Class Finding (2.53.0)

public final class Finding extends GeneratedMessageV3 implements FindingOrBuilder

Security Command Center finding.

A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.

Protobuf type google.cloud.securitycenter.v2.Finding

Implements

FindingOrBuilder

Static Fields

ACCESS_FIELD_NUMBER

public static final int ACCESS_FIELD_NUMBER
Field Value
Type Description
int

APPLICATION_FIELD_NUMBER

public static final int APPLICATION_FIELD_NUMBER
Field Value
Type Description
int

ATTACK_EXPOSURE_FIELD_NUMBER

public static final int ATTACK_EXPOSURE_FIELD_NUMBER
Field Value
Type Description
int

BACKUP_DISASTER_RECOVERY_FIELD_NUMBER

public static final int BACKUP_DISASTER_RECOVERY_FIELD_NUMBER
Field Value
Type Description
int

CANONICAL_NAME_FIELD_NUMBER

public static final int CANONICAL_NAME_FIELD_NUMBER
Field Value
Type Description
int

CATEGORY_FIELD_NUMBER

public static final int CATEGORY_FIELD_NUMBER
Field Value
Type Description
int

CLOUD_DLP_DATA_PROFILE_FIELD_NUMBER

public static final int CLOUD_DLP_DATA_PROFILE_FIELD_NUMBER
Field Value
Type Description
int

CLOUD_DLP_INSPECTION_FIELD_NUMBER

public static final int CLOUD_DLP_INSPECTION_FIELD_NUMBER
Field Value
Type Description
int

COMPLIANCES_FIELD_NUMBER

public static final int COMPLIANCES_FIELD_NUMBER
Field Value
Type Description
int

CONNECTIONS_FIELD_NUMBER

public static final int CONNECTIONS_FIELD_NUMBER
Field Value
Type Description
int

CONTACTS_FIELD_NUMBER

public static final int CONTACTS_FIELD_NUMBER
Field Value
Type Description
int

CONTAINERS_FIELD_NUMBER

public static final int CONTAINERS_FIELD_NUMBER
Field Value
Type Description
int

CREATE_TIME_FIELD_NUMBER

public static final int CREATE_TIME_FIELD_NUMBER
Field Value
Type Description
int

DATABASE_FIELD_NUMBER

public static final int DATABASE_FIELD_NUMBER
Field Value
Type Description
int

DESCRIPTION_FIELD_NUMBER

public static final int DESCRIPTION_FIELD_NUMBER
Field Value
Type Description
int

EVENT_TIME_FIELD_NUMBER

public static final int EVENT_TIME_FIELD_NUMBER
Field Value
Type Description
int

EXFILTRATION_FIELD_NUMBER

public static final int EXFILTRATION_FIELD_NUMBER
Field Value
Type Description
int

EXTERNAL_SYSTEMS_FIELD_NUMBER

public static final int EXTERNAL_SYSTEMS_FIELD_NUMBER
Field Value
Type Description
int

EXTERNAL_URI_FIELD_NUMBER

public static final int EXTERNAL_URI_FIELD_NUMBER
Field Value
Type Description
int

FILES_FIELD_NUMBER

public static final int FILES_FIELD_NUMBER
Field Value
Type Description
int

FINDING_CLASS_FIELD_NUMBER

public static final int FINDING_CLASS_FIELD_NUMBER
Field Value
Type Description
int

IAM_BINDINGS_FIELD_NUMBER

public static final int IAM_BINDINGS_FIELD_NUMBER
Field Value
Type Description
int

INDICATOR_FIELD_NUMBER

public static final int INDICATOR_FIELD_NUMBER
Field Value
Type Description
int

KERNEL_ROOTKIT_FIELD_NUMBER

public static final int KERNEL_ROOTKIT_FIELD_NUMBER
Field Value
Type Description
int

KUBERNETES_FIELD_NUMBER

public static final int KUBERNETES_FIELD_NUMBER
Field Value
Type Description
int

LOAD_BALANCERS_FIELD_NUMBER

public static final int LOAD_BALANCERS_FIELD_NUMBER
Field Value
Type Description
int

LOG_ENTRIES_FIELD_NUMBER

public static final int LOG_ENTRIES_FIELD_NUMBER
Field Value
Type Description
int

MITRE_ATTACK_FIELD_NUMBER

public static final int MITRE_ATTACK_FIELD_NUMBER
Field Value
Type Description
int

MODULE_NAME_FIELD_NUMBER

public static final int MODULE_NAME_FIELD_NUMBER
Field Value
Type Description
int

MUTE_FIELD_NUMBER

public static final int MUTE_FIELD_NUMBER
Field Value
Type Description
int

MUTE_INITIATOR_FIELD_NUMBER

public static final int MUTE_INITIATOR_FIELD_NUMBER
Field Value
Type Description
int

MUTE_UPDATE_TIME_FIELD_NUMBER

public static final int MUTE_UPDATE_TIME_FIELD_NUMBER
Field Value
Type Description
int

NAME_FIELD_NUMBER

public static final int NAME_FIELD_NUMBER
Field Value
Type Description
int

NEXT_STEPS_FIELD_NUMBER

public static final int NEXT_STEPS_FIELD_NUMBER
Field Value
Type Description
int

ORG_POLICIES_FIELD_NUMBER

public static final int ORG_POLICIES_FIELD_NUMBER
Field Value
Type Description
int

PARENT_DISPLAY_NAME_FIELD_NUMBER

public static final int PARENT_DISPLAY_NAME_FIELD_NUMBER
Field Value
Type Description
int

