Class KernelRootkit.Builder (2.25.0)

public static final class KernelRootkit.Builder extends GeneratedMessageV3.Builder<KernelRootkit.Builder> implements KernelRootkitOrBuilder

Kernel mode rootkit signatures.

Protobuf type google.cloud.securitycenter.v1.KernelRootkit

Inheritance

Object > AbstractMessageLite.Builder<MessageType,BuilderType> > AbstractMessage.Builder<BuilderType> > GeneratedMessageV3.Builder > KernelRootkit.Builder

Implements

KernelRootkitOrBuilder

Inherited Members

AbstractMessage.Builder.findInitializationErrors()

AbstractMessage.Builder.getInitializationErrorString()

AbstractMessage.Builder.internalMergeFrom(AbstractMessageLite)

AbstractMessage.Builder.mergeFrom(byte[])

AbstractMessage.Builder.mergeFrom(byte[],ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(byte[],int,int)

AbstractMessage.Builder.mergeFrom(byte[],int,int,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(ByteString)

AbstractMessage.Builder.mergeFrom(ByteString,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(CodedInputStream)

AbstractMessage.Builder.mergeFrom(CodedInputStream,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(Message)

AbstractMessage.Builder.mergeFrom(InputStream)

AbstractMessage.Builder.mergeFrom(InputStream,ExtensionRegistryLite)

AbstractMessage.Builder.newUninitializedMessageException(Message)

AbstractMessage.Builder.toString()

AbstractMessageLite.Builder.<T>addAll(Iterable<T>,Collection<? super T>)

AbstractMessageLite.Builder.<T>addAll(Iterable<T>,List<? super T>)

AbstractMessageLite.Builder.internalMergeFrom(MessageType)

AbstractMessageLite.Builder.mergeDelimitedFrom(InputStream)

AbstractMessageLite.Builder.mergeDelimitedFrom(InputStream,ExtensionRegistryLite)

AbstractMessageLite.Builder.mergeFrom(MessageLite)

AbstractMessageLite.Builder.newUninitializedMessageException(MessageLite)

GeneratedMessageV3.Builder.addRepeatedField(Descriptors.FieldDescriptor,Object)

GeneratedMessageV3.Builder.clear()

GeneratedMessageV3.Builder.clearField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.clearOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.clone()

GeneratedMessageV3.Builder.getAllFields()

GeneratedMessageV3.Builder.getDescriptorForType()

GeneratedMessageV3.Builder.getField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.getFieldBuilder(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.getOneofFieldDescriptor(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.getParentForChildren()

GeneratedMessageV3.Builder.getRepeatedField(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.Builder.getRepeatedFieldBuilder(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.Builder.getRepeatedFieldCount(Descriptors.FieldDescriptor)

com.google.protobuf.GeneratedMessageV3.Builder.getUnknownFieldSetBuilder()

GeneratedMessageV3.Builder.getUnknownFields()

GeneratedMessageV3.Builder.hasField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.hasOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.internalGetFieldAccessorTable()

GeneratedMessageV3.Builder.internalGetMapField(int)

GeneratedMessageV3.Builder.internalGetMutableMapField(int)

GeneratedMessageV3.Builder.isClean()

GeneratedMessageV3.Builder.isInitialized()

GeneratedMessageV3.Builder.markClean()

GeneratedMessageV3.Builder.mergeUnknownFields(UnknownFieldSet)

com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownLengthDelimitedField(int,com.google.protobuf.ByteString)

com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownVarintField(int,int)

GeneratedMessageV3.Builder.newBuilderForField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.onBuilt()

GeneratedMessageV3.Builder.onChanged()

com.google.protobuf.GeneratedMessageV3.Builder.parseUnknownField(com.google.protobuf.CodedInputStream,com.google.protobuf.ExtensionRegistryLite,int)

GeneratedMessageV3.Builder.setField(Descriptors.FieldDescriptor,Object)

GeneratedMessageV3.Builder.setRepeatedField(Descriptors.FieldDescriptor,int,Object)

com.google.protobuf.GeneratedMessageV3.Builder.setUnknownFieldSetBuilder(com.google.protobuf.UnknownFieldSet.Builder)

GeneratedMessageV3.Builder.setUnknownFields(UnknownFieldSet)

GeneratedMessageV3.Builder.setUnknownFieldsProto3(UnknownFieldSet)

Object.equals(Object)

Object.finalize()

Object.getClass()

Object.hashCode()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Methods

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()

Returns
Type	Description
`Descriptor`

Methods

addRepeatedField(Descriptors.FieldDescriptor field, Object value)

public KernelRootkit.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)

Parameters
Name	Description
`field`	`FieldDescriptor`
`value`	`Object`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.addRepeatedField(Descriptors.FieldDescriptor field, Object value)

build()

public KernelRootkit build()

Returns
Type	Description
`KernelRootkit`

buildPartial()

public KernelRootkit buildPartial()

