/**
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
* SPDX-License-Identifier: Apache-2.0.
*/
#pragma once
#include Additional information about the suspicious activity.See
* Also:
AWS
* API Reference
Information about the process that modified the current process. This is * available for multiple finding types.
*/ inline const ProcessDetails& GetModifyingProcess() const{ return m_modifyingProcess; } /** *Information about the process that modified the current process. This is * available for multiple finding types.
*/ inline bool ModifyingProcessHasBeenSet() const { return m_modifyingProcessHasBeenSet; } /** *Information about the process that modified the current process. This is * available for multiple finding types.
*/ inline void SetModifyingProcess(const ProcessDetails& value) { m_modifyingProcessHasBeenSet = true; m_modifyingProcess = value; } /** *Information about the process that modified the current process. This is * available for multiple finding types.
*/ inline void SetModifyingProcess(ProcessDetails&& value) { m_modifyingProcessHasBeenSet = true; m_modifyingProcess = std::move(value); } /** *Information about the process that modified the current process. This is * available for multiple finding types.
*/ inline RuntimeContext& WithModifyingProcess(const ProcessDetails& value) { SetModifyingProcess(value); return *this;} /** *Information about the process that modified the current process. This is * available for multiple finding types.
*/ inline RuntimeContext& WithModifyingProcess(ProcessDetails&& value) { SetModifyingProcess(std::move(value)); return *this;} /** *The timestamp at which the process modified the current process. The * timestamp is in UTC date string format.
*/ inline const Aws::Utils::DateTime& GetModifiedAt() const{ return m_modifiedAt; } /** *The timestamp at which the process modified the current process. The * timestamp is in UTC date string format.
*/ inline bool ModifiedAtHasBeenSet() const { return m_modifiedAtHasBeenSet; } /** *The timestamp at which the process modified the current process. The * timestamp is in UTC date string format.
*/ inline void SetModifiedAt(const Aws::Utils::DateTime& value) { m_modifiedAtHasBeenSet = true; m_modifiedAt = value; } /** *The timestamp at which the process modified the current process. The * timestamp is in UTC date string format.
*/ inline void SetModifiedAt(Aws::Utils::DateTime&& value) { m_modifiedAtHasBeenSet = true; m_modifiedAt = std::move(value); } /** *The timestamp at which the process modified the current process. The * timestamp is in UTC date string format.
*/ inline RuntimeContext& WithModifiedAt(const Aws::Utils::DateTime& value) { SetModifiedAt(value); return *this;} /** *The timestamp at which the process modified the current process. The * timestamp is in UTC date string format.
*/ inline RuntimeContext& WithModifiedAt(Aws::Utils::DateTime&& value) { SetModifiedAt(std::move(value)); return *this;} /** *The path to the script that was executed.
*/ inline const Aws::String& GetScriptPath() const{ return m_scriptPath; } /** *The path to the script that was executed.
*/ inline bool ScriptPathHasBeenSet() const { return m_scriptPathHasBeenSet; } /** *The path to the script that was executed.
*/ inline void SetScriptPath(const Aws::String& value) { m_scriptPathHasBeenSet = true; m_scriptPath = value; } /** *The path to the script that was executed.
*/ inline void SetScriptPath(Aws::String&& value) { m_scriptPathHasBeenSet = true; m_scriptPath = std::move(value); } /** *The path to the script that was executed.
*/ inline void SetScriptPath(const char* value) { m_scriptPathHasBeenSet = true; m_scriptPath.assign(value); } /** *The path to the script that was executed.
*/ inline RuntimeContext& WithScriptPath(const Aws::String& value) { SetScriptPath(value); return *this;} /** *The path to the script that was executed.
*/ inline RuntimeContext& WithScriptPath(Aws::String&& value) { SetScriptPath(std::move(value)); return *this;} /** *The path to the script that was executed.
