Class ProcessDetails

    • Method Detail

      • name

        public final String name()

        The name of the process.

        Returns:
        The name of the process.
      • executablePath

        public final String executablePath()

        The absolute path of the process executable file.

        Returns:
        The absolute path of the process executable file.
      • executableSha256

        public final String executableSha256()

        The SHA256 hash of the process executable.

        Returns:
        The SHA256 hash of the process executable.
      • namespacePid

        public final Integer namespacePid()

        The ID of the child process.

        Returns:
        The ID of the child process.
      • pwd

        public final String pwd()

        The present working directory of the process.

        Returns:
        The present working directory of the process.
      • pid

        public final Integer pid()

        The ID of the process.

        Returns:
        The ID of the process.
      • startTime

        public final Instant startTime()

        The time when the process started. This is in UTC format.

        Returns:
        The time when the process started. This is in UTC format.
      • uuid

        public final String uuid()

        The unique ID assigned to the process by GuardDuty.

        Returns:
        The unique ID assigned to the process by GuardDuty.
      • parentUuid

        public final String parentUuid()

        The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.

        Returns:
        The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.
      • user

        public final String user()

        The user that executed the process.

        Returns:
        The user that executed the process.
      • userId

        public final Integer userId()

        The unique ID of the user that executed the process.

        Returns:
        The unique ID of the user that executed the process.
      • euid

        public final Integer euid()

        The effective user ID of the user that executed the process.

        Returns:
        The effective user ID of the user that executed the process.
      • hasLineage

        public final boolean hasLineage()
        For responses, this returns true if the service returned a value for the Lineage property. This DOES NOT check that the value is non-empty (for which, you should check the isEmpty() method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified.
      • lineage

        public final List<LineageObject> lineage()

        Information about the process's lineage.

        Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.

        This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the hasLineage() method.

        Returns:
        Information about the process's lineage.
      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object
      • equals

        public final boolean equals​(Object obj)
        Overrides:
        equals in class Object
      • toString

        public final String toString()
        Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.
        Overrides:
        toString in class Object
      • getValueForField

        public final <T> Optional<T> getValueForField​(String fieldName,
                                                      Class<T> clazz)