Returns
Type	Description
`KernelRootkit`

clear()

public KernelRootkit.Builder clear()

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.clear()

clearField(Descriptors.FieldDescriptor field)

public KernelRootkit.Builder clearField(Descriptors.FieldDescriptor field)

Parameter
Name	Description
`field`	`FieldDescriptor`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.clearField(Descriptors.FieldDescriptor field)

clearName()

public KernelRootkit.Builder clearName()

Rootkit name when available.

string name = 1;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearOneof(Descriptors.OneofDescriptor oneof)

public KernelRootkit.Builder clearOneof(Descriptors.OneofDescriptor oneof)

Parameter
Name	Description
`oneof`	`OneofDescriptor`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.clearOneof(Descriptors.OneofDescriptor oneof)

clearUnexpectedCodeModification()

public KernelRootkit.Builder clearUnexpectedCodeModification()

True when unexpected modifications of kernel code memory are present.

bool unexpected_code_modification = 2;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearUnexpectedFtraceHandler()

public KernelRootkit.Builder clearUnexpectedFtraceHandler()

True when ftrace points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_ftrace_handler = 4;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearUnexpectedInterruptHandler()

public KernelRootkit.Builder clearUnexpectedInterruptHandler()

True when interrupt handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_interrupt_handler = 8;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearUnexpectedKernelCodePages()

public KernelRootkit.Builder clearUnexpectedKernelCodePages()

True when kernel code pages that are not in the expected kernel or module code regions are present.

bool unexpected_kernel_code_pages = 6;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearUnexpectedKprobeHandler()

public KernelRootkit.Builder clearUnexpectedKprobeHandler()

True when kprobe points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_kprobe_handler = 5;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearUnexpectedProcessesInRunqueue()

public KernelRootkit.Builder clearUnexpectedProcessesInRunqueue()

True when unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.

bool unexpected_processes_in_runqueue = 9;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearUnexpectedReadOnlyDataModification()

public KernelRootkit.Builder clearUnexpectedReadOnlyDataModification()

True when unexpected modifications of kernel read-only data memory are present.

bool unexpected_read_only_data_modification = 3;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clearUnexpectedSystemCallHandler()

public KernelRootkit.Builder clearUnexpectedSystemCallHandler()

True when system call handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_system_call_handler = 7;

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

clone()

public KernelRootkit.Builder clone()

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.clone()

getDefaultInstanceForType()

public KernelRootkit getDefaultInstanceForType()

Returns
Type	Description
`KernelRootkit`

getDescriptorForType()

public Descriptors.Descriptor getDescriptorForType()

Returns
Type	Description
`Descriptor`

Overrides

GeneratedMessageV3.Builder<BuilderType>.getDescriptorForType()

getName()

public String getName()

Rootkit name when available.

string name = 1;

Returns
Type	Description
`String`	The name.

getNameBytes()

public ByteString getNameBytes()

Rootkit name when available.

string name = 1;

Returns
Type	Description
`ByteString`	The bytes for name.

getUnexpectedCodeModification()

public boolean getUnexpectedCodeModification()

True when unexpected modifications of kernel code memory are present.

bool unexpected_code_modification = 2;

Returns
Type	Description
`boolean`	The unexpectedCodeModification.

getUnexpectedFtraceHandler()

public boolean getUnexpectedFtraceHandler()

True when ftrace points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_ftrace_handler = 4;

Returns
Type	Description
`boolean`	The unexpectedFtraceHandler.

getUnexpectedInterruptHandler()

public boolean getUnexpectedInterruptHandler()

True when interrupt handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_interrupt_handler = 8;

Returns
Type	Description
`boolean`	The unexpectedInterruptHandler.

getUnexpectedKernelCodePages()

public boolean getUnexpectedKernelCodePages()

True when kernel code pages that are not in the expected kernel or module code regions are present.

bool unexpected_kernel_code_pages = 6;

Returns
Type	Description
`boolean`	The unexpectedKernelCodePages.

getUnexpectedKprobeHandler()

public boolean getUnexpectedKprobeHandler()

True when kprobe points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_kprobe_handler = 5;

Returns
Type	Description
`boolean`	The unexpectedKprobeHandler.

getUnexpectedProcessesInRunqueue()

public boolean getUnexpectedProcessesInRunqueue()

True when unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.

bool unexpected_processes_in_runqueue = 9;

Returns
Type	Description
`boolean`	The unexpectedProcessesInRunqueue.

getUnexpectedReadOnlyDataModification()

public boolean getUnexpectedReadOnlyDataModification()

True when unexpected modifications of kernel read-only data memory are present.

bool unexpected_read_only_data_modification = 3;

Returns
Type	Description
`boolean`	The unexpectedReadOnlyDataModification.

getUnexpectedSystemCallHandler()

public boolean getUnexpectedSystemCallHandler()

True when system call handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_system_call_handler = 7;

Returns
Type	Description
`boolean`	The unexpectedSystemCallHandler.

internalGetFieldAccessorTable()

protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()

