Class ProcessSignature (1.30.0)

Version 1.30.0

• 1.35.1 (latest)
• 1.35.0
• 1.33.1
• 1.32.1
• 1.31.0
• 1.30.1
• 1.29.0
• 1.28.0
• 1.27.0
• 1.26.1
• 1.25.0
• 1.24.1
• 1.23.2
• 1.22.0
• 1.21.0
• 1.20.0
• 1.19.1
• 1.18.2
• 1.17.0
• 1.16.2
• 1.15.0
• 1.14.0
• 1.13.0
• 1.12.0
• 1.11.1
• 1.10.0
• 1.9.0
• 1.8.0
• 1.7.0
• 1.6.0
• 1.5.2
• 1.4.0
• 1.3.1
• 1.2.0
• 1.1.0
• 1.0.0
• 0.7.3
• 0.6.0
• 0.5.0
• 0.4.0
• 0.3.0

ProcessSignature(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Indicates what signature matched this process.

This message has oneof_ fields (mutually exclusive fields). For each oneof, at most one member field can be set at the same time. Setting any member of the oneof automatically clears all other members.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes
Name	Description
memory_hash_signature	google.cloud.securitycenter_v1.types.Indicator.ProcessSignature.MemoryHashSignature Signature indicating that a binary family was matched. This field is a member of oneof_ signature.
yara_rule_signature	google.cloud.securitycenter_v1.types.Indicator.ProcessSignature.YaraRuleSignature Signature indicating that a YARA rule was matched. This field is a member of oneof_ signature.
signature_type	google.cloud.securitycenter_v1.types.Indicator.ProcessSignature.SignatureType Describes the type of resource associated with the signature.

Classes

MemoryHashSignature

MemoryHashSignature(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A signature corresponding to memory page hashes.

SignatureType

SignatureType(value)

Possible resource types to be associated with a signature.

Values: SIGNATURE_TYPE_UNSPECIFIED (0): The default signature type. SIGNATURE_TYPE_PROCESS (1): Used for signatures concerning processes. SIGNATURE_TYPE_FILE (2): Used for signatures concerning disks.

YaraRuleSignature

YaraRuleSignature(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A signature corresponding to a YARA rule.