Package com.google.cloud.securitycenter.v1

Class KernelRootkit.Builder

  • All Implemented Interfaces:
    KernelRootkitOrBuilder, com.google.protobuf.Message.Builder, com.google.protobuf.MessageLite.Builder, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Cloneable
    Enclosing class:
    KernelRootkit
    public static final class KernelRootkit.Builder
extends com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>
implements KernelRootkitOrBuilder
     Kernel mode rootkit signatures.
    Protobuf type google.cloud.securitycenter.v1.KernelRootkit

    • Method Detail

      • getDescriptor

        public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

      • internalGetFieldAccessorTable

        protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
        Specified by:
        internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • clear

        public KernelRootkit.Builder clear()
        Specified by:
        clear in interface com.google.protobuf.Message.Builder
        Specified by:
        clear in interface com.google.protobuf.MessageLite.Builder
        Overrides:
        clear in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • getDescriptorForType

        public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
        Specified by:
        getDescriptorForType in interface com.google.protobuf.Message.Builder
        Specified by:
        getDescriptorForType in interface com.google.protobuf.MessageOrBuilder
        Overrides:
        getDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • getDefaultInstanceForType

        public KernelRootkit getDefaultInstanceForType()
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

      • build

        public KernelRootkit build()
        Specified by:
        build in interface com.google.protobuf.Message.Builder
        Specified by:
        build in interface com.google.protobuf.MessageLite.Builder

      • buildPartial

        public KernelRootkit buildPartial()
        Specified by:
        buildPartial in interface com.google.protobuf.Message.Builder
        Specified by:
        buildPartial in interface com.google.protobuf.MessageLite.Builder

      • clone

        public KernelRootkit.Builder clone()
        Specified by:
        clone in interface com.google.protobuf.Message.Builder
        Specified by:
        clone in interface com.google.protobuf.MessageLite.Builder
        Overrides:
        clone in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • setField

        public KernelRootkit.Builder setField​(com.google.protobuf.Descriptors.FieldDescriptor field,
                                      Object value)
        Specified by:
        setField in interface com.google.protobuf.Message.Builder
        Overrides:
        setField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • clearField

        public KernelRootkit.Builder clearField​(com.google.protobuf.Descriptors.FieldDescriptor field)
        Specified by:
        clearField in interface com.google.protobuf.Message.Builder
        Overrides:
        clearField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • clearOneof

        public KernelRootkit.Builder clearOneof​(com.google.protobuf.Descriptors.OneofDescriptor oneof)
        Specified by:
        clearOneof in interface com.google.protobuf.Message.Builder
        Overrides:
        clearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • setRepeatedField

        public KernelRootkit.Builder setRepeatedField​(com.google.protobuf.Descriptors.FieldDescriptor field,
                                              int index,
                                              Object value)
        Specified by:
        setRepeatedField in interface com.google.protobuf.Message.Builder
        Overrides:
        setRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • addRepeatedField

        public KernelRootkit.Builder addRepeatedField​(com.google.protobuf.Descriptors.FieldDescriptor field,
                                              Object value)
        Specified by:
        addRepeatedField in interface com.google.protobuf.Message.Builder
        Overrides:
        addRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • mergeFrom

        public KernelRootkit.Builder mergeFrom​(com.google.protobuf.Message other)
        Specified by:
        mergeFrom in interface com.google.protobuf.Message.Builder
        Overrides:
        mergeFrom in class com.google.protobuf.AbstractMessage.Builder<KernelRootkit.Builder>

      • isInitialized

        public final boolean isInitialized()
        Specified by:
        isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
        Overrides:
        isInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • mergeFrom

        public KernelRootkit.Builder mergeFrom​(com.google.protobuf.CodedInputStream input,
                                       com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                throws IOException
        Specified by:
        mergeFrom in interface com.google.protobuf.Message.Builder
        Specified by:
        mergeFrom in interface com.google.protobuf.MessageLite.Builder
        Overrides:
        mergeFrom in class com.google.protobuf.AbstractMessage.Builder<KernelRootkit.Builder>
        Throws:
        IOException

      • getNameBytes

        public com.google.protobuf.ByteString getNameBytes()
         Rootkit name, when available.
        string name = 1;
        Specified by:
        getNameBytes in interface KernelRootkitOrBuilder
        Returns:
        The bytes for name.

