MCPcopy Create free account
hub / github.com/rabbitstack/fibratus / ProcessEvent

Method ProcessEvent

internal/etw/processors/chain.go:36–36  ·  view source on GitHub ↗

ProcessEvent pushes the event into processor chain. Processors are applied sequentially, so we have to make sure that any processor providing additional context to the next processor is defined first in the chain. If one processor fails, the next processor in chain is invoked.

(evt *event.Event)

Source from the content-addressed store, hash-verified

34 // sure that any processor providing additional context to the next processor is defined first in the chain. If
35 // one processor fails, the next processor in chain is invoked.
36 ProcessEvent(evt *event.Event) (*event.Event, error)
37 // Close closes the processor chain and frees all allocated resources.
38 Close() error
39}

Callers 10

ProcessEventMethod · 0.65
processEventCallbackMethod · 0.65
TestModuleProcessorFunction · 0.65
TestRegistryProcessorFunction · 0.65
TestPsProcessorFunction · 0.65
TestMemProcessorFunction · 0.65
ProcessEventMethod · 0.65
TestFsProcessorFunction · 0.65
TestNetworkProcessorFunction · 0.65
TestHandleProcessorFunction · 0.65

Implementers 11

Symbolizerpkg/symbolize/symbolizer.go
scannerpkg/yara/scanner.go
Consumerinternal/etw/consumer.go
handleProcessorinternal/etw/processors/handle_windows
chaininternal/etw/processors/chain_windows.
psProcessorinternal/etw/processors/ps_windows.go
registryProcessorinternal/etw/processors/registry_windo
moduleProcessorinternal/etw/processors/module_windows
netProcessorinternal/etw/processors/net_windows.go
memProcessorinternal/etw/processors/mem_windows.go
fsProcessorinternal/etw/processors/fs_windows.go

Calls

no outgoing calls

Tested by 7

TestModuleProcessorFunction · 0.52
TestRegistryProcessorFunction · 0.52
TestPsProcessorFunction · 0.52
TestMemProcessorFunction · 0.52
TestFsProcessorFunction · 0.52
TestNetworkProcessorFunction · 0.52
TestHandleProcessorFunction · 0.52