Client User Define Rule
Provides a Threat Detection Client User Define Rule resource. Malicious Behavior Defense Custom Rules. For information about Threat Detection Client User Define Rule and how to use it, see What is Client User Define Rule.
NOTE: Available since v1.212.0.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const _default = new alicloud.threatdetection.ClientUserDefineRule("default", {
actionType: 0,
platform: "windows",
registryContent: "123",
clientUserDefineRuleName: name,
parentProcPath: "/root/bash",
type: 5,
cmdline: "bash",
procPath: "/root/bash",
parentCmdline: "bash",
registryKey: "123",
});
import pulumi
import pulumi_alicloud as alicloud
config = pulumi.Config()
name = config.get("name")
if name is None:
name = "terraform-example"
default = alicloud.threatdetection.ClientUserDefineRule("default",
action_type=0,
platform="windows",
registry_content="123",
client_user_define_rule_name=name,
parent_proc_path="/root/bash",
type=5,
cmdline="bash",
proc_path="/root/bash",
parent_cmdline="bash",
registry_key="123")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var config = new Config();
var name = config.Get("name") ?? "terraform-example";
var @default = new AliCloud.ThreatDetection.ClientUserDefineRule("default", new()
{
ActionType = 0,
Platform = "windows",
RegistryContent = "123",
ClientUserDefineRuleName = name,
ParentProcPath = "/root/bash",
Type = 5,
Cmdline = "bash",
ProcPath = "/root/bash",
ParentCmdline = "bash",
RegistryKey = "123",
});
});
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/threatdetection"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
cfg := config.New(ctx, "")
name := "terraform-example"
if param := cfg.Get("name"); param != "" {
name = param
}
_, err := threatdetection.NewClientUserDefineRule(ctx, "default", &threatdetection.ClientUserDefineRuleArgs{
ActionType: pulumi.Int(0),
Platform: pulumi.String("windows"),
RegistryContent: pulumi.String("123"),
ClientUserDefineRuleName: pulumi.String(name),
ParentProcPath: pulumi.String("/root/bash"),
Type: pulumi.Int(5),
Cmdline: pulumi.String("bash"),
ProcPath: pulumi.String("/root/bash"),
ParentCmdline: pulumi.String("bash"),
RegistryKey: pulumi.String("123"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.threatdetection.ClientUserDefineRule;
import com.pulumi.alicloud.threatdetection.ClientUserDefineRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
final var name = config.get("name").orElse("terraform-example");
var default_ = new ClientUserDefineRule("default", ClientUserDefineRuleArgs.builder()
.actionType(0)
.platform("windows")
.registryContent("123")
.clientUserDefineRuleName(name)
.parentProcPath("/root/bash")
.type(5)
.cmdline("bash")
.procPath("/root/bash")
.parentCmdline("bash")
.registryKey("123")
.build());
}
}
configuration:
name:
type: string
default: terraform-example
resources:
default:
type: alicloud:threatdetection:ClientUserDefineRule
properties:
actionType: '0'
platform: windows
registryContent: '123'
clientUserDefineRuleName: ${name}
parentProcPath: /root/bash
type: '5'
cmdline: bash
procPath: /root/bash
parentCmdline: bash
registryKey: '123'
Import
Threat Detection Client User Define Rule can be imported using the id, e.g.
$ pulumi import alicloud:threatdetection/clientUserDefineRule:ClientUserDefineRule example <id>
Properties
The operation type. Value:
The custom rule name.
The creation time of the resource.
The new file path to rename the file. When the value of the Type attribute is 7, the NewFilePath attribute is required.
The parent command line.
Parent process path.
The registry value. When the value of the Type attribute is 5, the RegistryKey attribute is required.
The registry key. When the value of the Type attribute is 5, the RegistryKey attribute is required.