*/ inline RuntimeContext& WithScriptPath(const char* value) { SetScriptPath(value); return *this;} /** *The path to the new library that was loaded.
*/ inline const Aws::String& GetLibraryPath() const{ return m_libraryPath; } /** *The path to the new library that was loaded.
*/ inline bool LibraryPathHasBeenSet() const { return m_libraryPathHasBeenSet; } /** *The path to the new library that was loaded.
*/ inline void SetLibraryPath(const Aws::String& value) { m_libraryPathHasBeenSet = true; m_libraryPath = value; } /** *The path to the new library that was loaded.
*/ inline void SetLibraryPath(Aws::String&& value) { m_libraryPathHasBeenSet = true; m_libraryPath = std::move(value); } /** *The path to the new library that was loaded.
*/ inline void SetLibraryPath(const char* value) { m_libraryPathHasBeenSet = true; m_libraryPath.assign(value); } /** *The path to the new library that was loaded.
*/ inline RuntimeContext& WithLibraryPath(const Aws::String& value) { SetLibraryPath(value); return *this;} /** *The path to the new library that was loaded.
*/ inline RuntimeContext& WithLibraryPath(Aws::String&& value) { SetLibraryPath(std::move(value)); return *this;} /** *The path to the new library that was loaded.
*/ inline RuntimeContext& WithLibraryPath(const char* value) { SetLibraryPath(value); return *this;} /** *The value of the LD_PRELOAD environment variable.
*/ inline const Aws::String& GetLdPreloadValue() const{ return m_ldPreloadValue; } /** *The value of the LD_PRELOAD environment variable.
*/ inline bool LdPreloadValueHasBeenSet() const { return m_ldPreloadValueHasBeenSet; } /** *The value of the LD_PRELOAD environment variable.
*/ inline void SetLdPreloadValue(const Aws::String& value) { m_ldPreloadValueHasBeenSet = true; m_ldPreloadValue = value; } /** *The value of the LD_PRELOAD environment variable.
*/ inline void SetLdPreloadValue(Aws::String&& value) { m_ldPreloadValueHasBeenSet = true; m_ldPreloadValue = std::move(value); } /** *The value of the LD_PRELOAD environment variable.
*/ inline void SetLdPreloadValue(const char* value) { m_ldPreloadValueHasBeenSet = true; m_ldPreloadValue.assign(value); } /** *The value of the LD_PRELOAD environment variable.
*/ inline RuntimeContext& WithLdPreloadValue(const Aws::String& value) { SetLdPreloadValue(value); return *this;} /** *The value of the LD_PRELOAD environment variable.
*/ inline RuntimeContext& WithLdPreloadValue(Aws::String&& value) { SetLdPreloadValue(std::move(value)); return *this;} /** *The value of the LD_PRELOAD environment variable.
*/ inline RuntimeContext& WithLdPreloadValue(const char* value) { SetLdPreloadValue(value); return *this;} /** *The path to the docket socket that was accessed.
*/ inline const Aws::String& GetSocketPath() const{ return m_socketPath; } /** *The path to the docket socket that was accessed.
*/ inline bool SocketPathHasBeenSet() const { return m_socketPathHasBeenSet; } /** *The path to the docket socket that was accessed.
*/ inline void SetSocketPath(const Aws::String& value) { m_socketPathHasBeenSet = true; m_socketPath = value; } /** *The path to the docket socket that was accessed.
*/ inline void SetSocketPath(Aws::String&& value) { m_socketPathHasBeenSet = true; m_socketPath = std::move(value); } /** *The path to the docket socket that was accessed.
*/ inline void SetSocketPath(const char* value) { m_socketPathHasBeenSet = true; m_socketPath.assign(value); } /** *The path to the docket socket that was accessed.
*/ inline RuntimeContext& WithSocketPath(const Aws::String& value) { SetSocketPath(value); return *this;} /** *The path to the docket socket that was accessed.
