MCPcopy Create free account
hub / github.com/rabbitstack/fibratus / IsCreateProcess

Method IsCreateProcess

pkg/event/event_windows.go:207–207  ·  view source on GitHub ↗
()

Source from the content-addressed store, hash-verified

205
206func (e *Event) IsCreateFile() bool { return e.Type == CreateFile }
207func (e *Event) IsCreateProcess() bool { return e.Type == CreateProcess }
208func (e *Event) IsCreateProcessInternal() bool { return e.Type == CreateProcessInternal }
209func (e *Event) IsCreateThread() bool { return e.Type == CreateThread }
210func (e *Event) IsCloseFile() bool { return e.Type == CloseFile }

Callers 13

TestScanFunction · 0.95
adjustPIDMethod · 0.95
StackIDMethod · 0.95
StackPIDMethod · 0.95
IsSurrogateProcessMethod · 0.95
MarshalRawMethod · 0.95
WriteMethod · 0.80
incProcsMethod · 0.80
UniquePidsMethod · 0.80
PopMethod · 0.80
EvalMethod · 0.80
TestEventSourceAllEventsFunction · 0.80

Calls

no outgoing calls

Tested by 3

TestScanFunction · 0.76
TestEventSourceAllEventsFunction · 0.64
testCallstackEnrichmentFunction · 0.64