Method GetSID

pkg/event/param_windows.go:183–189

GetSID returns the raw SID (Security Identifier) parameter as typed representation on which various operations can be performed, such as converting the SID to string or resolving username/domain.

()

// typed representation on which various operations can be performed,
// such as converting the SID to string or resolving username/domain.
func (pars Params) GetSID() (*windows.SID, error) {
	par, err := pars.findParam(params.UserSID)
	if err != nil {
		return nil, err
	}
	return getSID(par)
}

func getSID(param *Param) (*windows.SID, error) {
	sid, ok := param.Value.([]byte)