public enum SecurityResult.Action extends Enum<SecurityResult.Action> implements ProtocolMessageEnumEnum representing different possible actions taken by the product that created the event. Google SecOps classifies:
- ALLOW and ALLOW_WITH_MODIFICATION actions as "successful".
- BLOCK, QUARANTINE, FAIL, and CHALLENGE actions as "failed". This includes all corresponding metrics (for example, AUTH_ATTEMPTS_FAIL, FILE_EXECUTIONS_FAIL, RESOURCE_READ_FAIL, and so on).
- UNKNOWN_ACTION actions as neither "successful" nor "failed", because, for example, logs might not provide information whether a login event occurred but some kind of "unknown" error was issued nonetheless.
Protobuf enum google.backstory.SecurityResult.Action
Implements
ProtocolMessageEnumStatic Fields |
|
|---|---|
| Name | Description |
ALLOW |
Allowed. |
ALLOW_VALUE |
Allowed. |
ALLOW_WITH_MODIFICATION |
Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded). |
ALLOW_WITH_MODIFICATION_VALUE |
Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded). |
BLOCK |
Blocked. |
BLOCK_VALUE |
Blocked. |
CHALLENGE |
Challenged (e.g. the user was challenged by a Captcha, 2FA). |
CHALLENGE_VALUE |
Challenged (e.g. the user was challenged by a Captcha, 2FA). |
FAIL |
Failed (e.g. the event was allowed but failed). |
FAIL_VALUE |
Failed (e.g. the event was allowed but failed). |
QUARANTINE |
Put somewhere for later analysis (does NOT imply block). |
QUARANTINE_VALUE |
Put somewhere for later analysis (does NOT imply block). |
UNKNOWN_ACTION |
The default action. |
UNKNOWN_ACTION_VALUE |
The default action. |
UNRECOGNIZED |
|
Static Methods |
|
|---|---|
| Name | Description |
forNumber(int value) |
|
getDescriptor() |
|
internalGetValueMap() |
|
valueOf(Descriptors.EnumValueDescriptor desc) |
|
valueOf(int value) |
Deprecated. Use #forNumber(int) instead. |
valueOf(String name) |
|
values() |
|
Methods |
|
|---|---|
| Name | Description |
getDescriptorForType() |
|
getNumber() |
|
getValueDescriptor() |
|