Class: Aws::GuardDuty::Types::ProcessDetails

Inherits:

Struct

• Object
• Struct
• Aws::GuardDuty::Types::ProcessDetails

Includes:

Structure

Defined in:

lib/aws-sdk-guardduty/types.rb

Overview

Information about the observed process.

See Also:

• AWS API Documentation

Constant Summary

SENSITIVE =

[]

Instance Attribute Summary

• #euid ⇒ Integer

  The effective user ID of the user that executed the process.

• #executable_path ⇒ String

  The absolute path of the process executable file.

• #executable_sha_256 ⇒ String

  The ‘SHA256` hash of the process executable.

• #lineage ⇒ Array<Types::LineageObject>

  Information about the process’s lineage.

• #name ⇒ String

  The name of the process.

• #namespace_pid ⇒ Integer

  The ID of the child process.

• #parent_uuid ⇒ String

  The unique ID of the parent process.

• #pid ⇒ Integer

  The ID of the process.

• #pwd ⇒ String

  The present working directory of the process.

• #start_time ⇒ Time

  The time when the process started.

• #user ⇒ String

  The user that executed the process.

• #user_id ⇒ Integer

  The unique ID of the user that executed the process.

• #uuid ⇒ String

  The unique ID assigned to the process by GuardDuty.

Instance Attribute Details

#euid ⇒ Integer

The effective user ID of the user that executed the process.

Returns:

• (Integer)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#executable_path ⇒ String

The absolute path of the process executable file.

Returns:

• (String)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#executable_sha_256 ⇒ String

The ‘SHA256` hash of the process executable.

Returns:

• (String)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#lineage ⇒ Array<Types::LineageObject>

Information about the process’s lineage.

Returns:

• (Array<Types::LineageObject>)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#name ⇒ String

The name of the process.

Returns:

• (String)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#namespace_pid ⇒ Integer

The ID of the child process.

Returns:

• (Integer)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#parent_uuid ⇒ String

The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.

Returns:

• (String)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#pid ⇒ Integer

The ID of the process.

Returns:

• (Integer)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#pwd ⇒ String

The present working directory of the process.

Returns:

• (String)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#start_time ⇒ Time

The time when the process started. This is in UTC format.

Returns:

• (Time)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#user ⇒ String

The user that executed the process.

Returns:

• (String)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#user_id ⇒ Integer

The unique ID of the user that executed the process.

Returns:

• (Integer)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end

#uuid ⇒ String

The unique ID assigned to the process by GuardDuty.

Returns:

• (String)

# File 'lib/aws-sdk-guardduty/types.rb', line 10143

class ProcessDetails < Struct.new(
  :name,
  :executable_path,
  :executable_sha_256,
  :namespace_pid,
  :pwd,
  :pid,
  :start_time,
  :uuid,
  :parent_uuid,
  :user,
  :user_id,
  :euid,
  :lineage)
  SENSITIVE = []
  include Aws::Structure
end