public class AbnormalProcessEventInfo extends AbstractModel
header, skipSign
Constructor and Description |
---|
AbnormalProcessEventInfo() |
AbnormalProcessEventInfo(AbnormalProcessEventInfo source)
NOTE: Any ambiguous key set via .set("AnyKey", "value") will be a shallow copy,
and any explicit key, i.e Foo, set via .setFoo("value") will be a deep copy.
|
Modifier and Type | Method and Description |
---|---|
String |
getBehavior()
Get Action execution result.
|
String |
getClusterID()
Get Cluster ID
|
String |
getClusterName()
Get Cluster name
|
String |
getContainerId()
Get Container ID, which is used for redirect.
|
String |
getContainerIsolateOperationSrc()
Get Container isolation operation source
Note: This field may return null, indicating that no valid values can be obtained.
|
String |
getContainerName()
Get Container name
|
String |
getContainerNetStatus()
Get Network status
`NORMAL`: Not isolated.
|
String |
getContainerNetSubStatus()
Get Sub-status of the container
"AGENT_OFFLINE" // The agent is offline.
|
String |
getContainerStatus()
Get Container status
`RUNNING`: Running.
|
String |
getDescription()
Get Event description
|
Long |
getEventCount()
Get Number of events
|
String |
getEventType()
Get Event type.
|
String |
getFoundTime()
Get Generation time
|
String |
getHostID()
Get uuid
|
String |
getHostIP()
Get Private IP of the node
|
String |
getId()
Get Unique event ID
|
String |
getImageId()
Get Image ID, which is used for redirect.
|
String |
getImageName()
Get Image name
|
String |
getLatestFoundTime()
Get Last generation time
|
String |
getMatchAction()
Get Action of the hit rule:
`RULE_MODE_RELEASE`: Allow.
|
String |
getMatchGroupName()
Get Name of the hit policy.
|
String |
getMatchProcessPath()
Get Information of the process that hits the rule
|
String |
getMatchRuleId()
Get Hit policy ID
|
String |
getMatchRuleLevel()
Get Level of the hit rule.
|
String |
getMatchRuleName()
Get Name of the hit rule.
|
String |
getNodeID()
Get Node ID
|
String |
getNodeName()
Get Node name
|
String |
getNodeType()
Get Node type.
|
String |
getNodeUniqueID()
Get Cluster ID
|
String |
getPodIP()
Get Pod IP
|
String |
getPodName()
Get Pod name
|
String |
getProcessPath()
Get Process directory
|
String |
getPublicIP()
Get Node public IP
|
Boolean |
getRuleExist()
Get Whether the rule exists
|
String |
getRuleId()
Get Rule group ID
|
String |
getSolution()
Get Event solution
|
String |
getStatus()
Get Status.
|
void |
setBehavior(String Behavior)
Set Action execution result.
|
void |
setClusterID(String ClusterID)
Set Cluster ID
|
void |
setClusterName(String ClusterName)
Set Cluster name
|
void |
setContainerId(String ContainerId)
Set Container ID, which is used for redirect.
|
void |
setContainerIsolateOperationSrc(String ContainerIsolateOperationSrc)
Set Container isolation operation source
Note: This field may return null, indicating that no valid values can be obtained.
|
void |
setContainerName(String ContainerName)
Set Container name
|
void |
setContainerNetStatus(String ContainerNetStatus)
Set Network status
`NORMAL`: Not isolated.
|
void |
setContainerNetSubStatus(String ContainerNetSubStatus)
Set Sub-status of the container
"AGENT_OFFLINE" // The agent is offline.
|
void |
setContainerStatus(String ContainerStatus)
Set Container status
`RUNNING`: Running.
|
void |
setDescription(String Description)
Set Event description
|
void |
setEventCount(Long EventCount)
Set Number of events
|
void |
setEventType(String EventType)
Set Event type.
|
void |
setFoundTime(String FoundTime)
Set Generation time
|
void |
setHostID(String HostID)
Set uuid
|
void |
setHostIP(String HostIP)
Set Private IP of the node
|
void |
setId(String Id)
Set Unique event ID
|
void |
setImageId(String ImageId)
Set Image ID, which is used for redirect.