*/ inline RuntimeContext& WithSocketPath(Aws::String&& value) { SetSocketPath(std::move(value)); return *this;} /** *The path to the docket socket that was accessed.
*/ inline RuntimeContext& WithSocketPath(const char* value) { SetSocketPath(value); return *this;} /** *The path to the leveraged runc
implementation.
The path to the leveraged runc
implementation.
The path to the leveraged runc
implementation.
The path to the leveraged runc
implementation.
The path to the leveraged runc
implementation.
The path to the leveraged runc
implementation.
The path to the leveraged runc
implementation.
The path to the leveraged runc
implementation.
The path in the container that modified the release agent file.
*/ inline const Aws::String& GetReleaseAgentPath() const{ return m_releaseAgentPath; } /** *The path in the container that modified the release agent file.
*/ inline bool ReleaseAgentPathHasBeenSet() const { return m_releaseAgentPathHasBeenSet; } /** *The path in the container that modified the release agent file.
*/ inline void SetReleaseAgentPath(const Aws::String& value) { m_releaseAgentPathHasBeenSet = true; m_releaseAgentPath = value; } /** *The path in the container that modified the release agent file.
*/ inline void SetReleaseAgentPath(Aws::String&& value) { m_releaseAgentPathHasBeenSet = true; m_releaseAgentPath = std::move(value); } /** *The path in the container that modified the release agent file.
*/ inline void SetReleaseAgentPath(const char* value) { m_releaseAgentPathHasBeenSet = true; m_releaseAgentPath.assign(value); } /** *The path in the container that modified the release agent file.
*/ inline RuntimeContext& WithReleaseAgentPath(const Aws::String& value) { SetReleaseAgentPath(value); return *this;} /** *The path in the container that modified the release agent file.
*/ inline RuntimeContext& WithReleaseAgentPath(Aws::String&& value) { SetReleaseAgentPath(std::move(value)); return *this;} /** *The path in the container that modified the release agent file.
*/ inline RuntimeContext& WithReleaseAgentPath(const char* value) { SetReleaseAgentPath(value); return *this;} /** *The path on the host that is mounted by the container.
*/ inline const Aws::String& GetMountSource() const{ return m_mountSource; } /** *The path on the host that is mounted by the container.
*/ inline bool MountSourceHasBeenSet() const { return m_mountSourceHasBeenSet; } /** *The path on the host that is mounted by the container.
*/ inline void SetMountSource(const Aws::String& value) { m_mountSourceHasBeenSet = true; m_mountSource = value; } /** *The path on the host that is mounted by the container.
*/ inline void SetMountSource(Aws::String&& value) { m_mountSourceHasBeenSet = true; m_mountSource = std::move(value); } /** *The path on the host that is mounted by the container.
*/ inline void SetMountSource(const char* value) { m_mountSourceHasBeenSet = true; m_mountSource.assign(value); } /** *The path on the host that is mounted by the container.
*/ inline RuntimeContext& WithMountSource(const Aws::String& value) { SetMountSource(value); return *this;} /** *The path on the host that is mounted by the container.
*/ inline RuntimeContext& WithMountSource(Aws::String&& value) { SetMountSource(std::move(value)); return *this;} /** *The path on the host that is mounted by the container.
*/ inline RuntimeContext& WithMountSource(const char* value) { SetMountSource(value); return *this;} /** *The path in the container that is mapped to the host directory.
*/ inline const Aws::String& GetMountTarget() const{ return m_mountTarget; } /** *The path in the container that is mapped to the host directory.
*/ inline bool MountTargetHasBeenSet() const { return m_mountTargetHasBeenSet; } /** *The path in the container that is mapped to the host directory.
*/ inline void SetMountTarget(const Aws::String& value) { m_mountTargetHasBeenSet = true; m_mountTarget = value; } /** *The path in the container that is mapped to the host directory.
*/ inline void SetMountTarget(Aws::String&& value) { m_mountTargetHasBeenSet = true; m_mountTarget = std::move(value); } /** *The path in the container that is mapped to the host directory.
