Interface FindingOrBuilder (2.54.0)

public interface FindingOrBuilder extends MessageOrBuilder

Implements

MessageOrBuilder

Methods

containsContacts(String key)

public abstract boolean containsContacts(String key)

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1@company.com"
       },
       {
         "email": "person2@company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
boolean

containsExternalSystems(String key)

public abstract boolean containsExternalSystems(String key)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
boolean

containsSourceProperties(String key)

public abstract boolean containsSourceProperties(String key)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Parameter
Name Description
key String
Returns
Type Description
boolean

getAccess()

public abstract Access getAccess()

Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.

.google.cloud.securitycenter.v1.Access access = 26;

Returns
Type Description
Access

The access.

getAccessOrBuilder()

public abstract AccessOrBuilder getAccessOrBuilder()

Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.

.google.cloud.securitycenter.v1.Access access = 26;

Returns
Type Description
AccessOrBuilder

getApplication()

public abstract Application getApplication()

Represents an application associated with the finding.

.google.cloud.securitycenter.v1.Application application = 53;

Returns
Type Description
Application

The application.

getApplicationOrBuilder()

public abstract ApplicationOrBuilder getApplicationOrBuilder()

Represents an application associated with the finding.

.google.cloud.securitycenter.v1.Application application = 53;

Returns
Type Description
ApplicationOrBuilder

getBackupDisasterRecovery()

public abstract BackupDisasterRecovery getBackupDisasterRecovery()

Fields related to Backup and DR findings.

.google.cloud.securitycenter.v1.BackupDisasterRecovery backup_disaster_recovery = 55;

Returns
Type Description
BackupDisasterRecovery

The backupDisasterRecovery.

getBackupDisasterRecoveryOrBuilder()

public abstract BackupDisasterRecoveryOrBuilder getBackupDisasterRecoveryOrBuilder()

Fields related to Backup and DR findings.

.google.cloud.securitycenter.v1.BackupDisasterRecovery backup_disaster_recovery = 55;

Returns
Type Description
BackupDisasterRecoveryOrBuilder

getCanonicalName()

public abstract String getCanonicalName()

The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}" or "projects/{project_number}/sources/{source_id}/findings/{finding_id}", depending on the closest CRM ancestor of the resource associated with the finding.

string canonical_name = 14;

Returns
Type Description
String

The canonicalName.

getCanonicalNameBytes()

public abstract ByteString getCanonicalNameBytes()

The canonical name of the finding. It's either "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}" or "projects/{project_number}/sources/{source_id}/findings/{finding_id}", depending on the closest CRM ancestor of the resource associated with the finding.

string canonical_name = 14;

Returns
Type Description
ByteString

The bytes for canonicalName.

getCategory()

public abstract String getCategory()

The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"

string category = 5;

Returns
Type Description
String

The category.

getCategoryBytes()

public abstract ByteString getCategoryBytes()

The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"

string category = 5;

Returns
Type Description
ByteString

The bytes for category.

getCloudArmor()

public abstract CloudArmor getCloudArmor()

Fields related to Cloud Armor findings.

.google.cloud.securitycenter.v1.CloudArmor cloud_armor = 59;

Returns
Type Description
CloudArmor

The cloudArmor.

getCloudArmorOrBuilder()

public abstract CloudArmorOrBuilder getCloudArmorOrBuilder()

Fields related to Cloud Armor findings.

.google.cloud.securitycenter.v1.CloudArmor cloud_armor = 59;

Returns
Type Description
CloudArmorOrBuilder

getCloudDlpDataProfile()

public abstract CloudDlpDataProfile getCloudDlpDataProfile()

Cloud DLP data profile that is associated with the finding.

.google.cloud.securitycenter.v1.CloudDlpDataProfile cloud_dlp_data_profile = 49;

Returns
Type Description
CloudDlpDataProfile

The cloudDlpDataProfile.

getCloudDlpDataProfileOrBuilder()

public abstract CloudDlpDataProfileOrBuilder getCloudDlpDataProfileOrBuilder()

Cloud DLP data profile that is associated with the finding.

