diff --git a/java-backstory/proto-google-cloud-backstory/src/main/java/com/google/backstory/UdmProto.java b/java-backstory/proto-google-cloud-backstory/src/main/java/com/google/backstory/UdmProto.java deleted file mode 100644 index 6858b0f4c30d..000000000000 --- a/java-backstory/proto-google-cloud-backstory/src/main/java/com/google/backstory/UdmProto.java +++ /dev/null @@ -1,4295 +0,0 @@ -/* - * Copyright 2026 Google LLC - * - * Licensed under the Apache License, Version 2.0 (the "License"); - * you may not use this file except in compliance with the License. - * You may obtain a copy of the License at - * - * https://www.apache.org/licenses/LICENSE-2.0 - * - * Unless required by applicable law or agreed to in writing, software - * distributed under the License is distributed on an "AS IS" BASIS, - * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - * See the License for the specific language governing permissions and - * limitations under the License. - */ -// Generated by the protocol buffer compiler. DO NOT EDIT! -// NO CHECKED-IN PROTOBUF GENCODE -// source: backstory/udm.proto -// Protobuf Java Version: 4.33.2 - -package com.google.backstory; - -@com.google.protobuf.Generated -public final class UdmProto extends com.google.protobuf.GeneratedFile { - private UdmProto() {} - - static { - com.google.protobuf.RuntimeVersion.validateProtobufGencodeVersion( - com.google.protobuf.RuntimeVersion.RuntimeDomain.PUBLIC, - /* major= */ 4, - /* minor= */ 33, - /* patch= */ 2, - /* suffix= */ "", - "UdmProto"); - } - - public static void registerAllExtensions(com.google.protobuf.ExtensionRegistryLite registry) {} - - public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry registry) { - registerAllExtensions((com.google.protobuf.ExtensionRegistryLite) registry); - } - - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_UDM_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_UDM_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Metadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Metadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Attribute_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Attribute_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Network_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Network_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_ProxyInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_ProxyInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Extensions_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Extensions_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Authentication_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Authentication_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_LinuxUtmp_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_LinuxUtmp_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_WindowsEventLog_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_WindowsEventLog_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_ResourceUsage_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_ResourceUsage_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SystemEventDetails_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SystemEventDetails_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_OutlookMetadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_OutlookMetadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Srum_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Srum_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_UserAssist_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_UserAssist_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Vulnerabilities_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Vulnerabilities_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Vulnerability_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Vulnerability_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Ftp_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Ftp_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Smtp_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Smtp_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Email_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Email_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Process_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Process_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_AnalyticsMetadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_AnalyticsMetadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FindingVariable_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FindingVariable_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_Association_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_Association_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_Association_AssociationAlias_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_Association_AssociationAlias_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_Source_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_Source_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_ProviderMLVerdict_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_ProviderMLVerdict_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_AnalystVerdict_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_AnalystVerdict_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_IoCStats_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_IoCStats_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_VerdictInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_VerdictInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_Verdict_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_Verdict_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_ThreatCollectionItem_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_ThreatCollectionItem_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SecurityResult_VariablesEntry_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SecurityResult_VariablesEntry_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_PeFileMetadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_PeFileMetadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FileMetadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FileMetadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_File_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_File_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_NtfsFileMetadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_NtfsFileMetadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_PrefetchFileMetadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_PrefetchFileMetadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_UsnJournal_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_UsnJournal_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_AppCompatMetadata_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_AppCompatMetadata_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FileMetadataPE_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FileMetadataPE_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FileMetadataPeResourceInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FileMetadataPeResourceInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SignatureInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SignatureInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FileMetadataSignatureInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FileMetadataSignatureInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SignerInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SignerInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FileMetadataCodesign_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FileMetadataCodesign_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_X509_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_X509_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_PDFInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_PDFInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_StringToInt64MapEntry_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_StringToInt64MapEntry_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FileMetadataSection_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FileMetadataSection_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_FileMetadataImports_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_FileMetadataImports_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_ExifInfo_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_ExifInfo_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Prevalence_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Prevalence_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Dns_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Dns_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Dns_Question_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Dns_Question_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Dns_ResourceRecord_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Dns_ResourceRecord_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Dhcp_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Dhcp_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Dhcp_Option_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Dhcp_Option_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Certificate_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Certificate_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Tls_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Tls_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Tls_Client_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Tls_Client_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Tls_Server_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Tls_Server_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Http_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Http_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Browser_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Browser_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Browser_Cookie_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Browser_Cookie_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Hardware_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Hardware_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_PlatformSoftware_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_PlatformSoftware_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Software_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Software_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Asset_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Asset_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_User_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_User_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_TimeOff_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_TimeOff_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Permission_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Permission_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Role_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Role_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Group_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Group_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Registry_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Registry_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_WmiPersistenceItem_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_WmiPersistenceItem_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Location_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Location_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_ScheduledTask_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_ScheduledTask_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_WindowsScheduledTask_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_WindowsScheduledTask_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_WindowsScheduledTask_TaskAction_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_WindowsScheduledTask_TaskAction_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_WindowsScheduledTask_TaskTrigger_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_WindowsScheduledTask_TaskTrigger_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_ScheduledCronTask_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_ScheduledCronTask_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_ScheduledAnacronTask_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_ScheduledAnacronTask_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Volume_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Volume_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Service_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Service_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Resource_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Resource_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Label_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Label_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Cloud_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Cloud_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Artifact_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Artifact_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Tunnels_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Tunnels_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_ArtifactClient_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_ArtifactClient_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Favicon_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Favicon_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_DNSRecord_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_DNSRecord_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_CertSignature_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_CertSignature_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_AuthorityKeyId_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_AuthorityKeyId_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_Extension_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_Extension_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_Subject_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_Subject_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_RSA_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_RSA_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_EC_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_EC_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_PublicKey_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_PublicKey_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_SSLCertificate_Validity_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_SSLCertificate_Validity_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_PopularityRank_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_PopularityRank_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Tracker_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Tracker_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Url_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Url_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Domain_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Domain_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Noun_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Noun_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Investigation_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Investigation_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Tags_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Tags_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_AttackDetails_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_AttackDetails_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_AttackDetails_Tactic_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_AttackDetails_Tactic_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_AttackDetails_Technique_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_AttackDetails_Technique_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_BoolSequence_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_BoolSequence_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_BytesSequence_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_BytesSequence_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_DoubleSequence_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_DoubleSequence_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Int64Sequence_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Int64Sequence_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_Uint64Sequence_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_Uint64Sequence_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_StringSequence_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_StringSequence_fieldAccessorTable; - static final com.google.protobuf.Descriptors.Descriptor - internal_static_google_backstory_GroupedFields_descriptor; - static final com.google.protobuf.GeneratedMessage.FieldAccessorTable - internal_static_google_backstory_GroupedFields_fieldAccessorTable; - - public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() { - return descriptor; - } - - private static com.google.protobuf.Descriptors.FileDescriptor descriptor; - - static { - java.lang.String[] descriptorData = { - "\n" - + "\023backstory/udm.proto\022\020google.backstory\032" - + "\033backstory/data_access.proto\032\033backstory/" - + "entity_risk.proto\032\022backstory/id.proto\032\036g" - + "oogle/protobuf/duration.proto\032\034google/pr" - + "otobuf/struct.proto\032\037google/protobuf/tim" - + "estamp.proto\032\032google/type/interval.proto\032\030google/type/latlng.proto\"\363\004\n" - + "\003UDM\022,\n" - + "\010metadata\030\001 \001(\0132\032.google.backstory.Metadata\022+\n\n" - + "additional\030\002 \001(\0132\027.google.protobuf.Struct\022)\n" - + "\tprincipal\030\003 \001(\0132\026.google.backstory.Noun\022#\n" - + "\003src\030\004 \001(\0132\026.google.backstory.Noun\022&\n" - + "\006target\030\005 \001(\0132\026.google.backstory.Noun\022,\n" - + "\014intermediary\030\006 \003(\0132\026.google.backstory.Noun\022(\n" - + "\010observer\030\007 \001(\0132\026.google.backstory.Noun\022%\n" - + "\005about\030\010 \003(\0132\026.google.backstory.Noun\0229\n" - + "\017security_result\030\t \003(\0132 .google.backstory.SecurityResult\022*\n" - + "\007network\030\n" - + " \001(\0132\031.google.backstory.Network\0220\n\n" - + "extensions\030\013 \001(\0132\034.google.backstory.Extensions\022*\n" - + "\textracted\030\014 \001(\0132\027.google.protobuf.Struct\0225\n" - + "\007grouped\030\r" - + " \001(\0132\037.google.backstory.GroupedFieldsH\000\210\001\001B\n\n" - + "\010_groupedR\003udmR\006entityR\005graph\"\334\'\n" - + "\010Metadata\022\n\n" - + "\002id\030\017 \001(\014\022\026\n" - + "\016product_log_id\030\001 \001(\t\0223\n" - + "\017event_timestamp\030\002 \001(\0132\032.google.protobuf.Timestamp\022V\n" - + "\032event_timestamp_attributes\030\025 \003(\01622.goo" - + "gle.backstory.Metadata.EventTimestampAttribute\0227\n" - + "\023collected_timestamp\030\003 \001(\0132\032.google.protobuf.Timestamp\0226\n" - + "\022ingested_timestamp\030\013 \001(\0132\032.google.protobuf.Timestamp\0228\n\n" - + "event_type\030\004 \001(\0162$.google.backstory.Metadata.EventType\022\023\n" - + "\013vendor_name\030\005 \001(\t\022\024\n" - + "\014product_name\030\006 \001(\t\022\027\n" - + "\017product_version\030\007 \001(\t\022\032\n" - + "\022product_event_type\030\010 \001(\t\022\035\n" - + "\025product_deployment_id\030\016 \001(\t\022\023\n" - + "\013description\030\t \001(\t\022\033\n" - + "\023url_back_to_product\030\n" - + " \001(\t\0221\n" - + "\020ingestion_labels\030\014 \003(\0132\027.google.backstory.Label\022$\n" - + "\004tags\030\r" - + " \001(\0132\026.google.backstory.Tags\022D\n" - + "\020enrichment_state\030\020" - + " \001(\0162*.google.backstory.Metadata.EnrichmentState\022\020\n" - + "\010log_type\030\021 \001(\t\0227\n" - + "\013base_labels\030\022 \001(\0132\".google.backstory.DataAccessLabels\022=\n" - + "\021enrichment_labels\030\023 \001(\0132\".google.backstory.DataAccessLabels\0226\n" - + "\021structured_fields\030\024" - + " \001(\0132\027.google.protobuf.StructB\002\030\001\022\026\n" - + "\016parser_version\030\026 \001(\t\"\203\013\n" - + "\027EventTimestampAttribute\022)\n" - + "%EVENT_TIMESTAMP_ATTRIBUTE_UNSPECIFIED\020\000\022\035\n" - + "\025FILE_LAST_ACCESS_TIME\020\001\032\002\010\001\022\037\n" - + "\027FILE_LAST_MODIFIED_TIME\020\002\032\002\010\001\022&\n" - + "\036FILE_METADATA_LAST_CHANGE_TIME\020\003\032\002\010\001\022\032\n" - + "\022FILE_CREATION_TIME\020\004\032\002\010\001\022\026\n" - + "\016COLLECTED_TIME\020\005\032\002\010\001\022\r" - + "\n" - + "\tCOLLECTED\020\006\022\014\n" - + "\010ACCESSED\020\007\022\013\n" - + "\007CHANGED\020\010\022\013\n" - + "\007CREATED\020\t\022\026\n" - + "\022FILE_NAME_ACCESSED\020\n" - + "\022\025\n" - + "\021FILE_NAME_CHANGED\020\013\022\025\n" - + "\021FILE_NAME_CREATED\020\014\022\033\n" - + "\027FILE_NAME_LAST_ACCESSED\020\r" - + "\022\033\n" - + "\027FILE_NAME_LAST_MODIFIED\020\016\022#\n" - + "\037FILE_NAME_METADATA_LAST_CHANGED\020\017\022\026\n" - + "\022FILE_NAME_MODIFIED\020\020\022\021\n\r" - + "LAST_ACCESSED\020\021\022\021\n\r" - + "LAST_MODIFIED\020\022\022\031\n" - + "\025METADATA_LAST_CHANGED\020\023\022\014\n" - + "\010MODIFIED\020\024\022\t\n" - + "\005ADDED\020\025\022\r\n" - + "\tBACKED_UP\020\026\022\022\n" - + "\016LAST_CONNECTED\020\027\022\013\n" - + "\007DELETED\020\030\022\t\n" - + "\005ENDED\020\031\022\n\n" - + "\006EXITED\020\032\022\013\n" - + "\007EXPIRED\020\033\022\022\n" - + "\016FIRST_ACCESSED\020\034\022\014\n" - + "\010APPEARED\020\035\022\r\n" - + "\tINSTALLED\020\036\022\017\n" - + "\013LAST_ACTIVE\020\037\022\022\n" - + "\016LAST_LOGGED_IN\020 \022\026\n" - + "\022LAST_LOGIN_ATTEMPT\020!