Documentation
¶
Rendered for darwin/amd64
Overview ¶
Package endpointsecurity provides an idiomatic Go wrapper over the raw EndpointSecurity C-library bindings: opaque handles become typed wrappers with methods, the C symbol prefix is stripped, and OSStatus/kern_return_t results become Go errors.
Index ¶
- Constants
- func CopyMessage(msg *raw.Es_message_t) unsafe.Pointer
- func ExecArg(event *raw.Es_event_exec_t, index uint32) raw.Es_string_token_t
- func ExecArgCount(event *raw.Es_event_exec_t) uint32
- func ExecEnv(event *raw.Es_event_exec_t, index uint32) raw.Es_string_token_t
- func ExecEnvCount(event *raw.Es_event_exec_t) uint32
- func ExecFd(event *raw.Es_event_exec_t, index uint32) unsafe.Pointer
- func ExecFdCount(event *raw.Es_event_exec_t) uint32
- func FreeMessage(msg *raw.Es_message_t)
- func MessageSize(msg *raw.Es_message_t) uint64
- func ReleaseMessage(msg *raw.Es_message_t)
- func ReleaseMutedPaths(muted_paths *raw.Es_muted_paths_t)
- func ReleaseMutedProcesses(muted_processes *raw.Es_muted_processes_t)
- func RetainMessage(msg *raw.Es_message_t)
- type Acl_entry_id_t
- type Acl_flag_t
- type Acl_perm_t
- type Acl_tag_t
- type Acl_type_t
- type AuditToken
- type Client
- func (h Client) ClearCache() raw.Es_clear_cache_result_t
- func (h Client) DeleteClient() raw.Es_return_t
- func (h Client) InvertMuting(mute_type raw.Es_mute_inversion_type_t) raw.Es_return_t
- func (h Client) MutePath(path string, type_ raw.Es_mute_path_type_t) raw.Es_return_t
- func (h Client) MutePathEvents(path string, type_ raw.Es_mute_path_type_t, events *raw.Es_event_type_t, ...) raw.Es_return_t
- func (h Client) MutePathLiteral(path_literal string) raw.Es_return_t
- func (h Client) MutePathPrefix(path_prefix string) raw.Es_return_t
- func (h Client) MuteProcess(audit_token AuditToken) raw.Es_return_t
- func (h Client) MuteProcessEvents(audit_token AuditToken, events *raw.Es_event_type_t, event_count uint64) raw.Es_return_t
- func (h Client) MutedPathsEvents(muted_paths unsafe.Pointer) raw.Es_return_t
- func (h Client) MutedProcesses(count *uint64, audit_tokens AuditToken) raw.Es_return_t
- func (h Client) MutedProcessesEvents(muted_processes unsafe.Pointer) raw.Es_return_t
- func (h Client) MutingInverted(mute_type raw.Es_mute_inversion_type_t) raw.Es_mute_inverted_return_t
- func (h Client) Ptr() unsafe.Pointer
- func (h Client) RespondAuthResult(message *raw.Es_message_t, result raw.Es_auth_result_t, cache bool) raw.Es_respond_result_t
- func (h Client) RespondFlagsResult(message *raw.Es_message_t, authorized_flags uint32, cache bool) raw.Es_respond_result_t
- func (h Client) Subscribe(events *raw.Es_event_type_t, event_count uint32) raw.Es_return_t
- func (h Client) Subscriptions(count *uint64, subscriptions unsafe.Pointer) raw.Es_return_t
- func (h Client) UnmuteAllPaths() raw.Es_return_t
- func (h Client) UnmuteAllTargetPaths() raw.Es_return_t
- func (h Client) UnmutePath(path string, type_ raw.Es_mute_path_type_t) raw.Es_return_t
- func (h Client) UnmutePathEvents(path string, type_ raw.Es_mute_path_type_t, events *raw.Es_event_type_t, ...) raw.Es_return_t
- func (h Client) UnmuteProcess(audit_token AuditToken) raw.Es_return_t
- func (h Client) UnmuteProcessEvents(audit_token AuditToken, events *raw.Es_event_type_t, event_count uint64) raw.Es_return_t
- func (h Client) Unsubscribe(events *raw.Es_event_type_t, event_count uint32) raw.Es_return_t
- func (h Client) UnsubscribeAll() raw.Es_return_t
- type Clockid_t
- type Cryptex_auth_type_t
- type Es_action_type_t
- type Es_address_type_t
- type Es_auth_result_t
- type Es_authentication_type_t
- type Es_authorization_result_t
- type Es_authorization_rule_class_t
- type Es_auto_unlock_type_t
- type Es_btm_item_type_t
- type Es_btm_launch_item_t
- type Es_clear_cache_result_t
- type Es_client_s
- type Es_client_t
- type Es_cs_validation_category_t
- type Es_destination_type_t
- type Es_event_access_t
- type Es_event_authentication_auto_unlock_t
- type Es_event_authentication_od_t
- type Es_event_authentication_t
- type Es_event_authentication_token_t
- type Es_event_authentication_touchid_t
- type Es_event_authorization_judgement_t
- type Es_event_authorization_petition_t
- type Es_event_btm_launch_item_add_t
- type Es_event_btm_launch_item_remove_t
- type Es_event_chdir_t
- type Es_event_chroot_t
- type Es_event_clone_t
- type Es_event_close_t
- type Es_event_copyfile_t
- type Es_event_create_t
- type Es_event_cs_invalidated_t
- type Es_event_deleteextattr_t
- type Es_event_dup_t
- type Es_event_exchangedata_t
- type Es_event_exec_t
- type Es_event_exit_t
- type Es_event_fcntl_t
- type Es_event_file_provider_materialize_t
- type Es_event_file_provider_update_t
- type Es_event_fork_t
- type Es_event_fsgetpath_t
- type Es_event_gatekeeper_user_override_t
- type Es_event_get_task_inspect_t
- type Es_event_get_task_name_t
- type Es_event_get_task_read_t
- type Es_event_get_task_t
- type Es_event_getattrlist_t
- type Es_event_getextattr_t
- type Es_event_id_t
- type Es_event_iokit_open_t
- type Es_event_kextload_t
- type Es_event_kextunload_t
- type Es_event_link_t
- type Es_event_listextattr_t
- type Es_event_login_login_t
- type Es_event_login_logout_t
- type Es_event_lookup_t
- type Es_event_lw_session_lock_t
- type Es_event_lw_session_login_t
- type Es_event_lw_session_logout_t
- type Es_event_lw_session_unlock_t
- type Es_event_mmap_t
- type Es_event_mount_t
- type Es_event_mprotect_t
- type Es_event_od_attribute_set_t
- type Es_event_od_attribute_value_add_t
- type Es_event_od_attribute_value_remove_t
- type Es_event_od_create_group_t
- type Es_event_od_create_user_t
- type Es_event_od_delete_group_t
- type Es_event_od_delete_user_t
- type Es_event_od_disable_user_t
- type Es_event_od_enable_user_t
- type Es_event_od_group_add_t
