Class Process (0.3.0)

public final class Process extends GeneratedMessage implements ProcessOrBuilder

Information about a process.

Protobuf type google.backstory.Process

Implements

ProcessOrBuilder

Static Fields

ACCESS_MASK_FIELD_NUMBER

public static final int ACCESS_MASK_FIELD_NUMBER
Field Value
Type Description
int

COMMAND_LINE_FIELD_NUMBER

public static final int COMMAND_LINE_FIELD_NUMBER
Field Value
Type Description
int

COMMAND_LINE_HISTORY_FIELD_NUMBER

public static final int COMMAND_LINE_HISTORY_FIELD_NUMBER
Field Value
Type Description
int

EGID_FIELD_NUMBER

public static final int EGID_FIELD_NUMBER
Field Value
Type Description
int

EUID_FIELD_NUMBER

public static final int EUID_FIELD_NUMBER
Field Value
Type Description
int

FILE_FIELD_NUMBER

public static final int FILE_FIELD_NUMBER
Field Value
Type Description
int

INTEGRITY_LEVEL_RID_FIELD_NUMBER

public static final int INTEGRITY_LEVEL_RID_FIELD_NUMBER
Field Value
Type Description
int

IPV6_FIELD_NUMBER

public static final int IPV6_FIELD_NUMBER
Field Value
Type Description
int

KERNEL_DURATION_FIELD_NUMBER

public static final int KERNEL_DURATION_FIELD_NUMBER
Field Value
Type Description
int

PARENT_PID_FIELD_NUMBER

public static final int PARENT_PID_FIELD_NUMBER
Field Value
Type Description
int

PARENT_PROCESS_FIELD_NUMBER

public static final int PARENT_PROCESS_FIELD_NUMBER
Field Value
Type Description
int

PGID_FIELD_NUMBER

public static final int PGID_FIELD_NUMBER
Field Value
Type Description
int

PID_FIELD_NUMBER

public static final int PID_FIELD_NUMBER
Field Value
Type Description
int

PRODUCT_SPECIFIC_PARENT_PROCESS_ID_FIELD_NUMBER

public static final int PRODUCT_SPECIFIC_PARENT_PROCESS_ID_FIELD_NUMBER
Field Value
Type Description
int

PRODUCT_SPECIFIC_PROCESS_ID_FIELD_NUMBER

public static final int PRODUCT_SPECIFIC_PROCESS_ID_FIELD_NUMBER
Field Value
Type Description
int

REAL_DURATION_FIELD_NUMBER

public static final int REAL_DURATION_FIELD_NUMBER
Field Value
Type Description
int

RGID_FIELD_NUMBER

public static final int RGID_FIELD_NUMBER
Field Value
Type Description
int

RUID_FIELD_NUMBER

public static final int RUID_FIELD_NUMBER
Field Value
Type Description
int

SESSION_LEADER_PID_FIELD_NUMBER

public static final int SESSION_LEADER_PID_FIELD_NUMBER
Field Value
Type Description
int

STATE_FIELD_NUMBER

public static final int STATE_FIELD_NUMBER
Field Value
Type Description
int

TOKEN_ELEVATION_TYPE_FIELD_NUMBER

public static final int TOKEN_ELEVATION_TYPE_FIELD_NUMBER
Field Value
Type Description
int

TTY_FIELD_NUMBER

public static final int TTY_FIELD_NUMBER
Field Value
Type Description
int

USER_DURATION_FIELD_NUMBER

public static final int USER_DURATION_FIELD_NUMBER
Field Value
Type Description
int

Static Methods

getDefaultInstance()

public static Process getDefaultInstance()
Returns
Type Description
Process

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()
Returns
Type Description
Descriptor

newBuilder()

public static Process.Builder newBuilder()
Returns
Type Description
Process.Builder

newBuilder(Process prototype)

public static Process.Builder newBuilder(Process prototype)
Parameter
Name Description
prototype Process
Returns
Type Description
Process.Builder

parseDelimitedFrom(InputStream input)

public static Process parseDelimitedFrom(InputStream input)
Parameter
Name Description
input InputStream
Returns
Type Description
Process
Exceptions
Type Description
IOException

parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static Process parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input InputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Process
Exceptions
Type Description
IOException

parseFrom(byte[] data)