PARENT_FIELD_NUMBER

public static final int PARENT_FIELD_NUMBER
Field Value
Type Description
int

PROCESSES_FIELD_NUMBER

public static final int PROCESSES_FIELD_NUMBER
Field Value
Type Description
int

RESOURCE_NAME_FIELD_NUMBER

public static final int RESOURCE_NAME_FIELD_NUMBER
Field Value
Type Description
int

SECURITY_MARKS_FIELD_NUMBER

public static final int SECURITY_MARKS_FIELD_NUMBER
Field Value
Type Description
int

SECURITY_POSTURE_FIELD_NUMBER

public static final int SECURITY_POSTURE_FIELD_NUMBER
Field Value
Type Description
int

SEVERITY_FIELD_NUMBER

public static final int SEVERITY_FIELD_NUMBER
Field Value
Type Description
int

SOURCE_PROPERTIES_FIELD_NUMBER

public static final int SOURCE_PROPERTIES_FIELD_NUMBER
Field Value
Type Description
int

STATE_FIELD_NUMBER

public static final int STATE_FIELD_NUMBER
Field Value
Type Description
int

VULNERABILITY_FIELD_NUMBER

public static final int VULNERABILITY_FIELD_NUMBER
Field Value
Type Description
int

Static Methods

getDefaultInstance()

public static Finding getDefaultInstance()
Returns
Type Description
Finding

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()
Returns
Type Description
Descriptor

newBuilder()

public static Finding.Builder newBuilder()
Returns
Type Description
Finding.Builder

newBuilder(Finding prototype)

public static Finding.Builder newBuilder(Finding prototype)
Parameter
Name Description
prototype Finding
Returns
Type Description
Finding.Builder

parseDelimitedFrom(InputStream input)

public static Finding parseDelimitedFrom(InputStream input)
Parameter
Name Description
input InputStream
Returns
Type Description
Finding
Exceptions
Type Description
IOException

parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static Finding parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input InputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Finding
Exceptions
Type Description
IOException

parseFrom(byte[] data)

public static Finding parseFrom(byte[] data)
Parameter
Name Description
data byte[]
Returns
Type Description
Finding
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

public static Finding parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data byte[]
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Finding
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteString data)

public static Finding parseFrom(ByteString data)
Parameter
Name Description
data ByteString
Returns
Type Description
Finding
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

public static Finding parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data ByteString
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Finding
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(CodedInputStream input)

public static Finding parseFrom(CodedInputStream input)
Parameter
Name Description
input CodedInputStream
Returns
Type Description
Finding
Exceptions
Type Description
IOException

parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public static Finding parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input CodedInputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Finding
Exceptions
Type Description
IOException

parseFrom(InputStream input)

public static Finding parseFrom(InputStream input)
Parameter
Name Description
input InputStream
Returns
Type Description
Finding
Exceptions
Type Description
IOException

parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static Finding parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input InputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Finding
Exceptions
Type Description
IOException

parseFrom(ByteBuffer data)

public static Finding parseFrom(ByteBuffer data)
Parameter
Name Description
data ByteBuffer
Returns
Type Description
Finding
Exceptions
Type Description
InvalidProtocolBufferException

parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

public static Finding parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
data ByteBuffer
extensionRegistry ExtensionRegistryLite
Returns
Type Description
Finding
Exceptions
Type Description
InvalidProtocolBufferException

parser()

public static Parser<Finding> parser()
Returns
Type Description
Parser<Finding>

Methods

containsContacts(String key)

public boolean containsContacts(String key)

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v2.ContactDetails> contacts = 26 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
boolean

containsExternalSystems(String key)

public boolean containsExternalSystems(String key)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v2.ExternalSystem> external_systems = 20 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
boolean

containsSourceProperties(String key)

public boolean containsSourceProperties(String key)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 9;

Parameter
Name Description
key String
Returns
Type Description
boolean

equals(Object obj)

public boolean equals(Object obj)
Parameter
Name Description
obj Object
Returns
Type Description
boolean
Overrides

getAccess()

public Access getAccess()

Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.

.google.cloud.securitycenter.v2.Access access = 22;

Returns
Type Description
Access

The access.

getAccessOrBuilder()

public AccessOrBuilder getAccessOrBuilder()

Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.

.google.cloud.securitycenter.v2.Access access = 22;

Returns
Type Description
AccessOrBuilder

getApplication()

public Application getApplication()

Represents an application associated with the finding.

.google.cloud.securitycenter.v2.Application application = 45;

Returns
Type Description
Application

The application.

getApplicationOrBuilder()

public ApplicationOrBuilder getApplicationOrBuilder()

Represents an application associated with the finding.

.google.cloud.securitycenter.v2.Application application = 45;

Returns
Type Description
ApplicationOrBuilder

getAttackExposure()

public AttackExposure getAttackExposure()

The results of an attack path simulation relevant to this finding.

.google.cloud.securitycenter.v2.AttackExposure attack_exposure = 38;

Returns
Type Description
AttackExposure

The attackExposure.

getAttackExposureOrBuilder()

public AttackExposureOrBuilder getAttackExposureOrBuilder()

The results of an attack path simulation relevant to this finding.

.google.cloud.securitycenter.v2.AttackExposure attack_exposure = 38;

Returns
Type Description
AttackExposureOrBuilder

getBackupDisasterRecovery()

public BackupDisasterRecovery getBackupDisasterRecovery()

Fields related to Backup and DR findings.

