Class ProcessDetails
- All Implemented Interfaces:
Serializable,SdkPojo,ToCopyableBuilder<ProcessDetails.Builder,ProcessDetails>
Information about the observed process.
- See Also:
-
Nested Class Summary
Nested Classes -
Method Summary
Modifier and TypeMethodDescriptionstatic ProcessDetails.Builderbuilder()final booleanfinal booleanequalsBySdkFields(Object obj) Indicates whether some other object is "equal to" this one by SDK fields.final Integereuid()The effective user ID of the user that executed the process.final StringThe absolute path of the process executable file.final StringTheSHA256hash of the process executable.final <T> Optional<T> getValueForField(String fieldName, Class<T> clazz) final inthashCode()final booleanFor responses, this returns true if the service returned a value for the Lineage property.final List<LineageObject> lineage()Information about the process's lineage.final Stringname()The name of the process.final IntegerThe ID of the child process.final StringThe unique ID of the parent process.final Integerpid()The ID of the process.final Stringpwd()The present working directory of the process.static Class<? extends ProcessDetails.Builder> final InstantThe time when the process started.Take this object and create a builder that contains all of the current property values of this object.final StringtoString()Returns a string representation of this object.final Stringuser()The user that executed the process.final IntegeruserId()The unique ID of the user that executed the process.final Stringuuid()The unique ID assigned to the process by GuardDuty.Methods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder
copy
-
Method Details
-
name
-
executablePath
The absolute path of the process executable file.
- Returns:
- The absolute path of the process executable file.
-
executableSha256
The
SHA256hash of the process executable.- Returns:
- The
SHA256hash of the process executable.
-
namespacePid
The ID of the child process.
- Returns:
- The ID of the child process.
-
pwd
The present working directory of the process.
- Returns:
- The present working directory of the process.
-
pid
-
startTime
The time when the process started. This is in UTC format.
- Returns:
- The time when the process started. This is in UTC format.
-
uuid
The unique ID assigned to the process by GuardDuty.
- Returns:
- The unique ID assigned to the process by GuardDuty.
-
parentUuid
The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.
- Returns:
- The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.
-
user
The user that executed the process.
- Returns:
- The user that executed the process.
-
userId
The unique ID of the user that executed the process.
- Returns:
- The unique ID of the user that executed the process.
-
euid
The effective user ID of the user that executed the process.
- Returns:
- The effective user ID of the user that executed the process.
-
hasLineage
public final boolean hasLineage()For responses, this returns true if the service returned a value for the Lineage property. This DOES NOT check that the value is non-empty (for which, you should check theisEmpty()method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified. -
lineage
Information about the process's lineage.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the
hasLineage()method.- Returns:
- Information about the process's lineage.
-
toBuilder
Description copied from interface:ToCopyableBuilderTake this object and create a builder that contains all of the current property values of this object.- Specified by:
toBuilderin interfaceToCopyableBuilder<ProcessDetails.Builder,ProcessDetails> - Returns:
- a builder for type T
-
builder
-
serializableBuilderClass
-
hashCode
-
equals
-
equalsBySdkFields
Description copied from interface:SdkPojoIndicates whether some other object is "equal to" this one by SDK fields. An SDK field is a modeled, non-inherited field in anSdkPojoclass, and is generated based on a service model.If an
SdkPojoclass does not have any inherited fields,equalsBySdkFieldsandequalsare essentially the same.- Specified by:
equalsBySdkFieldsin interfaceSdkPojo- Parameters:
obj- the object to be compared with- Returns:
- true if the other object equals to this object by sdk fields, false otherwise.
-
toString
-
getValueForField
-
sdkFields
-