Skip to content

LineageObject

Source code in docs_src/capo_guardduty/types/lineage_object.py
class LineageObject(TypedDict, closed=True):
    start_time: NotRequired["capo_guardduty.types.timestamp.Timestamp"]
    """<p>The time when the process started. This is in UTC format.</p>"""
    namespace_pid: NotRequired["capo_guardduty.types.integer.Integer"]
    """<p>The process ID of the child process.</p>"""
    user_id: NotRequired["capo_guardduty.types.integer.Integer"]
    """<p>The user ID of the user that executed the process.</p>"""
    name: NotRequired["capo_guardduty.types.string.String"]
    """<p>The name of the process.</p>"""
    pid: NotRequired["capo_guardduty.types.integer.Integer"]
    """<p>The ID of the process.</p>"""
    uuid: NotRequired["capo_guardduty.types.string.String"]
    """<p>The unique ID assigned to the process by GuardDuty.</p>"""
    executable_path: NotRequired["capo_guardduty.types.string.String"]
    """<p>The absolute path of the process executable file.</p>"""
    euid: NotRequired["capo_guardduty.types.integer.Integer"]
    """<p>The effective user ID that was used to execute the process.</p>"""
    parent_uuid: NotRequired["capo_guardduty.types.string.String"]
    """<p>The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.</p>"""

euid instance-attribute

euid: NotRequired[Integer]

The effective user ID that was used to execute the process.

executable_path instance-attribute

executable_path: NotRequired[String]

The absolute path of the process executable file.

name instance-attribute

name: NotRequired[String]

The name of the process.

namespace_pid instance-attribute

namespace_pid: NotRequired[Integer]

The process ID of the child process.

parent_uuid instance-attribute

parent_uuid: NotRequired[String]

The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.

pid instance-attribute

pid: NotRequired[Integer]

The ID of the process.

start_time instance-attribute

start_time: NotRequired[Timestamp]

The time when the process started. This is in UTC format.

user_id instance-attribute

user_id: NotRequired[Integer]

The user ID of the user that executed the process.

uuid instance-attribute

uuid: NotRequired[String]

The unique ID assigned to the process by GuardDuty.