.google.cloud.securitycenter.v2.BackupDisasterRecovery backup_disaster_recovery = 47;

Returns
Type Description
BackupDisasterRecovery

The backupDisasterRecovery.

getBackupDisasterRecoveryOrBuilder()

public BackupDisasterRecoveryOrBuilder getBackupDisasterRecoveryOrBuilder()

Fields related to Backup and DR findings.

.google.cloud.securitycenter.v2.BackupDisasterRecovery backup_disaster_recovery = 47;

Returns
Type Description
BackupDisasterRecoveryOrBuilder

getCanonicalName()

public String getCanonicalName()

Output only. The canonical name of the finding. The following list shows some examples:

+ organizations/{organization_id}/sources/{source_id}/findings/{finding_id} + organizations/{organization_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

  • folders/{folder_id}/sources/{source_id}/findings/{finding_id} + folders/{folder_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}
  • projects/{project_id}/sources/{source_id}/findings/{finding_id} + projects/{project_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

    The prefix is the closest CRM ancestor of the resource associated with the finding.

string canonical_name = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
String

The canonicalName.

getCanonicalNameBytes()

public ByteString getCanonicalNameBytes()

Output only. The canonical name of the finding. The following list shows some examples:

+ organizations/{organization_id}/sources/{source_id}/findings/{finding_id} + organizations/{organization_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

  • folders/{folder_id}/sources/{source_id}/findings/{finding_id} + folders/{folder_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}
  • projects/{project_id}/sources/{source_id}/findings/{finding_id} + projects/{project_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

    The prefix is the closest CRM ancestor of the resource associated with the finding.

string canonical_name = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
ByteString

The bytes for canonicalName.

getCategory()

public String getCategory()

Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION"

string category = 7 [(.google.api.field_behavior) = IMMUTABLE];

Returns
Type Description
String

The category.

getCategoryBytes()

public ByteString getCategoryBytes()

Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION"

string category = 7 [(.google.api.field_behavior) = IMMUTABLE];

Returns
Type Description
ByteString

The bytes for category.

getCloudDlpDataProfile()

public CloudDlpDataProfile getCloudDlpDataProfile()

Cloud DLP data profile that is associated with the finding.

.google.cloud.securitycenter.v2.CloudDlpDataProfile cloud_dlp_data_profile = 41;

Returns
Type Description
CloudDlpDataProfile

The cloudDlpDataProfile.

getCloudDlpDataProfileOrBuilder()

public CloudDlpDataProfileOrBuilder getCloudDlpDataProfileOrBuilder()

Cloud DLP data profile that is associated with the finding.

.google.cloud.securitycenter.v2.CloudDlpDataProfile cloud_dlp_data_profile = 41;

Returns
Type Description
CloudDlpDataProfileOrBuilder

getCloudDlpInspection()

public CloudDlpInspection getCloudDlpInspection()

Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.

.google.cloud.securitycenter.v2.CloudDlpInspection cloud_dlp_inspection = 40;

Returns
Type Description
CloudDlpInspection

The cloudDlpInspection.

getCloudDlpInspectionOrBuilder()

public CloudDlpInspectionOrBuilder getCloudDlpInspectionOrBuilder()

Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.

.google.cloud.securitycenter.v2.CloudDlpInspection cloud_dlp_inspection = 40;

Returns
Type Description
CloudDlpInspectionOrBuilder

getCompliances(int index)

public Compliance getCompliances(int index)

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v2.Compliance compliances = 27;

Parameter
Name Description
index int
Returns
Type Description
Compliance

getCompliancesCount()

public int getCompliancesCount()

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v2.Compliance compliances = 27;

Returns
Type Description
int

getCompliancesList()

public List<Compliance> getCompliancesList()

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v2.Compliance compliances = 27;

Returns
Type Description
List<Compliance>

getCompliancesOrBuilder(int index)

public ComplianceOrBuilder getCompliancesOrBuilder(int index)

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v2.Compliance compliances = 27;

Parameter
Name Description
index int
Returns
Type Description
ComplianceOrBuilder

getCompliancesOrBuilderList()

public List<? extends ComplianceOrBuilder> getCompliancesOrBuilderList()

Contains compliance information for security standards associated to the finding.

repeated .google.cloud.securitycenter.v2.Compliance compliances = 27;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.ComplianceOrBuilder>

getConnections(int index)

public Connection getConnections(int index)

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v2.Connection connections = 23;

Parameter
Name Description
index int
Returns
Type Description
Connection

getConnectionsCount()

public int getConnectionsCount()

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v2.Connection connections = 23;

Returns
Type Description
int

getConnectionsList()

public List<Connection> getConnectionsList()

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v2.Connection connections = 23;

Returns
Type Description
List<Connection>

getConnectionsOrBuilder(int index)

public ConnectionOrBuilder getConnectionsOrBuilder(int index)

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v2.Connection connections = 23;

Parameter
Name Description
index int
Returns
Type Description
ConnectionOrBuilder

getConnectionsOrBuilderList()

public List<? extends ConnectionOrBuilder> getConnectionsOrBuilderList()

Contains information about the IP connection associated with the finding.

repeated .google.cloud.securitycenter.v2.Connection connections = 23;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.ConnectionOrBuilder>

getContacts() (deprecated)

public Map<String,ContactDetails> getContacts()

Use #getContactsMap() instead.

