public final class Finding extends GeneratedMessageV3 implements FindingOrBuilder
Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.Protobuf type
google.cloud.securitycenter.v1.Finding
Modifier and Type | Class and Description |
---|---|
static class |
Finding.Builder
Security Command Center finding.
|
static class |
Finding.FindingClass
Represents what kind of Finding it is.
|
static class |
Finding.Mute
Mute state a finding can be in.
|
static class |
Finding.Severity
The severity of the finding.
|
static class |
Finding.State
The state of the finding.
|
GeneratedMessageV3.BuilderParent, GeneratedMessageV3.ExtendableBuilder<MessageType extends GeneratedMessageV3.ExtendableMessage,BuilderType extends GeneratedMessageV3.ExtendableBuilder<MessageType,BuilderType>>, GeneratedMessageV3.ExtendableMessage<MessageType extends GeneratedMessageV3.ExtendableMessage>, GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends GeneratedMessageV3.ExtendableMessage>, GeneratedMessageV3.FieldAccessorTable, GeneratedMessageV3.UnusedPrivateParameter
AbstractMessageLite.InternalOneOfEnum
alwaysUseFieldBuilders, unknownFields
memoizedSize
memoizedHashCode
Modifier and Type | Method and Description |
---|---|
boolean |
containsContacts(String key)
Output only.
|
boolean |
containsExternalSystems(String key)
Output only.
|
boolean |
containsSourceProperties(String key)
Source specific properties.
|
boolean |
equals(Object obj) |
Access |
getAccess()
Access details associated to the Finding, such as more information on the
caller, which method was accessed, from where, etc.
|
AccessOrBuilder |
getAccessOrBuilder()
Access details associated to the Finding, such as more information on the
caller, which method was accessed, from where, etc.
|
String |
getCanonicalName()
The canonical name of the finding.
|
ByteString |
getCanonicalNameBytes()
The canonical name of the finding.
|
String |
getCategory()
The additional taxonomy group within findings from a given source.
|
ByteString |
getCategoryBytes()
The additional taxonomy group within findings from a given source.
|
Compliance |
getCompliances(int index)
Contains compliance information for security standards associated to the
finding.
|
int |
getCompliancesCount()
Contains compliance information for security standards associated to the
finding.
|
List<Compliance> |
getCompliancesList()
Contains compliance information for security standards associated to the
finding.
|
ComplianceOrBuilder |
getCompliancesOrBuilder(int index)
Contains compliance information for security standards associated to the
finding.
|
List<? extends ComplianceOrBuilder> |
getCompliancesOrBuilderList()
Contains compliance information for security standards associated to the
finding.
|
Connection |
getConnections(int index)
Contains information about the IP connection associated with the finding.
|
int |
getConnectionsCount()
Contains information about the IP connection associated with the finding.
|
List<Connection> |
getConnectionsList()
Contains information about the IP connection associated with the finding.
|
ConnectionOrBuilder |
getConnectionsOrBuilder(int index)
Contains information about the IP connection associated with the finding.
|
List<? extends ConnectionOrBuilder> |
getConnectionsOrBuilderList()
Contains information about the IP connection associated with the finding.
|
Map<String,ContactDetails> |
getContacts()
Deprecated.
|
int |
getContactsCount()
Output only.
|
Map<String,ContactDetails> |
getContactsMap()
Output only.
|
ContactDetails |
getContactsOrDefault(String key,
ContactDetails defaultValue)
Output only.
|
ContactDetails |
getContactsOrThrow(String key)
Output only.
|
Container |
getContainers(int index)
Containers associated with the finding.
|
int |
getContainersCount()
Containers associated with the finding.
|
List<Container> |
getContainersList()
Containers associated with the finding.
|
ContainerOrBuilder |
getContainersOrBuilder(int index)
Containers associated with the finding.
|
List<? extends ContainerOrBuilder> |
getContainersOrBuilderList()
Containers associated with the finding.
|
Timestamp |
getCreateTime()
The time at which the finding was created in Security Command Center.
|
TimestampOrBuilder |
getCreateTimeOrBuilder()
The time at which the finding was created in Security Command Center.
|
Database |
getDatabase()
Database associated with the finding.
|
DatabaseOrBuilder |
getDatabaseOrBuilder()
Database associated with the finding.
|
static Finding |
getDefaultInstance() |
Finding |
getDefaultInstanceForType() |
String |
getDescription()
Contains more detail about the finding.
|
ByteString |
getDescriptionBytes()
Contains more detail about the finding.
|
static Descriptors.Descriptor |
getDescriptor() |
Timestamp |
getEventTime()
The time the finding was first detected.
