Class ProcessDetails
- All Implemented Interfaces:
Serializable
,SdkPojo
,ToCopyableBuilder<ProcessDetails.Builder,
ProcessDetails>
Information about the observed process.
- See Also:
-
Nested Class Summary
Nested Classes -
Method Summary
Modifier and TypeMethodDescriptionstatic ProcessDetails.Builder
builder()
final boolean
final boolean
equalsBySdkFields
(Object obj) Indicates whether some other object is "equal to" this one by SDK fields.final Integer
euid()
The effective user ID of the user that executed the process.final String
The absolute path of the process executable file.final String
TheSHA256
hash of the process executable.final <T> Optional
<T> getValueForField
(String fieldName, Class<T> clazz) final int
hashCode()
final boolean
For responses, this returns true if the service returned a value for the Lineage property.final List
<LineageObject> lineage()
Information about the process's lineage.final String
name()
The name of the process.final Integer
The ID of the child process.final String
The unique ID of the parent process.final Integer
pid()
The ID of the process.final String
pwd()
The present working directory of the process.static Class
<? extends ProcessDetails.Builder> final Instant
The time when the process started.Take this object and create a builder that contains all of the current property values of this object.final String
toString()
Returns a string representation of this object.final String
user()
The user that executed the process.final Integer
userId()
The unique ID of the user that executed the process.final String
uuid()
The unique ID assigned to the process by GuardDuty.Methods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder
copy
-
Method Details
-
name
-
executablePath
The absolute path of the process executable file.
- Returns:
- The absolute path of the process executable file.
-
executableSha256
The
SHA256
hash of the process executable.- Returns:
- The
SHA256
hash of the process executable.
-
namespacePid
The ID of the child process.
- Returns:
- The ID of the child process.
-
pwd
The present working directory of the process.
- Returns:
- The present working directory of the process.
-
pid
-
startTime
The time when the process started. This is in UTC format.
- Returns:
- The time when the process started. This is in UTC format.
-
uuid
The unique ID assigned to the process by GuardDuty.
- Returns:
- The unique ID assigned to the process by GuardDuty.
-
parentUuid
The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.
- Returns:
- The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.
-
user
The user that executed the process.
- Returns:
- The user that executed the process.
-
userId
The unique ID of the user that executed the process.
- Returns:
- The unique ID of the user that executed the process.
-
euid
The effective user ID of the user that executed the process.
- Returns:
- The effective user ID of the user that executed the process.
-
hasLineage
public final boolean hasLineage()For responses, this returns true if the service returned a value for the Lineage property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()
method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
lineage
Information about the process's lineage.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasLineage()
method.- Returns:
- Information about the process's lineage.
-
toBuilder
Description copied from interface:ToCopyableBuilder
Take this object and create a builder that contains all of the current property values of this object.- Specified by:
toBuilder
in interfaceToCopyableBuilder<ProcessDetails.Builder,
ProcessDetails> - Returns:
- a builder for type T
-
builder
-
serializableBuilderClass
-
hashCode
-
equals
-
equalsBySdkFields
Description copied from interface:SdkPojo
Indicates whether some other object is "equal to" this one by SDK fields. An SDK field is a modeled, non-inherited field in anSdkPojo
class, and is generated based on a service model.If an
SdkPojo
class does not have any inherited fields,equalsBySdkFields
andequals
are essentially the same.- Specified by:
equalsBySdkFields
in interfaceSdkPojo
- Parameters:
obj
- the object to be compared with- Returns:
- true if the other object equals to this object by sdk fields, false otherwise.
-
toString
-
getValueForField
-
sdkFields
-
sdkFieldNameToField
- Specified by:
sdkFieldNameToField
in interfaceSdkPojo
- Returns:
- The mapping between the field name and its corresponding field.
-