Interface ProcessOrBuilder (0.3.0)

0.3.0 (latest) 0.2.0 0.1.0

public interface ProcessOrBuilder extends MessageOrBuilder

Implements

MessageOrBuilder

Methods

getAccessMask()

public abstract long getAccessMask()

A bit mask representing the level of access.

uint64 access_mask = 8;

Returns
Type	Description
long	The accessMask.

getCommandLine()

public abstract String getCommandLine()

The command line command that created the process. This field can be used as an entity indicator for process entities.

string command_line = 4;

Returns
Type	Description
String	The commandLine.

getCommandLineBytes()

public abstract ByteString getCommandLineBytes()

The command line command that created the process. This field can be used as an entity indicator for process entities.

string command_line = 4;

Returns
Type	Description
ByteString	The bytes for commandLine.

getCommandLineHistory(int index)

public abstract String getCommandLineHistory(int index)

The command line history of the process.

repeated string command_line_history = 9;

Parameter
Name	Description
index	int The index of the element to return.

Returns
Type	Description
String	The commandLineHistory at the given index.

getCommandLineHistoryBytes(int index)

public abstract ByteString getCommandLineHistoryBytes(int index)

The command line history of the process.

repeated string command_line_history = 9;

Parameter
Name	Description
index	int The index of the value to return.

Returns
Type	Description
ByteString	The bytes of the commandLineHistory at the given index.

getCommandLineHistoryCount()

public abstract int getCommandLineHistoryCount()

The command line history of the process.

repeated string command_line_history = 9;

Returns
Type	Description
int	The count of commandLineHistory.

getCommandLineHistoryList()

public abstract List<String> getCommandLineHistoryList()

The command line history of the process.

repeated string command_line_history = 9;

Returns
Type	Description
List<String>	A list containing the commandLineHistory.

getEgid()

public abstract String getEgid()

The effective group ID of the process.

string egid = 14;

Returns
Type	Description
String	The egid.

getEgidBytes()

public abstract ByteString getEgidBytes()

The effective group ID of the process.

string egid = 14;

Returns
Type	Description
ByteString	The bytes for egid.

getEuid()

public abstract String getEuid()

The effective user ID of the process.

string euid = 12;

Returns
Type	Description
String	The euid.

getEuidBytes()

public abstract ByteString getEuidBytes()

The effective user ID of the process.

string euid = 12;

Returns
Type	Description
ByteString	The bytes for euid.

getFile()

public abstract File getFile()

Information about the file in use by the process.

.google.backstory.File file = 3;

Returns
Type	Description
File	The file.

getFileOrBuilder()

public abstract FileOrBuilder getFileOrBuilder()

Information about the file in use by the process.

.google.backstory.File file = 3;

Returns
Type	Description
FileOrBuilder

getIntegrityLevelRid()

public abstract long getIntegrityLevelRid()

The Microsoft Windows integrity level relative ID (RID) of the process.

uint64 integrity_level_rid = 11;

Returns
Type	Description
long	The integrityLevelRid.

getIpv6()

public abstract boolean getIpv6()

This is used to determine if the process is an IPv6 process.

bool ipv6 = 19;

Returns
Type	Description
boolean	The ipv6.

getKernelDuration()

public abstract Duration getKernelDuration()

The kernel time spent in the process.

.google.protobuf.Duration kernel_duration = 20;

Returns
Type	Description
Duration	The kernelDuration.

getKernelDurationOrBuilder()

public abstract DurationOrBuilder getKernelDurationOrBuilder()

The kernel time spent in the process.

.google.protobuf.Duration kernel_duration = 20;

Returns
Type	Description
DurationOrBuilder

getParentPid() (deprecated)

public abstract String getParentPid()

Deprecated. google.backstory.Process.parent_pid is deprecated. See backstory/udm.proto;l=1877

The ID of the parent process. Deprecated: use parent_process.pid instead.

string parent_pid = 2 [deprecated = true];

Returns
Type	Description
String	The parentPid.

getParentPidBytes() (deprecated)

public abstract ByteString getParentPidBytes()

Deprecated. google.backstory.Process.parent_pid is deprecated. See backstory/udm.proto;l=1877

The ID of the parent process. Deprecated: use parent_process.pid instead.

string parent_pid = 2 [deprecated = true];

Returns
Type	Description
ByteString	The bytes for parentPid.

getParentProcess()

public abstract Process getParentProcess()

Information about the parent process.

.google.backstory.Process parent_process = 7;

Returns
Type	Description
Process	The parentProcess.

getParentProcessOrBuilder()

public abstract ProcessOrBuilder getParentProcessOrBuilder()

Information about the parent process.

.google.backstory.Process parent_process = 7;

Returns
Type	Description
ProcessOrBuilder

getPgid()

public abstract String getPgid()

The identifier that points to the process group ID leader.

string pgid = 16;

Returns
Type	Description
String	The pgid.

getPgidBytes()

public abstract ByteString getPgidBytes()

The identifier that points to the process group ID leader.

string pgid = 16;

Returns
Type	Description
ByteString	The bytes for pgid.

getPid()

public abstract String getPid()

The process ID. This field can be used as an entity indicator for process entities.

string pid = 1;

Returns
Type	Description
String	The pid.

getPidBytes()

public abstract ByteString getPidBytes()

The process ID. This field can be used as an entity indicator for process entities.

string pid = 1;

Returns
Type	Description
ByteString	The bytes for pid.

getProductSpecificParentProcessId() (deprecated)

public abstract String getProductSpecificParentProcessId()

