Class EntityRisk (0.3.0)

0.3.0 (latest) 0.2.0 0.1.0

public final class EntityRisk extends GeneratedMessage implements EntityRiskOrBuilder

Stores information related to the risk score of an entity.

Protobuf type google.backstory.EntityRisk

Inheritance

Object > AbstractMessageLite<MessageType,BuilderType> > AbstractMessage > GeneratedMessage > EntityRisk

Implements

EntityRiskOrBuilder

Inherited Members

AbstractMessage.equals(Object)

AbstractMessage.findInitializationErrors()

AbstractMessage.getInitializationErrorString()

AbstractMessage.hashCode()

AbstractMessage.hashFields(int,Map<Descriptors.FieldDescriptor,Object>)

AbstractMessage.newBuilderForType(AbstractMessage.BuilderParent)

AbstractMessage.toString()

AbstractMessageLite.<T>addAll(Iterable<T>,List<? super T>)

AbstractMessageLite.checkByteStringIsUtf8(ByteString)

AbstractMessageLite.toByteArray()

AbstractMessageLite.toByteString()

AbstractMessageLite.writeDelimitedTo(OutputStream)

AbstractMessageLite.writeTo(OutputStream)

com.google.protobuf.GeneratedMessage.<ContainingT,T>newFileScopedGeneratedExtension(java.lang.Class<?>,com.google.protobuf.Message)

com.google.protobuf.GeneratedMessage.<ContainingT,T>newMessageScopedGeneratedExtension(com.google.protobuf.Message,int,java.lang.Class<?>,com.google.protobuf.Message)

com.google.protobuf.GeneratedMessage.<ListT>makeMutableCopy(ListT)

com.google.protobuf.GeneratedMessage.<ListT>makeMutableCopy(ListT,int)

GeneratedMessage.<M>parseDelimitedWithIOException(Parser<M>,InputStream)

GeneratedMessage.<M>parseDelimitedWithIOException(Parser<M>,InputStream,ExtensionRegistryLite)

GeneratedMessage.<M>parseWithIOException(Parser<M>,CodedInputStream)

GeneratedMessage.<M>parseWithIOException(Parser<M>,CodedInputStream,ExtensionRegistryLite)

GeneratedMessage.<M>parseWithIOException(Parser<M>,InputStream)

GeneratedMessage.<M>parseWithIOException(Parser<M>,InputStream,ExtensionRegistryLite)

com.google.protobuf.GeneratedMessage.<T>emptyList(java.lang.Class<T>)

com.google.protobuf.GeneratedMessage.<V>serializeBooleanMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.Boolean,V>,com.google.protobuf.MapEntry<java.lang.Boolean,V>,int)

com.google.protobuf.GeneratedMessage.<V>serializeIntegerMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.Integer,V>,com.google.protobuf.MapEntry<java.lang.Integer,V>,int)

com.google.protobuf.GeneratedMessage.<V>serializeLongMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.Long,V>,com.google.protobuf.MapEntry<java.lang.Long,V>,int)

com.google.protobuf.GeneratedMessage.<V>serializeStringMapTo(com.google.protobuf.CodedOutputStream,com.google.protobuf.MapField<java.lang.String,V>,com.google.protobuf.MapEntry<java.lang.String,V>,int)

com.google.protobuf.GeneratedMessage.canUseUnsafe()

GeneratedMessage.computeStringSize(int,Object)

GeneratedMessage.computeStringSizeNoTag(Object)

com.google.protobuf.GeneratedMessage.emptyBooleanList()

com.google.protobuf.GeneratedMessage.emptyDoubleList()

com.google.protobuf.GeneratedMessage.emptyFloatList()

com.google.protobuf.GeneratedMessage.emptyIntList()

com.google.protobuf.GeneratedMessage.emptyLongList()

GeneratedMessage.getAllFields()

GeneratedMessage.getDescriptorForType()

GeneratedMessage.getField(Descriptors.FieldDescriptor)

GeneratedMessage.getOneofFieldDescriptor(Descriptors.OneofDescriptor)

GeneratedMessage.getParserForType()

GeneratedMessage.getRepeatedField(Descriptors.FieldDescriptor,int)

