Class KernelRootkit (2.20.0)

Version 2.20.0

• 2.61.0 (latest)
• 2.60.0
• 2.59.0
• 2.57.0
• 2.56.0
• 2.55.0
• 2.54.0
• 2.53.0
• 2.52.0
• 2.51.0
• 2.50.0
• 2.49.0
• 2.48.0
• 2.47.0
• 2.45.0
• 2.44.0
• 2.43.0
• 2.42.0
• 2.41.0
• 2.40.0
• 2.39.0
• 2.38.0
• 2.37.0
• 2.36.0
• 2.35.0
• 2.32.0
• 2.31.0
• 2.30.0
• 2.29.0
• 2.28.0
• 2.27.0
• 2.26.0
• 2.25.0
• 2.24.0
• 2.23.0
• 2.22.0
• 2.21.0
• 2.20.0
• 2.19.0
• 2.17.0
• 2.16.0
• 2.15.0
• 2.14.0
• 2.13.0
• 2.12.0
• 2.11.1
• 2.10.0
• 2.9.0
• 2.8.0
• 2.7.1
• 2.6.0
• 2.5.6
• 2.3.2

public final class KernelRootkit extends GeneratedMessageV3 implements KernelRootkitOrBuilder

Kernel mode rootkit signatures.

Protobuf type google.cloud.securitycenter.v1.KernelRootkit

Inheritance

Object > AbstractMessageLite<MessageType,BuilderType> > AbstractMessage > GeneratedMessageV3 > KernelRootkit

Implements

KernelRootkitOrBuilder

Inherited Members

AbstractMessage.equals(Object)

AbstractMessage.findInitializationErrors()

AbstractMessage.getInitializationErrorString()

AbstractMessage.hashBoolean(boolean)

AbstractMessage.hashCode()

AbstractMessage.hashEnum(Internal.EnumLite)

AbstractMessage.hashEnumList(List<? extends Internal.EnumLite>)

AbstractMessage.hashFields(int,Map<Descriptors.FieldDescriptor,Object>)

AbstractMessage.hashLong(long)

AbstractMessage.toString()

AbstractMessageLite.<T>addAll(Iterable<T>,Collection<? super T>)

AbstractMessageLite.<T>addAll(Iterable<T>,List<? super T>)

AbstractMessageLite.checkByteStringIsUtf8(ByteString)

AbstractMessageLite.toByteArray()

AbstractMessageLite.toByteString()

AbstractMessageLite.writeDelimitedTo(OutputStream)

AbstractMessageLite.writeTo(OutputStream)

GeneratedMessageV3.<M>parseDelimitedWithIOException(Parser<M>,InputStream)

GeneratedMessageV3.<M>parseDelimitedWithIOException(Parser<M>,InputStream,ExtensionRegistryLite)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,CodedInputStream)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,CodedInputStream,ExtensionRegistryLite)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,InputStream)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,InputStream,ExtensionRegistryLite)

GeneratedMessageV3.<V>serializeBooleanMapTo(CodedOutputStream,MapField<Boolean,V>,MapEntry<Boolean,V>,int)

GeneratedMessageV3.<V>serializeIntegerMapTo(CodedOutputStream,MapField<Integer,V>,MapEntry<Integer,V>,int)

GeneratedMessageV3.<V>serializeLongMapTo(CodedOutputStream,MapField<Long,V>,MapEntry<Long,V>,int)

GeneratedMessageV3.<V>serializeStringMapTo(CodedOutputStream,MapField<String,V>,MapEntry<String,V>,int)

GeneratedMessageV3.canUseUnsafe()

GeneratedMessageV3.computeStringSize(int,Object)

GeneratedMessageV3.computeStringSizeNoTag(Object)

GeneratedMessageV3.emptyBooleanList()

GeneratedMessageV3.emptyDoubleList()

GeneratedMessageV3.emptyFloatList()

GeneratedMessageV3.emptyIntList()

GeneratedMessageV3.emptyLongList()

GeneratedMessageV3.getAllFields()

GeneratedMessageV3.getDescriptorForType()

GeneratedMessageV3.getField(Descriptors.FieldDescriptor)

GeneratedMessageV3.getOneofFieldDescriptor(Descriptors.OneofDescriptor)

GeneratedMessageV3.getParserForType()

GeneratedMessageV3.getRepeatedField(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.getRepeatedFieldCount(Descriptors.FieldDescriptor)

GeneratedMessageV3.getSerializedSize()

GeneratedMessageV3.getUnknownFields()

GeneratedMessageV3.hasField(Descriptors.FieldDescriptor)

GeneratedMessageV3.hasOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.internalGetFieldAccessorTable()

GeneratedMessageV3.internalGetMapField(int)

GeneratedMessageV3.isInitialized()

GeneratedMessageV3.isStringEmpty(Object)

GeneratedMessageV3.makeExtensionsImmutable()