|
TimestampOrBuilder |
getEventTimeOrBuilder()
The time the finding was first detected.
|
Exfiltration |
getExfiltration()
Represents exfiltration associated with the Finding.
|
ExfiltrationOrBuilder |
getExfiltrationOrBuilder()
Represents exfiltration associated with the Finding.
|
Map<String,ExternalSystem> |
getExternalSystems()
Deprecated.
|
int |
getExternalSystemsCount()
Output only.
|
Map<String,ExternalSystem> |
getExternalSystemsMap()
Output only.
|
ExternalSystem |
getExternalSystemsOrDefault(String key,
ExternalSystem defaultValue)
Output only.
|
ExternalSystem |
getExternalSystemsOrThrow(String key)
Output only.
|
String |
getExternalUri()
The URI that, if available, points to a web page outside of Security
Command Center where additional information about the finding can be found.
|
ByteString |
getExternalUriBytes()
The URI that, if available, points to a web page outside of Security
Command Center where additional information about the finding can be found.
|
Finding.FindingClass |
getFindingClass()
The class of the finding.
|
int |
getFindingClassValue()
The class of the finding.
|
IamBinding |
getIamBindings(int index)
Represents IAM bindings associated with the Finding.
|
int |
getIamBindingsCount()
Represents IAM bindings associated with the Finding.
|
List<IamBinding> |
getIamBindingsList()
Represents IAM bindings associated with the Finding.
|
IamBindingOrBuilder |
getIamBindingsOrBuilder(int index)
Represents IAM bindings associated with the Finding.
|
List<? extends IamBindingOrBuilder> |
getIamBindingsOrBuilderList()
Represents IAM bindings associated with the Finding.
|
Indicator |
getIndicator()
Represents what's commonly known as an Indicator of compromise (IoC) in
computer forensics.
|
IndicatorOrBuilder |
getIndicatorOrBuilder()
Represents what's commonly known as an Indicator of compromise (IoC) in
computer forensics.
|
Kubernetes |
getKubernetes()
Kubernetes resources associated with the finding.
|
KubernetesOrBuilder |
getKubernetesOrBuilder()
Kubernetes resources associated with the finding.
|
MitreAttack |
getMitreAttack()
MITRE ATT&CK tactics and techniques related to this finding.
|
MitreAttackOrBuilder |
getMitreAttackOrBuilder()
MITRE ATT&CK tactics and techniques related to this finding.
|
Finding.Mute |
getMute()
Indicates the mute state of a finding (either muted, unmuted
or undefined).
|
String |
getMuteInitiator()
First known as mute_annotation.
|
ByteString |
getMuteInitiatorBytes()
First known as mute_annotation.
|
Timestamp |
getMuteUpdateTime()
Output only.
|
TimestampOrBuilder |
getMuteUpdateTimeOrBuilder()
Output only.
|
int |
getMuteValue()
Indicates the mute state of a finding (either muted, unmuted
or undefined).
|
String |
getName()
The relative resource name of this finding.
|
ByteString |
getNameBytes()
The relative resource name of this finding.
|
String |
getNextSteps()
Next steps associate to the finding.
|
ByteString |
getNextStepsBytes()
Next steps associate to the finding.
|
String |
getParent()
The relative resource name of the source the finding belongs to.
|
ByteString |
getParentBytes()
The relative resource name of the source the finding belongs to.
|
String |
getParentDisplayName()
Output only.
|
ByteString |
getParentDisplayNameBytes()
Output only.
|
Parser<Finding> |
getParserForType() |
Process |
getProcesses(int index)
Represents operating system processes associated with the Finding.
|
int |
getProcessesCount()
Represents operating system processes associated with the Finding.
|
List<Process> |
getProcessesList()
Represents operating system processes associated with the Finding.
|
ProcessOrBuilder |
getProcessesOrBuilder(int index)
Represents operating system processes associated with the Finding.
|
List<? extends ProcessOrBuilder> |
getProcessesOrBuilderList()
Represents operating system processes associated with the Finding.
|
String |
getResourceName()
For findings on Google Cloud resources, the full resource
name of the Google Cloud resource this finding is for.
|
ByteString |
getResourceNameBytes()
For findings on Google Cloud resources, the full resource
name of the Google Cloud resource this finding is for.
|
SecurityMarks |
getSecurityMarks()
Output only.
|
SecurityMarksOrBuilder |
getSecurityMarksOrBuilder()
Output only.
|
int |
getSerializedSize() |
Finding.Severity |
getSeverity()
The severity of the finding.
|
int |
getSeverityValue()
The severity of the finding.
|
Map<String,Value> |
getSourceProperties()
Deprecated.
