com.aliyun.sdk.service.sas20181203.models

类 DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder

java.lang.Object

com.aliyun.sdk.service.sas20181203.models.DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder

封闭类:

DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse

public static final class DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder
extends Object

构造器概要

构造器

构造器和说明
Builder()

方法概要

限定符和类型	方法和说明
DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse	build()
DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder	markField(List<DescribeSecurityEventOperationsResponseBody.MarkField> markField) An array consisting of the configuration information that is used when the value of the OperationCode parameter is **advance\_mark\_mis_info**.
DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder	markFieldsSource(List<DescribeSecurityEventOperationsResponseBody.MarkFieldsSource> markFieldsSource) An array consisting of the configuration items that can be used when the value of the OperationCode parameter is advance_mark_mis_info.
DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder	operationCode(String operationCode) The operation that you can perform to handle the alert.
DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder	operationParams(String operationParams) The configuration of the operation that you can perform to handle the alert event.
DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder	userCanOperate(Boolean userCanOperate) Indicates whether you can handle the alert event in the current edition of Security Center.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

Builder

public Builder()

方法详细资料

markField

public DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder markField(List<DescribeSecurityEventOperationsResponseBody.MarkField> markField)

An array consisting of the configuration information that is used when the value of the OperationCode parameter is **advance\_mark\_mis_info**.

markFieldsSource

public DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder markFieldsSource(List<DescribeSecurityEventOperationsResponseBody.MarkFieldsSource> markFieldsSource)

An array consisting of the configuration items that can be used when the value of the OperationCode parameter is advance_mark_mis_info.

operationCode

public DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder operationCode(String operationCode)

The operation that you can perform to handle the alert. Valid values:

* **block_ip**: blocks the source IP address. * **advance\_mark\_mis_info**: adds the alert to the whitelist. * **ignore**: ignores the alert. * **manual_handled**: marks the alert as manually handled. * **kill_process**: terminates the malicious process. * **cleanup**: performs in-depth virus detection and removal. * **kill\_and_quara**: terminates the malicious process and quarantines the source file. * **disable\_malicious_defense**: stops the container on which the alerting files or processes exist. * **client\_problem_check**: performs troubleshooting. * **quara**: quarantines the source file of the malicious process.

operationParams

public DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder operationParams(String operationParams)

The configuration of the operation that you can perform to handle the alert event.

> If the value of the OperationCode parameter is `kill_and_quara` or `block_ip`, the OperationParams parameter is required. If the value of the OperationCode parameter is a different value, the OperationParams parameter can be left empty.

userCanOperate

public DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse.Builder userCanOperate(Boolean userCanOperate)

Indicates whether you can handle the alert event in the current edition of Security Center. Valid values:

* **true**: yes * **false**: no

build

public DescribeSecurityEventOperationsResponseBody.SecurityEventOperationsResponse build()