endpointsecurity

package
v0.19.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 11, 2026 License: MIT Imports: 2 Imported by: 0

Documentation

Rendered for darwin/amd64

Overview

Package endpointsecurity provides an idiomatic Go wrapper over the raw EndpointSecurity C-library bindings: opaque handles become typed wrappers with methods, the C symbol prefix is stripped, and OSStatus/kern_return_t results become Go errors.

Index

Constants

View Source 
const (
	ACL_ADD_FILE                                        = raw.ACL_ADD_FILE
	ACL_ADD_SUBDIRECTORY                                = raw.ACL_ADD_SUBDIRECTORY
	ACL_APPEND_DATA                                     = raw.ACL_APPEND_DATA
	ACL_CHANGE_OWNER                                    = raw.ACL_CHANGE_OWNER
	ACL_DELETE                                          = raw.ACL_DELETE
	ACL_DELETE_CHILD                                    = raw.ACL_DELETE_CHILD
	ACL_ENTRY_DIRECTORY_INHERIT                         = raw.ACL_ENTRY_DIRECTORY_INHERIT
	ACL_ENTRY_FILE_INHERIT                              = raw.ACL_ENTRY_FILE_INHERIT
	ACL_ENTRY_INHERITED                                 = raw.ACL_ENTRY_INHERITED
	ACL_ENTRY_LIMIT_INHERIT                             = raw.ACL_ENTRY_LIMIT_INHERIT
	ACL_ENTRY_ONLY_INHERIT                              = raw.ACL_ENTRY_ONLY_INHERIT
	ACL_EXECUTE                                         = raw.ACL_EXECUTE
	ACL_EXTENDED_ALLOW                                  = raw.ACL_EXTENDED_ALLOW
	ACL_EXTENDED_DENY                                   = raw.ACL_EXTENDED_DENY
	ACL_FIRST_ENTRY                                     = raw.ACL_FIRST_ENTRY
	ACL_FLAG_DEFER_INHERIT                              = raw.ACL_FLAG_DEFER_INHERIT
	ACL_FLAG_NO_INHERIT                                 = raw.ACL_FLAG_NO_INHERIT
	ACL_LAST_ENTRY                                      = raw.ACL_LAST_ENTRY
	ACL_LIST_DIRECTORY                                  = raw.ACL_LIST_DIRECTORY
	ACL_NEXT_ENTRY                                      = raw.ACL_NEXT_ENTRY
	ACL_READ_ATTRIBUTES                                 = raw.ACL_READ_ATTRIBUTES
	ACL_READ_DATA                                       = raw.ACL_READ_DATA
	ACL_READ_EXTATTRIBUTES                              = raw.ACL_READ_EXTATTRIBUTES
	ACL_READ_SECURITY                                   = raw.ACL_READ_SECURITY
	ACL_SEARCH                                          = raw.ACL_SEARCH
	ACL_SYNCHRONIZE                                     = raw.ACL_SYNCHRONIZE
	ACL_TYPE_ACCESS                                     = raw.ACL_TYPE_ACCESS
	ACL_TYPE_AFS                                        = raw.ACL_TYPE_AFS
	ACL_TYPE_CODA                                       = raw.ACL_TYPE_CODA
	ACL_TYPE_DEFAULT                                    = raw.ACL_TYPE_DEFAULT
	ACL_TYPE_EXTENDED                                   = raw.ACL_TYPE_EXTENDED
	ACL_TYPE_NTFS                                       = raw.ACL_TYPE_NTFS
	ACL_TYPE_NWFS                                       = raw.ACL_TYPE_NWFS
	ACL_UNDEFINED_TAG                                   = raw.ACL_UNDEFINED_TAG
	ACL_WRITE_ATTRIBUTES                                = raw.ACL_WRITE_ATTRIBUTES
	ACL_WRITE_DATA                                      = raw.ACL_WRITE_DATA
	ACL_WRITE_EXTATTRIBUTES                             = raw.ACL_WRITE_EXTATTRIBUTES
	ACL_WRITE_SECURITY                                  = raw.ACL_WRITE_SECURITY
	CRYPTEX1_AUTH_ENV_GENERIC                           = raw.CRYPTEX1_AUTH_ENV_GENERIC
	CRYPTEX1_AUTH_ENV_GENERIC_SUPPLEMENTAL              = raw.CRYPTEX1_AUTH_ENV_GENERIC_SUPPLEMENTAL
	CRYPTEX_AUTH_MAX                                    = raw.CRYPTEX_AUTH_MAX
	CRYPTEX_AUTH_MOBILE_ASSET                           = raw.CRYPTEX_AUTH_MOBILE_ASSET
	CRYPTEX_AUTH_MOBILE_ASSET_WITH_CODE                 = raw.CRYPTEX_AUTH_MOBILE_ASSET_WITH_CODE
	CRYPTEX_AUTH_PDI_NONCE                              = raw.CRYPTEX_AUTH_PDI_NONCE
	ES_ACTION_TYPE_AUTH                                 = raw.ES_ACTION_TYPE_AUTH
	ES_ACTION_TYPE_NOTIFY                               = raw.ES_ACTION_TYPE_NOTIFY
	ES_ADDRESS_TYPE_IPV4                                = raw.ES_ADDRESS_TYPE_IPV4
	ES_ADDRESS_TYPE_IPV6                                = raw.ES_ADDRESS_TYPE_IPV6
	ES_ADDRESS_TYPE_NAMED_SOCKET                        = raw.ES_ADDRESS_TYPE_NAMED_SOCKET
	ES_ADDRESS_TYPE_NONE                                = raw.ES_ADDRESS_TYPE_NONE
	ES_AUTHENTICATION_TYPE_AUTO_UNLOCK                  = raw.ES_AUTHENTICATION_TYPE_AUTO_UNLOCK
	ES_AUTHENTICATION_TYPE_LAST                         = raw.ES_AUTHENTICATION_TYPE_LAST
	ES_AUTHENTICATION_TYPE_OD                           = raw.ES_AUTHENTICATION_TYPE_OD
	ES_AUTHENTICATION_TYPE_TOKEN                        = raw.ES_AUTHENTICATION_TYPE_TOKEN
	ES_AUTHENTICATION_TYPE_TOUCHID                      = raw.ES_AUTHENTICATION_TYPE_TOUCHID
	ES_AUTHORIZATION_RULE_CLASS_ALLOW                   = raw.ES_AUTHORIZATION_RULE_CLASS_ALLOW
	ES_AUTHORIZATION_RULE_CLASS_DENY                    = raw.ES_AUTHORIZATION_RULE_CLASS_DENY
	ES_AUTHORIZATION_RULE_CLASS_INVALID                 = raw.ES_AUTHORIZATION_RULE_CLASS_INVALID
	ES_AUTHORIZATION_RULE_CLASS_MECHANISM               = raw.ES_AUTHORIZATION_RULE_CLASS_MECHANISM
	ES_AUTHORIZATION_RULE_CLASS_RULE                    = raw.ES_AUTHORIZATION_RULE_CLASS_RULE
	ES_AUTHORIZATION_RULE_CLASS_UNKNOWN                 = raw.ES_AUTHORIZATION_RULE_CLASS_UNKNOWN
	ES_AUTHORIZATION_RULE_CLASS_USER                    = raw.ES_AUTHORIZATION_RULE_CLASS_USER
	ES_AUTH_RESULT_ALLOW                                = raw.ES_AUTH_RESULT_ALLOW
	ES_AUTH_RESULT_DENY                                 = raw.ES_AUTH_RESULT_DENY
	ES_AUTO_UNLOCK_AUTH_PROMPT                          = raw.ES_AUTO_UNLOCK_AUTH_PROMPT
	ES_AUTO_UNLOCK_MACHINE_UNLOCK                       = raw.ES_AUTO_UNLOCK_MACHINE_UNLOCK
	ES_BTM_ITEM_TYPE_AGENT                              = raw.ES_BTM_ITEM_TYPE_AGENT
	ES_BTM_ITEM_TYPE_APP                                = raw.ES_BTM_ITEM_TYPE_APP
	ES_BTM_ITEM_TYPE_DAEMON                             = raw.ES_BTM_ITEM_TYPE_DAEMON
	ES_BTM_ITEM_TYPE_LOGIN_ITEM                         = raw.ES_BTM_ITEM_TYPE_LOGIN_ITEM
	ES_BTM_ITEM_TYPE_USER_ITEM                          = raw.ES_BTM_ITEM_TYPE_USER_ITEM
	ES_CLEAR                                            = raw.ES_CLEAR
	ES_CLEAR_CACHE_RESULT_ERR_INTERNAL                  = raw.ES_CLEAR_CACHE_RESULT_ERR_INTERNAL
	ES_CLEAR_CACHE_RESULT_ERR_THROTTLE                  = raw.ES_CLEAR_CACHE_RESULT_ERR_THROTTLE
	ES_CLEAR_CACHE_RESULT_SUCCESS                       = raw.ES_CLEAR_CACHE_RESULT_SUCCESS
	ES_CS_VALIDATION_CATEGORY_APP_STORE                 = raw.ES_CS_VALIDATION_CATEGORY_APP_STORE
	ES_CS_VALIDATION_CATEGORY_DEVELOPER_ID              = raw.ES_CS_VALIDATION_CATEGORY_DEVELOPER_ID
	ES_CS_VALIDATION_CATEGORY_DEVELOPMENT               = raw.ES_CS_VALIDATION_CATEGORY_DEVELOPMENT
	ES_CS_VALIDATION_CATEGORY_ENTERPRISE                = raw.ES_CS_VALIDATION_CATEGORY_ENTERPRISE
	ES_CS_VALIDATION_CATEGORY_INVALID                   = raw.ES_CS_VALIDATION_CATEGORY_INVALID