      • setName

        public KernelRootkit.Builder setName​(String value)
         Rootkit name, when available.
        string name = 1;
        Parameters:
        value - The name to set.
        Returns:
        This builder for chaining.

      • clearName

        public KernelRootkit.Builder clearName()
         Rootkit name, when available.
        string name = 1;
        Returns:
        This builder for chaining.

      • setNameBytes

        public KernelRootkit.Builder setNameBytes​(com.google.protobuf.ByteString value)
         Rootkit name, when available.
        string name = 1;
        Parameters:
        value - The bytes for name to set.
        Returns:
        This builder for chaining.

      • getUnexpectedCodeModification

        public boolean getUnexpectedCodeModification()
         True if unexpected modifications of kernel code memory are present.
        bool unexpected_code_modification = 2;
        Specified by:
        getUnexpectedCodeModification in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedCodeModification.

      • setUnexpectedCodeModification

        public KernelRootkit.Builder setUnexpectedCodeModification​(boolean value)
         True if unexpected modifications of kernel code memory are present.
        bool unexpected_code_modification = 2;
        Parameters:
        value - The unexpectedCodeModification to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedCodeModification

        public KernelRootkit.Builder clearUnexpectedCodeModification()
         True if unexpected modifications of kernel code memory are present.
        bool unexpected_code_modification = 2;
        Returns:
        This builder for chaining.

      • getUnexpectedReadOnlyDataModification

        public boolean getUnexpectedReadOnlyDataModification()
         True if unexpected modifications of kernel read-only data memory are
 present.
        bool unexpected_read_only_data_modification = 3;
        Specified by:
        getUnexpectedReadOnlyDataModification in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedReadOnlyDataModification.

      • setUnexpectedReadOnlyDataModification

        public KernelRootkit.Builder setUnexpectedReadOnlyDataModification​(boolean value)
         True if unexpected modifications of kernel read-only data memory are
 present.
        bool unexpected_read_only_data_modification = 3;
        Parameters:
        value - The unexpectedReadOnlyDataModification to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedReadOnlyDataModification

        public KernelRootkit.Builder clearUnexpectedReadOnlyDataModification()
         True if unexpected modifications of kernel read-only data memory are
 present.
        bool unexpected_read_only_data_modification = 3;
        Returns:
        This builder for chaining.

      • getUnexpectedFtraceHandler

        public boolean getUnexpectedFtraceHandler()
         True if `ftrace` points are present with callbacks pointing to regions
 that are not in the expected kernel or module code range.
        bool unexpected_ftrace_handler = 4;
        Specified by:
        getUnexpectedFtraceHandler in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedFtraceHandler.

      • setUnexpectedFtraceHandler

        public KernelRootkit.Builder setUnexpectedFtraceHandler​(boolean value)
         True if `ftrace` points are present with callbacks pointing to regions
 that are not in the expected kernel or module code range.
        bool unexpected_ftrace_handler = 4;
        Parameters:
        value - The unexpectedFtraceHandler to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedFtraceHandler

        public KernelRootkit.Builder clearUnexpectedFtraceHandler()
         True if `ftrace` points are present with callbacks pointing to regions
 that are not in the expected kernel or module code range.
        bool unexpected_ftrace_handler = 4;
        Returns:
        This builder for chaining.

      • getUnexpectedKprobeHandler

        public boolean getUnexpectedKprobeHandler()
         True if `kprobe` points are present with callbacks pointing to regions
 that are not in the expected kernel or module code range.
        bool unexpected_kprobe_handler = 5;
        Specified by:
        getUnexpectedKprobeHandler in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedKprobeHandler.

      • setUnexpectedKprobeHandler

        public KernelRootkit.Builder setUnexpectedKprobeHandler​(boolean value)
         True if `kprobe` points are present with callbacks pointing to regions
 that are not in the expected kernel or module code range.
        bool unexpected_kprobe_handler = 5;
        Parameters:
        value - The unexpectedKprobeHandler to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedKprobeHandler

        public KernelRootkit.Builder clearUnexpectedKprobeHandler()
         True if `kprobe` points are present with callbacks pointing to regions
 that are not in the expected kernel or module code range.
        bool unexpected_kprobe_handler = 5;
        Returns:
        This builder for chaining.