GeneratedMessage.getRepeatedFieldCount(Descriptors.FieldDescriptor)

GeneratedMessage.getSerializedSize()

GeneratedMessage.getUnknownFields()

GeneratedMessage.hasField(Descriptors.FieldDescriptor)

GeneratedMessage.hasOneof(Descriptors.OneofDescriptor)

GeneratedMessage.internalGetFieldAccessorTable()

GeneratedMessage.internalGetMapField(int)

com.google.protobuf.GeneratedMessage.internalGetMapFieldReflection(int)

GeneratedMessage.isInitialized()

com.google.protobuf.GeneratedMessage.isStringEmpty(java.lang.Object)

GeneratedMessage.makeExtensionsImmutable()

com.google.protobuf.GeneratedMessage.mergeFromAndMakeImmutableInternal(com.google.protobuf.CodedInputStream,com.google.protobuf.ExtensionRegistryLite)

com.google.protobuf.GeneratedMessage.newInstance(com.google.protobuf.GeneratedMessage.UnusedPrivateParameter)

GeneratedMessage.parseUnknownField(CodedInputStream,UnknownFieldSet.Builder,ExtensionRegistryLite,int)

com.google.protobuf.GeneratedMessage.parseUnknownFieldProto3(com.google.protobuf.CodedInputStream,com.google.protobuf.UnknownFieldSet.Builder,com.google.protobuf.ExtensionRegistryLite,int)

GeneratedMessage.writeReplace()

GeneratedMessage.writeString(CodedOutputStream,int,Object)

GeneratedMessage.writeStringNoTag(CodedOutputStream,Object)

GeneratedMessage.writeTo(CodedOutputStream)

Object.clone()

Object.finalize()

Object.getClass()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Fields

DEPRECATED_RISK_SCORE_FIELD_NUMBER

public static final int DEPRECATED_RISK_SCORE_FIELD_NUMBER

Field Value
Type	Description
int

DETAIL_URI_FIELD_NUMBER

public static final int DETAIL_URI_FIELD_NUMBER

Field Value
Type	Description
int

DETECTIONS_COUNT_FIELD_NUMBER

public static final int DETECTIONS_COUNT_FIELD_NUMBER

Field Value
Type	Description
int

FIRST_DETECTION_TIME_FIELD_NUMBER

public static final int FIRST_DETECTION_TIME_FIELD_NUMBER

Field Value
Type	Description
int

LAST_DETECTION_TIME_FIELD_NUMBER

public static final int LAST_DETECTION_TIME_FIELD_NUMBER

Field Value
Type	Description
int

LAST_RESET_TIME_FIELD_NUMBER

public static final int LAST_RESET_TIME_FIELD_NUMBER

Field Value
Type	Description
int

NORMALIZED_RISK_SCORE_FIELD_NUMBER

public static final int NORMALIZED_RISK_SCORE_FIELD_NUMBER

Field Value
Type	Description
int

RAW_RISK_DELTA_FIELD_NUMBER

public static final int RAW_RISK_DELTA_FIELD_NUMBER

Field Value
Type	Description
int

RISK_DELTA_FIELD_NUMBER

public static final int RISK_DELTA_FIELD_NUMBER

Field Value
Type	Description
int

RISK_SCORE_FIELD_NUMBER

public static final int RISK_SCORE_FIELD_NUMBER

Field Value
Type	Description
int

RISK_VERSION_FIELD_NUMBER

public static final int RISK_VERSION_FIELD_NUMBER

Field Value
Type	Description
int

RISK_WINDOW_FIELD_NUMBER

public static final int RISK_WINDOW_FIELD_NUMBER

Field Value
Type	Description
int

RISK_WINDOW_HAS_NEW_DETECTIONS_FIELD_NUMBER

public static final int RISK_WINDOW_HAS_NEW_DETECTIONS_FIELD_NUMBER

Field Value
Type	Description
int

RISK_WINDOW_SIZE_FIELD_NUMBER

public static final int RISK_WINDOW_SIZE_FIELD_NUMBER

Field Value
Type	Description
int

Static Methods

getDefaultInstance()

public static EntityRisk getDefaultInstance()