.google.cloud.securitycenter.v1.CloudDlpDataProfile cloud_dlp_data_profile = 49;

Returns
Type Description
CloudDlpDataProfileOrBuilder

getCloudDlpInspection()

public abstract CloudDlpInspection getCloudDlpInspection()

Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.

.google.cloud.securitycenter.v1.CloudDlpInspection cloud_dlp_inspection = 48;

Returns
Type Description
CloudDlpInspection

The cloudDlpInspection.

getCloudDlpInspectionOrBuilder()

public abstract CloudDlpInspectionOrBuilder getCloudDlpInspectionOrBuilder()

Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.

.google.cloud.securitycenter.v1.CloudDlpInspection cloud_dlp_inspection = 48;

Returns
Type Description
CloudDlpInspectionOrBuilder

getCompliances(int index)

public abstract Compliance getCompliances(int index)

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;

Parameter
Name Description
index int
Returns
Type Description
Compliance

getCompliancesCount()

public abstract int getCompliancesCount()

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;

Returns
Type Description
int

getCompliancesList()

public abstract List<Compliance> getCompliancesList()

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;

Returns
Type Description
List<Compliance>

getCompliancesOrBuilder(int index)

public abstract ComplianceOrBuilder getCompliancesOrBuilder(int index)

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;

Parameter
Name Description
index int
Returns
Type Description
ComplianceOrBuilder

getCompliancesOrBuilderList()

public abstract List<? extends ComplianceOrBuilder> getCompliancesOrBuilderList()

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v1.Compliance compliances = 34;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.ComplianceOrBuilder>

getConnections(int index)

public abstract Connection getConnections(int index)

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v1.Connection connections = 31;

Parameter
Name Description
index int
Returns
Type Description
Connection

getConnectionsCount()

public abstract int getConnectionsCount()

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v1.Connection connections = 31;

Returns
Type Description
int

getConnectionsList()

public abstract List<Connection> getConnectionsList()

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v1.Connection connections = 31;

Returns
Type Description
List<Connection>

getConnectionsOrBuilder(int index)

public abstract ConnectionOrBuilder getConnectionsOrBuilder(int index)

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v1.Connection connections = 31;

Parameter
Name Description
index int
Returns
Type Description
ConnectionOrBuilder

getConnectionsOrBuilderList()

public abstract List<? extends ConnectionOrBuilder> getConnectionsOrBuilderList()

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v1.Connection connections = 31;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.ConnectionOrBuilder>

getContacts() (deprecated)

public abstract Map<String,ContactDetails> getContacts()

Use #getContactsMap() instead.

Returns
Type Description
Map<String,ContactDetails>

getContactsCount()

public abstract int getContactsCount()

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
int

getContactsMap()

public abstract Map<String,ContactDetails> getContactsMap()

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Map<String,ContactDetails>

getContactsOrDefault(String key, ContactDetails defaultValue)

public abstract ContactDetails getContactsOrDefault(String key, ContactDetails defaultValue)

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameters
Name Description
key String
defaultValue ContactDetails
Returns
Type Description
ContactDetails

getContactsOrThrow(String key)

public abstract ContactDetails getContactsOrThrow(String key)

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v1.ContactDetails> contacts = 33 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
ContactDetails

getContainers(int index)

public abstract Container getContainers(int index)

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v1.Container containers = 42;

Parameter
Name Description
index int
Returns
Type Description
Container

getContainersCount()

public abstract int getContainersCount()

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v1.Container containers = 42;

Returns
Type Description
int

getContainersList()

public abstract List<Container> getContainersList()

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v1.Container containers = 42;

Returns
Type Description
List<Container>

getContainersOrBuilder(int index)

public abstract ContainerOrBuilder getContainersOrBuilder(int index)

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v1.Container containers = 42;

Parameter
Name Description
index int
Returns
Type Description
ContainerOrBuilder

getContainersOrBuilderList()

public abstract List<? extends ContainerOrBuilder> getContainersOrBuilderList()

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v1.Container containers = 42;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.ContainerOrBuilder>

getCreateTime()

public abstract Timestamp getCreateTime()

The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 10;

Returns
Type Description
Timestamp

The createTime.

getCreateTimeOrBuilder()

public abstract TimestampOrBuilder getCreateTimeOrBuilder()

The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 10;

Returns
Type Description
TimestampOrBuilder

getDatabase()

public abstract Database getDatabase()

Database associated with the finding.