*/ inline void SetMountTarget(const char* value) { m_mountTargetHasBeenSet = true; m_mountTarget.assign(value); } /** *The path in the container that is mapped to the host directory.
*/ inline RuntimeContext& WithMountTarget(const Aws::String& value) { SetMountTarget(value); return *this;} /** *The path in the container that is mapped to the host directory.
*/ inline RuntimeContext& WithMountTarget(Aws::String&& value) { SetMountTarget(std::move(value)); return *this;} /** *The path in the container that is mapped to the host directory.
*/ inline RuntimeContext& WithMountTarget(const char* value) { SetMountTarget(value); return *this;} /** *Represents the type of mounted fileSystem.
*/ inline const Aws::String& GetFileSystemType() const{ return m_fileSystemType; } /** *Represents the type of mounted fileSystem.
*/ inline bool FileSystemTypeHasBeenSet() const { return m_fileSystemTypeHasBeenSet; } /** *Represents the type of mounted fileSystem.
*/ inline void SetFileSystemType(const Aws::String& value) { m_fileSystemTypeHasBeenSet = true; m_fileSystemType = value; } /** *Represents the type of mounted fileSystem.
*/ inline void SetFileSystemType(Aws::String&& value) { m_fileSystemTypeHasBeenSet = true; m_fileSystemType = std::move(value); } /** *Represents the type of mounted fileSystem.
*/ inline void SetFileSystemType(const char* value) { m_fileSystemTypeHasBeenSet = true; m_fileSystemType.assign(value); } /** *Represents the type of mounted fileSystem.
*/ inline RuntimeContext& WithFileSystemType(const Aws::String& value) { SetFileSystemType(value); return *this;} /** *Represents the type of mounted fileSystem.
*/ inline RuntimeContext& WithFileSystemType(Aws::String&& value) { SetFileSystemType(std::move(value)); return *this;} /** *Represents the type of mounted fileSystem.
*/ inline RuntimeContext& WithFileSystemType(const char* value) { SetFileSystemType(value); return *this;} /** *Represents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline const Aws::VectorRepresents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline bool FlagsHasBeenSet() const { return m_flagsHasBeenSet; } /** *Represents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline void SetFlags(const Aws::VectorRepresents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline void SetFlags(Aws::VectorRepresents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline RuntimeContext& WithFlags(const Aws::VectorRepresents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline RuntimeContext& WithFlags(Aws::VectorRepresents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline RuntimeContext& AddFlags(const Aws::String& value) { m_flagsHasBeenSet = true; m_flags.push_back(value); return *this; } /** *Represents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline RuntimeContext& AddFlags(Aws::String&& value) { m_flagsHasBeenSet = true; m_flags.push_back(std::move(value)); return *this; } /** *Represents options that control the behavior of a runtime operation or * action. For example, a filesystem mount operation may contain a read-only * flag.
*/ inline RuntimeContext& AddFlags(const char* value) { m_flagsHasBeenSet = true; m_flags.push_back(value); return *this; } /** *The name of the module loaded into the kernel.
*/ inline const Aws::String& GetModuleName() const{ return m_moduleName; } /** *The name of the module loaded into the kernel.
*/ inline bool ModuleNameHasBeenSet() const { return m_moduleNameHasBeenSet; } /** *The name of the module loaded into the kernel.
*/ inline void SetModuleName(const Aws::String& value) { m_moduleNameHasBeenSet = true; m_moduleName = value; } /** *The name of the module loaded into the kernel.
*/ inline void SetModuleName(Aws::String&& value) { m_moduleNameHasBeenSet = true; m_moduleName = std::move(value); } /** *The name of the module loaded into the kernel.
*/ inline void SetModuleName(const char* value) { m_moduleNameHasBeenSet = true; m_moduleName.assign(value); } /** *The name of the module loaded into the kernel.
