Class KernelRootkit (2.30.0)

public final class KernelRootkit extends GeneratedMessageV3 implements KernelRootkitOrBuilder

Kernel mode rootkit signatures.

Protobuf type google.cloud.securitycenter.v1.KernelRootkit

Inheritance

Object > AbstractMessageLite<MessageType,BuilderType> > AbstractMessage > GeneratedMessageV3 > KernelRootkit

Implements

KernelRootkitOrBuilder

Inherited Members

AbstractMessage.equals(Object)

AbstractMessage.findInitializationErrors()

AbstractMessage.getInitializationErrorString()

AbstractMessage.hashBoolean(boolean)

AbstractMessage.hashCode()

AbstractMessage.hashEnum(Internal.EnumLite)

AbstractMessage.hashEnumList(List<? extends Internal.EnumLite>)

AbstractMessage.hashFields(int,Map<Descriptors.FieldDescriptor,Object>)

AbstractMessage.hashLong(long)

AbstractMessage.toString()

AbstractMessageLite.<T>addAll(Iterable<T>,Collection<? super T>)

AbstractMessageLite.<T>addAll(Iterable<T>,List<? super T>)

AbstractMessageLite.checkByteStringIsUtf8(ByteString)

AbstractMessageLite.toByteArray()

AbstractMessageLite.toByteString()

AbstractMessageLite.writeDelimitedTo(OutputStream)

AbstractMessageLite.writeTo(OutputStream)

com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)

GeneratedMessageV3.<M>parseDelimitedWithIOException(Parser<M>,InputStream)

GeneratedMessageV3.<M>parseDelimitedWithIOException(Parser<M>,InputStream,ExtensionRegistryLite)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,CodedInputStream)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,CodedInputStream,ExtensionRegistryLite)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,InputStream)

GeneratedMessageV3.<M>parseWithIOException(Parser<M>,InputStream,ExtensionRegistryLite)

GeneratedMessageV3.<V>serializeBooleanMapTo(CodedOutputStream,MapField<Boolean,V>,MapEntry<Boolean,V>,int)

GeneratedMessageV3.<V>serializeIntegerMapTo(CodedOutputStream,MapField<Integer,V>,MapEntry<Integer,V>,int)

GeneratedMessageV3.<V>serializeLongMapTo(CodedOutputStream,MapField<Long,V>,MapEntry<Long,V>,int)

GeneratedMessageV3.<V>serializeStringMapTo(CodedOutputStream,MapField<String,V>,MapEntry<String,V>,int)

GeneratedMessageV3.canUseUnsafe()

GeneratedMessageV3.computeStringSize(int,Object)

GeneratedMessageV3.computeStringSizeNoTag(Object)

GeneratedMessageV3.emptyBooleanList()

GeneratedMessageV3.emptyDoubleList()

GeneratedMessageV3.emptyFloatList()

GeneratedMessageV3.emptyIntList()

GeneratedMessageV3.emptyLongList()

GeneratedMessageV3.getAllFields()

GeneratedMessageV3.getDescriptorForType()

GeneratedMessageV3.getField(Descriptors.FieldDescriptor)

GeneratedMessageV3.getOneofFieldDescriptor(Descriptors.OneofDescriptor)

GeneratedMessageV3.getParserForType()

GeneratedMessageV3.getRepeatedField(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.getRepeatedFieldCount(Descriptors.FieldDescriptor)

GeneratedMessageV3.getSerializedSize()

GeneratedMessageV3.getUnknownFields()

GeneratedMessageV3.hasField(Descriptors.FieldDescriptor)

GeneratedMessageV3.hasOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.internalGetFieldAccessorTable()

GeneratedMessageV3.internalGetMapField(int)

GeneratedMessageV3.isInitialized()

GeneratedMessageV3.isStringEmpty(Object)

GeneratedMessageV3.makeExtensionsImmutable()

GeneratedMessageV3.mergeFromAndMakeImmutableInternal(CodedInputStream,ExtensionRegistryLite)

GeneratedMessageV3.mutableCopy(Internal.BooleanList)

GeneratedMessageV3.mutableCopy(Internal.DoubleList)

GeneratedMessageV3.mutableCopy(Internal.FloatList)

GeneratedMessageV3.mutableCopy(Internal.IntList)

GeneratedMessageV3.mutableCopy(Internal.LongList)

GeneratedMessageV3.newBooleanList()

GeneratedMessageV3.newBuilderForType(AbstractMessage.BuilderParent)

GeneratedMessageV3.newBuilderForType(GeneratedMessageV3.BuilderParent)

GeneratedMessageV3.newDoubleList()

