Interface NounOrBuilder (0.3.0)

0.3.0 (latest) 0.2.0 0.1.0

public interface NounOrBuilder extends MessageOrBuilder

Implements

MessageOrBuilder

Methods

getAdministrativeDomain()

public abstract String getAdministrativeDomain()

Domain which the device belongs to (for example, the Microsoft Windows domain).

string administrative_domain = 9;

Returns
Type	Description
String	The administrativeDomain.

getAdministrativeDomainBytes()

public abstract ByteString getAdministrativeDomainBytes()

Domain which the device belongs to (for example, the Microsoft Windows domain).

string administrative_domain = 9;

Returns
Type	Description
ByteString	The bytes for administrativeDomain.

getApplication()

public abstract String getApplication()

The name of an application or service. Some SSO solutions only capture the name of a target application such as "Atlassian" or "Chronicle".

string application = 14;

Returns
Type	Description
String	The application.

getApplicationBytes()

public abstract ByteString getApplicationBytes()

The name of an application or service. Some SSO solutions only capture the name of a target application such as "Atlassian" or "Chronicle".

string application = 14;

Returns
Type	Description
ByteString	The bytes for application.

getArtifact()

public abstract Artifact getArtifact()

Information about an artifact.

.google.backstory.Artifact artifact = 32;

Returns
Type	Description
Artifact	The artifact.

getArtifactOrBuilder()

public abstract ArtifactOrBuilder getArtifactOrBuilder()

Information about an artifact.

.google.backstory.Artifact artifact = 32;

Returns
Type	Description
ArtifactOrBuilder

getAsset()

public abstract Asset getAsset()

Information about the asset.

.google.backstory.Asset asset = 27;

Returns
Type	Description
Asset	The asset.

getAssetId()

public abstract String getAssetId()

The asset ID. This field can be used as an entity indicator for asset entities.

string asset_id = 2;

Returns
Type	Description
String	The assetId.

getAssetIdBytes()

public abstract ByteString getAssetIdBytes()

The asset ID. This field can be used as an entity indicator for asset entities.

string asset_id = 2;

Returns
Type	Description
ByteString	The bytes for assetId.

getAssetOrBuilder()

public abstract AssetOrBuilder getAssetOrBuilder()

Information about the asset.

.google.backstory.Asset asset = 27;

Returns
Type	Description
AssetOrBuilder

getBrowser()

public abstract Browser getBrowser()

Information about an entry in the web browser's local history database.

.google.backstory.Browser browser = 38;

Returns
Type	Description
Browser	The browser.

getBrowserOrBuilder()

public abstract BrowserOrBuilder getBrowserOrBuilder()

Information about an entry in the web browser's local history database.

.google.backstory.Browser browser = 38;

Returns
Type	Description
BrowserOrBuilder

getCloud() (deprecated)

public abstract Cloud getCloud()

Deprecated. google.backstory.Noun.cloud is deprecated. See backstory/udm.proto;l=6324

Cloud metadata. Deprecated: cloud should be populated in entity Attribute as generic metadata (e.g. asset.attribute.cloud).

.google.backstory.Cloud cloud = 24 [deprecated = true];

Returns
Type	Description
Cloud	The cloud.

getCloudOrBuilder() (deprecated)

public abstract CloudOrBuilder getCloudOrBuilder()

Cloud metadata. Deprecated: cloud should be populated in entity Attribute as generic metadata (e.g. asset.attribute.cloud).

.google.backstory.Cloud cloud = 24 [deprecated = true];

Returns
Type	Description
CloudOrBuilder

getDomain()

public abstract Domain getDomain()

Information about the domain.

.google.backstory.Domain domain = 30;

Returns
Type	Description
Domain	The domain.

getDomainOrBuilder()

public abstract DomainOrBuilder getDomainOrBuilder()

Information about the domain.

.google.backstory.Domain domain = 30;

Returns
Type	Description
DomainOrBuilder

getEmail()

public abstract String getEmail()

Email address. Only filled in for security_result.about

string email = 12;

Returns
Type	Description
String	The email.

getEmailBytes()

public abstract ByteString getEmailBytes()

Email address. Only filled in for security_result.about

string email = 12;

Returns
Type	Description
ByteString	The bytes for email.

getFile()

public abstract File getFile()

Information about the file.