\022\025\n" - + "\021LAST_PASSWORD_SET\020\"\022\020\n" - + "\014LAST_PRINTED\020#\022\020\n" - + "\014LAST_RESUMED\020$\022\021\n\r" - + "LAST_EXECUTED\020%\022\r\n" - + "\tLAST_SEEN\020&\022\021\n\r" - + "LAST_SHUTDOWN\020\'\022\020\n" - + "\014LAST_UPDATED\020(\022\r\n" - + "\tLAST_USED\020)\022\020\n" - + "\014LAST_VISITED\020*\022\n\n" - + "\006LINKED\020+\022\025\n" - + "\021METADATA_MODIFIED\020,\022\024\n" - + "\020CONTENT_MODIFIED\020-\022\r\n" - + "\tPURCHASED\020.\022\014\n" - + "\010RECORDED\020/\022\024\n" - + "\020REQUEST_RECEIVED\0200\022\021\n" - + "\r" - + "RESPONSE_SENT\0201\022\024\n" - + "\020SCHEDULED_TO_END\0202\022\026\n" - + "\022SCHEDULED_TO_START\0203\022\010\n" - + "\004SENT\0204\022\013\n" - + "\007STARTED\0205\022\013\n" - + "\007UPDATED\0206\022\r\n" - + "\tVALIDATED\0207\022\023\n" - + "\017MOST_RECENT_RUN\0208\022\014\n" - + "\010NEXT_RUN\0209\022\013\n" - + "\007VISITED\020:\022\022\n" - + "\016TARGET_CREATED\020;\022\022\n" - + "\016VOLUME_CREATED\020<\022\020\n" - + "\014POST_CHECKED\020=\022\020\n" - + "\014SYNCHRONIZED\020>\022\020\n" - + "\014ITEM_CREATED\020?\022\021\n\r" - + "ITEM_MODIFIED\020@\022\027\n" - + "\023DOCUMENT_LAST_SAVED\020A\022\023\n" - + "\017LAST_REGISTERED\020B\022\014\n" - + "\010LAUNCHED\020C\022\021\n\r" - + "FIRST_VISITED\020D\022\016\n\n" - + "FIRST_SEEN\020E\022\016\n\n" - + "DOWNLOADED\020F\"\360\024\n" - + "\tEventType\022\031\n" - + "\025EVENTTYPE_UNSPECIFIED\020\000\022\032\n" - + "\025PROCESS_UNCATEGORIZED\020\220N\022\023\n" - + "\016PROCESS_LAUNCH\020\221N\022\026\n" - + "\021PROCESS_INJECTION\020\222N\022!\n" - + "\034PROCESS_PRIVILEGE_ESCALATION\020\223N\022\030\n" - + "\023PROCESS_TERMINATION\020\224N\022\021\n" - + "\014PROCESS_OPEN\020\225N\022\030\n" - + "\023PROCESS_MODULE_LOAD\020\226N\022\033\n" - + "\026REGISTRY_UNCATEGORIZED\020\370U\022\026\n" - + "\021REGISTRY_CREATION\020\371U\022\032\n" - + "\025REGISTRY_MODIFICATION\020\372U\022\026\n" - + "\021REGISTRY_DELETION\020\373U\022\032\n" - + "\025SETTING_UNCATEGORIZED\020\340]\022\025\n" - + "\020SETTING_CREATION\020\341]\022\031\n" - + "\024SETTING_MODIFICATION\020\342]\022\025\n" - + "\020SETTING_DELETION\020\343]\022\030\n" - + "\023MUTEX_UNCATEGORIZED\020\310e\022\023\n" - + "\016MUTEX_CREATION\020\311e\022\027\n" - + "\022FILE_UNCATEGORIZED\020\260m\022\022\n\r" - + "FILE_CREATION\020\261m\022\022\n\r" - + "FILE_DELETION\020\262m\022\026\n" - + "\021FILE_MODIFICATION\020\263m\022\016\n" - + "\tFILE_READ\020\264m\022\016\n" - + "\tFILE_COPY\020\265m\022\016\n" - + "\tFILE_OPEN\020\266m\022\016\n" - + "\tFILE_MOVE\020\267m\022\016\n" - + "\tFILE_SYNC\020\270m\022\027\n" - + "\022USER_UNCATEGORIZED\020\230u\022\017\n\n" - + "USER_LOGIN\020\231u\022\020\n" - + "\013USER_LOGOUT\020\232u\022\022\n\r" - + "USER_CREATION\020\233u\022\031\n" - + "\024USER_CHANGE_PASSWORD\020\234u\022\034\n" - + "\027USER_CHANGE_PERMISSIONS\020\235u\022\023\n\n" - + "USER_STATS\020\236u\032\002\010\001\022\022\n\r" - + "USER_BADGE_IN\020\237u\022\022\n\r" - + "USER_DELETION\020\240u\022\033\n" - + "\026USER_RESOURCE_CREATION\020\241u\022!\n" - + "\034USER_RESOURCE_UPDATE_CONTENT\020\242u\022%\n" - + " USER_RESOURCE_UPDATE_PERMISSIONS\020\243u\022\027\n" - + "\022USER_COMMUNICATION\020\244u\022\031\n" - + "\024USER_RESOURCE_ACCESS\020\245u\022\033\n" - + "\026USER_RESOURCE_DELETION\020\246u\022\031\n" - + "\023GROUP_UNCATEGORIZED\020\330\263\001\022\024\n" - + "\016GROUP_CREATION\020\331\263\001\022\024\n" - + "\016GROUP_DELETION\020\332\263\001\022\030\n" - + "\022GROUP_MODIFICATION\020\333\263\001\022\031\n" - + "\023EMAIL_UNCATEGORIZED\020\270\224\001\022\027\n" - + "\021EMAIL_TRANSACTION\020\271\224\001\022\031\n" - + "\017EMAIL_URL_CLICK\020\272\224\001\032\002\010\001\022\032\n" - + "\025NETWORK_UNCATEGORIZED\020\200}\022\021\n" - + "\014NETWORK_FLOW\020\201}\022\027\n" - + "\022NETWORK_CONNECTION\020\202}\022\020\n" - + "\013NETWORK_FTP\020\203}\022\021\n" - + "\014NETWORK_DHCP\020\204}\022\020\n" - + "\013NETWORK_DNS\020\205}\022\021\n" - + "\014NETWORK_HTTP\020\206}\022\021\n" - + "\014NETWORK_SMTP\020\207}\022\032\n" - + "\024STATUS_UNCATEGORIZED\020\350\204\001\022\026\n" - + "\020STATUS_HEARTBEAT\020\351\204\001\022\024\n" - + "\016STATUS_STARTUP\020\352\204\001\022\025\n" - + "\017STATUS_SHUTDOWN\020\353\204\001\022\023\n\r" - + "STATUS_UPDATE\020\354\204\001\022\030\n" - + "\022SCAN_UNCATEGORIZED\020\320\214\001\022\017\n" - + "\tSCAN_FILE\020\321\214\001\022 \n" - + "\026SCAN_PROCESS_BEHAVIORS\020\322\214\001\032\002\010\001\022\022\n" - + "\014SCAN_PROCESS\020\323\214\001\022\017\n" - + "\tSCAN_HOST\020\324\214\001\022\024\n" - + "\016SCAN_VULN_HOST\020\325\214\001\022\027\n" - + "\021SCAN_VULN_NETWORK\020\326\214\001\022\022\n" - + "\014SCAN_NETWORK\020\327\214\001\022\"\n" - + "\034SCHEDULED_TASK_UNCATEGORIZED\020\240\234\001\022\035\n" - + "\027SCHEDULED_TASK_CREATION\020\241\234\001\022\035\n" - + "\027SCHEDULED_TASK_DELETION\020\242\234\001\022\033\n" - + "\025SCHEDULED_TASK_ENABLE\020\243\234\001\022\034\n" - + "\026SCHEDULED_TASK_DISABLE\020\244\234\001\022!\n" - + "\033SCHEDULED_TASK_MODIFICATION\020\245\234\001\022$\n" - + "\036SYSTEM_AUDIT_LOG_UNCATEGORIZED\020\210\244\001\022\033\n" - + "\025SYSTEM_AUDIT_LOG_WIPE\020\211\244\001\022\031\n" - + "\023SERVICE_UNSPECIFIED\020\360\253\001\022\026\n" - + "\020SERVICE_CREATION\020\361\253\001\022\026\n" - + "\020SERVICE_DELETION\020\362\253\001\022\023\n\r" - + "SERVICE_START\020\363\253\001\022\022\n" - + "\014SERVICE_STOP\020\364\253\001\022\032\n" - + "\024SERVICE_MODIFICATION\020\365\253\001\022\023\n\r" - + "GENERIC_EVENT\020\240\215\006\022\025\n" - + "\021RESOURCE_CREATION\020\001\022\025\n" - + "\021RESOURCE_DELETION\020\002\022\037\n" - + "\033RESOURCE_PERMISSIONS_CHANGE\020\003\022\021\n\r" - + "RESOURCE_READ\020\004\022\024\n" - + "\020RESOURCE_WRITTEN\020\005\022\034\n" - + "\026DEVICE_FIRMWARE_UPDATE\020\250\303\001\022\032\n" - + "\024DEVICE_CONFIG_UPDATE\020\251\303\001\022\033\n" - + "\025DEVICE_PROGRAM_UPLOAD\020\252\303\001\022\035\n" - + "\027DEVICE_PROGRAM_DOWNLOAD\020\253\303\001\022\034\n" - + "\026ANALYST_UPDATE_VERDICT\020\300\273\001\022\037\n" - + "\031ANALYST_UPDATE_REPUTATION\020\301\273\001\022#\n" - + "\035ANALYST_UPDATE_SEVERITY_SCORE\020\302\273\001\022\033\n" - + "\025ANALYST_UPDATE_STATUS\020\307\273\001\022\031\n" - + "\023ANALYST_ADD_COMMENT\020\310\273\001\022\035\n" - + "\027ANALYST_UPDATE_PRIORITY\020\311\273\001\022\037\n" - + "\031ANALYST_UPDATE_ROOT_CAUSE\020\312\273\001\022\033\n" - + "\025ANALYST_UPDATE_REASON\020\313\273\001\022\037\n" - + "\031ANALYST_UPDATE_RISK_SCORE\020\314\273\001\022\030\n" - + "\022ENTITY_RISK_CHANGE\020\220\313\001\022\'\n" - + "!TRIAGE_AGENT_UPDATE_INVESTIGATION\020\370\322\001\"Q\n" - + "\017EnrichmentState\022 \n" - + "\034ENRICHMENT_STATE_UNSPECIFIED\020\000\022\014\n" - + "\010ENRICHED\020\001\022\016\n\n" - + "UNENRICHED\020\002\"\240\002\n" - + "\tAttribute\022&\n" - + "\005cloud\030\001 \001(\0132\027.google.backstory.Cloud\022\'\n" - + "\006labels\030\002 \003(\0132\027.google.backstory.Label\0222\n" - + "\013permissions\030\301\005 \003(\0132\034.google.backstory.Permission\022%\n" - + "\005roles\030\003 \003(\0132\026.google.backstory.Role\0221\n\r" - + "creation_time\030\004 \001(\0132\032.google.protobuf.Timestamp\0224\n" - + "\020last_update_time\030\005 \001(\0132\032.google.protobuf.Timestamp\"\303\022\n" - + "\007Network\022\022\n\n" - + "sent_bytes\030\001 \001(\004\022\026\n" - + "\016received_bytes\030\002 \001(\004\022\023\n" - + "\013total_bytes\030\033 \001(\003\022\024\n" - + "\014sent_packets\030\026 \001(\003\022\030\n" - + "\020received_packets\030\027 \001(\003\0223\n" - + "\020session_duration\030\r" - + " \001(\0132\031.google.protobuf.Duration\022\022\n\n" - + "session_id\030\016 \001(\t\022\031\n" - + "\021parent_session_id\030\024 \001(\t\022$\n" - + "\034application_protocol_version\030\025 \001(\t\022\024\n" - + "\014community_id\030\017 \001(\t\0226\n" - + "\tdirection\030\014 \001(\0162#.google.backstory.Network.Direction\0229\n" - + "\013ip_protocol\030\003 \001(\0162$.google.backstory.Network.IpProtocol\022\014\n" - + "\004ipv6\030\035 \001(\010\022K\n" - + "\024application_protocol\030\004 \001(\0162-" - + ".google.backstory.Network.ApplicationProtocol\022\"\n" - + "\003ftp\030\005 \001(\0132\025.google.backstory.Ftp\022&\n" - + "\005email\030\006 \001(\0132\027.google.backstory.Email\022\"\n" - + "\003dns\030\007 \001(\0132\025.google.backstory.Dns\022$\n" - + "\004dhcp\030\010 \001(\0132\026.google.backstory.Dhcp\022$\n" - + "\004http\030\t \001(\0132\026.google.backstory.Http\022\"\n" - + "\003tls\030\n" - + " \001(\0132\025.google.backstory.Tls\022$\n" - + "\004smtp\030\013 \001(\0132\026.google.backstory.Smtp\022\013\n" - + "\003asn\030\020 \001(\t\022\022\n\n" - + "dns_domain\030\021 \001(\t\022\024\n" - + "\014carrier_name\030\022 \001(\t\022\031\n" - + "\021organization_name\030\023 \001(\t\022\027\n" - + "\017ip_subnet_range\030\030 \001(\t\022\020\n" - + "\010is_proxy\030\031 \001(\010\022/\n\n" - + "proxy_info\030\032 \001(\0132\033.google.backstory.ProxyInfo\022C\n" - + "\020connection_state\030\034 \001(\0162).google.backstory.Network.ConnectionState\"L\n" - + "\tDirection\022\025\n" - + "\021UNKNOWN_DIRECTION\020\000\022\013\n" - + "\007INBOUND\020\001\022\014\n" - + "\010OUTBOUND\020\002\022\r\n" - + "\tBROADCAST\020\003\"\252\001\n\n" - + "IpProtocol\022\027\n" - + "\023UNKNOWN_IP_PROTOCOL\020\000\022\010\n" - + "\004ICMP\020\001\022\010\n" - + "\004IGMP\020\002\022\007\n" - + "\003TCP\020\006\022\007\n" - + "\003UDP\020\021\022\n\n" - + "\006IP6IN4\020)\022\007\n" - + "\003GRE\020/\022\007\n" - + "\003ESP\0202\022\t\n" - + "\005ICMP6\020:\022\t\n" - + "\005EIGRP\020X\022\013\n" - + "\007ETHERIP\020a\022\007\n" - + "\003PIM\020g\022\010\n" - + "\004VRRP\020p\022\t\n" - + "\004SCTP\020\204\001\"\227\007\n" - + "\023ApplicationProtocol\022 \n" - + "\034UNKNOWN_APPLICATION_PROTOCOL\020\000\022\007\n" - + "\003AFP\020\001\022\010\n" - + "\004APPC\020\002\022\010\n" - + "\004AMQP\020\003\022\010\n" - + "\004ATOM\020\004\022\010\n" - + "\004BEEP\020\005\022\013\n" - + "\007BITCOIN\020\006\022\017\n" - + "\013BIT_TORRENT\020\007\022\010\n" - + "\004CFDP\020\010\022\007\n" - + "\003CIP\020C\022\010\n" - + "\004COAP\020\t\022\010\n" - + "\004COTP\020D\022\n\n" - + "\006DCERPC\020B\022\007\n" - + "\003DDS\020\n" - + "\022\016\n\n" - + "DEVICE_NET\020\013\022\t\n" - + "\004DHCP\020\240\037\022\t\n" - + "\005DICOM\020E\022\010\n" - + "\004DNP3\020F\022\010\n" - + "\003DNS\020\270\027\022\014\n" - + "\010E_DONKEY\020\014\022\010\n" - + "\004ENRP\020\r" - + "\022\016\n\n" - + "FAST_TRACK\020\016\022\n\n" - + "\006FINGER\020\017\022\013\n" - + "\007FREENET\020\020\022\010\n" - + "\004FTAM\020\021\022\t\n" - + "\005GOOSE\020G\022\n\n" - + "\006GOPHER\020\022\022\010\n" - + "\004GRPC\020M\022\007\n" - + "\003HL7\020\023\022\010\n" - + "\004H323\020\024\022\t\n" - + "\004HTTP\020\320\017\022\n\n" - + "\005HTTPS\020\321\017\022\n\n" - + "\006IEC104\020H\022\010\n" - + "\004IRCP\020\025\022\014\n" - + "\010KADEMLIA\020\026\022\010\n" - + "\004KRB5\020A\022\010\n" - + "\004LDAP\020\027\022\007\n" - + "\003LPD\020\030\022\010\n" - + "\004MIME\020\031\022\007\n" - + "\003MMS\020I\022\n\n" - + "\006MODBUS\020\032\022\010\n" - + "\004MQTT\020\033\022\013\n" - + "\007NETCONF\020\034\022\007\n" - + "\003NFS\020\035\022\007\n" - + "\003NIS\020\036\022\010\n" - + "\004NNTP\020\037\022\t\n" - + "\005NTCIP\020 \022\007\n" - + "\003NTP\020!\022\t\n" - + "\005OSCAR\020\"\022\010\n" - + "\004PNRP\020#\022\007\n" - + "\003PTP\020J\022\t\n" - + "\004QUIC\020\350\007\022\007\n" - + "\003RDP\020$\022\010\n" - + "\004RELP\020%\022\007\n" - + "\003RIP\020&\022\n\n" - + "\006RLOGIN\020\'\022\007\n" - + "\003RPC\020(\022\010\n" - + "\004RTMP\020)\022\007\n" - + "\003RTP\020*\022\010\n" - + "\004RTPS\020+\022\010\n" - + "\004RTSP\020,\022\007\n" - + "\003SAP\020-\022\007\n" - + "\003SDP\020.\022\007\n" - + "\003SIP\020/\022\007\n" - + "\003SLP\0200\022\007\n" - + "\003SMB\0201\022\010\n" - + "\004SMTP\0202\022\010\n" - + "\004SNMP\020K\022\010\n" - + "\004SNTP\0203\022\007\n" - + "\003SSH\0204\022\010\n" - + "\004SSMS\0205\022\010\n" - + "\004STYX\0206\022\006\n" - + "\002SV\020L\022\010\n" - + "\004TCAP\0207\022\007\n" - + "\003TDS\0208\022\007\n" - + "\003TOR\0209\022\007\n" - + "\003TSP\020:\022\007\n" - + "\003VTP\020;\022\t\n" - + "\005WHOIS\020<\022\013\n" - + "\007WEB_DAV\020=\022\010\n" - + "\004X400\020>\022\010\n" - + "\004X500\020?\022\010\n" - + "\004XMPP\020@\022\007\n" - + "\003FTP\020N\"\312\001\n" - + "\017ConnectionState\022 \n" - + "\034CONNECTION_STATE_UNSPECIFIED\020\000\022\r\n" - + "\tLISTENING\020\001\022\017\n" - + "\013ESTABLISHED\020\002\022\r\n" - + "\tTIME_WAIT\020\003\022\016\n\n" - + "CLOSE_WAIT\020\004\022\n\n" - + "\006CLOSED\020\005\022\014\n" - + "\010SYN_SENT\020\006\022\020\n" - + "\014SYN_RECEIVED\020\007\022\r\n" - + "\tFIN_WAIT1\020\010\022\r\n" - + "\tFIN_WAIT2\020\t\022\014\n" - + "\010LAST_ACK\020\n" - + "\"\217\002\n" - + "\tProxyInfo\022\021\n" - + "\tanonymous\030\001 \001(\010\022\025\n\r" - + "anonymous_vpn\030\002 \001(\010\022\024\n" - + "\014public_proxy\030\003 \001(\010\022\025\n\r" - + "tor_exit_node\030\004 \001(\010\022\027\n" - + "\017smart_dns_proxy\030\005 \001(\010\022\030\n" - + "\020hosting_provider\030\006 \001(\010\022\026\n" - + "\016vpn_datacenter\030\007 \001(\010\022\031\n" - + "\021residential_proxy\030\010 \001(\010\022\030\n" - + "\020vpn_service_name\030\t \001(\t\022\026\n" - + "\016proxy_over_vpn\030\n" - + " \001(\010\022\023\n" - + "\013relay_proxy\030\013 \001(\010\"\243\004\n\n" - + "Extensions\022.\n" - + "\004auth\030\001 \001(\0132 .google.backstory.Authentication\0220\n" - + "\005vulns\030\002 \001(\0132!.google.backstory.Vulnerabilities\0221\n" - + "\013entity_risk\030\003 \001(\0132\034.google.backstory.EntityRisk\022/\n\n" - + "linux_utmp\030\004 \001(\0132\033.google.backstory.LinuxUtmp\022<\n" - + "\021windows_event_log\030\005 \001(\0132!.google.backstory.WindowsEventLog\0227\n" - + "\016resource_usage\030\006 \001(\0132\037.google.backstory.ResourceUsage\022B\n" - + "\024system_event_details\030\007" - + " \001(\0132$.google.backstory.SystemEventDetails\022;\n" - + "\020outlook_metadata\030\010 \001(\0132!.google.backstory.OutlookMetadata\022$\n" - + "\004srum\030\t \001(\0132\026.google.backstory.Srum\0221\n" - + "\013user_assist\030\n" - + " \001(\0132\034.google.backstory.UserAssist\"\373\006\n" - + "\016Authentication\0227\n" - + "\004type\030\001 \001(\0162).google.backstory.Authentication.AuthType\022=\n" - + "\tmechanism\030\002 \003(\0162*.google.backstory.Authentication.Mechanism\022\024\n" - + "\014auth_details\030\003 \001(\t\0229\n" - + "\007outcome\030\004 \001(\0162(.google.backstory.Authentication.Outcome\"]\n" - + "\010AuthType\022\030\n" - + "\024AUTHTYPE_UNSPECIFIED\020\000\022\013\n" - + "\007MACHINE\020\001\022\007\n" - + "\003SSO\020\002\022\007\n" - + "\003VPN\020\003\022\014\n" - + "\010PHYSICAL\020\004\022\n\n" - + "\006TACACS\020\005\"\204\003\n" - + "\tMechanism\022\031\n" - + "\025MECHANISM_UNSPECIFIED\020\000\022\025\n" - + "\021USERNAME_PASSWORD\020\001\022\007\n" - + "\003OTP\020\002\022\020\n" - + "\014HARDWARE_KEY\020\003\022\t\n" - + "\005LOCAL\020\004\022\n\n" - + "\006REMOTE\020\005\022\026\n" - + "\022REMOTE_INTERACTIVE\020\006\022\023\n" - + "\017MECHANISM_OTHER\020\007\022\020\n" - + "\014BADGE_READER\020\010\022\013\n" - + "\007NETWORK\020\t\022\t\n" - + "\005BATCH\020\n" - + "\022\013\n" - + "\007SERVICE\020\013\022\n\n" - + "\006UNLOCK\020\014\022\026\n" - + "\022NETWORK_CLEAR_TEXT\020\r" - + "\022\023\n" - + "\017NEW_CREDENTIALS\020\016\022\017\n" - + "\013INTERACTIVE\020\017\022\026\n" - + "\022CACHED_INTERACTIVE\020\020\022\035\n" - + "\031CACHED_REMOTE_INTERACTIVE\020\021\022\021\n\r" - + "CACHED_UNLOCK\020\022\022\r\n" - + "\tBIOMETRIC\020\023\022\014\n" - + "\010WEARABLE\020\024\"|\n" - + "\024AuthenticationStatus\022!\n" - + "\035UNKNOWN_AUTHENTICATION_STATUS\020\000\022\n\n" - + "\006ACTIVE\020\001\022\r\n" - + "\tSUSPENDED\020\002\022\031\n" - + "\025NO_ACTIVE_CREDENTIALS\020\003\022\013\n" - + "\007DELETED\020\004\"<\n" - + "\007Outcome\022\027\n" - + "\023OUTCOME_UNSPECIFIED\020\000\022\013\n" - + "\007SUCCESS\020\001\022\013\n" - + "\007FAILURE\020\002\"\205\002\n" - + "\tLinuxUtmp\022;\n" - + "\013record_type\030\001 \001(" - + "\0162&.google.backstory.LinuxUtmp.RecordType\"\272\001\n\n" - + "RecordType\022\033\n" - + "\027RECORD_TYPE_UNSPECIFIED\020\000\022\013\n" - + "\007RUN_LVL\020\001\022\r\n" - + "\tBOOT_TIME\020\002\022\014\n" - + "\010NEW_TIME\020\003\022\014\n" - + "\010OLD_TIME\020\004\022\020\n" - + "\014INIT_PROCESS\020\005\022\021\n\r" - + "LOGIN_PROCESS\020\006\022\020\n" - + "\014USER_PROCESS\020\007\022\020\n" - + "\014DEAD_PROCESS\020\010\022\016\n\n" - + "ACCOUNTING\020\t\"\357\001\n" - + "\017WindowsEventLog\022:\n" - + "\007channel\030\001 \001(\0162).google.backstory.WindowsEventLog.Channel\022\020\n" - + "\010event_id\030\002 \001(\t\022\023\n" - + "\013activity_id\030\003 \001(\t\"y\n" - + "\007Channel\022\027\n" - + "\023CHANNEL_UNSPECIFIED\020\000\022\014\n" - + "\010SECURITY\020\001\022\n\n" - + "\006SYSTEM\020\002\022\017\n" - + "\013APPLICATION\020\003\022\t\n" - + "\005SETUP\020\004\022\024\n" - + "\020FORWARDED_EVENTS\020\005\022\t\n" - + "\005OTHER\020\006\"<\n\r" - + "ResourceUsage\022\023\n" - + "\013used_entity\030\001 \001(\t\022\026\n" - + "\016used_entity_id\030\002 \001(\t\"V\n" - + "\022SystemEventDetails\022\024\n" - + "\014message_type\030\001 \001(\t\022\027\n" - + "\017sender_image_id\030\002 \001(\t\022\021\n" - + "\tsubsystem\030\003 \001(\t\"a\n" - + "\017OutlookMetadata\022\017\n" - + "\007comment\030\001 \001(\t\022\020\n" - + "\010template\030\002 \001(\t\022\r\n" - + "\005title\030\003 \001(\t\022\034\n" - + "\024security_flags_count\030\004 \001(\005\"\233\002\n" - + "\004Srum\022\n\n" - + "\002id\030\001 \001(\t\022\035\n" - + "\025background_bytes_read\030\002 \001(\003\022 \n" - + "\030background_bytes_written\030\003 \001(\003\022#\n" - + "\033background_context_switches\030\004 \001(\003\022\036\n" - + "\026background_cycle_count\030\005 \001(\003\022 \n" - + "\030background_flushes_count\030\006 \001(\003\022\"\n" - + "\032background_read_operations\030\007 \001(\003\022#\n" - + "\033background_write_operations\030\010 \001(\003\022\026\n" - + "\016interface_luid\030\t \001(\t\"\233\001\n\n" - + "UserAssist\022\037\n" - + "\027application_focus_count\030\001 \001(\003\022=\n" - + "\032application_focus_duration\030\002" - + " \001(\0132\031.google.protobuf.Duration\022\030\n" - + "\020executions_count\030\003 \001(\003\022\023\n" - + "\013entry_index\030\004 \001(\003\"O\n" - + "\017Vulnerabilities\022<\n" - + "\017vulnerabilities\030\001" - + " \003(\0132\037.google.backstory.VulnerabilityB\002\020\000\"\217\005\n\r" - + "Vulnerability\022%\n" - + "\005about\030\001 \001(\0132\026.google.backstory.Noun\022\014\n" - + "\004name\030\002 \001(\t\022\023\n" - + "\013description\030\003 \001(\t\022\016\n" - + "\006vendor\030\r" - + " \001(\t\0223\n" - + "\017scan_start_time\030\004 \001(\0132\032.google.protobuf.Timestamp\0221\n\r" - + "scan_end_time\030\005 \001(\0132\032.google.protobuf.Timestamp\022/\n" - + "\013first_found\030\006 \001(\0132\032.google.protobuf.Timestamp\022.