Reference documentation and code samples for the Chronicle V1 API class Google::Backstory::Extensions.
Extensions to a UDM event.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#auth
def auth() -> ::Google::Backstory::Authentication
Returns
- (::Google::Backstory::Authentication) — An authentication extension.
#auth=
def auth=(value) -> ::Google::Backstory::Authentication
Parameter
- value (::Google::Backstory::Authentication) — An authentication extension.
Returns
- (::Google::Backstory::Authentication) — An authentication extension.
#entity_risk
def entity_risk() -> ::Google::Backstory::EntityRisk
Returns
- (::Google::Backstory::EntityRisk) — An entity risk change extension.
#entity_risk=
def entity_risk=(value) -> ::Google::Backstory::EntityRisk
Parameter
- value (::Google::Backstory::EntityRisk) — An entity risk change extension.
Returns
- (::Google::Backstory::EntityRisk) — An entity risk change extension.
#linux_utmp
def linux_utmp() -> ::Google::Backstory::LinuxUtmp
Returns
- (::Google::Backstory::LinuxUtmp) — A Linux Utmp extension. This captures details specific to Linux Utmp events, which record login and logout sessions on a Linux system.
#linux_utmp=
def linux_utmp=(value) -> ::Google::Backstory::LinuxUtmp
Parameter
- value (::Google::Backstory::LinuxUtmp) — A Linux Utmp extension. This captures details specific to Linux Utmp events, which record login and logout sessions on a Linux system.
Returns
- (::Google::Backstory::LinuxUtmp) — A Linux Utmp extension. This captures details specific to Linux Utmp events, which record login and logout sessions on a Linux system.
#outlook_metadata
def outlook_metadata() -> ::Google::Backstory::OutlookMetadata
Returns
- (::Google::Backstory::OutlookMetadata) — A Microsoft Outlook specific metadata extension. This includes metadata related to Outlook items, such as comments, templates, and security flags.
#outlook_metadata=
def outlook_metadata=(value) -> ::Google::Backstory::OutlookMetadata
Parameter
- value (::Google::Backstory::OutlookMetadata) — A Microsoft Outlook specific metadata extension. This includes metadata related to Outlook items, such as comments, templates, and security flags.
Returns
- (::Google::Backstory::OutlookMetadata) — A Microsoft Outlook specific metadata extension. This includes metadata related to Outlook items, such as comments, templates, and security flags.
#resource_usage
def resource_usage() -> ::Google::Backstory::ResourceUsage
Returns
- (::Google::Backstory::ResourceUsage) — A resource usage extension. This captures details about what entity (e.g., process, user) is using a specific resource.
#resource_usage=
def resource_usage=(value) -> ::Google::Backstory::ResourceUsage
Parameter
- value (::Google::Backstory::ResourceUsage) — A resource usage extension. This captures details about what entity (e.g., process, user) is using a specific resource.
Returns
- (::Google::Backstory::ResourceUsage) — A resource usage extension. This captures details about what entity (e.g., process, user) is using a specific resource.
#srum
def srum() -> ::Google::Backstory::Srum
Returns
- (::Google::Backstory::Srum) — A SRUM extension. This captures details specific to Windows System Resource Usage Monitor (SRUM) events, providing insights into application resource consumption.
#srum=
def srum=(value) -> ::Google::Backstory::Srum
Parameter
- value (::Google::Backstory::Srum) — A SRUM extension. This captures details specific to Windows System Resource Usage Monitor (SRUM) events, providing insights into application resource consumption.
Returns
- (::Google::Backstory::Srum) — A SRUM extension. This captures details specific to Windows System Resource Usage Monitor (SRUM) events, providing insights into application resource consumption.
#system_event_details
def system_event_details() -> ::Google::Backstory::SystemEventDetails
Returns
- (::Google::Backstory::SystemEventDetails) — A system event details extension. This captures additional details for system-level events, such as message type, sender image ID, and subsystem.
#system_event_details=
def system_event_details=(value) -> ::Google::Backstory::SystemEventDetails
Parameter
- value (::Google::Backstory::SystemEventDetails) — A system event details extension. This captures additional details for system-level events, such as message type, sender image ID, and subsystem.
Returns
- (::Google::Backstory::SystemEventDetails) — A system event details extension. This captures additional details for system-level events, such as message type, sender image ID, and subsystem.
#user_assist
def user_assist() -> ::Google::Backstory::UserAssist
Returns
- (::Google::Backstory::UserAssist) — A UserAssist extension. This captures details specific to Windows User Assist events, which track application usage and execution.
#user_assist=
def user_assist=(value) -> ::Google::Backstory::UserAssist
Parameter
- value (::Google::Backstory::UserAssist) — A UserAssist extension. This captures details specific to Windows User Assist events, which track application usage and execution.
Returns
- (::Google::Backstory::UserAssist) — A UserAssist extension. This captures details specific to Windows User Assist events, which track application usage and execution.
#vulns
def vulns() -> ::Google::Backstory::Vulnerabilities
Returns
- (::Google::Backstory::Vulnerabilities) — A vulnerability extension.
#vulns=
def vulns=(value) -> ::Google::Backstory::Vulnerabilities
Parameter
- value (::Google::Backstory::Vulnerabilities) — A vulnerability extension.
Returns
- (::Google::Backstory::Vulnerabilities) — A vulnerability extension.
#windows_event_log
def windows_event_log() -> ::Google::Backstory::WindowsEventLog
Returns
- (::Google::Backstory::WindowsEventLog) — A Windows Event Log extension. This captures details specific to Windows Event Log events, providing structured information from various Windows logs.
#windows_event_log=
def windows_event_log=(value) -> ::Google::Backstory::WindowsEventLog
Parameter
- value (::Google::Backstory::WindowsEventLog) — A Windows Event Log extension. This captures details specific to Windows Event Log events, providing structured information from various Windows logs.
Returns
- (::Google::Backstory::WindowsEventLog) — A Windows Event Log extension. This captures details specific to Windows Event Log events, providing structured information from various Windows logs.