Returns
Type Description
Map<String,ContactDetails>

getContactsCount()

public int getContactsCount()

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v2.ContactDetails> contacts = 26 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
int

getContactsMap()

public Map<String,ContactDetails> getContactsMap()

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v2.ContactDetails> contacts = 26 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Map<String,ContactDetails>

getContactsOrDefault(String key, ContactDetails defaultValue)

public ContactDetails getContactsOrDefault(String key, ContactDetails defaultValue)

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v2.ContactDetails> contacts = 26 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameters
Name Description
key String
defaultValue ContactDetails
Returns
Type Description
ContactDetails

getContactsOrThrow(String key)

public ContactDetails getContactsOrThrow(String key)

Output only. Map containing the points of contact for the given finding. The key represents the type of contact, while the value contains a list of all the contacts that pertain. Please refer to: https://cloud.google.com/resource-manager/docs/managing-notification-contacts#notification-categories

 {
   "security": {
     "contacts": [
       {
         "email": "person1&#64;company.com"
       },
       {
         "email": "person2&#64;company.com"
       }
     ]
   }
 }

map<string, .google.cloud.securitycenter.v2.ContactDetails> contacts = 26 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
ContactDetails

getContainers(int index)

public Container getContainers(int index)

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v2.Container containers = 35;

Parameter
Name Description
index int
Returns
Type Description
Container

getContainersCount()

public int getContainersCount()

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v2.Container containers = 35;

Returns
Type Description
int

getContainersList()

public List<Container> getContainersList()

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v2.Container containers = 35;

Returns
Type Description
List<Container>

getContainersOrBuilder(int index)

public ContainerOrBuilder getContainersOrBuilder(int index)

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v2.Container containers = 35;

Parameter
Name Description
index int
Returns
Type Description
ContainerOrBuilder

getContainersOrBuilderList()

public List<? extends ContainerOrBuilder> getContainersOrBuilderList()

Containers associated with the finding. This field provides information for both Kubernetes and non-Kubernetes containers.

repeated .google.cloud.securitycenter.v2.Container containers = 35;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.ContainerOrBuilder>

getCreateTime()

public Timestamp getCreateTime()

Output only. The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 12 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Timestamp

The createTime.

getCreateTimeOrBuilder()

public TimestampOrBuilder getCreateTimeOrBuilder()

Output only. The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 12 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
TimestampOrBuilder

getDatabase()

public Database getDatabase()

Database associated with the finding.

.google.cloud.securitycenter.v2.Database database = 37;

Returns
Type Description
Database

The database.

getDatabaseOrBuilder()

public DatabaseOrBuilder getDatabaseOrBuilder()

Database associated with the finding.

.google.cloud.securitycenter.v2.Database database = 37;

Returns
Type Description
DatabaseOrBuilder

getDefaultInstanceForType()

public Finding getDefaultInstanceForType()
Returns
Type Description
Finding

getDescription()

public String getDescription()

Contains more details about the finding.

string description = 30;

Returns
Type Description
String

The description.

getDescriptionBytes()

public ByteString getDescriptionBytes()

Contains more details about the finding.

string description = 30;

Returns
Type Description
ByteString

The bytes for description.

getEventTime()

public Timestamp getEventTime()

The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 11;

Returns
Type Description
Timestamp

The eventTime.

getEventTimeOrBuilder()

public TimestampOrBuilder getEventTimeOrBuilder()

The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 11;

Returns
Type Description
TimestampOrBuilder

getExfiltration()

public Exfiltration getExfiltration()

Represents exfiltrations associated with the finding.

.google.cloud.securitycenter.v2.Exfiltration exfiltration = 31;

Returns
Type Description
Exfiltration

The exfiltration.

getExfiltrationOrBuilder()

public ExfiltrationOrBuilder getExfiltrationOrBuilder()

Represents exfiltrations associated with the finding.

.google.cloud.securitycenter.v2.Exfiltration exfiltration = 31;

Returns
Type Description
ExfiltrationOrBuilder

getExternalSystems() (deprecated)

public Map<String,ExternalSystem> getExternalSystems()
Returns
Type Description
Map<String,ExternalSystem>

getExternalSystemsCount()

public int getExternalSystemsCount()

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v2.ExternalSystem> external_systems = 20 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
int

getExternalSystemsMap()

public Map<String,ExternalSystem> getExternalSystemsMap()

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v2.ExternalSystem> external_systems = 20 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Map<String,ExternalSystem>

getExternalSystemsOrDefault(String key, ExternalSystem defaultValue)

public ExternalSystem getExternalSystemsOrDefault(String key, ExternalSystem defaultValue)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v2.ExternalSystem> external_systems = 20 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameters
Name Description
key String
defaultValue ExternalSystem
Returns
Type Description
ExternalSystem

getExternalSystemsOrThrow(String key)

public ExternalSystem getExternalSystemsOrThrow(String key)

Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.

map<string, .google.cloud.securitycenter.v2.ExternalSystem> external_systems = 20 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
key String
Returns
Type Description
ExternalSystem

getExternalUri()

public String getExternalUri()

The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.

string external_uri = 8;

Returns
Type Description
String

The externalUri.

getExternalUriBytes()

public ByteString getExternalUriBytes()

The URI that, if available, points to a web page outside of Security Command Center where additional information about the finding can be found. This field is guaranteed to be either empty or a well formed URL.

string external_uri = 8;

Returns
Type Description
ByteString

The bytes for externalUri.

getFiles(int index)

public File getFiles(int index)

File associated with the finding.

repeated .google.cloud.securitycenter.v2.File files = 39;

Parameter
Name Description
index int
Returns
Type Description
File

getFilesCount()

public int getFilesCount()

File associated with the finding.

repeated .google.cloud.securitycenter.v2.File files = 39;

Returns
Type Description
int

getFilesList()

public List<File> getFilesList()

File associated with the finding.

repeated .google.cloud.securitycenter.v2.File files = 39;

Returns
Type Description
List<File>

getFilesOrBuilder(int index)

public FileOrBuilder getFilesOrBuilder(int index)

File associated with the finding.

repeated .google.cloud.securitycenter.v2.File files = 39;

Parameter
Name Description
index int
Returns
Type Description
FileOrBuilder

getFilesOrBuilderList()

public List<? extends FileOrBuilder> getFilesOrBuilderList()

File associated with the finding.

repeated .google.cloud.securitycenter.v2.File files = 39;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.FileOrBuilder>

getFindingClass()

public Finding.FindingClass getFindingClass()

The class of the finding.

