Enum SecurityResult.SecurityCategory (0.3.0)

0.3.0 (latest) 0.2.0 0.1.0

public enum SecurityResult.SecurityCategory extends Enum<SecurityResult.SecurityCategory> implements ProtocolMessageEnum

SecurityCategory is used to standardize security categories across products so one event is not categorized as "malware" and another as a "virus".

Protobuf enum google.backstory.SecurityResult.SecurityCategory

Implements

ProtocolMessageEnum

Inherited Members

Enum.<T>valueOf(Class<T>,String)

Enum.clone()

Enum.compareTo(E)

Enum.equals(Object)

Enum.finalize()

Enum.getDeclaringClass()

Enum.hashCode()

Enum.name()

Enum.ordinal()

Enum.toString()

Object.getClass()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Fields
Name	Description
ACL_VIOLATION	Unauthorized access attempted, including attempted access to files, web services, processes, web objects, etc. ACL_VIOLATION = 30000;
ACL_VIOLATION_VALUE	Unauthorized access attempted, including attempted access to files, web services, processes, web objects, etc. ACL_VIOLATION = 30000;
AUTH_VIOLATION	Authentication failed (e.g. bad password or bad 2-factor authentication). AUTH_VIOLATION = 40000;
AUTH_VIOLATION_VALUE	Authentication failed (e.g. bad password or bad 2-factor authentication). AUTH_VIOLATION = 40000;
DATA_AT_REST	DLP: Sensitive data found at rest in a scan. DATA_AT_REST = 60100;
DATA_AT_REST_VALUE	DLP: Sensitive data found at rest in a scan. DATA_AT_REST = 60100;
DATA_DESTRUCTION	Attempt to destroy/delete data. DATA_DESTRUCTION = 60200;
DATA_DESTRUCTION_VALUE	Attempt to destroy/delete data. DATA_DESTRUCTION = 60200;
DATA_EXFILTRATION	DLP: Sensitive data transmission, copy to thumb drive. DATA_EXFILTRATION = 60000;
DATA_EXFILTRATION_VALUE	DLP: Sensitive data transmission, copy to thumb drive. DATA_EXFILTRATION = 60000;
EXPLOIT	Exploit: For all manner of exploits including attempted overflows, bad protocol encodings, ROP, SQL injection, etc. For both network and host- based exploits. EXPLOIT = 50000;
EXPLOIT_VALUE	Exploit: For all manner of exploits including attempted overflows, bad protocol encodings, ROP, SQL injection, etc. For both network and host- based exploits. EXPLOIT = 50000;
MAIL_PHISHING	Phishing email, chat messages, etc. MAIL_PHISHING = 70100;
MAIL_PHISHING_VALUE	Phishing email, chat messages, etc. MAIL_PHISHING = 70100;
MAIL_SPAM	Spam email, message, etc. MAIL_SPAM = 70000;
MAIL_SPAM_VALUE	Spam email, message, etc. MAIL_SPAM = 70000;
MAIL_SPOOFING	Spoofed source email address, etc. MAIL_SPOOFING = 70200;
MAIL_SPOOFING_VALUE	Spoofed source email address, etc. MAIL_SPOOFING = 70200;
NETWORK_CATEGORIZED_CONTENT	Non-security related: URL has category like gambling or porn. NETWORK_CATEGORIZED_CONTENT = 20200;
NETWORK_CATEGORIZED_CONTENT_VALUE	Non-security related: URL has category like gambling or porn. NETWORK_CATEGORIZED_CONTENT = 20200;
NETWORK_COMMAND_AND_CONTROL	If we know this is a C&C channel. NETWORK_COMMAND_AND_CONTROL = 20500;
NETWORK_COMMAND_AND_CONTROL_VALUE	If we know this is a C&C channel. NETWORK_COMMAND_AND_CONTROL = 20500;
NETWORK_DENIAL_OF_SERVICE	DoS, DDoS. NETWORK_DENIAL_OF_SERVICE = 20300;
NETWORK_DENIAL_OF_SERVICE_VALUE	DoS, DDoS. NETWORK_DENIAL_OF_SERVICE = 20300;
NETWORK_MALICIOUS	Includes C&C or network exploit. NETWORK_MALICIOUS = 20000;
NETWORK_MALICIOUS_VALUE	Includes C&C or network exploit. NETWORK_MALICIOUS = 20000;
NETWORK_RECON	Port scan detected by an IDS, probing of web app. NETWORK_RECON = 20400;
NETWORK_RECON_VALUE	Port scan detected by an IDS, probing of web app. NETWORK_RECON = 20400;
NETWORK_SUSPICIOUS	Suspicious activity, such as potential reverse tunnel. NETWORK_SUSPICIOUS = 20100;
NETWORK_SUSPICIOUS_VALUE	Suspicious activity, such as potential reverse tunnel. NETWORK_SUSPICIOUS = 20100;
PHISHING	Phishing pages, pops, https phishing etc. PHISHING = 90002;
PHISHING_VALUE	Phishing pages, pops, https phishing etc. PHISHING = 90002;
POLICY_VIOLATION	Security-related policy violation (e.g. firewall/proxy/HIPS rule violated, NAC block action). POLICY_VIOLATION = 80000;
POLICY_VIOLATION_VALUE	Security-related policy violation (e.g. firewall/proxy/HIPS rule violated, NAC block action). POLICY_VIOLATION = 80000;
SOCIAL_ENGINEERING	Threats which manipulate to break normal security procedures. SOCIAL_ENGINEERING = 90001;
SOCIAL_ENGINEERING_VALUE	Threats which manipulate to break normal security procedures. SOCIAL_ENGINEERING = 90001;
SOFTWARE_MALICIOUS	Malware, spyware, rootkit. SOFTWARE_MALICIOUS = 10000;
SOFTWARE_MALICIOUS_VALUE	Malware, spyware, rootkit. SOFTWARE_MALICIOUS = 10000;
SOFTWARE_PUA	Potentially Unwanted App (such as adware). SOFTWARE_PUA = 10200;
SOFTWARE_PUA_VALUE	Potentially Unwanted App (such as adware). SOFTWARE_PUA = 10200;
SOFTWARE_SUSPICIOUS	Below the conviction threshold; probably bad. SOFTWARE_SUSPICIOUS = 10100;
SOFTWARE_SUSPICIOUS_VALUE	Below the conviction threshold; probably bad. SOFTWARE_SUSPICIOUS = 10100;
TOR_EXIT_NODE	TOR Exit Nodes. TOR_EXIT_NODE = 60300;
TOR_EXIT_NODE_VALUE	TOR Exit Nodes. TOR_EXIT_NODE = 60300;
UNKNOWN_CATEGORY	The default category. UNKNOWN_CATEGORY = 0;
UNKNOWN_CATEGORY_VALUE	The default category. UNKNOWN_CATEGORY = 0;
UNRECOGNIZED

Static Methods
Name	Description
forNumber(int value)
getDescriptor()
internalGetValueMap()
valueOf(Descriptors.EnumValueDescriptor desc)
valueOf(int value)	Deprecated. Use #forNumber(int) instead.
valueOf(String name)
values()

Methods
Name	Description
getDescriptorForType()
getNumber()
getValueDescriptor()