lib/v20201101/models.rb in tencentcloud-sdk-tcss-1.0.318 vs lib/v20201101/models.rb in tencentcloud-sdk-tcss-1.0.319

- old
+ new

@@ -152,14 +152,36 @@ # @type RuleId: String # @param MatchGroupName: 命中策略名称:SYSTEM_DEFINED_RULE (系统策略)或 用户自定义的策略名字 # @type MatchGroupName: String # @param MatchRuleLevel: 命中规则等级,HIGH:高危,MIDDLE:中危,LOW:低危。 # @type MatchRuleLevel: String + # @param ContainerNetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerNetStatus: String + # @param ContainerNetSubStatus: 容器子状态 + # "AGENT_OFFLINE" //Agent离线 + # "NODE_DESTROYED" //节点已销毁 + # "CONTAINER_EXITED" //容器已退出 + # "CONTAINER_DESTROYED" //容器已销毁 + # "SHARED_HOST" // 容器与主机共享网络 + # "RESOURCE_LIMIT" //隔离操作资源超限 + # "UNKNOW" // 原因未知 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerNetSubStatus: String + # @param ContainerIsolateOperationSrc: 容器隔离操作来源 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerIsolateOperationSrc: String - attr_accessor :ProcessPath, :EventType, :MatchRuleName, :FoundTime, :ContainerName, :ImageName, :Behavior, :Status, :Id, :ImageId, :ContainerId, :Solution, :Description, :MatchRuleId, :MatchAction, :MatchProcessPath, :RuleExist, :EventCount, :LatestFoundTime, :RuleId, :MatchGroupName, :MatchRuleLevel + attr_accessor :ProcessPath, :EventType, :MatchRuleName, :FoundTime, :ContainerName, :ImageName, :Behavior, :Status, :Id, :ImageId, :ContainerId, :Solution, :Description, :MatchRuleId, :MatchAction, :MatchProcessPath, :RuleExist, :EventCount, :LatestFoundTime, :RuleId, :MatchGroupName, :MatchRuleLevel, :ContainerNetStatus, :ContainerNetSubStatus, :ContainerIsolateOperationSrc - def initialize(processpath=nil, eventtype=nil, matchrulename=nil, foundtime=nil, containername=nil, imagename=nil, behavior=nil, status=nil, id=nil, imageid=nil, containerid=nil, solution=nil, description=nil, matchruleid=nil, matchaction=nil, matchprocesspath=nil, ruleexist=nil, eventcount=nil, latestfoundtime=nil, ruleid=nil, matchgroupname=nil, matchrulelevel=nil) + def initialize(processpath=nil, eventtype=nil, matchrulename=nil, foundtime=nil, containername=nil, imagename=nil, behavior=nil, status=nil, id=nil, imageid=nil, containerid=nil, solution=nil, description=nil, matchruleid=nil, matchaction=nil, matchprocesspath=nil, ruleexist=nil, eventcount=nil, latestfoundtime=nil, ruleid=nil, matchgroupname=nil, matchrulelevel=nil, containernetstatus=nil, containernetsubstatus=nil, containerisolateoperationsrc=nil) @ProcessPath = processpath @EventType = eventtype @MatchRuleName = matchrulename @FoundTime = foundtime @ContainerName = containername @@ -178,10 +200,13 @@ @EventCount = eventcount @LatestFoundTime = latestfoundtime @RuleId = ruleid @MatchGroupName = matchgroupname @MatchRuleLevel = matchrulelevel + @ContainerNetStatus = containernetstatus + @ContainerNetSubStatus = containernetsubstatus + @ContainerIsolateOperationSrc = containerisolateoperationsrc end def deserialize(params) @ProcessPath = params['ProcessPath'] @EventType = params['EventType'] @@ -203,10 +228,13 @@ @EventCount = params['EventCount'] @LatestFoundTime = params['LatestFoundTime'] @RuleId = params['RuleId'] @MatchGroupName = params['MatchGroupName'] @MatchRuleLevel = params['MatchRuleLevel'] + @ContainerNetStatus = params['ContainerNetStatus'] + @ContainerNetSubStatus = params['ContainerNetSubStatus'] + @ContainerIsolateOperationSrc = params['ContainerIsolateOperationSrc'] end end # 运行时安全,异常进程检测策略 class AbnormalProcessRuleInfo < TencentCloud::Common::AbstractModel @@ -436,14 +464,33 @@ # @type EventCount: Integer # @param LatestFoundTime: 最近生成时间 # @type LatestFoundTime: String # @param RuleId: 规则组id # @type RuleId: String + # @param ContainerNetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # @type ContainerNetStatus: String + # @param ContainerNetSubStatus: 容器子状态 + # "AGENT_OFFLINE" //Agent离线 + # "NODE_DESTROYED" //节点已销毁 + # "CONTAINER_EXITED" //容器已退出 + # "CONTAINER_DESTROYED" //容器已销毁 + # "SHARED_HOST" // 容器与主机共享网络 + # "RESOURCE_LIMIT" //隔离操作资源超限 + # "UNKNOW" // 原因未知 + # @type ContainerNetSubStatus: String + # @param ContainerIsolateOperationSrc: 容器隔离操作来源 + # @type ContainerIsolateOperationSrc: String - attr_accessor :ProcessName, :MatchRuleName, :FoundTime, :ContainerName, :ImageName, :Behavior, :Status, :Id, :FileName, :EventType, :ImageId, :ContainerId, :Solution, :Description, :MatchRuleId, :MatchAction, :MatchProcessPath, :MatchFilePath, :FilePath, :RuleExist, :EventCount, :LatestFoundTime, :RuleId + attr_accessor :ProcessName, :MatchRuleName, :FoundTime, :ContainerName, :ImageName, :Behavior, :Status, :Id, :FileName, :EventType, :ImageId, :ContainerId, :Solution, :Description, :MatchRuleId, :MatchAction, :MatchProcessPath, :MatchFilePath, :FilePath, :RuleExist, :EventCount, :LatestFoundTime, :RuleId, :ContainerNetStatus, :ContainerNetSubStatus, :ContainerIsolateOperationSrc - def initialize(processname=nil, matchrulename=nil, foundtime=nil, containername=nil, imagename=nil, behavior=nil, status=nil, id=nil, filename=nil, eventtype=nil, imageid=nil, containerid=nil, solution=nil, description=nil, matchruleid=nil, matchaction=nil, matchprocesspath=nil, matchfilepath=nil, filepath=nil, ruleexist=nil, eventcount=nil, latestfoundtime=nil, ruleid=nil) + def initialize(processname=nil, matchrulename=nil, foundtime=nil, containername=nil, imagename=nil, behavior=nil, status=nil, id=nil, filename=nil, eventtype=nil, imageid=nil, containerid=nil, solution=nil, description=nil, matchruleid=nil, matchaction=nil, matchprocesspath=nil, matchfilepath=nil, filepath=nil, ruleexist=nil, eventcount=nil, latestfoundtime=nil, ruleid=nil, containernetstatus=nil, containernetsubstatus=nil, containerisolateoperationsrc=nil) @ProcessName = processname @MatchRuleName = matchrulename @FoundTime = foundtime @ContainerName = containername @ImageName = imagename @@ -463,10 +510,13 @@ @FilePath = filepath @RuleExist = ruleexist @EventCount = eventcount @LatestFoundTime = latestfoundtime @RuleId = ruleid + @ContainerNetStatus = containernetstatus + @ContainerNetSubStatus = containernetsubstatus + @ContainerIsolateOperationSrc = containerisolateoperationsrc end def deserialize(params) @ProcessName = params['ProcessName'] @MatchRuleName = params['MatchRuleName'] @@ -489,10 +539,13 @@ @FilePath = params['FilePath'] @RuleExist = params['RuleExist'] @EventCount = params['EventCount'] @LatestFoundTime = params['LatestFoundTime'] @RuleId = params['RuleId'] + @ContainerNetStatus = params['ContainerNetStatus'] + @ContainerNetSubStatus = params['ContainerNetSubStatus'] + @ContainerIsolateOperationSrc = params['ContainerIsolateOperationSrc'] end end # 容器运行时,访问控制策略信息 class AccessControlRuleInfo < TencentCloud::Common::AbstractModel @@ -814,13 +867,13 @@ end end # AddEditRiskSyscallWhiteList请求参数结构体 class AddEditRiskSyscallWhiteListRequest < TencentCloud::Common::AbstractModel - # @param EventId: 仅在添加白名单时候使用 + # @param EventId: 仅在添加事件白名单时候使用 # @type EventId: String - # @param WhiteListInfo: 增加白名单信息,白名单id为空,编辑白名单id不能为空 + # @param WhiteListInfo: 增加或编辑白名单信。新增白名单时WhiteListInfo.id为空,编辑白名单WhiteListInfo.id不能为空. # @type WhiteListInfo: :class:`Tencentcloud::Tcss.v20201101.models.RiskSyscallWhiteListInfo` attr_accessor :EventId, :WhiteListInfo def initialize(eventid=nil, whitelistinfo=nil) @@ -2223,14 +2276,30 @@ # @type UpdateTime: String # @param HostName: 主机名称 # @type HostName: String # @param PublicIp: 外网ip # @type PublicIp: String + # @param NetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # @type NetStatus: String + # @param NetSubStatus: 网络子状态 + # @type NetSubStatus: String + # @param IsolateSource: 隔离来源 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type IsolateSource: String + # @param IsolateTime: 隔离时间 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type IsolateTime: String - attr_accessor :ContainerID, :ContainerName, :Status, :CreateTime, :RunAs, :Cmd, :CPUUsage, :RamUsage, :ImageName, :ImageID, :POD, :HostID, :HostIP, :UpdateTime, :HostName, :PublicIp + attr_accessor :ContainerID, :ContainerName, :Status, :CreateTime, :RunAs, :Cmd, :CPUUsage, :RamUsage, :ImageName, :ImageID, :POD, :HostID, :HostIP, :UpdateTime, :HostName, :PublicIp, :NetStatus, :NetSubStatus, :IsolateSource, :IsolateTime - def initialize(containerid=nil, containername=nil, status=nil, createtime=nil, runas=nil, cmd=nil, cpuusage=nil, ramusage=nil, imagename=nil, imageid=nil, pod=nil, hostid=nil, hostip=nil, updatetime=nil, hostname=nil, publicip=nil) + def initialize(containerid=nil, containername=nil, status=nil, createtime=nil, runas=nil, cmd=nil, cpuusage=nil, ramusage=nil, imagename=nil, imageid=nil, pod=nil, hostid=nil, hostip=nil, updatetime=nil, hostname=nil, publicip=nil, netstatus=nil, netsubstatus=nil, isolatesource=nil, isolatetime=nil) @ContainerID = containerid @ContainerName = containername @Status = status @CreateTime = createtime @RunAs = runas @@ -2243,10 +2312,14 @@ @HostID = hostid @HostIP = hostip @UpdateTime = updatetime @HostName = hostname @PublicIp = publicip + @NetStatus = netstatus + @NetSubStatus = netsubstatus + @IsolateSource = isolatesource + @IsolateTime = isolatetime end def deserialize(params) @ContainerID = params['ContainerID'] @ContainerName = params['ContainerName'] @@ -2262,10 +2335,14 @@ @HostID = params['HostID'] @HostIP = params['HostIP'] @UpdateTime = params['UpdateTime'] @HostName = params['HostName'] @PublicIp = params['PublicIp'] + @NetStatus = params['NetStatus'] + @NetSubStatus = params['NetSubStatus'] + @IsolateSource = params['IsolateSource'] + @IsolateTime = params['IsolateTime'] end end # 容器挂载信息 class ContainerMount < TencentCloud::Common::AbstractModel @@ -3584,36 +3661,35 @@ end end # DescribeAccessControlEventsExport请求参数结构体 class DescribeAccessControlEventsExportRequest < TencentCloud::Common::AbstractModel - # @param ExportField: 导出字段 - # @type ExportField: Array # @param Limit: 需要返回的数量,默认为10,最大值为100 # @type Limit: Integer # @param Offset: 偏移量,默认为0。 # @type Offset: Integer # @param Filters: 过滤参数,"Filters":[{"Name":"Status","Values":["2"]}] # @type Filters: Array # @param Order: 升序降序,asc desc # @type Order: String # @param By: 排序字段 # @type By: String + # @param ExportField: 导出字段 + # @type ExportField: Array - attr_accessor :ExportField, :Limit, :Offset, :Filters, :Order, :By + attr_accessor :Limit, :Offset, :Filters, :Order, :By, :ExportField - def initialize(exportfield=nil, limit=nil, offset=nil, filters=nil, order=nil, by=nil) - @ExportField = exportfield + def initialize(limit=nil, offset=nil, filters=nil, order=nil, by=nil, exportfield=nil) @Limit = limit @Offset = offset @Filters = filters @Order = order @By = by + @ExportField = exportfield end def deserialize(params) - @ExportField = params['ExportField'] @Limit = params['Limit'] @Offset = params['Offset'] unless params['Filters'].nil? @Filters = [] params['Filters'].each do |i| @@ -3622,30 +3698,36 @@ @Filters << runtimefilters_tmp end end @Order = params['Order'] @By = params['By'] + @ExportField = params['ExportField'] end end # DescribeAccessControlEventsExport返回参数结构体 class DescribeAccessControlEventsExportResponse < TencentCloud::Common::AbstractModel # @param DownloadUrl: execle下载地址 # 注意:此字段可能返回 null,表示取不到有效值。 # @type DownloadUrl: String + # @param JobId: 任务id + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type JobId: String # @param RequestId: 唯一请求 ID,每次请求都会返回。定位问题时需要提供该次请求的 RequestId。 # @type RequestId: String - attr_accessor :DownloadUrl, :RequestId + attr_accessor :DownloadUrl, :JobId, :RequestId - def initialize(downloadurl=nil, requestid=nil) + def initialize(downloadurl=nil, jobid=nil, requestid=nil) @DownloadUrl = downloadurl + @JobId = jobid @RequestId = requestid end def deserialize(params) @DownloadUrl = params['DownloadUrl'] + @JobId = params['JobId'] @RequestId = params['RequestId'] end end # DescribeAccessControlEvents请求参数结构体 @@ -4287,16 +4369,32 @@ # @type ImageCreateTime: String # @param ImageSize: 镜像大小 # @type ImageSize: Integer # @param HostStatus: 主机状态 offline,online,pause # @type HostStatus: String + # @param NetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # @type NetStatus: String + # @param NetSubStatus: 网络子状态 + # @type NetSubStatus: String + # @param IsolateSource: 隔离来源 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type IsolateSource: String + # @param IsolateTime: 隔离时间 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type IsolateTime: String # @param RequestId: 唯一请求 ID,每次请求都会返回。定位问题时需要提供该次请求的 RequestId。 # @type RequestId: String - attr_accessor :HostID, :HostIP, :ContainerName, :Status, :RunAs, :Cmd, :CPUUsage, :RamUsage, :ImageName, :ImageID, :POD, :K8sMaster, :ProcessCnt, :PortCnt, :ComponentCnt, :AppCnt, :WebServiceCnt, :Mounts, :Network, :CreateTime, :ImageCreateTime, :ImageSize, :HostStatus, :RequestId + attr_accessor :HostID, :HostIP, :ContainerName, :Status, :RunAs, :Cmd, :CPUUsage, :RamUsage, :ImageName, :ImageID, :POD, :K8sMaster, :ProcessCnt, :PortCnt, :ComponentCnt, :AppCnt, :WebServiceCnt, :Mounts, :Network, :CreateTime, :ImageCreateTime, :ImageSize, :HostStatus, :NetStatus, :NetSubStatus, :IsolateSource, :IsolateTime, :RequestId - def initialize(hostid=nil, hostip=nil, containername=nil, status=nil, runas=nil, cmd=nil, cpuusage=nil, ramusage=nil, imagename=nil, imageid=nil, pod=nil, k8smaster=nil, processcnt=nil, portcnt=nil, componentcnt=nil, appcnt=nil, webservicecnt=nil, mounts=nil, network=nil, createtime=nil, imagecreatetime=nil, imagesize=nil, hoststatus=nil, requestid=nil) + def initialize(hostid=nil, hostip=nil, containername=nil, status=nil, runas=nil, cmd=nil, cpuusage=nil, ramusage=nil, imagename=nil, imageid=nil, pod=nil, k8smaster=nil, processcnt=nil, portcnt=nil, componentcnt=nil, appcnt=nil, webservicecnt=nil, mounts=nil, network=nil, createtime=nil, imagecreatetime=nil, imagesize=nil, hoststatus=nil, netstatus=nil, netsubstatus=nil, isolatesource=nil, isolatetime=nil, requestid=nil) @HostID = hostid @HostIP = hostip @ContainerName = containername @Status = status @RunAs = runas @@ -4316,10 +4414,14 @@ @Network = network @CreateTime = createtime @ImageCreateTime = imagecreatetime @ImageSize = imagesize @HostStatus = hoststatus + @NetStatus = netstatus + @NetSubStatus = netsubstatus + @IsolateSource = isolatesource + @IsolateTime = isolatetime @RequestId = requestid end def deserialize(params) @HostID = params['HostID'] @@ -4353,10 +4455,14 @@ end @CreateTime = params['CreateTime'] @ImageCreateTime = params['ImageCreateTime'] @ImageSize = params['ImageSize'] @HostStatus = params['HostStatus'] + @NetStatus = params['NetStatus'] + @NetSubStatus = params['NetSubStatus'] + @IsolateSource = params['IsolateSource'] + @IsolateTime = params['IsolateTime'] @RequestId = params['RequestId'] end end # DescribeAssetContainerList请求参数结构体 @@ -4370,10 +4476,11 @@ # <li>Status - String - 是否必填:否 - 容器运行状态筛选,0:"created",1:"running", 2:"paused", 3:"restarting", 4:"removing", 5:"exited", 6:"dead" </li> # <li>Runas - String - 是否必填:否 - 运行用户筛选</li> # <li>ImageName- String - 是否必填:否 - 镜像名称搜索</li> # <li>HostIP- string - 是否必填:否 - 主机ip搜索</li> # <li>OrderBy - String 是否必填:否 -排序字段,支持:cpu_usage, mem_usage的动态排序 ["cpu_usage","+"] '+'升序、'-'降序</li> + # <li>NetStatus - String -是否必填: 否 - 容器网络状态筛选 normal isolated isolating isolate_failed restoring restore_failed</li> # @type Filters: Array # @param By: 排序字段 # @type By: String # @param Order: 排序方式 asc,desc # @type Order: String @@ -9020,36 +9127,35 @@ end end # DescribeReverseShellEventsExport请求参数结构体 class DescribeReverseShellEventsExportRequest < TencentCloud::Common::AbstractModel - # @param ExportField: 导出字段 - # @type ExportField: Array # @param Limit: 需要返回的数量,默认为10,最大值为100 # @type Limit: Integer # @param Offset: 偏移量,默认为0。 # @type Offset: Integer # @param Filters: 过滤参数,"Filters":[{"Name":"Status","Values":["2"]}] # @type Filters: Array # @param Order: 升序降序,asc desc # @type Order: String # @param By: 排序字段 # @type By: String + # @param ExportField: 导出字段 + # @type ExportField: Array - attr_accessor :ExportField, :Limit, :Offset, :Filters, :Order, :By + attr_accessor :Limit, :Offset, :Filters, :Order, :By, :ExportField - def initialize(exportfield=nil, limit=nil, offset=nil, filters=nil, order=nil, by=nil) - @ExportField = exportfield + def initialize(limit=nil, offset=nil, filters=nil, order=nil, by=nil, exportfield=nil) @Limit = limit @Offset = offset @Filters = filters @Order = order @By = by + @ExportField = exportfield end def deserialize(params) - @ExportField = params['ExportField'] @Limit = params['Limit'] @Offset = params['Offset'] unless params['Filters'].nil? @Filters = [] params['Filters'].each do |i| @@ -9058,30 +9164,36 @@ @Filters << runtimefilters_tmp end end @Order = params['Order'] @By = params['By'] + @ExportField = params['ExportField'] end end # DescribeReverseShellEventsExport返回参数结构体 class DescribeReverseShellEventsExportResponse < TencentCloud::Common::AbstractModel # @param DownloadUrl: execle下载地址 # 注意:此字段可能返回 null,表示取不到有效值。 # @type DownloadUrl: String + # @param JobId: 任务ID + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type JobId: String # @param RequestId: 唯一请求 ID,每次请求都会返回。定位问题时需要提供该次请求的 RequestId。 # @type RequestId: String - attr_accessor :DownloadUrl, :RequestId + attr_accessor :DownloadUrl, :JobId, :RequestId - def initialize(downloadurl=nil, requestid=nil) + def initialize(downloadurl=nil, jobid=nil, requestid=nil) @DownloadUrl = downloadurl + @JobId = jobid @RequestId = requestid end def deserialize(params) @DownloadUrl = params['DownloadUrl'] + @JobId = params['JobId'] @RequestId = params['RequestId'] end end # DescribeReverseShellEvents请求参数结构体 @@ -9406,36 +9518,35 @@ end end # DescribeRiskSyscallEventsExport请求参数结构体 class DescribeRiskSyscallEventsExportRequest < TencentCloud::Common::AbstractModel - # @param ExportField: 导出字段 - # @type ExportField: Array # @param Limit: 需要返回的数量,默认为10,最大值为100 # @type Limit: Integer # @param Offset: 偏移量,默认为0。 # @type Offset: Integer # @param Filters: 过滤参数,"Filters":[{"Name":"Status","Values":["2"]}] # @type Filters: Array # @param Order: 升序降序,asc desc # @type Order: String # @param By: 排序字段 # @type By: String + # @param ExportField: 导出字段 + # @type ExportField: Array - attr_accessor :ExportField, :Limit, :Offset, :Filters, :Order, :By + attr_accessor :Limit, :Offset, :Filters, :Order, :By, :ExportField - def initialize(exportfield=nil, limit=nil, offset=nil, filters=nil, order=nil, by=nil) - @ExportField = exportfield + def initialize(limit=nil, offset=nil, filters=nil, order=nil, by=nil, exportfield=nil) @Limit = limit @Offset = offset @Filters = filters @Order = order @By = by + @ExportField = exportfield end def deserialize(params) - @ExportField = params['ExportField'] @Limit = params['Limit'] @Offset = params['Offset'] unless params['Filters'].nil? @Filters = [] params['Filters'].each do |i| @@ -9444,30 +9555,36 @@ @Filters << runtimefilters_tmp end end @Order = params['Order'] @By = params['By'] + @ExportField = params['ExportField'] end end # DescribeRiskSyscallEventsExport返回参数结构体 class DescribeRiskSyscallEventsExportResponse < TencentCloud::Common::AbstractModel # @param DownloadUrl: Excel下载地址 # 注意:此字段可能返回 null,表示取不到有效值。 # @type DownloadUrl: String + # @param JobId: 任务Id + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type JobId: String # @param RequestId: 唯一请求 ID,每次请求都会返回。定位问题时需要提供该次请求的 RequestId。 # @type RequestId: String - attr_accessor :DownloadUrl, :RequestId + attr_accessor :DownloadUrl, :JobId, :RequestId - def initialize(downloadurl=nil, requestid=nil) + def initialize(downloadurl=nil, jobid=nil, requestid=nil) @DownloadUrl = downloadurl + @JobId = jobid @RequestId = requestid end def deserialize(params) @DownloadUrl = params['DownloadUrl'] + @JobId = params['JobId'] @RequestId = params['RequestId'] end end # DescribeRiskSyscallEvents请求参数结构体 @@ -10078,16 +10195,25 @@ # 注意:此字段可能返回 null,表示取不到有效值。 # @type AncestorProcessParam: String # @param OperationTime: 事件最后一次处理的时间 # 注意:此字段可能返回 null,表示取不到有效值。 # @type OperationTime: String + # @param ContainerNetStatus: 容器隔离状态 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerNetStatus: String + # @param ContainerNetSubStatus: 容器隔离子状态 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerNetSubStatus: String + # @param ContainerIsolateOperationSrc: 容器隔离操作来源 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerIsolateOperationSrc: String # @param RequestId: 唯一请求 ID,每次请求都会返回。定位问题时需要提供该次请求的 RequestId。 # @type RequestId: String - attr_accessor :ImageId, :ImageName, :CreateTime, :Size, :FilePath, :ModifyTime, :VirusName, :RiskLevel, :ContainerName, :ContainerId, :HostName, :HostId, :ProcessName, :ProcessPath, :ProcessMd5, :ProcessId, :ProcessArgv, :ProcessChan, :ProcessAccountGroup, :ProcessStartAccount, :ProcessFileAuthority, :SourceType, :PodName, :Tags, :HarmDescribe, :SuggestScheme, :Mark, :FileName, :FileMd5, :EventType, :Status, :SubStatus, :HostIP, :ClientIP, :PProcessStartUser, :PProcessUserGroup, :PProcessPath, :PProcessParam, :AncestorProcessStartUser, :AncestorProcessUserGroup, :AncestorProcessPath, :AncestorProcessParam, :OperationTime, :RequestId + attr_accessor :ImageId, :ImageName, :CreateTime, :Size, :FilePath, :ModifyTime, :VirusName, :RiskLevel, :ContainerName, :ContainerId, :HostName, :HostId, :ProcessName, :ProcessPath, :ProcessMd5, :ProcessId, :ProcessArgv, :ProcessChan, :ProcessAccountGroup, :ProcessStartAccount, :ProcessFileAuthority, :SourceType, :PodName, :Tags, :HarmDescribe, :SuggestScheme, :Mark, :FileName, :FileMd5, :EventType, :Status, :SubStatus, :HostIP, :ClientIP, :PProcessStartUser, :PProcessUserGroup, :PProcessPath, :PProcessParam, :AncestorProcessStartUser, :AncestorProcessUserGroup, :AncestorProcessPath, :AncestorProcessParam, :OperationTime, :ContainerNetStatus, :ContainerNetSubStatus, :ContainerIsolateOperationSrc, :RequestId - def initialize(imageid=nil, imagename=nil, createtime=nil, size=nil, filepath=nil, modifytime=nil, virusname=nil, risklevel=nil, containername=nil, containerid=nil, hostname=nil, hostid=nil, processname=nil, processpath=nil, processmd5=nil, processid=nil, processargv=nil, processchan=nil, processaccountgroup=nil, processstartaccount=nil, processfileauthority=nil, sourcetype=nil, podname=nil, tags=nil, harmdescribe=nil, suggestscheme=nil, mark=nil, filename=nil, filemd5=nil, eventtype=nil, status=nil, substatus=nil, hostip=nil, clientip=nil, pprocessstartuser=nil, pprocessusergroup=nil, pprocesspath=nil, pprocessparam=nil, ancestorprocessstartuser=nil, ancestorprocessusergroup=nil, ancestorprocesspath=nil, ancestorprocessparam=nil, operationtime=nil, requestid=nil) + def initialize(imageid=nil, imagename=nil, createtime=nil, size=nil, filepath=nil, modifytime=nil, virusname=nil, risklevel=nil, containername=nil, containerid=nil, hostname=nil, hostid=nil, processname=nil, processpath=nil, processmd5=nil, processid=nil, processargv=nil, processchan=nil, processaccountgroup=nil, processstartaccount=nil, processfileauthority=nil, sourcetype=nil, podname=nil, tags=nil, harmdescribe=nil, suggestscheme=nil, mark=nil, filename=nil, filemd5=nil, eventtype=nil, status=nil, substatus=nil, hostip=nil, clientip=nil, pprocessstartuser=nil, pprocessusergroup=nil, pprocesspath=nil, pprocessparam=nil, ancestorprocessstartuser=nil, ancestorprocessusergroup=nil, ancestorprocesspath=nil, ancestorprocessparam=nil, operationtime=nil, containernetstatus=nil, containernetsubstatus=nil, containerisolateoperationsrc=nil, requestid=nil) @ImageId = imageid @ImageName = imagename @CreateTime = createtime @Size = size @FilePath = filepath @@ -10127,10 +10253,13 @@ @AncestorProcessStartUser = ancestorprocessstartuser @AncestorProcessUserGroup = ancestorprocessusergroup @AncestorProcessPath = ancestorprocesspath @AncestorProcessParam = ancestorprocessparam @OperationTime = operationtime + @ContainerNetStatus = containernetstatus + @ContainerNetSubStatus = containernetsubstatus + @ContainerIsolateOperationSrc = containerisolateoperationsrc @RequestId = requestid end def deserialize(params) @ImageId = params['ImageId'] @@ -10174,10 +10303,13 @@ @AncestorProcessStartUser = params['AncestorProcessStartUser'] @AncestorProcessUserGroup = params['AncestorProcessUserGroup'] @AncestorProcessPath = params['AncestorProcessPath'] @AncestorProcessParam = params['AncestorProcessParam'] @OperationTime = params['OperationTime'] + @ContainerNetStatus = params['ContainerNetStatus'] + @ContainerNetSubStatus = params['ContainerNetSubStatus'] + @ContainerIsolateOperationSrc = params['ContainerIsolateOperationSrc'] @RequestId = params['RequestId'] end end # DescribeVirusList请求参数结构体 @@ -10194,10 +10326,12 @@ # <li>ContainerId- string - 是否必填:否 - 容器id</li> # <li>ImageName- string - 是否必填:否 - 镜像名称</li> # <li>ImageId- string - 是否必填:否 - 镜像id</li> # <li>IsRealTime- int - 是否必填:否 - 过滤是否实时监控数据</li> # <li>TaskId- string - 是否必填:否 - 任务ID</li> + # <li>ContainerNetStatus - String -是否必填: 否 - 容器网络状态筛选 NORMAL ISOLATED ISOLATING RESTORING RESTORE_FAILED</li> + # <li>TimeRange - string -是否必填: 否 - 时间范围筛选 ["2022-03-31 16:55:00", "2022-03-31 17:00:00"]</li> # @type Filters: Array # @param Order: 排序方式 # @type Order: String # @param By: 排序字段 # @type By: String @@ -10742,14 +10876,36 @@ # 注意:此字段可能返回 null,表示取不到有效值。 # @type NodeIP: String # @param HostID: 主机IP # 注意:此字段可能返回 null,表示取不到有效值。 # @type HostID: String + # @param ContainerNetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerNetStatus: String + # @param ContainerNetSubStatus: 容器子状态 + # "AGENT_OFFLINE" //Agent离线 + # "NODE_DESTROYED" //节点已销毁 + # "CONTAINER_EXITED" //容器已退出 + # "CONTAINER_DESTROYED" //容器已销毁 + # "SHARED_HOST" // 容器与主机共享网络 + # "RESOURCE_LIMIT" //隔离操作资源超限 + # "UNKNOW" // 原因未知 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerNetSubStatus: String + # @param ContainerIsolateOperationSrc: 容器隔离操作来源 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type ContainerIsolateOperationSrc: String - attr_accessor :EventType, :ContainerName, :ImageName, :Status, :EventId, :NodeName, :PodName, :FoundTime, :EventName, :ImageId, :ContainerId, :Solution, :Description, :EventCount, :LatestFoundTime, :NodeIP, :HostID + attr_accessor :EventType, :ContainerName, :ImageName, :Status, :EventId, :NodeName, :PodName, :FoundTime, :EventName, :ImageId, :ContainerId, :Solution, :Description, :EventCount, :LatestFoundTime, :NodeIP, :HostID, :ContainerNetStatus, :ContainerNetSubStatus, :ContainerIsolateOperationSrc - def initialize(eventtype=nil, containername=nil, imagename=nil, status=nil, eventid=nil, nodename=nil, podname=nil, foundtime=nil, eventname=nil, imageid=nil, containerid=nil, solution=nil, description=nil, eventcount=nil, latestfoundtime=nil, nodeip=nil, hostid=nil) + def initialize(eventtype=nil, containername=nil, imagename=nil, status=nil, eventid=nil, nodename=nil, podname=nil, foundtime=nil, eventname=nil, imageid=nil, containerid=nil, solution=nil, description=nil, eventcount=nil, latestfoundtime=nil, nodeip=nil, hostid=nil, containernetstatus=nil, containernetsubstatus=nil, containerisolateoperationsrc=nil) @EventType = eventtype @ContainerName = containername @ImageName = imagename @Status = status @EventId = eventid @@ -10763,10 +10919,13 @@ @Description = description @EventCount = eventcount @LatestFoundTime = latestfoundtime @NodeIP = nodeip @HostID = hostid + @ContainerNetStatus = containernetstatus + @ContainerNetSubStatus = containernetsubstatus + @ContainerIsolateOperationSrc = containerisolateoperationsrc end def deserialize(params) @EventType = params['EventType'] @ContainerName = params['ContainerName'] @@ -10783,10 +10942,13 @@ @Description = params['Description'] @EventCount = params['EventCount'] @LatestFoundTime = params['LatestFoundTime'] @NodeIP = params['NodeIP'] @HostID = params['HostID'] + @ContainerNetStatus = params['ContainerNetStatus'] + @ContainerNetSubStatus = params['ContainerNetSubStatus'] + @ContainerIsolateOperationSrc = params['ContainerIsolateOperationSrc'] end end # 容器逃逸扫描策略开关信息 class EscapeRule < TencentCloud::Common::AbstractModel @@ -10862,10 +11024,14 @@ # <li>VirusName - String - 是否必填:否 - 病毒名称</li> # <li>ContainerName- String - 是否必填:是 - 容器名称</li> # <li>ContainerId- string - 是否必填:否 - 容器id</li> # <li>ImageName- string - 是否必填:否 - 镜像名称</li> # <li>ImageId- string - 是否必填:否 - 镜像id</li> + # <li>IsRealTime- int - 是否必填:否 - 过滤是否实时监控数据</li> + # <li>TaskId- string - 是否必填:否 - 任务ID</li> + # <li>NetStatus - String -是否必填: 否 - 容器网络状态筛选 NORMAL ISOLATED ISOLATING RESTORING RESTORE_FAILED</li> + # <li>TimeRange - string -是否必填: 否 - 时间范围筛选 ["2022-03-31 16:55:00", "2022-03-31 17:00:00"]</li> # @type Filters: Array # @param Order: 排序方式 # @type Order: String # @param By: 排序字段 # @type By: String @@ -12554,29 +12720,35 @@ # @param EventIdSet: 处理事件id # @type EventIdSet: Array # @param Status: 