	ES_CS_VALIDATION_CATEGORY_LOCAL_SIGNING             = raw.ES_CS_VALIDATION_CATEGORY_LOCAL_SIGNING
	ES_CS_VALIDATION_CATEGORY_NONE                      = raw.ES_CS_VALIDATION_CATEGORY_NONE
	ES_CS_VALIDATION_CATEGORY_OOPJIT                    = raw.ES_CS_VALIDATION_CATEGORY_OOPJIT
	ES_CS_VALIDATION_CATEGORY_PLATFORM                  = raw.ES_CS_VALIDATION_CATEGORY_PLATFORM
	ES_CS_VALIDATION_CATEGORY_ROSETTA                   = raw.ES_CS_VALIDATION_CATEGORY_ROSETTA
	ES_CS_VALIDATION_CATEGORY_TESTFLIGHT                = raw.ES_CS_VALIDATION_CATEGORY_TESTFLIGHT
	ES_DESTINATION_TYPE_EXISTING_FILE                   = raw.ES_DESTINATION_TYPE_EXISTING_FILE
	ES_DESTINATION_TYPE_NEW_PATH                        = raw.ES_DESTINATION_TYPE_NEW_PATH
	ES_EVENT_TYPE_AUTH_CHDIR                            = raw.ES_EVENT_TYPE_AUTH_CHDIR
	ES_EVENT_TYPE_AUTH_CHROOT                           = raw.ES_EVENT_TYPE_AUTH_CHROOT
	ES_EVENT_TYPE_AUTH_CLONE                            = raw.ES_EVENT_TYPE_AUTH_CLONE
	ES_EVENT_TYPE_AUTH_COPYFILE                         = raw.ES_EVENT_TYPE_AUTH_COPYFILE
	ES_EVENT_TYPE_AUTH_CREATE                           = raw.ES_EVENT_TYPE_AUTH_CREATE
	ES_EVENT_TYPE_AUTH_DELETEEXTATTR                    = raw.ES_EVENT_TYPE_AUTH_DELETEEXTATTR
	ES_EVENT_TYPE_AUTH_EXCHANGEDATA                     = raw.ES_EVENT_TYPE_AUTH_EXCHANGEDATA
	ES_EVENT_TYPE_AUTH_EXEC                             = raw.ES_EVENT_TYPE_AUTH_EXEC
	ES_EVENT_TYPE_AUTH_FCNTL                            = raw.ES_EVENT_TYPE_AUTH_FCNTL
	ES_EVENT_TYPE_AUTH_FILE_PROVIDER_MATERIALIZE        = raw.ES_EVENT_TYPE_AUTH_FILE_PROVIDER_MATERIALIZE
	ES_EVENT_TYPE_AUTH_FILE_PROVIDER_UPDATE             = raw.ES_EVENT_TYPE_AUTH_FILE_PROVIDER_UPDATE
	ES_EVENT_TYPE_AUTH_FSGETPATH                        = raw.ES_EVENT_TYPE_AUTH_FSGETPATH
	ES_EVENT_TYPE_AUTH_GETATTRLIST                      = raw.ES_EVENT_TYPE_AUTH_GETATTRLIST
	ES_EVENT_TYPE_AUTH_GETEXTATTR                       = raw.ES_EVENT_TYPE_AUTH_GETEXTATTR
	ES_EVENT_TYPE_AUTH_GET_TASK                         = raw.ES_EVENT_TYPE_AUTH_GET_TASK
	ES_EVENT_TYPE_AUTH_GET_TASK_READ                    = raw.ES_EVENT_TYPE_AUTH_GET_TASK_READ
	ES_EVENT_TYPE_AUTH_IOKIT_OPEN                       = raw.ES_EVENT_TYPE_AUTH_IOKIT_OPEN
	ES_EVENT_TYPE_AUTH_KEXTLOAD                         = raw.ES_EVENT_TYPE_AUTH_KEXTLOAD
	ES_EVENT_TYPE_AUTH_LINK                             = raw.ES_EVENT_TYPE_AUTH_LINK
	ES_EVENT_TYPE_AUTH_LISTEXTATTR                      = raw.ES_EVENT_TYPE_AUTH_LISTEXTATTR
	ES_EVENT_TYPE_AUTH_MMAP                             = raw.ES_EVENT_TYPE_AUTH_MMAP
	ES_EVENT_TYPE_AUTH_MOUNT                            = raw.ES_EVENT_TYPE_AUTH_MOUNT
	ES_EVENT_TYPE_AUTH_MPROTECT                         = raw.ES_EVENT_TYPE_AUTH_MPROTECT
	ES_EVENT_TYPE_AUTH_OPEN                             = raw.ES_EVENT_TYPE_AUTH_OPEN
	ES_EVENT_TYPE_AUTH_PROC_CHECK                       = raw.ES_EVENT_TYPE_AUTH_PROC_CHECK
	ES_EVENT_TYPE_AUTH_PROC_SUSPEND_RESUME              = raw.ES_EVENT_TYPE_AUTH_PROC_SUSPEND_RESUME
	ES_EVENT_TYPE_AUTH_READDIR                          = raw.ES_EVENT_TYPE_AUTH_READDIR
	ES_EVENT_TYPE_AUTH_READLINK                         = raw.ES_EVENT_TYPE_AUTH_READLINK
	ES_EVENT_TYPE_AUTH_REMOUNT                          = raw.ES_EVENT_TYPE_AUTH_REMOUNT
	ES_EVENT_TYPE_AUTH_RENAME                           = raw.ES_EVENT_TYPE_AUTH_RENAME
	ES_EVENT_TYPE_AUTH_SEARCHFS                         = raw.ES_EVENT_TYPE_AUTH_SEARCHFS
	ES_EVENT_TYPE_AUTH_SETACL                           = raw.ES_EVENT_TYPE_AUTH_SETACL
	ES_EVENT_TYPE_AUTH_SETATTRLIST                      = raw.ES_EVENT_TYPE_AUTH_SETATTRLIST
	ES_EVENT_TYPE_AUTH_SETEXTATTR                       = raw.ES_EVENT_TYPE_AUTH_SETEXTATTR
	ES_EVENT_TYPE_AUTH_SETFLAGS                         = raw.ES_EVENT_TYPE_AUTH_SETFLAGS
	ES_EVENT_TYPE_AUTH_SETMODE                          = raw.ES_EVENT_TYPE_AUTH_SETMODE
	ES_EVENT_TYPE_AUTH_SETOWNER                         = raw.ES_EVENT_TYPE_AUTH_SETOWNER
	ES_EVENT_TYPE_AUTH_SETTIME                          = raw.ES_EVENT_TYPE_AUTH_SETTIME
	ES_EVENT_TYPE_AUTH_SIGNAL                           = raw.ES_EVENT_TYPE_AUTH_SIGNAL
	ES_EVENT_TYPE_AUTH_TRUNCATE                         = raw.ES_EVENT_TYPE_AUTH_TRUNCATE
	ES_EVENT_TYPE_AUTH_UIPC_BIND                        = raw.ES_EVENT_TYPE_AUTH_UIPC_BIND
	ES_EVENT_TYPE_AUTH_UIPC_CONNECT                     = raw.ES_EVENT_TYPE_AUTH_UIPC_CONNECT
	ES_EVENT_TYPE_AUTH_UNLINK                           = raw.ES_EVENT_TYPE_AUTH_UNLINK
	ES_EVENT_TYPE_AUTH_UTIMES                           = raw.ES_EVENT_TYPE_AUTH_UTIMES
	ES_EVENT_TYPE_LAST                                  = raw.ES_EVENT_TYPE_LAST
	ES_EVENT_TYPE_NOTIFY_ACCESS                         = raw.ES_EVENT_TYPE_NOTIFY_ACCESS
	ES_EVENT_TYPE_NOTIFY_AUTHENTICATION                 = raw.ES_EVENT_TYPE_NOTIFY_AUTHENTICATION
	ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT        = raw.ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT
	ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION         = raw.ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION
	ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD            = raw.ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD
	ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE         = raw.ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE
	ES_EVENT_TYPE_NOTIFY_CHDIR                          = raw.ES_EVENT_TYPE_NOTIFY_CHDIR
	ES_EVENT_TYPE_NOTIFY_CHROOT                         = raw.ES_EVENT_TYPE_NOTIFY_CHROOT
	ES_EVENT_TYPE_NOTIFY_CLONE                          = raw.ES_EVENT_TYPE_NOTIFY_CLONE
	ES_EVENT_TYPE_NOTIFY_CLOSE                          = raw.ES_EVENT_TYPE_NOTIFY_CLOSE
	ES_EVENT_TYPE_NOTIFY_COPYFILE                       = raw.ES_EVENT_TYPE_NOTIFY_COPYFILE
	ES_EVENT_TYPE_NOTIFY_CREATE                         = raw.ES_EVENT_TYPE_NOTIFY_CREATE
	ES_EVENT_TYPE_NOTIFY_CS_INVALIDATED                 = raw.ES_EVENT_TYPE_NOTIFY_CS_INVALIDATED
	ES_EVENT_TYPE_NOTIFY_DELETEEXTATTR                  = raw.ES_EVENT_TYPE_NOTIFY_DELETEEXTATTR
	ES_EVENT_TYPE_NOTIFY_DUP                            = raw.ES_EVENT_TYPE_NOTIFY_DUP
	ES_EVENT_TYPE_NOTIFY_EXCHANGEDATA                   = raw.ES_EVENT_TYPE_NOTIFY_EXCHANGEDATA
	ES_EVENT_TYPE_NOTIFY_EXEC                           = raw.ES_EVENT_TYPE_NOTIFY_EXEC
	ES_EVENT_TYPE_NOTIFY_EXIT                           = raw.ES_EVENT_TYPE_NOTIFY_EXIT
	ES_EVENT_TYPE_NOTIFY_FCNTL                          = raw.ES_EVENT_TYPE_NOTIFY_FCNTL
	ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_MATERIALIZE      = raw.ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_MATERIALIZE
	ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_UPDATE           = raw.ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_UPDATE
	ES_EVENT_TYPE_NOTIFY_FORK                           = raw.ES_EVENT_TYPE_NOTIFY_FORK
	ES_EVENT_TYPE_NOTIFY_FSGETPATH                      = raw.ES_EVENT_TYPE_NOTIFY_FSGETPATH
	ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE       = raw.ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE
	ES_EVENT_TYPE_NOTIFY_GETATTRLIST                    = raw.ES_EVENT_TYPE_NOTIFY_GETATTRLIST
	ES_EVENT_TYPE_NOTIFY_GETEXTATTR                     = raw.ES_EVENT_TYPE_NOTIFY_GETEXTATTR
	ES_EVENT_TYPE_NOTIFY_GET_TASK                       = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK
	ES_EVENT_TYPE_NOTIFY_GET_TASK_INSPECT               = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK_INSPECT
	ES_EVENT_TYPE_NOTIFY_GET_TASK_NAME                  = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK_NAME
	ES_EVENT_TYPE_NOTIFY_GET_TASK_READ                  = raw.ES_EVENT_TYPE_NOTIFY_GET_TASK_READ
	ES_EVENT_TYPE_NOTIFY_IOKIT_OPEN                     = raw.ES_EVENT_TYPE_NOTIFY_IOKIT_OPEN
	ES_EVENT_TYPE_NOTIFY_KEXTLOAD                       = raw.ES_EVENT_TYPE_NOTIFY_KEXTLOAD
	ES_EVENT_TYPE_NOTIFY_KEXTUNLOAD                     = raw.ES_EVENT_TYPE_NOTIFY_KEXTUNLOAD
	ES_EVENT_TYPE_NOTIFY_LINK                           = raw.ES_EVENT_TYPE_NOTIFY_LINK
	ES_EVENT_TYPE_NOTIFY_LISTEXTATTR                    = raw.ES_EVENT_TYPE_NOTIFY_LISTEXTATTR
	ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN                    = raw.ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN
	ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT                   = raw.ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT
	ES_EVENT_TYPE_NOTIFY_LOOKUP                         = raw.ES_EVENT_TYPE_NOTIFY_LOOKUP
	ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK                = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK
	ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN               = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN
	ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT              = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT
	ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK              = raw.ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK
	ES_EVENT_TYPE_NOTIFY_MMAP                           = raw.ES_EVENT_TYPE_NOTIFY_MMAP
	ES_EVENT_TYPE_NOTIFY_MOUNT                          = raw.ES_EVENT_TYPE_NOTIFY_MOUNT
	ES_EVENT_TYPE_NOTIFY_MPROTECT                       = raw.ES_EVENT_TYPE_NOTIFY_MPROTECT
	ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET               = raw.ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET
	ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD         = raw.ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD
	ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE      = raw.ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE
	ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP                = raw.ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP
	ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER                 = raw.ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER
	ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP                = raw.ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP
	ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER                 = raw.ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER
	ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER                = raw.ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER
	ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER                 = raw.ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER
	ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD                   = raw.ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD
	ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE                = raw.ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE
	ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET                   = raw.ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET
	ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD             = raw.ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD
	ES_EVENT_TYPE_NOTIFY_OPEN                           = raw.ES_EVENT_TYPE_NOTIFY_OPEN
	ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN                  = raw.ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN
	ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT                 = raw.ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT
	ES_EVENT_TYPE_NOTIFY_PROC_CHECK                     = raw.ES_EVENT_TYPE_NOTIFY_PROC_CHECK
	ES_EVENT_TYPE_NOTIFY_PROC_SUSPEND_RESUME            = raw.ES_EVENT_TYPE_NOTIFY_PROC_SUSPEND_RESUME
	ES_EVENT_TYPE_NOTIFY_PROFILE_ADD                    = raw.ES_EVENT_TYPE_NOTIFY_PROFILE_ADD
	ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE                 = raw.ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE
	ES_EVENT_TYPE_NOTIFY_PTY_CLOSE                      = raw.ES_EVENT_TYPE_NOTIFY_PTY_CLOSE
	ES_EVENT_TYPE_NOTIFY_PTY_GRANT                      = raw.ES_EVENT_TYPE_NOTIFY_PTY_GRANT
	ES_EVENT_TYPE_NOTIFY_READDIR                        = raw.ES_EVENT_TYPE_NOTIFY_READDIR
	ES_EVENT_TYPE_NOTIFY_READLINK                       = raw.ES_EVENT_TYPE_NOTIFY_READLINK
	ES_EVENT_TYPE_NOTIFY_REMOTE_THREAD_CREATE           = raw.ES_EVENT_TYPE_NOTIFY_REMOTE_THREAD_CREATE
	ES_EVENT_TYPE_NOTIFY_REMOUNT                        = raw.ES_EVENT_TYPE_NOTIFY_REMOUNT
	ES_EVENT_TYPE_NOTIFY_RENAME                         = raw.ES_EVENT_TYPE_NOTIFY_RENAME
	ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH           = raw.ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH
	ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH           = raw.ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH
	ES_EVENT_TYPE_NOTIFY_SEARCHFS                       = raw.ES_EVENT_TYPE_NOTIFY_SEARCHFS
	ES_EVENT_TYPE_NOTIFY_SETACL                         = raw.ES_EVENT_TYPE_NOTIFY_SETACL
	ES_EVENT_TYPE_NOTIFY_SETATTRLIST                    = raw.ES_EVENT_TYPE_NOTIFY_SETATTRLIST
	ES_EVENT_TYPE_NOTIFY_SETEGID                        = raw.ES_EVENT_TYPE_NOTIFY_SETEGID
	ES_EVENT_TYPE_NOTIFY_SETEUID                        = raw.ES_EVENT_TYPE_NOTIFY_SETEUID
	ES_EVENT_TYPE_NOTIFY_SETEXTATTR                     = raw.ES_EVENT_TYPE_NOTIFY_SETEXTATTR
	ES_EVENT_TYPE_NOTIFY_SETFLAGS                       = raw.ES_EVENT_TYPE_NOTIFY_SETFLAGS
	ES_EVENT_TYPE_NOTIFY_SETGID                         = raw.ES_EVENT_TYPE_NOTIFY_SETGID
	ES_EVENT_TYPE_NOTIFY_SETMODE                        = raw.ES_EVENT_TYPE_NOTIFY_SETMODE
	ES_EVENT_TYPE_NOTIFY_SETOWNER                       = raw.ES_EVENT_TYPE_NOTIFY_SETOWNER
	ES_EVENT_TYPE_NOTIFY_SETREGID                       = raw.ES_EVENT_TYPE_NOTIFY_SETREGID
	ES_EVENT_TYPE_NOTIFY_SETREUID                       = raw.ES_EVENT_TYPE_NOTIFY_SETREUID
	ES_EVENT_TYPE_NOTIFY_SETTIME                        = raw.ES_EVENT_TYPE_NOTIFY_SETTIME
	ES_EVENT_TYPE_NOTIFY_SETUID                         = raw.ES_EVENT_TYPE_NOTIFY_SETUID
	ES_EVENT_TYPE_NOTIFY_SIGNAL                         = raw.ES_EVENT_TYPE_NOTIFY_SIGNAL
	ES_EVENT_TYPE_NOTIFY_STAT                           = raw.ES_EVENT_TYPE_NOTIFY_STAT
	ES_EVENT_TYPE_NOTIFY_SU                             = raw.ES_EVENT_TYPE_NOTIFY_SU
