/ 
STIX-1.01
/ STIX::Observable::Process

NAME

STIX::Observable::Process - STIX Cyber-observable Object (SCO) - Process

SYNOPSIS

use STIX::Observable::Process;

my $process = STIX::Observable::Process->new();

DESCRIPTION

The Process Object represents common properties of an instance of a computer program as executed on an operating system.

METHODS

STIX::Observable::Process inherits all methods from STIX::Observable and implements the following new ones.

STIX::Observable::Process->new(%properties)

Create a new instance of STIX::Observable::Process.

$process->child_refs

Specifies the other processes that were spawned by (i.e. children of) this process, as a reference to one or more other Process Objects.

$process->command_line

Specifies the full command line used in executing the process, including the process name (which may be specified individually via the binary_ref.name property) and any arguments.

$process->created_time

Specifies the date/time at which the process was created.

$process->creator_user_ref

Specifies the user that created the process, as a reference to a User Account Object.

$process->cwd

Specifies the current working directory of the process.

$process->environment_variables

Specifies the list of environment variables associated with the process as a dictionary.

$process->extensions

The Process Object defines the following extensions. In addition to these, producers MAY create their own. Extensions: windows-process-ext, windows-service-ext.

$process->id
$process->image_ref

Specifies the executable binary that was executed as the process image, as a reference to a File Object.

$process->is_hidden

Specifies whether the process is hidden.

$process->opened_connection_refs

Specifies the list of network connections opened by the process, as a reference to one or more Network Traffic Objects.

$process->parent_ref

Specifies the other process that spawned (i.e. is the parent of) this one, as represented by a Process Object.

$process->pid

Specifies the Process ID, or PID, of the process.

$process->type

The value of this property MUST be process.

HELPERS

$process->TO_JSON

Encode the object in JSON.

$process->to_hash

Return the object HASH.

$process->to_string

Encode the object in JSON.

$process->validate

Validate the object using JSON Schema (see STIX::Schema).

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-STIX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-STIX

git clone https://github.com/giterlizzi/perl-STIX.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2024 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.