.google.cloud.securitycenter.v2.Finding.FindingClass finding_class = 16;

Returns
Type Description
Finding.FindingClass

The findingClass.

getFindingClassValue()

public int getFindingClassValue()

The class of the finding.

.google.cloud.securitycenter.v2.Finding.FindingClass finding_class = 16;

Returns
Type Description
int

The enum numeric value on the wire for findingClass.

getIamBindings(int index)

public IamBinding getIamBindings(int index)

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v2.IamBinding iam_bindings = 32;

Parameter
Name Description
index int
Returns
Type Description
IamBinding

getIamBindingsCount()

public int getIamBindingsCount()

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v2.IamBinding iam_bindings = 32;

Returns
Type Description
int

getIamBindingsList()

public List<IamBinding> getIamBindingsList()

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v2.IamBinding iam_bindings = 32;

Returns
Type Description
List<IamBinding>

getIamBindingsOrBuilder(int index)

public IamBindingOrBuilder getIamBindingsOrBuilder(int index)

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v2.IamBinding iam_bindings = 32;

Parameter
Name Description
index int
Returns
Type Description
IamBindingOrBuilder

getIamBindingsOrBuilderList()

public List<? extends IamBindingOrBuilder> getIamBindingsOrBuilderList()

Represents IAM bindings associated with the finding.

repeated .google.cloud.securitycenter.v2.IamBinding iam_bindings = 32;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.IamBindingOrBuilder>

getIndicator()

public Indicator getIndicator()

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise.

.google.cloud.securitycenter.v2.Indicator indicator = 17;

Returns
Type Description
Indicator

The indicator.

getIndicatorOrBuilder()

public IndicatorOrBuilder getIndicatorOrBuilder()

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise.

.google.cloud.securitycenter.v2.Indicator indicator = 17;

Returns
Type Description
IndicatorOrBuilder

getKernelRootkit()

public KernelRootkit getKernelRootkit()

Signature of the kernel rootkit.

.google.cloud.securitycenter.v2.KernelRootkit kernel_rootkit = 42;

Returns
Type Description
KernelRootkit

The kernelRootkit.

getKernelRootkitOrBuilder()

public KernelRootkitOrBuilder getKernelRootkitOrBuilder()

Signature of the kernel rootkit.

.google.cloud.securitycenter.v2.KernelRootkit kernel_rootkit = 42;

Returns
Type Description
KernelRootkitOrBuilder

getKubernetes()

public Kubernetes getKubernetes()

Kubernetes resources associated with the finding.

.google.cloud.securitycenter.v2.Kubernetes kubernetes = 36;

Returns
Type Description
Kubernetes

The kubernetes.

getKubernetesOrBuilder()

public KubernetesOrBuilder getKubernetesOrBuilder()

Kubernetes resources associated with the finding.

.google.cloud.securitycenter.v2.Kubernetes kubernetes = 36;

Returns
Type Description
KubernetesOrBuilder

getLoadBalancers(int index)

public LoadBalancer getLoadBalancers(int index)

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v2.LoadBalancer load_balancers = 50;

Parameter
Name Description
index int
Returns
Type Description
LoadBalancer

getLoadBalancersCount()

public int getLoadBalancersCount()

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v2.LoadBalancer load_balancers = 50;

Returns
Type Description
int

getLoadBalancersList()

public List<LoadBalancer> getLoadBalancersList()

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v2.LoadBalancer load_balancers = 50;

Returns
Type Description
List<LoadBalancer>

getLoadBalancersOrBuilder(int index)

public LoadBalancerOrBuilder getLoadBalancersOrBuilder(int index)

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v2.LoadBalancer load_balancers = 50;

Parameter
Name Description
index int
Returns
Type Description
LoadBalancerOrBuilder

getLoadBalancersOrBuilderList()

public List<? extends LoadBalancerOrBuilder> getLoadBalancersOrBuilderList()

The load balancers associated with the finding.

repeated .google.cloud.securitycenter.v2.LoadBalancer load_balancers = 50;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.LoadBalancerOrBuilder>

getLogEntries(int index)

public LogEntry getLogEntries(int index)

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v2.LogEntry log_entries = 49;

Parameter
Name Description
index int
Returns
Type Description
LogEntry

getLogEntriesCount()

public int getLogEntriesCount()

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v2.LogEntry log_entries = 49;

Returns
Type Description
int

getLogEntriesList()

public List<LogEntry> getLogEntriesList()

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v2.LogEntry log_entries = 49;

Returns
Type Description
List<LogEntry>

getLogEntriesOrBuilder(int index)

public LogEntryOrBuilder getLogEntriesOrBuilder(int index)

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v2.LogEntry log_entries = 49;

Parameter
Name Description
index int
Returns
Type Description
LogEntryOrBuilder

getLogEntriesOrBuilderList()

public List<? extends LogEntryOrBuilder> getLogEntriesOrBuilderList()