|
void |
setImageName(String ImageName)
Set Image name
|
void |
setLatestFoundTime(String LatestFoundTime)
Set Last generation time
|
void |
setMatchAction(String MatchAction)
Set Action of the hit rule:
`RULE_MODE_RELEASE`: Allow.
|
void |
setMatchGroupName(String MatchGroupName)
Set Name of the hit policy.
|
void |
setMatchProcessPath(String MatchProcessPath)
Set Information of the process that hits the rule
|
void |
setMatchRuleId(String MatchRuleId)
Set Hit policy ID
|
void |
setMatchRuleLevel(String MatchRuleLevel)
Set Level of the hit rule.
|
void |
setMatchRuleName(String MatchRuleName)
Set Name of the hit rule.
|
void |
setNodeID(String NodeID)
Set Node ID
|
void |
setNodeName(String NodeName)
Set Node name
|
void |
setNodeType(String NodeType)
Set Node type.
|
void |
setNodeUniqueID(String NodeUniqueID)
Set Cluster ID
|
void |
setPodIP(String PodIP)
Set Pod IP
|
void |
setPodName(String PodName)
Set Pod name
|
void |
setProcessPath(String ProcessPath)
Set Process directory
|
void |
setPublicIP(String PublicIP)
Set Node public IP
|
void |
setRuleExist(Boolean RuleExist)
Set Whether the rule exists
|
void |
setRuleId(String RuleId)
Set Rule group ID
|
void |
setSolution(String Solution)
Set Event solution
|
void |
setStatus(String Status)
Set Status.
|
void |
toMap(HashMap<String,String> map,
String prefix)
Internal implementation, normal users should not use it.
|
any, fromJsonString, getBinaryParams, GetHeader, getMultipartRequestParams, getSkipSign, set, SetHeader, setParamArrayObj, setParamArraySimple, setParamObj, setParamSimple, setSkipSign, toJsonString
public AbnormalProcessEventInfo()
public AbnormalProcessEventInfo(AbnormalProcessEventInfo source)
public String getProcessPath()
public void setProcessPath(String ProcessPath)
ProcessPath
- Process directorypublic String getEventType()
public void setEventType(String EventType)
EventType
- Event type. `MALICE_PROCESS_START`: Malicious process startup.public String getMatchRuleName()
public void setMatchRuleName(String MatchRuleName)
MatchRuleName
- Name of the hit rule. Valid values: `PROXY_TOOL` (proxy); `TRANSFER_CONTROL` (lateral movement); `ATTACK_CMD` (malicious command); `REVERSE_SHELL` (reverse shell); `FILELESS` (fileless execution); `RISK_CMD` (high-risk command); `ABNORMAL_CHILD_PROC` (unusual start found in the child process of the sensitive service); `USER_DEFINED_RULE` (custom rule).public String getFoundTime()
public void setFoundTime(String FoundTime)
FoundTime
- Generation timepublic String getContainerName()
public void setContainerName(String ContainerName)
ContainerName
- Container namepublic String getImageName()
public void setImageName(String ImageName)
ImageName
- Image namepublic String getBehavior()
public void setBehavior(String Behavior)
Behavior
- Action execution result. `BEHAVIOR_NONE`: None.
`BEHAVIOR_ALERT`: Alert.
`BEHAVIOR_RELEASE`: Allow.
`BEHAVIOR_HOLDUP_FAILED`: Failed to block.
`BEHAVIOR_HOLDUP_SUCCESSED`: Blocked.public String getStatus()
public void setStatus(String Status)
Status
- Status. `EVENT_UNDEAL`: Pending.
`EVENT_DEALED`: Processed.
`EVENT_INGNORE`: Ignored.public String getId()
public void setId(String Id)
Id
- Unique event IDpublic String getImageId()
public void setImageId(String ImageId)
ImageId
- Image ID, which is used for redirect.public String getContainerId()
public void setContainerId(String ContainerId)
ContainerId
- Container ID, which is used for redirect.public String getSolution()
public void setSolution(String Solution)
Solution
- Event solutionpublic String getDescription()
public void setDescription(String Description)
Description
- Event descriptionpublic String getMatchRuleId()
public void setMatchRuleId(String MatchRuleId)
MatchRuleId
- Hit policy IDpublic String getMatchAction()
public void setMatchAction(String MatchAction)
MatchAction
- Action of the hit rule:
`RULE_MODE_RELEASE`: Allow.
