Skip to content

ClientFileProtectProps

Properties for defining a ClientFileProtect.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-threatdetection-clientfileprotect

Initializer

using AlibabaCloud.SDK.ROS.CDK.Threatdetection;
new ClientFileProtectProps {
    object FileOps,
    object FilePaths,
    object ProcPaths,
    object RuleAction,
    object RuleName,
    object AlertLevel = null,
    object Platform = null,
    object Status = null,
    object SwitchId = null
};

Properties

Name Type Description
FileOps object Property fileOps: The operations that you want to perform on the files.
FilePaths object Property filePaths: The paths to the monitored files.
ProcPaths object Property procPaths: The paths to the monitored processes.
RuleAction object Property ruleAction: The handling method of the rule.
RuleName object Property ruleName: The name of the rule.
AlertLevel object Property alertLevel: The severity of alerts.
Platform object Property platform: The type of the operating system.
Status object Property status: Rule status.
SwitchId object Property switchId: The switch ID of the rule.

FileOpsRequired

public object FileOps { get; set; }
  • Type: object

Property fileOps: The operations that you want to perform on the files.


FilePathsRequired

public object FilePaths { get; set; }
  • Type: object

Property filePaths: The paths to the monitored files.

Wildcard characters are supported.


ProcPathsRequired

public object ProcPaths { get; set; }
  • Type: object

Property procPaths: The paths to the monitored processes.


RuleActionRequired

public object RuleAction { get; set; }
  • Type: object

Property ruleAction: The handling method of the rule.

Valid values:

  • pass: allow
  • alert.

RuleNameRequired

public object RuleName { get; set; }
  • Type: object

Property ruleName: The name of the rule.


AlertLevelOptional

public object AlertLevel { get; set; }
  • Type: object

Property alertLevel: The severity of alerts.

Valid values:

  • 0: does not generate alerts
  • 1: sends notifications
  • 2: suspicious
  • 3: high-risk.

PlatformOptional

public object Platform { get; set; }
  • Type: object

Property platform: The type of the operating system.

Valid values:

  • windows: Windows
  • linux: Linux.

StatusOptional

public object Status { get; set; }
  • Type: object

Property status: Rule status.

1: Enabled 0: Not enabled


SwitchIdOptional

public object SwitchId { get; set; }
  • Type: object

Property switchId: The switch ID of the rule.