Returns
Type	Description
EntityRisk

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()

Returns
Type	Description
Descriptor

newBuilder()

public static EntityRisk.Builder newBuilder()

Returns
Type	Description
EntityRisk.Builder

newBuilder(EntityRisk prototype)

public static EntityRisk.Builder newBuilder(EntityRisk prototype)

Parameter
Name	Description
prototype	EntityRisk

Returns
Type	Description
EntityRisk.Builder

parseDelimitedFrom(InputStream input)

public static EntityRisk parseDelimitedFrom(InputStream input)

Parameter
Name	Description
input	InputStream

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
IOException

parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static EntityRisk parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
input	InputStream
extensionRegistry	ExtensionRegistryLite

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
IOException

parseFrom(byte[] data)

public static EntityRisk parseFrom(byte[] data)

Parameter
Name	Description
data	byte[]

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
InvalidProtocolBufferException

parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

public static EntityRisk parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
data	byte[]
extensionRegistry	ExtensionRegistryLite

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
InvalidProtocolBufferException

parseFrom(ByteString data)

public static EntityRisk parseFrom(ByteString data)

Parameter
Name	Description
data	ByteString

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
InvalidProtocolBufferException

parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

public static EntityRisk parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
data	ByteString
extensionRegistry	ExtensionRegistryLite

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
InvalidProtocolBufferException

parseFrom(CodedInputStream input)

public static EntityRisk parseFrom(CodedInputStream input)

Parameter
Name	Description
input	CodedInputStream

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
IOException

parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public static EntityRisk parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
input	CodedInputStream
extensionRegistry	ExtensionRegistryLite

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
IOException

parseFrom(InputStream input)

public static EntityRisk parseFrom(InputStream input)

Parameter
Name	Description
input	InputStream

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
IOException

parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static EntityRisk parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
input	InputStream
extensionRegistry	ExtensionRegistryLite

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
IOException

parseFrom(ByteBuffer data)

public static EntityRisk parseFrom(ByteBuffer data)

Parameter
Name	Description
data	ByteBuffer

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
InvalidProtocolBufferException

parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

public static EntityRisk parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
data	ByteBuffer
extensionRegistry	ExtensionRegistryLite

Returns
Type	Description
EntityRisk

Exceptions
Type	Description
InvalidProtocolBufferException

parser()

public static Parser<EntityRisk> parser()

Returns
Type	Description
Parser<EntityRisk>

Methods

equals(Object obj)

public boolean equals(Object obj)

Parameter
Name	Description
obj	Object

Returns
Type	Description
boolean

Overrides

AbstractMessage.equals(Object other)

getDEPRECATEDRiskScore() (deprecated)

public int getDEPRECATEDRiskScore()

Deprecated. google.backstory.EntityRisk.DEPRECATED_risk_score is deprecated. See backstory/entity_risk.proto;l=45

Deprecated risk score.

int32 DEPRECATED_risk_score = 3 [json_name = "DEPRECATEDRiskScore", deprecated = true];

Returns
Type	Description
int	The dEPRECATEDRiskScore.

getDefaultInstanceForType()

public EntityRisk getDefaultInstanceForType()

Returns
Type	Description
EntityRisk

getDetailUri()

public String getDetailUri()

Link to the Google Security Operations UI with information about the entity risk score. If the SecOps instance has multiple frontend paths configured, this will be a relative path that can be used to construct the full URL.

string detail_uri = 13;

Returns
Type	Description
String	The detailUri.

getDetailUriBytes()

public ByteString getDetailUriBytes()

Link to the Google Security Operations UI with information about the entity risk score. If the SecOps instance has multiple frontend paths configured, this will be a relative path that can be used to construct the full URL.

string detail_uri = 13;

Returns
Type	Description
ByteString	The bytes for detailUri.

getDetectionsCount()

public int getDetectionsCount()

Number of detections that make up the risk score within the time window.

int32 detections_count = 5;

Returns
Type	Description
int	The detectionsCount.

getFirstDetectionTime()

public Timestamp getFirstDetectionTime()

Timestamp of the first detection within the specified time window. This field is empty when there are no detections.