`RULE_MODE_ALERT`: Alert.
`RULE_MODE_HOLDUP`: Block.public String getMatchProcessPath()
public void setMatchProcessPath(String MatchProcessPath)
MatchProcessPath
- Information of the process that hits the rulepublic Boolean getRuleExist()
public void setRuleExist(Boolean RuleExist)
RuleExist
- Whether the rule existspublic Long getEventCount()
public void setEventCount(Long EventCount)
EventCount
- Number of eventspublic String getLatestFoundTime()
public void setLatestFoundTime(String LatestFoundTime)
LatestFoundTime
- Last generation timepublic String getRuleId()
public void setRuleId(String RuleId)
RuleId
- Rule group IDpublic String getMatchGroupName()
public void setMatchGroupName(String MatchGroupName)
MatchGroupName
- Name of the hit policy. Valid values: `SYSTEM_DEFINED_RULE` (preset policy); name of the custom policy.public String getMatchRuleLevel()
public void setMatchRuleLevel(String MatchRuleLevel)
MatchRuleLevel
- Level of the hit rule. Valid values: `HIGH` (high); `MIDDLE` (medium); `LOW` (low).public String getContainerNetStatus()
public void setContainerNetStatus(String ContainerNetStatus)
ContainerNetStatus
- Network status
`NORMAL`: Not isolated.
`ISOLATED`: Isolated.
`ISOLATING`: Isolating.
`ISOLATE_FAILED`: Isolation failed.
`RESTORING`: Recovering.
`RESTORE_FAILED`: Recovery failed.
Note: This field may return null, indicating that no valid values can be obtained.public String getContainerNetSubStatus()
public void setContainerNetSubStatus(String ContainerNetSubStatus)
ContainerNetSubStatus
- Sub-status of the container
"AGENT_OFFLINE" // The agent is offline.
"NODE_DESTROYED" // The node is terminated.
"CONTAINER_EXITED" // The container exited.
"CONTAINER_DESTROYED" // The container was terminated.
"SHARED_HOST" // The container shares the network with the server.
"RESOURCE_LIMIT" // The number of resources to be isolated exceeds the limit.
"UNKNOW" // The reason is unknown.
Note: This field may return null, indicating that no valid values can be obtained.public String getContainerIsolateOperationSrc()
public void setContainerIsolateOperationSrc(String ContainerIsolateOperationSrc)
ContainerIsolateOperationSrc
- Container isolation operation source
Note: This field may return null, indicating that no valid values can be obtained.public String getContainerStatus()
public void setContainerStatus(String ContainerStatus)
ContainerStatus
- Container status
`RUNNING`: Running.
`PAUSED`: Paused.
`STOPPED`: Stopped.
`CREATED`: Created.
`DESTROYED`: Terminated.
`RESTARTING`: Restarting.
`REMOVING`: Removing.public String getClusterID()
public void setClusterID(String ClusterID)
ClusterID
- Cluster IDpublic String getNodeType()
public void setNodeType(String NodeType)
NodeType
- Node type. Values: `NORMAL` (general node), `SUPER` (super node).public String getPodName()
public void setPodName(String PodName)
PodName
- Pod namepublic String getPodIP()
public void setPodIP(String PodIP)
PodIP
- Pod IPpublic String getNodeUniqueID()
public void setNodeUniqueID(String NodeUniqueID)
NodeUniqueID
- Cluster IDpublic String getPublicIP()
public void setPublicIP(String PublicIP)
PublicIP
- Node public IPpublic String getNodeName()
public void setNodeName(String NodeName)
NodeName
- Node namepublic String getNodeID()
public void setNodeID(String NodeID)
NodeID
- Node IDpublic String getHostID()
public void setHostID(String HostID)
HostID
- uuidpublic String getHostIP()
public void setHostIP(String HostIP)
HostIP
- Private IP of the nodepublic String getClusterName()
public void setClusterName(String ClusterName)
ClusterName
- Cluster nameCopyright © 2024. All rights reserved.