- type Es_event_od_group_remove_t
- type Es_event_od_group_set_t
- type Es_event_od_modify_password_t
- type Es_event_open_t
- type Es_event_openssh_login_t
- type Es_event_openssh_logout_t
- type Es_event_proc_check_t
- type Es_event_proc_suspend_resume_t
- type Es_event_profile_add_t
- type Es_event_profile_remove_t
- type Es_event_pty_close_t
- type Es_event_pty_grant_t
- type Es_event_readdir_t
- type Es_event_readlink_t
- type Es_event_remote_thread_create_t
- type Es_event_remount_t
- type Es_event_rename_t
- type Es_event_screensharing_attach_t
- type Es_event_screensharing_detach_t
- type Es_event_searchfs_t
- type Es_event_setacl_t
- type Es_event_setattrlist_t
- type Es_event_setegid_t
- type Es_event_seteuid_t
- type Es_event_setextattr_t
- type Es_event_setflags_t
- type Es_event_setgid_t
- type Es_event_setmode_t
- type Es_event_setowner_t
- type Es_event_setregid_t
- type Es_event_setreuid_t
- type Es_event_settime_t
- type Es_event_setuid_t
- type Es_event_signal_t
- type Es_event_stat_t
- type Es_event_su_t
- type Es_event_sudo_t
- type Es_event_tcc_modify_t
- type Es_event_trace_t
- type Es_event_truncate_t
- type Es_event_type_t
- type Es_event_uipc_bind_t
- type Es_event_uipc_connect_t
- type Es_event_unlink_t
- type Es_event_unmount_t
- type Es_event_utimes_t
- type Es_event_write_t
- type Es_event_xp_malware_detected_t
- type Es_event_xp_malware_remediated_t
- type Es_event_xpc_connect_t
- type Es_fd_t
- type Es_file_t
- type Es_gatekeeper_user_override_file_type_t
- type Es_get_task_type_t
- type Es_message_t
- type Es_mount_disposition_t
- type Es_mute_inversion_type_t
- type Es_mute_inverted_return_t
- type Es_mute_path_type_t
- type Es_muted_path_t
- type Es_muted_paths_t
- type Es_muted_process_t
- type Es_muted_processes_t
- type Es_new_client_result_t
- type Es_od_account_type_t
- type Es_od_member_id_array_t
- type Es_od_member_id_t
- type Es_od_member_type_t
- type Es_od_record_type_t
- type Es_openssh_login_result_type_t
- type Es_proc_check_type_t
- type Es_proc_suspend_resume_type_t
- type Es_process_t
- type Es_profile_source_t
- type Es_profile_t
- type Es_respond_result_t
- type Es_result_t
- type Es_result_type_t
- type Es_return_t
- type Es_set_or_clear_t
- type Es_signed_file_info_t
- type Es_string_token_t
- type Es_sudo_plugin_type_t
- type Es_sudo_reject_info_t
- type Es_tcc_authorization_reason_t
- type Es_tcc_authorization_right_t
- type Es_tcc_event_type_t
- type Es_tcc_identity_type_t
- type Es_thread_state_t
- type Es_thread_t
- type Es_token_t
- type Es_touchid_mode_t
- type Es_xpc_domain_type_t
- type Graftdmg_type_t
- type Mpo_flags_t
Constants ¶
View Source
const ( ACL_ADD_FILE = raw.ACL_ADD_FILE ACL_ADD_SUBDIRECTORY = raw.ACL_ADD_SUBDIRECTORY ACL_APPEND_DATA = raw.ACL_APPEND_DATA ACL_CHANGE_OWNER = raw.ACL_CHANGE_OWNER ACL_DELETE = raw.ACL_DELETE ACL_DELETE_CHILD = raw.ACL_DELETE_CHILD ACL_ENTRY_DIRECTORY_INHERIT = raw.ACL_ENTRY_DIRECTORY_INHERIT ACL_ENTRY_FILE_INHERIT = raw.ACL_ENTRY_FILE_INHERIT ACL_ENTRY_INHERITED = raw.ACL_ENTRY_INHERITED ACL_ENTRY_LIMIT_INHERIT = raw.ACL_ENTRY_LIMIT_INHERIT ACL_ENTRY_ONLY_INHERIT = raw.ACL_ENTRY_ONLY_INHERIT ACL_EXECUTE = raw.ACL_EXECUTE ACL_EXTENDED_ALLOW = raw.ACL_EXTENDED_ALLOW ACL_EXTENDED_DENY = raw.ACL_EXTENDED_DENY ACL_FIRST_ENTRY = raw.ACL_FIRST_ENTRY ACL_FLAG_DEFER_INHERIT = raw.ACL_FLAG_DEFER_INHERIT ACL_FLAG_NO_INHERIT = raw.ACL_FLAG_NO_INHERIT ACL_LAST_ENTRY = raw.ACL_LAST_ENTRY ACL_LIST_DIRECTORY = raw.ACL_LIST_DIRECTORY ACL_NEXT_ENTRY = raw.ACL_NEXT_ENTRY ACL_READ_ATTRIBUTES = raw.ACL_READ_ATTRIBUTES ACL_READ_DATA = raw.ACL_READ_DATA ACL_READ_EXTATTRIBUTES = raw.ACL_READ_EXTATTRIBUTES ACL_READ_SECURITY = raw.ACL_READ_SECURITY ACL_SEARCH = raw.ACL_SEARCH ACL_SYNCHRONIZE = raw.ACL_SYNCHRONIZE ACL_TYPE_ACCESS = raw.ACL_TYPE_ACCESS ACL_TYPE_AFS = raw.ACL_TYPE_AFS ACL_TYPE_CODA = raw.ACL_TYPE_CODA ACL_TYPE_DEFAULT = raw.ACL_TYPE_DEFAULT ACL_TYPE_EXTENDED = raw.ACL_TYPE_EXTENDED ACL_TYPE_NTFS = raw.ACL_TYPE_NTFS ACL_TYPE_NWFS = raw.ACL_TYPE_NWFS ACL_UNDEFINED_TAG = raw.ACL_UNDEFINED_TAG ACL_WRITE_ATTRIBUTES = raw.ACL_WRITE_ATTRIBUTES ACL_WRITE_DATA = raw.ACL_WRITE_DATA ACL_WRITE_EXTATTRIBUTES = raw.ACL_WRITE_EXTATTRIBUTES ACL_WRITE_SECURITY = raw.ACL_WRITE_SECURITY CRYPTEX1_AUTH_ENV_GENERIC = raw.CRYPTEX1_AUTH_ENV_GENERIC CRYPTEX1_AUTH_ENV_GENERIC_SUPPLEMENTAL = raw.CRYPTEX1_AUTH_ENV_GENERIC_SUPPLEMENTAL CRYPTEX_AUTH_MAX = raw.CRYPTEX_AUTH_MAX CRYPTEX_AUTH_MOBILE_ASSET = raw.CRYPTEX_AUTH_MOBILE_ASSET CRYPTEX_AUTH_MOBILE_ASSET_WITH_CODE = raw.CRYPTEX_AUTH_MOBILE_ASSET_WITH_CODE CRYPTEX_AUTH_PDI_NONCE = raw.CRYPTEX_AUTH_PDI_NONCE ES_ACTION_TYPE_AUTH = raw.ES_ACTION_TYPE_AUTH ES_ACTION_TYPE_NOTIFY = raw.ES_ACTION_TYPE_NOTIFY ES_ADDRESS_TYPE_IPV4 = raw.ES_ADDRESS_TYPE_IPV4 ES_ADDRESS_TYPE_IPV6 = raw.ES_ADDRESS_TYPE_IPV6 ES_ADDRESS_TYPE_NAMED_SOCKET = raw.ES_ADDRESS_TYPE_NAMED_SOCKET ES_ADDRESS_TYPE_NONE = raw.ES_ADDRESS_TYPE_NONE ES_AUTHENTICATION_TYPE_AUTO_UNLOCK = raw.ES_AUTHENTICATION_TYPE_AUTO_UNLOCK ES_AUTHENTICATION_TYPE_LAST = raw.ES_AUTHENTICATION_TYPE_LAST ES_AUTHENTICATION_TYPE_OD = raw.ES_AUTHENTICATION_TYPE_OD ES_AUTHENTICATION_TYPE_TOKEN = raw.ES_AUTHENTICATION_TYPE_TOKEN ES_AUTHENTICATION_TYPE_TOUCHID = raw.ES_AUTHENTICATION_TYPE_TOUCHID ES_AUTHORIZATION_RULE_CLASS_ALLOW = raw.ES_AUTHORIZATION_RULE_CLASS_ALLOW ES_AUTHORIZATION_RULE_CLASS_DENY = raw.ES_AUTHORIZATION_RULE_CLASS_DENY ES_AUTHORIZATION_RULE_CLASS_INVALID = raw.ES_AUTHORIZATION_RULE_CLASS_INVALID ES_AUTHORIZATION_RULE_CLASS_MECHANISM = raw.ES_AUTHORIZATION_RULE_CLASS_MECHANISM ES_AUTHORIZATION_RULE_CLASS_RULE = raw.ES_AUTHORIZATION_RULE_CLASS_RULE ES_AUTHORIZATION_RULE_CLASS_UNKNOWN = raw.ES_AUTHORIZATION_RULE_CLASS_UNKNOWN ES_AUTHORIZATION_RULE_CLASS_USER = raw.ES_AUTHORIZATION_RULE_CLASS_USER