\n\n" - + "last_found\030\007 \001(\0132\032.google.protobuf.Timestamp\022:\n" - + "\010severity\030\010 \001(\0162(.google.backstory.Vulnerability.Severity\022\030\n" - + "\020severity_details\030\t \001(\t\022\027\n" - + "\017cvss_base_score\030\n" - + " \001(\002\022\023\n" - + "\013cvss_vector\030\013 \001(\t\022\024\n" - + "\014cvss_version\030\014 \001(\t\022\016\n" - + "\006cve_id\030\016 \001(\t\022\027\n" - + "\017cve_description\030\017 \001(\t\022\037\n" - + "\027vendor_vulnerability_id\030\020 \001(\t\022(\n" - + " vendor_knowledge_base_article_id\030\021 \001(\t\"M\n" - + "\010Severity\022\024\n" - + "\020UNKNOWN_SEVERITY\020\000\022\007\n" - + "\003LOW\020\001\022\n\n" - + "\006MEDIUM\020\002\022\010\n" - + "\004HIGH\020\003\022\014\n" - + "\010CRITICAL\020\004\"\026\n" - + "\003Ftp\022\017\n" - + "\007command\030\001 \001(\t\"\213\001\n" - + "\004Smtp\022\014\n" - + "\004helo\030\001 \001(\t\022\021\n" - + "\tmail_from\030\002 \001(\t\022\017\n" - + "\007rcpt_to\030\003 \003(\t\022\027\n" - + "\017server_response\030\004 \003(\t\022\024\n" - + "\014message_path\030\005 \001(\t\022\022\n\n" - + "is_webmail\030\006 \001(\010\022\016\n" - + "\006is_tls\030\007 \001(\010\"\206\001\n" - + "\005Email\022\014\n" - + "\004from\030\001 \001(\t\022\020\n" - + "\010reply_to\030\002 \001(\t\022\n\n" - + "\002to\030\003 \003(\t\022\n\n" - + "\002cc\030\004 \003(\t\022\013\n" - + "\003bcc\030\005 \003(\t\022\017\n" - + "\007mail_id\030\006 \001(\t\022\017\n" - + "\007subject\030\007 \003(\t\022\026\n" - + "\016bounce_address\030\010 \001(\t\"\364\007\n" - + "\007Process\022\013\n" - + "\003pid\030\001 \001(\t\022\026\n\n" - + "parent_pid\030\002 \001(\tB\002\030\001\0221\n" - + "\016parent_process\030\007 \001(\0132\031.google.backstory.Process\022$\n" - + "\004file\030\003 \001(\0132\026.google.backstory.File\022\024\n" - + "\014command_line\030\004 \001(\t\022\034\n" - + "\024command_line_history\030\t \003(\t\022#\n" - + "\033product_specific_process_id\030\005 \001(\t\022\023\n" - + "\013access_mask\030\010 \001(\004\022\033\n" - + "\023integrity_level_rid\030\013 \001(\004\022\014\n" - + "\004euid\030\014 \001(\t\022\014\n" - + "\004ruid\030\r" - + " \001(\t\022\014\n" - + "\004egid\030\016 \001(\t\022\014\n" - + "\004rgid\030\017 \001(\t\022\014\n" - + "\004pgid\030\020 \001(\t\022\032\n" - + "\022session_leader_pid\030\021 \001(\t\022\013\n" - + "\003tty\030\022 \001(\t\022J\n" - + "\024token_elevation_type\030\n" - + " \001(\0162,.google.backstory.Process.TokenElevationType\022.\n" - + "\"product_specific_parent_process_id\030\006 \001(\tB\002\030\001\022\014\n" - + "\004ipv6\030\023 \001(\010\0222\n" - + "\017kernel_duration\030\024 \001(\0132\031.google.protobuf.Duration\0220\n\r" - + "user_duration\030\025 \001(\0132\031.google.protobuf.Duration\0220\n\r" - + "real_duration\030\026 \001(\0132\031.google.protobuf.Duration\022.\n" - + "\005state\030\027 \001(\0162\037.google.backstory.Process.State\"E\n" - + "\022TokenElevationType\022\013\n" - + "\007UNKNOWN\020\000\022\n\n" - + "\006TYPE_1\020\001\022\n\n" - + "\006TYPE_2\020\002\022\n\n" - + "\006TYPE_3\020\003\"\327\001\n" - + "\005State\022\025\n" - + "\021STATE_UNSPECIFIED\020\000\022\013\n" - + "\007RUNNING\020\001\022\014\n" - + "\010SLEEPING\020\002\022\016\n\n" - + "DISK_SLEEP\020\003\022\013\n" - + "\007STOPPED\020\004\022\020\n" - + "\014TRACING_STOP\020\005\022\n\n" - + "\006ZOMBIE\020\006\022\010\n" - + "\004DEAD\020\007\022\r\n" - + "\tWAKE_KILL\020\010\022\n\n" - + "\006WAKING\020\t\022\n\n" - + "\006PARKED\020\n" - + "\022\010\n" - + "\004IDLE\020\013\022\n\n" - + "\006LOCKED\020\014\022\013\n" - + "\007WAITING\020\r" - + "\022\r\n" - + "\tSUSPENDED\020\016\"%\n" - + "\021AnalyticsMetadata\022\020\n" - + "\010analytic\030\001 \001(\t\"\302\005\n" - + "\017FindingVariable\0224\n" - + "\004type\030\001 \001(\0162&.google.backstory.FindingVariable.Type\022\r\n" - + "\005value\030\002 \001(\t\022\023\n" - + "\013source_path\030\003 \001(\t\022\022\n" - + "\010bool_val\030\004 \001(\010H\000\022\023\n" - + "\tbytes_val\030\005 \001(\014H\000\022\024\n\n" - + "double_val\030\006 \001(\001H\000\022\023\n" - + "\tint64_val\030\007 \001(\003H\000\022\024\n\n" - + "uint64_val\030\010 \001(\004H\000\022\024\n" - + "\n" - + "string_val\030\t \001(\tH\000\0224\n" - + "\016timestamp_time\030\021 \001(\0132\032.google.protobuf.TimestampH\000\022\022\n" - + "\010null_val\030\n" - + " \001(\010H\000\0222\n" - + "\010bool_seq\030\013 \001(\0132\036.google.backstory.BoolSequenceH\000\0224\n" - + "\tbytes_seq\030\014 \001(\0132\037.google.backstory.BytesSequenceH\000\0226\n\n" - + "double_seq\030\r" - + " \001(\0132 .google.backstory.DoubleSequenceH\000\0224\n" - + "\tint64_seq\030\016 \001(\0132\037.google.backstory.Int64SequenceH\000\0226\n\n" - + "uint64_seq\030\017 \001(\0132 .google.backstory.Uint64SequenceH\000\0226\n\n" - + "string_seq\030\020 \001(\0132 .google.backstory.StringSequenceH\000\"4\n" - + "\004Type\022\024\n" - + "\020TYPE_UNSPECIFIED\020\000\022\t\n" - + "\005MATCH\020\001\022\013\n" - + "\007OUTCOME\020\002B\r\n" - + "\013typed_value\"\2652\n" - + "\016SecurityResult\022%\n" - + "\005about\030\001 \001(\0132\026.google.backstory.Noun\022C\n" - + "\010category\030\002" - + " \003(\01621.google.backstory.SecurityResult.SecurityCategory\022\030\n" - + "\020category_details\030\003 \003(\t\022\023\n" - + "\013threat_name\030\004 \001(\t\022\020\n" - + "\010rule_set\030\035 \001(\t\022\035\n" - + "\025rule_set_display_name\030\036 \001(\t\022%\n" - + "\035ruleset_category_display_name\030) \001(\t\022\017\n" - + "\007rule_id\030\020 \001(\t\022\021\n" - + "\trule_name\030\005 \001(\t\022\024\n" - + "\014display_name\0301 \001(\t\022\024\n" - + "\014rule_version\030\024 \001(\t\022\021\n" - + "\trule_type\030\026 \001(\t\022\023\n" - + "\013rule_author\030\031 \001(\t\022,\n" - + "\013rule_labels\030\032 \003(\0132\027.google.backstory.Label\022@\n" - + "\013alert_state\030\025 \001(\0162+.google.backstory.SecurityResult.AlertState\0221\n" - + "\020detection_fields\030\027 \003(\0132\027.google.backstory.Label\022-\n" - + "\010outcomes\030\034 \003(\0132\027.google.backstory.LabelB\002\030\001\022B\n" - + "\tvariables\030, \003(\0132/.google.backstory.SecurityResult.VariablesEntry\022\017\n" - + "\007summary\030\006 \001(\t\022\023\n" - + "\013description\030\007 \001(\t\0227\n" - + "\006action\030\010 \003(\0162\'.google.backstory.SecurityResult.Action\022\026\n" - + "\016action_details\030\023 \001(\t\022B\n" - + "\010severity\030\t" - + " \001(\01620.google.backstory.SecurityResult.ProductSeverity\022F\n\n" - + "confidence\030\n" - + " \001(\01622.google.backstory.SecurityResult.ProductConfidence\022B\n" - + "\010priority\030\013" - + " \001(\01620.google.backstory.SecurityResult.ProductPriority\022\022\n" - + "\n" - + "risk_score\030\037 \001(\002\022\030\n" - + "\020confidence_score\030* \001(\002\022?\n" - + "\022analytics_metadata\030+ \003(\0132#.google.backstory.AnalyticsMetadata\022\030\n" - + "\020severity_details\030\014 \001(\t\022\032\n" - + "\022confidence_details\030\r" - + " \001(\t\022\030\n" - + "\020priority_details\030\016 \001(\t\022\033\n" - + "\023url_back_to_product\030\017 \001(\t\022\021\n" - + "\tthreat_id\030\021 \001(\t\022\030\n" - + "\020threat_feed_name\030\033 \001(\t\022;\n" - + "\023threat_id_namespace\030\030 \001(\0162\036.google.backstory.Id.Namespace\022D\n\r" - + "threat_status\030\022 \001(\0162-.google.backstory.SecurityResult.ThreatStatus\0227\n" - + "\016attack_details\030 \001(\0132\037.google.backstory.AttackDetails\0229\n" - + "\025first_discovered_time\030! \001(\0132\032.google.protobuf.Timestamp\022B\n" - + "\014associations\030\"" - + " \003(\0132,.google.backstory.SecurityResult.Association\022\025\n" - + "\tcampaigns\030# \003(\tB\002\030\001\022\023\n" - + "\007reports\030. \003(\tB\002\030\001\022=\n" - + "\007verdict\030$ \001(\0132(", - ".google.backstory.SecurityResult.VerdictB\002\030\001\0225\n" - + "\021last_updated_time\030% \001(\0132\032.google.protobuf.Timestamp\022B\n" - + "\014verdict_info\030& \003(\0132,.google.backstory.SecurityResult.VerdictInfo\0227\n" - + "\016threat_verdict\030\' \001(\0162\037.google.backstory.ThreatVerdict\0228\n" - + "\024last_discovered_time\030( \001(\0132\032.google.protobuf.Timestamp\022\027\n" - + "\017detection_depth\030/ \001(\003\022Q\n" - + "\022threat_collections\0300" - + " \003(\01325.google.backstory.SecurityResult.ThreatCollectionItem\032\265\006\n" - + "\013Association\022\n\n" - + "\002id\030\001 \001(\t\022\024\n" - + "\014country_code\030\002 \003(\t\022J\n" - + "\004type\030\003" - + " \001(\0162<.google.backstory.SecurityResult.Association.AssociationType\022\014\n" - + "\004name\030\004 \001(\t\022\023\n" - + "\013description\030\005 \001(\t\022\014\n" - + "\004role\030\006 \001(\t\022\032\n" - + "\016source_country\030\007 \001(\tB\002\030\001\022L\n" - + "\005alias\030\010" - + " \003(\0132=.google.backstory.SecurityResult.Association.AssociationAlias\0228\n" - + "\024first_reference_time\030\t \001(\0132\032.google.protobuf.Timestamp\0227\n" - + "\023last_reference_time\030\n" - + " \001(\0132\032.google.protobuf.Timestamp\022\033\n" - + "\023industries_affected\030\013 \003(\t\022G\n" - + "\021associated_actors\030\014 \003" - + "(\0132,.google.backstory.SecurityResult.Association\022/\n" - + "\013region_code\030\r" - + " \001(\0132\032.google.backstory.Location\0222\n" - + "\016sponsor_region\030\016 \001(\0132\032.google.backstory.Location\0224\n" - + "\020targeted_regions\030\017 \003(\0132\032.google.backstory.Location\022\014\n" - + "\004tags\030\020 \003(\t\0321\n" - + "\020AssociationAlias\022\014\n" - + "\004name\030\001 \001(\t\022\017\n" - + "\007company\030\002 \001(\t\"h\n" - + "\017AssociationType\022 \n" - + "\034ASSOCIATION_TYPE_UNSPECIFIED\020\000\022\020\n" - + "\014THREAT_ACTOR\020\001\022\013\n" - + "\007MALWARE\020\002\022\024\n" - + "\020SOFTWARE_TOOLKIT\020\003\032\206\002\n" - + "\006Source\022\014\n" - + "\004name\030\001 \001(\t\022\024\n" - + "\014benign_count\030\002 \001(\005\022\027\n" - + "\017malicious_count\030\003 \001(\005\022C\n" - + "\007quality\030\004" - + " \001(\01622.google.backstory.SecurityResult.ProductConfidence\022\026\n" - + "\016response_count\030\005 \001(\005\022\024\n" - + "\014source_count\030\006 \001(\005\022L\n" - + "\033threat_intelligence_sources\030\007 \003(\0132\'" - + ".google.backstory.SecurityResult.Source\032\376\001\n" - + "\021ProviderMLVerdict\022\027\n" - + "\017source_provider\030\001 \001(\t\022\024\n" - + "\014benign_count\030\002 \001(\005\022\027\n" - + "\017malicious_count\030\003 \001(\005\022\030\n" - + "\020confidence_score\030\004 \001(\005\022A\n" - + "\020mandiant_sources\030\005" - + " \003(\0132\'.google.backstory.SecurityResult.Source\022D\n" - + "\023third_party_sources\030\006" - + " \003(\0132\'.google.backstory.SecurityResult.Source\032\250\001\n" - + "\016AnalystVerdict\022\030\n" - + "\020confidence_score\030\001 \001(\005\0220\n" - + "\014verdict_time\030\002 \001(\0132\032.google.protobuf.Timestamp\022J\n" - + "\020verdict_response\030\003" - + " \001(\01620.google.backstory.SecurityResult.VerdictResponse\032\254\002\n" - + "\010IoCStats\022E\n" - + "\016ioc_stats_type\030\001" - + " \001(\0162-.google.backstory.SecurityResult.IoCStatsType\022\032\n" - + "\022first_level_source\030\002 \001(\t\022\033\n" - + "\023second_level_source\030\003 \001(\t\022\024\n" - + "\014benign_count\030\004 \001(\005\022C\n" - + "\007quality\030\005" - + " \001(\01622.google.backstory.SecurityResult.ProductConfidence\022\027\n" - + "\017malicious_count\030\006 \001(\005\022\026\n" - + "\016response_count\030\007 \001(\005\022\024\n" - + "\014source_count\030\010 \001(\005\032\326\004\n" - + "\013VerdictInfo\022\024\n" - + "\014source_count\030\001 \001(\005\022\026\n" - + "\016response_count\030\002 \001(\005\022\033\n" - + "\023neighbour_influence\030\003 \001(\t\022B\n" - + "\014verdict_type\030\004 " - + "\001(\0162,.google.backstory.SecurityResult.VerdictType\022\027\n" - + "\017source_provider\030\005 \001(\t\022\024\n" - + "\014benign_count\030\006 \001(\005\022\027\n" - + "\017malicious_count\030\007 \001(\005\022\030\n" - + "\020confidence_score\030\010 \001(\005\022<\n" - + "\tioc_stats\030\t \003(\0132).google.backstory.SecurityResult.IoCStats\0220\n" - + "\014verdict_time\030\013 \001(\0132\032.google.protobuf.Timestamp\022J\n" - + "\020verdict_response\030\014" - + " \001(\01620.google.backstory.SecurityResult.VerdictResponse\022\035\n" - + "\025global_customer_count\030\r" - + " \001(\005\022\031\n" - + "\021global_hits_count\030\016 \001(\005\022\013\n" - + "\003pwn\030\017 \001(\010\022\030\n" - + "\020category_details\030\020 \001(\t\0229\n" - + "\025pwn_first_tagged_time\030\021" - + " \001(\0132\032.google.protobuf.Timestamp\032\343\001\n" - + "\007Verdict\022\024\n" - + "\014source_count\030\001 \001(\005\022\026\n" - + "\016response_count\030\002 \001(\005\022\033\n" - + "\023neighbour_influence\030\003 \001(\t\022C\n" - + "\007verdict\030\004 \001(\01322.go" - + "ogle.backstory.SecurityResult.ProviderMLVerdict\022H\n" - + "\017analyst_verdict\030\005 \001(\0132/.googl" - + "e.backstory.SecurityResult.AnalystVerdict\032z\n" - + "\024ThreatCollectionItem\022\n\n" - + "\002id\030\001 \001(\t\022C\n" - + "\004type\030\002" - + " \001(\01625.google.backstory.SecurityResult.ThreatCollectionType\022\021\n" - + "\talt_names\030\003 \003(\t\032S\n" - + "\016VariablesEntry\022\013\n" - + "\003key\030\001 \001(\t\0220\n" - + "\005value\030\002 \001(\0132!.google.backstory.FindingVariable:\0028\001\"N\n" - + "\017VerdictResponse\022 \n" - + "\034VERDICT_RESPONSE_UNSPECIFIED\020\000\022\r\n" - + "\tMALICIOUS\020\001\022\n" - + "\n" - + "\006BENIGN\020\002\"\200\001\n" - + "\014IoCStatsType\022\036\n" - + "\032UNSPECIFIED_IOC_STATS_TYPE\020\000\022\024\n" - + "\020MANDIANT_SOURCES\020\001\022\027\n" - + "\023THIRD_PARTY_SOURCES\020\002\022!\n" - + "\035THREAT_INTELLIGENCE_IOC_STATS\020\003\"Y\n" - + "\013VerdictType\022\034\n" - + "\030VERDICT_TYPE_UNSPECIFIED\020\000\022\027\n" - + "\023PROVIDER_ML_VERDICT\020\001\022\023\n" - + "\017ANALYST_VERDICT\020\002\"\256\004\n" - + "\020SecurityCategory\022\024\n" - + "\020UNKNOWN_CATEGORY\020\000\022\027\n" - + "\022SOFTWARE_MALICIOUS\020\220N\022\030\n" - + "\023SOFTWARE_SUSPICIOUS\020\364N\022\021\n" - + "\014SOFTWARE_PUA\020\330O\022\027\n" - + "\021NETWORK_MALICIOUS\020\240\234\001\022\030\n" - + "\022NETWORK_SUSPICIOUS\020\204\235\001\022!\n" - + "\033NETWORK_CATEGORIZED_CONTENT\020\350\235\001\022\037\n" - + "\031NETWORK_DENIAL_OF_SERVICE\020\314\236\001\022\023\n\r" - + "NETWORK_RECON\020\260\237\001\022!\n" - + "\033NETWORK_COMMAND_AND_CONTROL\020\224\240\001\022\023\n\r" - + "ACL_VIOLATION\020\260\352\001\022\024\n" - + "\016AUTH_VIOLATION\020\300\270\002\022\r\n" - + "\007EXPLOIT\020\320\206\003\022\027\n" - + "\021DATA_EXFILTRATION\020\340\324\003\022\022\n" - + "\014DATA_AT_REST\020\304\325\003\022\026\n" - + "\020DATA_DESTRUCTION\020\250\326\003\022\023\n\r" - + "TOR_EXIT_NODE\020\214\327\003\022\017\n" - + "\tMAIL_SPAM\020\360\242\004\022\023\n\r" - + "MAIL_PHISHING\020\324\243\004\022\023\n\r" - + "MAIL_SPOOFING\020\270\244\004\022\026\n" - + "\020POLICY_VIOLATION\020\200\361\004\022\030\n" - + "\022SOCIAL_ENGINEERING\020\221\277\005\022\016\n" - + "\010PHISHING\020\222\277\005\"=\n\n" - + "AlertState\022\017\n" - + "\013UNSPECIFIED\020\000\022\020\n" - + "\014NOT_ALERTING\020\001\022\014\n" - + "\010ALERTING\020\002\"x\n" - + "\006Action\022\022\n" - + "\016UNKNOWN_ACTION\020\000\022\t\n" - + "\005ALLOW\020\001\022\t\n" - + "\005BLOCK\020\002\022\033\n" - + "\027ALLOW_WITH_MODIFICATION\020\003\022\016\n\n" - + "QUARANTINE\020\004\022\010\n" - + "\004FAIL\020\005\022\r\n" - + "\tCHALLENGE\020\006\"\201\001\n" - + "\017ProductSeverity\022\024\n" - + "\020UNKNOWN_SEVERITY\020\000\022\021\n\r" - + "INFORMATIONAL\020d\022\n\n" - + "\005ERROR\020\226\001\022\010\n" - + "\004NONE\020e\022\010\n" - + "\003LOW\020\310\001\022\013\n" - + "\006MEDIUM\020\254\002\022\t\n" - + "\004HIGH\020\220\003\022\r\n" - + "\010CRITICAL\020\364\003\"n\n" - + "\021ProductConfidence\022\026\n" - + "\022UNKNOWN_CONFIDENCE\020\000\022\023\n" - + "\016LOW_CONFIDENCE\020\310\001\022\026\n" - + "\021MEDIUM_CONFIDENCE\020\254\002\022\024\n" - + "\017HIGH_CONFIDENCE\020\220\003\"d\n" - + "\017ProductPriority\022\024\n" - + "\020UNKNOWN_PRIORITY\020\000\022\021\n" - + "\014LOW_PRIORITY\020\310\001\022\024\n" - + "\017MEDIUM_PRIORITY\020\254\002\022\022\n\r" - + "HIGH_PRIORITY\020\220\003\"Z\n" - + "\014ThreatStatus\022\035\n" - + "\031THREAT_STATUS_UNSPECIFIED\020\000\022\n\n" - + "\006ACTIVE\020\001\022\013\n" - + "\007CLEARED\020\002\022\022\n" - + "\016FALSE_POSITIVE\020\003\"X\n" - + "\024ThreatCollectionType\022&\n" - + "\"THREAT_COLLECTION_TYPE_UNSPECIFIED\020\000\022\014\n" - + "\010CAMPAIGN\020\001\022\n\n" - + "\006REPORT\020\002\"%\n" - + "\016PeFileMetadata\022\023\n" - + "\013import_hash\030\001 \001(\t\"@\n" - + "\014FileMetadata\0220\n" - + "\002pe\030\001 \001(\0132 .google.backstory.PeFileMetadataB\002\030\001\"\317*\n" - + "\004File\022\016\n" - + "\006sha256\030\001 \001(\t\022\013\n" - + "\003md5\030\002 \001(\t\022\014\n" - + "\004sha1\030\003 \001(\t\022\014\n" - + "\004size\030\004 \001(\004\022\021\n" - + "\tfull_path\030\005 \001(\t\022\021\n" - + "\tmime_type\030\006 \001(\t\0229\n\r" - + "file_metadata\030\007 \001(\0132\036.google.backstory.FileMetadataB\002\030\001\0229\n" - + "\017security_result\030$ \001(\0132 .google.backstory.SecurityResult\0221\n" - + "\007pe_file\030\010 \001(\0132 .google.backstory.FileMetadataPE\022\016\n" - + "\006ssdeep\030\t \001(\t\022\r\n" - + "\005vhash\030\n" - + " \001(\t\022\021\n" - + "\005ahash\030\013 \001(\tB\002\030\001\022\024\n" - + "\014authentihash\030\024 \001(\t\022\017\n" - + "\007symhash\030) \001(\t\022F\n" - + "\026prefetch_file_metadata\030+" - + " \001(\0132&.google.backstory.PrefetchFileMetadata\0222\n" - + "\tfile_type\030\014 \001(\0162\037.google.backstory.File.FileType\022\031\n" - + "\021capabilities_tags\030\r" - + " \003(\t\022\r\n" - + "\005names\030\016 \003(\t\022\014\n" - + "\004tags\030\033 \003(\t\022:\n" - + "\026last_modification_time\030\017 \001(\0132\032.google.protobuf.Timestamp\022/\n" - + "\013create_time\030\' \001(\0132\032.google.protobuf.Timestamp\0224\n" - + "\020last_access_time\030( \001(\0132\032.google.protobuf.Timestamp\0220\n\n" - + "prevalence\030\020 \001(\0132\034.google.backstory.Prevalence\0223\n" - + "\017first_seen_time\030\021 \001(\0132\032.google.protobuf.Timestamp\0222\n" - + "\016last_seen_time\030\022 \001(\0132\032.google.protobuf.Timestamp\022\021\n" - + "\tstat_mode\030\025 \001(\004\022\022\n\n" - + "stat_inode\030\026 \001(\004\022\020\n" - + "\010stat_dev\030\027 \001(\004\022\022\n\n" - + "stat_nlink\030\030 \001(\004\022\022\n\n" - + "stat_flags\030\031 \001(\r" - + "\0226\n" - + "\022last_analysis_time\030\032 \001(\0132\032.google.protobuf.Timestamp\022\025\n\r" - + "embedded_urls\030\034 \003(\t\022\030\n" - + "\020embedded_domains\030\035 \003(\t\022\024\n" - + "\014embedded_ips\030\036 \003(\t\022-\n" - + "\texif_info\030\037 \001(\0132\032.google.backstory.ExifInfo\0227\n" - + "\016signature_info\030 \001(\0132\037.google.backstory.SignatureInfo\022+\n" - + "\010pdf_info\030! \001(\0132\031.google.backstory.PDFInfo\0229\n" - + "\025first_submission_time\030\" \001(\0132\032.google.protobuf.Timestamp\0228\n" - + "\024last_submission_time\030# \001(\0132\032.google.protobuf.Timestamp\022,\n" - + "\tmain_icon\030% \001(\0132\031.google.backstory.Favicon\0220\n" - + "\004ntfs\030& \001(\0132\".google.backstory.NtfsFileMetadata\022=\n" - + "\020app_compat_cache\030* \001(\0132#.google.backstory.AppCompatMetadata\"\352\036\n" - + "\010FileType\022\031\n" - + "\025FILE_TYPE_UNSPECIFIED\020\000\022\024\n" - + "\020FILE_TYPE_PE_EXE\020\001\022\024\n" - + "\020FILE_TYPE_PE_DLL\020\002\022\021\n\r" - + "FILE_TYPE_MSI\020\003\022\024\n" - + "\020FILE_TYPE_NE_EXE\020\n" - + "\022\024\n" - + "\020FILE_TYPE_NE_DLL\020\013\022\025\n" - + "\021FILE_TYPE_DOS_EXE\020\024\022\025\n" - + "\021FILE_TYPE_DOS_COM\020\025\022\022\n" - + "\016FILE_TYPE_COFF\020\036\022\021\n\r" - + "FILE_TYPE_ELF\020\037\022\032\n" - + "\026FILE_TYPE_LINUX_KERNEL\020 \022\021\n\r" - + "FILE_TYPE_RPM\020!