Interface FindingOrBuilder (2.3.2)

public interface FindingOrBuilder extends MessageOrBuilder

Implements

MessageOrBuilder

Methods

containsExternalSystems(String key)

public abstract boolean containsExternalSystems(String key)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
NameDescription
keyString
Returns
TypeDescription
boolean

containsSourceProperties(String key)

public abstract boolean containsSourceProperties(String key)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Parameter
NameDescription
keyString
Returns
TypeDescription
boolean

getCanonicalName()

public abstract String getCanonicalName()

The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}" or "projects/{project_number}/sources/{source_id}/findings/{finding_id}", depending on the closest CRM ancestor of the resource associated with the finding.

string canonical_name = 14;

Returns
TypeDescription
String

The canonicalName.

getCanonicalNameBytes()

public abstract ByteString getCanonicalNameBytes()

The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}" or "projects/{project_number}/sources/{source_id}/findings/{finding_id}", depending on the closest CRM ancestor of the resource associated with the finding.

string canonical_name = 14;

Returns
TypeDescription
ByteString

The bytes for canonicalName.

getCategory()

public abstract String getCategory()

The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"

string category = 5;

Returns
TypeDescription
String

The category.

getCategoryBytes()

public abstract ByteString getCategoryBytes()

The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"

string category = 5;

Returns
TypeDescription
ByteString

The bytes for category.

getCreateTime()

public abstract Timestamp getCreateTime()

The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 10;

Returns
TypeDescription
Timestamp

The createTime.

getCreateTimeOrBuilder()

public abstract TimestampOrBuilder getCreateTimeOrBuilder()

The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 10;

Returns
TypeDescription
TimestampOrBuilder

getEventTime()

public abstract Timestamp getEventTime()

The time at which the event took place, or when an update to the finding occurred. For example, if the finding represents an open firewall it would capture the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding were to be resolved afterward, this time would reflect when the finding was resolved. Must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 9;

Returns
TypeDescription
Timestamp

The eventTime.

getEventTimeOrBuilder()

public abstract TimestampOrBuilder getEventTimeOrBuilder()

The time at which the event took place, or when an update to the finding occurred. For example, if the finding represents an open firewall it would capture the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding were to be resolved afterward, this time would reflect when the finding was resolved. Must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 9;

Returns
TypeDescription
TimestampOrBuilder

getExternalSystems()

public abstract Map<String,ExternalSystem> getExternalSystems()
Returns
TypeDescription
Map<String,ExternalSystem>

getExternalSystemsCount()

public abstract int getExternalSystemsCount()

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
int

getExternalSystemsMap()

public abstract Map<String,ExternalSystem> getExternalSystemsMap()

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
Map<String,ExternalSystem>

getExternalSystemsOrDefault(String key, ExternalSystem defaultValue)

public abstract ExternalSystem getExternalSystemsOrDefault(String key, ExternalSystem defaultValue)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameters
NameDescription
keyString
defaultValueExternalSystem
Returns
TypeDescription
ExternalSystem

getExternalSystemsOrThrow(String key)

public abstract ExternalSystem getExternalSystemsOrThrow(String key)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
NameDescription
keyString
Returns
TypeDescription
ExternalSystem

getExternalUri()

public abstract String getExternalUri()

The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.

string external_uri = 6;

Returns
TypeDescription
String

The externalUri.

getExternalUriBytes()

public abstract ByteString getExternalUriBytes()

The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.

string external_uri = 6;

Returns
TypeDescription
ByteString

The bytes for externalUri.

getFindingClass()

public abstract Finding.FindingClass getFindingClass()

The class of the finding.

.google.cloud.securitycenter.v1.Finding.FindingClass finding_class = 17;

Returns
TypeDescription
Finding.FindingClass

The findingClass.

getFindingClassValue()

public abstract int getFindingClassValue()

The class of the finding.

.google.cloud.securitycenter.v1.Finding.FindingClass finding_class = 17;

Returns
TypeDescription
int

The enum numeric value on the wire for findingClass.

getIndicator()

public abstract Indicator getIndicator()

Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise

.google.cloud.securitycenter.v1.Indicator indicator = 18;

Returns
TypeDescription
Indicator

The indicator.

getIndicatorOrBuilder()

public abstract IndicatorOrBuilder getIndicatorOrBuilder()

Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise

.google.cloud.securitycenter.v1.Indicator indicator = 18;

Returns
TypeDescription
IndicatorOrBuilder

getMute()

public abstract Finding.Mute getMute()

Indicates the mute state of a finding (either unspecified, muted, unmuted or undefined).

.google.cloud.securitycenter.v1.Finding.Mute mute = 15;

Returns
TypeDescription
Finding.Mute

The mute.

getMuteInitiator()

public abstract String getMuteInitiator()

First known as mute_annotation. Records additional information about the mute operation e.g. mute config that muted the finding, user who muted the finding, etc.

string mute_initiator = 28;

Returns
TypeDescription
String

The muteInitiator.

getMuteInitiatorBytes()

public abstract ByteString getMuteInitiatorBytes()

First known as mute_annotation. Records additional information about the mute operation e.g. mute config that muted the finding, user who muted the finding, etc.

string mute_initiator = 28;

Returns
TypeDescription
ByteString

The bytes for muteInitiator.

getMuteUpdateTime()

public abstract Timestamp getMuteUpdateTime()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
Timestamp

The muteUpdateTime.

getMuteUpdateTimeOrBuilder()

public abstract TimestampOrBuilder getMuteUpdateTimeOrBuilder()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
TimestampOrBuilder

getMuteValue()

public abstract int getMuteValue()

Indicates the mute state of a finding (either unspecified, muted, unmuted or undefined).

