KSC Open API
Kaspersky Security Center API description
|
View contains a list of execution files from AppControl.
View name: "ACExeFilesSrvViewName"
List of view attributes is presented below.
Name | Type | Description | Remarks |
---|---|---|---|
"FILE_ID" | paramInt | File ID from the database. | Unique for one Administration Server. |
"FILE_NAME" | paramString | File name. | Get from file VersionInfo. |
"FILE_NONEMPTY_NAME" | paramString | Non-empty file name. | Usually it is equal to "FILE_NAME". If it is empty, a file name from a file instance is used. |
"FILE_HASH_MD5" | paramBinary | MD5 hash of a file. | |
"FILE_HASH_SHA256" | paramBinary | SHA256 hash of a file. |
|
"FILE_TYPE" | paramInt | "File type". Uses one of the following constants:
|
|
"FILE_HIPS_ID" | paramInt | HIPS file ID. |
|
"FILE_VERSION" | paramInt | File version. | Get from the VersionInfo file. |
"FILE_VERSIONRAW" | paramString | File version in raw form. | Get from the VersionInfo file. |
"PRODUCT_NAME" | paramString | Product name. | Get from the VersionInfo file. |
"PRODUCT_VERSION" | paramInt | Product version. | Get from the VersionInfo file. |
"PRODUCT_VERSIONRAW" | paramString | Product version in raw form. | Get from the VersionInfo file. |
"ORGANIZATION_NAME" | paramString | Organization name. | Get from the VersionInfo file. |
"FIRST_APPEAR" | paramDateTime | Time of the first detection of the file. | |
"FIRST_START_TIME" | paramDateTime | Time of the file first start. |
|
"TRUSTED_GROUP" | paramInt | "Trusted group". Uses one of the following constants:
| The maximal value is used for all the file instances. |
"KL_CATEGORY_DN" | paramString | Display name of the file's Kaspersky category. | |
"KL_CATEGORY_ID" | paramBinary | GUID of the file's Kaspersky category. | If the file has multiple Kaspersky categories, the special value L"0000000000000000A3BDDED20FBE7F76 is used. |
"CATEGORY_DN" | paramString | Display name of the file category. Category can be KL or custom. | Search-only. |
"CATEGORY_ID" | paramBinary | GUID of the file category. Category can be KL or custom. | Search-only. |
"KL_CATEGORIZED" | paramBool | This field should be used only in query filters.
| Search-only. |
"CUSTOM_CATEGORIZED" | paramBool | This field should be used only in query filters.
| Search-only. |
"CERT_ID" | paramBinary | ID of the certificate. | |
"CERT_SERIAL" | paramBinary | Serial number of the certificate. | |
"CERT_THUMBPRINT" | paramBinary | Thumbprint of the certificate. | |
"CERT_PUBLICKEY" | paramBinary | Public key of the certificate. | |
"CERT_ISSUER" | paramString | Issuer of the certificate. | |
"CERT_SUBJECT" | paramString | Subject of the certificate. | |
"CERT_VALIDFROM" | paramDateTime | Indicates when the certificate becomes valid. | |
"CERT_VALIDTO" | paramDateTime | Indicates when the certificate expires. |