Enum SecurityResult.Action (0.3.0)

public enum SecurityResult.Action extends Enum<SecurityResult.Action> implements ProtocolMessageEnum

Enum representing different possible actions taken by the product that created the event. Google SecOps classifies:

  • ALLOW and ALLOW_WITH_MODIFICATION actions as "successful".
  • BLOCK, QUARANTINE, FAIL, and CHALLENGE actions as "failed". This includes all corresponding metrics (for example, AUTH_ATTEMPTS_FAIL, FILE_EXECUTIONS_FAIL, RESOURCE_READ_FAIL, and so on).
  • UNKNOWN_ACTION actions as neither "successful" nor "failed", because, for example, logs might not provide information whether a login event occurred but some kind of "unknown" error was issued nonetheless.

Protobuf enum google.backstory.SecurityResult.Action

Implements

ProtocolMessageEnum

Static Fields

Name Description
ALLOW

Allowed.

ALLOW = 1;

ALLOW_VALUE

Allowed.

ALLOW = 1;

ALLOW_WITH_MODIFICATION

Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).

ALLOW_WITH_MODIFICATION = 3;

ALLOW_WITH_MODIFICATION_VALUE

Strip, modify something (e.g. File or email was disinfected or rewritten and still forwarded).

ALLOW_WITH_MODIFICATION = 3;

BLOCK

Blocked.

BLOCK = 2;

BLOCK_VALUE

Blocked.

BLOCK = 2;

CHALLENGE

Challenged (e.g. the user was challenged by a Captcha, 2FA).

CHALLENGE = 6;

CHALLENGE_VALUE

Challenged (e.g. the user was challenged by a Captcha, 2FA).

CHALLENGE = 6;

FAIL

Failed (e.g. the event was allowed but failed).

FAIL = 5;

FAIL_VALUE

Failed (e.g. the event was allowed but failed).

FAIL = 5;

QUARANTINE

Put somewhere for later analysis (does NOT imply block).

QUARANTINE = 4;

QUARANTINE_VALUE

Put somewhere for later analysis (does NOT imply block).

QUARANTINE = 4;

UNKNOWN_ACTION

The default action.

UNKNOWN_ACTION = 0;

UNKNOWN_ACTION_VALUE

The default action.

UNKNOWN_ACTION = 0;

UNRECOGNIZED

Static Methods

Name Description
forNumber(int value)
getDescriptor()
internalGetValueMap()
valueOf(Descriptors.EnumValueDescriptor desc)
valueOf(int value)

Deprecated. Use #forNumber(int) instead.

valueOf(String name)
values()

Methods

Name Description
getDescriptorForType()
getNumber()
getValueDescriptor()