public static final class KernelRootkit.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder> implements KernelRootkitOrBuilder
Kernel mode rootkit signatures.Protobuf type
google.cloud.securitycenter.v1.KernelRootkit| Modifier and Type | Method and Description |
|---|---|
KernelRootkit.Builder |
addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
KernelRootkit |
build() |
KernelRootkit |
buildPartial() |
KernelRootkit.Builder |
clear() |
KernelRootkit.Builder |
clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
KernelRootkit.Builder |
clearName()
Rootkit name, when available.
|
KernelRootkit.Builder |
clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
KernelRootkit.Builder |
clearUnexpectedCodeModification()
True if unexpected modifications of kernel code memory are present.
|
KernelRootkit.Builder |
clearUnexpectedFtraceHandler()
True if `ftrace` points are present with callbacks pointing to regions
that are not in the expected kernel or module code range.
|
KernelRootkit.Builder |
clearUnexpectedInterruptHandler()
True if interrupt handlers that are are not in the expected kernel or
module code regions are present.
|
KernelRootkit.Builder |
clearUnexpectedKernelCodePages()
True if kernel code pages that are not in the expected kernel or module
code regions are present.
|
KernelRootkit.Builder |
clearUnexpectedKprobeHandler()
True if `kprobe` points are present with callbacks pointing to regions
that are not in the expected kernel or module code range.
|
KernelRootkit.Builder |
clearUnexpectedProcessesInRunqueue()
True if unexpected processes in the scheduler run queue are present.
|
KernelRootkit.Builder |
clearUnexpectedReadOnlyDataModification()
True if unexpected modifications of kernel read-only data memory are
present.
|
KernelRootkit.Builder |
clearUnexpectedSystemCallHandler()
True if system call handlers that are are not in the expected kernel or
module code regions are present.
|
KernelRootkit.Builder |
clone() |
KernelRootkit |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
String |
getName()
Rootkit name, when available.
|
com.google.protobuf.ByteString |
getNameBytes()
Rootkit name, when available.
|
boolean |
getUnexpectedCodeModification()
True if unexpected modifications of kernel code memory are present.
|
boolean |
getUnexpectedFtraceHandler()
True if `ftrace` points are present with callbacks pointing to regions
that are not in the expected kernel or module code range.
|
boolean |
getUnexpectedInterruptHandler()
True if interrupt handlers that are are not in the expected kernel or
module code regions are present.
|
boolean |
getUnexpectedKernelCodePages()
True if kernel code pages that are not in the expected kernel or module
code regions are present.
|
boolean |
getUnexpectedKprobeHandler()
True if `kprobe` points are present with callbacks pointing to regions
that are not in the expected kernel or module code range.
|
boolean |
getUnexpectedProcessesInRunqueue()
True if unexpected processes in the scheduler run queue are present.
|
boolean |
getUnexpectedReadOnlyDataModification()
True if unexpected modifications of kernel read-only data memory are
present.
|
boolean |
getUnexpectedSystemCallHandler()
True if system call handlers that are are not in the expected kernel or
module code regions are present.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
KernelRootkit.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
KernelRootkit.Builder |
mergeFrom(KernelRootkit other) |
KernelRootkit.Builder |
mergeFrom(com.google.protobuf.Message other) |
KernelRootkit.Builder |
mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
KernelRootkit.Builder |
setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
KernelRootkit.Builder |
setName(String value)
Rootkit name, when available.
|
KernelRootkit.Builder |
setNameBytes(com.google.protobuf.ByteString value)
Rootkit name, when available.
|
KernelRootkit.Builder |
setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
KernelRootkit.Builder |
setUnexpectedCodeModification(boolean value)
True if unexpected modifications of kernel code memory are present.
|
KernelRootkit.Builder |
setUnexpectedFtraceHandler(boolean value)
True if `ftrace` points are present with callbacks pointing to regions
that are not in the expected kernel or module code range.
|
KernelRootkit.Builder |
setUnexpectedInterruptHandler(boolean value)
True if interrupt handlers that are are not in the expected kernel or
module code regions are present.
|
KernelRootkit.Builder |
setUnexpectedKernelCodePages(boolean value)
True if kernel code pages that are not in the expected kernel or module
code regions are present.
|
KernelRootkit.Builder |
setUnexpectedKprobeHandler(boolean value)
True if `kprobe` points are present with callbacks pointing to regions
that are not in the expected kernel or module code range.
|
KernelRootkit.Builder |
setUnexpectedProcessesInRunqueue(boolean value)
True if unexpected processes in the scheduler run queue are present.
|
KernelRootkit.Builder |
setUnexpectedReadOnlyDataModification(boolean value)
True if unexpected modifications of kernel read-only data memory are
present.
|
KernelRootkit.Builder |
setUnexpectedSystemCallHandler(boolean value)
True if system call handlers that are are not in the expected kernel or
module code regions are present.
|
KernelRootkit.Builder |
setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, internalGetMutableMapField, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic KernelRootkit build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic KernelRootkit buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic KernelRootkit.Builder clone()
clone in interface com.google.protobuf.Message.Builderclone in interface com.google.protobuf.MessageLite.Builderclone in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
setField in interface com.google.protobuf.Message.BuildersetField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField in interface com.google.protobuf.Message.BuilderclearField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof in interface com.google.protobuf.Message.BuilderclearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface com.google.protobuf.Message.BuildersetRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface com.google.protobuf.Message.BuilderaddRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<KernelRootkit.Builder>public KernelRootkit.Builder mergeFrom(KernelRootkit other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public KernelRootkit.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<KernelRootkit.Builder>IOExceptionpublic String getName()
Rootkit name, when available.