ES_AUTH_RESULT_ALLOW = raw.ES_AUTH_RESULT_ALLOW ES_AUTH_RESULT_DENY = raw.ES_AUTH_RESULT_DENY ES_AUTO_UNLOCK_AUTH_PROMPT = raw.ES_AUTO_UNLOCK_AUTH_PROMPT ES_AUTO_UNLOCK_MACHINE_UNLOCK = raw.ES_AUTO_UNLOCK_MACHINE_UNLOCK ES_BTM_ITEM_TYPE_AGENT = raw.ES_BTM_ITEM_TYPE_AGENT ES_BTM_ITEM_TYPE_APP = raw.ES_BTM_ITEM_TYPE_APP ES_BTM_ITEM_TYPE_DAEMON = raw.ES_BTM_ITEM_TYPE_DAEMON ES_BTM_ITEM_TYPE_LOGIN_ITEM = raw.ES_BTM_ITEM_TYPE_LOGIN_ITEM ES_BTM_ITEM_TYPE_USER_ITEM = raw.ES_BTM_ITEM_TYPE_USER_ITEM ES_CLEAR = raw.ES_CLEAR ES_CLEAR_CACHE_RESULT_ERR_INTERNAL = raw.ES_CLEAR_CACHE_RESULT_ERR_INTERNAL ES_CLEAR_CACHE_RESULT_ERR_THROTTLE = raw.ES_CLEAR_CACHE_RESULT_ERR_THROTTLE ES_CLEAR_CACHE_RESULT_SUCCESS = raw.ES_CLEAR_CACHE_RESULT_SUCCESS ES_CS_VALIDATION_CATEGORY_APP_STORE = raw.ES_CS_VALIDATION_CATEGORY_APP_STORE ES_CS_VALIDATION_CATEGORY_DEVELOPER_ID = raw.ES_CS_VALIDATION_CATEGORY_DEVELOPER_ID ES_CS_VALIDATION_CATEGORY_DEVELOPMENT = raw.ES_CS_VALIDATION_CATEGORY_DEVELOPMENT ES_CS_VALIDATION_CATEGORY_ENTERPRISE = raw.ES_CS_VALIDATION_CATEGORY_ENTERPRISE ES_CS_VALIDATION_CATEGORY_INVALID = raw.ES_CS_VALIDATION_CATEGORY_INVALID ES_CS_VALIDATION_CATEGORY_LOCAL_SIGNING = raw.ES_CS_VALIDATION_CATEGORY_LOCAL_SIGNING ES_CS_VALIDATION_CATEGORY_NONE = raw.ES_CS_VALIDATION_CATEGORY_NONE ES_CS_VALIDATION_CATEGORY_OOPJIT = raw.ES_CS_VALIDATION_CATEGORY_OOPJIT ES_CS_VALIDATION_CATEGORY_PLATFORM = raw.ES_CS_VALIDATION_CATEGORY_PLATFORM ES_CS_VALIDATION_CATEGORY_ROSETTA = raw.ES_CS_VALIDATION_CATEGORY_ROSETTA ES_CS_VALIDATION_CATEGORY_TESTFLIGHT = raw.ES_CS_VALIDATION_CATEGORY_TESTFLIGHT ES_DESTINATION_TYPE_EXISTING_FILE = raw.ES_DESTINATION_TYPE_EXISTING_FILE ES_DESTINATION_TYPE_NEW_PATH = raw.ES_DESTINATION_TYPE_NEW_PATH ES_EVENT_TYPE_AUTH_CHDIR = raw.ES_EVENT_TYPE_AUTH_CHDIR ES_EVENT_TYPE_AUTH_CHROOT = raw.ES_EVENT_TYPE_AUTH_CHROOT ES_EVENT_TYPE_AUTH_CLONE = raw.ES_EVENT_TYPE_AUTH_CLONE ES_EVENT_TYPE_AUTH_COPYFILE = raw.ES_EVENT_TYPE_AUTH_COPYFILE ES_EVENT_TYPE_AUTH_CREATE = raw.ES_EVENT_TYPE_AUTH_CREATE ES_EVENT_TYPE_AUTH_DELETEEXTATTR = raw.ES_EVENT_TYPE_AUTH_DELETEEXTATTR ES_EVENT_TYPE_AUTH_EXCHANGEDATA = raw.ES_EVENT_TYPE_AUTH_EXCHANGEDATA ES_EVENT_TYPE_AUTH_EXEC = raw.ES_EVENT_TYPE_AUTH_EXEC ES_EVENT_TYPE_AUTH_FCNTL = raw.ES_EVENT_TYPE_AUTH_FCNTL ES_EVENT_TYPE_AUTH_FILE_PROVIDER_MATERIALIZE = raw.ES_EVENT_TYPE_AUTH_FILE_PROVIDER_MATERIALIZE ES_EVENT_TYPE_AUTH_FILE_PROVIDER_UPDATE = raw.ES_EVENT_TYPE_AUTH_FILE_PROVIDER_UPDATE ES_EVENT_TYPE_AUTH_FSGETPATH = raw.ES_EVENT_TYPE_AUTH_FSGETPATH ES_EVENT_TYPE_AUTH_GETATTRLIST = raw.ES_EVENT_TYPE_AUTH_GETATTRLIST ES_EVENT_TYPE_AUTH_GETEXTATTR = raw.ES_EVENT_TYPE_AUTH_GETEXTATTR ES_EVENT_TYPE_AUTH_GET_TASK = raw.ES_EVENT_TYPE_AUTH_GET_TASK ES_EVENT_TYPE_AUTH_GET_TASK_READ = raw.ES_EVENT_TYPE_AUTH_GET_TASK_READ ES_EVENT_TYPE_AUTH_IOKIT_OPEN = raw.ES_EVENT_TYPE_AUTH_IOKIT_OPEN ES_EVENT_TYPE_AUTH_KEXTLOAD = raw.ES_EVENT_TYPE_AUTH_KEXTLOAD ES_EVENT_TYPE_AUTH_LINK = raw.ES_EVENT_TYPE_AUTH_LINK ES_EVENT_TYPE_AUTH_LISTEXTATTR = raw.ES_EVENT_TYPE_AUTH_LISTEXTATTR ES_EVENT_TYPE_AUTH_MMAP = raw.ES_EVENT_TYPE_AUTH_MMAP ES_EVENT_TYPE_AUTH_MOUNT = raw.ES_EVENT_TYPE_AUTH_MOUNT ES_EVENT_TYPE_AUTH_MPROTECT = raw.ES_EVENT_TYPE_AUTH_MPROTECT ES_EVENT_TYPE_AUTH_OPEN = raw.ES_EVENT_TYPE_AUTH_OPEN ES_EVENT_TYPE_AUTH_PROC_CHECK = raw.ES_EVENT_TYPE_AUTH_PROC_CHECK ES_EVENT_TYPE_AUTH_PROC_SUSPEND_RESUME = raw.ES_EVENT_TYPE_AUTH_PROC_SUSPEND_RESUME ES_EVENT_TYPE_AUTH_READDIR = raw.ES_EVENT_TYPE_AUTH_READDIR ES_EVENT_TYPE_AUTH_READLINK = raw.ES_EVENT_TYPE_AUTH_READLINK ES_EVENT_TYPE_AUTH_REMOUNT = raw.ES_EVENT_TYPE_AUTH_REMOUNT ES_EVENT_TYPE_AUTH_RENAME = raw.ES_EVENT_TYPE_AUTH_RENAME ES_EVENT_TYPE_AUTH_SEARCHFS = raw.ES_EVENT_TYPE_AUTH_SEARCHFS ES_EVENT_TYPE_AUTH_SETACL = raw.ES_EVENT_TYPE_AUTH_SETACL ES_EVENT_TYPE_AUTH_SETATTRLIST = raw.ES_EVENT_TYPE_AUTH_SETATTRLIST ES_EVENT_TYPE_AUTH_SETEXTATTR = raw.ES_EVENT_TYPE_AUTH_SETEXTATTR ES_EVENT_TYPE_AUTH_SETFLAGS = raw.ES_EVENT_TYPE_AUTH_SETFLAGS ES_EVENT_TYPE_AUTH_SETMODE = raw.ES_EVENT_TYPE_AUTH_SETMODE ES_EVENT_TYPE_AUTH_SETOWNER = raw.ES_EVENT_TYPE_AUTH_SETOWNER ES_EVENT_TYPE_AUTH_SETTIME = raw.ES_EVENT_TYPE_AUTH_SETTIME ES_EVENT_TYPE_AUTH_SIGNAL = raw.ES_EVENT_TYPE_AUTH_SIGNAL ES_EVENT_TYPE_AUTH_TRUNCATE = raw.ES_EVENT_TYPE_AUTH_TRUNCATE ES_EVENT_TYPE_AUTH_UIPC_BIND = raw.ES_EVENT_TYPE_AUTH_UIPC_BIND ES_EVENT_TYPE_AUTH_UIPC_CONNECT = raw.ES_EVENT_TYPE_AUTH_UIPC_CONNECT ES_EVENT_TYPE_AUTH_UNLINK = raw.ES_EVENT_TYPE_AUTH_UNLINK ES_EVENT_TYPE_AUTH_UTIMES = raw.ES_EVENT_TYPE_AUTH_UTIMES ES_EVENT_TYPE_LAST = raw.ES_EVENT_TYPE_LAST ES_EVENT_TYPE_NOTIFY_ACCESS = raw.ES_EVENT_TYPE_NOTIFY_ACCESS ES_EVENT_TYPE_NOTIFY_AUTHENTICATION = raw.ES_EVENT_TYPE_NOTIFY_AUTHENTICATION ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT = raw.ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION = raw.ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD = raw.ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE = raw.ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE ES_EVENT_TYPE_NOTIFY_CHDIR = raw.ES_EVENT_TYPE_NOTIFY_CHDIR ES_EVENT_TYPE_NOTIFY_CHROOT = raw.ES_EVENT_TYPE_NOTIFY_CHROOT ES_EVENT_TYPE_NOTIFY_CLONE = raw.ES_EVENT_TYPE_NOTIFY_CLONE ES_EVENT_TYPE_NOTIFY_CLOSE = raw.ES_EVENT_TYPE_NOTIFY_CLOSE ES_EVENT_TYPE_NOTIFY_COPYFILE = raw.ES_EVENT_TYPE_NOTIFY_COPYFILE ES_EVENT_TYPE_NOTIFY_CREATE = raw.ES_EVENT_TYPE_NOTIFY_CREATE ES_EVENT_TYPE_NOTIFY_CS_INVALIDATED = raw.ES_EVENT_TYPE_NOTIFY_CS_INVALIDATED ES_EVENT_TYPE_NOTIFY_DELETEEXTATTR = raw.ES_EVENT_TYPE_NOTIFY_DELETEEXTATTR ES_EVENT_TYPE_NOTIFY_DUP = raw.ES_EVENT_TYPE_NOTIFY_DUP ES_EVENT_TYPE_NOTIFY_EXCHANGEDATA = raw.ES_EVENT_TYPE_NOTIFY_EXCHANGEDATA ES_EVENT_TYPE_NOTIFY_EXEC = raw.ES_EVENT_TYPE_NOTIFY_EXEC ES_EVENT_TYPE_NOTIFY_EXIT = raw.ES_EVENT_TYPE_NOTIFY_EXIT ES_EVENT_TYPE_NOTIFY_FCNTL = raw.ES_EVENT_TYPE_NOTIFY_FCNTL ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_MATERIALIZE = raw.ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_MATERIALIZE ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_UPDATE = raw.ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_UPDATE ES_EVENT_TYPE_NOTIFY_FORK = raw.ES_EVENT_TYPE_NOTIFY_FORK ES_EVENT_TYPE_NOTIFY_FSGETPATH = raw.ES_EVENT_TYPE_NOTIFY_FSGETPATH ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE = raw.ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE ES_EVENT_TYPE_NOTIFY_GETATTRLIST = raw.ES_EVENT_TYPE_NOTIFY_GETATTRLIST ES_EVENT_TYPE_NOTIFY_GETEXTATTR = raw.ES_EVENT_TYPE_NOTIFY_GETEXTATTR ES_EVENT_TYPE_NOTIFY_GET_TASK = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK ES_EVENT_TYPE_NOTIFY_GET_TASK_INSPECT = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK_INSPECT ES_EVENT_TYPE_NOTIFY_GET_TASK_NAME = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK_NAME ES_EVENT_TYPE_NOTIFY_GET_TASK_READ = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK_READ ES_EVENT_TYPE_NOTIFY_IOKIT_OPEN = raw.ES_EVENT_TYPE_NOTIFY_IOKIT_OPEN ES_EVENT_TYPE_NOTIFY_KEXTLOAD = raw.ES_EVENT_TYPE_NOTIFY_KEXTLOAD ES_EVENT_TYPE_NOTIFY_KEXTUNLOAD = raw.ES_EVENT_TYPE_NOTIFY_KEXTUNLOAD ES_EVENT_TYPE_NOTIFY_LINK = raw.ES_EVENT_TYPE_NOTIFY_LINK ES_EVENT_TYPE_NOTIFY_LISTEXTATTR = raw.ES_EVENT_TYPE_NOTIFY_LISTEXTATTR ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN = raw.ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT = raw.ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT ES_EVENT_TYPE_NOTIFY_LOOKUP = raw.ES_EVENT_TYPE_NOTIFY_LOOKUP ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK ES_EVENT_TYPE_NOTIFY_MMAP = raw.ES_EVENT_TYPE_NOTIFY_MMAP ES_EVENT_TYPE_NOTIFY_MOUNT = raw.ES_EVENT_TYPE_NOTIFY_MOUNT ES_EVENT_TYPE_NOTIFY_MPROTECT = raw.ES_EVENT_TYPE_NOTIFY_MPROTECT ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET = raw.ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD = raw.ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE = raw.ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP = raw.ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER = raw.ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP = raw.ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER = raw.ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER = raw.ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER = raw.ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD = raw.ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE = raw.ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET = raw.ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD = raw.ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD ES_EVENT_TYPE_NOTIFY_OPEN = raw.ES_EVENT_TYPE_NOTIFY_OPEN ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN = raw.ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT = raw.ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT ES_EVENT_TYPE_NOTIFY_PROC_CHECK = raw.ES_EVENT_TYPE_NOTIFY_PROC_CHECK ES_EVENT_TYPE_NOTIFY_PROC_SUSPEND_RESUME = raw.ES_EVENT_TYPE_NOTIFY_PROC_SUSPEND_RESUME ES_EVENT_TYPE_NOTIFY_PROFILE_ADD = raw.ES_EVENT_TYPE_NOTIFY_PROFILE_ADD ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE = raw.ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE ES_EVENT_TYPE_NOTIFY_PTY_CLOSE = raw.ES_EVENT_TYPE_NOTIFY_PTY_CLOSE ES_EVENT_TYPE_NOTIFY_PTY_GRANT = raw.ES_EVENT_TYPE_NOTIFY_PTY_GRANT ES_EVENT_TYPE_NOTIFY_READDIR = raw.ES_EVENT_TYPE_NOTIFY_READDIR ES_EVENT_TYPE_NOTIFY_READLINK = raw.ES_EVENT_TYPE_NOTIFY_READLINK ES_EVENT_TYPE_NOTIFY_REMOTE_THREAD_CREATE = raw.ES_EVENT_TYPE_NOTIFY_REMOTE_THREAD_CREATE ES_EVENT_TYPE_NOTIFY_REMOUNT = raw.ES_EVENT_TYPE_NOTIFY_REMOUNT ES_EVENT_TYPE_NOTIFY_RENAME = raw.ES_EVENT_TYPE_NOTIFY_RENAME ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH = raw.ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH = raw.ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH ES_EVENT_TYPE_NOTIFY_SEARCHFS = raw.ES_EVENT_TYPE_NOTIFY_SEARCHFS ES_EVENT_TYPE_NOTIFY_SETACL = raw.ES_EVENT_TYPE_NOTIFY_SETACL ES_EVENT_TYPE_NOTIFY_SETATTRLIST = raw.ES_EVENT_TYPE_NOTIFY_SETATTRLIST ES_EVENT_TYPE_NOTIFY_SETEGID = raw.ES_EVENT_TYPE_NOTIFY_SETEGID ES_EVENT_TYPE_NOTIFY_SETEUID = raw.ES_EVENT_TYPE_NOTIFY_SETEUID ES_EVENT_TYPE_NOTIFY_SETEXTATTR = raw.ES_EVENT_TYPE_NOTIFY_SETEXTATTR ES_EVENT_TYPE_NOTIFY_SETFLAGS = raw.ES_EVENT_TYPE_NOTIFY_SETFLAGS ES_EVENT_TYPE_NOTIFY_SETGID = raw.ES_EVENT_TYPE_NOTIFY_SETGID ES_EVENT_TYPE_NOTIFY_SETMODE = raw.ES_EVENT_TYPE_NOTIFY_SETMODE ES_EVENT_TYPE_NOTIFY_SETOWNER = raw.ES_EVENT_TYPE_NOTIFY_SETOWNER ES_EVENT_TYPE_NOTIFY_SETREGID = raw.ES_EVENT_TYPE_NOTIFY_SETREGID ES_EVENT_TYPE_NOTIFY_SETREUID = raw.ES_EVENT_TYPE_NOTIFY_SETREUID ES_EVENT_TYPE_NOTIFY_SETTIME = raw.ES_EVENT_TYPE_NOTIFY_SETTIME ES_EVENT_TYPE_NOTIFY_SETUID = raw.ES_EVENT_TYPE_NOTIFY_SETUID ES_EVENT_TYPE_NOTIFY_SIGNAL = raw.ES_EVENT_TYPE_NOTIFY_SIGNAL ES_EVENT_TYPE_NOTIFY_STAT = raw.ES_EVENT_TYPE_NOTIFY_STAT ES_EVENT_TYPE_NOTIFY_SU = raw.ES_EVENT_TYPE_NOTIFY_SU ES_EVENT_TYPE_NOTIFY_SUDO = raw.ES_EVENT_TYPE_NOTIFY_SUDO ES_EVENT_TYPE_NOTIFY_TCC_MODIFY = raw.ES_EVENT_TYPE_NOTIFY_TCC_MODIFY ES_EVENT_TYPE_NOTIFY_TRACE = raw.ES_EVENT_TYPE_NOTIFY_TRACE ES_EVENT_TYPE_NOTIFY_TRUNCATE = raw.ES_EVENT_TYPE_NOTIFY_TRUNCATE ES_EVENT_TYPE_NOTIFY_UIPC_BIND = raw.ES_EVENT_TYPE_NOTIFY_UIPC_BIND ES_EVENT_TYPE_NOTIFY_UIPC_CONNECT = raw.ES_EVENT_TYPE_NOTIFY_UIPC_CONNECT ES_EVENT_TYPE_NOTIFY_UNLINK = raw.ES_EVENT_TYPE_NOTIFY_UNLINK ES_EVENT_TYPE_NOTIFY_UNMOUNT = raw.ES_EVENT_TYPE_NOTIFY_UNMOUNT ES_EVENT_TYPE_NOTIFY_UTIMES = raw.ES_EVENT_TYPE_NOTIFY_UTIMES ES_EVENT_TYPE_NOTIFY_WRITE = raw.ES_EVENT_TYPE_NOTIFY_WRITE ES_EVENT_TYPE_NOTIFY_XPC_CONNECT = raw.ES_EVENT_TYPE_NOTIFY_XPC_CONNECT ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED = raw.ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED = raw.ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED ES_EVENT_TYPE_RESERVED_0 = raw.ES_EVENT_TYPE_RESERVED_0 ES_EVENT_TYPE_RESERVED_1 = raw.ES_EVENT_TYPE_RESERVED_1 ES_EVENT_TYPE_RESERVED_2 = raw.ES_EVENT_TYPE_RESERVED_2 ES_EVENT_TYPE_RESERVED_3 = raw.ES_EVENT_TYPE_RESERVED_3 ES_EVENT_TYPE_RESERVED_4 = raw.ES_EVENT_TYPE_RESERVED_4 ES_EVENT_TYPE_RESERVED_5 = raw.ES_EVENT_TYPE_RESERVED_5 ES_EVENT_TYPE_RESERVED_6 = raw.ES_EVENT_TYPE_RESERVED_6 ES_EVENT_TYPE_RESERVED_7 = raw.ES_EVENT_TYPE_RESERVED_7 ES_EVENT_TYPE_RESERVED_8 = raw.ES_EVENT_TYPE_RESERVED_8 ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE = raw.ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH = raw.ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH ES_GET_TASK_TYPE_EXPOSE_TASK = raw.ES_GET_TASK_TYPE_EXPOSE_TASK ES_GET_TASK_TYPE_IDENTITY_TOKEN = raw.ES_GET_TASK_TYPE_IDENTITY_TOKEN ES_GET_TASK_TYPE_TASK_FOR_PID = raw.ES_GET_TASK_TYPE_TASK_FOR_PID ES_MOUNT_DISPOSITION_EXTERNAL = raw.ES_MOUNT_DISPOSITION_EXTERNAL ES_MOUNT_DISPOSITION_INTERNAL = raw.ES_MOUNT_DISPOSITION_INTERNAL ES_MOUNT_DISPOSITION_NETWORK = raw.ES_MOUNT_DISPOSITION_NETWORK ES_MOUNT_DISPOSITION_NULLFS = raw.ES_MOUNT_DISPOSITION_NULLFS ES_MOUNT_DISPOSITION_UNKNOWN = raw.ES_MOUNT_DISPOSITION_UNKNOWN ES_MOUNT_DISPOSITION_VIRTUAL = raw.ES_MOUNT_DISPOSITION_VIRTUAL ES_MUTE_INVERSION_TYPE_LAST = raw.ES_MUTE_INVERSION_TYPE_LAST ES_MUTE_INVERSION_TYPE_PATH = raw.ES_MUTE_INVERSION_TYPE_PATH ES_MUTE_INVERSION_TYPE_PROCESS = raw.ES_MUTE_INVERSION_TYPE_PROCESS ES_MUTE_INVERSION_TYPE_TARGET_PATH = raw.ES_MUTE_INVERSION_TYPE_TARGET_PATH ES_MUTE_INVERTED = raw.ES_MUTE_INVERTED ES_MUTE_INVERTED_ERROR = raw.ES_MUTE_INVERTED_ERROR ES_MUTE_NOT_INVERTED = raw.ES_MUTE_NOT_INVERTED ES_MUTE_PATH_TYPE_LITERAL = raw.ES_MUTE_PATH_TYPE_LITERAL ES_MUTE_PATH_TYPE_PREFIX = raw.ES_MUTE_PATH_TYPE_PREFIX ES_MUTE_PATH_TYPE_TARGET_LITERAL = raw.ES_MUTE_PATH_TYPE_TARGET_LITERAL ES_MUTE_PATH_TYPE_TARGET_PREFIX = raw.ES_MUTE_PATH_TYPE_TARGET_PREFIX ES_NEW_CLIENT_RESULT_ERR_INTERNAL = raw.ES_NEW_CLIENT_RESULT_ERR_INTERNAL ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT = raw.ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED = raw.ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED = raw.ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED = raw.ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS = raw.ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS ES_NEW_CLIENT_RESULT_SUCCESS = raw.ES_NEW_CLIENT_RESULT_SUCCESS ES_OD_ACCOUNT_TYPE_COMPUTER = raw.ES_OD_ACCOUNT_TYPE_COMPUTER ES_OD_ACCOUNT_TYPE_USER = raw.ES_OD_ACCOUNT_TYPE_USER ES_OD_MEMBER_TYPE_GROUP_UUID = raw.ES_OD_MEMBER_TYPE_GROUP_UUID ES_OD_MEMBER_TYPE_USER_NAME = raw.ES_OD_MEMBER_TYPE_USER_NAME ES_OD_MEMBER_TYPE_USER_UUID = raw.ES_OD_MEMBER_TYPE_USER_UUID ES_OD_RECORD_TYPE_GROUP = raw.ES_OD_RECORD_TYPE_GROUP ES_OD_RECORD_TYPE_USER = raw.ES_OD_RECORD_TYPE_USER ES_OPENSSH_AUTH_FAIL_GSSAPI = raw.ES_OPENSSH_AUTH_FAIL_GSSAPI ES_OPENSSH_AUTH_FAIL_HOSTBASED = raw.ES_OPENSSH_AUTH_FAIL_HOSTBASED ES_OPENSSH_AUTH_FAIL_KBDINT = raw.ES_OPENSSH_AUTH_FAIL_KBDINT ES_OPENSSH_AUTH_FAIL_NONE = raw.ES_OPENSSH_AUTH_FAIL_NONE ES_OPENSSH_AUTH_FAIL_PASSWD = raw.ES_OPENSSH_AUTH_FAIL_PASSWD ES_OPENSSH_AUTH_FAIL_PUBKEY = raw.ES_OPENSSH_AUTH_FAIL_PUBKEY ES_OPENSSH_AUTH_SUCCESS = raw.ES_OPENSSH_AUTH_SUCCESS ES_OPENSSH_INVALID_USER = raw.ES_OPENSSH_INVALID_USER ES_OPENSSH_LOGIN_EXCEED_MAXTRIES = raw.ES_OPENSSH_LOGIN_EXCEED_MAXTRIES ES_OPENSSH_LOGIN_ROOT_DENIED = raw.ES_OPENSSH_LOGIN_ROOT_DENIED ES_PROC_CHECK_TYPE_DIRTYCONTROL = raw.ES_PROC_CHECK_TYPE_DIRTYCONTROL ES_PROC_CHECK_TYPE_KERNMSGBUF = raw.ES_PROC_CHECK_TYPE_KERNMSGBUF ES_PROC_CHECK_TYPE_LISTPIDS = raw.ES_PROC_CHECK_TYPE_LISTPIDS ES_PROC_CHECK_TYPE_PIDFDINFO = raw.ES_PROC_CHECK_TYPE_PIDFDINFO ES_PROC_CHECK_TYPE_PIDFILEPORTINFO = raw.ES_PROC_CHECK_TYPE_PIDFILEPORTINFO ES_PROC_CHECK_TYPE_PIDINFO = raw.ES_PROC_CHECK_TYPE_PIDINFO ES_PROC_CHECK_TYPE_PIDRUSAGE = raw.ES_PROC_CHECK_TYPE_PIDRUSAGE ES_PROC_CHECK_TYPE_SETCONTROL = raw.ES_PROC_CHECK_TYPE_SETCONTROL ES_PROC_CHECK_TYPE_TERMINATE = raw.ES_PROC_CHECK_TYPE_TERMINATE ES_PROC_CHECK_TYPE_UDATA_INFO = raw.ES_PROC_CHECK_TYPE_UDATA_INFO ES_PROC_SUSPEND_RESUME_TYPE_RESUME = raw.ES_PROC_SUSPEND_RESUME_TYPE_RESUME ES_PROC_SUSPEND_RESUME_TYPE_SHUTDOWN_SOCKETS = raw.ES_PROC_SUSPEND_RESUME_TYPE_SHUTDOWN_SOCKETS ES_PROC_SUSPEND_RESUME_TYPE_SUSPEND = raw.ES_PROC_SUSPEND_RESUME_TYPE_SUSPEND ES_PROFILE_SOURCE_INSTALL = raw.ES_PROFILE_SOURCE_INSTALL ES_PROFILE_SOURCE_MANAGED = raw.ES_PROFILE_SOURCE_MANAGED ES_RESPOND_RESULT_ERR_DUPLICATE_RESPONSE = raw.ES_RESPOND_RESULT_ERR_DUPLICATE_RESPONSE ES_RESPOND_RESULT_ERR_EVENT_TYPE = raw.ES_RESPOND_RESULT_ERR_EVENT_TYPE ES_RESPOND_RESULT_ERR_INTERNAL = raw.ES_RESPOND_RESULT_ERR_INTERNAL ES_RESPOND_RESULT_ERR_INVALID_ARGUMENT = raw.ES_RESPOND_RESULT_ERR_INVALID_ARGUMENT ES_RESPOND_RESULT_NOT_FOUND = raw.ES_RESPOND_RESULT_NOT_FOUND ES_RESPOND_RESULT_SUCCESS = raw.ES_RESPOND_RESULT_SUCCESS ES_RESULT_TYPE_AUTH = raw.ES_RESULT_TYPE_AUTH ES_RESULT_TYPE_FLAGS = raw.ES_RESULT_TYPE_FLAGS ES_RETURN_ERROR = raw.ES_RETURN_ERROR ES_RETURN_SUCCESS = raw.ES_RETURN_SUCCESS ES_SET = raw.ES_SET ES_SUDO_PLUGIN_TYPE_APPROVAL = raw.ES_SUDO_PLUGIN_TYPE_APPROVAL ES_SUDO_PLUGIN_TYPE_AUDIT = raw.ES_SUDO_PLUGIN_TYPE_AUDIT ES_SUDO_PLUGIN_TYPE_FRONT_END = raw.ES_SUDO_PLUGIN_TYPE_FRONT_END ES_SUDO_PLUGIN_TYPE_IO = raw.ES_SUDO_PLUGIN_TYPE_IO ES_SUDO_PLUGIN_TYPE_POLICY = raw.ES_SUDO_PLUGIN_TYPE_POLICY ES_SUDO_PLUGIN_TYPE_UNKNOWN = raw.ES_SUDO_PLUGIN_TYPE_UNKNOWN ES_TCC_AUTHORIZATION_REASON_APP_TYPE_POLICY = raw.ES_TCC_AUTHORIZATION_REASON_APP_TYPE_POLICY