.google.protobuf.Timestamp first_detection_time = 6;

Returns
Type	Description
Timestamp	The firstDetectionTime.

getFirstDetectionTimeOrBuilder()

public TimestampOrBuilder getFirstDetectionTimeOrBuilder()

Timestamp of the first detection within the specified time window. This field is empty when there are no detections.

.google.protobuf.Timestamp first_detection_time = 6;

Returns
Type	Description
TimestampOrBuilder

getLastDetectionTime()

public Timestamp getLastDetectionTime()

Timestamp of the last detection within the specified time window. This field is empty when there are no detections.

.google.protobuf.Timestamp last_detection_time = 7;

Returns
Type	Description
Timestamp	The lastDetectionTime.

getLastDetectionTimeOrBuilder()

public TimestampOrBuilder getLastDetectionTimeOrBuilder()

Timestamp of the last detection within the specified time window. This field is empty when there are no detections.

.google.protobuf.Timestamp last_detection_time = 7;

Returns
Type	Description
TimestampOrBuilder

getLastResetTime()

public Timestamp getLastResetTime()

Timestamp for UEBA risk score reset based deduplication. Used specifically for risk based meta rules.

.google.protobuf.Timestamp last_reset_time = 12;

Returns
Type	Description
Timestamp	The lastResetTime.

getLastResetTimeOrBuilder()

public TimestampOrBuilder getLastResetTimeOrBuilder()

Timestamp for UEBA risk score reset based deduplication. Used specifically for risk based meta rules.

.google.protobuf.Timestamp last_reset_time = 12;

Returns
Type	Description
TimestampOrBuilder

getNormalizedRiskScore()

public int getNormalizedRiskScore()

Normalized risk score for the entity. This value is between 0-1000.

int32 normalized_risk_score = 9;

Returns
Type	Description
int	The normalizedRiskScore.

getParserForType()

public Parser<EntityRisk> getParserForType()

Returns
Type	Description
Parser<EntityRisk>

Overrides

GeneratedMessage.getParserForType()

getRawRiskDelta()

public RiskDelta getRawRiskDelta()

Represents the change in raw risk score for an entity between the end of the previous time window and the end of the current time window.

optional .google.backstory.RiskDelta raw_risk_delta = 11;

Returns
Type	Description
RiskDelta	The rawRiskDelta.

getRawRiskDeltaOrBuilder()

public RiskDeltaOrBuilder getRawRiskDeltaOrBuilder()

Represents the change in raw risk score for an entity between the end of the previous time window and the end of the current time window.

optional .google.backstory.RiskDelta raw_risk_delta = 11;

Returns
Type	Description
RiskDeltaOrBuilder

getRiskDelta()

public RiskDelta getRiskDelta()

Represents the change in risk score for an entity between the end of the previous time window and the end of the current time window.

optional .google.backstory.RiskDelta risk_delta = 4;

Returns
Type	Description
RiskDelta	The riskDelta.

getRiskDeltaOrBuilder()

public RiskDeltaOrBuilder getRiskDeltaOrBuilder()

Represents the change in risk score for an entity between the end of the previous time window and the end of the current time window.

optional .google.backstory.RiskDelta risk_delta = 4;

Returns
Type	Description
RiskDeltaOrBuilder

getRiskScore()

public float getRiskScore()

Raw risk score for the entity.

float risk_score = 8;

Returns
Type	Description
float	The riskScore.

getRiskVersion()

public String getRiskVersion()

Version of the risk score calculation algorithm.

string risk_version = 1;

Returns
Type	Description
String	The riskVersion.

getRiskVersionBytes()

public ByteString getRiskVersionBytes()

Version of the risk score calculation algorithm.

string risk_version = 1;

Returns
Type	Description
ByteString	The bytes for riskVersion.

getRiskWindow()

public Interval getRiskWindow()

Time window used when computing the risk score for an entity, for example 24 hours or 7 days.

.google.type.Interval risk_window = 2;

Returns
Type	Description
com.google.type.Interval	The riskWindow.

getRiskWindowHasNewDetections()

public boolean getRiskWindowHasNewDetections()

Whether there are new detections for the risk window.

bool risk_window_has_new_detections = 14;

Returns
Type	Description
boolean	The riskWindowHasNewDetections.

getRiskWindowOrBuilder()

public IntervalOrBuilder getRiskWindowOrBuilder()

Time window used when computing the risk score for an entity, for example 24 hours or 7 days.