|
int |
getSourcePropertiesCount()
Source specific properties.
|
Map<String,Value> |
getSourcePropertiesMap()
Source specific properties.
|
Value |
getSourcePropertiesOrDefault(String key,
Value defaultValue)
Source specific properties.
|
Value |
getSourcePropertiesOrThrow(String key)
Source specific properties.
|
Finding.State |
getState()
The state of the finding.
|
int |
getStateValue()
The state of the finding.
|
UnknownFieldSet |
getUnknownFields() |
Vulnerability |
getVulnerability()
Represents vulnerability specific fields like cve, cvss scores etc.
|
VulnerabilityOrBuilder |
getVulnerabilityOrBuilder()
Represents vulnerability specific fields like cve, cvss scores etc.
|
boolean |
hasAccess()
Access details associated to the Finding, such as more information on the
caller, which method was accessed, from where, etc.
|
boolean |
hasCreateTime()
The time at which the finding was created in Security Command Center.
|
boolean |
hasDatabase()
Database associated with the finding.
|
boolean |
hasEventTime()
The time the finding was first detected.
|
boolean |
hasExfiltration()
Represents exfiltration associated with the Finding.
|
int |
hashCode() |
boolean |
hasIndicator()
Represents what's commonly known as an Indicator of compromise (IoC) in
computer forensics.
|
boolean |
hasKubernetes()
Kubernetes resources associated with the finding.
|
boolean |
hasMitreAttack()
MITRE ATT&CK tactics and techniques related to this finding.
|
boolean |
hasMuteUpdateTime()
Output only.
|
boolean |
hasSecurityMarks()
Output only.
|
boolean |
hasVulnerability()
Represents vulnerability specific fields like cve, cvss scores etc.
|
protected GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
protected MapField |
internalGetMapField(int number) |
boolean |
isInitialized() |
static Finding.Builder |
newBuilder() |
static Finding.Builder |
newBuilder(Finding prototype) |
Finding.Builder |
newBuilderForType() |
protected Finding.Builder |
newBuilderForType(GeneratedMessageV3.BuilderParent parent) |
protected Object |
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused) |
static Finding |
parseDelimitedFrom(InputStream input) |
static Finding |
parseDelimitedFrom(InputStream input,
ExtensionRegistryLite extensionRegistry) |
static Finding |
parseFrom(byte[] data) |
static Finding |
parseFrom(byte[] data,
ExtensionRegistryLite extensionRegistry) |
static Finding |
parseFrom(ByteBuffer data) |
static Finding |
parseFrom(ByteBuffer data,
ExtensionRegistryLite extensionRegistry) |
static Finding |
parseFrom(ByteString data) |
static Finding |
parseFrom(ByteString data,
ExtensionRegistryLite extensionRegistry) |
static Finding |
parseFrom(CodedInputStream input) |
static Finding |
parseFrom(CodedInputStream input,
ExtensionRegistryLite extensionRegistry) |
static Finding |
parseFrom(InputStream input) |
static Finding |
parseFrom(InputStream input,
ExtensionRegistryLite extensionRegistry) |
static Parser<Finding> |
parser() |
Finding.Builder |
toBuilder() |
void |
writeTo(CodedOutputStream output) |
canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, isStringEmpty, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTag
findInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toString
addAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeTo
clone, finalize, getClass, notify, notifyAll, wait, wait, wait
findInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof
toByteArray, toByteString, writeDelimitedTo, writeTo
public static final int NAME_FIELD_NUMBER
public static final int PARENT_FIELD_NUMBER
public static final int RESOURCE_NAME_FIELD_NUMBER
public static final int STATE_FIELD_NUMBER
public static final int CATEGORY_FIELD_NUMBER
public static final int EXTERNAL_URI_FIELD_NUMBER
public static final int SOURCE_PROPERTIES_FIELD_NUMBER
public static final int SECURITY_MARKS_FIELD_NUMBER
public static final int EVENT_TIME_FIELD_NUMBER
public static final int CREATE_TIME_FIELD_NUMBER
public static final int SEVERITY_FIELD_NUMBER
public static final int CANONICAL_NAME_FIELD_NUMBER
public static final int MUTE_FIELD_NUMBER
public static final int FINDING_CLASS_FIELD_NUMBER
public static final int INDICATOR_FIELD_NUMBER
public static final int VULNERABILITY_FIELD_NUMBER
public static final int MUTE_UPDATE_TIME_FIELD_NUMBER
public static final int EXTERNAL_SYSTEMS_FIELD_NUMBER
public static final int MITRE_ATTACK_FIELD_NUMBER
public static final int ACCESS_FIELD_NUMBER
public static final int CONNECTIONS_FIELD_NUMBER
public static final int MUTE_INITIATOR_FIELD_NUMBER
public static final int PROCESSES_FIELD_NUMBER
public static final int CONTACTS_FIELD_NUMBER
public static final int COMPLIANCES_FIELD_NUMBER
public static final int PARENT_DISPLAY_NAME_FIELD_NUMBER
public static final int DESCRIPTION_FIELD_NUMBER
public static final int EXFILTRATION_FIELD_NUMBER
public static final int IAM_BINDINGS_FIELD_NUMBER
public static final int NEXT_STEPS_FIELD_NUMBER
public static final int CONTAINERS_FIELD_NUMBER