.google.backstory.File file = 11;

Returns
Type	Description
File	The file.

getFileOrBuilder()

public abstract FileOrBuilder getFileOrBuilder()

Information about the file.

.google.backstory.File file = 11;

Returns
Type	Description
FileOrBuilder

getGroup()

public abstract Group getGroup()

Information about the group.

.google.backstory.Group group = 20;

Returns
Type	Description
Group	The group.

getGroupOrBuilder()

public abstract GroupOrBuilder getGroupOrBuilder()

Information about the group.

.google.backstory.Group group = 20;

Returns
Type	Description
GroupOrBuilder

getHostname()

public abstract String getHostname()

Client hostname or domain name field. Hostname also doubles as the domain for remote entities. This field can be used as an entity indicator for asset entities.

string hostname = 1;

Returns
Type	Description
String	The hostname.

getHostnameBytes()

public abstract ByteString getHostnameBytes()

Client hostname or domain name field. Hostname also doubles as the domain for remote entities. This field can be used as an entity indicator for asset entities.

string hostname = 1;

Returns
Type	Description
ByteString	The bytes for hostname.

getInvestigation()

public abstract Investigation getInvestigation()

Analyst feedback/investigation for alerts.

.google.backstory.Investigation investigation = 26;

Returns
Type	Description
Investigation	The investigation.

getInvestigationOrBuilder()

public abstract InvestigationOrBuilder getInvestigationOrBuilder()

Analyst feedback/investigation for alerts.

.google.backstory.Investigation investigation = 26;

Returns
Type	Description
InvestigationOrBuilder

getIp(int index)

public abstract String getIp(int index)

A list of IP addresses associated with a network connection. This field can be used as an entity indicator for asset entities.

repeated string ip = 6;

Parameter
Name	Description
index	int The index of the element to return.

Returns
Type	Description
String	The ip at the given index.

getIpBytes(int index)

public abstract ByteString getIpBytes(int index)

A list of IP addresses associated with a network connection. This field can be used as an entity indicator for asset entities.

repeated string ip = 6;

Parameter
Name	Description
index	int The index of the value to return.

Returns
Type	Description
ByteString	The bytes of the ip at the given index.

getIpCount()

public abstract int getIpCount()

A list of IP addresses associated with a network connection. This field can be used as an entity indicator for asset entities.

repeated string ip = 6;

Returns
Type	Description
int	The count of ip.

getIpGeoArtifact(int index)

public abstract Artifact getIpGeoArtifact(int index)

Enriched geographic information corresponding to an IP address. Specifically, location and network data.

repeated .google.backstory.Artifact ip_geo_artifact = 35;

Parameter
Name	Description
index	int

Returns
Type	Description
Artifact

getIpGeoArtifactCount()

public abstract int getIpGeoArtifactCount()

Enriched geographic information corresponding to an IP address. Specifically, location and network data.

repeated .google.backstory.Artifact ip_geo_artifact = 35;

Returns
Type	Description
int

getIpGeoArtifactList()

public abstract List<Artifact> getIpGeoArtifactList()

Enriched geographic information corresponding to an IP address. Specifically, location and network data.

repeated .google.backstory.Artifact ip_geo_artifact = 35;

Returns
Type	Description
List<Artifact>

getIpGeoArtifactOrBuilder(int index)

public abstract ArtifactOrBuilder getIpGeoArtifactOrBuilder(int index)

Enriched geographic information corresponding to an IP address. Specifically, location and network data.

repeated .google.backstory.Artifact ip_geo_artifact = 35;

Parameter
Name	Description
index	int

Returns
Type	Description
ArtifactOrBuilder

getIpGeoArtifactOrBuilderList()

public abstract List<? extends ArtifactOrBuilder> getIpGeoArtifactOrBuilderList()

Enriched geographic information corresponding to an IP address. Specifically, location and network data.

repeated .google.backstory.Artifact ip_geo_artifact = 35;

Returns
Type	Description
List<? extends com.google.backstory.ArtifactOrBuilder>

getIpList()

public abstract List<String> getIpList()

A list of IP addresses associated with a network connection. This field can be used as an entity indicator for asset entities.

repeated string ip = 6;

Returns
Type	Description
List<String>	A list containing the ip.

getIpLocation(int index) (deprecated)

public abstract Location getIpLocation(int index)

Deprecated: use ip_geo_artifact.location instead.