.google.cloud.securitycenter.v1.Finding.Mute mute = 15;

Returns
TypeDescription
int

The enum numeric value on the wire for mute.

getName()

public abstract String getName()

The relative resource name of this finding. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"

string name = 1;

Returns
TypeDescription
String

The name.

getNameBytes()

public abstract ByteString getNameBytes()

The relative resource name of this finding. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Example: "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"

string name = 1;

Returns
TypeDescription
ByteString

The bytes for name.

getParent()

public abstract String getParent()

The relative resource name of the source the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. For example: "organizations/{organization_id}/sources/{source_id}"

string parent = 2;

Returns
TypeDescription
String

The parent.

getParentBytes()

public abstract ByteString getParentBytes()

The relative resource name of the source the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. For example: "organizations/{organization_id}/sources/{source_id}"

string parent = 2;

Returns
TypeDescription
ByteString

The bytes for parent.

getResourceName()

public abstract String getResourceName()

For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.

string resource_name = 3;

Returns
TypeDescription
String

The resourceName.

getResourceNameBytes()

public abstract ByteString getResourceNameBytes()

For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.

string resource_name = 3;

Returns
TypeDescription
ByteString

The bytes for resourceName.

getSecurityMarks()

public abstract SecurityMarks getSecurityMarks()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
SecurityMarks

The securityMarks.

getSecurityMarksOrBuilder()

public abstract SecurityMarksOrBuilder getSecurityMarksOrBuilder()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
SecurityMarksOrBuilder

getSeverity()

public abstract Finding.Severity getSeverity()

The severity of the finding. This field is managed by the source that writes the finding.

.google.cloud.securitycenter.v1.Finding.Severity severity = 12;

Returns
TypeDescription
Finding.Severity

The severity.

getSeverityValue()

public abstract int getSeverityValue()

The severity of the finding. This field is managed by the source that writes the finding.

.google.cloud.securitycenter.v1.Finding.Severity severity = 12;

Returns
TypeDescription
int

The enum numeric value on the wire for severity.

getSourceProperties()

public abstract Map<String,Value> getSourceProperties()
Returns
TypeDescription
Map<String,Value>

getSourcePropertiesCount()

public abstract int getSourcePropertiesCount()

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Returns
TypeDescription
int

getSourcePropertiesMap()

public abstract Map<String,Value> getSourcePropertiesMap()

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Returns
TypeDescription
Map<String,Value>

getSourcePropertiesOrDefault(String key, Value defaultValue)

public abstract Value getSourcePropertiesOrDefault(String key, Value defaultValue)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Parameters
NameDescription
keyString
defaultValueValue
Returns
TypeDescription
Value

getSourcePropertiesOrThrow(String key)

public abstract Value getSourcePropertiesOrThrow(String key)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Parameter
NameDescription
keyString
Returns
TypeDescription
Value

getState()

public abstract Finding.State getState()

The state of the finding.

.google.cloud.securitycenter.v1.Finding.State state = 4;

Returns
TypeDescription
Finding.State

The state.

getStateValue()

public abstract int getStateValue()

The state of the finding.

.google.cloud.securitycenter.v1.Finding.State state = 4;

Returns
TypeDescription
int

The enum numeric value on the wire for state.

getVulnerability()

public abstract Vulnerability getVulnerability()

Represents vulnerability specific fields like cve, cvss scores etc. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;

Returns
TypeDescription
Vulnerability

The vulnerability.

getVulnerabilityOrBuilder()

public abstract VulnerabilityOrBuilder getVulnerabilityOrBuilder()

Represents vulnerability specific fields like cve, cvss scores etc. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;

Returns
TypeDescription
VulnerabilityOrBuilder

hasCreateTime()

public abstract boolean hasCreateTime()

The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 10;

Returns
TypeDescription
boolean

Whether the createTime field is set.

hasEventTime()

public abstract boolean hasEventTime()

The time at which the event took place, or when an update to the finding occurred. For example, if the finding represents an open firewall it would capture the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding were to be resolved afterward, this time would reflect when the finding was resolved. Must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 9;

Returns
TypeDescription
boolean

Whether the eventTime field is set.

hasIndicator()

public abstract boolean hasIndicator()

Represents what's commonly known as an Indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise

.google.cloud.securitycenter.v1.Indicator indicator = 18;

Returns
TypeDescription
boolean

Whether the indicator field is set.

hasMuteUpdateTime()

public abstract boolean hasMuteUpdateTime()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
boolean

Whether the muteUpdateTime field is set.

hasSecurityMarks()

public abstract boolean hasSecurityMarks()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
TypeDescription
boolean

Whether the securityMarks field is set.

hasVulnerability()

public abstract boolean hasVulnerability()

Represents vulnerability specific fields like cve, cvss scores etc. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;

Returns
TypeDescription
boolean

Whether the vulnerability field is set.