Version: 4.1.0.13

maec.bundle.process_tree Module

Classes

class maec.bundle.process_tree.ProcessTree(root_process=None)

Bases: maec.Entity

set_root_process(root_process)

Set the Root Process node of the Process Tree entity.

class maec.bundle.process_tree.ProcessTreeNode(id=None, parent_action_idref=None)

Bases: cybox.objects.process_object.Process

add_initiated_action(action_id)

Add an initiated Action to the Process Tree node, based on its ID.

add_injected_process(process_node, process_id=None)

Add an injected process to the Process Tree node, either directly or to a particular process embedded in the node based on its ID.

add_spawned_process(process_node, process_id=None)

Add a spawned process to the Process Tree node, either directly or to a particular process embedded in the node based on its ID.

find_embedded_process(process_id)

Find a Process embedded somewhere in the Process Tree node tree, based on its ID.

set_id(id)

Set the ID of the Process Tree node.

set_parent_action(parent_action_id)

Set the ID of the parent action of the Process Tree node.