.google.cloud.securitycenter.v1.Database database = 44;

Returns
Type Description
Database

The database.

getDatabaseOrBuilder()

public abstract DatabaseOrBuilder getDatabaseOrBuilder()

Database associated with the finding.

.google.cloud.securitycenter.v1.Database database = 44;

Returns
Type Description
DatabaseOrBuilder

getDescription()

public abstract String getDescription()

Contains more details about the finding.

string description = 37;

Returns
Type Description
String

The description.

getDescriptionBytes()

public abstract ByteString getDescriptionBytes()

Contains more details about the finding.

string description = 37;

Returns
Type Description
ByteString

The bytes for description.

getEventTime()

public abstract Timestamp getEventTime()

The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 9;

Returns
Type Description
Timestamp

The eventTime.

getEventTimeOrBuilder()

public abstract TimestampOrBuilder getEventTimeOrBuilder()

The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 9;

Returns
Type Description
TimestampOrBuilder

getExfiltration()

public abstract Exfiltration getExfiltration()

Represents exfiltrations associated with the finding.

.google.cloud.securitycenter.v1.Exfiltration exfiltration = 38;

Returns
Type Description
Exfiltration

The exfiltration.

getExfiltrationOrBuilder()

public abstract ExfiltrationOrBuilder getExfiltrationOrBuilder()

Represents exfiltrations associated with the finding.

.google.cloud.securitycenter.v1.Exfiltration exfiltration = 38;

Returns
Type Description
ExfiltrationOrBuilder

getExternalSystems() (deprecated)

public abstract Map<String,ExternalSystem> getExternalSystems()
Returns
Type Description
Map<String,ExternalSystem>

getExternalSystemsCount()

public abstract int getExternalSystemsCount()

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
int

getExternalSystemsMap()

public abstract Map<String,ExternalSystem> getExternalSystemsMap()

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Map<String,ExternalSystem>

getExternalSystemsOrDefault(String key, ExternalSystem defaultValue)

public abstract ExternalSystem getExternalSystemsOrDefault(String key, ExternalSystem defaultValue)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameters
Name Description
key String
defaultValue ExternalSystem
Returns
Type Description
ExternalSystem

getExternalSystemsOrThrow(String key)

public abstract ExternalSystem getExternalSystemsOrThrow(String key)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v1.ExternalSystem> external_systems = 22 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
ExternalSystem

getExternalUri()

public abstract String getExternalUri()

The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.

string external_uri = 6;

Returns
Type Description
String

The externalUri.

getExternalUriBytes()

public abstract ByteString getExternalUriBytes()

The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.

string external_uri = 6;

Returns
Type Description
ByteString

The bytes for externalUri.

getFiles(int index)

public abstract File getFiles(int index)

File associated with the finding.

repeated .google.cloud.securitycenter.v1.File files = 46;

Parameter
Name Description
index int
Returns
Type Description
File

getFilesCount()

public abstract int getFilesCount()

File associated with the finding.

repeated .google.cloud.securitycenter.v1.File files = 46;

Returns
Type Description
int

getFilesList()

public abstract List<File> getFilesList()

File associated with the finding.

repeated .google.cloud.securitycenter.v1.File files = 46;

Returns
Type Description
List<File>

getFilesOrBuilder(int index)

public abstract FileOrBuilder getFilesOrBuilder(int index)

File associated with the finding.

repeated .google.cloud.securitycenter.v1.File files = 46;

Parameter
Name Description
index int
Returns
Type Description
FileOrBuilder

getFilesOrBuilderList()

public abstract List<? extends FileOrBuilder> getFilesOrBuilderList()

File associated with the finding.

repeated .google.cloud.securitycenter.v1.File files = 46;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.FileOrBuilder>

getFindingClass()

public abstract Finding.FindingClass getFindingClass()

The class of the finding.

