Chronicle V1 API - Class Google::Backstory::FileMetadataPeResourceInfo (v1.4.0)

Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::FileMetadataPeResourceInfo.

File metadata for PE resource.

Inherits

  • Object

Extended By

  • Google::Protobuf::MessageExts::ClassMethods

Includes

  • Google::Protobuf::MessageExts

Methods

#entropy

def entropy() -> ::Float
Returns
  • (::Float) — Entropy of the resource.

#entropy=

def entropy=(value) -> ::Float
Parameter
  • value (::Float) — Entropy of the resource.
Returns
  • (::Float) — Entropy of the resource.

#file_type

def file_type() -> ::String
Returns
  • (::String) — File type. Note that this value may not match any of the well-known type identifiers defined in the ResourceType enum.

#file_type=

def file_type=(value) -> ::String
Parameter
  • value (::String) — File type. Note that this value may not match any of the well-known type identifiers defined in the ResourceType enum.
Returns
  • (::String) — File type. Note that this value may not match any of the well-known type identifiers defined in the ResourceType enum.

#filetype_magic

def filetype_magic() -> ::String
Returns
  • (::String) — Type of resource content, as identified by the magic Python module.

#filetype_magic=

def filetype_magic=(value) -> ::String
Parameter
  • value (::String) — Type of resource content, as identified by the magic Python module.
Returns
  • (::String) — Type of resource content, as identified by the magic Python module.

#language_code

def language_code() -> ::String
Returns
  • (::String) — Human-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification.

#language_code=

def language_code=(value) -> ::String
Parameter
  • value (::String) — Human-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification.
Returns
  • (::String) — Human-readable version of the language and sublanguage identifiers, as defined in the Microsoft Windows PE specification.

#sha256_hex

def sha256_hex() -> ::String
Returns
  • (::String) — SHA256_hex field..

#sha256_hex=

def sha256_hex=(value) -> ::String
Parameter
  • value (::String) — SHA256_hex field..
Returns
  • (::String) — SHA256_hex field..