Method IsPeSectionsPseudo

pkg/filter/fields/fields_windows.go:913–913

()

}

func (f Field) IsPeSectionsPseudo() bool { return f == PeSections || f == PsPeSections }

var fields = map[Field]FieldInfo{
	EvtSeq:         {EvtSeq, "event sequence number", params.Uint64, []string{"evt.seq > 666"}, nil, nil},