repeated .google.backstory.Location ip_location = 34 [deprecated = true];

Parameter
Name	Description
index	int

Returns
Type	Description
Location

getIpLocationCount() (deprecated)

public abstract int getIpLocationCount()

Deprecated: use ip_geo_artifact.location instead.

repeated .google.backstory.Location ip_location = 34 [deprecated = true];

Returns
Type	Description
int

getIpLocationList() (deprecated)

public abstract List<Location> getIpLocationList()

Deprecated: use ip_geo_artifact.location instead.

repeated .google.backstory.Location ip_location = 34 [deprecated = true];

Returns
Type	Description
List<Location>

getIpLocationOrBuilder(int index) (deprecated)

public abstract LocationOrBuilder getIpLocationOrBuilder(int index)

Deprecated: use ip_geo_artifact.location instead.

repeated .google.backstory.Location ip_location = 34 [deprecated = true];

Parameter
Name	Description
index	int

Returns
Type	Description
LocationOrBuilder

getIpLocationOrBuilderList() (deprecated)

public abstract List<? extends LocationOrBuilder> getIpLocationOrBuilderList()

Deprecated: use ip_geo_artifact.location instead.

repeated .google.backstory.Location ip_location = 34 [deprecated = true];

Returns
Type	Description
List<? extends com.google.backstory.LocationOrBuilder>

getLabels(int index) (deprecated)

public abstract Label getLabels(int index)

Labels are key-value pairs. For example: key = "env", value = "prod". Deprecated: labels should be populated in entity Attribute as generic metadata (e.g. user.attribute.labels).

repeated .google.backstory.Label labels = 23 [deprecated = true];

Parameter
Name	Description
index	int

Returns
Type	Description
Label

getLabelsCount() (deprecated)

public abstract int getLabelsCount()

Labels are key-value pairs. For example: key = "env", value = "prod". Deprecated: labels should be populated in entity Attribute as generic metadata (e.g. user.attribute.labels).

repeated .google.backstory.Label labels = 23 [deprecated = true];

Returns
Type	Description
int

getLabelsList() (deprecated)

public abstract List<Label> getLabelsList()

Labels are key-value pairs. For example: key = "env", value = "prod". Deprecated: labels should be populated in entity Attribute as generic metadata (e.g. user.attribute.labels).

repeated .google.backstory.Label labels = 23 [deprecated = true];

Returns
Type	Description
List<Label>

getLabelsOrBuilder(int index) (deprecated)

public abstract LabelOrBuilder getLabelsOrBuilder(int index)

Labels are key-value pairs. For example: key = "env", value = "prod". Deprecated: labels should be populated in entity Attribute as generic metadata (e.g. user.attribute.labels).

repeated .google.backstory.Label labels = 23 [deprecated = true];

Parameter
Name	Description
index	int

Returns
Type	Description
LabelOrBuilder

getLabelsOrBuilderList() (deprecated)

public abstract List<? extends LabelOrBuilder> getLabelsOrBuilderList()

Labels are key-value pairs. For example: key = "env", value = "prod". Deprecated: labels should be populated in entity Attribute as generic metadata (e.g. user.attribute.labels).

repeated .google.backstory.Label labels = 23 [deprecated = true];

Returns
Type	Description
List<? extends com.google.backstory.LabelOrBuilder>

getLocation()

public abstract Location getLocation()

Physical location. For cloud environments, set the region in location.name.

.google.backstory.Location location = 17;

Returns
Type	Description
Location	The location.

getLocationOrBuilder()

public abstract LocationOrBuilder getLocationOrBuilder()

Physical location. For cloud environments, set the region in location.name.

.google.backstory.Location location = 17;

Returns
Type	Description
LocationOrBuilder

getMac(int index)

public abstract String getMac(int index)

List of MAC addresses associated with a device. This field can be used as an entity indicator for asset entities.

repeated string mac = 8;

Parameter
Name	Description
index	int The index of the element to return.

Returns
Type	Description
String	The mac at the given index.

getMacBytes(int index)

public abstract ByteString getMacBytes(int index)

List of MAC addresses associated with a device. This field can be used as an entity indicator for asset entities.

repeated string mac = 8;

Parameter
Name	Description
index	int The index of the value to return.

