Method Get

pkg/filter/accessor_windows.go:1318–1355

(f Field, e *event.Event)

}

func (*threadpoolAccessor) Get(f Field, e *event.Event) (params.Value, error) {
	switch f.Name {
	case fields.ThreadpoolPoolID:
		return e.GetParamAsString(params.ThreadpoolPoolID), nil
	case fields.ThreadpoolTaskID:
		return e.GetParamAsString(params.ThreadpoolTaskID), nil
	case fields.ThreadpoolCallbackAddress:
		return e.GetParamAsString(params.ThreadpoolCallback), nil
	case fields.ThreadpoolCallbackSymbol:
		return e.GetParamAsString(params.ThreadpoolCallbackSymbol), nil
	case fields.ThreadpoolCallbackModule:
		return e.GetParamAsString(params.ThreadpoolCallbackModule), nil
	case fields.ThreadpoolCallbackContext:
		return e.GetParamAsString(params.ThreadpoolContext), nil
	case fields.ThreadpoolCallbackContextRip:
		return e.GetParamAsString(params.ThreadpoolContextRip), nil
	case fields.ThreadpoolCallbackContextRipSymbol:
		return e.GetParamAsString(params.ThreadpoolContextRipSymbol), nil
	case fields.ThreadpoolCallbackContextRipModule:
		return e.GetParamAsString(params.ThreadpoolContextRipModule), nil
	case fields.ThreadpoolSubprocessTag:
		return e.GetParamAsString(params.ThreadpoolSubprocessTag), nil
	case fields.ThreadpoolTimer:
		return e.GetParamAsString(params.ThreadpoolTimer), nil
	case fields.ThreadpoolTimerSubqueue:
		return e.GetParamAsString(params.ThreadpoolTimerSubqueue), nil
	case fields.ThreadpoolTimerDuetime:
		return e.Params.GetUint64(params.ThreadpoolTimerDuetime)
	case fields.ThreadpoolTimerPeriod:
		return e.Params.GetUint32(params.ThreadpoolTimerPeriod)
	case fields.ThreadpoolTimerWindow:
		return e.Params.GetUint32(params.ThreadpoolTimerWindow)
	case fields.ThreadpoolTimerAbsolute:
		return e.Params.GetBool(params.ThreadpoolTimerAbsolute)
	}

	return nil, nil
}