	ES_EVENT_TYPE_NOTIFY_SUDO                           = raw.ES_EVENT_TYPE_NOTIFY_SUDO
	ES_EVENT_TYPE_NOTIFY_TCC_MODIFY                     = raw.ES_EVENT_TYPE_NOTIFY_TCC_MODIFY
	ES_EVENT_TYPE_NOTIFY_TRACE                          = raw.ES_EVENT_TYPE_NOTIFY_TRACE
	ES_EVENT_TYPE_NOTIFY_TRUNCATE                       = raw.ES_EVENT_TYPE_NOTIFY_TRUNCATE
	ES_EVENT_TYPE_NOTIFY_UIPC_BIND                      = raw.ES_EVENT_TYPE_NOTIFY_UIPC_BIND
	ES_EVENT_TYPE_NOTIFY_UIPC_CONNECT                   = raw.ES_EVENT_TYPE_NOTIFY_UIPC_CONNECT
	ES_EVENT_TYPE_NOTIFY_UNLINK                         = raw.ES_EVENT_TYPE_NOTIFY_UNLINK
	ES_EVENT_TYPE_NOTIFY_UNMOUNT                        = raw.ES_EVENT_TYPE_NOTIFY_UNMOUNT
	ES_EVENT_TYPE_NOTIFY_UTIMES                         = raw.ES_EVENT_TYPE_NOTIFY_UTIMES
	ES_EVENT_TYPE_NOTIFY_WRITE                          = raw.ES_EVENT_TYPE_NOTIFY_WRITE
	ES_EVENT_TYPE_NOTIFY_XPC_CONNECT                    = raw.ES_EVENT_TYPE_NOTIFY_XPC_CONNECT
	ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED            = raw.ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED
	ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED          = raw.ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED
	ES_EVENT_TYPE_RESERVED_0                            = raw.ES_EVENT_TYPE_RESERVED_0
	ES_EVENT_TYPE_RESERVED_1                            = raw.ES_EVENT_TYPE_RESERVED_1
	ES_EVENT_TYPE_RESERVED_2                            = raw.ES_EVENT_TYPE_RESERVED_2
	ES_EVENT_TYPE_RESERVED_3                            = raw.ES_EVENT_TYPE_RESERVED_3
	ES_EVENT_TYPE_RESERVED_4                            = raw.ES_EVENT_TYPE_RESERVED_4
	ES_EVENT_TYPE_RESERVED_5                            = raw.ES_EVENT_TYPE_RESERVED_5
	ES_EVENT_TYPE_RESERVED_6                            = raw.ES_EVENT_TYPE_RESERVED_6
	ES_EVENT_TYPE_RESERVED_7                            = raw.ES_EVENT_TYPE_RESERVED_7
	ES_EVENT_TYPE_RESERVED_8                            = raw.ES_EVENT_TYPE_RESERVED_8
	ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE          = raw.ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE
	ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH          = raw.ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH
	ES_GET_TASK_TYPE_EXPOSE_TASK                        = raw.ES_GET_TASK_TYPE_EXPOSE_TASK
	ES_GET_TASK_TYPE_IDENTITY_TOKEN                     = raw.ES_GET_TASK_TYPE_IDENTITY_TOKEN
	ES_GET_TASK_TYPE_TASK_FOR_PID                       = raw.ES_GET_TASK_TYPE_TASK_FOR_PID
	ES_MOUNT_DISPOSITION_EXTERNAL                       = raw.ES_MOUNT_DISPOSITION_EXTERNAL
	ES_MOUNT_DISPOSITION_INTERNAL                       = raw.ES_MOUNT_DISPOSITION_INTERNAL
	ES_MOUNT_DISPOSITION_NETWORK                        = raw.ES_MOUNT_DISPOSITION_NETWORK
	ES_MOUNT_DISPOSITION_NULLFS                         = raw.ES_MOUNT_DISPOSITION_NULLFS
	ES_MOUNT_DISPOSITION_UNKNOWN                        = raw.ES_MOUNT_DISPOSITION_UNKNOWN
	ES_MOUNT_DISPOSITION_VIRTUAL                        = raw.ES_MOUNT_DISPOSITION_VIRTUAL
	ES_MUTE_INVERSION_TYPE_LAST                         = raw.ES_MUTE_INVERSION_TYPE_LAST
	ES_MUTE_INVERSION_TYPE_PATH                         = raw.ES_MUTE_INVERSION_TYPE_PATH
	ES_MUTE_INVERSION_TYPE_PROCESS                      = raw.ES_MUTE_INVERSION_TYPE_PROCESS
	ES_MUTE_INVERSION_TYPE_TARGET_PATH                  = raw.ES_MUTE_INVERSION_TYPE_TARGET_PATH
	ES_MUTE_INVERTED                                    = raw.ES_MUTE_INVERTED
	ES_MUTE_INVERTED_ERROR                              = raw.ES_MUTE_INVERTED_ERROR
	ES_MUTE_NOT_INVERTED                                = raw.ES_MUTE_NOT_INVERTED
	ES_MUTE_PATH_TYPE_LITERAL                           = raw.ES_MUTE_PATH_TYPE_LITERAL
	ES_MUTE_PATH_TYPE_PREFIX                            = raw.ES_MUTE_PATH_TYPE_PREFIX
	ES_MUTE_PATH_TYPE_TARGET_LITERAL                    = raw.ES_MUTE_PATH_TYPE_TARGET_LITERAL
	ES_MUTE_PATH_TYPE_TARGET_PREFIX                     = raw.ES_MUTE_PATH_TYPE_TARGET_PREFIX
	ES_NEW_CLIENT_RESULT_ERR_INTERNAL                   = raw.ES_NEW_CLIENT_RESULT_ERR_INTERNAL
	ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT           = raw.ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT
	ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED               = raw.ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED
	ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED              = raw.ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED
	ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED             = raw.ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED
	ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS           = raw.ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS
	ES_NEW_CLIENT_RESULT_SUCCESS                        = raw.ES_NEW_CLIENT_RESULT_SUCCESS
	ES_OD_ACCOUNT_TYPE_COMPUTER                         = raw.ES_OD_ACCOUNT_TYPE_COMPUTER
	ES_OD_ACCOUNT_TYPE_USER                             = raw.ES_OD_ACCOUNT_TYPE_USER
	ES_OD_MEMBER_TYPE_GROUP_UUID                        = raw.ES_OD_MEMBER_TYPE_GROUP_UUID
	ES_OD_MEMBER_TYPE_USER_NAME                         = raw.ES_OD_MEMBER_TYPE_USER_NAME
	ES_OD_MEMBER_TYPE_USER_UUID                         = raw.ES_OD_MEMBER_TYPE_USER_UUID
	ES_OD_RECORD_TYPE_GROUP                             = raw.ES_OD_RECORD_TYPE_GROUP
	ES_OD_RECORD_TYPE_USER                              = raw.ES_OD_RECORD_TYPE_USER
	ES_OPENSSH_AUTH_FAIL_GSSAPI                         = raw.ES_OPENSSH_AUTH_FAIL_GSSAPI
	ES_OPENSSH_AUTH_FAIL_HOSTBASED                      = raw.ES_OPENSSH_AUTH_FAIL_HOSTBASED
	ES_OPENSSH_AUTH_FAIL_KBDINT                         = raw.ES_OPENSSH_AUTH_FAIL_KBDINT
	ES_OPENSSH_AUTH_FAIL_NONE                           = raw.ES_OPENSSH_AUTH_FAIL_NONE
	ES_OPENSSH_AUTH_FAIL_PASSWD                         = raw.ES_OPENSSH_AUTH_FAIL_PASSWD
	ES_OPENSSH_AUTH_FAIL_PUBKEY                         = raw.ES_OPENSSH_AUTH_FAIL_PUBKEY
	ES_OPENSSH_AUTH_SUCCESS                             = raw.ES_OPENSSH_AUTH_SUCCESS
	ES_OPENSSH_INVALID_USER                             = raw.ES_OPENSSH_INVALID_USER
	ES_OPENSSH_LOGIN_EXCEED_MAXTRIES                    = raw.ES_OPENSSH_LOGIN_EXCEED_MAXTRIES
	ES_OPENSSH_LOGIN_ROOT_DENIED                        = raw.ES_OPENSSH_LOGIN_ROOT_DENIED
	ES_PROC_CHECK_TYPE_DIRTYCONTROL                     = raw.ES_PROC_CHECK_TYPE_DIRTYCONTROL
	ES_PROC_CHECK_TYPE_KERNMSGBUF                       = raw.ES_PROC_CHECK_TYPE_KERNMSGBUF
	ES_PROC_CHECK_TYPE_LISTPIDS                         = raw.ES_PROC_CHECK_TYPE_LISTPIDS
	ES_PROC_CHECK_TYPE_PIDFDINFO                        = raw.ES_PROC_CHECK_TYPE_PIDFDINFO
	ES_PROC_CHECK_TYPE_PIDFILEPORTINFO                  = raw.ES_PROC_CHECK_TYPE_PIDFILEPORTINFO
	ES_PROC_CHECK_TYPE_PIDINFO                          = raw.ES_PROC_CHECK_TYPE_PIDINFO
	ES_PROC_CHECK_TYPE_PIDRUSAGE                        = raw.ES_PROC_CHECK_TYPE_PIDRUSAGE
	ES_PROC_CHECK_TYPE_SETCONTROL                       = raw.ES_PROC_CHECK_TYPE_SETCONTROL
	ES_PROC_CHECK_TYPE_TERMINATE                        = raw.ES_PROC_CHECK_TYPE_TERMINATE
