Method IsOpenDisposition

pkg/event/event_windows.go:252–254

IsOpenDisposition determines if the file disposition leads to opening a file object.

()

// IsOpenDisposition determines if the file disposition leads to opening a file object.
func (e *Event) IsOpenDisposition() bool {
	return e.IsCreateFile() && e.Params.MustGetUint32(params.FileOperation) == windows.FILE_OPEN
}

// StackID returns the integer that is used to stich the callstack present in the StackWalk event.
func (e *Event) StackID() uint64 {