\022\023\n" - + "\017FILE_TYPE_LINUX\020\"\022\024\n" - + "\020FILE_TYPE_MACH_O\020#\022\033\n" - + "\027FILE_TYPE_JAVA_BYTECODE\020$\022\021\n\r" - + "FILE_TYPE_DMG\020%\022\021\n\r" - + "FILE_TYPE_DEB\020&\022\021\n\r" - + "FILE_TYPE_PKG\020\'\022\021\n\r" - + "FILE_TYPE_PYC\020(\022\021\n\r" - + "FILE_TYPE_LNK\0202\022\033\n" - + "\027FILE_TYPE_DESKTOP_ENTRY\0203\022\022\n" - + "\016FILE_TYPE_JPEG\020d\022\022\n" - + "\016FILE_TYPE_TIFF\020e\022\021\n\r" - + "FILE_TYPE_GIF\020f\022\021\n\r" - + "FILE_TYPE_PNG\020g\022\021\n\r" - + "FILE_TYPE_BMP\020h\022\022\n" - + "\016FILE_TYPE_GIMP\020i\022\027\n" - + "\023FILE_TYPE_IN_DESIGN\020j\022\021\n\r" - + "FILE_TYPE_PSD\020k\022\023\n" - + "\017FILE_TYPE_TARGA\020l\022\021\n\r" - + "FILE_TYPE_XWD\020m\022\021\n\r" - + "FILE_TYPE_DIB\020n\022\021\n\r" - + "FILE_TYPE_JNG\020o\022\021\n\r" - + "FILE_TYPE_ICO\020p\022\021\n\r" - + "FILE_TYPE_FPX\020q\022\021\n\r" - + "FILE_TYPE_EPS\020r\022\021\n\r" - + "FILE_TYPE_SVG\020s\022\021\n\r" - + "FILE_TYPE_EMF\020t\022\022\n" - + "\016FILE_TYPE_WEBP\020u\022\021\n\r" - + "FILE_TYPE_DWG\020v\022\021\n\r" - + "FILE_TYPE_DXF\020w\022\025\n" - + "\021FILE_TYPE_THREEDS\020x\022\022\n\r" - + "FILE_TYPE_OGG\020\226\001\022\022\n\r" - + "FILE_TYPE_FLC\020\227\001\022\022\n\r" - + "FILE_TYPE_FLI\020\230\001\022\022\n\r" - + "FILE_TYPE_MP3\020\231\001\022\023\n" - + "\016FILE_TYPE_FLAC\020\232\001\022\022\n\r" - + "FILE_TYPE_WAV\020\233\001\022\023\n" - + "\016FILE_TYPE_MIDI\020\234\001\022\022\n\r" - + "FILE_TYPE_AVI\020\235\001\022\023\n" - + "\016FILE_TYPE_MPEG\020\236\001\022\030\n" - + "\023FILE_TYPE_QUICKTIME\020\237\001\022\022\n\r" - + "FILE_TYPE_ASF\020\240\001\022\023\n" - + "\016FILE_TYPE_DIVX\020\241\001\022\022\n\r" - + "FILE_TYPE_FLV\020\242\001\022\022\n\r" - + "FILE_TYPE_WMA\020\243\001\022\022\n\r" - + "FILE_TYPE_WMV\020\244\001\022\021\n" - + "\014FILE_TYPE_RM\020\245\001\022\022\n\r" - + "FILE_TYPE_MOV\020\246\001\022\022\n\r" - + "FILE_TYPE_MP4\020\247\001\022\023\n" - + "\016FILE_TYPE_T3GP\020\250\001\022\023\n" - + "\016FILE_TYPE_WEBM\020\251\001\022\022\n\r" - + "FILE_TYPE_MKV\020\252\001\022\022\n\r" - + "FILE_TYPE_PDF\020\310\001\022\021\n" - + "\014FILE_TYPE_PS\020\311\001\022\022\n\r" - + "FILE_TYPE_DOC\020\312\001\022\023\n" - + "\016FILE_TYPE_DOCX\020\313\001\022\022\n\r" - + "FILE_TYPE_PPT\020\314\001\022\023\n" - + "\016FILE_TYPE_PPTX\020\315\001\022\022\n\r" - + "FILE_TYPE_XLS\020\316\001\022\023\n" - + "\016FILE_TYPE_XLSX\020\317\001\022\022\n\r" - + "FILE_TYPE_RTF\020\320\001\022\023\n" - + "\016FILE_TYPE_PPSX\020\321\001\022\022\n\r" - + "FILE_TYPE_ODP\020\372\001\022\022\n\r" - + "FILE_TYPE_ODS\020\373\001\022\022\n\r" - + "FILE_TYPE_ODT\020\374\001\022\022\n\r" - + "FILE_TYPE_HWP\020\375\001\022\022\n\r" - + "FILE_TYPE_GUL\020\376\001\022\022\n\r" - + "FILE_TYPE_ODF\020\377\001\022\022\n\r" - + "FILE_TYPE_ODG\020\200\002\022\027\n" - + "\022FILE_TYPE_ONE_NOTE\020\201\002\022\024\n" - + "\017FILE_TYPE_OOXML\020\202\002\022\022\n\r" - + "FILE_TYPE_SLK\020\203\002\022\024\n" - + "\017FILE_TYPE_EBOOK\020\204\002\022\024\n" - + "\017FILE_TYPE_LATEX\020\205\002\022\022\n\r" - + "FILE_TYPE_TTF\020\206\002\022\022\n\r" - + "FILE_TYPE_EOT\020\207\002\022\023\n" - + "\016FILE_TYPE_WOFF\020\210\002\022\022\n\r" - + "FILE_TYPE_CHM\020\211\002\022\022\n\r" - + "FILE_TYPE_ZIP\020\254\002\022\023\n" - + "\016FILE_TYPE_GZIP\020\255\002\022\023\n" - + "\016FILE_TYPE_BZIP\020\256\002\022\023\n" - + "\016FILE_TYPE_RZIP\020\257\002\022\023\n" - + "\016FILE_TYPE_DZIP\020\260\002\022\027\n" - + "\022FILE_TYPE_SEVENZIP\020\261\002\022\022\n\r" - + "FILE_TYPE_CAB\020\262\002\022\022\n\r" - + "FILE_TYPE_JAR\020\263\002\022\022\n\r" - + "FILE_TYPE_RAR\020\264\002\022\031\n" - + "\024FILE_TYPE_MSCOMPRESS\020\265\002\022\022\n\r" - + "FILE_TYPE_ACE\020\266\002\022\022\n\r" - + "FILE_TYPE_ARC\020\267\002\022\022\n\r" - + "FILE_TYPE_ARJ\020\270\002\022\022\n\r" - + "FILE_TYPE_ASD\020\271\002\022\030\n" - + "\023FILE_TYPE_BLACKHOLE\020\272\002\022\022\n\r" - + "FILE_TYPE_KGB\020\273\002\022\023\n" - + "\016FILE_TYPE_ZLIB\020\274\002\022\022\n\r" - + "FILE_TYPE_TAR\020\275\002\022\022\n\r" - + "FILE_TYPE_ZST\020\276\002\022\024\n" - + "\017FILE_TYPE_LZFSE\020\277\002\022\031\n" - + "\024FILE_TYPE_PYTHON_WHL\020\300\002\022\031\n" - + "\024FILE_TYPE_PYTHON_PKG\020\301\002\022\023\n" - + "\016FILE_TYPE_MSIX\020\302\002\022\023\n" - + "\016FILE_TYPE_TEXT\020\220\003\022\025\n" - + "\020FILE_TYPE_SCRIPT\020\221\003\022\022\n\r" - + "FILE_TYPE_PHP\020\222\003\022\025\n" - + "\020FILE_TYPE_PYTHON\020\223\003\022\023\n" - + "\016FILE_TYPE_PERL\020\224\003\022\023\n" - + "\016FILE_TYPE_RUBY\020\225\003\022\020\n" - + "\013FILE_TYPE_C\020\226\003\022\022\n\r" - + "FILE_TYPE_CPP\020\227\003\022\023\n" - + "\016FILE_TYPE_JAVA\020\230\003\022\032\n" - + "\025FILE_TYPE_SHELLSCRIPT\020\231\003\022\025\n" - + "\020FILE_TYPE_PASCAL\020\232\003\022\022\n\r" - + "FILE_TYPE_AWK\020\233\003\022\025\n" - + "\020FILE_TYPE_DYALOG\020\234\003\022\026\n" - + "\021FILE_TYPE_FORTRAN\020\235\003\022\031\n" - + "\024FILE_TYPE_JAVASCRIPT\020\236\003\022\031\n" - + "\024FILE_TYPE_POWERSHELL\020\237\003\022\022\n\r" - + "FILE_TYPE_VBA\020\240\003\022\021\n" - + "\014FILE_TYPE_M4\020\241\003\022\030\n" - + "\023FILE_TYPE_OBJETIVEC\020\242\003\022\023\n" - + "\016FILE_TYPE_JMOD\020\243\003\022\027\n" - + "\022FILE_TYPE_MAKEFILE\020\244\003\022\022\n\r" - + "FILE_TYPE_INI\020\245\003\022\022\n\r" - + "FILE_TYPE_CLJ\020\246\003\022\022\n\r" - + "FILE_TYPE_PDB\020\251\003\022\022\n\r" - + "FILE_TYPE_SQL\020\252\003\022\023\n" - + "\016FILE_TYPE_NEKO\020\253\003\022\022\n\r" - + "FILE_TYPE_WER\020\254\003\022\025\n" - + "\020FILE_TYPE_GOLANG\020\255\003\022\022\n\r" - + "FILE_TYPE_M3U\020\256\003\022\022\n\r" - + "FILE_TYPE_BAT\020\257\003\022\022\n\r" - + "FILE_TYPE_MSC\020\260\003\022\022\n\r" - + "FILE_TYPE_RDP\020\261\003\022\026\n" - + "\021FILE_TYPE_SYMBIAN\020\364\003\022\025\n" - + "\020FILE_TYPE_PALMOS\020\365\003\022\024\n" - + "\017FILE_TYPE_WINCE\020\366\003\022\026\n" - + "\021FILE_TYPE_ANDROID\020\367\003\022\025\n" - + "\020FILE_TYPE_IPHONE\020\370\003\022\023\n" - + "\016FILE_TYPE_HTML\020\330\004\022\022\n\r" - + "FILE_TYPE_XML\020\331\004\022\022\n\r" - + "FILE_TYPE_SWF\020\332\004\022\022\n\r" - + "FILE_TYPE_FLA\020\333\004\022\025\n" - + "\020FILE_TYPE_COOKIE\020\334\004\022\026\n" - + "\021FILE_TYPE_TORRENT\020\335\004\022\031\n" - + "\024FILE_TYPE_EMAIL_TYPE\020\336\004\022\026\n" - + "\021FILE_TYPE_OUTLOOK\020\337\004\022\023\n" - + "\016FILE_TYPE_SGML\020\340\004\022\023\n" - + "\016FILE_TYPE_JSON\020\341\004\022\022\n\r" - + "FILE_TYPE_CSV\020\342\004\022\022\n\r" - + "FILE_TYPE_HTA\020\343\004\022 \n" - + "\033FILE_TYPE_INTERNET_SHORTCUT\020\344\004\022\022\n\r" - + "FILE_TYPE_CAP\020\274\005\022\027\n" - + "\022FILE_TYPE_ISOIMAGE\020\240\006\022\027\n" - + "\022FILE_TYPE_SQUASHFS\020\241\006\022\022\n\r" - + "FILE_TYPE_VHD\020\242\006\022\024\n" - + "\017FILE_TYPE_APPLE\020\350\007\022\030\n" - + "\023FILE_TYPE_MACINTOSH\020\351\007\022\032\n" - + "\025FILE_TYPE_APPLESINGLE\020\352\007\022\032\n" - + "\025FILE_TYPE_APPLEDOUBLE\020\353\007\022\034\n" - + "\027FILE_TYPE_MACINTOSH_HFS\020\354\007\022\032\n" - + "\025FILE_TYPE_APPLE_PLIST\020\355\007\022\034\n" - + "\027FILE_TYPE_MACINTOSH_LIB\020\356\007\022\032\n" - + "\025FILE_TYPE_APPLESCRIPT\020\357\007\022#\n" - + "\036FILE_TYPE_APPLESCRIPT_COMPILED\020\360\007\022\022\n\r" - + "FILE_TYPE_CRX\020\314\010\022\022\n\r" - + "FILE_TYPE_XPI\020\315\010\022\022\n\r" - + "FILE_TYPE_ROM\020\260\t\022\022\n\r" - + "FILE_TYPE_IPS\020\261\t\022\022\n\r" - + "FILE_TYPE_PEM\020\224\n" - + "\022\022\n\r" - + "FILE_TYPE_PGP\020\225\n" - + "\022\022\n\r" - + "FILE_TYPE_CRT\020\226\n" - + "\"\336\002\n" - + "\020NtfsFileMetadata\022/\n" - + "\013change_time\030\001 \001(\0132\032.google.protobuf.Timestamp\0228\n" - + "\024filename_create_time\030\002 \001(\0132\032.google.protobuf.Timestamp\0228\n" - + "\024filename_modify_time\030\003 \001(\0132\032.google.protobuf.Timestamp\0228\n" - + "\024filename_access_time\030\004 \001(\0132\032.google.protobuf.Timestamp\0228\n" - + "\024filename_change_time\030\005 \001(\0132\032.google.protobuf.Timestamp\0221\n" - + "\013usn_journal\030\006 \003(\0132\034.google.backstory.UsnJournal\"@\n" - + "\024PrefetchFileMetadata\022\021\n" - + "\trun_count\030\001 \001(\003\022\025\n\r" - + "prefetch_hash\030\002 \001(\t\"\274\t\n\n" - + "UsnJournal\022\027\n" - + "\017attributes_flag\030\001 \001(\t\022>\n\n" - + "attributes\030\002" - + " \001(\0162&.google.backstory.UsnJournal.AttributeB\002\030\001\022?\n" - + "\017file_attributes\030\005" - + " \003(\0162&.google.backstory.UsnJournal.Attribute\022\021\n" - + "\tallocated\030\003 \001(\010\0227\n" - + "\006reason\030\004 \001(\0162#.google.backstory.UsnJournal.ReasonB\002\030\001\0224\n" - + "\007reasons\030\006 \003(\0162#.google.backstory.UsnJournal.Reason\"\241\003\n" - + "\tAttribute\022\031\n" - + "\025ATTRIBUTE_UNSPECIFIED\020\000\022\r\n" - + "\tREAD_ONLY\020\001\022\n\n" - + "\006HIDDEN\020\002\022\n\n" - + "\006SYSTEM\020\003\022\013\n" - + "\007ARCHIVE\020\004\022\016\n\n" - + "COMPRESSED\020\005\022\r\n" - + "\tENCRYPTED\020\006\022\r\n" - + "\tDIRECTORY\020\007\022\n\n" - + "\006DEVICE\020\010\022\n\n" - + "\006NORMAL\020\t\022\r\n" - + "\tTEMPORARY\020\n" - + "\022\017\n" - + "\013SPARSE_FILE\020\013\022\021\n\r" - + "REPARSE_POINT\020\014\022\013\n" - + "\007OFFLINE\020\r" - + "\022\027\n" - + "\023NOT_CONTENT_INDEXED\020\016\022\033\n" - + "\023NON_CONTENT_INDEXED\020\016\032\002\010\001\022\024\n" - + "\020INTEGRITY_STREAM\020\017\022\013\n" - + "\007VIRTUAL\020\020\022\021\n\r" - + "NO_SCRUB_DATA\020\021\022\006\n" - + "\002EA\020\022\022\n\n" - + "\006PINNED\020\023\022\014\n" - + "\010UNPINNED\020\024\022\022\n" - + "\016RECALL_ON_OPEN\020\025\022\031\n" - + "\025RECALL_ON_DATA_ACCESS\020\026\032\002\020\001\"\355\003\n" - + "\006Reason\022\026\n" - + "\022REASON_UNSPECIFIED\020\000\022\022\n" - + "\016DATA_OVERWRITE\020\001\022\017\n" - + "\013DATA_EXTEND\020\002\022\023\n" - + "\017DATA_TRUNCATION\020\003\022\030\n" - + "\024NAMED_DATA_OVERWRITE\020\004\022\025\n" - + "\021NAMED_DATA_EXTEND\020\005\022\031\n" - + "\025NAMED_DATA_TRUNCATION\020\006\022\017\n" - + "\013FILE_CREATE\020\007\022\017\n" - + "\013FILE_DELETE\020\010\022\r\n" - + "\tEA_CHANGE\020\t\022\023\n" - + "\017SECURITY_CHANGE\020\n" - + "\022\023\n" - + "\017RENAME_OLD_NAME\020\013\022\023\n" - + "\017RENAME_NEW_NAME\020\014\022\024\n" - + "\020INDEXABLE_CHANGE\020\r" - + "\022\025\n" - + "\021BASIC_INFO_CHANGE\020\016\022\024\n" - + "\020HARD_LINK_CHANGE\020\017\022\026\n" - + "\022COMPRESSION_CHANGE\020\020\022\025\n" - + "\021ENCRYPTION_CHANGE\020\021\022\024\n" - + "\020OBJECT_ID_CHANGE\020\022\022\030\n" - + "\024REPARSE_POINT_CHANGE\020\023\022\021\n\r" - + "STREAM_CHANGE\020\024\022\025\n" - + "\021TRANSACTED_CHANGE\020\025\022\t\n" - + "\005CLOSE\020\026\"L\n" - + "\021AppCompatMetadata\022\020\n" - + "\010sequence\030\001 \001(\005\022\020\n" - + "\010executed\030\002 \001(\010\022\023\n" - + "\013control_set\030\003 \001(\t\"\326\005\n" - + "\016FileMetadataPE\022\017\n" - + "\007imphash\030\001 \001(\t\022\023\n" - + "\013entry_point\030\002 \001(\003\022\034\n" - + "\024entry_point_exiftool\030\t \001(\003\0224\n" - + "\020compilation_time\030\n" - + " \001(\0132\032.google.protobuf.Timestamp\022=\n" - + "\031compilation_exiftool_time\030\013 \001(\0132\032.google.protobuf.Timestamp\0226\n" - + "\007section\030\003 \003(\0132%.google.backstory.FileMetadataSection\0226\n" - + "\007imports\030\004 \003(\0132%.google.backstory.FileMetadataImports\022>\n" - + "\010resource\030\005 \003(\0132,.google.backstory.FileMetadataPeResourceInfo\022I\n" - + "\024resources_type_count\030\006" - + " \003(\0132\'.google.backstory.StringToInt64MapEntryB\002\030\001\022M\n" - + "\030resources_language_count\030\007" - + " \003(\0132\'.google.backstory.StringToInt64MapEntryB\002\030\001\0229\n" - + "\030resources_type_count_str\030\014 \003(\0132\027.google.backstory.Label\022=\n" - + "\034resources_language_count_str\030\r" - + " \003(\0132\027.google.backstory.Label\022G\n" - + "\016signature_info\030\010" - + " \001(\0132+.google.backstory.FileMetadataSignatureInfoB\002\030\001\"\203\001\n" - + "\032FileMetadataPeResourceInfo\022\022\n\n" - + "sha256_hex\030\001 \001(\t\022\026\n" - + "\016filetype_magic\030\002 \001(\t\022\025\n\r" - + "language_code\030\004 \001(\t\022\017\n" - + "\007entropy\030\005 \001(\001\022\021\n" - + "\tfile_type\030\006 \001(\t\"\210\001\n\r" - + "SignatureInfo\022=\n" - + "\010sigcheck\030\001 \001(\0132+.google.backstory.FileMetadataSignatureInfo\0228\n" - + "\010codesign\030\002 \001(\0132&.google.backstory.FileMetadataCodesign\"\264\001\n" - + "\031FileMetadataSignatureInfo\022\034\n" - + "\024verification_message\030\001 \001(\t\022\020\n" - + "\010verified\030\002 \001(\010\022\022\n" - + "\006signer\030\003 \003(\tB\002\030\001\022-\n" - + "\007signers\030\004 \003(\0132\034.google.backstory.SignerInfo\022$\n" - + "\004x509\030\005 \003(\0132\026.google.backstory.X509\"\234\001\n\n" - + "SignerInfo\022\021\n" - + "\004name\030\001 \001(\tH\000\210\001\001\022\023\n" - + "\006status\030\002 \001(\tH\001\210\001\001\022\030\n" - + "\013valid_usage\030\003 \001(\tH\002\210\001\001\022\030\n" - + "\013cert_issuer\030\004 \001(\tH\003\210\001\001B\007\n" - + "\005_nameB\t\n" - + "\007_statusB\016\n" - + "\014_valid_usageB\016\n" - + "\014_cert_issuer\"y\n" - + "\024FileMetadataCodesign\022\n\n" - + "\002id\030\001 \001(\t\022\016\n" - + "\006format\030\002 \001(\t\0224\n" - + "\020compilation_time\030\003 \001(\0132\032.google.protobuf.Timestamp\022\017\n" - + "\007team_id\030\004 \001(\t\"g\n" - + "\004X509\022\014\n" - + "\004name\030\001 \001(\t\022\021\n" - + "\talgorithm\030\002 \001(\t\022\022\n\n" - + "thumbprint\030\003 \001(\t\022\023\n" - + "\013cert_issuer\030\004 \001(\t\022\025\n\r" - + "serial_number\030\005 \001(\t\"\307\003\n" - + "\007PDFInfo\022\n\n" - + "\002js\030\001 \001(\003\022\022\n\n" - + "javascript\030\002 \001(\003\022\033\n" - + "\023launch_action_count\030\003 \001(\003\022\033\n" - + "\023object_stream_count\030\004 \001(\003\022\024\n" - + "\014endobj_count\030\005 \001(\003\022\016\n" - + "\006header\030\006 \001(\t\022\020\n" - + "\010acroform\030\007 \001(\003\022\022\n\n" - + "autoaction\030\010 \001(\003\022\025\n\r" - + "embedded_file\030\t \001(\003\022\021\n" - + "\tencrypted\030\n" - + " \001(\003\022\r\n" - + "\005flash\030\013 \001(\003\022\031\n" - + "\021jbig2_compression\030\014 \001(\003\022\021\n" - + "\tobj_count\030\r" - + " \001(\003\022\027\n" - + "\017endstream_count\030\016 \001(\003\022\022\n\n" - + "page_count\030\017 \001(\003\022\024\n" - + "\014stream_count\030\020 \001(\003\022\022\n\n" - + "openaction\030\021 \001(\003\022\021\n" - + "\tstartxref\030\022 \001(\003\022\031\n" - + "\021suspicious_colors\030\023 \001(\003\022\017\n" - + "\007trailer\030\024 \001(\003\022\013\n" - + "\003xfa\030\025 \001(\003\022\014\n" - + "\004xref\030\026 \001(\003\"O\n" - + "\025StringToInt64MapEntry\022\020\n" - + "\003key\030\001 \001(\tH\000\210\001\001\022\022\n" - + "\005value\030\002 \001(\003H\001\210\001\001B\006\n" - + "\004_keyB\010\n" - + "\006_value\"y\n" - + "\023FileMetadataSection\022\014\n" - + "\004name\030\001 \001(\t\022\017\n" - + "\007entropy\030\002 \001(\001\022\026\n" - + "\016raw_size_bytes\030\003 \001(\003\022\032\n" - + "\022virtual_size_bytes\030\004 \001(\003\022\017\n" - + "\007md5_hex\030\005 \001(\t\"9\n" - + "\023FileMetadataImports\022\017\n" - + "\007library\030\001 \001(\t\022\021\n" - + "\tfunctions\030\002 \003(\t\"\250\001\n" - + "\010ExifInfo\022\025\n\r" - + "original_file\030\001 \001(\t\022\017\n" - + "\007product\030\002 \001(\t\022\017\n" - + "\007company\030\003 \001(\t\022\030\n" - + "\020file_description\030\004 \001(\t\022\023\n" - + "\013entry_point\030\005 \001(\003\0224\n" - + "\020compilation_time\030\006 \001(\0132\032.google.protobuf.Timestamp\"\203\001\n\n" - + "Prevalence\022\023\n" - + "\013rolling_max\030\001 \001(\005\022\021\n" - + "\tday_count\030\002 \001(\005\022\037\n" - + "\027rolling_max_sub_domains\030\003 \001(\005\022\017\n" - + "\007day_max\030\004 \001(\005\022\033\n" - + "\023day_max_sub_domains\030\005 \001(\005\"\337\004\n" - + "\003Dns\022\n\n" - + "\002id\030\006 \001(\r" - + "\022\020\n" - + "\010response\030\007 \001(\010\022\016\n" - + "\006opcode\030\010 \001(\r" - + "\022\025\n\r" - + "authoritative\030\t \001(\010\022\021\n" - + "\ttruncated\030\n" - + " \001(\010\022\031\n" - + "\021recursion_desired\030\013 \001(\010\022\033\n" - + "\023recursion_available\030\014 \001(\010\022\025\n\r" - + "response_code\030\r" - + " \001(\r" - + "\0221\n" - + "\tquestions\030\001 \003(\0132\036.google.backstory.Dns.Question\0225\n" - + "\007answers\030\002 \003(\0132$.google.backstory.Dns.ResourceRecord\0227\n" - + "\tauthority\030\003 \003(\0132$.google.backstory.Dns.ResourceRecord\0228\n" - + "\n" - + "additional\030\004 \003(\0132$.google.backstory.Dns.ResourceRecord\032g\n" - + "\010Question\022\014\n" - + "\004name\030\001 \001(\t\022\014\n" - + "\004type\030\002 \001(\r" - + "\022\r\n" - + "\005class\030\003 \001(\r" - + "\0220\n\n" - + "prevalence\030\004 \001(\0132\034.google.backstory.Prevalence\032k\n" - + "\016ResourceRecord\022\014\n" - + "\004name\030\001 \001(\t\022\014\n" - + "\004type\030\002 \001(\r" - + "\022\r\n" - + "\005class\030\003 \001(\r" - + "\022\013\n" - + "\003ttl\030\004 \001(\r" - + "\022\014\n" - + "\004data\030\005 \001(\t\022\023\n" - + "\013binary_data\030\006 \001(\014\"\202\006\n" - + "\004Dhcp\022-\n" - + "\006opcode\030\001 \001(\0162\035.google.backstory.Dhcp.OpCode\022\r\n" - + "\005htype\030\002 \001(\r" - + "\022\014\n" - + "\004hlen\030\003 \001(\r" - + "\022\014\n" - + "\004hops\030\004 \001(\r" - + "\022\026\n" - + "\016transaction_id\030\005 \001(\r" - + "\022\017\n" - + "\007seconds\030\006 \001(\r" - + "\022\r\n" - + "\005flags\030\007 \001(\r" - + "\022\016\n" - + "\006ciaddr\030\010 \001(\t\022\016\n" - + "\006yiaddr\030\t \001(\t\022\016\n" - + "\006siaddr\030\n" - + " \001(\t\022\016\n" - + "\006giaddr\030\013 \001(\t\022\016\n" - + "\006chaddr\030\014 \001(\t\022\r\n" - + "\005sname\030\r" - + " \001(\t\022\014\n" - + "\004file\030\016 \001(\t\022.\n" - + "\007options\030\017 \003(\0132\035.google.backstory.Dhcp.Option\0220\n" - + "\004type\030\020 \001(\0162\".google.backstory.Dhcp.MessageType\022\032\n" - + "\022lease_time_seconds\030\021 \001(\r" - + "\022\027\n" - + "\017client_hostname\030\022 \001(\t\022\031\n" - + "\021client_identifier\030\023 \001(\014\022\031\n" - + "\021requested_address\030\024 \001(\t\022 \n" - + "\030client_identifier_string\030\025 \001(\t\032$\n" - + "\006Option\022\014\n" - + "\004code\030\001 \001(\r" - + "\022\014\n" - + "\004data\030\002 \001(\014\"<\n" - + "\006OpCode\022\022\n" - + "\016UNKNOWN_OPCODE\020\000\022\017\n" - + "\013BOOTREQUEST\020\001\022\r\n" - + "\tBOOTREPLY\020\002\"\247\001\n" - + "\013MessageType\022\030\n" - + "\024UNKNOWN_MESSAGE_TYPE\020\000\022\014\n" - + "\010DISCOVER\020\001\022\t\n" - + "\005OFFER\020\002\022\013\n" - + "\007REQUEST\020\003\022\013\n" - + "\007DECL", - "INE\020\004\022\007\n" - + "\003ACK\020\005\022\007\n" - + "\003NAK\020\006\022\013\n" - + "\007RELEASE\020\007\022\n\n" - + "\006INFORM\020\010\022\017\n" - + "\013WIN_DELETED\020d\022\017\n" - + "\013WIN_EXPIRED\020e\"\331\001\n" - + "\013Certificate\022\017\n" - + "\007version\030\001 \001(\t\022\016\n" - + "\006serial\030\002 \001(\t\022\017\n" - + "\007subject\030\003 \001(\t\022\016\n" - + "\006issuer\030\004 \001(\t\022\013\n" - + "\003md5\030\005 \001(\t\022\014\n" - + "\004sha1\030\006 \001(\t\022\016\n" - + "\006sha256\030\007 \001(\t\022.