ES_TCC_AUTHORIZATION_REASON_ENTITLED = raw.ES_TCC_AUTHORIZATION_REASON_ENTITLED ES_TCC_AUTHORIZATION_REASON_ERROR = raw.ES_TCC_AUTHORIZATION_REASON_ERROR ES_TCC_AUTHORIZATION_REASON_MDM_POLICY = raw.ES_TCC_AUTHORIZATION_REASON_MDM_POLICY ES_TCC_AUTHORIZATION_REASON_MISSING_USAGE_STRING = raw.ES_TCC_AUTHORIZATION_REASON_MISSING_USAGE_STRING ES_TCC_AUTHORIZATION_REASON_NONE = raw.ES_TCC_AUTHORIZATION_REASON_NONE ES_TCC_AUTHORIZATION_REASON_PREFLIGHT_UNKNOWN = raw.ES_TCC_AUTHORIZATION_REASON_PREFLIGHT_UNKNOWN ES_TCC_AUTHORIZATION_REASON_PROMPT_CANCEL = raw.ES_TCC_AUTHORIZATION_REASON_PROMPT_CANCEL ES_TCC_AUTHORIZATION_REASON_PROMPT_TIMEOUT = raw.ES_TCC_AUTHORIZATION_REASON_PROMPT_TIMEOUT ES_TCC_AUTHORIZATION_REASON_SERVICE_OVERRIDE_POLICY = raw.ES_TCC_AUTHORIZATION_REASON_SERVICE_OVERRIDE_POLICY ES_TCC_AUTHORIZATION_REASON_SERVICE_POLICY = raw.ES_TCC_AUTHORIZATION_REASON_SERVICE_POLICY ES_TCC_AUTHORIZATION_REASON_SYSTEM_SET = raw.ES_TCC_AUTHORIZATION_REASON_SYSTEM_SET ES_TCC_AUTHORIZATION_REASON_USER_CONSENT = raw.ES_TCC_AUTHORIZATION_REASON_USER_CONSENT ES_TCC_AUTHORIZATION_REASON_USER_SET = raw.ES_TCC_AUTHORIZATION_REASON_USER_SET ES_TCC_AUTHORIZATION_RIGHT_ADD_MODIFY_ADDED = raw.ES_TCC_AUTHORIZATION_RIGHT_ADD_MODIFY_ADDED ES_TCC_AUTHORIZATION_RIGHT_ALLOWED = raw.ES_TCC_AUTHORIZATION_RIGHT_ALLOWED ES_TCC_AUTHORIZATION_RIGHT_DENIED = raw.ES_TCC_AUTHORIZATION_RIGHT_DENIED ES_TCC_AUTHORIZATION_RIGHT_LEARN_MORE = raw.ES_TCC_AUTHORIZATION_RIGHT_LEARN_MORE ES_TCC_AUTHORIZATION_RIGHT_LIMITED = raw.ES_TCC_AUTHORIZATION_RIGHT_LIMITED ES_TCC_AUTHORIZATION_RIGHT_SESSION_PID = raw.ES_TCC_AUTHORIZATION_RIGHT_SESSION_PID ES_TCC_AUTHORIZATION_RIGHT_UNKNOWN = raw.ES_TCC_AUTHORIZATION_RIGHT_UNKNOWN ES_TCC_EVENT_TYPE_CREATE = raw.ES_TCC_EVENT_TYPE_CREATE ES_TCC_EVENT_TYPE_DELETE = raw.ES_TCC_EVENT_TYPE_DELETE ES_TCC_EVENT_TYPE_MODIFY = raw.ES_TCC_EVENT_TYPE_MODIFY ES_TCC_EVENT_TYPE_UNKNOWN = raw.ES_TCC_EVENT_TYPE_UNKNOWN ES_TCC_IDENTITY_TYPE_BUNDLE_ID = raw.ES_TCC_IDENTITY_TYPE_BUNDLE_ID ES_TCC_IDENTITY_TYPE_EXECUTABLE_PATH = raw.ES_TCC_IDENTITY_TYPE_EXECUTABLE_PATH ES_TCC_IDENTITY_TYPE_FILE_PROVIDER_DOMAIN_ID = raw.ES_TCC_IDENTITY_TYPE_FILE_PROVIDER_DOMAIN_ID ES_TCC_IDENTITY_TYPE_POLICY_ID = raw.ES_TCC_IDENTITY_TYPE_POLICY_ID ES_TOUCHID_MODE_IDENTIFICATION = raw.ES_TOUCHID_MODE_IDENTIFICATION ES_TOUCHID_MODE_VERIFICATION = raw.ES_TOUCHID_MODE_VERIFICATION ES_XPC_DOMAIN_TYPE_GUI = raw.ES_XPC_DOMAIN_TYPE_GUI ES_XPC_DOMAIN_TYPE_MANAGER = raw.ES_XPC_DOMAIN_TYPE_MANAGER ES_XPC_DOMAIN_TYPE_PID = raw.ES_XPC_DOMAIN_TYPE_PID ES_XPC_DOMAIN_TYPE_PORT = raw.ES_XPC_DOMAIN_TYPE_PORT ES_XPC_DOMAIN_TYPE_SESSION = raw.ES_XPC_DOMAIN_TYPE_SESSION ES_XPC_DOMAIN_TYPE_SYSTEM = raw.ES_XPC_DOMAIN_TYPE_SYSTEM ES_XPC_DOMAIN_TYPE_USER = raw.ES_XPC_DOMAIN_TYPE_USER ES_XPC_DOMAIN_TYPE_USER_LOGIN = raw.ES_XPC_DOMAIN_TYPE_USER_LOGIN GRAFTDMG_CRYPTEX_AUTH_ENV_GENERIC = raw.GRAFTDMG_CRYPTEX_AUTH_ENV_GENERIC GRAFTDMG_CRYPTEX_BOOT = raw.GRAFTDMG_CRYPTEX_BOOT GRAFTDMG_CRYPTEX_DOWNLEVEL = raw.GRAFTDMG_CRYPTEX_DOWNLEVEL GRAFTDMG_CRYPTEX_EFFECTIVE_AP = raw.GRAFTDMG_CRYPTEX_EFFECTIVE_AP GRAFTDMG_CRYPTEX_MAX = raw.GRAFTDMG_CRYPTEX_MAX GRAFTDMG_CRYPTEX_MOBILE_ASSET = raw.GRAFTDMG_CRYPTEX_MOBILE_ASSET GRAFTDMG_CRYPTEX_MOBILE_ASSET_WITH_CODE = raw.GRAFTDMG_CRYPTEX_MOBILE_ASSET_WITH_CODE GRAFTDMG_CRYPTEX_PDI_NONCE = raw.GRAFTDMG_CRYPTEX_PDI_NONCE GRAFTDMG_CRYPTEX_PREBOOT = raw.GRAFTDMG_CRYPTEX_PREBOOT MPO_CONNECTION_PORT = raw.MPO_CONNECTION_PORT MPO_CONNECTION_PORT_WITH_PORT_ARRAY = raw.MPO_CONNECTION_PORT_WITH_PORT_ARRAY MPO_EXCEPTION_PORT = raw.MPO_EXCEPTION_PORT MPO_NOTIFICATION_PORT = raw.MPO_NOTIFICATION_PORT MPO_PORT = raw.MPO_PORT MPO_REPLY_PORT = raw.MPO_REPLY_PORT MPO_SERVICE_PORT = raw.MPO_SERVICE_PORT MPO_WEAK_REPLY_PORT = raw.MPO_WEAK_REPLY_PORT )
Variables ¶
This section is empty.
Functions ¶
func CopyMessage ¶ added in v0.17.0
func CopyMessage(msg *raw.Es_message_t) unsafe.Pointer
func ExecArg ¶ added in v0.17.0
func ExecArg(event *raw.Es_event_exec_t, index uint32) raw.Es_string_token_t
func ExecArgCount ¶ added in v0.17.0
func ExecArgCount(event *raw.Es_event_exec_t) uint32
func ExecEnv ¶ added in v0.17.0
func ExecEnv(event *raw.Es_event_exec_t, index uint32) raw.Es_string_token_t
func ExecEnvCount ¶ added in v0.17.0
func ExecEnvCount(event *raw.Es_event_exec_t) uint32
func ExecFdCount ¶ added in v0.17.0
func ExecFdCount(event *raw.Es_event_exec_t) uint32
func FreeMessage ¶ added in v0.17.0
func FreeMessage(msg *raw.Es_message_t)
func MessageSize ¶ added in v0.17.0
func MessageSize(msg *raw.Es_message_t) uint64
func ReleaseMessage ¶ added in v0.17.0
func ReleaseMessage(msg *raw.Es_message_t)
func ReleaseMutedPaths ¶ added in v0.17.0
func ReleaseMutedPaths(muted_paths *raw.Es_muted_paths_t)
func ReleaseMutedProcesses ¶ added in v0.17.0
func ReleaseMutedProcesses(muted_processes *raw.Es_muted_processes_t)
func RetainMessage ¶ added in v0.17.0
func RetainMessage(msg *raw.Es_message_t)
Types ¶
type Acl_entry_id_t ¶
type Acl_entry_id_t = raw.Acl_entry_id_t
type Acl_flag_t ¶
type Acl_flag_t = raw.Acl_flag_t
type Acl_perm_t ¶
type Acl_perm_t = raw.Acl_perm_t
type Acl_type_t ¶
type Acl_type_t = raw.Acl_type_t
type AuditToken ¶ added in v0.17.0
type AuditToken struct {
// contains filtered or unexported fields
}
AuditToken wraps the C handle audit_token_t.
func WrapAuditToken ¶ added in v0.17.0
func WrapAuditToken(p unsafe.Pointer) AuditToken
WrapAuditToken adopts an existing audit_token_t handle.
func (AuditToken) Ptr ¶ added in v0.17.0
func (h AuditToken) Ptr() unsafe.Pointer
Ptr returns the underlying audit_token_t handle.
type Client ¶ added in v0.17.0
type Client struct {
// contains filtered or unexported fields
}
Client wraps the C handle es_client_t.
func WrapClient ¶ added in v0.17.0
WrapClient adopts an existing es_client_t handle.