Returns
Type	Description
`FieldAccessorTable`

Overrides

GeneratedMessageV3.Builder<BuilderType>.internalGetFieldAccessorTable()

isInitialized()

public final boolean isInitialized()

Returns
Type	Description
`boolean`

Overrides

GeneratedMessageV3.Builder<BuilderType>.isInitialized()

mergeFrom(KernelRootkit other)

public KernelRootkit.Builder mergeFrom(KernelRootkit other)

Parameter
Name	Description
`other`	`KernelRootkit`

Returns
Type	Description
`KernelRootkit.Builder`

mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public KernelRootkit.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
`input`	`CodedInputStream`
`extensionRegistry`	`ExtensionRegistryLite`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

AbstractMessage.Builder<BuilderType>.mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

Exceptions
Type	Description
`IOException`

mergeFrom(Message other)

public KernelRootkit.Builder mergeFrom(Message other)

Parameter
Name	Description
`other`	`Message`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

AbstractMessage.Builder<BuilderType>.mergeFrom(Message other)

mergeUnknownFields(UnknownFieldSet unknownFields)

public final KernelRootkit.Builder mergeUnknownFields(UnknownFieldSet unknownFields)

Parameter
Name	Description
`unknownFields`	`UnknownFieldSet`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.mergeUnknownFields(UnknownFieldSet unknownFields)

setField(Descriptors.FieldDescriptor field, Object value)

public KernelRootkit.Builder setField(Descriptors.FieldDescriptor field, Object value)

Parameters
Name	Description
`field`	`FieldDescriptor`
`value`	`Object`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.setField(Descriptors.FieldDescriptor field, Object value)

setName(String value)

public KernelRootkit.Builder setName(String value)

Rootkit name when available.

string name = 1;

Parameter
Name	Description
`value`	`String` The name to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setNameBytes(ByteString value)

public KernelRootkit.Builder setNameBytes(ByteString value)

Rootkit name when available.

string name = 1;

Parameter
Name	Description
`value`	`ByteString` The bytes for name to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)

public KernelRootkit.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)

Parameters
Name	Description
`field`	`FieldDescriptor`
`index`	`int`
`value`	`Object`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)

setUnexpectedCodeModification(boolean value)

public KernelRootkit.Builder setUnexpectedCodeModification(boolean value)

True when unexpected modifications of kernel code memory are present.

bool unexpected_code_modification = 2;

Parameter
Name	Description
`value`	`boolean` The unexpectedCodeModification to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnexpectedFtraceHandler(boolean value)

public KernelRootkit.Builder setUnexpectedFtraceHandler(boolean value)

True when ftrace points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_ftrace_handler = 4;

Parameter
Name	Description
`value`	`boolean` The unexpectedFtraceHandler to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnexpectedInterruptHandler(boolean value)

public KernelRootkit.Builder setUnexpectedInterruptHandler(boolean value)

True when interrupt handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_interrupt_handler = 8;

Parameter
Name	Description
`value`	`boolean` The unexpectedInterruptHandler to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnexpectedKernelCodePages(boolean value)

public KernelRootkit.Builder setUnexpectedKernelCodePages(boolean value)

True when kernel code pages that are not in the expected kernel or module code regions are present.

bool unexpected_kernel_code_pages = 6;

Parameter
Name	Description
`value`	`boolean` The unexpectedKernelCodePages to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnexpectedKprobeHandler(boolean value)

public KernelRootkit.Builder setUnexpectedKprobeHandler(boolean value)

True when kprobe points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_kprobe_handler = 5;

Parameter
Name	Description
`value`	`boolean` The unexpectedKprobeHandler to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnexpectedProcessesInRunqueue(boolean value)

public KernelRootkit.Builder setUnexpectedProcessesInRunqueue(boolean value)

True when unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.

bool unexpected_processes_in_runqueue = 9;

Parameter
Name	Description
`value`	`boolean` The unexpectedProcessesInRunqueue to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnexpectedReadOnlyDataModification(boolean value)

public KernelRootkit.Builder setUnexpectedReadOnlyDataModification(boolean value)

True when unexpected modifications of kernel read-only data memory are present.

bool unexpected_read_only_data_modification = 3;

Parameter
Name	Description
`value`	`boolean` The unexpectedReadOnlyDataModification to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnexpectedSystemCallHandler(boolean value)

public KernelRootkit.Builder setUnexpectedSystemCallHandler(boolean value)

True when system call handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_system_call_handler = 7;

Parameter
Name	Description
`value`	`boolean` The unexpectedSystemCallHandler to set.

Returns
Type	Description
`KernelRootkit.Builder`	This builder for chaining.

setUnknownFields(UnknownFieldSet unknownFields)

public final KernelRootkit.Builder setUnknownFields(UnknownFieldSet unknownFields)

Parameter
Name	Description
`unknownFields`	`UnknownFieldSet`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.Builder<BuilderType>.setUnknownFields(UnknownFieldSet unknownFields)