Function GetAccessors

pkg/filter/accessor_windows.go:54–69

GetAccessors initializes and returns all available accessors.

()

// GetAccessors initializes and returns all available accessors.
func GetAccessors() []Accessor {
	return []Accessor{
		newPSAccessor(nil),
		newPEAccessor(),
		newMemAccessor(),
		newDNSAccessor(),
		newFileAccessor(),
		newEventAccessor(),
		newModuleAccessor(),
		newThreadAccessor(),
		newHandleAccessor(),
		newNetworkAccessor(),
		newRegistryAccessor(),
		newThreadpoolAccessor(),
	}
}

func getParentPs(e *event.Event) *pstypes.PS {
	if e.PS == nil {