GeneratedMessageV3.mergeFromAndMakeImmutableInternal(CodedInputStream,ExtensionRegistryLite)

GeneratedMessageV3.mutableCopy(Internal.BooleanList)

GeneratedMessageV3.mutableCopy(Internal.DoubleList)

GeneratedMessageV3.mutableCopy(Internal.FloatList)

GeneratedMessageV3.mutableCopy(Internal.IntList)

GeneratedMessageV3.mutableCopy(Internal.LongList)

GeneratedMessageV3.newBooleanList()

GeneratedMessageV3.newBuilderForType(AbstractMessage.BuilderParent)

GeneratedMessageV3.newBuilderForType(GeneratedMessageV3.BuilderParent)

GeneratedMessageV3.newDoubleList()

GeneratedMessageV3.newFloatList()

GeneratedMessageV3.newInstance(GeneratedMessageV3.UnusedPrivateParameter)

GeneratedMessageV3.newIntList()

GeneratedMessageV3.newLongList()

GeneratedMessageV3.parseUnknownField(CodedInputStream,UnknownFieldSet.Builder,ExtensionRegistryLite,int)

GeneratedMessageV3.parseUnknownFieldProto3(CodedInputStream,UnknownFieldSet.Builder,ExtensionRegistryLite,int)

GeneratedMessageV3.writeReplace()

GeneratedMessageV3.writeString(CodedOutputStream,int,Object)

GeneratedMessageV3.writeStringNoTag(CodedOutputStream,Object)

GeneratedMessageV3.writeTo(CodedOutputStream)

Object.clone()

Object.finalize()

Object.getClass()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Fields

NAME_FIELD_NUMBER

public static final int NAME_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_CODE_MODIFICATION_FIELD_NUMBER

public static final int UNEXPECTED_CODE_MODIFICATION_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_FTRACE_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_FTRACE_HANDLER_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_INTERRUPT_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_INTERRUPT_HANDLER_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_KERNEL_CODE_PAGES_FIELD_NUMBER

public static final int UNEXPECTED_KERNEL_CODE_PAGES_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_KPROBE_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_KPROBE_HANDLER_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_PROCESSES_IN_RUNQUEUE_FIELD_NUMBER

public static final int UNEXPECTED_PROCESSES_IN_RUNQUEUE_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_READ_ONLY_DATA_MODIFICATION_FIELD_NUMBER

public static final int UNEXPECTED_READ_ONLY_DATA_MODIFICATION_FIELD_NUMBER

Field Value

Type	Description
int

UNEXPECTED_SYSTEM_CALL_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_SYSTEM_CALL_HANDLER_FIELD_NUMBER

Field Value

Type	Description
int

Static Methods

getDefaultInstance()

public static KernelRootkit getDefaultInstance()

Returns

Type	Description
KernelRootkit

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()

Returns

Type	Description
Descriptor

newBuilder()

public static KernelRootkit.Builder newBuilder()

Returns

Type	Description
KernelRootkit.Builder

newBuilder(KernelRootkit prototype)

public static KernelRootkit.Builder newBuilder(KernelRootkit prototype)

Parameter

Name	Description
prototype	KernelRootkit

Returns

Type	Description
KernelRootkit.Builder

parseDelimitedFrom(InputStream input)

public static KernelRootkit parseDelimitedFrom(InputStream input)

Parameter

Name	Description
input	InputStream

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
IOException

parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

Parameters

Name	Description
input	InputStream
extensionRegistry	ExtensionRegistryLite

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
IOException

parseFrom(byte[] data)

public static KernelRootkit parseFrom(byte[] data)

Parameter

Name	Description
data	byte[]

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
InvalidProtocolBufferException

parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

Parameters

Name	Description
data	byte[]
extensionRegistry	ExtensionRegistryLite

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
InvalidProtocolBufferException

parseFrom(ByteString data)

public static KernelRootkit parseFrom(ByteString data)

Parameter

Name	Description
data	ByteString

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
InvalidProtocolBufferException

parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

Parameters

Name	Description
data	ByteString
extensionRegistry	ExtensionRegistryLite

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
InvalidProtocolBufferException

parseFrom(CodedInputStream input)

public static KernelRootkit parseFrom(CodedInputStream input)

Parameter

Name	Description
input	CodedInputStream

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
IOException

parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

Parameters

Name	Description
input	CodedInputStream
extensionRegistry	ExtensionRegistryLite

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
IOException

parseFrom(InputStream input)

public static KernelRootkit parseFrom(InputStream input)

Parameter

Name	Description
input	InputStream

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
IOException

parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

Parameters

Name	Description
input	InputStream
extensionRegistry	ExtensionRegistryLite

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
IOException

parseFrom(ByteBuffer data)

public static KernelRootkit parseFrom(ByteBuffer data)

