MCPcopy Create free account
hub / github.com/rabbitstack/fibratus / GUID

Method GUID

pkg/event/types_windows.go:581–588  ·  view source on GitHub ↗

GUID returns the event GUID from the raw event type.

()

Source from the content-addressed store, hash-verified

579
580// GUID returns the event GUID from the raw event type.
581func (t *Type) GUID() windows.GUID {
582 return windows.GUID{
583 Data1: binary.BigEndian.Uint32(t[0:4]),
584 Data2: binary.BigEndian.Uint16(t[4:6]),
585 Data3: binary.BigEndian.Uint16(t[6:8]),
586 Data4: [8]byte{t[8], t[9], t[10], t[11], t[12], t[13], t[14], t[15]},
587 }
588}
589
590// HookID returns the event operation code (hook ID) from the raw event type.
591func (t *Type) HookID() uint16 {

Callers 3

SourceMethod · 0.95
AddStackTracingMethod · 0.80

Calls 1

Uint32Method · 0.80

Tested by 1