	ES_PROC_CHECK_TYPE_UDATA_INFO                       = raw.ES_PROC_CHECK_TYPE_UDATA_INFO
	ES_PROC_SUSPEND_RESUME_TYPE_RESUME                  = raw.ES_PROC_SUSPEND_RESUME_TYPE_RESUME
	ES_PROC_SUSPEND_RESUME_TYPE_SHUTDOWN_SOCKETS        = raw.ES_PROC_SUSPEND_RESUME_TYPE_SHUTDOWN_SOCKETS
	ES_PROC_SUSPEND_RESUME_TYPE_SUSPEND                 = raw.ES_PROC_SUSPEND_RESUME_TYPE_SUSPEND
	ES_PROFILE_SOURCE_INSTALL                           = raw.ES_PROFILE_SOURCE_INSTALL
	ES_PROFILE_SOURCE_MANAGED                           = raw.ES_PROFILE_SOURCE_MANAGED
	ES_RESPOND_RESULT_ERR_DUPLICATE_RESPONSE            = raw.ES_RESPOND_RESULT_ERR_DUPLICATE_RESPONSE
	ES_RESPOND_RESULT_ERR_EVENT_TYPE                    = raw.ES_RESPOND_RESULT_ERR_EVENT_TYPE
	ES_RESPOND_RESULT_ERR_INTERNAL                      = raw.ES_RESPOND_RESULT_ERR_INTERNAL
	ES_RESPOND_RESULT_ERR_INVALID_ARGUMENT              = raw.ES_RESPOND_RESULT_ERR_INVALID_ARGUMENT
	ES_RESPOND_RESULT_NOT_FOUND                         = raw.ES_RESPOND_RESULT_NOT_FOUND
	ES_RESPOND_RESULT_SUCCESS                           = raw.ES_RESPOND_RESULT_SUCCESS
	ES_RESULT_TYPE_AUTH                                 = raw.ES_RESULT_TYPE_AUTH
	ES_RESULT_TYPE_FLAGS                                = raw.ES_RESULT_TYPE_FLAGS
	ES_RETURN_ERROR                                     = raw.ES_RETURN_ERROR
	ES_RETURN_SUCCESS                                   = raw.ES_RETURN_SUCCESS
	ES_SET                                              = raw.ES_SET
	ES_SUDO_PLUGIN_TYPE_APPROVAL                        = raw.ES_SUDO_PLUGIN_TYPE_APPROVAL
	ES_SUDO_PLUGIN_TYPE_AUDIT                           = raw.ES_SUDO_PLUGIN_TYPE_AUDIT
	ES_SUDO_PLUGIN_TYPE_FRONT_END                       = raw.ES_SUDO_PLUGIN_TYPE_FRONT_END
	ES_SUDO_PLUGIN_TYPE_IO                              = raw.ES_SUDO_PLUGIN_TYPE_IO
	ES_SUDO_PLUGIN_TYPE_POLICY                          = raw.ES_SUDO_PLUGIN_TYPE_POLICY
	ES_SUDO_PLUGIN_TYPE_UNKNOWN                         = raw.ES_SUDO_PLUGIN_TYPE_UNKNOWN
	ES_TCC_AUTHORIZATION_REASON_APP_TYPE_POLICY         = raw.ES_TCC_AUTHORIZATION_REASON_APP_TYPE_POLICY
	ES_TCC_AUTHORIZATION_REASON_ENTITLED                = raw.ES_TCC_AUTHORIZATION_REASON_ENTITLED
	ES_TCC_AUTHORIZATION_REASON_ERROR                   = raw.ES_TCC_AUTHORIZATION_REASON_ERROR
	ES_TCC_AUTHORIZATION_REASON_MDM_POLICY              = raw.ES_TCC_AUTHORIZATION_REASON_MDM_POLICY
	ES_TCC_AUTHORIZATION_REASON_MISSING_USAGE_STRING    = raw.ES_TCC_AUTHORIZATION_REASON_MISSING_USAGE_STRING
	ES_TCC_AUTHORIZATION_REASON_NONE                    = raw.ES_TCC_AUTHORIZATION_REASON_NONE
	ES_TCC_AUTHORIZATION_REASON_PREFLIGHT_UNKNOWN       = raw.ES_TCC_AUTHORIZATION_REASON_PREFLIGHT_UNKNOWN
	ES_TCC_AUTHORIZATION_REASON_PROMPT_CANCEL           = raw.ES_TCC_AUTHORIZATION_REASON_PROMPT_CANCEL
	ES_TCC_AUTHORIZATION_REASON_PROMPT_TIMEOUT          = raw.ES_TCC_AUTHORIZATION_REASON_PROMPT_TIMEOUT
	ES_TCC_AUTHORIZATION_REASON_SERVICE_OVERRIDE_POLICY = raw.ES_TCC_AUTHORIZATION_REASON_SERVICE_OVERRIDE_POLICY
	ES_TCC_AUTHORIZATION_REASON_SERVICE_POLICY          = raw.ES_TCC_AUTHORIZATION_REASON_SERVICE_POLICY
	ES_TCC_AUTHORIZATION_REASON_SYSTEM_SET              = raw.ES_TCC_AUTHORIZATION_REASON_SYSTEM_SET
	ES_TCC_AUTHORIZATION_REASON_USER_CONSENT            = raw.ES_TCC_AUTHORIZATION_REASON_USER_CONSENT
	ES_TCC_AUTHORIZATION_REASON_USER_SET                = raw.ES_TCC_AUTHORIZATION_REASON_USER_SET
	ES_TCC_AUTHORIZATION_RIGHT_ADD_MODIFY_ADDED         = raw.ES_TCC_AUTHORIZATION_RIGHT_ADD_MODIFY_ADDED
	ES_TCC_AUTHORIZATION_RIGHT_ALLOWED                  = raw.ES_TCC_AUTHORIZATION_RIGHT_ALLOWED
	ES_TCC_AUTHORIZATION_RIGHT_DENIED                   = raw.ES_TCC_AUTHORIZATION_RIGHT_DENIED
	ES_TCC_AUTHORIZATION_RIGHT_LEARN_MORE               = raw.ES_TCC_AUTHORIZATION_RIGHT_LEARN_MORE
	ES_TCC_AUTHORIZATION_RIGHT_LIMITED                  = raw.ES_TCC_AUTHORIZATION_RIGHT_LIMITED
	ES_TCC_AUTHORIZATION_RIGHT_SESSION_PID              = raw.ES_TCC_AUTHORIZATION_RIGHT_SESSION_PID
	ES_TCC_AUTHORIZATION_RIGHT_UNKNOWN                  = raw.ES_TCC_AUTHORIZATION_RIGHT_UNKNOWN
	ES_TCC_EVENT_TYPE_CREATE                            = raw.ES_TCC_EVENT_TYPE_CREATE
	ES_TCC_EVENT_TYPE_DELETE                            = raw.ES_TCC_EVENT_TYPE_DELETE
	ES_TCC_EVENT_TYPE_MODIFY                            = raw.ES_TCC_EVENT_TYPE_MODIFY
	ES_TCC_EVENT_TYPE_UNKNOWN                           = raw.ES_TCC_EVENT_TYPE_UNKNOWN
	ES_TCC_IDENTITY_TYPE_BUNDLE_ID                      = raw.ES_TCC_IDENTITY_TYPE_BUNDLE_ID
	ES_TCC_IDENTITY_TYPE_EXECUTABLE_PATH                = raw.ES_TCC_IDENTITY_TYPE_EXECUTABLE_PATH
	ES_TCC_IDENTITY_TYPE_FILE_PROVIDER_DOMAIN_ID        = raw.ES_TCC_IDENTITY_TYPE_FILE_PROVIDER_DOMAIN_ID
	ES_TCC_IDENTITY_TYPE_POLICY_ID                      = raw.ES_TCC_IDENTITY_TYPE_POLICY_ID
	ES_TOUCHID_MODE_IDENTIFICATION                      = raw.ES_TOUCHID_MODE_IDENTIFICATION
	ES_TOUCHID_MODE_VERIFICATION                        = raw.ES_TOUCHID_MODE_VERIFICATION
	ES_XPC_DOMAIN_TYPE_GUI                              = raw.ES_XPC_DOMAIN_TYPE_GUI
	ES_XPC_DOMAIN_TYPE_MANAGER                          = raw.ES_XPC_DOMAIN_TYPE_MANAGER
	ES_XPC_DOMAIN_TYPE_PID                              = raw.ES_XPC_DOMAIN_TYPE_PID
	ES_XPC_DOMAIN_TYPE_PORT                             = raw.ES_XPC_DOMAIN_TYPE_PORT
	ES_XPC_DOMAIN_TYPE_SESSION                          = raw.ES_XPC_DOMAIN_TYPE_SESSION
	ES_XPC_DOMAIN_TYPE_SYSTEM                           = raw.ES_XPC_DOMAIN_TYPE_SYSTEM
	ES_XPC_DOMAIN_TYPE_USER                             = raw.ES_XPC_DOMAIN_TYPE_USER
	ES_XPC_DOMAIN_TYPE_USER_LOGIN                       = raw.ES_XPC_DOMAIN_TYPE_USER_LOGIN
	GRAFTDMG_CRYPTEX_AUTH_ENV_GENERIC                   = raw.GRAFTDMG_CRYPTEX_AUTH_ENV_GENERIC
	GRAFTDMG_CRYPTEX_BOOT                               = raw.GRAFTDMG_CRYPTEX_BOOT
	GRAFTDMG_CRYPTEX_DOWNLEVEL                          = raw.GRAFTDMG_CRYPTEX_DOWNLEVEL
	GRAFTDMG_CRYPTEX_EFFECTIVE_AP                       = raw.GRAFTDMG_CRYPTEX_EFFECTIVE_AP
	GRAFTDMG_CRYPTEX_MAX                                = raw.GRAFTDMG_CRYPTEX_MAX
	GRAFTDMG_CRYPTEX_MOBILE_ASSET                       = raw.GRAFTDMG_CRYPTEX_MOBILE_ASSET
	GRAFTDMG_CRYPTEX_MOBILE_ASSET_WITH_CODE             = raw.GRAFTDMG_CRYPTEX_MOBILE_ASSET_WITH_CODE
	GRAFTDMG_CRYPTEX_PDI_NONCE                          = raw.GRAFTDMG_CRYPTEX_PDI_NONCE
	GRAFTDMG_CRYPTEX_PREBOOT                            = raw.GRAFTDMG_CRYPTEX_PREBOOT
	MPO_CONNECTION_PORT                                 = raw.MPO_CONNECTION_PORT
	MPO_CONNECTION_PORT_WITH_PORT_ARRAY                 = raw.MPO_CONNECTION_PORT_WITH_PORT_ARRAY
	MPO_EXCEPTION_PORT                                  = raw.MPO_EXCEPTION_PORT
	MPO_NOTIFICATION_PORT                               = raw.MPO_NOTIFICATION_PORT
	MPO_PORT                                            = raw.MPO_PORT
	MPO_REPLY_PORT                                      = raw.MPO_REPLY_PORT
	MPO_SERVICE_PORT                                    = raw.MPO_SERVICE_PORT
	MPO_WEAK_REPLY_PORT                                 = raw.MPO_WEAK_REPLY_PORT
)