\n\n" - + "not_before\030\010 \001(\0132\032.google.protobuf.Timestamp\022-\n" - + "\tnot_after\030\t \001(\0132\032.google.protobuf.Timestamp\"\313\003\n" - + "\003Tls\022,\n" - + "\006client\030\001 \001(\0132\034.google.backstory.Tls.Client\022,\n" - + "\006server\030\002 \001(\0132\034.google.backstory.Tls.Server\022\016\n" - + "\006cipher\030\003 \001(\t\022\r\n" - + "\005curve\030\004 \001(\t\022\017\n" - + "\007version\030\005 \001(\t\022\030\n" - + "\020version_protocol\030\006 \001(\t\022\023\n" - + "\013established\030\007 \001(\010\022\025\n\r" - + "next_protocol\030\010 \001(\t\022\017\n" - + "\007resumed\030\t \001(\010\032\206\001\n" - + "\006Client\0222\n" - + "\013certificate\030\001 \001(\0132\035.google.backstory.Certificate\022\013\n" - + "\003ja3\030\002 \001(\t\022\023\n" - + "\013server_name\030\003 \001(\t\022\031\n" - + "\021supported_ciphers\030\004 \003(\t\022\013\n" - + "\003ja4\030\005 \001(\t\032X\n" - + "\006Server\0222\n" - + "\013certificate\030\001 \001(\0132\035.google.backstory.Certificate\022\014\n" - + "\004ja3s\030\002 \001(\t\022\014\n" - + "\004ja4s\030\003 \001(\t\"]\n" - + "\004Http\022\016\n" - + "\006method\030\001 \001(\t\022\024\n" - + "\014referral_url\030\002 \001(\t\022\022\n\n" - + "user_agent\030\003 \001(\t\022\025\n\r" - + "response_code\030\004 \001(\005J\004\010\005\020\006\"\235\013\n" - + "\007Browser\022;\n" - + "\014browser_type\030\001 \001(\0162%.google.backstory.Browser.BrowserType\022\027\n" - + "\017browser_version\030\002 \001(\t\0224\n" - + "\020first_visit_time\030\003 \001(\0132\032.google.protobuf.Timestamp\0223\n" - + "\017last_visit_time\030\004 \001(\0132\032.google.protobuf.Timestamp\022\017\n" - + "\007profile\030\005 \001(\t\022\r\n" - + "\005typed\030\006 \001(\010\022:\n\n" - + "visit_type\030\007 \001(\0162&.google.backstory.Browser.UrlVisitType\022\016\n" - + "\006hidden\030\010 \001(\010\022\032\n" - + "\022request_origin_uri\030\t \001(\t\022\023\n" - + "\013visit_count\030\n" - + " \001(\003\022\034\n" - + "\024visit_count_criteria\030\013 \001(\t\022\027\n" - + "\017indexed_content\030\014 \001(\t\0229\n" - + "\025first_bookmarked_time\030\r" - + " \001(\0132\032.google.protobuf.Timestamp\0221\n" - + "\007cookies\030\016 \003(\0132 .google.backstory.Browser.Cookie\022\023\n" - + "\013typed_count\030\017 \001(\003\022;\n" - + "\014visit_source\030\020" - + " \001(\0162%.google.backstory.Browser.VisitSource\032\351\002\n" - + "\006Cookie\022\014\n" - + "\004name\030\001 \001(\t\022\r\n" - + "\005value\030\002 \001(\t\022\016\n" - + "\006domain\030\003 \001(\t\022\014\n" - + "\004path\030\004 \001(\t\0223\n" - + "\017expiration_time\030\005 \001(\0132\032.google.protobuf.Timestamp\022\021\n" - + "\thttp_only\030\006 \001(\010\022\016\n" - + "\006secure\030\007 \001(\010\022\017\n" - + "\007max_age\030\010 \001(\003\022B\n" - + "\tsame_site\030\t \001(\0162/.google.backstory.Browser.Cookie.CookieSameSite\022\017\n" - + "\007session\030\n" - + " \001(\010\022\023\n" - + "\013partitioned\030\013 \001(\010\"Q\n" - + "\016CookieSameSite\022 \n" - + "\034COOKIE_SAME_SITE_UNSPECIFIED\020\000\022\n\n" - + "\006STRICT\020\001\022\007\n" - + "\003LAX\020\002\022\010\n" - + "\004NONE\020\003\"|\n" - + "\013BrowserType\022\034\n" - + "\030BROWSER_TYPE_UNSPECIFIED\020\000\022\n\n" - + "\006CHROME\020\001\022\013\n" - + "\007FIREFOX\020\002\022\n\n" - + "\006SAFARI\020\003\022\025\n" - + "\021INTERNET_EXPLORER\020\004\022\010\n" - + "\004EDGE\020\005\022\t\n" - + "\005OPERA\020\006\"\357\001\n" - + "\014UrlVisitType\022\036\n" - + "\032URL_VISIT_TYPE_UNSPECIFIED\020\000\022\010\n" - + "\004LINK\020\001\022\t\n" - + "\005TYPED\020\002\022\021\n\r" - + "AUTO_BOOKMARK\020\003\022\021\n\r" - + "AUTO_SUBFRAME\020\004\022\023\n" - + "\017MANUAL_SUBFRAME\020\005\022\r\n" - + "\tGENERATED\020\006\022\021\n\r" - + "AUTO_TOPLEVEL\020\007\022\017\n" - + "\013FORM_SUBMIT\020\010\022\n\n" - + "\006RELOAD\020\t\022\013\n" - + "\007KEYWORD\020\n" - + "\022\025\n" - + "\021KEYWORD_GENERATED\020\013\022\014\n" - + "\010REDIRECT\020\014\"a\n" - + "\013VisitSource\022\034\n" - + "\030VISIT_SOURCE_UNSPECIFIED\020\000\022\n\n" - + "\006SYNCED\020\001\022\013\n" - + "\007BROWSER\020\002\022\r\n" - + "\tEXTENSION\020\003\022\014\n" - + "\010IMPORTED\020\004\"\314\001\n" - + "\010Hardware\022\025\n\r" - + "serial_number\030\001 \001(\t\022\024\n" - + "\014manufacturer\030\002 \001(\t\022\r\n" - + "\005model\030\003 \001(\t\022\024\n" - + "\014cpu_platform\030\004 \001(\t\022\021\n" - + "\tcpu_model\030\005 \001(\t\022\027\n" - + "\017cpu_clock_speed\030\006 \001(\004\022\033\n" - + "\023cpu_max_clock_speed\030\007 \001(\004\022\030\n" - + "\020cpu_number_cores\030\010 \001(\004\022\013\n" - + "\003ram\030\t \001(\004\"}\n" - + "\020PlatformSoftware\0221\n" - + "\010platform\030\001 \001(\0162\037.google.backstory.Noun.Platform\022\030\n" - + "\020platform_version\030\002 \001(\t\022\034\n" - + "\024platform_patch_level\030\003 \001(\t\"\206\001\n" - + "\010Software\022\014\n" - + "\004name\030\001 \001(\t\022\017\n" - + "\007version\030\002 \001(\t\0221\n" - + "\013permissions\030\003 \003(\0132\034.google.backstory.Permission\022\023\n" - + "\013description\030\004 \001(\t\022\023\n" - + "\013vendor_name\030\005 \001(\t\"\234\n\n" - + "\005Asset\022\031\n" - + "\021product_object_id\030\001 \001(\t\022\020\n" - + "\010hostname\030\002 \001(\t\022\020\n" - + "\010asset_id\030\003 \001(\t\022\n\n" - + "\002ip\030\004 \003(\t\022\013\n" - + "\003mac\030\005 \003(\t\022\016\n" - + "\006nat_ip\030\026 \003(\t\0223\n" - + "\017first_seen_time\030\027 \001(\0132\032.google.protobuf.Timestamp\022,\n" - + "\010hardware\030\006 \003(\0132\032.google.backstory.Hardware\022=\n" - + "\021platform_software\030\007 \001(\0132\".google.backstory.PlatformSoftware\022,\n" - + "\010software\030\021 \003(\0132\032.google.backstory.Software\022,\n" - + "\010location\030\010 \001(\0132\032.google.backstory.Location\022\020\n" - + "\010category\030\t \001(\t\022/\n" - + "\004type\030\022 \001(\0162!.google.backstory.Asset.AssetType\022\026\n" - + "\016network_domain\030\n" - + " \001(\t\0225\n\r" - + "creation_time\030\013 \001(\0132\032.google.protobuf.TimestampB\002\030\001\0227\n" - + "\023first_discover_time\030\014 \001(\0132\032.google.protobuf.Timestamp\0226\n" - + "\022last_discover_time\030\r" - + " \001(\0132\032.google.protobuf.Timestamp\022;\n" - + "\027system_last_update_time\030\016 \001(\0132\032.google.protobuf.Timestamp\0222\n" - + "\016last_boot_time\030\017 \001(\0132\032.google.protobuf.Timestamp\022+\n" - + "\006labels\030\020 \003(\0132\027.google.backstory.LabelB\002\030\001\022C\n" - + "\021deployment_status\030\023" - + " \001(\0162(.google.backstory.Asset.DeploymentStatus\0228\n" - + "\017vulnerabilities\030\025 \003(\0132\037.google.backstory.Vulnerability\022.\n" - + "\tattribute\030\024 \001(\0132\033.google.backstory.Attribute\022B\n" - + "\024wmi_persistence_item\030\030 \001(\013" - + "2$.google.backstory.WmiPersistenceItem\"\251\001\n" - + "\tAssetType\022\024\n" - + "\020ROLE_UNSPECIFIED\020\000\022\017\n" - + "\013WORKSTATION\020\001\022\n\n" - + "\006LAPTOP\020\002\022\007\n" - + "\003IOT\020\003\022\034\n" - + "\030NETWORK_ATTACHED_STORAGE\020\004\022\013\n" - + "\007PRINTER\020\005\022\013\n" - + "\007SCANNER\020\006\022\n\n" - + "\006SERVER\020\007\022\020\n" - + "\014TAPE_LIBRARY\020\010\022\n" - + "\n" - + "\006MOBILE\020\t\"m\n" - + "\020DeploymentStatus\022!\n" - + "\035DEPLOYMENT_STATUS_UNSPECIFIED\020\000\022\n\n" - + "\006ACTIVE\020\001\022\027\n" - + "\023PENDING_DECOMISSION\020\002\022\021\n\r" - + "DECOMISSIONED\020\003\"\305\014\n" - + "\004User\022\031\n" - + "\021product_object_id\030\007 \001(\t\022\016\n" - + "\006userid\030\001 \001(\t\022\031\n" - + "\021user_display_name\030\003 \001(\t\022\022\n\n" - + "first_name\030d \001(\t\022\023\n" - + "\013middle_name\030e \001(\t\022\021\n" - + "\tlast_name\030f \001(\t\022\025\n\r" - + "phone_numbers\030g \003(\t\0224\n" - + "\020personal_address\030h \001(\0132\032.google.backstory.Location\022.\n" - + "\tattribute\030\010 \001(\0132\033.google.backstory.Attribute\0223\n" - + "\017first_seen_time\030\n" - + " \001(\0132\032.google.protobuf.Timestamp\0228\n" - + "\014account_type\030\t \001(\0162\".google.backstory.User.AccountType\022\023\n" - + "\007groupid\030\002 \001(\tB\002\030\001\022\032\n" - + "\021group_identifiers\030\310\001 \003(\t\022\023\n" - + "\013windows_sid\030\004 \001(\t\022\027\n" - + "\017email_addresses\030\005 \003(\t\022\023\n" - + "\013employee_id\030\006 \001(\t\022\016\n" - + "\005title\030\331\004 \001(\t\022\025\n" - + "\014company_name\030\332\004 \001(\t\022\023\n\n" - + "department\030\333\004 \003(\t\0223\n" - + "\016office_address\030\334\004 \001(\0132\032.google.backstory.Location\022)\n" - + "\010managers\030\335\004 \003(\0132\026.google.backstory.User\022.\n" - + "\thire_date\030\336\004 \001(\0132\032.google.protobuf.Timestamp\0225\n" - + "\020termination_date\030\337\004 \001(\0132\032.google.protobuf.Timestamp\022,\n" - + "\010time_off\030\340\004 \003(\0132\031.google.backstory.TimeOff\0224\n" - + "\017last_login_time\030\341\004 \001(\0132\032.google.protobuf.Timestamp\022>\n" - + "\031last_password_change_time\030\342\004" - + " \001(\0132\032.google.protobuf.Timestamp\022=\n" - + "\030password_expiration_time\030\343\004" - + " \001(\0132\032.google.protobuf.Timestamp\022<\n" - + "\027account_expiration_time\030\344\004" - + " \001(\0132\032.google.protobuf.Timestamp\0229\n" - + "\024account_lockout_time\030\345\004 \001(\0132\032.google.protobuf.Timestamp\022C\n" - + "\036last_bad_password_attempt_time\030\346\004" - + " \001(\0132\032.google.protobuf.Timestamp\022Z\n" - + "\032user_authentication_status\030\275\005" - + " \001(\01625.google.backstory.Authentication.AuthenticationStatus\022\026\n" - + "\trole_name\030\276\005 \001(\tB\002\030\001\022\035\n" - + "\020role_description\030\277\005 \001(\tB\002\030\001\0223\n" - + "\tuser_role\030\300\005" - + " \001(\0162\033.google.backstory.User.RoleB\002\030\001\"\250\001\n" - + "\013AccountType\022\034\n" - + "\030ACCOUNT_TYPE_UNSPECIFIED\020\000\022\027\n" - + "\023DOMAIN_ACCOUNT_TYPE\020\001\022\026\n" - + "\022LOCAL_ACCOUNT_TYPE\020\002\022\026\n" - + "\022CLOUD_ACCOUNT_TYPE\020\003\022\030\n" - + "\024SERVICE_ACCOUNT_TYPE\020\004\022\030\n" - + "\024DEFAULT_ACCOUNT_TYPE\020\005\"D\n" - + "\004Role\022\020\n" - + "\014UNKNOWN_ROLE\020\000\022\021\n\r" - + "ADMINISTRATOR\020\001\022\027\n" - + "\017SERVICE_ACCOUNT\020\002\032\002\010\001\"G\n" - + "\007TimeOff\022\'\n" - + "\010interval\030\001 \001(\0132\025.google.type.Interval\022\023\n" - + "\013description\030\002 \001(\t\"\331\001\n\n" - + "Permission\022\014\n" - + "\004name\030\001 \001(\t\022\023\n" - + "\013description\030\002 \001(\t\0229\n" - + "\004type\030\003 \001(\0162+.google.backstory.Permission.PermissionType\"m\n" - + "\016PermissionType\022\033\n" - + "\027UNKNOWN_PERMISSION_TYPE\020\000\022\017\n" - + "\013ADMIN_WRITE\020\001\022\016\n\n" - + "ADMIN_READ\020\002\022\016\n\n" - + "DATA_WRITE\020\003\022\r\n" - + "\tDATA_READ\020\004\"\232\001\n" - + "\004Role\022\014\n" - + "\004name\030\001 \001(\t\022\023\n" - + "\013description\030\002 \001(\t\022)\n" - + "\004type\030\003 \001(\0162\033.google.backstory.Role.Type\"D\n" - + "\004Type\022\024\n" - + "\020TYPE_UNSPECIFIED\020\000\022\021\n\r" - + "ADMINISTRATOR\020\001\022\023\n" - + "\017SERVICE_ACCOUNT\020\002\"\323\001\n" - + "\005Group\022\031\n" - + "\021product_object_id\030\001 \001(\t\0225\n\r" - + "creation_time\030d \001(\0132\032.google.protobuf.TimestampB\002\030\001\022\032\n" - + "\022group_display_name\030e \001(\t\022.\n" - + "\tattribute\030\004 \001(\0132\033.google.backstory.Attribute\022\027\n" - + "\017email_addresses\030\002 \003(\t\022\023\n" - + "\013windows_sid\030\003 \001(\t\"\221\003\n" - + "\010Registry\022\024\n" - + "\014registry_key\030\001 \001(\t\022\033\n" - + "\023registry_value_name\030\002 \001(\t\022\033\n" - + "\023registry_value_data\030\003 \001(\t\022<\n" - + "\023registry_value_type\030\004 \001(\0162\037.google.backstory.Registry.Type\022\"\n" - + "\032registry_value_binary_data\030\005 \001(\014\"\322\001\n" - + "\004Type\022\024\n" - + "\020TYPE_UNSPECIFIED\020\000\022\010\n" - + "\004NONE\020\001\022\006\n" - + "\002SZ\020\002\022\r\n" - + "\tEXPAND_SZ\020\003\022\n\n" - + "\006BINARY\020\004\022\t\n" - + "\005DWORD\020\005\022\027\n" - + "\023DWORD_LITTLE_ENDIAN\020\006\022\024\n" - + "\020DWORD_BIG_ENDIAN\020\007\022\010\n" - + "\004LINK\020\010\022\014\n" - + "\010MULTI_SZ\020\t\022\021\n\r" - + "RESOURCE_LIST\020\n" - + "\022\t\n" - + "\005QWORD\020\013\022\027\n" - + "\023QWORD_LITTLE_ENDIAN\020\014\"\321\001\n" - + "\022WmiPersistenceItem\022\017\n" - + "\007caption\030\001 \001(\t\022\014\n" - + "\004name\030\002 \001(\t\022\022\n\n" - + "setting_id\030\003 \001(\t\022\022\n\n" - + "derivation\030\004 \001(\t\022\026\n" - + "\016property_count\030\005 \001(\003\022\020\n" - + "\010rel_path\030\006 \001(\t\022\017\n" - + "\007dynasty\030\007 \001(\t\022\027\n" - + "\017wmi_super_class\030\010 \001(\t\022\021\n" - + "\twmi_class\030\t \001(\t\022\r\n" - + "\005genus\030\n" - + " \001(\003\"\343\001\n" - + "\010Location\022\014\n" - + "\004city\030\001 \001(\t\022\r\n" - + "\005state\030\002 \001(\t\022\031\n" - + "\021country_or_region\030\003 \001(\t\022\014\n" - + "\004name\030\004 \001(\t\022\021\n" - + "\tdesk_name\030\005 \001(\t\022\022\n\n" - + "floor_name\030\006 \001(\t\022\033\n" - + "\017region_latitude\030\007 \001(\002B\002\030\001\022\034\n" - + "\020region_longitude\030\010 \001(\002B\002\030\001\022/\n" - + "\022region_coordinates\030\t \001(\0132\023.google.type.LatLng\"\206\001\n\r" - + "ScheduledTask\022\016\n" - + "\006minute\030\001 \001(\005\022\014\n" - + "\004hour\030\002 \001(\005\022\021\n" - + "\tmonth_day\030\003 \001(\005\022\r\n" - + "\005month\030\004 \001(\005\022\020\n" - + "\010week_day\030\005 \001(\005\022\017\n" - + "\007comment\030\006 \001(\t\022\016\n" - + "\006author\030\007 \001(\t:\002\030\001\"\246\n\n" - + "\024WindowsScheduledTask\022\016\n" - + "\006author\030\001 \001(\t\022\024\n" - + "\014virtual_path\030\002 \001(\t\022\021\n" - + "\texit_code\030\003 \001(\005\022?\n" - + "\005state\030\004 \001(\01620.google.backstory.WindowsScheduledTask.TaskState\022H\n\n" - + "logon_type\030\005" - + " \001(\01624.google.backstory.WindowsScheduledTask.TaskLogonType\022G\n" - + "\014task_actions\030\006" - + " \003(\01321.google.backstory.WindowsScheduledTask.TaskAction\022I\n\r" - + "task_triggers\030\007" - + " \003(\01322.google.backstory.WindowsScheduledTask.TaskTrigger\032\247\002\n\n" - + "TaskAction\022Q\n" - + "\013action_type\030\001 \001(\0162<.google.backstory" - + ".WindowsScheduledTask.TaskAction.ActionType\022\026\n" - + "\016exec_arguments\030\002 \003(\t\022\036\n" - + "\026exec_working_directory\030\003 \001(\t\022\024\n" - + "\014com_class_id\030\004 \001(\t\022\020\n" - + "\010com_data\030\005 \001(\t\"f\n\n" - + "ActionType\022\033\n" - + "\027ACTION_TYPE_UNSPECIFIED\020\000\022\010\n" - + "\004EXEC\020\001\022\017\n" - + "\013COM_HANDLER\020\002\022\016\n\n" - + "SEND_EMAIL\020\003\022\020\n" - + "\014SHOW_MESSAGE\020\004\032\213\003\n" - + "\013TaskTrigger\022\017\n" - + "\007enabled\030\001 \001(\010\022+\n" - + "\010duration\030\002 \001(\0132\031.google.protobuf.Duration\022\020\n" - + "\010interval\030\003 \001(\t\022T\n" - + "\014trigger_type\030\004 \001(" - + "\0162>.google.backstory.WindowsScheduledTask.TaskTrigger.TriggerType\"\325\001\n" - + "\013TriggerType\022\034\n" - + "\030TRIGGER_TYPE_UNSPECIFIED\020\000\022\t\n" - + "\005EVENT\020\001\022\010\n" - + "\004TIME\020\002\022\t\n" - + "\005DAILY\020\003\022\n\n" - + "\006WEEKLY\020\004\022\013\n" - + "\007MONTHLY\020\005\022\016\n\n" - + "MONTHLYDOW\020\006\022\010\n" - + "\004IDLE\020\007\022\020\n" - + "\014REGISTRATION\020\010\022\010\n" - + "\004BOOT\020\t\022\t\n" - + "\005LOGON\020\n" - + "\022\030\n" - + "\024SESSION_STATE_CHANGE\020\013\022\024\n" - + "\020CUSTOM_TRIGGER01\020\014\"Z\n" - + "\tTaskState\022\032\n" - + "\026TASK_STATE_UNSPECIFIED\020\000\022\014\n" - + "\010DISABLED\020\001\022\n\n" - + "\006QUEUED\020\002\022\n\n" - + "\006ACTIVE\020\003\022\013\n" - + "\007RUNNING\020\004\"\241\001\n\r" - + "TaskLogonType\022\037\n" - + "\033TASK_LOGON_TYPE_UNSPECIFIED\020\000\022\014\n" - + "\010PASSWORD\020\001\022\007\n" - + "\003S4U\020\002\022\025\n" - + "\021INTERACTIVE_TOKEN\020\003\022\t\n" - + "\005GROUP\020\004\022\023\n" - + "\017SERVICE_ACCOUNT\020\005\022!\n" - + "\035INTERACTIVE_TOKEN_OR_PASSWORD\020\006\"\243\001\n" - + "\021ScheduledCronTask\022\016\n" - + "\006minute\030\001 \001(\t\022\014\n" - + "\004hour\030\002 \001(\t\022\021\n" - + "\tmonth_day\030\003 \001(\t\022\r\n" - + "\005month\030\004 \001(\t\022\020\n" - + "\010week_day\030\005 \001(\t\022\017\n" - + "\007comment\030\006 \001(\t\022\016\n" - + "\006author\030\007 \001(\t\022\r\n" - + "\005event\030\010 \001(\t\022\014\n" - + "\004path\030\t \001(\t\"p\n" - + "\024ScheduledAnacronTask\022\016\n" - + "\006period\030\001 \001(\t\022\025\n\r" - + "delay_minutes\030\002 \001(\003\022\016\n" - + "\006job_id\030\003 \001(\t\022\014\n" - + "\004path\030\004 \001(\t\022\023\n" - + "\013source_line\030\005 \001(\t\"\177\n" - + "\006Volume\022\023\n" - + "\013file_system\030\001 \001(\t\022\023\n" - + "\013mount_point\030\002 \001(\t\022\023\n" - + "\013device_path\030\003 \001(\t\022\022\n\n" - + "is_mounted\030\004 \001(\010\022\024\n" - + "\014is_read_only\030\005 \001(\010\022\014\n" - + "\004name\030\006 \001(\t\"\313\005\n" - + "\007Service\022\024\n" - + "\014display_name\030\001 \001(\t\022?\n" - + "\014service_type\030\003 \001" - + "(\0162%.google.backstory.Service.ServiceTypeB\002\030\001\022<\n\r" - + "service_types\030\006 \003(\0162%.google.backstory.Service.ServiceType\022;\n" - + "\014startup_type\030\004 \001(\0162%.google.backstory.Service.StartupType\022.\n" - + "\005state\030\005 \001(\0162\037.google.backstory.Service.State\"\303\001\n" - + "\013ServiceType\022\034\n" - + "\030SERVICE_TYPE_UNSPECIFIED\020\000\022\021\n\r" - + "KERNEL_DRIVER\020\001\022\026\n" - + "\022FILE_SYSTEM_DRIVER\020\002\022\025\n" - + "\021WIN32_OWN_PROCESS\020\003\022\027\n" - + "\023WIN32_SHARE_PROCESS\020\004\022\013\n" - + "\007ADAPTER\020\005\022\025\n" - + "\021RECOGNIZER_DRIVER\020\006\022\027\n" - + "\023INTERACTIVE_PROCESS\020\007\"T\n" - + "\013StartupType\022\034\n" - + "\030STARTUP_TYPE_UNSPECIFIED\020\000\022\r\n" - + "\tAUTOMATIC\020\001\022\n\n" - + "\006MANUAL\020\002\022\014\n" - + "\010DISABLED\020\003\"\241\001\n" - + "\005State\022\025\n" - + "\021STATE_UNSPECIFIED\020\000\022\013\n" - + "\007RUNNING\020\001\022\013\n" - + "\007STOPPED\020\002\022\n\n" - + "\006PAUSED\020\003\022\r\n" - + "\tCOMPLETED\020\004\022\021\n\r" - + "START_PENDING\020\005\022\020\n" - + "\014STOP_PENDING\020\006\022\021\n\r" - + "PAUSE_PENDING\020\007\022\024\n" - + "\020CONTINUE_PENDING\020\010\"\227\t\n" - + "\010Resource\022\020\n" - + "\004type\030\001 \001(\tB\002\030\001\022>\n\r" - + "resource_type\030\005 \001(\0162\'.google.backstory.Resource.ResourceType\022\030\n" - + "\020resource_subtype\030\006 \001(\t\022\016\n" - + "\002id\030\002 \001(\tB\002\030\001\022\014\n" - + "\004name\030\003 \001(\t\022\022\n" - + "\006parent\030\004 \001(\tB\002\030\001\022\031\n" - + "\021product_object_id\030\010 \001(\t\022.\n" - + "\tattribute\030\007 \001(\0132\033.google.backstory.Attribute\022;\n" - + "\016scheduled_task\030\t" - + " \001(\0132\037.google.backstory.ScheduledTaskB\002\030\001\022@\n" - + "\023scheduled_cron_task\030\014 \001(\0132#.google.backstory.ScheduledCronTask\022F\n" - + "\026scheduled_anacron_task\030\r" - + " \001(\0132&.google.backstory.ScheduledAnacronTask\022F\n" - + "\026windows_scheduled_task\030\016" - + " \001(\0132&.google.backstory.WindowsScheduledTask\022(\n" - + "\006volume\030\n" - + " \001(\0132\030.google.backstory.Volume\022*\n" - + "\007service\030\013 \001(\0132\031.google.backstory.Service\"\274\004\n" - + "\014ResourceType\022\017\n" - + "\013UNSPECIFIED\020\000\022\t\n" - + "\005MUTEX\020\001\022\010\n" - + "\004TASK\020\002\022\010\n" - + "\004PIPE\020\003\022\n\n" - + "\006DEVICE\020\004\022\021\n\r" - + "FIREWALL_RULE\020\005\022\022\n" - + "\016MAILBOX_FOLDER\020\006\022\017\n" - + "\013VPC_NETWORK\020\007\022\023\n" - + "\017VIRTUAL_MACHINE\020\010\022\022\n" - + "\016STORAGE_BUCKET\020\t\022\022\n" - + "\016STORAGE_OBJECT\020\n" - + "\022\014\n" - + "\010DATABASE\020\013\022\t\n" - + "\005TABLE\020\014\022\021\n\r" - + "CLOUD_PROJECT\020\r" - + "\022\026\n" - + "\022CLOUD_ORGANIZATION\020\016\022\023\n" - + "\017SERVICE_ACCOUNT\020\017\022\021\n\r" - + "ACCESS_POLICY\020\020\022\013\n" - + "\007CLUSTER\020\021\022\013\n" - + "\007SETTING\020\022\022\013\n" - + "\007DATASET\020\023\022\023\n" - + "\017BACKEND_SERVICE\020\024\022\007\n" - + "\003POD\020\025\022\r" - + "\n" - + "\tCONTAINER\020\026\022\014\n" - + "\010FUNCTION\020\027\022\013\n" - + "\007RUNTIME\020\030\022\016\n\n" - + "IP_ADDRESS\020\031\022\010\n" - + "\004DISK\020\032\022\n\n" - + "\006VOLUME\020\033\022\t\n" - + "\005IMAGE\020\034\022\014\n" - + "\010SNAPSHOT\020\035\022\016\n\n" - + "REPOSITORY\020\036\022\016\n\n" - + "CREDENTIAL\020\037\022\021\n\r" - + "LOAD_BALANCER\020 \022\013\n" - + "\007GATEWAY\020!\022\n\n" - + "\006SUBNET\020\"\022\010\n" - + "\004USER\020#\022\013\n" - + "\007SERVICE\020$\"I\n" - + "\005Label\022\013\n" - + "\003key\030\001 \001(\t\022\r\n" - + "\005value\030\002 \001(\t\022\016\n" - + "\006source\030\003 \001(\t\022\024\n" - + "\014rbac_enabled\030\004 \001(\010\"\277\002\n" - + "\005Cloud\022=\n" - + "\013environment\030\001 \001(\0162(.google.backstory.Cloud.CloudEnvironment\022+\n" - + "\003vpc\030\002 \001(\0132\032.google.backstory.ResourceB\002\030\001\022/\n" - + "\007project\030\003 \001(\0132\032.google.backstory.ResourceB\002\030\001\022\031\n" - + "\021availability_zone\030\004 \001(\t\"~\n" - + "\020CloudEnvironment\022!\n" - + "\035UNSPECIFIED_CLOUD_ENVIRONMENT\020\000\022\031\n" - + "\025GOOGLE_CLOUD_PLATFORM\020\001\022\027\n" - + "\023AMAZON_WEB_SERVICES\020\002\022\023\n" - + "\017MICROSOFT_AZURE\020\003\"\265\005\n" - + "\010Artifact\022\n\n" - + "\002ip\030\001 \001(\t\0220\n\n" - + "prevalence\030\002 \001(\0132\034.google.backstory.Prevalence\0223\n" - + "\017first_seen_time\030\003 \001(\0132\032.google.protobuf.Timestamp\0222\n" - + "\016last_seen_time\030\004 \001(\0132\032.google.protobuf.Timestamp\022,\n" - + "\010location\030\005 \001(\0132\032.google.backstory.Location\022*\n" - + "\007network\030\006 \001(\0132\031.google.backstory.Network\022\020\n" - + "\010as_owner\030\007 \001(\t\022\013\n" - + "\003asn\030\010 \001(\003\022\014\n" - + "\004jarm\030\t \001(\t\022@\n" - + "\026last_https_certificate\030\n" - + " \001(\0132 .google.backstory.SSLCertificate\022?\n" - + "\033last_https_certificate_date\030\013" - + " \001(\0132\032.google.protobuf.Timestamp\022\"\n" - + "\032regional_internet_registry\030\014 \001(\t\022\014\n" - + "\004tags\030\r" - + " \003(\t\022\r\n" - + "\005whois\030\016 \001(\t\022.