.google.cloud.securitycenter.v1.Finding.FindingClass finding_class = 17;

Returns
Type Description
Finding.FindingClass

The findingClass.

getFindingClassValue()

public abstract int getFindingClassValue()

The class of the finding.

.google.cloud.securitycenter.v1.Finding.FindingClass finding_class = 17;

Returns
Type Description
int

The enum numeric value on the wire for findingClass.

getGroupMemberships(int index)

public abstract GroupMembership getGroupMemberships(int index)

Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.

repeated .google.cloud.securitycenter.v1.GroupMembership group_memberships = 65;

Parameter
Name Description
index int
Returns
Type Description
GroupMembership

getGroupMembershipsCount()

public abstract int getGroupMembershipsCount()

Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.

repeated .google.cloud.securitycenter.v1.GroupMembership group_memberships = 65;

Returns
Type Description
int

getGroupMembershipsList()

public abstract List<GroupMembership> getGroupMembershipsList()

Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.

repeated .google.cloud.securitycenter.v1.GroupMembership group_memberships = 65;

Returns
Type Description
List<GroupMembership>

getGroupMembershipsOrBuilder(int index)

public abstract GroupMembershipOrBuilder getGroupMembershipsOrBuilder(int index)

Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.

repeated .google.cloud.securitycenter.v1.GroupMembership group_memberships = 65;

Parameter
Name Description
index int
Returns
Type Description
GroupMembershipOrBuilder

getGroupMembershipsOrBuilderList()

public abstract List<? extends GroupMembershipOrBuilder> getGroupMembershipsOrBuilderList()

Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.

repeated .google.cloud.securitycenter.v1.GroupMembership group_memberships = 65;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.GroupMembershipOrBuilder>

getIamBindings(int index)

public abstract IamBinding getIamBindings(int index)

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;

Parameter
Name Description
index int
Returns
Type Description
IamBinding

getIamBindingsCount()

public abstract int getIamBindingsCount()

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;

Returns
Type Description
int

getIamBindingsList()

public abstract List<IamBinding> getIamBindingsList()

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;

Returns
Type Description
List<IamBinding>

getIamBindingsOrBuilder(int index)

public abstract IamBindingOrBuilder getIamBindingsOrBuilder(int index)

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;

Parameter
Name Description
index int
Returns
Type Description
IamBindingOrBuilder

getIamBindingsOrBuilderList()

public abstract List<? extends IamBindingOrBuilder> getIamBindingsOrBuilderList()

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v1.IamBinding iam_bindings = 39;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.IamBindingOrBuilder>

getIndicator()

public abstract Indicator getIndicator()

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise.

.google.cloud.securitycenter.v1.Indicator indicator = 18;

Returns
Type Description
Indicator

The indicator.

getIndicatorOrBuilder()

public abstract IndicatorOrBuilder getIndicatorOrBuilder()

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise.

.google.cloud.securitycenter.v1.Indicator indicator = 18;

Returns
Type Description
IndicatorOrBuilder

getKernelRootkit()

public abstract KernelRootkit getKernelRootkit()

Signature of the kernel rootkit.

.google.cloud.securitycenter.v1.KernelRootkit kernel_rootkit = 50;

Returns
Type Description
KernelRootkit

The kernelRootkit.

getKernelRootkitOrBuilder()

public abstract KernelRootkitOrBuilder getKernelRootkitOrBuilder()

Signature of the kernel rootkit.

.google.cloud.securitycenter.v1.KernelRootkit kernel_rootkit = 50;

Returns
Type Description
KernelRootkitOrBuilder

getKubernetes()

public abstract Kubernetes getKubernetes()

Kubernetes resources associated with the finding.

.google.cloud.securitycenter.v1.Kubernetes kubernetes = 43;

Returns
Type Description
Kubernetes

The kubernetes.

getKubernetesOrBuilder()

public abstract KubernetesOrBuilder getKubernetesOrBuilder()

Kubernetes resources associated with the finding.