Variables

This section is empty.

Functions

func CopyMessage added in v0.17.0 

func CopyMessage(msg *raw.EsMessageT) unsafe.Pointer

func ExecArg added in v0.17.0 

func ExecArg(event *raw.EsEventExecT, index uint32) raw.EsStringTokenT

func ExecArgCount added in v0.17.0 

func ExecArgCount(event *raw.EsEventExecT) uint32

func ExecEnv added in v0.17.0 

func ExecEnv(event *raw.EsEventExecT, index uint32) raw.EsStringTokenT

func ExecEnvCount added in v0.17.0 

func ExecEnvCount(event *raw.EsEventExecT) uint32

func ExecFd added in v0.17.0 

func ExecFd(event *raw.EsEventExecT, index uint32) unsafe.Pointer

func ExecFdCount added in v0.17.0 

func ExecFdCount(event *raw.EsEventExecT) uint32

func FreeMessage added in v0.17.0 

func FreeMessage(msg *raw.EsMessageT)

func MessageSize added in v0.17.0 

func MessageSize(msg *raw.EsMessageT) uint64

func ReleaseMessage added in v0.17.0 

func ReleaseMessage(msg *raw.EsMessageT)

func ReleaseMutedPaths added in v0.17.0 

func ReleaseMutedPaths(muted_paths *raw.EsMutedPathsT)

func ReleaseMutedProcesses added in v0.17.0 

func ReleaseMutedProcesses(muted_processes *raw.EsMutedProcessesT)

func RetainMessage added in v0.17.0 

func RetainMessage(msg *raw.EsMessageT)

Types

type AclEntryIdT added in v0.18.0 

type AclEntryIdT = raw.AclEntryIdT

type AclFlagT added in v0.18.0 

type AclFlagT = raw.AclFlagT

type AclPermT added in v0.18.0 

type AclPermT = raw.AclPermT

type AclTagT added in v0.18.0 

type AclTagT = raw.AclTagT

type AclTypeT added in v0.18.0 

type AclTypeT = raw.AclTypeT

type AuditTokenT added in v0.18.0 

type AuditTokenT = raw.AuditTokenT

type Client added in v0.17.0 

type Client struct {
	// contains filtered or unexported fields
}

Client wraps the C handle es_client_t.