\n\n" - + "whois_date\030\017 \001(\0132\032.google.protobuf.Timestamp\022*\n" - + "\007tunnels\030\020 \003(\0132\031.google.backstory.Tunnels\022\021\n" - + "\tanonymous\030\021 \001(\010\0229\n" - + "\017artifact_client\030\022 \001(\0132 .google.backstory.ArtifactClient\022\r\n" - + "\005risks\030\023 \003(\t\")\n" - + "\007Tunnels\022\020\n" - + "\010provider\030\001 \001(\t\022\014\n" - + "\004type\030\002 \001(\t\"4\n" - + "\016ArtifactClient\022\021\n" - + "\tbehaviors\030\001 \003(\t\022\017\n" - + "\007proxies\030\002 \003(\t\")\n" - + "\007Favicon\022\017\n" - + "\007raw_md5\030\001 \001(\t\022\r\n" - + "\005dhash\030\002 \001(\t\"\223\002\n" - + "\tDNSRecord\022\014\n" - + "\004type\030\001 \001(\t\022\r\n" - + "\005value\030\002 \001(\t\022&\n" - + "\003ttl\030\003 \001(\0132\031.google.protobuf.Duration\022\020\n" - + "\010priority\030\004 \001(\003\022\r\n" - + "\005retry\030\005 \001(\003\022*\n" - + "\007refresh\030\006 \001(\0132\031.google.protobuf.Duration\022*\n" - + "\007minimum\030\007 \001(\0132\031.google.protobuf.Duration\022)\n" - + "\006expire\030\010 \001(\0132\031.google.protobuf.Duration\022\016\n" - + "\006serial\030\t \001(\003\022\r\n" - + "\005rname\030\n" - + " \001(\t\"\214\r\n" - + "\016SSLCertificate\022F\n" - + "\016cert_signature\030\001 \001(\0132..g" - + "oogle.backstory.SSLCertificate.CertSignature\022A\n" - + "\textension\030\002" - + " \001(\0132*.google.backstory.SSLCertificate.ExtensionB\002\030\001\0220\n" - + "\017cert_extensions\030\016 \001(\0132\027.google.protobuf.Struct\0223\n" - + "\017first_seen_time\030\003 \001(\0132\032.google.protobuf.Timestamp\0228\n" - + "\006issuer\030\004 \001(\0132(.google.backstory.SSLCertificate.Subject\022/\n" - + "\002ec\030\005 \001(\0132#.google.backstory.SSLCertificate.EC\022\025\n\r" - + "serial_number\030\006 \001(\t\022\033\n" - + "\023signature_algorithm\030\007 \001(\t\022\014\n" - + "\004size\030\010 \001(\003\0229\n" - + "\007subject\030\t \001(\0132(.google.backstory.SSLCertificate.Subject\022\022\n\n" - + "thumbprint\030\n" - + " \001(\t\022\031\n" - + "\021thumbprint_sha256\030\013 \001(\t\022;\n" - + "\010validity\030\014 \001(\0132).google.backstory.SSLCertificate.Validity\022\017\n" - + "\007version\030\r" - + " \001(\t\022>\n\n" - + "public_key\030\017 \001(\0132*.google.backstory.SSLCertificate.PublicKey\032?\n\r" - + "CertSignature\022\021\n" - + "\tsignature\030\001 \001(\t\022\033\n" - + "\023signature_algorithm\030\002 \001(\t\0326\n" - + "\016AuthorityKeyId\022\r" - + "\n" - + "\005keyid\030\001 \001(\t\022\025\n\r" - + "serial_number\030\002 \001(\t\032\261\003\n" - + "\tExtension\022\n\n" - + "\002ca\030\001 \001(\010\022\026\n" - + "\016subject_key_id\030\002 \001(\t\022I\n" - + "\020authority_key_id\030\003 \001(\0132/.googl" - + "e.backstory.SSLCertificate.AuthorityKeyId\022\021\n" - + "\tkey_usage\030\006 \001(\t\022\026\n" - + "\016ca_info_access\030\007 \001(\t\022\037\n" - + "\027crl_distribution_points\030\010 \001(\t\022\032\n" - + "\022extended_key_usage\030\t \001(\t\022 \n" - + "\030subject_alternative_name\030\n" - + " \001(\t\022\034\n" - + "\024certificate_policies\030\013 \001(\t\022\035\n" - + "\025netscape_cert_comment\030\014 \001(\t\022\035\n" - + "\025cert_template_name_dc\030\r" - + " \001(\t\022\034\n" - + "\024netscape_certificate\030\016 \001(\010\022\023\n" - + "\013pe_logotype\030\017 \001(\010\022\034\n" - + "\024old_authority_key_id\030\020 \001(\010\032\231\001\n" - + "\007Subject\022\024\n" - + "\014country_name\030\001 \001(\t\022\023\n" - + "\013common_name\030\002 \001(\t\022\020\n" - + "\010locality\030\003 \001(\t\022\024\n" - + "\014organization\030\004 \001(\t\022\033\n" - + "\023organizational_unit\030\005 \001(\t\022\036\n" - + "\026state_or_province_name\030\006 \001(\t\032:\n" - + "\003RSA\022\020\n" - + "\010key_size\030\001 \001(\003\022\017\n" - + "\007modulus\030\002 \001(\t\022\020\n" - + "\010exponent\030\003 \001(\t\032\036\n" - + "\002EC\022\013\n" - + "\003oid\030\001 \001(\t\022\013\n" - + "\003pub\030\002 \001(\t\032Q\n" - + "\tPublicKey\022\021\n" - + "\talgorithm\030\001 \001(\t\0221\n" - + "\003rsa\030\002 \001(\0132$.google.backstory.SSLCertificate.RSA\032k\n" - + "\010Validity\022/\n" - + "\013expiry_time\030\001 \001(\0132\032.google.protobuf.Timestamp\022.\n\n" - + "issue_time\030\002 \001(\0132\032.google.protobuf.Timestamp\"a\n" - + "\016PopularityRank\022\r\n" - + "\005giver\030\001 \001(\t\022\014\n" - + "\004rank\030\002 \001(\003\0222\n" - + "\016ingestion_time\030\003 \001(\0132\032.google.protobuf.Timestamp\"b\n" - + "\007Tracker\022\017\n" - + "\007tracker\030\001 \001(\t\022\n\n" - + "\002id\030\002 \001(\t\022-\n" - + "\ttimestamp\030\003 \001(\0132\032.google.protobuf.Timestamp\022\013\n" - + "\003url\030\004 \001(\t\"\321\003\n" - + "\003Url\022\013\n" - + "\003url\030\001 \001(\t\022\022\n\n" - + "categories\030\002 \003(\t\022*\n" - + "\007favicon\030\003 \001(\0132\031.google.backstory.Favicon\022*\n" - + "\thtml_meta\030\004 \001(\0132\027.google.protobuf.Struct\022\026\n" - + "\016last_final_url\030\005 \001(\t\022\037\n" - + "\027last_http_response_code\030\006 \001(\005\022)\n" - + "!last_http_response_content_length\030\007 \001(\003\022)\n" - + "!last_http_response_content_sha256\030\010 \001(\t\022;\n" - + "\032last_http_response_cookies\030\t \001(\0132\027.google.protobuf.Struct\022;\n" - + "\032last_http_response_headers\030\n" - + " \001(\0132\027.google.protobuf.Struct\022\014\n" - + "\004tags\030\013 \003(\t\022\r\n" - + "\005title\030\014 \001(\t\022+\n" - + "\010trackers\030\r" - + " \003(\0132\031.google.backstory.Tracker\"\343\t\n" - + "\006Domain\022\014\n" - + "\004name\030\001 \001(\t\0220\n\n" - + "prevalence\030\002 \001(\0132\034.google.backstory.Prevalence\0223\n" - + "\017first_seen_time\030\003 \001(\0132\032.google.protobuf.Timestamp\0222\n" - + "\016last_seen_time\030\004 \001(\0132\032.google.protobuf.Timestamp\022\021\n" - + "\tregistrar\030\005 \001(\t\022\025\n\r" - + "contact_email\030\006 \001(\t\022\024\n" - + "\014whois_server\030\007 \001(\t\022\023\n" - + "\013name_server\030\010 \003(\t\0221\n\r" - + "creation_time\030\t \001(\0132\032.google.protobuf.Timestamp\022/\n" - + "\013update_time\030\n" - + " \001(\0132\032.google.protobuf.Timestamp\0223\n" - + "\017expiration_time\030\013 \001(\0132\032.google.protobuf.Timestamp\0225\n" - + "\021audit_update_time\030\014 \001(\0132\032.google.protobuf.Timestamp\022\016\n" - + "\006status\030\r" - + " \001(\t\022*\n\n" - + "registrant\030\016 \001(\0132\026.google.backstory.User\022%\n" - + "\005admin\030\017 \001(\0132\026.google.backstory.User\022$\n" - + "\004tech\030\020 \001(\0132\026.google.backstory.User\022\'\n" - + "\007billing\030\021 \001(\0132\026.google.backstory.User\022$\n" - + "\004zone\030\022 \001(\0132\026.google.backstory.User\022\035\n" - + "\025whois_record_raw_text\030\023 \001(\014\022\036\n" - + "\026registry_data_raw_text\030\024 \001(\014\022\031\n" - + "\021iana_registrar_id\030\025 \001(\005\022\034\n" - + "\024private_registration\030\026 \001(\010\022\022\n\n" - + "categories\030\027 \003(\t\022*\n" - + "\007favicon\030\030 \001(\0132\031.google.backstory.Favicon\022\014\n" - + "\004jarm\030\031 \001(\t\0225\n" - + "\020last_dns_records\030\032 \003(\0132\033.google.backstory.DNSRecord\0229\n" - + "\025last_dns_records_time\030\033 \001(\0132\032.google.protobuf.Timestamp\022@\n" - + "\026last_https_certificate\030\034 \001(\0132 .google.backstory.SSLCertificate\022?\n" - + "\033last_https_certificate_time\030\035" - + " \001(\0132\032.google.protobuf.Timestamp\022:\n" - + "\020popularity_ranks\030\036 \003(\0132 .google.backstory.Pop", - "ularityRank\022\014\n" - + "\004tags\030\037 \003(\t\022.\n\n" - + "whois_time\030 \001(\0132\032.google.protobuf.Timestamp\"\215\014\n" - + "\004Noun\022\020\n" - + "\010hostname\030\001 \001(\t\022(\n" - + "\006domain\030\036 \001(\0132\030.google.backstory.Domain\022,\n" - + "\010artifact\030 \001(\0132\032.google.backstory.Artifact\022+\n" - + "\014url_metadata\030% \001(\0132\025.google.backstory.Url\022*\n" - + "\007browser\030& \001(\0132\031.google.backstory.Browser\022\020\n" - + "\010asset_id\030\002 \001(\t\022$\n" - + "\004user\030\003 \001(\0132\026.google.backstory.User\0225\n" - + "\025user_management_chain\030\035 \003(\0132\026.google.backstory.User\022&\n" - + "\005group\030\024 \001(\0132\027.google.backstory.Group\022*\n" - + "\007process\030\004 \001(\0132\031.google.backstory.Process\0224\n" - + "\021process_ancestors\030\034 \003(\0132\031.google.backstory.Process\022&\n" - + "\005asset\030\033 \001(\0132\027.google.backstory.Asset\022\n\n" - + "\002ip\030\006 \003(\t\022\016\n" - + "\006nat_ip\030\025 \003(\t\022\014\n" - + "\004port\030\007 \001(\005\022\020\n" - + "\010nat_port\030\026 \001(\005\022\013\n" - + "\003mac\030\010 \003(\t\022\035\n" - + "\025administrative_domain\030\t \001(\t\022\021\n" - + "\tnamespace\030\023 \001(\t\022\013\n" - + "\003url\030\n" - + " \001(\t\022$\n" - + "\004file\030\013 \001(\0132\026.google.backstory.File\022\r\n" - + "\005email\030\014 \001(\t\022,\n" - + "\010registry\030\r" - + " \001(\0132\032.google.backstory.Registry\022\023\n" - + "\013application\030\016 \001(\t\0221\n" - + "\010platform\030\005 \001(\0162\037.google.backstory.Noun.Platform\022\030\n" - + "\020platform_version\030\017 \001(\t\022\034\n" - + "\024platform_patch_level\030\020 \001(\t\022*\n" - + "\005cloud\030\030 \001(\0132\027.google.backstory.CloudB\002\030\001\022,\n" - + "\010location\030\021 \001(\0132\032.google.backstory.Location\0223\n" - + "\013ip_location\030\" \003(\0132\032.google.backstory.LocationB\002\030\001\0223\n" - + "\017ip_geo_artifact\030# \003(\0132\032.google.backstory.Artifact\022,\n" - + "\010resource\030\022 \001(\0132\032.google.backstory.Resource\0226\n" - + "\022resource_ancestors\030\037 \003(\0132\032.google.backstory.Resource\022+\n" - + "\006labels\030\027 \003(\0132\027.google.backstory.LabelB\002\030\001\022.\n" - + "\020object_reference\030\031 \001(\0132\024.google.backstory.Id\0226\n\r" - + "investigation\030\032 \001(\0132\037.google.backstory.Investigation\022*\n" - + "\007network\030! \001(\0132\031.google.backstory.Network\0229\n" - + "\017security_result\030$ \003(\0132 .google.backstory.SecurityResult\"\217\001\n" - + "\010Platform\022\024\n" - + "\020UNKNOWN_PLATFORM\020\000\022\013\n" - + "\007WINDOWS\020\001\022\007\n" - + "\003MAC\020\002\022\t\n" - + "\005LINUX\020\003\022\013\n" - + "\003GCP\020\004\032\002\010\001\022\013\n" - + "\003AWS\020\005\032\002\010\001\022\r\n" - + "\005AZURE\020\006\032\002\010\001\022\007\n" - + "\003IOS\020\007\022\013\n" - + "\007ANDROID\020\010\022\r\n" - + "\tCHROME_OS\020\t\"\360\003\n\r" - + "Investigation\022/\n" - + "\007verdict\030\002 \001(\0162\031.google.backstory.VerdictH\000\210\001\001\0225\n\n" - + "reputation\030\003" - + " \001(\0162\034.google.backstory.ReputationH\001\210\001\001\022\033\n" - + "\016severity_score\030\004 \001(\r" - + "H\002\210\001\001\022-\n" - + "\006status\030\005 \001(\0162\030.google.backstory.StatusH\003\210\001\001\022\020\n" - + "\010comments\030\006 \003(\t\0221\n" - + "\010priority\030\007" - + " \001(\0162\032.google.backstory.PriorityH\004\210\001\001\022\027\n\n" - + "root_cause\030\010 \001(\tH\005\210\001\001\022-\n" - + "\006reason\030\t \001(\0162\030.google.backstory.ReasonH\006\210\001\001\022\027\n\n" - + "risk_score\030\n" - + " \001(\r" - + "H\007\210\001\001\022\017\n" - + "\002id\030\013 \001(\tH\010\210\001\001B\n\n" - + "\010_verdictB\r\n" - + "\013_reputationB\021\n" - + "\017_severity_scoreB\t\n" - + "\007_statusB\013\n" - + "\t_priorityB\r\n" - + "\013_root_causeB\t\n" - + "\007_reasonB\r\n" - + "\013_risk_scoreB\005\n" - + "\003_id\"7\n" - + "\004Tags\022\021\n" - + "\ttenant_id\030\001 \003(\014\022\034\n" - + "\024data_tap_config_name\030\002 \003(\t\"\227\002\n\r" - + "AttackDetails\022\017\n" - + "\007version\030\001 \001(\t\0227\n" - + "\007tactics\030\002 \003(\0132&.google.backstory.AttackDetails.Tactic\022=\n\n" - + "techniques\030\003 \003(\0132).google.backstory.AttackDetails.Technique\032\"\n" - + "\006Tactic\022\n\n" - + "\002id\030\001 \001(\t\022\014\n" - + "\004name\030\002 \001(\t\032Y\n" - + "\tTechnique\022\n\n" - + "\002id\030\001 \001(\t\022\014\n" - + "\004name\030\002 \001(\t\022\027\n" - + "\017subtechnique_id\030\003 \001(\t\022\031\n" - + "\021subtechnique_name\030\004 \001(\t\"!\n" - + "\014BoolSequence\022\021\n" - + "\tbool_vals\030\001 \003(\010\"#\n\r" - + "BytesSequence\022\022\n\n" - + "bytes_vals\030\001 \003(\014\"%\n" - + "\016DoubleSequence\022\023\n" - + "\013double_vals\030\001 \003(\001\"#\n\r" - + "Int64Sequence\022\022\n\n" - + "int64_vals\030\001 \003(\003\"%\n" - + "\016Uint64Sequence\022\023\n" - + "\013uint64_vals\030\001 \003(\004\"%\n" - + "\016StringSequence\022\023\n" - + "\013string_vals\030\001 \003(\t\"\217\001\n\r" - + "GroupedFields\022\n\n" - + "\002ip\030\001 \003(\t\022\016\n" - + "\006domain\030\002 \003(\t\022\020\n" - + "\010hostname\030\003 \003(\t\022\014\n" - + "\004user\030\004 \003(\t\022\r\n" - + "\005email\030\005 \003(\t\022\021\n" - + "\tfile_path\030\006 \003(\t\022\014\n" - + "\004hash\030\007 \003(\t\022\022\n\n" - + "process_id\030\010 \003(\t*I\n" - + "\007Verdict\022\027\n" - + "\023VERDICT_UNSPECIFIED\020\000\022\021\n\r" - + "TRUE_POSITIVE\020\001\022\022\n" - + "\016FALSE_POSITIVE\020\002*D\n\n" - + "Reputation\022\032\n" - + "\026REPUTATION_UNSPECIFIED\020\000\022\n\n" - + "\006USEFUL\020\001\022\016\n\n" - + "NOT_USEFUL\020\002*M\n" - + "\006Status\022\026\n" - + "\022STATUS_UNSPECIFIED\020\000\022\007\n" - + "\003NEW\020\001\022\014\n" - + "\010REVIEWED\020\002\022\n\n" - + "\006CLOSED\020\003\022\010\n" - + "\004OPEN\020\004*\214\001\n" - + "\010Priority\022\030\n" - + "\024PRIORITY_UNSPECIFIED\020\000\022\021\n\r" - + "PRIORITY_INFO\020d\022\021\n" - + "\014PRIORITY_LOW\020\310\001\022\024\n" - + "\017PRIORITY_MEDIUM\020\254\002\022\022\n\r" - + "PRIORITY_HIGH\020\220\003\022\026\n" - + "\021PRIORITY_CRITICAL\020\364\003*h\n" - + "\006Reason\022\026\n" - + "\022REASON_UNSPECIFIED\020\000\022\030\n" - + "\024REASON_NOT_MALICIOUS\020\001\022\024\n" - + "\020REASON_MALICIOUS\020\002\022\026\n" - + "\022REASON_MAINTENANCE\020\003*^\n\r" - + "ThreatVerdict\022\036\n" - + "\032THREAT_VERDICT_UNSPECIFIED\020\000\022\016\n" - + "\n" - + "UNDETECTED\020\001\022\016\n\n" - + "SUSPICIOUS\020\002\022\r\n" - + "\tMALICIOUS\020\003B\211\001\n" - + "\024com.google.backstoryP\001Z5cloud.google.com/go/backstory/backstorypb;backs" - + "torypb\252\002\020Google.Backstory\312\002\020Google\\Backs" - + "tory\352\002\021Google::Backstoryb\006proto3" - }; - descriptor = - com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom( - descriptorData, - new com.google.protobuf.Descriptors.FileDescriptor[] { - com.google.backstory.DataAccess.getDescriptor(), - com.google.backstory.EntityRiskProto.getDescriptor(), - com.google.backstory.IdOuterClass.getDescriptor(), - com.google.protobuf.DurationProto.getDescriptor(), - com.google.protobuf.StructProto.getDescriptor(), - com.google.protobuf.TimestampProto.getDescriptor(), - com.google.type.IntervalProto.getDescriptor(), - com.google.type.LatLngProto.getDescriptor(), - }); - internal_static_google_backstory_UDM_descriptor = getDescriptor().getMessageType(0); - internal_static_google_backstory_UDM_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_UDM_descriptor, - new java.lang.String[] { - "Metadata", - "Additional", - "Principal", - "Src", - "Target", - "Intermediary", - "Observer", - "About", - "SecurityResult", - "Network", - "Extensions", - "Extracted", - "Grouped", - }); - internal_static_google_backstory_Metadata_descriptor = getDescriptor().getMessageType(1); - internal_static_google_backstory_Metadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Metadata_descriptor, - new java.lang.String[] { - "Id", - "ProductLogId", - "EventTimestamp", - "EventTimestampAttributes", - "CollectedTimestamp", - "IngestedTimestamp", - "EventType", - "VendorName", - "ProductName", - "ProductVersion", - "ProductEventType", - "ProductDeploymentId", - "Description", - "UrlBackToProduct", - "IngestionLabels", - "Tags", - "EnrichmentState", - "LogType", - "BaseLabels", - "EnrichmentLabels", - "StructuredFields", - "ParserVersion", - }); - internal_static_google_backstory_Attribute_descriptor = getDescriptor().getMessageType(2); - internal_static_google_backstory_Attribute_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Attribute_descriptor, - new java.lang.String[] { - "Cloud", "Labels", "Permissions", "Roles", "CreationTime", "LastUpdateTime", - }); - internal_static_google_backstory_Network_descriptor = getDescriptor().getMessageType(3); - internal_static_google_backstory_Network_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Network_descriptor, - new java.lang.String[] { - "SentBytes", - "ReceivedBytes", - "TotalBytes", - "SentPackets", - "ReceivedPackets", - "SessionDuration", - "SessionId", - "ParentSessionId", - "ApplicationProtocolVersion", - "CommunityId", - "Direction", - "IpProtocol", - "Ipv6", - "ApplicationProtocol", - "Ftp", - "Email", - "Dns", - "Dhcp", - "Http", - "Tls", - "Smtp", - "Asn", - "DnsDomain", - "CarrierName", - "OrganizationName", - "IpSubnetRange", - "IsProxy", - "ProxyInfo", - "ConnectionState", - }); - internal_static_google_backstory_ProxyInfo_descriptor = getDescriptor().getMessageType(4); - internal_static_google_backstory_ProxyInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_ProxyInfo_descriptor, - new java.lang.String[] { - "Anonymous", - "AnonymousVpn", - "PublicProxy", - "TorExitNode", - "SmartDnsProxy", - "HostingProvider", - "VpnDatacenter", - "ResidentialProxy", - "VpnServiceName", - "ProxyOverVpn", - "RelayProxy", - }); - internal_static_google_backstory_Extensions_descriptor = getDescriptor().getMessageType(5); - internal_static_google_backstory_Extensions_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Extensions_descriptor, - new java.lang.String[] { - "Auth", - "Vulns", - "EntityRisk", - "LinuxUtmp", - "WindowsEventLog", - "ResourceUsage", - "SystemEventDetails", - "OutlookMetadata", - "Srum", - "UserAssist", - }); - internal_static_google_backstory_Authentication_descriptor = getDescriptor().getMessageType(6); - internal_static_google_backstory_Authentication_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Authentication_descriptor, - new java.lang.String[] { - "Type", "Mechanism", "AuthDetails", "Outcome", - }); - internal_static_google_backstory_LinuxUtmp_descriptor = getDescriptor().getMessageType(7); - internal_static_google_backstory_LinuxUtmp_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_LinuxUtmp_descriptor, - new java.lang.String[] { - "RecordType", - }); - internal_static_google_backstory_WindowsEventLog_descriptor = getDescriptor().getMessageType(8); - internal_static_google_backstory_WindowsEventLog_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_WindowsEventLog_descriptor, - new java.lang.String[] { - "Channel", "EventId", "ActivityId", - }); - internal_static_google_backstory_ResourceUsage_descriptor = getDescriptor().getMessageType(9); - internal_static_google_backstory_ResourceUsage_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_ResourceUsage_descriptor, - new java.lang.String[] { - "UsedEntity", "UsedEntityId", - }); - internal_static_google_backstory_SystemEventDetails_descriptor = - getDescriptor().getMessageType(10); - internal_static_google_backstory_SystemEventDetails_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SystemEventDetails_descriptor, - new java.lang.String[] { - "MessageType", "SenderImageId", "Subsystem", - }); - internal_static_google_backstory_OutlookMetadata_descriptor = - getDescriptor().getMessageType(11); - internal_static_google_backstory_OutlookMetadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_OutlookMetadata_descriptor, - new java.lang.String[] { - "Comment", "Template", "Title", "SecurityFlagsCount", - }); - internal_static_google_backstory_Srum_descriptor = getDescriptor().getMessageType(12); - internal_static_google_backstory_Srum_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Srum_descriptor, - new java.lang.String[] { - "Id", - "BackgroundBytesRead", - "BackgroundBytesWritten", - "BackgroundContextSwitches", - "BackgroundCycleCount", - "BackgroundFlushesCount", - "BackgroundReadOperations", - "BackgroundWriteOperations", - "InterfaceLuid", - }); - internal_static_google_backstory_UserAssist_descriptor = getDescriptor().getMessageType(13); - internal_static_google_backstory_UserAssist_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_UserAssist_descriptor, - new java.lang.String[] { - "ApplicationFocusCount", "ApplicationFocusDuration", "ExecutionsCount", "EntryIndex", - }); - internal_static_google_backstory_Vulnerabilities_descriptor = - getDescriptor().getMessageType(14); - internal_static_google_backstory_Vulnerabilities_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Vulnerabilities_descriptor, - new java.lang.String[] { - "Vulnerabilities", - }); - internal_static_google_backstory_Vulnerability_descriptor = getDescriptor().getMessageType(15); - internal_static_google_backstory_Vulnerability_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Vulnerability_descriptor, - new java.lang.String[] { - "About", - "Name", - "Description", - "Vendor", - "ScanStartTime", - "ScanEndTime", - "FirstFound", - "LastFound", - "Severity", - "SeverityDetails", - "CvssBaseScore", - "CvssVector", - "CvssVersion", - "CveId", - "CveDescription", - "VendorVulnerabilityId", - "VendorKnowledgeBaseArticleId", - }); - internal_static_google_backstory_Ftp_descriptor = getDescriptor().getMessageType(16); - internal_static_google_backstory_Ftp_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Ftp_descriptor, - new java.lang.String[] { - "Command", - }); - internal_static_google_backstory_Smtp_descriptor = getDescriptor().getMessageType(17); - internal_static_google_backstory_Smtp_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Smtp_descriptor, - new java.lang.String[] { - "Helo", "MailFrom", "RcptTo", "ServerResponse", "MessagePath", "IsWebmail", "IsTls", - }); - internal_static_google_backstory_Email_descriptor = getDescriptor().getMessageType(18); - internal_static_google_backstory_Email_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Email_descriptor, - new java.lang.String[] { - "From", "ReplyTo", "To", "Cc", "Bcc", "MailId", "Subject", "BounceAddress", - }); - internal_static_google_backstory_Process_descriptor = getDescriptor().getMessageType(19); - internal_static_google_backstory_Process_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Process_descriptor, - new java.lang.String[] { - "Pid", - "ParentPid", - "ParentProcess", - "File", - "CommandLine", - "CommandLineHistory", - "ProductSpecificProcessId", - "AccessMask", - "IntegrityLevelRid", - "Euid", - "Ruid", - "Egid", - "Rgid", - "Pgid", - "SessionLeaderPid", - "Tty", - "TokenElevationType", - "ProductSpecificParentProcessId", - "Ipv6", - "KernelDuration", - "UserDuration", - "RealDuration", - "State", - }); - internal_static_google_backstory_AnalyticsMetadata_descriptor = - getDescriptor().getMessageType(20); - internal_static_google_backstory_AnalyticsMetadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_AnalyticsMetadata_descriptor, - new java.lang.String[] { - "Analytic", - }); - internal_static_google_backstory_FindingVariable_descriptor = - getDescriptor().getMessageType(21); - internal_static_google_backstory_FindingVariable_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FindingVariable_descriptor, - new java.lang.String[] { - "Type", - "Value", - "SourcePath", - "BoolVal", - "BytesVal", - "DoubleVal", - "Int64Val", - "Uint64Val", - "StringVal", - "TimestampTime", - "NullVal", - "BoolSeq", - "BytesSeq", - "DoubleSeq", - "Int64Seq", - "Uint64Seq", - "StringSeq", - "TypedValue", - }); - internal_static_google_backstory_SecurityResult_descriptor = getDescriptor().getMessageType(22); - internal_static_google_backstory_SecurityResult_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_descriptor, - new java.lang.String[] { - "About", - "Category", - "CategoryDetails", - "ThreatName", - "RuleSet", - "RuleSetDisplayName", - "RulesetCategoryDisplayName", - "RuleId", - "RuleName", - "DisplayName", - "RuleVersion", - "RuleType", - "RuleAuthor", - "RuleLabels", - "AlertState", - "DetectionFields", - "Outcomes", - "Variables", - "Summary", - "Description", - "Action", - "ActionDetails", - "Severity", - "Confidence", - "Priority", - "RiskScore", - "ConfidenceScore", - "AnalyticsMetadata", - "SeverityDetails", - "ConfidenceDetails", - "PriorityDetails", - "UrlBackToProduct", - "ThreatId", - "ThreatFeedName", - "ThreatIdNamespace", - "ThreatStatus", - "AttackDetails", - "FirstDiscoveredTime", - "Associations", - "Campaigns", - "Reports", - "Verdict", - "LastUpdatedTime", - "VerdictInfo", - "ThreatVerdict", - "LastDiscoveredTime", - "DetectionDepth", - "ThreatCollections", - }); - internal_static_google_backstory_SecurityResult_Association_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(0); - internal_static_google_backstory_SecurityResult_Association_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_Association_descriptor, - new java.lang.String[] { - "Id", - "CountryCode", - "Type", - "Name", - "Description", - "Role", - "SourceCountry", - "Alias", - "FirstReferenceTime", - "LastReferenceTime", - "IndustriesAffected", - "AssociatedActors", - "RegionCode", - "SponsorRegion", - "TargetedRegions", - "Tags", - }); - internal_static_google_backstory_SecurityResult_Association_AssociationAlias_descriptor = - internal_static_google_backstory_SecurityResult_Association_descriptor.getNestedType(0); - internal_static_google_backstory_SecurityResult_Association_AssociationAlias_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_Association_AssociationAlias_descriptor, - new java.lang.String[] { - "Name", "Company", - }); - internal_static_google_backstory_SecurityResult_Source_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(1); - internal_static_google_backstory_SecurityResult_Source_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_Source_descriptor, - new java.lang.String[] { - "Name", - "BenignCount", - "MaliciousCount", - "Quality", - "ResponseCount", - "SourceCount", - "ThreatIntelligenceSources", - }); - internal_static_google_backstory_SecurityResult_ProviderMLVerdict_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(2); - internal_static_google_backstory_SecurityResult_ProviderMLVerdict_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_ProviderMLVerdict_descriptor, - new java.lang.String[] { - "SourceProvider", - "BenignCount", - "MaliciousCount", - "ConfidenceScore", - "MandiantSources", - "ThirdPartySources", - }); - internal_static_google_backstory_SecurityResult_AnalystVerdict_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(3); - internal_static_google_backstory_SecurityResult_AnalystVerdict_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_AnalystVerdict_descriptor, - new java.lang.String[] { - "ConfidenceScore", "VerdictTime", "VerdictResponse", - }); - internal_static_google_backstory_SecurityResult_IoCStats_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(4); - internal_static_google_backstory_SecurityResult_IoCStats_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_IoCStats_descriptor, - new java.lang.String[] { - "IocStatsType", - "FirstLevelSource", - "SecondLevelSource", - "BenignCount", - "Quality", - "MaliciousCount", - "ResponseCount", - "SourceCount", - }); - internal_static_google_backstory_SecurityResult_VerdictInfo_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(5); - internal_static_google_backstory_SecurityResult_VerdictInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_VerdictInfo_descriptor, - new java.lang.String[] { - "SourceCount", - "ResponseCount", - "NeighbourInfluence", - "VerdictType", - "SourceProvider", - "BenignCount", - "MaliciousCount", - "ConfidenceScore", - "IocStats", - "VerdictTime", - "VerdictResponse", - "GlobalCustomerCount", - "GlobalHitsCount", - "Pwn", - "CategoryDetails", - "PwnFirstTaggedTime", - }); - internal_static_google_backstory_SecurityResult_Verdict_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(6); - internal_static_google_backstory_SecurityResult_Verdict_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_Verdict_descriptor, - new java.lang.String[] { - "SourceCount", "ResponseCount", "NeighbourInfluence", "Verdict", "AnalystVerdict", - }); - internal_static_google_backstory_SecurityResult_ThreatCollectionItem_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(7); - internal_static_google_backstory_SecurityResult_ThreatCollectionItem_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_ThreatCollectionItem_descriptor, - new java.lang.String[] { - "Id", "Type", "AltNames", - }); - internal_static_google_backstory_SecurityResult_VariablesEntry_descriptor = - internal_static_google_backstory_SecurityResult_descriptor.getNestedType(8); - internal_static_google_backstory_SecurityResult_VariablesEntry_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SecurityResult_VariablesEntry_descriptor, - new java.lang.String[] { - "Key", "Value", - }); - internal_static_google_backstory_PeFileMetadata_descriptor = getDescriptor().getMessageType(23); - internal_static_google_backstory_PeFileMetadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_PeFileMetadata_descriptor, - new java.lang.String[] { - "ImportHash", - }); - internal_static_google_backstory_FileMetadata_descriptor = getDescriptor().getMessageType(24); - internal_static_google_backstory_FileMetadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FileMetadata_descriptor, - new java.lang.String[] { - "Pe", - }); - internal_static_google_backstory_File_descriptor = getDescriptor().getMessageType(25); - internal_static_google_backstory_File_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_File_descriptor, - new java.lang.String[] { - "Sha256", - "Md5", - "Sha1", - "Size", - "FullPath", - "MimeType", - "FileMetadata", - "SecurityResult", - "PeFile", - "Ssdeep", - "Vhash", - "Ahash", - "Authentihash", - "Symhash", - "PrefetchFileMetadata", - "FileType", - "CapabilitiesTags", - "Names", - "Tags", - "LastModificationTime", - "CreateTime", - "LastAccessTime", - "Prevalence", - "FirstSeenTime", - "LastSeenTime", - "StatMode", - "StatInode", - "StatDev", - "StatNlink", - "StatFlags", - "LastAnalysisTime", - "EmbeddedUrls", - "EmbeddedDomains", - "EmbeddedIps", - "ExifInfo", - "SignatureInfo", - "PdfInfo", - "FirstSubmissionTime", - "LastSubmissionTime", - "MainIcon", - "Ntfs", - "AppCompatCache", - }); - internal_static_google_backstory_NtfsFileMetadata_descriptor = - getDescriptor().getMessageType(26); - internal_static_google_backstory_NtfsFileMetadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_NtfsFileMetadata_descriptor, - new java.lang.String[] { - "ChangeTime", - "FilenameCreateTime", - "FilenameModifyTime", - "FilenameAccessTime", - "FilenameChangeTime", - "UsnJournal", - }); - internal_static_google_backstory_PrefetchFileMetadata_descriptor = - getDescriptor().getMessageType(27); - internal_static_google_backstory_PrefetchFileMetadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_PrefetchFileMetadata_descriptor, - new java.lang.String[] { - "RunCount", "PrefetchHash", - }); - internal_static_google_backstory_UsnJournal_descriptor = getDescriptor().getMessageType(28); - internal_static_google_backstory_UsnJournal_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_UsnJournal_descriptor, - new java.lang.String[] { - "AttributesFlag", "Attributes", "FileAttributes", "Allocated", "Reason", "Reasons", - }); - internal_static_google_backstory_AppCompatMetadata_descriptor = - getDescriptor().getMessageType(29); - internal_static_google_backstory_AppCompatMetadata_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_AppCompatMetadata_descriptor, - new java.lang.String[] { - "Sequence", "Executed", "ControlSet", - }); - internal_static_google_backstory_FileMetadataPE_descriptor = getDescriptor().getMessageType(30); - internal_static_google_backstory_FileMetadataPE_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FileMetadataPE_descriptor, - new java.lang.String[] { - "Imphash", - "EntryPoint", - "EntryPointExiftool", - "CompilationTime", - "CompilationExiftoolTime", - "Section", - "Imports", - "Resource", - "ResourcesTypeCount", - "ResourcesLanguageCount", - "ResourcesTypeCountStr", - "ResourcesLanguageCountStr", - "SignatureInfo", - }); - internal_static_google_backstory_FileMetadataPeResourceInfo_descriptor = - getDescriptor().getMessageType(31); - internal_static_google_backstory_FileMetadataPeResourceInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FileMetadataPeResourceInfo_descriptor, - new java.lang.String[] { - "Sha256Hex", "FiletypeMagic", "LanguageCode", "Entropy", "FileType", - }); - internal_static_google_backstory_SignatureInfo_descriptor = getDescriptor().getMessageType(32); - internal_static_google_backstory_SignatureInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SignatureInfo_descriptor, - new java.lang.String[] { - "Sigcheck", "Codesign", - }); - internal_static_google_backstory_FileMetadataSignatureInfo_descriptor = - getDescriptor().getMessageType(33); - internal_static_google_backstory_FileMetadataSignatureInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FileMetadataSignatureInfo_descriptor, - new java.lang.String[] { - "VerificationMessage", "Verified", "Signer", "Signers", "X509", - }); - internal_static_google_backstory_SignerInfo_descriptor = getDescriptor().getMessageType(34); - internal_static_google_backstory_SignerInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SignerInfo_descriptor, - new java.lang.String[] { - "Name", "Status", "ValidUsage", "CertIssuer", - }); - internal_static_google_backstory_FileMetadataCodesign_descriptor = - getDescriptor().getMessageType(35); - internal_static_google_backstory_FileMetadataCodesign_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FileMetadataCodesign_descriptor, - new java.lang.String[] { - "Id", "Format", "CompilationTime", "TeamId", - }); - internal_static_google_backstory_X509_descriptor = getDescriptor().getMessageType(36); - internal_static_google_backstory_X509_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_X509_descriptor, - new java.lang.String[] { - "Name", "Algorithm", "Thumbprint", "CertIssuer", "SerialNumber", - }); - internal_static_google_backstory_PDFInfo_descriptor = getDescriptor().getMessageType(37); - internal_static_google_backstory_PDFInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_PDFInfo_descriptor, - new java.lang.String[] { - "Js", - "Javascript", - "LaunchActionCount", - "ObjectStreamCount", - "EndobjCount", - "Header", - "Acroform", - "Autoaction", - "EmbeddedFile", - "Encrypted", - "Flash", - "Jbig2Compression", - "ObjCount", - "EndstreamCount", - "PageCount", - "StreamCount", - "Openaction", - "Startxref", - "SuspiciousColors", - "Trailer", - "Xfa", - "Xref", - }); - internal_static_google_backstory_StringToInt64MapEntry_descriptor = - getDescriptor().getMessageType(38); - internal_static_google_backstory_StringToInt64MapEntry_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_StringToInt64MapEntry_descriptor, - new java.lang.String[] { - "Key", "Value", - }); - internal_static_google_backstory_FileMetadataSection_descriptor = - getDescriptor().getMessageType(39); - internal_static_google_backstory_FileMetadataSection_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FileMetadataSection_descriptor, - new java.lang.String[] { - "Name", "Entropy", "RawSizeBytes", "VirtualSizeBytes", "Md5Hex", - }); - internal_static_google_backstory_FileMetadataImports_descriptor = - getDescriptor().getMessageType(40); - internal_static_google_backstory_FileMetadataImports_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_FileMetadataImports_descriptor, - new java.lang.String[] { - "Library", "Functions", - }); - internal_static_google_backstory_ExifInfo_descriptor = getDescriptor().getMessageType(41); - internal_static_google_backstory_ExifInfo_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_ExifInfo_descriptor, - new java.lang.String[] { - "OriginalFile", - "Product", - "Company", - "FileDescription", - "EntryPoint", - "CompilationTime", - }); - internal_static_google_backstory_Prevalence_descriptor = getDescriptor().getMessageType(42); - internal_static_google_backstory_Prevalence_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Prevalence_descriptor, - new java.lang.String[] { - "RollingMax", "DayCount", "RollingMaxSubDomains", "DayMax", "DayMaxSubDomains", - }); - internal_static_google_backstory_Dns_descriptor = getDescriptor().getMessageType(43); - internal_static_google_backstory_Dns_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Dns_descriptor, - new java.lang.String[] { - "Id", - "Response", - "Opcode", - "Authoritative", - "Truncated", - "RecursionDesired", - "RecursionAvailable", - "ResponseCode", - "Questions", - "Answers", - "Authority", - "Additional", - }); - internal_static_google_backstory_Dns_Question_descriptor = - internal_static_google_backstory_Dns_descriptor.getNestedType(0); - internal_static_google_backstory_Dns_Question_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Dns_Question_descriptor, - new java.lang.String[] { - "Name", "Type", "Class_", "Prevalence", - }); - internal_static_google_backstory_Dns_ResourceRecord_descriptor = - internal_static_google_backstory_Dns_descriptor.getNestedType(1); - internal_static_google_backstory_Dns_ResourceRecord_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Dns_ResourceRecord_descriptor, - new java.lang.String[] { - "Name", "Type", "Class_", "Ttl", "Data", "BinaryData", - }); - internal_static_google_backstory_Dhcp_descriptor = getDescriptor().getMessageType(44); - internal_static_google_backstory_Dhcp_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Dhcp_descriptor, - new java.lang.String[] { - "Opcode", - "Htype", - "Hlen", - "Hops", - "TransactionId", - "Seconds", - "Flags", - "Ciaddr", - "Yiaddr", - "Siaddr", - "Giaddr", - "Chaddr", - "Sname", - "File", - "Options", - "Type", - "LeaseTimeSeconds", - "ClientHostname", - "ClientIdentifier", - "RequestedAddress", - "ClientIdentifierString", - }); - internal_static_google_backstory_Dhcp_Option_descriptor = - internal_static_google_backstory_Dhcp_descriptor.getNestedType(0); - internal_static_google_backstory_Dhcp_Option_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Dhcp_Option_descriptor, - new java.lang.String[] { - "Code", "Data", - }); - internal_static_google_backstory_Certificate_descriptor = getDescriptor().getMessageType(45); - internal_static_google_backstory_Certificate_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Certificate_descriptor, - new java.lang.String[] { - "Version", - "Serial", - "Subject", - "Issuer", - "Md5", - "Sha1", - "Sha256", - "NotBefore", - "NotAfter", - }); - internal_static_google_backstory_Tls_descriptor = getDescriptor().getMessageType(46); - internal_static_google_backstory_Tls_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Tls_descriptor, - new java.lang.String[] { - "Client", - "Server", - "Cipher", - "Curve", - "Version", - "VersionProtocol", - "Established", - "NextProtocol", - "Resumed", - }); - internal_static_google_backstory_Tls_Client_descriptor = - internal_static_google_backstory_Tls_descriptor.getNestedType(0); - internal_static_google_backstory_Tls_Client_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Tls_Client_descriptor, - new java.lang.String[] { - "Certificate", "Ja3", "ServerName", "SupportedCiphers", "Ja4", - }); - internal_static_google_backstory_Tls_Server_descriptor = - internal_static_google_backstory_Tls_descriptor.getNestedType(1); - internal_static_google_backstory_Tls_Server_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Tls_Server_descriptor, - new java.lang.String[] { - "Certificate", "Ja3S", "Ja4S", - }); - internal_static_google_backstory_Http_descriptor = getDescriptor().getMessageType(47); - internal_static_google_backstory_Http_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Http_descriptor, - new java.lang.String[] { - "Method", "ReferralUrl", "UserAgent", "ResponseCode", - }); - internal_static_google_backstory_Browser_descriptor = getDescriptor().getMessageType(48); - internal_static_google_backstory_Browser_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Browser_descriptor, - new java.lang.String[] { - "BrowserType", - "BrowserVersion", - "FirstVisitTime", - "LastVisitTime", - "Profile", - "Typed", - "VisitType", - "Hidden", - "RequestOriginUri", - "VisitCount", - "VisitCountCriteria", - "IndexedContent", - "FirstBookmarkedTime", - "Cookies", - "TypedCount", - "VisitSource", - }); - internal_static_google_backstory_Browser_Cookie_descriptor = - internal_static_google_backstory_Browser_descriptor.getNestedType(0); - internal_static_google_backstory_Browser_Cookie_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Browser_Cookie_descriptor, - new java.lang.String[] { - "Name", - "Value", - "Domain", - "Path", - "ExpirationTime", - "HttpOnly", - "Secure", - "MaxAge", - "SameSite", - "Session", - "Partitioned", - }); - internal_static_google_backstory_Hardware_descriptor = getDescriptor().getMessageType(49); - internal_static_google_backstory_Hardware_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Hardware_descriptor, - new java.lang.String[] { - "SerialNumber", - "Manufacturer", - "Model", - "CpuPlatform", - "CpuModel", - "CpuClockSpeed", - "CpuMaxClockSpeed", - "CpuNumberCores", - "Ram", - }); - internal_static_google_backstory_PlatformSoftware_descriptor = - getDescriptor().getMessageType(50); - internal_static_google_backstory_PlatformSoftware_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_PlatformSoftware_descriptor, - new java.lang.String[] { - "Platform", "PlatformVersion", "PlatformPatchLevel", - }); - internal_static_google_backstory_Software_descriptor = getDescriptor().getMessageType(51); - internal_static_google_backstory_Software_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Software_descriptor, - new java.lang.String[] { - "Name", "Version", "Permissions", "Description", "VendorName", - }); - internal_static_google_backstory_Asset_descriptor = getDescriptor().getMessageType(52); - internal_static_google_backstory_Asset_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Asset_descriptor, - new