string name = 1;getName in interface KernelRootkitOrBuilderpublic com.google.protobuf.ByteString getNameBytes()
Rootkit name, when available.
string name = 1;getNameBytes in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setName(String value)
Rootkit name, when available.
string name = 1;value - The name to set.public KernelRootkit.Builder clearName()
Rootkit name, when available.
string name = 1;public KernelRootkit.Builder setNameBytes(com.google.protobuf.ByteString value)
Rootkit name, when available.
string name = 1;value - The bytes for name to set.public boolean getUnexpectedCodeModification()
True if unexpected modifications of kernel code memory are present.
bool unexpected_code_modification = 2;getUnexpectedCodeModification in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedCodeModification(boolean value)
True if unexpected modifications of kernel code memory are present.
bool unexpected_code_modification = 2;value - The unexpectedCodeModification to set.public KernelRootkit.Builder clearUnexpectedCodeModification()
True if unexpected modifications of kernel code memory are present.
bool unexpected_code_modification = 2;public boolean getUnexpectedReadOnlyDataModification()
True if unexpected modifications of kernel read-only data memory are present.
bool unexpected_read_only_data_modification = 3;getUnexpectedReadOnlyDataModification in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedReadOnlyDataModification(boolean value)
True if unexpected modifications of kernel read-only data memory are present.
bool unexpected_read_only_data_modification = 3;value - The unexpectedReadOnlyDataModification to set.public KernelRootkit.Builder clearUnexpectedReadOnlyDataModification()
True if unexpected modifications of kernel read-only data memory are present.
bool unexpected_read_only_data_modification = 3;public boolean getUnexpectedFtraceHandler()
True if `ftrace` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
bool unexpected_ftrace_handler = 4;getUnexpectedFtraceHandler in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedFtraceHandler(boolean value)
True if `ftrace` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
bool unexpected_ftrace_handler = 4;value - The unexpectedFtraceHandler to set.public KernelRootkit.Builder clearUnexpectedFtraceHandler()
True if `ftrace` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
bool unexpected_ftrace_handler = 4;public boolean getUnexpectedKprobeHandler()
True if `kprobe` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
bool unexpected_kprobe_handler = 5;getUnexpectedKprobeHandler in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedKprobeHandler(boolean value)
True if `kprobe` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
bool unexpected_kprobe_handler = 5;value - The unexpectedKprobeHandler to set.public KernelRootkit.Builder clearUnexpectedKprobeHandler()
True if `kprobe` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
bool unexpected_kprobe_handler = 5;public boolean getUnexpectedKernelCodePages()
True if kernel code pages that are not in the expected kernel or module code regions are present.
bool unexpected_kernel_code_pages = 6;getUnexpectedKernelCodePages in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedKernelCodePages(boolean value)
True if kernel code pages that are not in the expected kernel or module code regions are present.
bool unexpected_kernel_code_pages = 6;value - The unexpectedKernelCodePages to set.public KernelRootkit.Builder clearUnexpectedKernelCodePages()
True if kernel code pages that are not in the expected kernel or module code regions are present.
bool unexpected_kernel_code_pages = 6;public boolean getUnexpectedSystemCallHandler()
True if system call handlers that are are not in the expected kernel or module code regions are present.
bool unexpected_system_call_handler = 7;getUnexpectedSystemCallHandler in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedSystemCallHandler(boolean value)
True if system call handlers that are are not in the expected kernel or module code regions are present.
bool unexpected_system_call_handler = 7;value - The unexpectedSystemCallHandler to set.public KernelRootkit.Builder clearUnexpectedSystemCallHandler()
True if system call handlers that are are not in the expected kernel or module code regions are present.
bool unexpected_system_call_handler = 7;public boolean getUnexpectedInterruptHandler()
True if interrupt handlers that are are not in the expected kernel or module code regions are present.
bool unexpected_interrupt_handler = 8;getUnexpectedInterruptHandler in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedInterruptHandler(boolean value)
True if interrupt handlers that are are not in the expected kernel or module code regions are present.
bool unexpected_interrupt_handler = 8;value - The unexpectedInterruptHandler to set.public KernelRootkit.Builder clearUnexpectedInterruptHandler()
True if interrupt handlers that are are not in the expected kernel or module code regions are present.
bool unexpected_interrupt_handler = 8;public boolean getUnexpectedProcessesInRunqueue()
True if unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.
bool unexpected_processes_in_runqueue = 9;getUnexpectedProcessesInRunqueue in interface KernelRootkitOrBuilderpublic KernelRootkit.Builder setUnexpectedProcessesInRunqueue(boolean value)
True if unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.
bool unexpected_processes_in_runqueue = 9;value - The unexpectedProcessesInRunqueue to set.public KernelRootkit.Builder clearUnexpectedProcessesInRunqueue()
True if unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.
bool unexpected_processes_in_runqueue = 9;public final KernelRootkit.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields in interface com.google.protobuf.Message.BuildersetUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>public final KernelRootkit.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields in interface com.google.protobuf.Message.BuildermergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>Copyright © 2024 Google LLC. All rights reserved.