Skip to content

Process

Bases: Entity

Functions

__init__

__init__(process_name: str, pid: int, username: str, parent_pid: int = None, program_name: str = None, path: str = None, open_ports: list = None, process_type: str = None, process_version: str = None, decoy_type: DecoyType = DecoyType.NONE, properties: List[str] = None)

Parameters:

Name Type Description Default
process_name str

name of process

required
pid int

id of process

required
parent_pid int

id of parent of process

None
program_name str

program the process is running

None
username str

the user runnning the process

required
path str

the path of the program the process is running

None
open_ports list

listening ports of structure [{Port: int, Address: str, Application Protocol: str}, ...]

None
process_type str

the type of process

None
process_version str

the version of the process

None
decoy_type DecoyType

which red actions are prevented despite appearing vulnerable

DecoyType.NONE
properties List[str]

properties of the process to specify configuration details such as RFI presence

None

get_state

get_state()

Getter for the state of the process.

Returns:

Name Type Description
observations List[dict]