Log entries that are relevant to the finding.

repeated .google.cloud.securitycenter.v2.LogEntry log_entries = 49;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.LogEntryOrBuilder>

getMitreAttack()

public MitreAttack getMitreAttack()

MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org

.google.cloud.securitycenter.v2.MitreAttack mitre_attack = 21;

Returns
Type Description
MitreAttack

The mitreAttack.

getMitreAttackOrBuilder()

public MitreAttackOrBuilder getMitreAttackOrBuilder()

MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org

.google.cloud.securitycenter.v2.MitreAttack mitre_attack = 21;

Returns
Type Description
MitreAttackOrBuilder

getModuleName()

public String getModuleName()

Unique identifier of the module which generated the finding. Example: folders/598186756061/securityHealthAnalyticsSettings/customModules/56799441161885

string module_name = 34;

Returns
Type Description
String

The moduleName.

getModuleNameBytes()

public ByteString getModuleNameBytes()

Unique identifier of the module which generated the finding. Example: folders/598186756061/securityHealthAnalyticsSettings/customModules/56799441161885

string module_name = 34;

Returns
Type Description
ByteString

The bytes for moduleName.

getMute()

public Finding.Mute getMute()

Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.

.google.cloud.securitycenter.v2.Finding.Mute mute = 15;

Returns
Type Description
Finding.Mute

The mute.

getMuteInitiator()

public String getMuteInitiator()

Records additional information about the mute operation, for example, the mute configuration that muted the finding and the user who muted the finding.

string mute_initiator = 24;

Returns
Type Description
String

The muteInitiator.

getMuteInitiatorBytes()

public ByteString getMuteInitiatorBytes()

Records additional information about the mute operation, for example, the mute configuration that muted the finding and the user who muted the finding.

string mute_initiator = 24;

Returns
Type Description
ByteString

The bytes for muteInitiator.

getMuteUpdateTime()

public Timestamp getMuteUpdateTime()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 19 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Timestamp

The muteUpdateTime.

getMuteUpdateTimeOrBuilder()

public TimestampOrBuilder getMuteUpdateTimeOrBuilder()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 19 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
TimestampOrBuilder

getMuteValue()

public int getMuteValue()

Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.

.google.cloud.securitycenter.v2.Finding.Mute mute = 15;

Returns
Type Description
int

The enum numeric value on the wire for mute.

getName()

public String getName()

The relative resource name of the finding. The following list shows some examples:

+ organizations/{organization_id}/sources/{source_id}/findings/{finding_id} + organizations/{organization_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

  • folders/{folder_id}/sources/{source_id}/findings/{finding_id} + folders/{folder_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}
  • projects/{project_id}/sources/{source_id}/findings/{finding_id} + projects/{project_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

string name = 1;

Returns
Type Description
String

The name.

getNameBytes()

public ByteString getNameBytes()

The relative resource name of the finding. The following list shows some examples:

+ organizations/{organization_id}/sources/{source_id}/findings/{finding_id} + organizations/{organization_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

  • folders/{folder_id}/sources/{source_id}/findings/{finding_id} + folders/{folder_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}
  • projects/{project_id}/sources/{source_id}/findings/{finding_id} + projects/{project_id}/sources/{source_id}/locations/{location_id}/findings/{finding_id}

string name = 1;

Returns
Type Description
ByteString

The bytes for name.

getNextSteps()

public String getNextSteps()

Steps to address the finding.

string next_steps = 33;

Returns
Type Description
String

The nextSteps.

getNextStepsBytes()

public ByteString getNextStepsBytes()

Steps to address the finding.

string next_steps = 33;

Returns
Type Description
ByteString

The bytes for nextSteps.

getOrgPolicies(int index)

public OrgPolicy getOrgPolicies(int index)

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v2.OrgPolicy org_policies = 43;

Parameter
Name Description
index int
Returns
Type Description
OrgPolicy

getOrgPoliciesCount()

public int getOrgPoliciesCount()

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v2.OrgPolicy org_policies = 43;

Returns
Type Description
int

getOrgPoliciesList()

public List<OrgPolicy> getOrgPoliciesList()

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v2.OrgPolicy org_policies = 43;

Returns
Type Description
List<OrgPolicy>

getOrgPoliciesOrBuilder(int index)

public OrgPolicyOrBuilder getOrgPoliciesOrBuilder(int index)

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v2.OrgPolicy org_policies = 43;

Parameter
Name Description
index int
Returns
Type Description
OrgPolicyOrBuilder

getOrgPoliciesOrBuilderList()

public List<? extends OrgPolicyOrBuilder> getOrgPoliciesOrBuilderList()

Contains information about the org policies associated with the finding.

repeated .google.cloud.securitycenter.v2.OrgPolicy org_policies = 43;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.OrgPolicyOrBuilder>

getParent()

public String getParent()

The relative resource name of the source and location the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. The following list shows some examples:

  • organizations/{organization_id}/sources/{source_id}
  • folders/{folders_id}/sources/{source_id}
  • projects/{projects_id}/sources/{source_id} + organizations/{organization_id}/sources/{source_id}/locations/{location_id}
  • folders/{folders_id}/sources/{source_id}/locations/{location_id}
  • projects/{projects_id}/sources/{source_id}/locations/{location_id}

string parent = 3;

Returns
Type Description
String

The parent.

getParentBytes()

public ByteString getParentBytes()

The relative resource name of the source and location the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. The following list shows some examples:

