Package security.whisper.javastix.coo.extension.types

Class WindowsProcessExtension.Builder

java.lang.Object
security.whisper.javastix.coo.extension.types.WindowsProcessExtension.Builder
Enclosing class:
WindowsProcessExtension
@NotThreadSafe public static final class WindowsProcessExtension.Builder extends Object
Builds instances of type WindowsProcessExtension. Initialize attributes and then invoke the build() method to create an immutable instance.

Builder is not thread-safe and generally should not be stored in a field or collection, but instead used immediately to create instances.

  • Method Details

    • from

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder from(StixCustomProperties instance)
      Fill a builder with attribute values from the provided security.whisper.javastix.common.StixCustomProperties instance.
      Parameters:
      instance - The instance from which to copy values
      Returns:
      this builder for use in a chained invocation

    • from

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder from(WindowsProcessExtensionExt instance)
      Fill a builder with attribute values from the provided security.whisper.javastix.coo.extension.types.WindowsProcessExtensionExt instance.
      Parameters:
      instance - The instance from which to copy values
      Returns:
      this builder for use in a chained invocation

    • from

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder from(CyberObservableExtensionCommonProperties instance)
      Fill a builder with attribute values from the provided security.whisper.javastix.coo.extension.CyberObservableExtensionCommonProperties instance.
      Parameters:
      instance - The instance from which to copy values
      Returns:
      this builder for use in a chained invocation

    • isAslrEnabled

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder isAslrEnabled(boolean isAslrEnabled)
      Initializes the optional value isAslrEnabled to isAslrEnabled.
      Parameters:
      isAslrEnabled - The value for isAslrEnabled
      Returns:
      this builder for chained invocation

    • isAslrEnabled

      @CanIgnoreReturnValue @JsonPropertyDescription("Specifies whether Address Space Layout Randomization (ASLR) is enabled for the process.") public final WindowsProcessExtension.Builder isAslrEnabled(Optional<Boolean> isAslrEnabled)
      Initializes the optional value isAslrEnabled to isAslrEnabled.
      Parameters:
      isAslrEnabled - The value for isAslrEnabled
      Returns:
      this builder for use in a chained invocation

    • isDepEnabled

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder isDepEnabled(boolean isDepEnabled)
      Initializes the optional value isDepEnabled to isDepEnabled.
      Parameters:
      isDepEnabled - The value for isDepEnabled
      Returns:
      this builder for chained invocation

    • isDepEnabled

      @CanIgnoreReturnValue @JsonPropertyDescription("Specifies whether Data Execution Prevention (DEP) is enabled for the process.") public final WindowsProcessExtension.Builder isDepEnabled(Optional<Boolean> isDepEnabled)
      Initializes the optional value isDepEnabled to isDepEnabled.
      Parameters:
      isDepEnabled - The value for isDepEnabled
      Returns:
      this builder for use in a chained invocation

    • priority

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder priority(String priority)
      Initializes the optional value priority to priority.
      Parameters:
      priority - The value for priority
      Returns:
      this builder for chained invocation

    • priority

      @CanIgnoreReturnValue @JsonPropertyDescription("Specifies the current priority class of the process in Windows.") public final WindowsProcessExtension.Builder priority(Optional<String> priority)
      Initializes the optional value priority to priority.
      Parameters:
      priority - The value for priority
      Returns:
      this builder for use in a chained invocation

    • ownerSid

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder ownerSid(String ownerSid)
      Initializes the optional value ownerSid to ownerSid.
      Parameters:
      ownerSid - The value for ownerSid
      Returns:
      this builder for chained invocation

    • ownerSid

      @CanIgnoreReturnValue @JsonPropertyDescription("Specifies the Security ID (SID) value of the owner of the process.") public final WindowsProcessExtension.Builder ownerSid(Optional<String> ownerSid)
      Initializes the optional value ownerSid to ownerSid.
      Parameters:
      ownerSid - The value for ownerSid
      Returns:
      this builder for use in a chained invocation

    • windowTitle

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder windowTitle(String windowTitle)
      Initializes the optional value windowTitle to windowTitle.
      Parameters:
      windowTitle - The value for windowTitle
      Returns:
      this builder for chained invocation

    • windowTitle

      @CanIgnoreReturnValue @JsonPropertyDescription("Specifies the title of the main window of the process.") public final WindowsProcessExtension.Builder windowTitle(Optional<String> windowTitle)
      Initializes the optional value windowTitle to windowTitle.
      Parameters:
      windowTitle - The value for windowTitle
      Returns:
      this builder for use in a chained invocation

    • putStartupInfo

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder putStartupInfo(String key, String value)
      Put one entry to the startupInfo map.
      Parameters:
      key - The key in the startupInfo map
      value - The associated value in the startupInfo map
      Returns:
      this builder for use in a chained invocation

    • putStartupInfo

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder putStartupInfo(Map.Entry<String,? extends String> entry)
      Put one entry to the startupInfo map. Nulls are not permitted
      Parameters:
      entry - The key and value entry
      Returns:
      this builder for use in a chained invocation

    • startupInfo

      @CanIgnoreReturnValue @JsonPropertyDescription("Specifies the STARTUP_INFO struct used by the process, as a dictionary.") public final WindowsProcessExtension.Builder startupInfo(Map<String,? extends String> entries)
      Sets or replaces all mappings from the specified map as entries for the startupInfo map. Nulls are not permitted
      Parameters:
      entries - The entries that will be added to the startupInfo map
      Returns:
      this builder for use in a chained invocation

    • putAllStartupInfo

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder putAllStartupInfo(Map<String,? extends String> entries)
      Put all mappings from the specified map as entries to startupInfo map. Nulls are not permitted
      Parameters:
      entries - The entries that will be added to the startupInfo map
      Returns:
      this builder for use in a chained invocation

    • type

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder type(String type)
      Initializes the value for the type attribute.
      Parameters:
      type - The value for type (can be null)
      Returns:
      this builder for use in a chained invocation

    • putCustomProperty

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder putCustomProperty(String key, Object value)
      Put one entry to the customProperties map.
      Parameters:
      key - The key in the customProperties map
      value - The associated value in the customProperties map
      Returns:
      this builder for use in a chained invocation

    • putCustomProperty

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder putCustomProperty(Map.Entry<String,? extends Object> entry)
      Put one entry to the customProperties map. Nulls are not permitted
      Parameters:
      entry - The key and value entry
      Returns:
      this builder for use in a chained invocation

    • customProperties

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder customProperties(Map<String,? extends Object> entries)
      Sets or replaces all mappings from the specified map as entries for the customProperties map. Nulls are not permitted
      Parameters:
      entries - The entries that will be added to the customProperties map
      Returns:
      this builder for use in a chained invocation

    • putAllCustomProperties

      @CanIgnoreReturnValue public final WindowsProcessExtension.Builder putAllCustomProperties(Map<String,? extends Object> entries)
      Put all mappings from the specified map as entries to customProperties map. Nulls are not permitted
      Parameters:
      entries - The entries that will be added to the customProperties map
      Returns:
      this builder for use in a chained invocation

    • build

      public WindowsProcessExtension build()
      Builds a new WindowsProcessExtension.
      Returns:
      An immutable instance of WindowsProcessExtension
      Throws:
      IllegalStateException - if any required attributes are missing