func (Client) ClearCache ¶ added in v0.17.0
func (h Client) ClearCache() raw.Es_clear_cache_result_t
func (Client) DeleteClient ¶ added in v0.17.0
func (h Client) DeleteClient() raw.Es_return_t
func (Client) InvertMuting ¶ added in v0.17.0
func (h Client) InvertMuting(mute_type raw.Es_mute_inversion_type_t) raw.Es_return_t
func (Client) MutePath ¶ added in v0.17.0
func (h Client) MutePath(path string, type_ raw.Es_mute_path_type_t) raw.Es_return_t
func (Client) MutePathEvents ¶ added in v0.17.0
func (h Client) MutePathEvents(path string, type_ raw.Es_mute_path_type_t, events *raw.Es_event_type_t, event_count uint64) raw.Es_return_t
func (Client) MutePathLiteral ¶ added in v0.17.0
func (h Client) MutePathLiteral(path_literal string) raw.Es_return_t
func (Client) MutePathPrefix ¶ added in v0.17.0
func (h Client) MutePathPrefix(path_prefix string) raw.Es_return_t
func (Client) MuteProcess ¶ added in v0.17.0
func (h Client) MuteProcess(audit_token AuditToken) raw.Es_return_t
func (Client) MuteProcessEvents ¶ added in v0.17.0
func (h Client) MuteProcessEvents(audit_token AuditToken, events *raw.Es_event_type_t, event_count uint64) raw.Es_return_t
func (Client) MutedPathsEvents ¶ added in v0.17.0
func (h Client) MutedPathsEvents(muted_paths unsafe.Pointer) raw.Es_return_t
func (Client) MutedProcesses ¶ added in v0.17.0
func (h Client) MutedProcesses(count *uint64, audit_tokens AuditToken) raw.Es_return_t
func (Client) MutedProcessesEvents ¶ added in v0.17.0
func (h Client) MutedProcessesEvents(muted_processes unsafe.Pointer) raw.Es_return_t
func (Client) MutingInverted ¶ added in v0.17.0
func (h Client) MutingInverted(mute_type raw.Es_mute_inversion_type_t) raw.Es_mute_inverted_return_t
func (Client) RespondAuthResult ¶ added in v0.17.0
func (h Client) RespondAuthResult(message *raw.Es_message_t, result raw.Es_auth_result_t, cache bool) raw.Es_respond_result_t
func (Client) RespondFlagsResult ¶ added in v0.17.0
func (h Client) RespondFlagsResult(message *raw.Es_message_t, authorized_flags uint32, cache bool) raw.Es_respond_result_t
func (Client) Subscribe ¶ added in v0.17.0
func (h Client) Subscribe(events *raw.Es_event_type_t, event_count uint32) raw.Es_return_t
func (Client) Subscriptions ¶ added in v0.17.0
func (Client) UnmuteAllPaths ¶ added in v0.17.0
func (h Client) UnmuteAllPaths() raw.Es_return_t
func (Client) UnmuteAllTargetPaths ¶ added in v0.17.0
func (h Client) UnmuteAllTargetPaths() raw.Es_return_t
func (Client) UnmutePath ¶ added in v0.17.0
func (h Client) UnmutePath(path string, type_ raw.Es_mute_path_type_t) raw.Es_return_t
func (Client) UnmutePathEvents ¶ added in v0.17.0
func (h Client) UnmutePathEvents(path string, type_ raw.Es_mute_path_type_t, events *raw.Es_event_type_t, event_count uint64) raw.Es_return_t
func (Client) UnmuteProcess ¶ added in v0.17.0
func (h Client) UnmuteProcess(audit_token AuditToken) raw.Es_return_t
func (Client) UnmuteProcessEvents ¶ added in v0.17.0
func (h Client) UnmuteProcessEvents(audit_token AuditToken, events *raw.Es_event_type_t, event_count uint64) raw.Es_return_t
func (Client) Unsubscribe ¶ added in v0.17.0
func (h Client) Unsubscribe(events *raw.Es_event_type_t, event_count uint32) raw.Es_return_t
func (Client) UnsubscribeAll ¶ added in v0.17.0
func (h Client) UnsubscribeAll() raw.Es_return_t
type Cryptex_auth_type_t ¶
type Cryptex_auth_type_t = raw.Cryptex_auth_type_t
type Es_action_type_t ¶
type Es_action_type_t = raw.Es_action_type_t
type Es_address_type_t ¶
type Es_address_type_t = raw.Es_address_type_t
type Es_auth_result_t ¶
type Es_auth_result_t = raw.Es_auth_result_t
type Es_authentication_type_t ¶
type Es_authentication_type_t = raw.Es_authentication_type_t
type Es_authorization_result_t ¶
type Es_authorization_result_t = raw.Es_authorization_result_t
type Es_authorization_rule_class_t ¶
type Es_authorization_rule_class_t = raw.Es_authorization_rule_class_t
type Es_auto_unlock_type_t ¶
type Es_auto_unlock_type_t = raw.Es_auto_unlock_type_t
type Es_btm_item_type_t ¶
type Es_btm_item_type_t = raw.Es_btm_item_type_t
type Es_btm_launch_item_t ¶
type Es_btm_launch_item_t = raw.Es_btm_launch_item_t
type Es_clear_cache_result_t ¶
type Es_clear_cache_result_t = raw.Es_clear_cache_result_t
type Es_client_s ¶
type Es_client_s = raw.Es_client_s
type Es_client_t ¶
type Es_client_t = raw.Es_client_t
type Es_cs_validation_category_t ¶
type Es_cs_validation_category_t = raw.Es_cs_validation_category_t
type Es_destination_type_t ¶
type Es_destination_type_t = raw.Es_destination_type_t
type Es_event_access_t ¶
type Es_event_access_t = raw.Es_event_access_t
type Es_event_authentication_auto_unlock_t ¶
type Es_event_authentication_auto_unlock_t = raw.Es_event_authentication_auto_unlock_t
type Es_event_authentication_od_t ¶
type Es_event_authentication_od_t = raw.Es_event_authentication_od_t
type Es_event_authentication_t ¶
type Es_event_authentication_t = raw.Es_event_authentication_t
type Es_event_authentication_token_t ¶
type Es_event_authentication_token_t = raw.Es_event_authentication_token_t
type Es_event_authentication_touchid_t ¶
type Es_event_authentication_touchid_t = raw.Es_event_authentication_touchid_t
type Es_event_authorization_judgement_t ¶
type Es_event_authorization_judgement_t = raw.Es_event_authorization_judgement_t
type Es_event_authorization_petition_t ¶
type Es_event_authorization_petition_t = raw.Es_event_authorization_petition_t
type Es_event_btm_launch_item_add_t ¶
type Es_event_btm_launch_item_add_t = raw.Es_event_btm_launch_item_add_t
type Es_event_btm_launch_item_remove_t ¶
type Es_event_btm_launch_item_remove_t = raw.Es_event_btm_launch_item_remove_t
type Es_event_chdir_t ¶
type Es_event_chdir_t = raw.Es_event_chdir_t
type Es_event_chroot_t ¶
type Es_event_chroot_t = raw.Es_event_chroot_t
type Es_event_clone_t ¶
type Es_event_clone_t = raw.Es_event_clone_t
type Es_event_close_t ¶
type Es_event_close_t = raw.Es_event_close_t
type Es_event_copyfile_t ¶
type Es_event_copyfile_t = raw.Es_event_copyfile_t
type Es_event_create_t ¶
type Es_event_create_t = raw.Es_event_create_t
type Es_event_cs_invalidated_t ¶
type Es_event_cs_invalidated_t = raw.Es_event_cs_invalidated_t
type Es_event_deleteextattr_t ¶
type Es_event_deleteextattr_t = raw.Es_event_deleteextattr_t
type Es_event_dup_t ¶
type Es_event_dup_t = raw.Es_event_dup_t
type Es_event_exchangedata_t ¶
type Es_event_exchangedata_t = raw.Es_event_exchangedata_t
type Es_event_exec_t ¶
type Es_event_exec_t = raw.Es_event_exec_t
type Es_event_exit_t ¶
type Es_event_exit_t = raw.Es_event_exit_t
type Es_event_fcntl_t ¶
type Es_event_fcntl_t = raw.Es_event_fcntl_t
type Es_event_file_provider_materialize_t ¶
type Es_event_file_provider_materialize_t = raw.Es_event_file_provider_materialize_t
type Es_event_file_provider_update_t ¶
type Es_event_file_provider_update_t = raw.Es_event_file_provider_update_t
type Es_event_fork_t ¶
type Es_event_fork_t = raw.Es_event_fork_t
type Es_event_fsgetpath_t ¶
type Es_event_fsgetpath_t = raw.Es_event_fsgetpath_t
type Es_event_gatekeeper_user_override_t ¶
type Es_event_gatekeeper_user_override_t = raw.Es_event_gatekeeper_user_override_t
type Es_event_get_task_inspect_t ¶
type Es_event_get_task_inspect_t = raw.Es_event_get_task_inspect_t
type Es_event_get_task_name_t ¶
type Es_event_get_task_name_t = raw.Es_event_get_task_name_t
type Es_event_get_task_read_t ¶
type Es_event_get_task_read_t = raw.Es_event_get_task_read_t
type Es_event_get_task_t ¶
type Es_event_get_task_t = raw.Es_event_get_task_t
type Es_event_getattrlist_t ¶
type Es_event_getattrlist_t = raw.Es_event_getattrlist_t
type Es_event_getextattr_t ¶
type Es_event_getextattr_t = raw.Es_event_getextattr_t
type Es_event_id_t ¶
type Es_event_id_t = raw.Es_event_id_t
type Es_event_iokit_open_t ¶
type Es_event_iokit_open_t = raw.Es_event_iokit_open_t
type Es_event_kextload_t ¶
type Es_event_kextload_t = raw.Es_event_kextload_t
type Es_event_kextunload_t ¶
type Es_event_kextunload_t = raw.Es_event_kextunload_t
type Es_event_link_t ¶
type Es_event_link_t = raw.Es_event_link_t
type Es_event_listextattr_t ¶
type Es_event_listextattr_t = raw.Es_event_listextattr_t
type Es_event_login_login_t ¶
type Es_event_login_login_t = raw.Es_event_login_login_t
type Es_event_login_logout_t ¶
type Es_event_login_logout_t = raw.Es_event_login_logout_t
type Es_event_lookup_t ¶
type Es_event_lookup_t = raw.Es_event_lookup_t
type Es_event_lw_session_lock_t ¶
type Es_event_lw_session_lock_t = raw.Es_event_lw_session_lock_t
type Es_event_lw_session_login_t ¶
type Es_event_lw_session_login_t = raw.Es_event_lw_session_login_t
type Es_event_lw_session_logout_t ¶
type Es_event_lw_session_logout_t = raw.Es_event_lw_session_logout_t
type Es_event_lw_session_unlock_t ¶
type Es_event_lw_session_unlock_t = raw.Es_event_lw_session_unlock_t
type Es_event_mmap_t ¶