  • organizations/{organization_id}/sources/{source_id}
  • folders/{folders_id}/sources/{source_id}
  • projects/{projects_id}/sources/{source_id} + organizations/{organization_id}/sources/{source_id}/locations/{location_id}
  • folders/{folders_id}/sources/{source_id}/locations/{location_id}
  • projects/{projects_id}/sources/{source_id}/locations/{location_id}

string parent = 3;

Returns
Type Description
ByteString

The bytes for parent.

getParentDisplayName()

public String getParentDisplayName()

Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".

string parent_display_name = 29 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
String

The parentDisplayName.

getParentDisplayNameBytes()

public ByteString getParentDisplayNameBytes()

Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".

string parent_display_name = 29 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
ByteString

The bytes for parentDisplayName.

getParserForType()

public Parser<Finding> getParserForType()
Returns
Type Description
Parser<Finding>
Overrides

getProcesses(int index)

public Process getProcesses(int index)

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v2.Process processes = 25;

Parameter
Name Description
index int
Returns
Type Description
Process

getProcessesCount()

public int getProcessesCount()

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v2.Process processes = 25;

Returns
Type Description
int

getProcessesList()

public List<Process> getProcessesList()

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v2.Process processes = 25;

Returns
Type Description
List<Process>

getProcessesOrBuilder(int index)

public ProcessOrBuilder getProcessesOrBuilder(int index)

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v2.Process processes = 25;

Parameter
Name Description
index int
Returns
Type Description
ProcessOrBuilder

getProcessesOrBuilderList()

public List<? extends ProcessOrBuilder> getProcessesOrBuilderList()

Represents operating system processes associated with the Finding.

repeated .google.cloud.securitycenter.v2.Process processes = 25;

Returns
Type Description
List<? extends com.google.cloud.securitycenter.v2.ProcessOrBuilder>

getResourceName()

public String getResourceName()

Immutable. For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string.

string resource_name = 4 [(.google.api.field_behavior) = IMMUTABLE];

Returns
Type Description
String

The resourceName.

getResourceNameBytes()

public ByteString getResourceNameBytes()

Immutable. For findings on Google Cloud resources, the full resource name of the Google Cloud resource this finding is for. See: https://cloud.google.com/apis/design/resource_names#full_resource_name When the finding is for a non-Google Cloud resource, the resourceName can be a customer or partner defined string.

string resource_name = 4 [(.google.api.field_behavior) = IMMUTABLE];

Returns
Type Description
ByteString

The bytes for resourceName.

getSecurityMarks()

public SecurityMarks getSecurityMarks()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v2.SecurityMarks security_marks = 10 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
SecurityMarks

The securityMarks.

getSecurityMarksOrBuilder()

public SecurityMarksOrBuilder getSecurityMarksOrBuilder()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v2.SecurityMarks security_marks = 10 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
SecurityMarksOrBuilder

getSecurityPosture()

public SecurityPosture getSecurityPosture()

The security posture associated with the finding.

.google.cloud.securitycenter.v2.SecurityPosture security_posture = 48;

Returns
Type Description
SecurityPosture

The securityPosture.

getSecurityPostureOrBuilder()

public SecurityPostureOrBuilder getSecurityPostureOrBuilder()

The security posture associated with the finding.

.google.cloud.securitycenter.v2.SecurityPosture security_posture = 48;

Returns
Type Description
SecurityPostureOrBuilder

getSerializedSize()

public int getSerializedSize()
Returns
Type Description
int
Overrides

getSeverity()

public Finding.Severity getSeverity()

The severity of the finding. This field is managed by the source that writes the finding.

.google.cloud.securitycenter.v2.Finding.Severity severity = 14;

Returns
Type Description
Finding.Severity

The severity.

getSeverityValue()

public int getSeverityValue()

The severity of the finding. This field is managed by the source that writes the finding.

.google.cloud.securitycenter.v2.Finding.Severity severity = 14;

Returns
Type Description
int

The enum numeric value on the wire for severity.

getSourceProperties() (deprecated)

public Map<String,Value> getSourceProperties()
Returns
Type Description
Map<String,Value>

getSourcePropertiesCount()

public int getSourcePropertiesCount()

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 9;

Returns
Type Description
int

getSourcePropertiesMap()

public Map<String,Value> getSourcePropertiesMap()

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 9;

Returns
Type Description
Map<String,Value>

getSourcePropertiesOrDefault(String key, Value defaultValue)

public Value getSourcePropertiesOrDefault(String key, Value defaultValue)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 9;

Parameters
Name Description
key String
defaultValue Value
Returns
Type Description
Value

getSourcePropertiesOrThrow(String key)

public Value getSourcePropertiesOrThrow(String key)

Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.

map<string, .google.protobuf.Value> source_properties = 9;

Parameter
Name Description
key String
Returns
Type Description
Value

getState()

public Finding.State getState()

Output only. The state of the finding.

.google.cloud.securitycenter.v2.Finding.State state = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Finding.State

The state.

getStateValue()

public int getStateValue()

Output only. The state of the finding.

.google.cloud.securitycenter.v2.Finding.State state = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
int

The enum numeric value on the wire for state.

getVulnerability()

public Vulnerability getVulnerability()

Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v2.Vulnerability vulnerability = 18;

Returns
Type Description
Vulnerability

The vulnerability.

getVulnerabilityOrBuilder()

public VulnerabilityOrBuilder getVulnerabilityOrBuilder()

Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v2.Vulnerability vulnerability = 18;

Returns
Type Description
VulnerabilityOrBuilder

hasAccess()

public boolean hasAccess()

Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.