GeneratedMessageV3.newFloatList()

GeneratedMessageV3.newInstance(GeneratedMessageV3.UnusedPrivateParameter)

GeneratedMessageV3.newIntList()

GeneratedMessageV3.newLongList()

GeneratedMessageV3.parseUnknownField(CodedInputStream,UnknownFieldSet.Builder,ExtensionRegistryLite,int)

GeneratedMessageV3.parseUnknownFieldProto3(CodedInputStream,UnknownFieldSet.Builder,ExtensionRegistryLite,int)

GeneratedMessageV3.writeReplace()

GeneratedMessageV3.writeString(CodedOutputStream,int,Object)

GeneratedMessageV3.writeStringNoTag(CodedOutputStream,Object)

GeneratedMessageV3.writeTo(CodedOutputStream)

Object.clone()

Object.finalize()

Object.getClass()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Fields

NAME_FIELD_NUMBER

public static final int NAME_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_CODE_MODIFICATION_FIELD_NUMBER

public static final int UNEXPECTED_CODE_MODIFICATION_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_FTRACE_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_FTRACE_HANDLER_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_INTERRUPT_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_INTERRUPT_HANDLER_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_KERNEL_CODE_PAGES_FIELD_NUMBER

public static final int UNEXPECTED_KERNEL_CODE_PAGES_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_KPROBE_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_KPROBE_HANDLER_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_PROCESSES_IN_RUNQUEUE_FIELD_NUMBER

public static final int UNEXPECTED_PROCESSES_IN_RUNQUEUE_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_READ_ONLY_DATA_MODIFICATION_FIELD_NUMBER

public static final int UNEXPECTED_READ_ONLY_DATA_MODIFICATION_FIELD_NUMBER

Field Value
Type	Description
`int`

UNEXPECTED_SYSTEM_CALL_HANDLER_FIELD_NUMBER

public static final int UNEXPECTED_SYSTEM_CALL_HANDLER_FIELD_NUMBER

Field Value
Type	Description
`int`

Static Methods

getDefaultInstance()

public static KernelRootkit getDefaultInstance()

Returns
Type	Description
`KernelRootkit`

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()

Returns
Type	Description
`Descriptor`

newBuilder()

public static KernelRootkit.Builder newBuilder()

Returns
Type	Description
`KernelRootkit.Builder`

newBuilder(KernelRootkit prototype)

public static KernelRootkit.Builder newBuilder(KernelRootkit prototype)

Parameter
Name	Description
`prototype`	`KernelRootkit`

Returns
Type	Description
`KernelRootkit.Builder`

parseDelimitedFrom(InputStream input)

public static KernelRootkit parseDelimitedFrom(InputStream input)

Parameter
Name	Description
`input`	`InputStream`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`IOException`

parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
`input`	`InputStream`
`extensionRegistry`	`ExtensionRegistryLite`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`IOException`

parseFrom(byte[] data)

public static KernelRootkit parseFrom(byte[] data)

Parameter
Name	Description
`data`	`byte[]`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`InvalidProtocolBufferException`

parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
`data`	`byte[]`
`extensionRegistry`	`ExtensionRegistryLite`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`InvalidProtocolBufferException`

parseFrom(ByteString data)

public static KernelRootkit parseFrom(ByteString data)

Parameter
Name	Description
`data`	`ByteString`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`InvalidProtocolBufferException`

parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
`data`	`ByteString`
`extensionRegistry`	`ExtensionRegistryLite`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`InvalidProtocolBufferException`

parseFrom(CodedInputStream input)

public static KernelRootkit parseFrom(CodedInputStream input)

Parameter
Name	Description
`input`	`CodedInputStream`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`IOException`

parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
`input`	`CodedInputStream`
`extensionRegistry`	`ExtensionRegistryLite`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`IOException`

parseFrom(InputStream input)

public static KernelRootkit parseFrom(InputStream input)

Parameter
Name	Description
`input`	`InputStream`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`IOException`

parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
`input`	`InputStream`
`extensionRegistry`	`ExtensionRegistryLite`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`IOException`

parseFrom(ByteBuffer data)

public static KernelRootkit parseFrom(ByteBuffer data)

Parameter
Name	Description
`data`	`ByteBuffer`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`InvalidProtocolBufferException`

parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

public static KernelRootkit parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

Parameters
Name	Description
`data`	`ByteBuffer`
`extensionRegistry`	`ExtensionRegistryLite`

Returns
Type	Description
`KernelRootkit`

Exceptions
Type	Description
`InvalidProtocolBufferException`

parser()

public static Parser<KernelRootkit> parser()

