 
setDescription(String Description)
Set Event rule 
 | 
void | 
setGroupName(String GroupName)
Set Name of the hit policy. 
 | 
void | 
setMatchRule(AbnormalProcessChildRuleInfo MatchRule)
Set Details of the hit rule 
 | 
void | 
setOperationTime(String OperationTime)
Set Last processing time of the event
Note: This field may return null, indicating that no valid values can be obtained. 
 | 
void | 
setRemark(String Remark)
Set Event remarks
Note: This field may return null, indicating that no valid values can be obtained. 
 | 
void | 
setRuleId(String RuleId)
Set ID of the hit rule 
 | 
void | 
setRuleName(String RuleName)
Set Name of the hit rule. 
 | 
void | 
setSolution(String Solution)
Set Solution 
 | 
void | 
toMap(HashMap<String,String> map,
     String prefix)
Internal implementation, normal users should not use it. 
 | 
any, fromJsonString, getBinaryParams, GetHeader, getMultipartRequestParams, getSkipSign, isStream, set, SetHeader, setParamArrayObj, setParamArraySimple, setParamObj, setParamSimple, setSkipSign, toJsonStringpublic AbnormalProcessEventDescription()
public AbnormalProcessEventDescription(AbnormalProcessEventDescription source)
public String getDescription()
public void setDescription(String Description)
Description - Event rulepublic String getSolution()
public void setSolution(String Solution)
Solution - Solutionpublic String getRemark()
public void setRemark(String Remark)
Remark - Event remarks
Note: This field may return null, indicating that no valid values can be obtained.public AbnormalProcessChildRuleInfo getMatchRule()
public void setMatchRule(AbnormalProcessChildRuleInfo MatchRule)
MatchRule - Details of the hit rulepublic String getRuleName()
public void setRuleName(String RuleName)
RuleName - Name of the hit rule. Valid values: `PROXY_TOOL` (proxy); `TRANSFER_CONTROL` (lateral movement); `ATTACK_CMD` (malicious command); `REVERSE_SHELL` (reverse shell); `FILELESS` (fileless execution); `RISK_CMD` (high-risk command); `ABNORMAL_CHILD_PROC` (unusual start found in the child process of the sensitive service); `USER_DEFINED_RULE` (custom rule).public String getRuleId()
public void setRuleId(String RuleId)
RuleId - ID of the hit rulepublic String getOperationTime()
public void setOperationTime(String OperationTime)
OperationTime - Last processing time of the event
Note: This field may return null, indicating that no valid values can be obtained.public String getGroupName()
public void setGroupName(String GroupName)
GroupName - Name of the hit policy. Valid values: `SYSTEM_DEFINED_RULE` (preset policy); name of the custom policy.
Note: This field may return null, indicating that no valid values can be obtained.Copyright © 2025. All rights reserved.