*/ inline RuntimeContext& WithModuleName(const Aws::String& value) { SetModuleName(value); return *this;} /** *The name of the module loaded into the kernel.
*/ inline RuntimeContext& WithModuleName(Aws::String&& value) { SetModuleName(std::move(value)); return *this;} /** *The name of the module loaded into the kernel.
*/ inline RuntimeContext& WithModuleName(const char* value) { SetModuleName(value); return *this;} /** *The path to the module loaded into the kernel.
*/ inline const Aws::String& GetModuleFilePath() const{ return m_moduleFilePath; } /** *The path to the module loaded into the kernel.
*/ inline bool ModuleFilePathHasBeenSet() const { return m_moduleFilePathHasBeenSet; } /** *The path to the module loaded into the kernel.
*/ inline void SetModuleFilePath(const Aws::String& value) { m_moduleFilePathHasBeenSet = true; m_moduleFilePath = value; } /** *The path to the module loaded into the kernel.
*/ inline void SetModuleFilePath(Aws::String&& value) { m_moduleFilePathHasBeenSet = true; m_moduleFilePath = std::move(value); } /** *The path to the module loaded into the kernel.
*/ inline void SetModuleFilePath(const char* value) { m_moduleFilePathHasBeenSet = true; m_moduleFilePath.assign(value); } /** *The path to the module loaded into the kernel.
*/ inline RuntimeContext& WithModuleFilePath(const Aws::String& value) { SetModuleFilePath(value); return *this;} /** *The path to the module loaded into the kernel.
*/ inline RuntimeContext& WithModuleFilePath(Aws::String&& value) { SetModuleFilePath(std::move(value)); return *this;} /** *The path to the module loaded into the kernel.
*/ inline RuntimeContext& WithModuleFilePath(const char* value) { SetModuleFilePath(value); return *this;} /** *The SHA256
hash of the module.
The SHA256
hash of the module.
The SHA256
hash of the module.
The SHA256
hash of the module.
The SHA256
hash of the module.
The SHA256
hash of the module.
The SHA256
hash of the module.
The SHA256
hash of the module.
The path to the modified shell history file.
*/ inline const Aws::String& GetShellHistoryFilePath() const{ return m_shellHistoryFilePath; } /** *The path to the modified shell history file.
*/ inline bool ShellHistoryFilePathHasBeenSet() const { return m_shellHistoryFilePathHasBeenSet; } /** *The path to the modified shell history file.
*/ inline void SetShellHistoryFilePath(const Aws::String& value) { m_shellHistoryFilePathHasBeenSet = true; m_shellHistoryFilePath = value; } /** *The path to the modified shell history file.
*/ inline void SetShellHistoryFilePath(Aws::String&& value) { m_shellHistoryFilePathHasBeenSet = true; m_shellHistoryFilePath = std::move(value); } /** *The path to the modified shell history file.
*/ inline void SetShellHistoryFilePath(const char* value) { m_shellHistoryFilePathHasBeenSet = true; m_shellHistoryFilePath.assign(value); } /** *The path to the modified shell history file.
*/ inline RuntimeContext& WithShellHistoryFilePath(const Aws::String& value) { SetShellHistoryFilePath(value); return *this;} /** *The path to the modified shell history file.
*/ inline RuntimeContext& WithShellHistoryFilePath(Aws::String&& value) { SetShellHistoryFilePath(std::move(value)); return *this;} /** *The path to the modified shell history file.
*/ inline RuntimeContext& WithShellHistoryFilePath(const char* value) { SetShellHistoryFilePath(value); return *this;} /** *Information about the process that had its memory overwritten by the current * process.
*/ inline const ProcessDetails& GetTargetProcess() const{ return m_targetProcess; } /** *Information about the process that had its memory overwritten by the current * process.
*/ inline bool TargetProcessHasBeenSet() const { return m_targetProcessHasBeenSet; } /** *Information about the process that had its memory overwritten by the current * process.
