Method IsDropped

pkg/event/event_windows.go:141–149

IsDropped determines if the event should be dropped. The event is dropped in under the following circumstances: 1. The event is dealing with state management, and as long as we're not storing them into the capture file, it can be dropped 2. Rundowns events are dropped if they haven't been processed

(capture bool)

// 2. Rundowns events are dropped if they haven't been processed already
// 3. If the event is generated by Fibratus process, we can safely ignore it
func (e *Event) IsDropped(capture bool) bool {
	if e.IsState() && !capture {
		return true
	}
	if e.IsRundown() && e.IsRundownProcessed() {
		return true
	}
	return IsCurrentProcDropped(e.PID)
}

// IsCurrentProcDropped determines if the event originated from the
// current process is dropped.