com.tencentcloudapi.tcss.v20201101.models

Class AbnormalProcessSystemChildRuleInfo

java.lang.Object

com.tencentcloudapi.common.AbstractModel

com.tencentcloudapi.tcss.v20201101.models.AbnormalProcessSystemChildRuleInfo

public class AbnormalProcessSystemChildRuleInfo
extends AbstractModel

Field Summary

Fields inherited from class com.tencentcloudapi.common.AbstractModel

header, skipSign

Constructor Summary

Constructors

Constructor and Description
AbnormalProcessSystemChildRuleInfo()
AbnormalProcessSystemChildRuleInfo(AbnormalProcessSystemChildRuleInfo source) NOTE: Any ambiguous key set via .set("AnyKey", "value") will be a shallow copy, and any explicit key, i.e Foo, set via .setFoo("value") will be a deep copy.

Method Summary

Modifier and Type	Method and Description
Boolean	getIsEnable() Get 子策略状态，true为开启，false为关闭
String	getRuleId() Get 子策略Id
String	getRuleLevel() Get 威胁等级，HIGH:高，MIDDLE:中，LOW:低
String	getRuleMode() Get 策略模式, RULE_MODE_RELEASE: 放行 RULE_MODE_ALERT: 告警 RULE_MODE_HOLDUP:拦截
String	getRuleType() Get 子策略检测的行为类型 PROXY_TOOL： 代理软件 TRANSFER_CONTROL：横向渗透 ATTACK_CMD： 恶意命令 REVERSE_SHELL：反弹shell FILELESS：无文件程序执行 RISK_CMD：高危命令 ABNORMAL_CHILD_PROC: 敏感服务异常子进程启动
void	setIsEnable(Boolean IsEnable) Set 子策略状态，true为开启，false为关闭
void	setRuleId(String RuleId) Set 子策略Id
void	setRuleLevel(String RuleLevel) Set 威胁等级，HIGH:高，MIDDLE:中，LOW:低
void	setRuleMode(String RuleMode) Set 策略模式, RULE_MODE_RELEASE: 放行 RULE_MODE_ALERT: 告警 RULE_MODE_HOLDUP:拦截
void	setRuleType(String RuleType) Set 子策略检测的行为类型 PROXY_TOOL： 代理软件 TRANSFER_CONTROL：横向渗透 ATTACK_CMD： 恶意命令 REVERSE_SHELL：反弹shell FILELESS：无文件程序执行 RISK_CMD：高危命令 ABNORMAL_CHILD_PROC: 敏感服务异常子进程启动
void	toMap(HashMap<String,String> map, String prefix) Internal implementation, normal users should not use it.

Methods inherited from class com.tencentcloudapi.common.AbstractModel

any, fromJsonString, getBinaryParams, GetHeader, getMultipartRequestParams, getSkipSign, isStream, set, SetHeader, setParamArrayObj, setParamArraySimple, setParamObj, setParamSimple, setSkipSign, toJsonString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AbnormalProcessSystemChildRuleInfo

public AbnormalProcessSystemChildRuleInfo()

AbnormalProcessSystemChildRuleInfo

public AbnormalProcessSystemChildRuleInfo(AbnormalProcessSystemChildRuleInfo source)

NOTE: Any ambiguous key set via .set("AnyKey", "value") will be a shallow copy, and any explicit key, i.e Foo, set via .setFoo("value") will be a deep copy.

Method Detail

getRuleId

public String getRuleId()

Get 子策略Id

Returns:

RuleId 子策略Id

setRuleId

public void setRuleId(String RuleId)

Set 子策略Id

Parameters:

RuleId - 子策略Id

getIsEnable

public Boolean getIsEnable()

Get 子策略状态，true为开启，false为关闭

Returns:

IsEnable 子策略状态，true为开启，false为关闭

setIsEnable

public void setIsEnable(Boolean IsEnable)

Set 子策略状态，true为开启，false为关闭

Parameters:

IsEnable - 子策略状态，true为开启，false为关闭

getRuleMode

public String getRuleMode()

Get 策略模式, RULE_MODE_RELEASE: 放行 RULE_MODE_ALERT: 告警 RULE_MODE_HOLDUP:拦截

Returns:

RuleMode 策略模式, RULE_MODE_RELEASE: 放行 RULE_MODE_ALERT: 告警 RULE_MODE_HOLDUP:拦截

setRuleMode

public void setRuleMode(String RuleMode)

Set 策略模式, RULE_MODE_RELEASE: 放行 RULE_MODE_ALERT: 告警 RULE_MODE_HOLDUP:拦截

Parameters:

RuleMode - 策略模式, RULE_MODE_RELEASE: 放行 RULE_MODE_ALERT: 告警 RULE_MODE_HOLDUP:拦截

getRuleType

public String getRuleType()

Get 子策略检测的行为类型 PROXY_TOOL： 代理软件 TRANSFER_CONTROL：横向渗透 ATTACK_CMD： 恶意命令 REVERSE_SHELL：反弹shell FILELESS：无文件程序执行 RISK_CMD：高危命令 ABNORMAL_CHILD_PROC: 敏感服务异常子进程启动

Returns:

RuleType 子策略检测的行为类型 PROXY_TOOL： 代理软件 TRANSFER_CONTROL：横向渗透 ATTACK_CMD： 恶意命令 REVERSE_SHELL：反弹shell FILELESS：无文件程序执行 RISK_CMD：高危命令 ABNORMAL_CHILD_PROC: 敏感服务异常子进程启动

setRuleType

public void setRuleType(String RuleType)

Set 子策略检测的行为类型 PROXY_TOOL： 代理软件 TRANSFER_CONTROL：横向渗透 ATTACK_CMD： 恶意命令 REVERSE_SHELL：反弹shell FILELESS：无文件程序执行 RISK_CMD：高危命令 ABNORMAL_CHILD_PROC: 敏感服务异常子进程启动

Parameters:

RuleType - 子策略检测的行为类型 PROXY_TOOL： 代理软件 TRANSFER_CONTROL：横向渗透 ATTACK_CMD： 恶意命令 REVERSE_SHELL：反弹shell FILELESS：无文件程序执行 RISK_CMD：高危命令 ABNORMAL_CHILD_PROC: 敏感服务异常子进程启动

getRuleLevel

public String getRuleLevel()

Get 威胁等级，HIGH:高，MIDDLE:中，LOW:低

Returns:

RuleLevel 威胁等级，HIGH:高，MIDDLE:中，LOW:低

setRuleLevel

public void setRuleLevel(String RuleLevel)

Set 威胁等级，HIGH:高，MIDDLE:中，LOW:低

Parameters:

RuleLevel - 威胁等级，HIGH:高，MIDDLE:中，LOW:低

toMap

public void toMap(HashMap<String,String> map,
                  String prefix)

Internal implementation, normal users should not use it.

Specified by:

toMap in class AbstractModel

Parameters:

map - The map to populate with the model's parameters.

prefix - A string prefix for the keys.