func WrapClient added in v0.17.0 

func WrapClient(p unsafe.Pointer) Client

WrapClient adopts an existing es_client_t handle.

func (Client) ClearCache added in v0.17.0 

func (h Client) ClearCache() raw.EsClearCacheResultT

func (Client) DeleteClient added in v0.17.0 

func (h Client) DeleteClient() raw.EsReturnT

func (Client) InvertMuting added in v0.17.0 

func (h Client) InvertMuting(mute_type raw.EsMuteInversionTypeT) raw.EsReturnT

func (Client) MutePath added in v0.17.0 

func (h Client) MutePath(path string, type_ raw.EsMutePathTypeT) raw.EsReturnT

func (Client) MutePathEvents added in v0.17.0 

func (h Client) MutePathEvents(path string, type_ raw.EsMutePathTypeT, events *raw.EsEventTypeT, event_count uint64) raw.EsReturnT

func (Client) MutePathLiteral added in v0.17.0 

func (h Client) MutePathLiteral(path_literal string) raw.EsReturnT

func (Client) MutePathPrefix added in v0.17.0 

func (h Client) MutePathPrefix(path_prefix string) raw.EsReturnT

func (Client) MuteProcess added in v0.17.0 

func (h Client) MuteProcess(audit_token *raw.AuditTokenT) raw.EsReturnT

func (Client) MuteProcessEvents added in v0.17.0 

func (h Client) MuteProcessEvents(audit_token *raw.AuditTokenT, events *raw.EsEventTypeT, event_count uint64) raw.EsReturnT

func (Client) MutedPathsEvents added in v0.17.0 

func (h Client) MutedPathsEvents(muted_paths unsafe.Pointer) raw.EsReturnT

func (Client) MutedProcesses added in v0.17.0 

func (h Client) MutedProcesses(count *uint64, audit_tokens unsafe.Pointer) raw.EsReturnT

func (Client) MutedProcessesEvents added in v0.17.0 

func (h Client) MutedProcessesEvents(muted_processes unsafe.Pointer) raw.EsReturnT

func (Client) MutingInverted added in v0.17.0 

func (h Client) MutingInverted(mute_type raw.EsMuteInversionTypeT) raw.EsMuteInvertedReturnT

func (Client) Ptr added in v0.17.0 

func (h Client) Ptr() unsafe.Pointer

Ptr returns the underlying es_client_t handle.

func (Client) RespondAuthResult added in v0.17.0 

func (h Client) RespondAuthResult(message *raw.EsMessageT, result raw.EsAuthResultT, cache bool) raw.EsRespondResultT

func (Client) RespondFlagsResult added in v0.17.0 

func (h Client) RespondFlagsResult(message *raw.EsMessageT, authorized_flags uint32, cache bool) raw.EsRespondResultT

func (Client) Subscribe added in v0.17.0 

func (h Client) Subscribe(events *raw.EsEventTypeT, event_count uint32) raw.EsReturnT

func (Client) Subscriptions added in v0.17.0 

func (h Client) Subscriptions(count *uint64, subscriptions unsafe.Pointer) raw.EsReturnT

func (Client) UnmuteAllPaths added in v0.17.0 

func (h Client) UnmuteAllPaths() raw.EsReturnT

func (Client) UnmuteAllTargetPaths added in v0.17.0 

func (h Client) UnmuteAllTargetPaths() raw.EsReturnT

func (Client) UnmutePath added in v0.17.0 

func (h Client) UnmutePath(path string, type_ raw.EsMutePathTypeT) raw.EsReturnT

func (Client) UnmutePathEvents added in v0.17.0 

func (h Client) UnmutePathEvents(path string, type_ raw.EsMutePathTypeT, events *raw.EsEventTypeT, event_count uint64) raw.EsReturnT

func (Client) UnmuteProcess added in v0.17.0 

func (h Client) UnmuteProcess(audit_token *raw.AuditTokenT) raw.EsReturnT

func (Client) UnmuteProcessEvents added in v0.17.0 

func (h Client) UnmuteProcessEvents(audit_token *raw.AuditTokenT, events *raw.EsEventTypeT, event_count uint64) raw.EsReturnT

func (Client) Unsubscribe added in v0.17.0 

func (h Client) Unsubscribe(events *raw.EsEventTypeT, event_count uint32) raw.EsReturnT