*/ inline void SetTargetProcess(const ProcessDetails& value) { m_targetProcessHasBeenSet = true; m_targetProcess = value; } /** *Information about the process that had its memory overwritten by the current * process.
*/ inline void SetTargetProcess(ProcessDetails&& value) { m_targetProcessHasBeenSet = true; m_targetProcess = std::move(value); } /** *Information about the process that had its memory overwritten by the current * process.
*/ inline RuntimeContext& WithTargetProcess(const ProcessDetails& value) { SetTargetProcess(value); return *this;} /** *Information about the process that had its memory overwritten by the current * process.
*/ inline RuntimeContext& WithTargetProcess(ProcessDetails&& value) { SetTargetProcess(std::move(value)); return *this;} /** *Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Represents the communication protocol associated with the address. For
* example, the address family AF_INET
is used for IP version of 4
* protocol.
Specifies a particular protocol within the address family. Usually there is a
* single protocol in address families. For example, the address family
* AF_INET
only has the IP protocol.
Specifies a particular protocol within the address family. Usually there is a
* single protocol in address families. For example, the address family
* AF_INET
only has the IP protocol.
Specifies a particular protocol within the address family. Usually there is a
* single protocol in address families. For example, the address family
* AF_INET
only has the IP protocol.
Specifies a particular protocol within the address family. Usually there is a
* single protocol in address families. For example, the address family
* AF_INET
only has the IP protocol.
Specifies the Region of a process's address space such as stack and heap.
*/ inline const Aws::VectorSpecifies the Region of a process's address space such as stack and heap.
*/ inline bool MemoryRegionsHasBeenSet() const { return m_memoryRegionsHasBeenSet; } /** *Specifies the Region of a process's address space such as stack and heap.
*/ inline void SetMemoryRegions(const Aws::VectorSpecifies the Region of a process's address space such as stack and heap.
*/ inline void SetMemoryRegions(Aws::VectorSpecifies the Region of a process's address space such as stack and heap.
*/ inline RuntimeContext& WithMemoryRegions(const Aws::VectorSpecifies the Region of a process's address space such as stack and heap.
*/ inline RuntimeContext& WithMemoryRegions(Aws::VectorSpecifies the Region of a process's address space such as stack and heap.
*/ inline RuntimeContext& AddMemoryRegions(const Aws::String& value) { m_memoryRegionsHasBeenSet = true; m_memoryRegions.push_back(value); return *this; } /** *Specifies the Region of a process's address space such as stack and heap.
*/ inline RuntimeContext& AddMemoryRegions(Aws::String&& value) { m_memoryRegionsHasBeenSet = true; m_memoryRegions.push_back(std::move(value)); return *this; } /** *Specifies the Region of a process's address space such as stack and heap.
*/ inline RuntimeContext& AddMemoryRegions(const char* value) { m_memoryRegionsHasBeenSet = true; m_memoryRegions.push_back(value); return *this; } private: ProcessDetails m_modifyingProcess; bool m_modifyingProcessHasBeenSet = false; Aws::Utils::DateTime m_modifiedAt; bool m_modifiedAtHasBeenSet = false; Aws::String m_scriptPath; bool m_scriptPathHasBeenSet = false; Aws::String m_libraryPath; bool m_libraryPathHasBeenSet = false; Aws::String m_ldPreloadValue; bool m_ldPreloadValueHasBeenSet = false; Aws::String m_socketPath; bool m_socketPathHasBeenSet = false; Aws::String m_runcBinaryPath; bool m_runcBinaryPathHasBeenSet = false; Aws::String m_releaseAgentPath; bool m_releaseAgentPathHasBeenSet = false; Aws::String m_mountSource; bool m_mountSourceHasBeenSet = false; Aws::String m_mountTarget; bool m_mountTargetHasBeenSet = false; Aws::String m_fileSystemType; bool m_fileSystemTypeHasBeenSet = false; Aws::Vector