Parameter

Name	Description
data	ByteBuffer

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
InvalidProtocolBufferException

parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

Parameters

Name	Description
data	ByteBuffer
extensionRegistry	ExtensionRegistryLite

Returns

Type	Description
KernelRootkit

Exceptions

Type	Description
InvalidProtocolBufferException

parser()

public static Parser<KernelRootkit> parser()

Returns

Type	Description
Parser<KernelRootkit>

Methods

equals(Object obj)

public boolean equals(Object obj)

Parameter

Name	Description
obj	Object

Returns

Type	Description
boolean

Overrides

AbstractMessage.equals(Object other)

getDefaultInstanceForType()

public KernelRootkit getDefaultInstanceForType()

Returns

Type	Description
KernelRootkit

getName()

public String getName()

Rootkit name when available.

string name = 1;

Returns

Type	Description
String	The name.

getNameBytes()

public ByteString getNameBytes()

Rootkit name when available.

string name = 1;

Returns

Type	Description
ByteString	The bytes for name.

getParserForType()

public Parser<KernelRootkit> getParserForType()

Returns

Type	Description
Parser<KernelRootkit>

Overrides

GeneratedMessageV3.getParserForType()

getSerializedSize()

public int getSerializedSize()

Returns

Type	Description
int

Overrides

GeneratedMessageV3.getSerializedSize()

getUnexpectedCodeModification()

public boolean getUnexpectedCodeModification()

True if unexpected modifications of kernel code memory are present.

bool unexpected_code_modification = 2;

Returns

Type	Description
boolean	The unexpectedCodeModification.

getUnexpectedFtraceHandler()

public boolean getUnexpectedFtraceHandler()

True if ftrace points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_ftrace_handler = 4;

Returns

Type	Description
boolean	The unexpectedFtraceHandler.

getUnexpectedInterruptHandler()

public boolean getUnexpectedInterruptHandler()

True if interrupt handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_interrupt_handler = 8;

Returns

Type	Description
boolean	The unexpectedInterruptHandler.

getUnexpectedKernelCodePages()

public boolean getUnexpectedKernelCodePages()

True if kernel code pages that are not in the expected kernel or module code regions are present.

bool unexpected_kernel_code_pages = 6;

Returns

Type	Description
boolean	The unexpectedKernelCodePages.

getUnexpectedKprobeHandler()

public boolean getUnexpectedKprobeHandler()

True if kprobe points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_kprobe_handler = 5;

Returns

Type	Description
boolean	The unexpectedKprobeHandler.

getUnexpectedProcessesInRunqueue()

public boolean getUnexpectedProcessesInRunqueue()

True if unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.

bool unexpected_processes_in_runqueue = 9;

Returns

Type	Description
boolean	The unexpectedProcessesInRunqueue.

getUnexpectedReadOnlyDataModification()

public boolean getUnexpectedReadOnlyDataModification()

True if unexpected modifications of kernel read-only data memory are present.

bool unexpected_read_only_data_modification = 3;

Returns

Type	Description
boolean	The unexpectedReadOnlyDataModification.

getUnexpectedSystemCallHandler()

public boolean getUnexpectedSystemCallHandler()

True if system call handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_system_call_handler = 7;

Returns

Type	Description
boolean	The unexpectedSystemCallHandler.

getUnknownFields()

public final UnknownFieldSet getUnknownFields()

Returns

Type	Description
UnknownFieldSet

Overrides

GeneratedMessageV3.getUnknownFields()

hashCode()

public int hashCode()

Returns

Type	Description
int

Overrides

AbstractMessage.hashCode()

internalGetFieldAccessorTable()

protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()

Returns

Type	Description
FieldAccessorTable

Overrides

GeneratedMessageV3.internalGetFieldAccessorTable()

isInitialized()

public final boolean isInitialized()

Returns

Type	Description
boolean

Overrides

GeneratedMessageV3.isInitialized()

newBuilderForType()

public KernelRootkit.Builder newBuilderForType()

Returns

Type	Description
KernelRootkit.Builder

newBuilderForType(GeneratedMessageV3.BuilderParent parent)

protected KernelRootkit.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)

Parameter

Name	Description
parent	BuilderParent

Returns

Type	Description
KernelRootkit.Builder

Overrides

GeneratedMessageV3.newBuilderForType(GeneratedMessageV3.BuilderParent parent)

newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

Parameter

Name	Description
unused	UnusedPrivateParameter

Returns

Type	Description
Object

Overrides

GeneratedMessageV3.newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

toBuilder()

public KernelRootkit.Builder toBuilder()

Returns

Type	Description
KernelRootkit.Builder

writeTo(CodedOutputStream output)

public void writeTo(CodedOutputStream output)

Parameter

Name	Description
output	CodedOutputStream

Overrides

GeneratedMessageV3.writeTo(CodedOutputStream output)

Exceptions

Type	Description
IOException