public static Process parseFrom(byte[] data)
Parameter
Name Description
data byte[]
Returns
Type Description
Process
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

public static Process parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data byte[]
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Process
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteString data)

public static Process parseFrom(ByteString data)
Parameter
Name Description
data ByteString
Returns
Type Description
Process
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

public static Process parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data ByteString
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Process
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(CodedInputStream input)

public static Process parseFrom(CodedInputStream input)
Parameter
Name Description
input CodedInputStream
Returns
Type Description
Process
Exceptions
Type Description
IOException

parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public static Process parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input CodedInputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Process
Exceptions
Type Description
IOException

parseFrom(InputStream input)

public static Process parseFrom(InputStream input)
Parameter
Name Description
input InputStream
Returns
Type Description
Process
Exceptions
Type Description
IOException

parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static Process parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input InputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Process
Exceptions
Type Description
IOException

parseFrom(ByteBuffer data)

public static Process parseFrom(ByteBuffer data)
Parameter
Name Description
data ByteBuffer
Returns
Type Description
Process
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

public static Process parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data ByteBuffer
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Process
Exceptions
Type Description
InvalidProtocolBufferException

parser()

public static Parser<Process> parser()
Returns
Type Description
Parser<Process>

Methods

equals(Object obj)

public boolean equals(Object obj)
Parameter
Name Description
obj Object
Returns
Type Description
boolean
Overrides

getAccessMask()

public long getAccessMask()

A bit mask representing the level of access.

uint64 access_mask = 8;

Returns
Type Description
long

The accessMask.

getCommandLine()

public String getCommandLine()

The command line command that created the process. This field can be used as an entity indicator for process entities.

string command_line = 4;

Returns
Type Description
String

The commandLine.

getCommandLineBytes()

public ByteString getCommandLineBytes()

The command line command that created the process. This field can be used as an entity indicator for process entities.

string command_line = 4;

Returns
Type Description
ByteString

The bytes for commandLine.

getCommandLineHistory(int index)

public String getCommandLineHistory(int index)

The command line history of the process.

repeated string command_line_history = 9;

Parameter
Name Description
index int

The index of the element to return.

Returns
Type Description
String

The commandLineHistory at the given index.

getCommandLineHistoryBytes(int index)

public ByteString getCommandLineHistoryBytes(int index)

The command line history of the process.

repeated string command_line_history = 9;

Parameter
Name Description
index int

The index of the value to return.

Returns
Type Description
ByteString

The bytes of the commandLineHistory at the given index.

getCommandLineHistoryCount()

public int getCommandLineHistoryCount()

The command line history of the process.

repeated string command_line_history = 9;

Returns
Type Description
int

The count of commandLineHistory.

getCommandLineHistoryList()

public ProtocolStringList getCommandLineHistoryList()

The command line history of the process.

repeated string command_line_history = 9;

Returns
Type Description
ProtocolStringList

A list containing the commandLineHistory.

getDefaultInstanceForType()

public Process getDefaultInstanceForType()
Returns
Type Description
Process

getEgid()

public String getEgid()

The effective group ID of the process.

string egid = 14;

Returns
Type Description
String

The egid.

getEgidBytes()

public ByteString getEgidBytes()

The effective group ID of the process.

string egid = 14;

Returns
Type Description
ByteString

The bytes for egid.

getEuid()

public String getEuid()

The effective user ID of the process.

string euid = 12;

Returns
Type Description
String

The euid.

getEuidBytes()

public ByteString getEuidBytes()

The effective user ID of the process.

string euid = 12;

Returns
Type Description
ByteString

The bytes for euid.

getFile()

public File getFile()

Information about the file in use by the process.

.google.backstory.File file = 3;

Returns
Type Description
File

The file.

getFileOrBuilder()

public FileOrBuilder getFileOrBuilder()

Information about the file in use by the process.

.google.backstory.File file = 3;

Returns
Type Description
FileOrBuilder

getIntegrityLevelRid()

public long getIntegrityLevelRid()

The Microsoft Windows integrity level relative ID (RID) of the process.

uint64 integrity_level_rid = 11;

Returns
Type Description
long

The integrityLevelRid.

getIpv6()

public boolean getIpv6()

This is used to determine if the process is an IPv6 process.

bool ipv6 = 19;

Returns
Type Description
boolean

The ipv6.

getKernelDuration()

public Duration getKernelDuration()

The kernel time spent in the process.