public static final int KUBERNETES_FIELD_NUMBER
public static final int DATABASE_FIELD_NUMBER
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
newInstance
in class GeneratedMessageV3
public final UnknownFieldSet getUnknownFields()
getUnknownFields
in interface MessageOrBuilder
getUnknownFields
in class GeneratedMessageV3
public static final Descriptors.Descriptor getDescriptor()
protected MapField internalGetMapField(int number)
internalGetMapField
in class GeneratedMessageV3
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable
in class GeneratedMessageV3
public String getName()
The relative resource name of this finding. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
string name = 1;
getName
in interface FindingOrBuilder
public ByteString getNameBytes()
The relative resource name of this finding. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
string name = 1;
getNameBytes
in interface FindingOrBuilder
public String getParent()
The relative resource name of the source the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. For example: "organizations/{organization_id}/sources/{source_id}"
string parent = 2;
getParent
in interface FindingOrBuilder
public ByteString getParentBytes()
The relative resource name of the source the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. For example: "organizations/{organization_id}/sources/{source_id}"
string parent = 2;
getParentBytes
in interface FindingOrBuilder
public String getResourceName()
For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.
string resource_name = 3;
getResourceName
in interface FindingOrBuilder
public ByteString getResourceNameBytes()
For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.
string resource_name = 3;
getResourceNameBytes
in interface FindingOrBuilder
public int getStateValue()
The state of the finding.
.google.cloud.securitycenter.v1.Finding.State state = 4;
getStateValue
in interface FindingOrBuilder
public Finding.State getState()
The state of the finding.
.google.cloud.securitycenter.v1.Finding.State state = 4;
getState
in interface FindingOrBuilder
public String getCategory()
The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"
string category = 5;
getCategory
in interface FindingOrBuilder
public ByteString getCategoryBytes()
The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"
string category = 5;
getCategoryBytes
in interface FindingOrBuilder
public String getExternalUri()
The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.
string external_uri = 6;
getExternalUri
in interface FindingOrBuilder
public ByteString getExternalUriBytes()
The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.
string external_uri = 6;
getExternalUriBytes
in interface FindingOrBuilder
public int getSourcePropertiesCount()
FindingOrBuilder
Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.
map<string, .google.protobuf.Value> source_properties = 7;
getSourcePropertiesCount
in interface FindingOrBuilder
public boolean containsSourceProperties(String key)
Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.
map<string, .google.protobuf.Value> source_properties = 7;
containsSourceProperties
in interface FindingOrBuilder
@Deprecated public Map<String,Value> getSourceProperties()
getSourcePropertiesMap()
instead.getSourceProperties
in interface FindingOrBuilder
public Map<String,Value> getSourcePropertiesMap()
Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.
map<string, .google.protobuf.Value> source_properties = 7;
getSourcePropertiesMap
in interface FindingOrBuilder
public Value getSourcePropertiesOrDefault(String key, Value defaultValue)
Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.
map<string, .google.protobuf.Value> source_properties = 7;
getSourcePropertiesOrDefault
in interface FindingOrBuilder
public Value getSourcePropertiesOrThrow(String key)
Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.
map<string, .google.protobuf.Value> source_properties = 7;
getSourcePropertiesOrThrow
in interface FindingOrBuilder
public boolean hasSecurityMarks()
Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];
hasSecurityMarks
in interface FindingOrBuilder
public SecurityMarks getSecurityMarks()
Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];
getSecurityMarks
in interface FindingOrBuilder
public SecurityMarksOrBuilder getSecurityMarksOrBuilder()
Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.
.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];
getSecurityMarksOrBuilder
in interface FindingOrBuilder
public boolean hasEventTime()
The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.
.google.protobuf.Timestamp event_time = 9;
hasEventTime
in interface FindingOrBuilder
public Timestamp getEventTime()
The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.
.google.protobuf.Timestamp event_time = 9;
getEventTime
in interface FindingOrBuilder
public TimestampOrBuilder getEventTimeOrBuilder()
The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.
