/AWS1/CL_GDYACTORPROCESS¶
Contains information about a process involved in a GuardDuty finding, including process identification, execution details, and file information.
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_name TYPE /AWS1/GDYPROCESSNAME /AWS1/GDYPROCESSNAME¶
The name of the process as it appears in the system.
iv_path TYPE /AWS1/GDYPROCESSPATH /AWS1/GDYPROCESSPATH¶
The full file path to the process executable on the system.
Optional arguments:¶
iv_sha256 TYPE /AWS1/GDYPROCESSSHA256 /AWS1/GDYPROCESSSHA256¶
The SHA256 hash of the process executable file, which can be used for identification and verification purposes.
Queryable Attributes¶
Name¶
The name of the process as it appears in the system.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_NAME() |
Getter for NAME, with configurable default |
ASK_NAME() |
Getter for NAME w/ exceptions if field has no value |
HAS_NAME() |
Determine if NAME has a value |
Path¶
The full file path to the process executable on the system.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_PATH() |
Getter for PATH, with configurable default |
ASK_PATH() |
Getter for PATH w/ exceptions if field has no value |
HAS_PATH() |
Determine if PATH has a value |
Sha256¶
The SHA256 hash of the process executable file, which can be used for identification and verification purposes.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_SHA256() |
Getter for SHA256, with configurable default |
ASK_SHA256() |
Getter for SHA256 w/ exceptions if field has no value |
HAS_SHA256() |
Determine if SHA256 has a value |