java.lang.String[] { - "ProductObjectId", - "Hostname", - "AssetId", - "Ip", - "Mac", - "NatIp", - "FirstSeenTime", - "Hardware", - "PlatformSoftware", - "Software", - "Location", - "Category", - "Type", - "NetworkDomain", - "CreationTime", - "FirstDiscoverTime", - "LastDiscoverTime", - "SystemLastUpdateTime", - "LastBootTime", - "Labels", - "DeploymentStatus", - "Vulnerabilities", - "Attribute", - "WmiPersistenceItem", - }); - internal_static_google_backstory_User_descriptor = getDescriptor().getMessageType(53); - internal_static_google_backstory_User_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_User_descriptor, - new java.lang.String[] { - "ProductObjectId", - "Userid", - "UserDisplayName", - "FirstName", - "MiddleName", - "LastName", - "PhoneNumbers", - "PersonalAddress", - "Attribute", - "FirstSeenTime", - "AccountType", - "Groupid", - "GroupIdentifiers", - "WindowsSid", - "EmailAddresses", - "EmployeeId", - "Title", - "CompanyName", - "Department", - "OfficeAddress", - "Managers", - "HireDate", - "TerminationDate", - "TimeOff", - "LastLoginTime", - "LastPasswordChangeTime", - "PasswordExpirationTime", - "AccountExpirationTime", - "AccountLockoutTime", - "LastBadPasswordAttemptTime", - "UserAuthenticationStatus", - "RoleName", - "RoleDescription", - "UserRole", - }); - internal_static_google_backstory_TimeOff_descriptor = getDescriptor().getMessageType(54); - internal_static_google_backstory_TimeOff_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_TimeOff_descriptor, - new java.lang.String[] { - "Interval", "Description", - }); - internal_static_google_backstory_Permission_descriptor = getDescriptor().getMessageType(55); - internal_static_google_backstory_Permission_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Permission_descriptor, - new java.lang.String[] { - "Name", "Description", "Type", - }); - internal_static_google_backstory_Role_descriptor = getDescriptor().getMessageType(56); - internal_static_google_backstory_Role_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Role_descriptor, - new java.lang.String[] { - "Name", "Description", "Type", - }); - internal_static_google_backstory_Group_descriptor = getDescriptor().getMessageType(57); - internal_static_google_backstory_Group_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Group_descriptor, - new java.lang.String[] { - "ProductObjectId", - "CreationTime", - "GroupDisplayName", - "Attribute", - "EmailAddresses", - "WindowsSid", - }); - internal_static_google_backstory_Registry_descriptor = getDescriptor().getMessageType(58); - internal_static_google_backstory_Registry_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Registry_descriptor, - new java.lang.String[] { - "RegistryKey", - "RegistryValueName", - "RegistryValueData", - "RegistryValueType", - "RegistryValueBinaryData", - }); - internal_static_google_backstory_WmiPersistenceItem_descriptor = - getDescriptor().getMessageType(59); - internal_static_google_backstory_WmiPersistenceItem_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_WmiPersistenceItem_descriptor, - new java.lang.String[] { - "Caption", - "Name", - "SettingId", - "Derivation", - "PropertyCount", - "RelPath", - "Dynasty", - "WmiSuperClass", - "WmiClass", - "Genus", - }); - internal_static_google_backstory_Location_descriptor = getDescriptor().getMessageType(60); - internal_static_google_backstory_Location_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Location_descriptor, - new java.lang.String[] { - "City", - "State", - "CountryOrRegion", - "Name", - "DeskName", - "FloorName", - "RegionLatitude", - "RegionLongitude", - "RegionCoordinates", - }); - internal_static_google_backstory_ScheduledTask_descriptor = getDescriptor().getMessageType(61); - internal_static_google_backstory_ScheduledTask_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_ScheduledTask_descriptor, - new java.lang.String[] { - "Minute", "Hour", "MonthDay", "Month", "WeekDay", "Comment", "Author", - }); - internal_static_google_backstory_WindowsScheduledTask_descriptor = - getDescriptor().getMessageType(62); - internal_static_google_backstory_WindowsScheduledTask_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_WindowsScheduledTask_descriptor, - new java.lang.String[] { - "Author", - "VirtualPath", - "ExitCode", - "State", - "LogonType", - "TaskActions", - "TaskTriggers", - }); - internal_static_google_backstory_WindowsScheduledTask_TaskAction_descriptor = - internal_static_google_backstory_WindowsScheduledTask_descriptor.getNestedType(0); - internal_static_google_backstory_WindowsScheduledTask_TaskAction_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_WindowsScheduledTask_TaskAction_descriptor, - new java.lang.String[] { - "ActionType", "ExecArguments", "ExecWorkingDirectory", "ComClassId", "ComData", - }); - internal_static_google_backstory_WindowsScheduledTask_TaskTrigger_descriptor = - internal_static_google_backstory_WindowsScheduledTask_descriptor.getNestedType(1); - internal_static_google_backstory_WindowsScheduledTask_TaskTrigger_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_WindowsScheduledTask_TaskTrigger_descriptor, - new java.lang.String[] { - "Enabled", "Duration", "Interval", "TriggerType", - }); - internal_static_google_backstory_ScheduledCronTask_descriptor = - getDescriptor().getMessageType(63); - internal_static_google_backstory_ScheduledCronTask_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_ScheduledCronTask_descriptor, - new java.lang.String[] { - "Minute", - "Hour", - "MonthDay", - "Month", - "WeekDay", - "Comment", - "Author", - "Event", - "Path", - }); - internal_static_google_backstory_ScheduledAnacronTask_descriptor = - getDescriptor().getMessageType(64); - internal_static_google_backstory_ScheduledAnacronTask_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_ScheduledAnacronTask_descriptor, - new java.lang.String[] { - "Period", "DelayMinutes", "JobId", "Path", "SourceLine", - }); - internal_static_google_backstory_Volume_descriptor = getDescriptor().getMessageType(65); - internal_static_google_backstory_Volume_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Volume_descriptor, - new java.lang.String[] { - "FileSystem", "MountPoint", "DevicePath", "IsMounted", "IsReadOnly", "Name", - }); - internal_static_google_backstory_Service_descriptor = getDescriptor().getMessageType(66); - internal_static_google_backstory_Service_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Service_descriptor, - new java.lang.String[] { - "DisplayName", "ServiceType", "ServiceTypes", "StartupType", "State", - }); - internal_static_google_backstory_Resource_descriptor = getDescriptor().getMessageType(67); - internal_static_google_backstory_Resource_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Resource_descriptor, - new java.lang.String[] { - "Type", - "ResourceType", - "ResourceSubtype", - "Id", - "Name", - "Parent", - "ProductObjectId", - "Attribute", - "ScheduledTask", - "ScheduledCronTask", - "ScheduledAnacronTask", - "WindowsScheduledTask", - "Volume", - "Service", - }); - internal_static_google_backstory_Label_descriptor = getDescriptor().getMessageType(68); - internal_static_google_backstory_Label_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Label_descriptor, - new java.lang.String[] { - "Key", "Value", "Source", "RbacEnabled", - }); - internal_static_google_backstory_Cloud_descriptor = getDescriptor().getMessageType(69); - internal_static_google_backstory_Cloud_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Cloud_descriptor, - new java.lang.String[] { - "Environment", "Vpc", "Project", "AvailabilityZone", - }); - internal_static_google_backstory_Artifact_descriptor = getDescriptor().getMessageType(70); - internal_static_google_backstory_Artifact_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Artifact_descriptor, - new java.lang.String[] { - "Ip", - "Prevalence", - "FirstSeenTime", - "LastSeenTime", - "Location", - "Network", - "AsOwner", - "Asn", - "Jarm", - "LastHttpsCertificate", - "LastHttpsCertificateDate", - "RegionalInternetRegistry", - "Tags", - "Whois", - "WhoisDate", - "Tunnels", - "Anonymous", - "ArtifactClient", - "Risks", - }); - internal_static_google_backstory_Tunnels_descriptor = getDescriptor().getMessageType(71); - internal_static_google_backstory_Tunnels_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Tunnels_descriptor, - new java.lang.String[] { - "Provider", "Type", - }); - internal_static_google_backstory_ArtifactClient_descriptor = getDescriptor().getMessageType(72); - internal_static_google_backstory_ArtifactClient_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_ArtifactClient_descriptor, - new java.lang.String[] { - "Behaviors", "Proxies", - }); - internal_static_google_backstory_Favicon_descriptor = getDescriptor().getMessageType(73); - internal_static_google_backstory_Favicon_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Favicon_descriptor, - new java.lang.String[] { - "RawMd5", "Dhash", - }); - internal_static_google_backstory_DNSRecord_descriptor = getDescriptor().getMessageType(74); - internal_static_google_backstory_DNSRecord_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_DNSRecord_descriptor, - new java.lang.String[] { - "Type", - "Value", - "Ttl", - "Priority", - "Retry", - "Refresh", - "Minimum", - "Expire", - "Serial", - "Rname", - }); - internal_static_google_backstory_SSLCertificate_descriptor = getDescriptor().getMessageType(75); - internal_static_google_backstory_SSLCertificate_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_descriptor, - new java.lang.String[] { - "CertSignature", - "Extension", - "CertExtensions", - "FirstSeenTime", - "Issuer", - "Ec", - "SerialNumber", - "SignatureAlgorithm", - "Size", - "Subject", - "Thumbprint", - "ThumbprintSha256", - "Validity", - "Version", - "PublicKey", - }); - internal_static_google_backstory_SSLCertificate_CertSignature_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(0); - internal_static_google_backstory_SSLCertificate_CertSignature_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_CertSignature_descriptor, - new java.lang.String[] { - "Signature", "SignatureAlgorithm", - }); - internal_static_google_backstory_SSLCertificate_AuthorityKeyId_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(1); - internal_static_google_backstory_SSLCertificate_AuthorityKeyId_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_AuthorityKeyId_descriptor, - new java.lang.String[] { - "Keyid", "SerialNumber", - }); - internal_static_google_backstory_SSLCertificate_Extension_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(2); - internal_static_google_backstory_SSLCertificate_Extension_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_Extension_descriptor, - new java.lang.String[] { - "Ca", - "SubjectKeyId", - "AuthorityKeyId", - "KeyUsage", - "CaInfoAccess", - "CrlDistributionPoints", - "ExtendedKeyUsage", - "SubjectAlternativeName", - "CertificatePolicies", - "NetscapeCertComment", - "CertTemplateNameDc", - "NetscapeCertificate", - "PeLogotype", - "OldAuthorityKeyId", - }); - internal_static_google_backstory_SSLCertificate_Subject_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(3); - internal_static_google_backstory_SSLCertificate_Subject_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_Subject_descriptor, - new java.lang.String[] { - "CountryName", - "CommonName", - "Locality", - "Organization", - "OrganizationalUnit", - "StateOrProvinceName", - }); - internal_static_google_backstory_SSLCertificate_RSA_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(4); - internal_static_google_backstory_SSLCertificate_RSA_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_RSA_descriptor, - new java.lang.String[] { - "KeySize", "Modulus", "Exponent", - }); - internal_static_google_backstory_SSLCertificate_EC_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(5); - internal_static_google_backstory_SSLCertificate_EC_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_EC_descriptor, - new java.lang.String[] { - "Oid", "Pub", - }); - internal_static_google_backstory_SSLCertificate_PublicKey_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(6); - internal_static_google_backstory_SSLCertificate_PublicKey_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_PublicKey_descriptor, - new java.lang.String[] { - "Algorithm", "Rsa", - }); - internal_static_google_backstory_SSLCertificate_Validity_descriptor = - internal_static_google_backstory_SSLCertificate_descriptor.getNestedType(7); - internal_static_google_backstory_SSLCertificate_Validity_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_SSLCertificate_Validity_descriptor, - new java.lang.String[] { - "ExpiryTime", "IssueTime", - }); - internal_static_google_backstory_PopularityRank_descriptor = getDescriptor().getMessageType(76); - internal_static_google_backstory_PopularityRank_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_PopularityRank_descriptor, - new java.lang.String[] { - "Giver", "Rank", "IngestionTime", - }); - internal_static_google_backstory_Tracker_descriptor = getDescriptor().getMessageType(77); - internal_static_google_backstory_Tracker_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Tracker_descriptor, - new java.lang.String[] { - "Tracker", "Id", "Timestamp", "Url", - }); - internal_static_google_backstory_Url_descriptor = getDescriptor().getMessageType(78); - internal_static_google_backstory_Url_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Url_descriptor, - new java.lang.String[] { - "Url", - "Categories", - "Favicon", - "HtmlMeta", - "LastFinalUrl", - "LastHttpResponseCode", - "LastHttpResponseContentLength", - "LastHttpResponseContentSha256", - "LastHttpResponseCookies", - "LastHttpResponseHeaders", - "Tags", - "Title", - "Trackers", - }); - internal_static_google_backstory_Domain_descriptor = getDescriptor().getMessageType(79); - internal_static_google_backstory_Domain_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Domain_descriptor, - new java.lang.String[] { - "Name", - "Prevalence", - "FirstSeenTime", - "LastSeenTime", - "Registrar", - "ContactEmail", - "WhoisServer", - "NameServer", - "CreationTime", - "UpdateTime", - "ExpirationTime", - "AuditUpdateTime", - "Status", - "Registrant", - "Admin", - "Tech", - "Billing", - "Zone", - "WhoisRecordRawText", - "RegistryDataRawText", - "IanaRegistrarId", - "PrivateRegistration", - "Categories", - "Favicon", - "Jarm", - "LastDnsRecords", - "LastDnsRecordsTime", - "LastHttpsCertificate", - "LastHttpsCertificateTime", - "PopularityRanks", - "Tags", - "WhoisTime", - }); - internal_static_google_backstory_Noun_descriptor = getDescriptor().getMessageType(80); - internal_static_google_backstory_Noun_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Noun_descriptor, - new java.lang.String[] { - "Hostname", - "Domain", - "Artifact", - "UrlMetadata", - "Browser", - "AssetId", - "User", - "UserManagementChain", - "Group", - "Process", - "ProcessAncestors", - "Asset", - "Ip", - "NatIp", - "Port", - "NatPort", - "Mac", - "AdministrativeDomain", - "Namespace", - "Url", - "File", - "Email", - "Registry", - "Application", - "Platform", - "PlatformVersion", - "PlatformPatchLevel", - "Cloud", - "Location", - "IpLocation", - "IpGeoArtifact", - "Resource", - "ResourceAncestors", - "Labels", - "ObjectReference", - "Investigation", - "Network", - "SecurityResult", - }); - internal_static_google_backstory_Investigation_descriptor = getDescriptor().getMessageType(81); - internal_static_google_backstory_Investigation_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Investigation_descriptor, - new java.lang.String[] { - "Verdict", - "Reputation", - "SeverityScore", - "Status", - "Comments", - "Priority", - "RootCause", - "Reason", - "RiskScore", - "Id", - }); - internal_static_google_backstory_Tags_descriptor = getDescriptor().getMessageType(82); - internal_static_google_backstory_Tags_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Tags_descriptor, - new java.lang.String[] { - "TenantId", "DataTapConfigName", - }); - internal_static_google_backstory_AttackDetails_descriptor = getDescriptor().getMessageType(83); - internal_static_google_backstory_AttackDetails_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_AttackDetails_descriptor, - new java.lang.String[] { - "Version", "Tactics", "Techniques", - }); - internal_static_google_backstory_AttackDetails_Tactic_descriptor = - internal_static_google_backstory_AttackDetails_descriptor.getNestedType(0); - internal_static_google_backstory_AttackDetails_Tactic_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_AttackDetails_Tactic_descriptor, - new java.lang.String[] { - "Id", "Name", - }); - internal_static_google_backstory_AttackDetails_Technique_descriptor = - internal_static_google_backstory_AttackDetails_descriptor.getNestedType(1); - internal_static_google_backstory_AttackDetails_Technique_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_AttackDetails_Technique_descriptor, - new java.lang.String[] { - "Id", "Name", "SubtechniqueId", "SubtechniqueName", - }); - internal_static_google_backstory_BoolSequence_descriptor = getDescriptor().getMessageType(84); - internal_static_google_backstory_BoolSequence_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_BoolSequence_descriptor, - new java.lang.String[] { - "BoolVals", - }); - internal_static_google_backstory_BytesSequence_descriptor = getDescriptor().getMessageType(85); - internal_static_google_backstory_BytesSequence_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_BytesSequence_descriptor, - new java.lang.String[] { - "BytesVals", - }); - internal_static_google_backstory_DoubleSequence_descriptor = getDescriptor().getMessageType(86); - internal_static_google_backstory_DoubleSequence_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_DoubleSequence_descriptor, - new java.lang.String[] { - "DoubleVals", - }); - internal_static_google_backstory_Int64Sequence_descriptor = getDescriptor().getMessageType(87); - internal_static_google_backstory_Int64Sequence_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Int64Sequence_descriptor, - new java.lang.String[] { - "Int64Vals", - }); - internal_static_google_backstory_Uint64Sequence_descriptor = getDescriptor().getMessageType(88); - internal_static_google_backstory_Uint64Sequence_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_Uint64Sequence_descriptor, - new java.lang.String[] { - "Uint64Vals", - }); - internal_static_google_backstory_StringSequence_descriptor = getDescriptor().getMessageType(89); - internal_static_google_backstory_StringSequence_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_StringSequence_descriptor, - new java.lang.String[] { - "StringVals", - }); - internal_static_google_backstory_GroupedFields_descriptor = getDescriptor().getMessageType(90); - internal_static_google_backstory_GroupedFields_fieldAccessorTable = - new com.google.protobuf.GeneratedMessage.FieldAccessorTable( - internal_static_google_backstory_GroupedFields_descriptor, - new java.lang.String[] { - "Ip", "Domain", "Hostname", "User", "Email", "FilePath", "Hash", "ProcessId", - }); - descriptor.resolveAllFeaturesImmutable(); - com.google.backstory.DataAccess.getDescriptor(); - com.google.backstory.EntityRiskProto.getDescriptor(); - com.google.backstory.IdOuterClass.getDescriptor(); - com.google.protobuf.DurationProto.getDescriptor(); - com.google.protobuf.StructProto.getDescriptor(); - com.google.protobuf.TimestampProto.getDescriptor(); - com.google.type.IntervalProto.getDescriptor(); - com.google.type.LatLngProto.getDescriptor(); - } - - // @@protoc_insertion_point(outer_class_scope) -} diff --git a/java-batch/google-cloud-batch/src/main/java/com/google/cloud/batch/v1alpha/BatchServiceClient.java b/java-batch/google-cloud-batch/src/main/java/com/google/cloud/batch/v1alpha/BatchServiceClient.java index 8c43e19f8ea9..578f410e6dbf 100644 --- a/java-batch/google-cloud-batch/src/main/java/com/google/cloud/batch/v1alpha/BatchServiceClient.java +++ b/java-batch/google-cloud-batch/src/main/java/com/google/cloud/batch/v1alpha/BatchServiceClient.java @@ -328,7 +328,9 @@ * * *

ListLocations - *

Lists information about the supported locations for this service. + *

Lists information about the supported locations for this service. + *

This method lists locations based on the resource scope provided inthe [ListLocationsRequest.name][google.cloud.location.ListLocationsRequest.name] field: ***Global locations**: If `name` is empty, the method lists thepublic locations available to all projects. * **Project-specificlocations**: If `name` follows the format`projects/{project}`, the method lists locations visible to thatspecific project. This includes public, private, or otherproject-specific locations enabled for the project. + *

For gRPC and client library implementations, the resource name ispassed as the `name` field. For direct service calls, the resourcename isincorporated into the request path based on the specific serviceimplementation and version. * *

Request object method variants only take one parameter, a request object, which must be constructed before the call.

*