.google.protobuf.Timestamp event_time = 9;
getEventTimeOrBuilder
in interface FindingOrBuilder
public boolean hasCreateTime()
The time at which the finding was created in Security Command Center.
.google.protobuf.Timestamp create_time = 10;
hasCreateTime
in interface FindingOrBuilder
public Timestamp getCreateTime()
The time at which the finding was created in Security Command Center.
.google.protobuf.Timestamp create_time = 10;
getCreateTime
in interface FindingOrBuilder
public TimestampOrBuilder getCreateTimeOrBuilder()
The time at which the finding was created in Security Command Center.
.google.protobuf.Timestamp create_time = 10;
getCreateTimeOrBuilder
in interface FindingOrBuilder
public int getSeverityValue()
The severity of the finding. This field is managed by the source that writes the finding.
.google.cloud.securitycenter.v1.Finding.Severity severity = 12;
getSeverityValue
in interface FindingOrBuilder
public Finding.Severity getSeverity()
The severity of the finding. This field is managed by the source that writes the finding.
.google.cloud.securitycenter.v1.Finding.Severity severity = 12;
getSeverity
in interface FindingOrBuilder
public String getCanonicalName()
The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}" or "projects/{project_number}/sources/{source_id}/findings/{finding_id}", depending on the closest CRM ancestor of the resource associated with the finding.
string canonical_name = 14;
getCanonicalName
in interface FindingOrBuilder
public ByteString getCanonicalNameBytes()
The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}" or "projects/{project_number}/sources/{source_id}/findings/{finding_id}", depending on the closest CRM ancestor of the resource associated with the finding.
string canonical_name = 14;
getCanonicalNameBytes
in interface FindingOrBuilder
public int getMuteValue()
Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
.google.cloud.securitycenter.v1.Finding.Mute mute = 15;
getMuteValue
in interface FindingOrBuilder
public Finding.Mute getMute()
Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
.google.cloud.securitycenter.v1.Finding.Mute mute = 15;
getMute
in interface FindingOrBuilder
public int getFindingClassValue()
The class of the finding.
.google.cloud.securitycenter.v1.Finding.FindingClass finding_class = 17;
getFindingClassValue
in interface FindingOrBuilder
public Finding.FindingClass getFindingClass()
The class of the finding.
.google.cloud.securitycenter.v1.Finding.FindingClass finding_class = 17;
getFindingClass
in interface FindingOrBuilder
public boolean hasIndicator()
Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise
.google.cloud.securitycenter.v1.Indicator indicator = 18;
hasIndicator
in interface FindingOrBuilder
public Indicator getIndicator()
Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise
.google.cloud.securitycenter.v1.Indicator indicator = 18;
getIndicator
in interface FindingOrBuilder
public IndicatorOrBuilder getIndicatorOrBuilder()
Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise
.google.cloud.securitycenter.v1.Indicator indicator = 18;
getIndicatorOrBuilder
in interface FindingOrBuilder
public boolean hasVulnerability()
Represents vulnerability specific fields like cve, cvss scores etc. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;
hasVulnerability
in interface FindingOrBuilder
public Vulnerability getVulnerability()
Represents vulnerability specific fields like cve, cvss scores etc. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;
getVulnerability
in interface FindingOrBuilder
public VulnerabilityOrBuilder getVulnerabilityOrBuilder()
Represents vulnerability specific fields like cve, cvss scores etc. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;
getVulnerabilityOrBuilder
in interface FindingOrBuilder
public boolean hasMuteUpdateTime()
Output only. The most recent time this finding was muted or unmuted.
.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];
hasMuteUpdateTime
in interface FindingOrBuilder
public Timestamp getMuteUpdateTime()
Output only. The most recent time this finding was muted or unmuted.
.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];
getMuteUpdateTime
in interface FindingOrBuilder
public TimestampOrBuilder getMuteUpdateTimeOrBuilder()
Output only. The most recent time this finding was muted or unmuted.