Returns
Type	Description
ByteString	The bytes of the mac at the given index.

getMacCount()

public abstract int getMacCount()

List of MAC addresses associated with a device. This field can be used as an entity indicator for asset entities.

repeated string mac = 8;

Returns
Type	Description
int	The count of mac.

getMacList()

public abstract List<String> getMacList()

List of MAC addresses associated with a device. This field can be used as an entity indicator for asset entities.

repeated string mac = 8;

Returns
Type	Description
List<String>	A list containing the mac.

getNamespace()

public abstract String getNamespace()

Namespace which the device belongs to, such as "AD forest". Uses for this field include Microsoft Windows AD forest, the name of subsidiary, or the name of acquisition. This field can be used along with an asset indicator to identify an asset.

string namespace = 19;

Returns
Type	Description
String	The namespace.

getNamespaceBytes()

public abstract ByteString getNamespaceBytes()

Namespace which the device belongs to, such as "AD forest". Uses for this field include Microsoft Windows AD forest, the name of subsidiary, or the name of acquisition. This field can be used along with an asset indicator to identify an asset.

string namespace = 19;

Returns
Type	Description
ByteString	The bytes for namespace.

getNatIp(int index)

public abstract String getNatIp(int index)

A list of NAT translated IP addresses associated with a network connection.

repeated string nat_ip = 21;

Parameter
Name	Description
index	int The index of the element to return.

Returns
Type	Description
String	The natIp at the given index.

getNatIpBytes(int index)

public abstract ByteString getNatIpBytes(int index)

A list of NAT translated IP addresses associated with a network connection.

repeated string nat_ip = 21;

Parameter
Name	Description
index	int The index of the value to return.

Returns
Type	Description
ByteString	The bytes of the natIp at the given index.

getNatIpCount()

public abstract int getNatIpCount()

A list of NAT translated IP addresses associated with a network connection.

repeated string nat_ip = 21;

Returns
Type	Description
int	The count of natIp.

getNatIpList()

public abstract List<String> getNatIpList()

A list of NAT translated IP addresses associated with a network connection.

repeated string nat_ip = 21;

Returns
Type	Description
List<String>	A list containing the natIp.

getNatPort()

public abstract int getNatPort()

NAT external network port number when a specific network connection is described within an event.

int32 nat_port = 22;

Returns
Type	Description
int	The natPort.

getNetwork()

public abstract Network getNetwork()

Network details, including sub-messages with details on each protocol (for example, DHCP, DNS, or HTTP).

.google.backstory.Network network = 33;

Returns
Type	Description
Network	The network.

getNetworkOrBuilder()

public abstract NetworkOrBuilder getNetworkOrBuilder()

Network details, including sub-messages with details on each protocol (for example, DHCP, DNS, or HTTP).

.google.backstory.Network network = 33;

Returns
Type	Description
NetworkOrBuilder

getObjectReference()

public abstract Id getObjectReference()

Finding to which the Analyst updated the feedback.

.google.backstory.Id object_reference = 25;

Returns
Type	Description
Id	The objectReference.

getObjectReferenceOrBuilder()

public abstract IdOrBuilder getObjectReferenceOrBuilder()

Finding to which the Analyst updated the feedback.

.google.backstory.Id object_reference = 25;

Returns
Type	Description
IdOrBuilder

getPlatform()

public abstract Noun.Platform getPlatform()

Platform.

.google.backstory.Noun.Platform platform = 5;

Returns
Type	Description
Noun.Platform	The platform.

getPlatformPatchLevel()

public abstract String getPlatformPatchLevel()

Platform patch level. For example, "Build 17134.48"

string platform_patch_level = 16;

Returns
Type	Description
String	The platformPatchLevel.

getPlatformPatchLevelBytes()

public abstract ByteString getPlatformPatchLevelBytes()

Platform patch level. For example, "Build 17134.48"

string platform_patch_level = 16;

Returns
Type	Description
ByteString	The bytes for platformPatchLevel.

getPlatformValue()

public abstract int getPlatformValue()

Platform.

.google.backstory.Noun.Platform platform = 5;

Returns
Type	Description
int	The enum numeric value on the wire for platform.

getPlatformVersion()

public abstract String getPlatformVersion()

Platform version. For example, "Microsoft Windows 1803".

string platform_version = 15;

Returns
Type	Description
String	The platformVersion.

getPlatformVersionBytes()

public abstract ByteString getPlatformVersionBytes()

Platform version. For example, "Microsoft Windows 1803".

string platform_version = 15;

Returns
Type	Description
ByteString	The bytes for platformVersion.

getPort()

public abstract int getPort()

Source or destination network port number when a specific network connection is described within an event.

int32 port = 7;

Returns
Type	Description
int	The port.

getProcess()

public abstract Process getProcess()

Information about the process.