.google.cloud.securitycenter.v1.Kubernetes kubernetes = 43;

Returns
Type Description
KubernetesOrBuilder

getLoadBalancers(int index)

public abstract LoadBalancer getLoadBalancers(int index)

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v1.LoadBalancer load_balancers = 58;

Parameter
Name Description
index int
Returns
Type Description
LoadBalancer

getLoadBalancersCount()

public abstract int getLoadBalancersCount()

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v1.LoadBalancer load_balancers = 58;

Returns
Type Description
int

getLoadBalancersList()

public abstract List<LoadBalancer> getLoadBalancersList()

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v1.LoadBalancer load_balancers = 58;

Returns
Type Description
List<LoadBalancer>

getLoadBalancersOrBuilder(int index)

public abstract LoadBalancerOrBuilder getLoadBalancersOrBuilder(int index)

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v1.LoadBalancer load_balancers = 58;

Parameter
Name Description
index int
Returns
Type Description
LoadBalancerOrBuilder

getLoadBalancersOrBuilderList()

public abstract List<? extends LoadBalancerOrBuilder> getLoadBalancersOrBuilderList()

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v1.LoadBalancer load_balancers = 58;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.LoadBalancerOrBuilder>

getLogEntries(int index)

public abstract LogEntry getLogEntries(int index)

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v1.LogEntry log_entries = 57;

Parameter
Name Description
index int
Returns
Type Description
LogEntry

getLogEntriesCount()

public abstract int getLogEntriesCount()

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v1.LogEntry log_entries = 57;

Returns
Type Description
int

getLogEntriesList()

public abstract List<LogEntry> getLogEntriesList()

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v1.LogEntry log_entries = 57;

Returns
Type Description
List<LogEntry>

getLogEntriesOrBuilder(int index)

public abstract LogEntryOrBuilder getLogEntriesOrBuilder(int index)

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v1.LogEntry log_entries = 57;

Parameter
Name Description
index int
Returns
Type Description
LogEntryOrBuilder

getLogEntriesOrBuilderList()

public abstract List<? extends LogEntryOrBuilder> getLogEntriesOrBuilderList()

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v1.LogEntry log_entries = 57;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.LogEntryOrBuilder>

getMitreAttack()

public abstract MitreAttack getMitreAttack()

MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org

.google.cloud.securitycenter.v1.MitreAttack mitre_attack = 25;

Returns
Type Description
MitreAttack

The mitreAttack.

getMitreAttackOrBuilder()

public abstract MitreAttackOrBuilder getMitreAttackOrBuilder()

MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org

.google.cloud.securitycenter.v1.MitreAttack mitre_attack = 25;

Returns
Type Description
MitreAttackOrBuilder

getModuleName()

public abstract String getModuleName()

Unique identifier of the module which generated the finding. Example: folders/598186756061/securityHealthAnalyticsSettings/customModules/56799441161885

string module_name = 41;

Returns
Type Description
String

The moduleName.

getModuleNameBytes()

public abstract ByteString getModuleNameBytes()

Unique identifier of the module which generated the finding. Example: folders/598186756061/securityHealthAnalyticsSettings/customModules/56799441161885

string module_name = 41;

Returns
Type Description
ByteString

The bytes for moduleName.

getMute()

public abstract Finding.Mute getMute()

Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.

.google.cloud.securitycenter.v1.Finding.Mute mute = 15;

Returns
Type Description
Finding.Mute

The mute.

getMuteInitiator()

public abstract String getMuteInitiator()

Records additional information about the mute operation, for example, the mute configuration that muted the finding and the user who muted the finding.

string mute_initiator = 28;

Returns
Type Description
String

The muteInitiator.

getMuteInitiatorBytes()

public abstract ByteString getMuteInitiatorBytes()

Records additional information about the mute operation, for example, the mute configuration that muted the finding and the user who muted the finding.

string mute_initiator = 28;

Returns
Type Description
ByteString

The bytes for muteInitiator.

getMuteUpdateTime()

public abstract Timestamp getMuteUpdateTime()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Timestamp

The muteUpdateTime.

getMuteUpdateTimeOrBuilder()

public abstract TimestampOrBuilder getMuteUpdateTimeOrBuilder()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
TimestampOrBuilder

getMuteValue()

public abstract int getMuteValue()

Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.