标记事件的状态, # EVENT_DEALED:事件处理 # EVENT_INGNORE":事件忽略 - # EVENT_DEL:事件删除 - # EVENT_ADD_WHITE:事件加白 - # EVENT_PENDING: 事件待处理 + # EVENT_DEL:事件删除 + # EVENT_ADD_WHITE:事件加白 + # EVENT_PENDING: 事件待处理 + # EVENT_ISOLATE_CONTAINER: 隔离容器 + # EVENT_RESOTRE_CONTAINER: 恢复容器 # @type Status: String # @param Remark: 事件备注 # @type Remark: String + # @param AutoIsolate: 是否后续自动隔离相同MD5文件 + # @type AutoIsolate: Boolean - attr_accessor :EventIdSet, :Status, :Remark + attr_accessor :EventIdSet, :Status, :Remark, :AutoIsolate - def initialize(eventidset=nil, status=nil, remark=nil) + def initialize(eventidset=nil, status=nil, remark=nil, autoisolate=nil) @EventIdSet = eventidset @Status = status @Remark = remark + @AutoIsolate = autoisolate end def deserialize(params) @EventIdSet = params['EventIdSet'] @Status = params['Status'] @Remark = params['Remark'] + @AutoIsolate = params['AutoIsolate'] end end # ModifyVirusFileStatus返回参数结构体 class ModifyVirusFileStatusResponse < TencentCloud::Common::AbstractModel @@ -13123,14 +13295,33 @@ # @type EventCount: Integer # @param LatestFoundTime: 最近生成时间 # @type LatestFoundTime: String # @param DstAddress: 目标地址 # @type DstAddress: String + # @param ContainerNetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # @type ContainerNetStatus: String + # @param ContainerNetSubStatus: 容器子状态 + # "AGENT_OFFLINE" //Agent离线 + # "NODE_DESTROYED" //节点已销毁 + # "CONTAINER_EXITED" //容器已退出 + # "CONTAINER_DESTROYED" //容器已销毁 + # "SHARED_HOST" // 容器与主机共享网络 + # "RESOURCE_LIMIT" //隔离操作资源超限 + # "UNKNOW" // 原因未知 + # @type ContainerNetSubStatus: String + # @param ContainerIsolateOperationSrc: 容器隔离操作来源 + # @type ContainerIsolateOperationSrc: String - attr_accessor :ProcessName, :ProcessPath, :ImageId, :ContainerId, :ImageName, :ContainerName, :FoundTime, :Solution, :Description, :Status, :EventId, :Remark, :PProcessName, :EventCount, :LatestFoundTime, :DstAddress + attr_accessor :ProcessName, :ProcessPath, :ImageId, :ContainerId, :ImageName, :ContainerName, :FoundTime, :Solution, :Description, :Status, :EventId, :Remark, :PProcessName, :EventCount, :LatestFoundTime, :DstAddress, :ContainerNetStatus, :ContainerNetSubStatus, :ContainerIsolateOperationSrc - def initialize(processname=nil, processpath=nil, imageid=nil, containerid=nil, imagename=nil, containername=nil, foundtime=nil, solution=nil, description=nil, status=nil, eventid=nil, remark=nil, pprocessname=nil, eventcount=nil, latestfoundtime=nil, dstaddress=nil) + def initialize(processname=nil, processpath=nil, imageid=nil, containerid=nil, imagename=nil, containername=nil, foundtime=nil, solution=nil, description=nil, status=nil, eventid=nil, remark=nil, pprocessname=nil, eventcount=nil, latestfoundtime=nil, dstaddress=nil, containernetstatus=nil, containernetsubstatus=nil, containerisolateoperationsrc=nil) @ProcessName = processname @ProcessPath = processpath @ImageId = imageid @ContainerId = containerid @ImageName = imagename @@ -13143,10 +13334,13 @@ @Remark = remark @PProcessName = pprocessname @EventCount = eventcount @LatestFoundTime = latestfoundtime @DstAddress = dstaddress + @ContainerNetStatus = containernetstatus + @ContainerNetSubStatus = containernetsubstatus + @ContainerIsolateOperationSrc = containerisolateoperationsrc end def deserialize(params) @ProcessName = params['ProcessName'] @ProcessPath = params['ProcessPath'] @@ -13162,10 +13356,13 @@ @Remark = params['Remark'] @PProcessName = params['PProcessName'] @EventCount = params['EventCount'] @LatestFoundTime = params['LatestFoundTime'] @DstAddress = params['DstAddress'] + @ContainerNetStatus = params['ContainerNetStatus'] + @ContainerNetSubStatus = params['ContainerNetSubStatus'] + @ContainerIsolateOperationSrc = params['ContainerIsolateOperationSrc'] end end # 反弹shell白名单信息 class ReverseShellWhiteListBaseInfo < TencentCloud::Common::AbstractModel @@ -13320,14 +13517,33 @@ # @type RuleExist: Boolean # @param EventCount: 事件数量 # @type EventCount: Integer # @param LatestFoundTime: 最近生成时间 # @type LatestFoundTime: String + # @param ContainerNetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # @type ContainerNetStatus: String + # @param ContainerNetSubStatus: 容器子状态 + # "AGENT_OFFLINE" //Agent离线 + # "NODE_DESTROYED" //节点已销毁 + # "CONTAINER_EXITED" //容器已退出 + # "CONTAINER_DESTROYED" //容器已销毁 + # "SHARED_HOST" // 容器与主机共享网络 + # "RESOURCE_LIMIT" //隔离操作资源超限 + # "UNKNOW" // 原因未知 + # @type ContainerNetSubStatus: String + # @param ContainerIsolateOperationSrc: 容器隔离操作来源 + # @type ContainerIsolateOperationSrc: String - attr_accessor :ProcessName, :ProcessPath, :ImageId, :ContainerId, :ImageName, :ContainerName, :FoundTime, :Solution, :Description, :SyscallName, :Status, :EventId, :NodeName, :PodName, :Remark, :RuleExist, :EventCount, :LatestFoundTime + attr_accessor :ProcessName, :ProcessPath, :ImageId, :ContainerId, :ImageName, :ContainerName, :FoundTime, :Solution, :Description, :SyscallName, :Status, :EventId, :NodeName, :PodName, :Remark, :RuleExist, :EventCount, :LatestFoundTime, :ContainerNetStatus, :ContainerNetSubStatus, :ContainerIsolateOperationSrc - def initialize(processname=nil, processpath=nil, imageid=nil, containerid=nil, imagename=nil, containername=nil, foundtime=nil, solution=nil, description=nil, syscallname=nil, status=nil, eventid=nil, nodename=nil, podname=nil, remark=nil, ruleexist=nil, eventcount=nil, latestfoundtime=nil) + def initialize(processname=nil, processpath=nil, imageid=nil, containerid=nil, imagename=nil, containername=nil, foundtime=nil, solution=nil, description=nil, syscallname=nil, status=nil, eventid=nil, nodename=nil, podname=nil, remark=nil, ruleexist=nil, eventcount=nil, latestfoundtime=nil, containernetstatus=nil, containernetsubstatus=nil, containerisolateoperationsrc=nil) @ProcessName = processname @ProcessPath = processpath @ImageId = imageid @ContainerId = containerid @ImageName = imagename @@ -13342,10 +13558,13 @@ @PodName = podname @Remark = remark @RuleExist = ruleexist @EventCount = eventcount @LatestFoundTime = latestfoundtime + @ContainerNetStatus = containernetstatus + @ContainerNetSubStatus = containernetsubstatus + @ContainerIsolateOperationSrc = containerisolateoperationsrc end def deserialize(params) @ProcessName = params['ProcessName'] @ProcessPath = params['ProcessPath'] @@ -13363,10 +13582,13 @@ @PodName = params['PodName'] @Remark = params['Remark'] @RuleExist = params['RuleExist'] @EventCount = params['EventCount'] @LatestFoundTime = params['LatestFoundTime'] + @ContainerNetStatus = params['ContainerNetStatus'] + @ContainerNetSubStatus = params['ContainerNetSubStatus'] + @ContainerIsolateOperationSrc = params['ContainerIsolateOperationSrc'] end end # 高危系统调用白名单信息 class RiskSyscallWhiteListBaseInfo < TencentCloud::Common::AbstractModel @@ -14269,14 +14491,36 @@ # TOO_MANY: 任务过多 # OFFLINE: 离线 # INTERNAL: 服务内部错误 # VALIDATION: 参数非法 # @type SubStatus: String + # @param ContainerNetStatus: 网络状态 + # 未隔离 NORMAL + # 已隔离 ISOLATED + # 隔离中 ISOLATING + # 隔离失败 ISOLATE_FAILED + # 解除隔离中 RESTORING + # 解除隔离失败 RESTORE_FAILED + # @type ContainerNetStatus: String + # @param ContainerNetSubStatus: 容器子状态 + # "AGENT_OFFLINE" //Agent离线 + # "NODE_DESTROYED" //节点已销毁 + # "CONTAINER_EXITED" //容器已退出 + # "CONTAINER_DESTROYED" //容器已销毁 + # "SHARED_HOST" // 容器与主机共享网络 + # "RESOURCE_LIMIT" //隔离操作资源超限 + # "UNKNOW" // 原因未知 + # @type ContainerNetSubStatus: String + # @param ContainerIsolateOperationSrc: 容器隔离操作来源 + # @type ContainerIsolateOperationSrc: String + # @param MD5: md5值 + # 注意:此字段可能返回 null,表示取不到有效值。 + # @type MD5: String - attr_accessor :FileName, :FilePath, :VirusName, :CreateTime, :ModifyTime, :ContainerName, :ContainerId, :ContainerStatus, :ImageName, :ImageId, :Status, :Id, :HarmDescribe, :SuggestScheme, :SubStatus + attr_accessor :FileName, :FilePath, :VirusName, :CreateTime, :ModifyTime, :ContainerName, :ContainerId, :ContainerStatus, :ImageName, :ImageId, :Status, :Id, :HarmDescribe, :SuggestScheme, :SubStatus, :ContainerNetStatus, :ContainerNetSubStatus, :ContainerIsolateOperationSrc, :MD5 - def initialize(filename=nil, filepath=nil, virusname=nil, createtime=nil, modifytime=nil, containername=nil, containerid=nil, containerstatus=nil, imagename=nil, imageid=nil, status=nil, id=nil, harmdescribe=nil, suggestscheme=nil, substatus=nil) + def initialize(filename=nil, filepath=nil, virusname=nil, createtime=nil, modifytime=nil, containername=nil, containerid=nil, containerstatus=nil, imagename=nil, imageid=nil, status=nil, id=nil, harmdescribe=nil, suggestscheme=nil, substatus=nil, containernetstatus=nil, containernetsubstatus=nil, containerisolateoperationsrc=nil, md5=nil) @FileName = filename @FilePath = filepath @VirusName = virusname @CreateTime = createtime @ModifyTime = modifytime @@ -14288,10 +14532,14 @@ @Status = status @Id = id @HarmDescribe = harmdescribe @SuggestScheme = suggestscheme @SubStatus = substatus + @ContainerNetStatus = containernetstatus + @ContainerNetSubStatus = containernetsubstatus + @ContainerIsolateOperationSrc = containerisolateoperationsrc + @MD5 = md5 end def deserialize(params) @FileName = params['FileName'] @FilePath = params['FilePath'] @@ -14306,9 +14554,13 @@ @Status = params['Status'] @Id = params['Id'] @HarmDescribe = params['HarmDescribe'] @SuggestScheme = params['SuggestScheme'] @SubStatus = params['SubStatus'] + @ContainerNetStatus = params['ContainerNetStatus'] + @ContainerNetSubStatus = params['ContainerNetSubStatus'] + @ContainerIsolateOperationSrc = params['ContainerIsolateOperationSrc'] + @MD5 = params['MD5'] end end # 运行时文件查杀任务容器列表信息 class VirusTaskInfo < TencentCloud::Common::AbstractModel