.google.backstory.Process process = 4;

Returns
Type	Description
Process	The process.

getProcessAncestors(int index)

public abstract Process getProcessAncestors(int index)

Information about the process's ancestors ordered from immediate ancestor (parent process) to root. Note: process_ancestors is only populated when data is exported to BigQuery since recursive fields (e.g. process.parent_process) are not supported by BigQuery.

repeated .google.backstory.Process process_ancestors = 28;

Parameter
Name	Description
index	int

Returns
Type	Description
Process

getProcessAncestorsCount()

public abstract int getProcessAncestorsCount()

Information about the process's ancestors ordered from immediate ancestor (parent process) to root. Note: process_ancestors is only populated when data is exported to BigQuery since recursive fields (e.g. process.parent_process) are not supported by BigQuery.

repeated .google.backstory.Process process_ancestors = 28;

Returns
Type	Description
int

getProcessAncestorsList()

public abstract List<Process> getProcessAncestorsList()

Information about the process's ancestors ordered from immediate ancestor (parent process) to root. Note: process_ancestors is only populated when data is exported to BigQuery since recursive fields (e.g. process.parent_process) are not supported by BigQuery.

repeated .google.backstory.Process process_ancestors = 28;

Returns
Type	Description
List<Process>

getProcessAncestorsOrBuilder(int index)

public abstract ProcessOrBuilder getProcessAncestorsOrBuilder(int index)

Information about the process's ancestors ordered from immediate ancestor (parent process) to root. Note: process_ancestors is only populated when data is exported to BigQuery since recursive fields (e.g. process.parent_process) are not supported by BigQuery.

repeated .google.backstory.Process process_ancestors = 28;

Parameter
Name	Description
index	int

Returns
Type	Description
ProcessOrBuilder

getProcessAncestorsOrBuilderList()

public abstract List<? extends ProcessOrBuilder> getProcessAncestorsOrBuilderList()

Information about the process's ancestors ordered from immediate ancestor (parent process) to root. Note: process_ancestors is only populated when data is exported to BigQuery since recursive fields (e.g. process.parent_process) are not supported by BigQuery.

repeated .google.backstory.Process process_ancestors = 28;

Returns
Type	Description
List<? extends com.google.backstory.ProcessOrBuilder>

getProcessOrBuilder()

public abstract ProcessOrBuilder getProcessOrBuilder()

Information about the process.

.google.backstory.Process process = 4;

Returns
Type	Description
ProcessOrBuilder

getRegistry()

public abstract Registry getRegistry()

Registry information.

.google.backstory.Registry registry = 13;

Returns
Type	Description
Registry	The registry.

getRegistryOrBuilder()

public abstract RegistryOrBuilder getRegistryOrBuilder()

Registry information.

.google.backstory.Registry registry = 13;

Returns
Type	Description
RegistryOrBuilder

getResource()

public abstract Resource getResource()

Information about the resource (e.g. scheduled task, calendar entry). This field should not be used for files, registry, or processes because these objects are already part of Noun.

.google.backstory.Resource resource = 18;

Returns
Type	Description
Resource	The resource.

getResourceAncestors(int index)

public abstract Resource getResourceAncestors(int index)

Information about the resource's ancestors ordered from immediate ancestor (starting with parent resource).

repeated .google.backstory.Resource resource_ancestors = 31;

Parameter
Name	Description
index	int

Returns
Type	Description
Resource

getResourceAncestorsCount()

public abstract int getResourceAncestorsCount()

Information about the resource's ancestors ordered from immediate ancestor (starting with parent resource).

repeated .google.backstory.Resource resource_ancestors = 31;

Returns
Type	Description
int

getResourceAncestorsList()

public abstract List<Resource> getResourceAncestorsList()

Information about the resource's ancestors ordered from immediate ancestor (starting with parent resource).

repeated .google.backstory.Resource resource_ancestors = 31;