Deprecated. google.backstory.Process.product_specific_parent_process_id is deprecated. See backstory/udm.proto;l=1928

A product specific id for the parent process. Please use parent_process.product_specific_process_id instead.

string product_specific_parent_process_id = 6 [deprecated = true];

Returns
Type	Description
String	The productSpecificParentProcessId.

getProductSpecificParentProcessIdBytes() (deprecated)

public abstract ByteString getProductSpecificParentProcessIdBytes()

Deprecated. google.backstory.Process.product_specific_parent_process_id is deprecated. See backstory/udm.proto;l=1928

A product specific id for the parent process. Please use parent_process.product_specific_process_id instead.

string product_specific_parent_process_id = 6 [deprecated = true];

Returns
Type	Description
ByteString	The bytes for productSpecificParentProcessId.

getProductSpecificProcessId()

public abstract String getProductSpecificProcessId()

A product specific process id.

string product_specific_process_id = 5;

Returns
Type	Description
String	The productSpecificProcessId.

getProductSpecificProcessIdBytes()

public abstract ByteString getProductSpecificProcessIdBytes()

A product specific process id.

string product_specific_process_id = 5;

Returns
Type	Description
ByteString	The bytes for productSpecificProcessId.

getRealDuration()

public abstract Duration getRealDuration()

The real time spent in the process. This is the sum of the kernel and user time.

.google.protobuf.Duration real_duration = 22;

Returns
Type	Description
Duration	The realDuration.

getRealDurationOrBuilder()

public abstract DurationOrBuilder getRealDurationOrBuilder()

The real time spent in the process. This is the sum of the kernel and user time.

.google.protobuf.Duration real_duration = 22;

Returns
Type	Description
DurationOrBuilder

getRgid()

public abstract String getRgid()

The real group ID of the process.

string rgid = 15;

Returns
Type	Description
String	The rgid.

getRgidBytes()

public abstract ByteString getRgidBytes()

The real group ID of the process.

string rgid = 15;

Returns
Type	Description
ByteString	The bytes for rgid.

getRuid()

public abstract String getRuid()

The real user ID of the process.

string ruid = 13;

Returns
Type	Description
String	The ruid.

getRuidBytes()

public abstract ByteString getRuidBytes()

The real user ID of the process.

string ruid = 13;

Returns
Type	Description
ByteString	The bytes for ruid.

getSessionLeaderPid()

public abstract String getSessionLeaderPid()

The process ID of the session leader process.

string session_leader_pid = 17;

Returns
Type	Description
String	The sessionLeaderPid.

getSessionLeaderPidBytes()

public abstract ByteString getSessionLeaderPidBytes()

The process ID of the session leader process.

string session_leader_pid = 17;

Returns
Type	Description
ByteString	The bytes for sessionLeaderPid.

getState()

public abstract Process.State getState()

The state of the process.

.google.backstory.Process.State state = 23;

Returns
Type	Description
Process.State	The state.

getStateValue()

public abstract int getStateValue()

The state of the process.

.google.backstory.Process.State state = 23;

Returns
Type	Description
int	The enum numeric value on the wire for state.

getTokenElevationType()

public abstract Process.TokenElevationType getTokenElevationType()

The elevation type of the process on Microsoft Windows. This determines if any privileges are removed when UAC is enabled.

.google.backstory.Process.TokenElevationType token_elevation_type = 10;

Returns
Type	Description
Process.TokenElevationType	The tokenElevationType.

getTokenElevationTypeValue()

public abstract int getTokenElevationTypeValue()

The elevation type of the process on Microsoft Windows. This determines if any privileges are removed when UAC is enabled.

.google.backstory.Process.TokenElevationType token_elevation_type = 10;

Returns
Type	Description
int	The enum numeric value on the wire for tokenElevationType.

getTty()

public abstract String getTty()

The teletype terminal which the command was executed within.

string tty = 18;

Returns
Type	Description
String	The tty.

getTtyBytes()

public abstract ByteString getTtyBytes()

The teletype terminal which the command was executed within.

string tty = 18;

Returns
Type	Description
ByteString	The bytes for tty.

getUserDuration()

public abstract Duration getUserDuration()

The user time spent in the process.

.google.protobuf.Duration user_duration = 21;

Returns
Type	Description
Duration	The userDuration.

getUserDurationOrBuilder()

public abstract DurationOrBuilder getUserDurationOrBuilder()

The user time spent in the process.

.google.protobuf.Duration user_duration = 21;

Returns
Type	Description
DurationOrBuilder

hasFile()

public abstract boolean hasFile()

Information about the file in use by the process.

.google.backstory.File file = 3;

Returns
Type	Description
boolean	Whether the file field is set.

hasKernelDuration()

public abstract boolean hasKernelDuration()

The kernel time spent in the process.

.google.protobuf.Duration kernel_duration = 20;

Returns
Type	Description
boolean	Whether the kernelDuration field is set.

hasParentProcess()

public abstract boolean hasParentProcess()

Information about the parent process.

.google.backstory.Process parent_process = 7;

Returns
Type	Description
boolean	Whether the parentProcess field is set.

hasRealDuration()

public abstract boolean hasRealDuration()

The real time spent in the process. This is the sum of the kernel and user time.

.google.protobuf.Duration real_duration = 22;

Returns
Type	Description
boolean	Whether the realDuration field is set.

hasUserDuration()

public abstract boolean hasUserDuration()

The user time spent in the process.

.google.protobuf.Duration user_duration = 21;

Returns
Type	Description
boolean	Whether the userDuration field is set.