.google.protobuf.Duration kernel_duration = 20;

Returns
Type Description
Duration

The kernelDuration.

getKernelDurationOrBuilder()

public DurationOrBuilder getKernelDurationOrBuilder()

The kernel time spent in the process.

.google.protobuf.Duration kernel_duration = 20;

Returns
Type Description
DurationOrBuilder

getParentPid() (deprecated)

public String getParentPid()

Deprecated. google.backstory.Process.parent_pid is deprecated. See backstory/udm.proto;l=1877

The ID of the parent process. Deprecated: use parent_process.pid instead.

string parent_pid = 2 [deprecated = true];

Returns
Type Description
String

The parentPid.

getParentPidBytes() (deprecated)

public ByteString getParentPidBytes()

Deprecated. google.backstory.Process.parent_pid is deprecated. See backstory/udm.proto;l=1877

The ID of the parent process. Deprecated: use parent_process.pid instead.

string parent_pid = 2 [deprecated = true];

Returns
Type Description
ByteString

The bytes for parentPid.

getParentProcess()

public Process getParentProcess()

Information about the parent process.

.google.backstory.Process parent_process = 7;

Returns
Type Description
Process

The parentProcess.

getParentProcessOrBuilder()

public ProcessOrBuilder getParentProcessOrBuilder()

Information about the parent process.

.google.backstory.Process parent_process = 7;

Returns
Type Description
ProcessOrBuilder

getParserForType()

public Parser<Process> getParserForType()
Returns
Type Description
Parser<Process>
Overrides

getPgid()

public String getPgid()

The identifier that points to the process group ID leader.

string pgid = 16;

Returns
Type Description
String

The pgid.

getPgidBytes()

public ByteString getPgidBytes()

The identifier that points to the process group ID leader.

string pgid = 16;

Returns
Type Description
ByteString

The bytes for pgid.

getPid()

public String getPid()

The process ID. This field can be used as an entity indicator for process entities.

string pid = 1;

Returns
Type Description
String

The pid.

getPidBytes()

public ByteString getPidBytes()

The process ID. This field can be used as an entity indicator for process entities.

string pid = 1;

Returns
Type Description
ByteString

The bytes for pid.

getProductSpecificParentProcessId() (deprecated)

public String getProductSpecificParentProcessId()

Deprecated. google.backstory.Process.product_specific_parent_process_id is deprecated. See backstory/udm.proto;l=1928

A product specific id for the parent process. Please use parent_process.product_specific_process_id instead.

string product_specific_parent_process_id = 6 [deprecated = true];

Returns
Type Description
String

The productSpecificParentProcessId.

getProductSpecificParentProcessIdBytes() (deprecated)

public ByteString getProductSpecificParentProcessIdBytes()

Deprecated. google.backstory.Process.product_specific_parent_process_id is deprecated. See backstory/udm.proto;l=1928

A product specific id for the parent process. Please use parent_process.product_specific_process_id instead.

string product_specific_parent_process_id = 6 [deprecated = true];

Returns
Type Description
ByteString

The bytes for productSpecificParentProcessId.

getProductSpecificProcessId()

public String getProductSpecificProcessId()

A product specific process id.

string product_specific_process_id = 5;

Returns
Type Description
String

The productSpecificProcessId.

getProductSpecificProcessIdBytes()

public ByteString getProductSpecificProcessIdBytes()

A product specific process id.

string product_specific_process_id = 5;

Returns
Type Description
ByteString

The bytes for productSpecificProcessId.

getRealDuration()

public Duration getRealDuration()

The real time spent in the process. This is the sum of the kernel and user time.

.google.protobuf.Duration real_duration = 22;

Returns
Type Description
Duration

The realDuration.

getRealDurationOrBuilder()

public DurationOrBuilder getRealDurationOrBuilder()

The real time spent in the process. This is the sum of the kernel and user time.