Returns
Type	Description
List<Resource>

getResourceAncestorsOrBuilder(int index)

public abstract ResourceOrBuilder getResourceAncestorsOrBuilder(int index)

Information about the resource's ancestors ordered from immediate ancestor (starting with parent resource).

repeated .google.backstory.Resource resource_ancestors = 31;

Parameter
Name	Description
index	int

Returns
Type	Description
ResourceOrBuilder

getResourceAncestorsOrBuilderList()

public abstract List<? extends ResourceOrBuilder> getResourceAncestorsOrBuilderList()

Information about the resource's ancestors ordered from immediate ancestor (starting with parent resource).

repeated .google.backstory.Resource resource_ancestors = 31;

Returns
Type	Description
List<? extends com.google.backstory.ResourceOrBuilder>

getResourceOrBuilder()

public abstract ResourceOrBuilder getResourceOrBuilder()

Information about the resource (e.g. scheduled task, calendar entry). This field should not be used for files, registry, or processes because these objects are already part of Noun.

.google.backstory.Resource resource = 18;

Returns
Type	Description
ResourceOrBuilder

getSecurityResult(int index)

public abstract SecurityResult getSecurityResult(int index)

A list of security results.

repeated .google.backstory.SecurityResult security_result = 36;

Parameter
Name	Description
index	int

Returns
Type	Description
SecurityResult

getSecurityResultCount()

public abstract int getSecurityResultCount()

A list of security results.

repeated .google.backstory.SecurityResult security_result = 36;

Returns
Type	Description
int

getSecurityResultList()

public abstract List<SecurityResult> getSecurityResultList()

A list of security results.

repeated .google.backstory.SecurityResult security_result = 36;

Returns
Type	Description
List<SecurityResult>

getSecurityResultOrBuilder(int index)

public abstract SecurityResultOrBuilder getSecurityResultOrBuilder(int index)

A list of security results.

repeated .google.backstory.SecurityResult security_result = 36;

Parameter
Name	Description
index	int

Returns
Type	Description
SecurityResultOrBuilder

getSecurityResultOrBuilderList()

public abstract List<? extends SecurityResultOrBuilder> getSecurityResultOrBuilderList()

A list of security results.

repeated .google.backstory.SecurityResult security_result = 36;

Returns
Type	Description
List<? extends com.google.backstory.SecurityResultOrBuilder>

getUrl()

public abstract String getUrl()

The URL.

string url = 10;

Returns
Type	Description
String	The url.

getUrlBytes()

public abstract ByteString getUrlBytes()

The URL.

string url = 10;

Returns
Type	Description
ByteString	The bytes for url.

getUrlMetadata()

public abstract Url getUrlMetadata()

Information about the URL.

.google.backstory.Url url_metadata = 37;

Returns
Type	Description
Url	The urlMetadata.

getUrlMetadataOrBuilder()

public abstract UrlOrBuilder getUrlMetadataOrBuilder()

Information about the URL.

.google.backstory.Url url_metadata = 37;

Returns
Type	Description
UrlOrBuilder

getUser()

public abstract User getUser()

Information about the user.

.google.backstory.User user = 3;

Returns
Type	Description
User	The user.

getUserManagementChain(int index)

public abstract User getUserManagementChain(int index)

Information about the user's management chain (reporting hierarchy). Note: user_management_chain is only populated when data is exported to BigQuery since recursive fields (e.g. user.managers) are not supported by BigQuery.

repeated .google.backstory.User user_management_chain = 29;

Parameter
Name	Description
index	int

Returns
Type	Description
User

getUserManagementChainCount()

public abstract int getUserManagementChainCount()

Information about the user's management chain (reporting hierarchy). Note: user_management_chain is only populated when data is exported to BigQuery since recursive fields (e.g. user.managers) are not supported by BigQuery.

repeated .google.backstory.User user_management_chain = 29;

Returns
Type	Description
int

getUserManagementChainList()

public abstract List<User> getUserManagementChainList()

Information about the user's management chain (reporting hierarchy). Note: user_management_chain is only populated when data is exported to BigQuery since recursive fields (e.g. user.managers) are not supported by BigQuery.

repeated .google.backstory.User user_management_chain = 29;

Returns
Type	Description
List<User>

getUserManagementChainOrBuilder(int index)

public abstract UserOrBuilder getUserManagementChainOrBuilder(int index)

