1 /* 2 * Copyright 2020 Google LLC 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * https://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 // Generated by the protocol buffer compiler. DO NOT EDIT! 17 // source: google/cloud/securitycenter/v1/kernel_rootkit.proto 18 19 package com.google.cloud.securitycenter.v1; 20 21 public interface KernelRootkitOrBuilder 22 extends 23 // @@protoc_insertion_point(interface_extends:google.cloud.securitycenter.v1.KernelRootkit) 24 com.google.protobuf.MessageOrBuilder { 25 26 /** 27 * 28 * 29 * <pre> 30 * Rootkit name when available. 31 * </pre> 32 * 33 * <code>string name = 1;</code> 34 * 35 * @return The name. 36 */ getName()37 java.lang.String getName(); 38 /** 39 * 40 * 41 * <pre> 42 * Rootkit name when available. 43 * </pre> 44 * 45 * <code>string name = 1;</code> 46 * 47 * @return The bytes for name. 48 */ getNameBytes()49 com.google.protobuf.ByteString getNameBytes(); 50 51 /** 52 * 53 * 54 * <pre> 55 * True when unexpected modifications of kernel code memory are present. 56 * </pre> 57 * 58 * <code>bool unexpected_code_modification = 2;</code> 59 * 60 * @return The unexpectedCodeModification. 61 */ getUnexpectedCodeModification()62 boolean getUnexpectedCodeModification(); 63 64 /** 65 * 66 * 67 * <pre> 68 * True when unexpected modifications of kernel read-only data memory are 69 * present. 70 * </pre> 71 * 72 * <code>bool unexpected_read_only_data_modification = 3;</code> 73 * 74 * @return The unexpectedReadOnlyDataModification. 75 */ getUnexpectedReadOnlyDataModification()76 boolean getUnexpectedReadOnlyDataModification(); 77 78 /** 79 * 80 * 81 * <pre> 82 * True when `ftrace` points are present with callbacks pointing to regions 83 * that are not in the expected kernel or module code range. 84 * </pre> 85 * 86 * <code>bool unexpected_ftrace_handler = 4;</code> 87 * 88 * @return The unexpectedFtraceHandler. 89 */ getUnexpectedFtraceHandler()90 boolean getUnexpectedFtraceHandler(); 91 92 /** 93 * 94 * 95 * <pre> 96 * True when `kprobe` points are present with callbacks pointing to regions 97 * that are not in the expected kernel or module code range. 98 * </pre> 99 * 100 * <code>bool unexpected_kprobe_handler = 5;</code> 101 * 102 * @return The unexpectedKprobeHandler. 103 */ getUnexpectedKprobeHandler()104 boolean getUnexpectedKprobeHandler(); 105 106 /** 107 * 108 * 109 * <pre> 110 * True when kernel code pages that are not in the expected kernel or module 111 * code regions are present. 112 * </pre> 113 * 114 * <code>bool unexpected_kernel_code_pages = 6;</code> 115 * 116 * @return The unexpectedKernelCodePages. 117 */ getUnexpectedKernelCodePages()118 boolean getUnexpectedKernelCodePages(); 119 120 /** 121 * 122 * 123 * <pre> 124 * True when system call handlers that are are not in the expected kernel or 125 * module code regions are present. 126 * </pre> 127 * 128 * <code>bool unexpected_system_call_handler = 7;</code> 129 * 130 * @return The unexpectedSystemCallHandler. 131 */ getUnexpectedSystemCallHandler()132 boolean getUnexpectedSystemCallHandler(); 133 134 /** 135 * 136 * 137 * <pre> 138 * True when interrupt handlers that are are not in the expected kernel or 139 * module code regions are present. 140 * </pre> 141 * 142 * <code>bool unexpected_interrupt_handler = 8;</code> 143 * 144 * @return The unexpectedInterruptHandler. 145 */ getUnexpectedInterruptHandler()146 boolean getUnexpectedInterruptHandler(); 147 148 /** 149 * 150 * 151 * <pre> 152 * True when unexpected processes in the scheduler run queue are present. Such 153 * processes are in the run queue, but not in the process task list. 154 * </pre> 155 * 156 * <code>bool unexpected_processes_in_runqueue = 9;</code> 157 * 158 * @return The unexpectedProcessesInRunqueue. 159 */ getUnexpectedProcessesInRunqueue()160 boolean getUnexpectedProcessesInRunqueue(); 161 } 162