.google.cloud.securitycenter.v1.Finding.Mute mute = 15;

Returns
Type Description
int

The enum numeric value on the wire for mute.

getName()

public abstract String getName()

The relative resource name of the finding. Example: "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}", "projects/{project_id}/sources/{source_id}/findings/{finding_id}".

string name = 1;

Returns
Type Description
String

The name.

getNameBytes()

public abstract ByteString getNameBytes()

The relative resource name of the finding. Example: "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}", "folders/{folder_id}/sources/{source_id}/findings/{finding_id}", "projects/{project_id}/sources/{source_id}/findings/{finding_id}".

string name = 1;

Returns
Type Description
ByteString

The bytes for name.

getNextSteps()

public abstract String getNextSteps()

Steps to address the finding.

string next_steps = 40;

Returns
Type Description
String

The nextSteps.

getNextStepsBytes()

public abstract ByteString getNextStepsBytes()

Steps to address the finding.

string next_steps = 40;

Returns
Type Description
ByteString

The bytes for nextSteps.

getNotebook()

public abstract Notebook getNotebook()

Notebook associated with the finding.

.google.cloud.securitycenter.v1.Notebook notebook = 63;

Returns
Type Description
Notebook

The notebook.

getNotebookOrBuilder()

public abstract NotebookOrBuilder getNotebookOrBuilder()

Notebook associated with the finding.

.google.cloud.securitycenter.v1.Notebook notebook = 63;

Returns
Type Description
NotebookOrBuilder

getOrgPolicies(int index)

public abstract OrgPolicy getOrgPolicies(int index)

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v1.OrgPolicy org_policies = 51;

Parameter
Name Description
index int
Returns
Type Description
OrgPolicy

getOrgPoliciesCount()

public abstract int getOrgPoliciesCount()

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v1.OrgPolicy org_policies = 51;

Returns
Type Description
int

getOrgPoliciesList()

public abstract List<OrgPolicy> getOrgPoliciesList()

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v1.OrgPolicy org_policies = 51;

Returns
Type Description
List<OrgPolicy>

getOrgPoliciesOrBuilder(int index)

public abstract OrgPolicyOrBuilder getOrgPoliciesOrBuilder(int index)

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v1.OrgPolicy org_policies = 51;

Parameter
Name Description
index int
Returns
Type Description
OrgPolicyOrBuilder

getOrgPoliciesOrBuilderList()

public abstract List<? extends OrgPolicyOrBuilder> getOrgPoliciesOrBuilderList()

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v1.OrgPolicy org_policies = 51;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.OrgPolicyOrBuilder>

getParent()

public abstract String getParent()

The relative resource name of the source the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. For example: "organizations/{organization_id}/sources/{source_id}"

string parent = 2;

Returns
Type Description
String

The parent.

getParentBytes()

public abstract ByteString getParentBytes()

The relative resource name of the source the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. For example: "organizations/{organization_id}/sources/{source_id}"

string parent = 2;

Returns
Type Description
ByteString

The bytes for parent.

getParentDisplayName()

public abstract String getParentDisplayName()

Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".

string parent_display_name = 36 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
String

The parentDisplayName.

getParentDisplayNameBytes()

public abstract ByteString getParentDisplayNameBytes()

Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".

string parent_display_name = 36 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
ByteString

The bytes for parentDisplayName.

getProcesses(int index)

public abstract Process getProcesses(int index)

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v1.Process processes = 30;

Parameter
Name Description
index int
Returns
Type Description
Process

getProcessesCount()

public abstract int getProcessesCount()

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v1.Process processes = 30;

Returns
Type Description
int

getProcessesList()

public abstract List<Process> getProcessesList()

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v1.Process processes = 30;

Returns
Type Description
List<Process>

getProcessesOrBuilder(int index)

public abstract ProcessOrBuilder getProcessesOrBuilder(int index)

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v1.Process processes = 30;

Parameter
Name Description
index int
Returns
Type Description
ProcessOrBuilder

getProcessesOrBuilderList()

public abstract List<? extends ProcessOrBuilder> getProcessesOrBuilderList()