type Es_event_mmap_t = raw.Es_event_mmap_t
type Es_event_mount_t ¶
type Es_event_mount_t = raw.Es_event_mount_t
type Es_event_mprotect_t ¶
type Es_event_mprotect_t = raw.Es_event_mprotect_t
type Es_event_od_attribute_set_t ¶
type Es_event_od_attribute_set_t = raw.Es_event_od_attribute_set_t
type Es_event_od_attribute_value_add_t ¶
type Es_event_od_attribute_value_add_t = raw.Es_event_od_attribute_value_add_t
type Es_event_od_attribute_value_remove_t ¶
type Es_event_od_attribute_value_remove_t = raw.Es_event_od_attribute_value_remove_t
type Es_event_od_create_group_t ¶
type Es_event_od_create_group_t = raw.Es_event_od_create_group_t
type Es_event_od_create_user_t ¶
type Es_event_od_create_user_t = raw.Es_event_od_create_user_t
type Es_event_od_delete_group_t ¶
type Es_event_od_delete_group_t = raw.Es_event_od_delete_group_t
type Es_event_od_delete_user_t ¶
type Es_event_od_delete_user_t = raw.Es_event_od_delete_user_t
type Es_event_od_disable_user_t ¶
type Es_event_od_disable_user_t = raw.Es_event_od_disable_user_t
type Es_event_od_enable_user_t ¶
type Es_event_od_enable_user_t = raw.Es_event_od_enable_user_t
type Es_event_od_group_add_t ¶
type Es_event_od_group_add_t = raw.Es_event_od_group_add_t
type Es_event_od_group_remove_t ¶
type Es_event_od_group_remove_t = raw.Es_event_od_group_remove_t
type Es_event_od_group_set_t ¶
type Es_event_od_group_set_t = raw.Es_event_od_group_set_t
type Es_event_od_modify_password_t ¶
type Es_event_od_modify_password_t = raw.Es_event_od_modify_password_t
type Es_event_open_t ¶
type Es_event_open_t = raw.Es_event_open_t
type Es_event_openssh_login_t ¶
type Es_event_openssh_login_t = raw.Es_event_openssh_login_t
type Es_event_openssh_logout_t ¶
type Es_event_openssh_logout_t = raw.Es_event_openssh_logout_t
type Es_event_proc_check_t ¶
type Es_event_proc_check_t = raw.Es_event_proc_check_t
type Es_event_proc_suspend_resume_t ¶
type Es_event_proc_suspend_resume_t = raw.Es_event_proc_suspend_resume_t
type Es_event_profile_add_t ¶
type Es_event_profile_add_t = raw.Es_event_profile_add_t
type Es_event_profile_remove_t ¶
type Es_event_profile_remove_t = raw.Es_event_profile_remove_t
type Es_event_pty_close_t ¶
type Es_event_pty_close_t = raw.Es_event_pty_close_t
type Es_event_pty_grant_t ¶
type Es_event_pty_grant_t = raw.Es_event_pty_grant_t
type Es_event_readdir_t ¶
type Es_event_readdir_t = raw.Es_event_readdir_t
type Es_event_readlink_t ¶
type Es_event_readlink_t = raw.Es_event_readlink_t
type Es_event_remote_thread_create_t ¶
type Es_event_remote_thread_create_t = raw.Es_event_remote_thread_create_t
type Es_event_remount_t ¶
type Es_event_remount_t = raw.Es_event_remount_t
type Es_event_rename_t ¶
type Es_event_rename_t = raw.Es_event_rename_t
type Es_event_screensharing_attach_t ¶
type Es_event_screensharing_attach_t = raw.Es_event_screensharing_attach_t
type Es_event_screensharing_detach_t ¶
type Es_event_screensharing_detach_t = raw.Es_event_screensharing_detach_t
type Es_event_searchfs_t ¶
type Es_event_searchfs_t = raw.Es_event_searchfs_t
type Es_event_setacl_t ¶
type Es_event_setacl_t = raw.Es_event_setacl_t
type Es_event_setattrlist_t ¶
type Es_event_setattrlist_t = raw.Es_event_setattrlist_t
type Es_event_setegid_t ¶
type Es_event_setegid_t = raw.Es_event_setegid_t
type Es_event_seteuid_t ¶
type Es_event_seteuid_t = raw.Es_event_seteuid_t
type Es_event_setextattr_t ¶
type Es_event_setextattr_t = raw.Es_event_setextattr_t
type Es_event_setflags_t ¶
type Es_event_setflags_t = raw.Es_event_setflags_t
type Es_event_setgid_t ¶
type Es_event_setgid_t = raw.Es_event_setgid_t
type Es_event_setmode_t ¶
type Es_event_setmode_t = raw.Es_event_setmode_t
type Es_event_setowner_t ¶
type Es_event_setowner_t = raw.Es_event_setowner_t
type Es_event_setregid_t ¶
type Es_event_setregid_t = raw.Es_event_setregid_t
type Es_event_setreuid_t ¶
type Es_event_setreuid_t = raw.Es_event_setreuid_t
type Es_event_settime_t ¶
type Es_event_settime_t = raw.Es_event_settime_t
type Es_event_setuid_t ¶
type Es_event_setuid_t = raw.Es_event_setuid_t
type Es_event_signal_t ¶
type Es_event_signal_t = raw.Es_event_signal_t
type Es_event_stat_t ¶
type Es_event_stat_t = raw.Es_event_stat_t
type Es_event_su_t ¶
type Es_event_su_t = raw.Es_event_su_t
type Es_event_sudo_t ¶
type Es_event_sudo_t = raw.Es_event_sudo_t
type Es_event_tcc_modify_t ¶
type Es_event_tcc_modify_t = raw.Es_event_tcc_modify_t
type Es_event_trace_t ¶
type Es_event_trace_t = raw.Es_event_trace_t
type Es_event_truncate_t ¶
type Es_event_truncate_t = raw.Es_event_truncate_t
type Es_event_type_t ¶
type Es_event_type_t = raw.Es_event_type_t
type Es_event_uipc_bind_t ¶
type Es_event_uipc_bind_t = raw.Es_event_uipc_bind_t
type Es_event_uipc_connect_t ¶
type Es_event_uipc_connect_t = raw.Es_event_uipc_connect_t
type Es_event_unlink_t ¶
type Es_event_unlink_t = raw.Es_event_unlink_t
type Es_event_unmount_t ¶
type Es_event_unmount_t = raw.Es_event_unmount_t
type Es_event_utimes_t ¶
type Es_event_utimes_t = raw.Es_event_utimes_t
type Es_event_write_t ¶
type Es_event_write_t = raw.Es_event_write_t
type Es_event_xp_malware_detected_t ¶
type Es_event_xp_malware_detected_t = raw.Es_event_xp_malware_detected_t
type Es_event_xp_malware_remediated_t ¶
type Es_event_xp_malware_remediated_t = raw.Es_event_xp_malware_remediated_t
type Es_event_xpc_connect_t ¶
type Es_event_xpc_connect_t = raw.Es_event_xpc_connect_t
type Es_gatekeeper_user_override_file_type_t ¶
type Es_gatekeeper_user_override_file_type_t = raw.Es_gatekeeper_user_override_file_type_t
type Es_get_task_type_t ¶
type Es_get_task_type_t = raw.Es_get_task_type_t
type Es_message_t ¶
type Es_message_t = raw.Es_message_t
type Es_mount_disposition_t ¶
type Es_mount_disposition_t = raw.Es_mount_disposition_t
type Es_mute_inversion_type_t ¶
type Es_mute_inversion_type_t = raw.Es_mute_inversion_type_t
type Es_mute_inverted_return_t ¶
type Es_mute_inverted_return_t = raw.Es_mute_inverted_return_t
type Es_mute_path_type_t ¶
type Es_mute_path_type_t = raw.Es_mute_path_type_t
type Es_muted_path_t ¶
type Es_muted_path_t = raw.Es_muted_path_t
type Es_muted_paths_t ¶
type Es_muted_paths_t = raw.Es_muted_paths_t
type Es_muted_process_t ¶
type Es_muted_process_t = raw.Es_muted_process_t
type Es_muted_processes_t ¶
type Es_muted_processes_t = raw.Es_muted_processes_t
type Es_new_client_result_t ¶
type Es_new_client_result_t = raw.Es_new_client_result_t
type Es_od_account_type_t ¶
type Es_od_account_type_t = raw.Es_od_account_type_t
type Es_od_member_id_array_t ¶
type Es_od_member_id_array_t = raw.Es_od_member_id_array_t
type Es_od_member_id_t ¶
type Es_od_member_id_t = raw.Es_od_member_id_t
type Es_od_member_type_t ¶
type Es_od_member_type_t = raw.Es_od_member_type_t
type Es_od_record_type_t ¶
type Es_od_record_type_t = raw.Es_od_record_type_t
type Es_openssh_login_result_type_t ¶
type Es_openssh_login_result_type_t = raw.Es_openssh_login_result_type_t
type Es_proc_check_type_t ¶
type Es_proc_check_type_t = raw.Es_proc_check_type_t
type Es_proc_suspend_resume_type_t ¶
type Es_proc_suspend_resume_type_t = raw.Es_proc_suspend_resume_type_t
type Es_process_t ¶
type Es_process_t = raw.Es_process_t
type Es_profile_source_t ¶
type Es_profile_source_t = raw.Es_profile_source_t
type Es_profile_t ¶
type Es_profile_t = raw.Es_profile_t
type Es_respond_result_t ¶
type Es_respond_result_t = raw.Es_respond_result_t
type Es_result_t ¶
type Es_result_t = raw.Es_result_t
type Es_result_type_t ¶
type Es_result_type_t = raw.Es_result_type_t
type Es_return_t ¶
type Es_return_t = raw.Es_return_t
type Es_set_or_clear_t ¶
type Es_set_or_clear_t = raw.Es_set_or_clear_t
type Es_signed_file_info_t ¶
type Es_signed_file_info_t = raw.Es_signed_file_info_t
type Es_string_token_t ¶
type Es_string_token_t = raw.Es_string_token_t
type Es_sudo_plugin_type_t ¶
type Es_sudo_plugin_type_t = raw.Es_sudo_plugin_type_t
type Es_sudo_reject_info_t ¶
type Es_sudo_reject_info_t = raw.Es_sudo_reject_info_t
type Es_tcc_authorization_reason_t ¶
type Es_tcc_authorization_reason_t = raw.Es_tcc_authorization_reason_t
type Es_tcc_authorization_right_t ¶
type Es_tcc_authorization_right_t = raw.Es_tcc_authorization_right_t
type Es_tcc_event_type_t ¶
type Es_tcc_event_type_t = raw.Es_tcc_event_type_t
type Es_tcc_identity_type_t ¶
type Es_tcc_identity_type_t = raw.Es_tcc_identity_type_t
type Es_thread_state_t ¶
type Es_thread_state_t = raw.Es_thread_state_t
type Es_thread_t ¶
type Es_thread_t = raw.Es_thread_t
type Es_token_t ¶
type Es_token_t = raw.Es_token_t
type Es_touchid_mode_t ¶
type Es_touchid_mode_t = raw.Es_touchid_mode_t
type Es_xpc_domain_type_t ¶
type Es_xpc_domain_type_t = raw.Es_xpc_domain_type_t
type Graftdmg_type_t ¶
type Graftdmg_type_t = raw.Graftdmg_type_t
type Mpo_flags_t ¶
type Mpo_flags_t = raw.Mpo_flags_t
Source Files
Click to show internal directories.
Click to hide internal directories.