      • getUnexpectedKernelCodePages

        public boolean getUnexpectedKernelCodePages()
         True if kernel code pages that are not in the expected kernel or module
 code regions are present.
        bool unexpected_kernel_code_pages = 6;
        Specified by:
        getUnexpectedKernelCodePages in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedKernelCodePages.

      • setUnexpectedKernelCodePages

        public KernelRootkit.Builder setUnexpectedKernelCodePages​(boolean value)
         True if kernel code pages that are not in the expected kernel or module
 code regions are present.
        bool unexpected_kernel_code_pages = 6;
        Parameters:
        value - The unexpectedKernelCodePages to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedKernelCodePages

        public KernelRootkit.Builder clearUnexpectedKernelCodePages()
         True if kernel code pages that are not in the expected kernel or module
 code regions are present.
        bool unexpected_kernel_code_pages = 6;
        Returns:
        This builder for chaining.

      • getUnexpectedSystemCallHandler

        public boolean getUnexpectedSystemCallHandler()
         True if system call handlers that are are not in the expected kernel or
 module code regions are present.
        bool unexpected_system_call_handler = 7;
        Specified by:
        getUnexpectedSystemCallHandler in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedSystemCallHandler.

      • setUnexpectedSystemCallHandler

        public KernelRootkit.Builder setUnexpectedSystemCallHandler​(boolean value)
         True if system call handlers that are are not in the expected kernel or
 module code regions are present.
        bool unexpected_system_call_handler = 7;
        Parameters:
        value - The unexpectedSystemCallHandler to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedSystemCallHandler

        public KernelRootkit.Builder clearUnexpectedSystemCallHandler()
         True if system call handlers that are are not in the expected kernel or
 module code regions are present.
        bool unexpected_system_call_handler = 7;
        Returns:
        This builder for chaining.

      • getUnexpectedInterruptHandler

        public boolean getUnexpectedInterruptHandler()
         True if interrupt handlers that are are not in the expected kernel or
 module code regions are present.
        bool unexpected_interrupt_handler = 8;
        Specified by:
        getUnexpectedInterruptHandler in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedInterruptHandler.

      • setUnexpectedInterruptHandler

        public KernelRootkit.Builder setUnexpectedInterruptHandler​(boolean value)
         True if interrupt handlers that are are not in the expected kernel or
 module code regions are present.
        bool unexpected_interrupt_handler = 8;
        Parameters:
        value - The unexpectedInterruptHandler to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedInterruptHandler

        public KernelRootkit.Builder clearUnexpectedInterruptHandler()
         True if interrupt handlers that are are not in the expected kernel or
 module code regions are present.
        bool unexpected_interrupt_handler = 8;
        Returns:
        This builder for chaining.

      • getUnexpectedProcessesInRunqueue

        public boolean getUnexpectedProcessesInRunqueue()
         True if unexpected processes in the scheduler run queue are present. Such
 processes are in the run queue, but not in the process task list.
        bool unexpected_processes_in_runqueue = 9;
        Specified by:
        getUnexpectedProcessesInRunqueue in interface KernelRootkitOrBuilder
        Returns:
        The unexpectedProcessesInRunqueue.

      • setUnexpectedProcessesInRunqueue

        public KernelRootkit.Builder setUnexpectedProcessesInRunqueue​(boolean value)
         True if unexpected processes in the scheduler run queue are present. Such
 processes are in the run queue, but not in the process task list.
        bool unexpected_processes_in_runqueue = 9;
        Parameters:
        value - The unexpectedProcessesInRunqueue to set.
        Returns:
        This builder for chaining.

      • clearUnexpectedProcessesInRunqueue

        public KernelRootkit.Builder clearUnexpectedProcessesInRunqueue()
         True if unexpected processes in the scheduler run queue are present. Such
 processes are in the run queue, but not in the process task list.
        bool unexpected_processes_in_runqueue = 9;
        Returns:
        This builder for chaining.

      • setUnknownFields

        public final KernelRootkit.Builder setUnknownFields​(com.google.protobuf.UnknownFieldSet unknownFields)
        Specified by:
        setUnknownFields in interface com.google.protobuf.Message.Builder
        Overrides:
        setUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>

      • mergeUnknownFields

        public final KernelRootkit.Builder mergeUnknownFields​(com.google.protobuf.UnknownFieldSet unknownFields)
        Specified by:
        mergeUnknownFields in interface com.google.protobuf.Message.Builder
        Overrides:
        mergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<KernelRootkit.Builder>