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v1.Process processes = 30;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v1.ProcessOrBuilder>

getResourceName()

public abstract String getResourceName()

For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.

string resource_name = 3;

Returns
Type Description
String

The resourceName.

getResourceNameBytes()

public abstract ByteString getResourceNameBytes()

For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string. This field is immutable after creation time.

string resource_name = 3;

Returns
Type Description
ByteString

The bytes for resourceName.

getSecurityMarks()

public abstract SecurityMarks getSecurityMarks()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
SecurityMarks

The securityMarks.

getSecurityMarksOrBuilder()

public abstract SecurityMarksOrBuilder getSecurityMarksOrBuilder()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
SecurityMarksOrBuilder

getSecurityPosture()

public abstract SecurityPosture getSecurityPosture()

The security posture associated with the finding.

.google.cloud.securitycenter.v1.SecurityPosture security_posture = 56;

Returns
Type Description
SecurityPosture

The securityPosture.

getSecurityPostureOrBuilder()

public abstract SecurityPostureOrBuilder getSecurityPostureOrBuilder()

The security posture associated with the finding.

.google.cloud.securitycenter.v1.SecurityPosture security_posture = 56;

Returns
Type Description
SecurityPostureOrBuilder

getSeverity()

public abstract Finding.Severity getSeverity()

The severity of the finding. This field is managed by the source that writes the finding.

.google.cloud.securitycenter.v1.Finding.Severity severity = 12;

Returns
Type Description
Finding.Severity

The severity.

getSeverityValue()

public abstract int getSeverityValue()

The severity of the finding. This field is managed by the source that writes the finding.

.google.cloud.securitycenter.v1.Finding.Severity severity = 12;

Returns
Type Description
int

The enum numeric value on the wire for severity.

getSourceProperties() (deprecated)

public abstract Map<String,Value> getSourceProperties()
Returns
Type Description
Map<String,Value>

getSourcePropertiesCount()

public abstract int getSourcePropertiesCount()

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Returns
Type Description
int

getSourcePropertiesMap()

public abstract Map<String,Value> getSourcePropertiesMap()

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Returns
Type Description
Map<String,Value>

getSourcePropertiesOrDefault(String key, Value defaultValue)

public abstract Value getSourcePropertiesOrDefault(String key, Value defaultValue)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Parameters
Name Description
key String
defaultValue Value
Returns
Type Description
Value

getSourcePropertiesOrThrow(String key)

public abstract Value getSourcePropertiesOrThrow(String key)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 7;

Parameter
Name Description
key String
Returns
Type Description
Value

getState()

public abstract Finding.State getState()

The state of the finding.

.google.cloud.securitycenter.v1.Finding.State state = 4;

Returns
Type Description
Finding.State

The state.

getStateValue()

public abstract int getStateValue()

The state of the finding.

.google.cloud.securitycenter.v1.Finding.State state = 4;

Returns
Type Description
int

The enum numeric value on the wire for state.

getToxicCombination()

public abstract ToxicCombination getToxicCombination()

Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.

.google.cloud.securitycenter.v1.ToxicCombination toxic_combination = 64;

Returns
Type Description
ToxicCombination

The toxicCombination.

getToxicCombinationOrBuilder()

public abstract ToxicCombinationOrBuilder getToxicCombinationOrBuilder()

Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.

.google.cloud.securitycenter.v1.ToxicCombination toxic_combination = 64;

Returns
Type Description
ToxicCombinationOrBuilder

getVulnerability()

public abstract Vulnerability getVulnerability()

Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;

Returns
Type Description
Vulnerability

The vulnerability.

getVulnerabilityOrBuilder()

public abstract VulnerabilityOrBuilder getVulnerabilityOrBuilder()

Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;

Returns
Type Description
VulnerabilityOrBuilder

hasAccess()

public abstract boolean hasAccess()

Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.

.google.cloud.securitycenter.v1.Access access = 26;

Returns
Type Description
boolean

Whether the access field is set.

hasApplication()

public abstract boolean hasApplication()

Represents an application associated with the finding.

