Skip to content

Guardduty  >  Structures  >  ActorProcess

ActorProcess

Structure Class

ActorProcess dataclass

Contains information about a process involved in a GuardDuty finding, including process identification, execution details, and file information.

Attributes

name class-attribute instance-attribute 
name: str | None = None

The name of the process as it appears in the system.

path class-attribute instance-attribute 
path: str | None = None

The full file path to the process executable on the system.

sha256 class-attribute instance-attribute 
sha256: str | None = None

The SHA256 hash of the process executable file, which can be used for identification and verification purposes.