ProcessEntity interface

Package:
@azure/arm-securityinsight

Represents a process entity.

Extends
Entity

Properties

accountEntityId

The account entity id running the processes.
additionalData

A bag of custom fields that should be part of the entity and will be presented to the user.
commandLine

The command line used to create the process
creationTimeUtc

The time when the process started to run
elevationToken

The elevation token associated with the process.
friendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.
hostEntityId

The host entity id on which the process was running
hostLogonSessionEntityId

The session entity id in which the process was running
imageFileEntityId

Image file entity id
kind

The kind of the entity.
parentProcessEntityId

The parent process entity id.
processId

The process ID

Inherited Properties

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
name

The name of the resource
systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.
type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Property Details

accountEntityId

The account entity id running the processes.

accountEntityId?: string

Property Value

string

additionalData

A bag of custom fields that should be part of the entity and will be presented to the user.

additionalData?: Record<string, any>

Property Value

Record<string, any>

commandLine

The command line used to create the process

commandLine?: string

Property Value

string

creationTimeUtc

The time when the process started to run

creationTimeUtc?: Date

Property Value

Date

elevationToken

The elevation token associated with the process.

elevationToken?: ElevationToken

Property Value

ElevationToken

friendlyName

The graph item display name which is a short humanly readable description of the graph item instance. This property is optional and might be system generated.

friendlyName?: string

Property Value

string

hostEntityId

The host entity id on which the process was running

hostEntityId?: string

Property Value

string

hostLogonSessionEntityId

The session entity id in which the process was running

hostLogonSessionEntityId?: string

Property Value

string

imageFileEntityId

Image file entity id

imageFileEntityId?: string

Property Value

string

kind

The kind of the entity.

kind: "Process"

Property Value

"Process"

parentProcessEntityId

The parent process entity id.

parentProcessEntityId?: string

Property Value

string

processId

The process ID

processId?: string

Property Value

string

Inherited Property Details

id

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

id?: string

Property Value

string

Inherited From Entity.id

name

The name of the resource

name?: string

Property Value

string

Inherited From Entity.name

systemData

Azure Resource Manager metadata containing createdBy and modifiedBy information.

systemData?: SystemData

Property Value

SystemData

Inherited From Entity.systemData

type

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

type?: string

Property Value

string

Inherited From Entity.type