.google.cloud.securitycenter.v1.Application application = 53;

Returns
Type Description
boolean

Whether the application field is set.

hasBackupDisasterRecovery()

public abstract boolean hasBackupDisasterRecovery()

Fields related to Backup and DR findings.

.google.cloud.securitycenter.v1.BackupDisasterRecovery backup_disaster_recovery = 55;

Returns
Type Description
boolean

Whether the backupDisasterRecovery field is set.

hasCloudArmor()

public abstract boolean hasCloudArmor()

Fields related to Cloud Armor findings.

.google.cloud.securitycenter.v1.CloudArmor cloud_armor = 59;

Returns
Type Description
boolean

Whether the cloudArmor field is set.

hasCloudDlpDataProfile()

public abstract boolean hasCloudDlpDataProfile()

Cloud DLP data profile that is associated with the finding.

.google.cloud.securitycenter.v1.CloudDlpDataProfile cloud_dlp_data_profile = 49;

Returns
Type Description
boolean

Whether the cloudDlpDataProfile field is set.

hasCloudDlpInspection()

public abstract boolean hasCloudDlpInspection()

Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.

.google.cloud.securitycenter.v1.CloudDlpInspection cloud_dlp_inspection = 48;

Returns
Type Description
boolean

Whether the cloudDlpInspection field is set.

hasCreateTime()

public abstract boolean hasCreateTime()

The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 10;

Returns
Type Description
boolean

Whether the createTime field is set.

hasDatabase()

public abstract boolean hasDatabase()

Database associated with the finding.

.google.cloud.securitycenter.v1.Database database = 44;

Returns
Type Description
boolean

Whether the database field is set.

hasEventTime()

public abstract boolean hasEventTime()

The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 9;

Returns
Type Description
boolean

Whether the eventTime field is set.

hasExfiltration()

public abstract boolean hasExfiltration()

Represents exfiltrations associated with the finding.

.google.cloud.securitycenter.v1.Exfiltration exfiltration = 38;

Returns
Type Description
boolean

Whether the exfiltration field is set.

hasIndicator()

public abstract boolean hasIndicator()

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise.

.google.cloud.securitycenter.v1.Indicator indicator = 18;

Returns
Type Description
boolean

Whether the indicator field is set.

hasKernelRootkit()

public abstract boolean hasKernelRootkit()

Signature of the kernel rootkit.

.google.cloud.securitycenter.v1.KernelRootkit kernel_rootkit = 50;

Returns
Type Description
boolean

Whether the kernelRootkit field is set.

hasKubernetes()

public abstract boolean hasKubernetes()

Kubernetes resources associated with the finding.

.google.cloud.securitycenter.v1.Kubernetes kubernetes = 43;

Returns
Type Description
boolean

Whether the kubernetes field is set.

hasMitreAttack()

public abstract boolean hasMitreAttack()

MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org

.google.cloud.securitycenter.v1.MitreAttack mitre_attack = 25;

Returns
Type Description
boolean

Whether the mitreAttack field is set.

hasMuteUpdateTime()

public abstract boolean hasMuteUpdateTime()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 21 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
boolean

Whether the muteUpdateTime field is set.

hasNotebook()

public abstract boolean hasNotebook()

Notebook associated with the finding.

.google.cloud.securitycenter.v1.Notebook notebook = 63;

Returns
Type Description
boolean

Whether the notebook field is set.

hasSecurityMarks()

public abstract boolean hasSecurityMarks()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v1.SecurityMarks security_marks = 8 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
boolean

Whether the securityMarks field is set.

hasSecurityPosture()

public abstract boolean hasSecurityPosture()

The security posture associated with the finding.

.google.cloud.securitycenter.v1.SecurityPosture security_posture = 56;

Returns
Type Description
boolean

Whether the securityPosture field is set.

hasToxicCombination()

public abstract boolean hasToxicCombination()

Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.

.google.cloud.securitycenter.v1.ToxicCombination toxic_combination = 64;

Returns
Type Description
boolean

Whether the toxicCombination field is set.

hasVulnerability()

public abstract boolean hasVulnerability()

Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v1.Vulnerability vulnerability = 20;

Returns
Type Description
boolean

Whether the vulnerability field is set.