.google.type.Interval risk_window = 2;

Returns
Type	Description
com.google.type.IntervalOrBuilder

getRiskWindowSize()

public Duration getRiskWindowSize()

Risk window duration for the entity.

.google.protobuf.Duration risk_window_size = 10;

Returns
Type	Description
Duration	The riskWindowSize.

getRiskWindowSizeOrBuilder()

public DurationOrBuilder getRiskWindowSizeOrBuilder()

Risk window duration for the entity.

.google.protobuf.Duration risk_window_size = 10;

Returns
Type	Description
DurationOrBuilder

getSerializedSize()

public int getSerializedSize()

Returns
Type	Description
int

Overrides

GeneratedMessage.getSerializedSize()

hasFirstDetectionTime()

public boolean hasFirstDetectionTime()

Timestamp of the first detection within the specified time window. This field is empty when there are no detections.

.google.protobuf.Timestamp first_detection_time = 6;

Returns
Type	Description
boolean	Whether the firstDetectionTime field is set.

hasLastDetectionTime()

public boolean hasLastDetectionTime()

Timestamp of the last detection within the specified time window. This field is empty when there are no detections.

.google.protobuf.Timestamp last_detection_time = 7;

Returns
Type	Description
boolean	Whether the lastDetectionTime field is set.

hasLastResetTime()

public boolean hasLastResetTime()

Timestamp for UEBA risk score reset based deduplication. Used specifically for risk based meta rules.

.google.protobuf.Timestamp last_reset_time = 12;

Returns
Type	Description
boolean	Whether the lastResetTime field is set.

hasRawRiskDelta()

public boolean hasRawRiskDelta()

Represents the change in raw risk score for an entity between the end of the previous time window and the end of the current time window.

optional .google.backstory.RiskDelta raw_risk_delta = 11;

Returns
Type	Description
boolean	Whether the rawRiskDelta field is set.

hasRiskDelta()

public boolean hasRiskDelta()

Represents the change in risk score for an entity between the end of the previous time window and the end of the current time window.

optional .google.backstory.RiskDelta risk_delta = 4;

Returns
Type	Description
boolean	Whether the riskDelta field is set.

hasRiskWindow()

public boolean hasRiskWindow()

Time window used when computing the risk score for an entity, for example 24 hours or 7 days.

.google.type.Interval risk_window = 2;

Returns
Type	Description
boolean	Whether the riskWindow field is set.

hasRiskWindowSize()

public boolean hasRiskWindowSize()

Risk window duration for the entity.

.google.protobuf.Duration risk_window_size = 10;

Returns
Type	Description
boolean	Whether the riskWindowSize field is set.

hashCode()

public int hashCode()

Returns
Type	Description
int

Overrides

AbstractMessage.hashCode()

internalGetFieldAccessorTable()

protected GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()

Returns
Type	Description
FieldAccessorTable

Overrides

GeneratedMessage.internalGetFieldAccessorTable()

isInitialized()

public final boolean isInitialized()

Returns
Type	Description
boolean

Overrides

GeneratedMessage.isInitialized()

newBuilderForType()

public EntityRisk.Builder newBuilderForType()

Returns
Type	Description
EntityRisk.Builder

newBuilderForType(AbstractMessage.BuilderParent parent)

protected EntityRisk.Builder newBuilderForType(AbstractMessage.BuilderParent parent)

Parameter
Name	Description
parent	BuilderParent

Returns
Type	Description
EntityRisk.Builder

Overrides

AbstractMessage.newBuilderForType(AbstractMessage.BuilderParent parent)

toBuilder()

public EntityRisk.Builder toBuilder()

Returns
Type	Description
EntityRisk.Builder

writeTo(CodedOutputStream output)

public void writeTo(CodedOutputStream output)

Parameter
Name	Description
output	CodedOutputStream

Overrides

GeneratedMessage.writeTo(CodedOutputStream output)

Exceptions
Type	Description
IOException