.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];
getMuteUpdateTimeOrBuilder
in interface FindingOrBuilder
public int getExternalSystemsCount()
FindingOrBuilder
Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];
getExternalSystemsCount
in interface FindingOrBuilder
public boolean containsExternalSystems(String key)
Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];
containsExternalSystems
in interface FindingOrBuilder
@Deprecated public Map<String,ExternalSystem> getExternalSystems()
getExternalSystemsMap()
instead.getExternalSystems
in interface FindingOrBuilder
public Map<String,ExternalSystem> getExternalSystemsMap()
Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];
getExternalSystemsMap
in interface FindingOrBuilder
public ExternalSystem getExternalSystemsOrDefault(String key, ExternalSystem defaultValue)
Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];
getExternalSystemsOrDefault
in interface FindingOrBuilder
public ExternalSystem getExternalSystemsOrThrow(String key)
Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];
getExternalSystemsOrThrow
in interface FindingOrBuilder
public boolean hasMitreAttack()
MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org
.google.cloud.securitycenter.v1.MitreAttack mitre_attack = 25;
hasMitreAttack
in interface FindingOrBuilder
public MitreAttack getMitreAttack()
MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org
.google.cloud.securitycenter.v1.MitreAttack mitre_attack = 25;
getMitreAttack
in interface FindingOrBuilder
public MitreAttackOrBuilder getMitreAttackOrBuilder()
MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org
.google.cloud.securitycenter.v1.MitreAttack mitre_attack = 25;
getMitreAttackOrBuilder
in interface FindingOrBuilder
public boolean hasAccess()
Access details associated to the Finding, such as more information on the caller, which method was accessed, from where, etc.
.google.cloud.securitycenter.v1.Access access = 26;
hasAccess
in interface FindingOrBuilder
public Access getAccess()
Access details associated to the Finding, such as more information on the caller, which method was accessed, from where, etc.
.google.cloud.securitycenter.v1.Access access = 26;
getAccess
in interface FindingOrBuilder
public AccessOrBuilder getAccessOrBuilder()
Access details associated to the Finding, such as more information on the caller, which method was accessed, from where, etc.
.google.cloud.securitycenter.v1.Access access = 26;
getAccessOrBuilder
in interface FindingOrBuilder
public List<Connection> getConnectionsList()
Contains information about the IP connection associated with the finding.
repeated .google.cloud.securitycenter.v1.Connection connections = 31;
getConnectionsList
in interface FindingOrBuilder
public List<? extends ConnectionOrBuilder> getConnectionsOrBuilderList()
Contains information about the IP connection associated with the finding.
repeated .google.cloud.securitycenter.v1.Connection connections = 31;
getConnectionsOrBuilderList
in interface FindingOrBuilder
public int getConnectionsCount()
Contains information about the IP connection associated with the finding.
repeated .google.cloud.securitycenter.v1.Connection connections = 31;
getConnectionsCount
in interface FindingOrBuilder
public Connection getConnections(int index)
Contains information about the IP connection associated with the finding.
repeated .google.cloud.securitycenter.v1.Connection connections = 31;
getConnections
in interface FindingOrBuilder
public ConnectionOrBuilder getConnectionsOrBuilder(int index)
Contains information about the IP connection associated with the finding.
repeated .google.cloud.securitycenter.v1.Connection connections = 31;
getConnectionsOrBuilder
in interface FindingOrBuilder
public String getMuteInitiator()
First known as mute_annotation. Records additional information about the mute operation e.g. mute config that muted the finding, user who muted the finding, etc. Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
string mute_initiator = 28;
getMuteInitiator
in interface FindingOrBuilder
public ByteString getMuteInitiatorBytes()
First known as mute_annotation. Records additional information about the mute operation e.g. mute config that muted the finding, user who muted the finding, etc. Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
string mute_initiator = 28;
getMuteInitiatorBytes
in interface FindingOrBuilder
public List<Process> getProcessesList()
Represents operating system processes associated with the Finding.
repeated .google.cloud.securitycenter.v1.Process processes = 30;
getProcessesList
in interface FindingOrBuilder
public List<? extends ProcessOrBuilder> getProcessesOrBuilderList()
Represents operating system processes associated with the Finding.
repeated .google.cloud.securitycenter.v1.Process processes = 30;
getProcessesOrBuilderList
in interface FindingOrBuilder
public int getProcessesCount()
Represents operating system processes associated with the Finding.
repeated .google.cloud.securitycenter.v1.Process processes = 30;
getProcessesCount
in interface FindingOrBuilder
public Process getProcesses(int index)
Represents operating system processes associated with the Finding.
repeated .google.cloud.securitycenter.v1.Process processes = 30;
getProcesses
in interface FindingOrBuilder
public ProcessOrBuilder getProcessesOrBuilder(int index)
Represents operating system processes associated with the Finding.