.google.cloud.securitycenter.v2.Access access = 22;

Returns
Type Description
boolean

Whether the access field is set.

hasApplication()

public boolean hasApplication()

Represents an application associated with the finding.

.google.cloud.securitycenter.v2.Application application = 45;

Returns
Type Description
boolean

Whether the application field is set.

hasAttackExposure()

public boolean hasAttackExposure()

The results of an attack path simulation relevant to this finding.

.google.cloud.securitycenter.v2.AttackExposure attack_exposure = 38;

Returns
Type Description
boolean

Whether the attackExposure field is set.

hasBackupDisasterRecovery()

public boolean hasBackupDisasterRecovery()

Fields related to Backup and DR findings.

.google.cloud.securitycenter.v2.BackupDisasterRecovery backup_disaster_recovery = 47;

Returns
Type Description
boolean

Whether the backupDisasterRecovery field is set.

hasCloudDlpDataProfile()

public boolean hasCloudDlpDataProfile()

Cloud DLP data profile that is associated with the finding.

.google.cloud.securitycenter.v2.CloudDlpDataProfile cloud_dlp_data_profile = 41;

Returns
Type Description
boolean

Whether the cloudDlpDataProfile field is set.

hasCloudDlpInspection()

public boolean hasCloudDlpInspection()

Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.

.google.cloud.securitycenter.v2.CloudDlpInspection cloud_dlp_inspection = 40;

Returns
Type Description
boolean

Whether the cloudDlpInspection field is set.

hasCreateTime()

public boolean hasCreateTime()

Output only. The time at which the finding was created in Security Command Center.

.google.protobuf.Timestamp create_time = 12 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
boolean

Whether the createTime field is set.

hasDatabase()

public boolean hasDatabase()

Database associated with the finding.

.google.cloud.securitycenter.v2.Database database = 37;

Returns
Type Description
boolean

Whether the database field is set.

hasEventTime()

public boolean hasEventTime()

The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.

.google.protobuf.Timestamp event_time = 11;

Returns
Type Description
boolean

Whether the eventTime field is set.

hasExfiltration()

public boolean hasExfiltration()

Represents exfiltrations associated with the finding.

.google.cloud.securitycenter.v2.Exfiltration exfiltration = 31;

Returns
Type Description
boolean

Whether the exfiltration field is set.

hasIndicator()

public boolean hasIndicator()

Represents what's commonly known as an indicator of compromise (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see Indicator of compromise.

.google.cloud.securitycenter.v2.Indicator indicator = 17;

Returns
Type Description
boolean

Whether the indicator field is set.

hasKernelRootkit()

public boolean hasKernelRootkit()

Signature of the kernel rootkit.

.google.cloud.securitycenter.v2.KernelRootkit kernel_rootkit = 42;

Returns
Type Description
boolean

Whether the kernelRootkit field is set.

hasKubernetes()

public boolean hasKubernetes()

Kubernetes resources associated with the finding.

.google.cloud.securitycenter.v2.Kubernetes kubernetes = 36;

Returns
Type Description
boolean

Whether the kubernetes field is set.

hasMitreAttack()

public boolean hasMitreAttack()

MITRE ATT&CK tactics and techniques related to this finding. See: https://attack.mitre.org

.google.cloud.securitycenter.v2.MitreAttack mitre_attack = 21;

Returns
Type Description
boolean

Whether the mitreAttack field is set.

hasMuteUpdateTime()

public boolean hasMuteUpdateTime()

Output only. The most recent time this finding was muted or unmuted.

.google.protobuf.Timestamp mute_update_time = 19 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
boolean

Whether the muteUpdateTime field is set.

hasSecurityMarks()

public boolean hasSecurityMarks()

Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding.

.google.cloud.securitycenter.v2.SecurityMarks security_marks = 10 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
boolean

Whether the securityMarks field is set.

hasSecurityPosture()

public boolean hasSecurityPosture()

The security posture associated with the finding.

.google.cloud.securitycenter.v2.SecurityPosture security_posture = 48;

Returns
Type Description
boolean

Whether the securityPosture field is set.

hasVulnerability()

public boolean hasVulnerability()

Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

.google.cloud.securitycenter.v2.Vulnerability vulnerability = 18;

Returns
Type Description
boolean

Whether the vulnerability field is set.

hashCode()

public int hashCode()
Returns
Type Description
int
Overrides

internalGetFieldAccessorTable()

protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Type Description
FieldAccessorTable
Overrides

internalGetMapFieldReflection(int number)

protected MapFieldReflectionAccessor internalGetMapFieldReflection(int number)
Parameter
Name Description
number int
Returns
Type Description
com.google.protobuf.MapFieldReflectionAccessor
Overrides
com.google.protobuf.GeneratedMessageV3.internalGetMapFieldReflection(int)

isInitialized()

public final boolean isInitialized()
Returns
Type Description
boolean
Overrides

newBuilderForType()

public Finding.Builder newBuilderForType()
Returns
Type Description
Finding.Builder

newBuilderForType(GeneratedMessageV3.BuilderParent parent)

protected Finding.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Parameter
Name Description
parent BuilderParent
Returns
Type Description
Finding.Builder
Overrides

newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Parameter
Name Description
unused UnusedPrivateParameter
Returns
Type Description
Object
Overrides

toBuilder()

public Finding.Builder toBuilder()
Returns
Type Description
Finding.Builder

writeTo(CodedOutputStream output)

public void writeTo(CodedOutputStream output)
Parameter
Name Description
output CodedOutputStream
Overrides
Exceptions
Type Description
IOException