Returns
Type	Description
`Parser<KernelRootkit>`

Methods

equals(Object obj)

public boolean equals(Object obj)

Parameter
Name	Description
`obj`	`Object`

Returns
Type	Description
`boolean`

Overrides

AbstractMessage.equals(Object other)

getDefaultInstanceForType()

public KernelRootkit getDefaultInstanceForType()

Returns
Type	Description
`KernelRootkit`

getName()

public String getName()

Rootkit name, when available.

string name = 1;

Returns
Type	Description
`String`	The name.

getNameBytes()

public ByteString getNameBytes()

Rootkit name, when available.

string name = 1;

Returns
Type	Description
`ByteString`	The bytes for name.

getParserForType()

public Parser<KernelRootkit> getParserForType()

Returns
Type	Description
`Parser<KernelRootkit>`

Overrides

GeneratedMessageV3.getParserForType()

getSerializedSize()

public int getSerializedSize()

Returns
Type	Description
`int`

Overrides

GeneratedMessageV3.getSerializedSize()

getUnexpectedCodeModification()

public boolean getUnexpectedCodeModification()

True if unexpected modifications of kernel code memory are present.

bool unexpected_code_modification = 2;

Returns
Type	Description
`boolean`	The unexpectedCodeModification.

getUnexpectedFtraceHandler()

public boolean getUnexpectedFtraceHandler()

True if ftrace points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_ftrace_handler = 4;

Returns
Type	Description
`boolean`	The unexpectedFtraceHandler.

getUnexpectedInterruptHandler()

public boolean getUnexpectedInterruptHandler()

True if interrupt handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_interrupt_handler = 8;

Returns
Type	Description
`boolean`	The unexpectedInterruptHandler.

getUnexpectedKernelCodePages()

public boolean getUnexpectedKernelCodePages()

True if kernel code pages that are not in the expected kernel or module code regions are present.

bool unexpected_kernel_code_pages = 6;

Returns
Type	Description
`boolean`	The unexpectedKernelCodePages.

getUnexpectedKprobeHandler()

public boolean getUnexpectedKprobeHandler()

True if kprobe points are present with callbacks pointing to regions that are not in the expected kernel or module code range.

bool unexpected_kprobe_handler = 5;

Returns
Type	Description
`boolean`	The unexpectedKprobeHandler.

getUnexpectedProcessesInRunqueue()

public boolean getUnexpectedProcessesInRunqueue()

True if unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.

bool unexpected_processes_in_runqueue = 9;

Returns
Type	Description
`boolean`	The unexpectedProcessesInRunqueue.

getUnexpectedReadOnlyDataModification()

public boolean getUnexpectedReadOnlyDataModification()

True if unexpected modifications of kernel read-only data memory are present.

bool unexpected_read_only_data_modification = 3;

Returns
Type	Description
`boolean`	The unexpectedReadOnlyDataModification.

getUnexpectedSystemCallHandler()

public boolean getUnexpectedSystemCallHandler()

True if system call handlers that are are not in the expected kernel or module code regions are present.

bool unexpected_system_call_handler = 7;

Returns
Type	Description
`boolean`	The unexpectedSystemCallHandler.

hashCode()

public int hashCode()

Returns
Type	Description
`int`

Overrides

AbstractMessage.hashCode()

internalGetFieldAccessorTable()

protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()

Returns
Type	Description
`FieldAccessorTable`

Overrides

GeneratedMessageV3.internalGetFieldAccessorTable()

isInitialized()

public final boolean isInitialized()

Returns
Type	Description
`boolean`

Overrides

GeneratedMessageV3.isInitialized()

newBuilderForType()

public KernelRootkit.Builder newBuilderForType()

Returns
Type	Description
`KernelRootkit.Builder`

newBuilderForType(GeneratedMessageV3.BuilderParent parent)

protected KernelRootkit.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)

Parameter
Name	Description
`parent`	`BuilderParent`

Returns
Type	Description
`KernelRootkit.Builder`

Overrides

GeneratedMessageV3.newBuilderForType(GeneratedMessageV3.BuilderParent parent)

newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

Parameter
Name	Description
`unused`	`UnusedPrivateParameter`

Returns
Type	Description
`Object`

Overrides

GeneratedMessageV3.newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

toBuilder()

public KernelRootkit.Builder toBuilder()

Returns
Type	Description
`KernelRootkit.Builder`

writeTo(CodedOutputStream output)

public void writeTo(CodedOutputStream output)

Parameter
Name	Description
`output`	`CodedOutputStream`

Overrides

GeneratedMessageV3.writeTo(CodedOutputStream output)

Exceptions
Type	Description
`IOException`