repeated .google.cloud.securitycenter.v1.Process processes = 30;
getProcessesOrBuilder
in interface FindingOrBuilder
public int getContactsCount()
FindingOrBuilder
Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories { "security": { "contacts": [ { "email": "person1@company.com" }, { "email": "person2@company.com" } ] } }
map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];
getContactsCount
in interface FindingOrBuilder
public boolean containsContacts(String key)
Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories { "security": { "contacts": [ { "email": "person1@company.com" }, { "email": "person2@company.com" } ] } }
map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];
containsContacts
in interface FindingOrBuilder
@Deprecated public Map<String,ContactDetails> getContacts()
getContactsMap()
instead.getContacts
in interface FindingOrBuilder
public Map<String,ContactDetails> getContactsMap()
Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories { "security": { "contacts": [ { "email": "person1@company.com" }, { "email": "person2@company.com" } ] } }
map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];
getContactsMap
in interface FindingOrBuilder
public ContactDetails getContactsOrDefault(String key, ContactDetails defaultValue)
Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories { "security": { "contacts": [ { "email": "person1@company.com" }, { "email": "person2@company.com" } ] } }
map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];
getContactsOrDefault
in interface FindingOrBuilder
public ContactDetails getContactsOrThrow(String key)
Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories { "security": { "contacts": [ { "email": "person1@company.com" }, { "email": "person2@company.com" } ] } }
map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];
getContactsOrThrow
in interface FindingOrBuilder
public List<Compliance> getCompliancesList()
Contains compliance information for security standards associated to the finding.
repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;
getCompliancesList
in interface FindingOrBuilder
public List<? extends ComplianceOrBuilder> getCompliancesOrBuilderList()
Contains compliance information for security standards associated to the finding.
repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;
getCompliancesOrBuilderList
in interface FindingOrBuilder
public int getCompliancesCount()
Contains compliance information for security standards associated to the finding.
repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;
getCompliancesCount
in interface FindingOrBuilder
public Compliance getCompliances(int index)
Contains compliance information for security standards associated to the finding.
repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;
getCompliances
in interface FindingOrBuilder
public ComplianceOrBuilder getCompliancesOrBuilder(int index)
Contains compliance information for security standards associated to the finding.
repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;
getCompliancesOrBuilder
in interface FindingOrBuilder
public String getParentDisplayName()
Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
string parent_display_name = 36 [(.google.api.field_behavior) = OUTPUT_ONLY];
getParentDisplayName
in interface FindingOrBuilder
public ByteString getParentDisplayNameBytes()
Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
string parent_display_name = 36 [(.google.api.field_behavior) = OUTPUT_ONLY];
getParentDisplayNameBytes
in interface FindingOrBuilder
public String getDescription()
Contains more detail about the finding.
string description = 37;
getDescription
in interface FindingOrBuilder
public ByteString getDescriptionBytes()
Contains more detail about the finding.
string description = 37;
getDescriptionBytes
in interface FindingOrBuilder
public boolean hasExfiltration()
Represents exfiltration associated with the Finding.
.google.cloud.securitycenter.v1.Exfiltration exfiltration = 38;
hasExfiltration
in interface FindingOrBuilder
public Exfiltration getExfiltration()
Represents exfiltration associated with the Finding.
.google.cloud.securitycenter.v1.Exfiltration exfiltration = 38;
getExfiltration
in interface FindingOrBuilder
public ExfiltrationOrBuilder getExfiltrationOrBuilder()
Represents exfiltration associated with the Finding.
.google.cloud.securitycenter.v1.Exfiltration exfiltration = 38;
getExfiltrationOrBuilder
in interface FindingOrBuilder
public List<IamBinding> getIamBindingsList()
Represents IAM bindings associated with the Finding.
repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;
getIamBindingsList
in interface FindingOrBuilder
public List<? extends IamBindingOrBuilder> getIamBindingsOrBuilderList()
Represents IAM bindings associated with the Finding.
repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;
getIamBindingsOrBuilderList
in interface FindingOrBuilder
public int getIamBindingsCount()
Represents IAM bindings associated with the Finding.
repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;
getIamBindingsCount
in interface FindingOrBuilder
public IamBinding getIamBindings(int index)
Represents IAM bindings associated with the Finding.
repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;
getIamBindings
in interface FindingOrBuilder
public IamBindingOrBuilder getIamBindingsOrBuilder(int index)
Represents IAM bindings associated with the Finding.
repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;
getIamBindingsOrBuilder
in interface FindingOrBuilder
public String getNextSteps()
Next steps associate to the finding.
string next_steps = 40;
getNextSteps
in interface FindingOrBuilder
public ByteString getNextStepsBytes()
Next steps associate to the finding.
string next_steps = 40;
getNextStepsBytes
in interface FindingOrBuilder
public List<Container> getContainersList()
Containers associated with the finding. containers provides information for both Kubernetes and non-Kubernetes containers.