Information about the user's management chain (reporting hierarchy). Note: user_management_chain is only populated when data is exported to BigQuery since recursive fields (e.g. user.managers) are not supported by BigQuery.

repeated .google.backstory.User user_management_chain = 29;

Parameter
Name	Description
index	int

Returns
Type	Description
UserOrBuilder

getUserManagementChainOrBuilderList()

public abstract List<? extends UserOrBuilder> getUserManagementChainOrBuilderList()

Information about the user's management chain (reporting hierarchy). Note: user_management_chain is only populated when data is exported to BigQuery since recursive fields (e.g. user.managers) are not supported by BigQuery.

repeated .google.backstory.User user_management_chain = 29;

Returns
Type	Description
List<? extends com.google.backstory.UserOrBuilder>

getUserOrBuilder()

public abstract UserOrBuilder getUserOrBuilder()

Information about the user.

.google.backstory.User user = 3;

Returns
Type	Description
UserOrBuilder

hasArtifact()

public abstract boolean hasArtifact()

Information about an artifact.

.google.backstory.Artifact artifact = 32;

Returns
Type	Description
boolean	Whether the artifact field is set.

hasAsset()

public abstract boolean hasAsset()

Information about the asset.

.google.backstory.Asset asset = 27;

Returns
Type	Description
boolean	Whether the asset field is set.

hasBrowser()

public abstract boolean hasBrowser()

Information about an entry in the web browser's local history database.

.google.backstory.Browser browser = 38;

Returns
Type	Description
boolean	Whether the browser field is set.

hasCloud() (deprecated)

public abstract boolean hasCloud()

Deprecated. google.backstory.Noun.cloud is deprecated. See backstory/udm.proto;l=6324

Cloud metadata. Deprecated: cloud should be populated in entity Attribute as generic metadata (e.g. asset.attribute.cloud).

.google.backstory.Cloud cloud = 24 [deprecated = true];

Returns
Type	Description
boolean	Whether the cloud field is set.

hasDomain()

public abstract boolean hasDomain()

Information about the domain.

.google.backstory.Domain domain = 30;

Returns
Type	Description
boolean	Whether the domain field is set.

hasFile()

public abstract boolean hasFile()

Information about the file.

.google.backstory.File file = 11;

Returns
Type	Description
boolean	Whether the file field is set.

hasGroup()

public abstract boolean hasGroup()

Information about the group.

.google.backstory.Group group = 20;

Returns
Type	Description
boolean	Whether the group field is set.

hasInvestigation()

public abstract boolean hasInvestigation()

Analyst feedback/investigation for alerts.

.google.backstory.Investigation investigation = 26;

Returns
Type	Description
boolean	Whether the investigation field is set.

hasLocation()

public abstract boolean hasLocation()

Physical location. For cloud environments, set the region in location.name.

.google.backstory.Location location = 17;

Returns
Type	Description
boolean	Whether the location field is set.

hasNetwork()

public abstract boolean hasNetwork()

Network details, including sub-messages with details on each protocol (for example, DHCP, DNS, or HTTP).

.google.backstory.Network network = 33;

Returns
Type	Description
boolean	Whether the network field is set.

hasObjectReference()

public abstract boolean hasObjectReference()

Finding to which the Analyst updated the feedback.

.google.backstory.Id object_reference = 25;

Returns
Type	Description
boolean	Whether the objectReference field is set.

hasProcess()

public abstract boolean hasProcess()

Information about the process.

.google.backstory.Process process = 4;

Returns
Type	Description
boolean	Whether the process field is set.

hasRegistry()

public abstract boolean hasRegistry()

Registry information.

.google.backstory.Registry registry = 13;

Returns
Type	Description
boolean	Whether the registry field is set.

hasResource()

public abstract boolean hasResource()

Information about the resource (e.g. scheduled task, calendar entry). This field should not be used for files, registry, or processes because these objects are already part of Noun.

.google.backstory.Resource resource = 18;

Returns
Type	Description
boolean	Whether the resource field is set.

hasUrlMetadata()

public abstract boolean hasUrlMetadata()

Information about the URL.

.google.backstory.Url url_metadata = 37;

Returns
Type	Description
boolean	Whether the urlMetadata field is set.

hasUser()

public abstract boolean hasUser()

Information about the user.

.google.backstory.User user = 3;

Returns
Type	Description
boolean	Whether the user field is set.