exec

Documentation

Overview

Package exec provides the utilities to analyze the executable code

Index

• Constants
• type FileInfo
  • func (fi *FileInfo) ExecutableName() string
• type ProcessEvent
• type ProcessEventType

Constants

const (
	ProcessEventCreated = ProcessEventType(iota)
	ProcessEventTerminated
)

Types

type FileInfo

type FileInfo struct {
	Service svc.Attrs

	CmdExePath     string
	ProExeLinkPath string
	ELF            *elf.File
	Pid            int32
	Ppid           int32
	Ino            uint64
	Ns             uint32
}

func (*FileInfo) ExecutableName

func (fi *FileInfo) ExecutableName() string

type ProcessEvent

type ProcessEvent struct {
	File *FileInfo
	Type ProcessEventType
}

type ProcessEventType

type ProcessEventType int