.google.protobuf.Duration real_duration = 22;

Returns
Type Description
DurationOrBuilder

getRgid()

public String getRgid()

The real group ID of the process.

string rgid = 15;

Returns
Type Description
String

The rgid.

getRgidBytes()

public ByteString getRgidBytes()

The real group ID of the process.

string rgid = 15;

Returns
Type Description
ByteString

The bytes for rgid.

getRuid()

public String getRuid()

The real user ID of the process.

string ruid = 13;

Returns
Type Description
String

The ruid.

getRuidBytes()

public ByteString getRuidBytes()

The real user ID of the process.

string ruid = 13;

Returns
Type Description
ByteString

The bytes for ruid.

getSerializedSize()

public int getSerializedSize()
Returns
Type Description
int
Overrides

getSessionLeaderPid()

public String getSessionLeaderPid()

The process ID of the session leader process.

string session_leader_pid = 17;

Returns
Type Description
String

The sessionLeaderPid.

getSessionLeaderPidBytes()

public ByteString getSessionLeaderPidBytes()

The process ID of the session leader process.

string session_leader_pid = 17;

Returns
Type Description
ByteString

The bytes for sessionLeaderPid.

getState()

public Process.State getState()

The state of the process.

.google.backstory.Process.State state = 23;

Returns
Type Description
Process.State

The state.

getStateValue()

public int getStateValue()

The state of the process.

.google.backstory.Process.State state = 23;

Returns
Type Description
int

The enum numeric value on the wire for state.

getTokenElevationType()

public Process.TokenElevationType getTokenElevationType()

The elevation type of the process on Microsoft Windows. This determines if any privileges are removed when UAC is enabled.

.google.backstory.Process.TokenElevationType token_elevation_type = 10;

Returns
Type Description
Process.TokenElevationType

The tokenElevationType.

getTokenElevationTypeValue()

public int getTokenElevationTypeValue()

The elevation type of the process on Microsoft Windows. This determines if any privileges are removed when UAC is enabled.

.google.backstory.Process.TokenElevationType token_elevation_type = 10;

Returns
Type Description
int

The enum numeric value on the wire for tokenElevationType.

getTty()

public String getTty()

The teletype terminal which the command was executed within.

string tty = 18;

Returns
Type Description
String

The tty.

getTtyBytes()

public ByteString getTtyBytes()

The teletype terminal which the command was executed within.

string tty = 18;

Returns
Type Description
ByteString

The bytes for tty.

getUserDuration()

public Duration getUserDuration()

The user time spent in the process.

.google.protobuf.Duration user_duration = 21;

Returns
Type Description
Duration

The userDuration.

getUserDurationOrBuilder()

public DurationOrBuilder getUserDurationOrBuilder()

The user time spent in the process.

.google.protobuf.Duration user_duration = 21;

Returns
Type Description
DurationOrBuilder

hasFile()

public boolean hasFile()

Information about the file in use by the process.

.google.backstory.File file = 3;

Returns
Type Description
boolean

Whether the file field is set.

hasKernelDuration()

public boolean hasKernelDuration()

The kernel time spent in the process.

.google.protobuf.Duration kernel_duration = 20;

Returns
Type Description
boolean

Whether the kernelDuration field is set.

hasParentProcess()

public boolean hasParentProcess()

Information about the parent process.

.google.backstory.Process parent_process = 7;

Returns
Type Description
boolean

Whether the parentProcess field is set.

hasRealDuration()

public boolean hasRealDuration()

The real time spent in the process. This is the sum of the kernel and user time.

.google.protobuf.Duration real_duration = 22;

Returns
Type Description
boolean

Whether the realDuration field is set.

hasUserDuration()

public boolean hasUserDuration()

The user time spent in the process.

.google.protobuf.Duration user_duration = 21;

Returns
Type Description
boolean

Whether the userDuration field is set.

hashCode()

public int hashCode()
Returns
Type Description
int
Overrides

internalGetFieldAccessorTable()

protected GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Type Description
FieldAccessorTable
Overrides

isInitialized()

public final boolean isInitialized()
Returns
Type Description
boolean
Overrides

newBuilderForType()

public Process.Builder newBuilderForType()
Returns
Type Description
Process.Builder

newBuilderForType(AbstractMessage.BuilderParent parent)

protected Process.Builder newBuilderForType(AbstractMessage.BuilderParent parent)
Parameter
Name Description
parent BuilderParent
Returns
Type Description
Process.Builder
Overrides

toBuilder()

public Process.Builder toBuilder()
Returns
Type Description
Process.Builder

writeTo(CodedOutputStream output)

public void writeTo(CodedOutputStream output)
Parameter
Name Description
output CodedOutputStream
Overrides
Exceptions
Type Description
IOException