com.aliyun.sdk.service.sas20181203.models

类 OperationSuspEventsRequest.Builder

java.lang.Object

com.aliyun.sdk.service.sas20181203.models.OperationSuspEventsRequest.Builder

所有已实现的接口:

darabonba.core.RequestModel.Builder<OperationSuspEventsRequest,OperationSuspEventsRequest.Builder>

封闭类:

OperationSuspEventsRequest

public static final class OperationSuspEventsRequest.Builder
extends Object

方法概要

限定符和类型	方法和说明
OperationSuspEventsRequest	build()
OperationSuspEventsRequest.Builder	from(String from) The ID of the request source.
OperationSuspEventsRequest.Builder	operation(String operation) The operation that you want to perform on alerts.
OperationSuspEventsRequest.Builder	sourceIp(String sourceIp) The source IP address of the request.
OperationSuspEventsRequest.Builder	subOperation(String subOperation) The suboperation that you want to perform when you quarantine the source file of the malicious process.
OperationSuspEventsRequest.Builder	suspiciousEventIds(String suspiciousEventIds) The IDs of alert events.
OperationSuspEventsRequest.Builder	warnType(String warnType) The type of the exceptions.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

方法详细资料

from

public OperationSuspEventsRequest.Builder from(String from)

The ID of the request source.

Set the value to **sas**, which indicates that the request is sent from Security Center.

operation

public OperationSuspEventsRequest.Builder operation(String operation)

The operation that you want to perform on alerts. Valid values:

* **deal**: quarantines the source file of the malicious process. * **ignore**: ignores the alerts. * **mark\_mis_info**: marks the alerts as false positives by adding the alerts to the whitelist. * **rm\_mark\_mis_info**: cancels marking the alerts as false positives by removing the alerts from the whitelist. * **offline_handled**: marks the alerts as handled.

sourceIp

public OperationSuspEventsRequest.Builder sourceIp(String sourceIp)

The source IP address of the request.

subOperation

public OperationSuspEventsRequest.Builder subOperation(String subOperation)

The suboperation that you want to perform when you quarantine the source file of the malicious process. Valid values:

* **killAndQuaraFileByPidAndMd5andPath**: terminates the process based on its process ID (PID) and quarantines the source file of the process. * **quaraFileByMd5andPath**: quarantines the source file of the process. * **killAndQuaraFileByMd5andPath**: terminates the process and quarantines the source file of the process.

suspiciousEventIds

public OperationSuspEventsRequest.Builder suspiciousEventIds(String suspiciousEventIds)

The IDs of alert events.

> You can call the [DescribeAlarmEventList](~~DescribeAlarmEventList~~) operation to obtain the IDs of alert events from the SecurityEventIds response parameter.

warnType

public OperationSuspEventsRequest.Builder warnType(String warnType)

The type of the exceptions. Valid values:

* **alarm**: alerts * **null**: exceptions

build

public OperationSuspEventsRequest build()