Struct ProcessDetails 

#[non_exhaustive]
pub struct ProcessDetails {

    pub name: Option<String>,
    pub executable_path: Option<String>,
    pub executable_sha256: Option<String>,
    pub namespace_pid: Option<i32>,
    pub pwd: Option<String>,
    pub pid: Option<i32>,
    pub start_time: Option<DateTime>,
    pub uuid: Option<String>,
    pub parent_uuid: Option<String>,
    pub user: Option<String>,
    pub user_id: Option<i32>,
    pub euid: Option<i32>,
    pub lineage: Option<Vec<LineageObject>>,
}

Information about the observed process.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

name: Option<String>

The name of the process.

executable_path: Option<String>

The absolute path of the process executable file.

executable_sha256: Option<String>

The SHA256 hash of the process executable.

namespace_pid: Option<i32>

The ID of the child process.

pwd: Option<String>

The present working directory of the process.

pid: Option<i32>

The ID of the process.

start_time: Option<DateTime>

The time when the process started. This is in UTC format.

uuid: Option<String>

The unique ID assigned to the process by GuardDuty.

parent_uuid: Option<String>

The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.

user: Option<String>

The user that executed the process.

user_id: Option<i32>

The unique ID of the user that executed the process.

euid: Option<i32>

The effective user ID of the user that executed the process.

lineage: Option<Vec<LineageObject>>

Information about the process's lineage.

Implementations

impl ProcessDetails

pub fn name(&self) -> Option<&str>

The name of the process.

pub fn executable_path(&self) -> Option<&str>

The absolute path of the process executable file.

pub fn executable_sha256(&self) -> Option<&str>

The SHA256 hash of the process executable.

pub fn namespace_pid(&self) -> Option<i32>

The ID of the child process.

pub fn pwd(&self) -> Option<&str>

The present working directory of the process.

pub fn pid(&self) -> Option<i32>

The ID of the process.

pub fn start_time(&self) -> Option<&DateTime>

The time when the process started. This is in UTC format.

pub fn uuid(&self) -> Option<&str>

The unique ID assigned to the process by GuardDuty.

pub fn parent_uuid(&self) -> Option<&str>

The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.

pub fn user(&self) -> Option<&str>

The user that executed the process.

pub fn user_id(&self) -> Option<i32>

The unique ID of the user that executed the process.

pub fn euid(&self) -> Option<i32>

The effective user ID of the user that executed the process.

pub fn lineage(&self) -> &[LineageObject]

Information about the process's lineage.

If no value was sent for this field, a default will be set. If you want to determine if no value was sent, use .lineage.is_none().

impl ProcessDetails

pub fn builder() -> ProcessDetailsBuilder

Creates a new builder-style object to manufacture ProcessDetails.

Trait Implementations

impl Clone for ProcessDetails

fn clone(&self) -> ProcessDetails

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessDetails

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ProcessDetails

fn eq(&self, other: &ProcessDetails) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ProcessDetails