Skip to content

/AWS1/CL_GDYLINEAGEOBJECT

Information about the runtime process details.

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_starttime TYPE /AWS1/GDYTIMESTAMP /AWS1/GDYTIMESTAMP

The time when the process started. This is in UTC format.

iv_namespacepid TYPE /AWS1/GDYINTEGER /AWS1/GDYINTEGER

The process ID of the child process.

iv_userid TYPE /AWS1/GDYINTEGER /AWS1/GDYINTEGER

The user ID of the user that executed the process.

iv_name TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING

The name of the process.

iv_pid TYPE /AWS1/GDYINTEGER /AWS1/GDYINTEGER

The ID of the process.

iv_uuid TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING

The unique ID assigned to the process by GuardDuty.

iv_executablepath TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING

The absolute path of the process executable file.

iv_euid TYPE /AWS1/GDYINTEGER /AWS1/GDYINTEGER

The effective user ID that was used to execute the process.

iv_parentuuid TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING

The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.


Queryable Attributes

StartTime

The time when the process started. This is in UTC format.

Accessible with the following methods

Method Description
GET_STARTTIME() Getter for STARTTIME, with configurable default
ASK_STARTTIME() Getter for STARTTIME w/ exceptions if field has no value
HAS_STARTTIME() Determine if STARTTIME has a value

NamespacePid

The process ID of the child process.

Accessible with the following methods

Method Description
GET_NAMESPACEPID() Getter for NAMESPACEPID, with configurable default
ASK_NAMESPACEPID() Getter for NAMESPACEPID w/ exceptions if field has no value
HAS_NAMESPACEPID() Determine if NAMESPACEPID has a value

UserId

The user ID of the user that executed the process.

Accessible with the following methods

Method Description
GET_USERID() Getter for USERID, with configurable default
ASK_USERID() Getter for USERID w/ exceptions if field has no value
HAS_USERID() Determine if USERID has a value

Name

The name of the process.

Accessible with the following methods

Method Description
GET_NAME() Getter for NAME, with configurable default
ASK_NAME() Getter for NAME w/ exceptions if field has no value
HAS_NAME() Determine if NAME has a value

Pid

The ID of the process.

Accessible with the following methods

Method Description
GET_PID() Getter for PID, with configurable default
ASK_PID() Getter for PID w/ exceptions if field has no value
HAS_PID() Determine if PID has a value

Uuid

The unique ID assigned to the process by GuardDuty.

Accessible with the following methods

Method Description
GET_UUID() Getter for UUID, with configurable default
ASK_UUID() Getter for UUID w/ exceptions if field has no value
HAS_UUID() Determine if UUID has a value

ExecutablePath

The absolute path of the process executable file.

Accessible with the following methods

Method Description
GET_EXECUTABLEPATH() Getter for EXECUTABLEPATH, with configurable default
ASK_EXECUTABLEPATH() Getter for EXECUTABLEPATH w/ exceptions if field has no valu
HAS_EXECUTABLEPATH() Determine if EXECUTABLEPATH has a value

Euid

The effective user ID that was used to execute the process.

Accessible with the following methods

Method Description
GET_EUID() Getter for EUID, with configurable default
ASK_EUID() Getter for EUID w/ exceptions if field has no value
HAS_EUID() Determine if EUID has a value

ParentUuid

The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.

Accessible with the following methods

Method Description
GET_PARENTUUID() Getter for PARENTUUID, with configurable default
ASK_PARENTUUID() Getter for PARENTUUID w/ exceptions if field has no value
HAS_PARENTUUID() Determine if PARENTUUID has a value

Public Local Types In This Class

Internal table types, representing arrays and maps of this class, are defined as local types:

TT_LINEAGE

TYPES TT_LINEAGE TYPE STANDARD TABLE OF REF TO /AWS1/CL_GDYLINEAGEOBJECT WITH DEFAULT KEY
.