repeated .google.cloud.securitycenter.v1.Container containers = 42;
getContainersList
in interface FindingOrBuilder
public List<? extends ContainerOrBuilder> getContainersOrBuilderList()
Containers associated with the finding. containers provides information for both Kubernetes and non-Kubernetes containers.
repeated .google.cloud.securitycenter.v1.Container containers = 42;
getContainersOrBuilderList
in interface FindingOrBuilder
public int getContainersCount()
Containers associated with the finding. containers provides information for both Kubernetes and non-Kubernetes containers.
repeated .google.cloud.securitycenter.v1.Container containers = 42;
getContainersCount
in interface FindingOrBuilder
public Container getContainers(int index)
Containers associated with the finding. containers provides information for both Kubernetes and non-Kubernetes containers.
repeated .google.cloud.securitycenter.v1.Container containers = 42;
getContainers
in interface FindingOrBuilder
public ContainerOrBuilder getContainersOrBuilder(int index)
Containers associated with the finding. containers provides information for both Kubernetes and non-Kubernetes containers.
repeated .google.cloud.securitycenter.v1.Container containers = 42;
getContainersOrBuilder
in interface FindingOrBuilder
public boolean hasKubernetes()
Kubernetes resources associated with the finding.
.google.cloud.securitycenter.v1.Kubernetes kubernetes = 43;
hasKubernetes
in interface FindingOrBuilder
public Kubernetes getKubernetes()
Kubernetes resources associated with the finding.
.google.cloud.securitycenter.v1.Kubernetes kubernetes = 43;
getKubernetes
in interface FindingOrBuilder
public KubernetesOrBuilder getKubernetesOrBuilder()
Kubernetes resources associated with the finding.
.google.cloud.securitycenter.v1.Kubernetes kubernetes = 43;
getKubernetesOrBuilder
in interface FindingOrBuilder
public boolean hasDatabase()
Database associated with the finding.
.google.cloud.securitycenter.v1.Database database = 44;
hasDatabase
in interface FindingOrBuilder
public Database getDatabase()
Database associated with the finding.
.google.cloud.securitycenter.v1.Database database = 44;
getDatabase
in interface FindingOrBuilder
public DatabaseOrBuilder getDatabaseOrBuilder()
Database associated with the finding.
.google.cloud.securitycenter.v1.Database database = 44;
getDatabaseOrBuilder
in interface FindingOrBuilder
public final boolean isInitialized()
isInitialized
in interface MessageLiteOrBuilder
isInitialized
in class GeneratedMessageV3
public void writeTo(CodedOutputStream output) throws IOException
writeTo
in interface MessageLite
writeTo
in class GeneratedMessageV3
IOException
public int getSerializedSize()
getSerializedSize
in interface MessageLite
getSerializedSize
in class GeneratedMessageV3
public boolean equals(Object obj)
equals
in interface Message
equals
in class AbstractMessage
public int hashCode()
hashCode
in interface Message
hashCode
in class AbstractMessage
public static Finding parseFrom(ByteBuffer data) throws InvalidProtocolBufferException
InvalidProtocolBufferException
public static Finding parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry) throws InvalidProtocolBufferException
InvalidProtocolBufferException
public static Finding parseFrom(ByteString data) throws InvalidProtocolBufferException
InvalidProtocolBufferException
public static Finding parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry) throws InvalidProtocolBufferException
InvalidProtocolBufferException
public static Finding parseFrom(byte[] data) throws InvalidProtocolBufferException
InvalidProtocolBufferException
public static Finding parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry) throws InvalidProtocolBufferException
InvalidProtocolBufferException
public static Finding parseFrom(InputStream input) throws IOException
IOException
public static Finding parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
IOException
public static Finding parseDelimitedFrom(InputStream input) throws IOException
IOException
public static Finding parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
IOException
public static Finding parseFrom(CodedInputStream input) throws IOException
IOException
public static Finding parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
IOException
public Finding.Builder newBuilderForType()
newBuilderForType
in interface Message
newBuilderForType
in interface MessageLite
public static Finding.Builder newBuilder()
public static Finding.Builder newBuilder(Finding prototype)
public Finding.Builder toBuilder()
toBuilder
in interface Message
toBuilder
in interface MessageLite
protected Finding.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
newBuilderForType
in class GeneratedMessageV3
public static Finding getDefaultInstance()
public Parser<Finding> getParserForType()
getParserForType
in interface Message
getParserForType
in interface MessageLite
getParserForType
in class GeneratedMessageV3
public Finding getDefaultInstanceForType()
getDefaultInstanceForType
in interface MessageLiteOrBuilder
getDefaultInstanceForType
in interface MessageOrBuilder
Copyright © 2022 Google LLC. All rights reserved.