func (Client) UnsubscribeAll added in v0.17.0 

func (h Client) UnsubscribeAll() raw.EsReturnT

type ClockidT added in v0.18.0 

type ClockidT = raw.ClockidT

type CryptexAuthTypeT added in v0.18.0 

type CryptexAuthTypeT = raw.CryptexAuthTypeT

type EsActionTypeT added in v0.18.0 

type EsActionTypeT = raw.EsActionTypeT

type EsAddressTypeT added in v0.18.0 

type EsAddressTypeT = raw.EsAddressTypeT

type EsAuthResultT added in v0.18.0 

type EsAuthResultT = raw.EsAuthResultT

type EsAuthenticationTypeT added in v0.18.0 

type EsAuthenticationTypeT = raw.EsAuthenticationTypeT

type EsAuthorizationResultT added in v0.18.0 

type EsAuthorizationResultT = raw.EsAuthorizationResultT

type EsAuthorizationRuleClassT added in v0.18.0 

type EsAuthorizationRuleClassT = raw.EsAuthorizationRuleClassT

type EsAutoUnlockTypeT added in v0.18.0 

type EsAutoUnlockTypeT = raw.EsAutoUnlockTypeT

type EsBtmItemTypeT added in v0.18.0 

type EsBtmItemTypeT = raw.EsBtmItemTypeT

type EsBtmLaunchItemT added in v0.18.0 

type EsBtmLaunchItemT = raw.EsBtmLaunchItemT

type EsClearCacheResultT added in v0.18.0 

type EsClearCacheResultT = raw.EsClearCacheResultT

type EsClientS added in v0.18.0 

type EsClientS = raw.EsClientS

type EsClientT added in v0.18.0 

type EsClientT = raw.EsClientT

type EsCsValidationCategoryT added in v0.18.0 

type EsCsValidationCategoryT = raw.EsCsValidationCategoryT

type EsDestinationTypeT added in v0.18.0 

type EsDestinationTypeT = raw.EsDestinationTypeT

type EsEventAccessT added in v0.18.0 

type EsEventAccessT = raw.EsEventAccessT

type EsEventAuthenticationAutoUnlockT added in v0.18.0 

type EsEventAuthenticationAutoUnlockT = raw.EsEventAuthenticationAutoUnlockT

type EsEventAuthenticationOdT added in v0.18.0 

type EsEventAuthenticationOdT = raw.EsEventAuthenticationOdT

type EsEventAuthenticationT added in v0.18.0 

type EsEventAuthenticationT = raw.EsEventAuthenticationT

type EsEventAuthenticationTokenT added in v0.18.0 

type EsEventAuthenticationTokenT = raw.EsEventAuthenticationTokenT

type EsEventAuthenticationTouchidT added in v0.18.0 

type EsEventAuthenticationTouchidT = raw.EsEventAuthenticationTouchidT

type EsEventAuthorizationJudgementT added in v0.18.0 

type EsEventAuthorizationJudgementT = raw.EsEventAuthorizationJudgementT

type EsEventAuthorizationPetitionT added in v0.18.0 

type EsEventAuthorizationPetitionT = raw.EsEventAuthorizationPetitionT

type EsEventBtmLaunchItemAddT added in v0.18.0 

type EsEventBtmLaunchItemAddT = raw.EsEventBtmLaunchItemAddT

type EsEventBtmLaunchItemRemoveT added in v0.18.0 

type EsEventBtmLaunchItemRemoveT = raw.EsEventBtmLaunchItemRemoveT

type EsEventChdirT added in v0.18.0 

type EsEventChdirT = raw.EsEventChdirT

type EsEventChrootT added in v0.18.0 

type EsEventChrootT = raw.EsEventChrootT

type EsEventCloneT added in v0.18.0 

type EsEventCloneT = raw.EsEventCloneT

type EsEventCloseT added in v0.18.0 

type EsEventCloseT = raw.EsEventCloseT

type EsEventCopyfileT added in v0.18.0 

type EsEventCopyfileT = raw.EsEventCopyfileT

type EsEventCreateT added in v0.18.0 

type EsEventCreateT = raw.EsEventCreateT

type EsEventCsInvalidatedT added in v0.18.0 

type EsEventCsInvalidatedT = raw.EsEventCsInvalidatedT

type EsEventDeleteextattrT added in v0.18.0 

type EsEventDeleteextattrT = raw.EsEventDeleteextattrT

type EsEventDupT added in v0.18.0 

type EsEventDupT = raw.EsEventDupT

type EsEventExchangedataT added in v0.18.0 

type EsEventExchangedataT = raw.EsEventExchangedataT

type EsEventExecT added in v0.18.0 

type EsEventExecT = raw.EsEventExecT

type EsEventExitT added in v0.18.0 

type EsEventExitT = raw.EsEventExitT

type EsEventFcntlT added in v0.18.0 

type EsEventFcntlT = raw.EsEventFcntlT

type EsEventFileProviderMaterializeT added in v0.18.0 

type EsEventFileProviderMaterializeT = raw.EsEventFileProviderMaterializeT

type EsEventFileProviderUpdateT added in v0.18.0 

type EsEventFileProviderUpdateT = raw.EsEventFileProviderUpdateT

type EsEventForkT added in v0.18.0 

type EsEventForkT = raw.EsEventForkT

type EsEventFsgetpathT added in v0.18.0 

type EsEventFsgetpathT = raw.EsEventFsgetpathT

type EsEventGatekeeperUserOverrideT added in v0.18.0 

type EsEventGatekeeperUserOverrideT = raw.EsEventGatekeeperUserOverrideT

type EsEventGetTaskInspectT added in v0.18.0 

type EsEventGetTaskInspectT = raw.EsEventGetTaskInspectT

type EsEventGetTaskNameT added in v0.18.0 

type EsEventGetTaskNameT = raw.EsEventGetTaskNameT

type EsEventGetTaskReadT added in v0.18.0 

type EsEventGetTaskReadT = raw.EsEventGetTaskReadT

type EsEventGetTaskT added in v0.18.0 

type EsEventGetTaskT = raw.EsEventGetTaskT

type EsEventGetattrlistT added in v0.18.0 

type EsEventGetattrlistT = raw.EsEventGetattrlistT

type EsEventGetextattrT added in v0.18.0 

type EsEventGetextattrT = raw.EsEventGetextattrT

type EsEventIdT added in v0.18.0 

type EsEventIdT = raw.EsEventIdT

type EsEventIokitOpenT added in v0.18.0 

type EsEventIokitOpenT = raw.EsEventIokitOpenT

type EsEventKextloadT added in v0.18.0 

type EsEventKextloadT = raw.EsEventKextloadT

type EsEventKextunloadT added in v0.18.0 

type EsEventKextunloadT = raw.EsEventKextunloadT

type EsEventLinkT added in v0.18.0 

type EsEventLinkT = raw.EsEventLinkT

type EsEventListextattrT added in v0.18.0 

type EsEventListextattrT = raw.EsEventListextattrT

type EsEventLoginLoginT added in v0.18.0 

type EsEventLoginLoginT = raw.EsEventLoginLoginT

type EsEventLoginLogoutT added in v0.18.0 

type EsEventLoginLogoutT = raw.EsEventLoginLogoutT

type EsEventLookupT added in v0.18.0 

type EsEventLookupT = raw.EsEventLookupT

type EsEventLwSessionLockT added in v0.18.0 

type EsEventLwSessionLockT = raw.EsEventLwSessionLockT

type EsEventLwSessionLoginT added in v0.18.0 

type EsEventLwSessionLoginT = raw.EsEventLwSessionLoginT

type EsEventLwSessionLogoutT added in v0.18.0 

type EsEventLwSessionLogoutT = raw.EsEventLwSessionLogoutT

type EsEventLwSessionUnlockT added in v0.18.0 

type EsEventLwSessionUnlockT = raw.EsEventLwSessionUnlockT

type EsEventMmapT added in v0.18.0 

type EsEventMmapT = raw.EsEventMmapT

type EsEventMountT added in v0.18.0 

type EsEventMountT = raw.EsEventMountT

type EsEventMprotectT added in v0.18.0 

type EsEventMprotectT = raw.EsEventMprotectT

type EsEventOdAttributeSetT added in v0.18.0 

type EsEventOdAttributeSetT = raw.EsEventOdAttributeSetT

type EsEventOdAttributeValueAddT added in v0.18.0 

type EsEventOdAttributeValueAddT = raw.EsEventOdAttributeValueAddT

type EsEventOdAttributeValueRemoveT added in v0.18.0 

type EsEventOdAttributeValueRemoveT = raw.EsEventOdAttributeValueRemoveT

type EsEventOdCreateGroupT added in v0.18.0 

type EsEventOdCreateGroupT = raw.EsEventOdCreateGroupT

type EsEventOdCreateUserT added in v0.18.0 

type EsEventOdCreateUserT = raw.EsEventOdCreateUserT

type EsEventOdDeleteGroupT added in v0.18.0 

type EsEventOdDeleteGroupT = raw.EsEventOdDeleteGroupT

type EsEventOdDeleteUserT added in v0.18.0 

type EsEventOdDeleteUserT = raw.EsEventOdDeleteUserT

type EsEventOdDisableUserT added in v0.18.0 

type EsEventOdDisableUserT = raw.EsEventOdDisableUserT

type EsEventOdEnableUserT added in v0.18.0 

type EsEventOdEnableUserT = raw.EsEventOdEnableUserT

type EsEventOdGroupAddT added in v0.18.0 

type EsEventOdGroupAddT = raw.EsEventOdGroupAddT

type EsEventOdGroupRemoveT added in v0.18.0 

type EsEventOdGroupRemoveT = raw.EsEventOdGroupRemoveT

type EsEventOdGroupSetT added in v0.18.0 

type EsEventOdGroupSetT = raw.EsEventOdGroupSetT

type EsEventOdModifyPasswordT added in v0.18.0 

type EsEventOdModifyPasswordT = raw.EsEventOdModifyPasswordT

type EsEventOpenT added in v0.18.0 

type EsEventOpenT = raw.EsEventOpenT

type EsEventOpensshLoginT added in v0.18.0 

type EsEventOpensshLoginT = raw.EsEventOpensshLoginT

type EsEventOpensshLogoutT added in v0.18.0 

type EsEventOpensshLogoutT = raw.EsEventOpensshLogoutT

type EsEventProcCheckT added in v0.18.0 

type EsEventProcCheckT = raw.EsEventProcCheckT

type EsEventProcSuspendResumeT added in v0.18.0 

type EsEventProcSuspendResumeT = raw.EsEventProcSuspendResumeT

type EsEventProfileAddT added in v0.18.0 

type EsEventProfileAddT = raw.EsEventProfileAddT

type EsEventProfileRemoveT added in v0.18.0 

type EsEventProfileRemoveT = raw.EsEventProfileRemoveT

type EsEventPtyCloseT added in v0.18.0 

type EsEventPtyCloseT = raw.EsEventPtyCloseT

type EsEventPtyGrantT added in v0.18.0 

type EsEventPtyGrantT = raw.EsEventPtyGrantT

type EsEventReaddirT added in v0.18.0 

type EsEventReaddirT = raw.EsEventReaddirT

type EsEventReadlinkT added in v0.18.0 

type EsEventReadlinkT = raw.EsEventReadlinkT

type EsEventRemoteThreadCreateT added in v0.18.0 

type EsEventRemoteThreadCreateT = raw.EsEventRemoteThreadCreateT

type EsEventRemountT added in v0.18.0 

type EsEventRemountT = raw.EsEventRemountT

type EsEventRenameT added in v0.18.0 

type EsEventRenameT = raw.EsEventRenameT

type EsEventScreensharingAttachT added in v0.18.0 

type EsEventScreensharingAttachT = raw.EsEventScreensharingAttachT

type EsEventScreensharingDetachT added in v0.18.0 

type EsEventScreensharingDetachT = raw.EsEventScreensharingDetachT

type EsEventSearchfsT added in v0.18.0 

type EsEventSearchfsT = raw.EsEventSearchfsT

type EsEventSetaclT added in v0.18.0 

type EsEventSetaclT = raw.EsEventSetaclT

type EsEventSetattrlistT added in v0.18.0 

type EsEventSetattrlistT = raw.EsEventSetattrlistT

type EsEventSetegidT added in v0.18.0 

type EsEventSetegidT = raw.EsEventSetegidT

type EsEventSeteuidT added in v0.18.0 

type EsEventSeteuidT = raw.EsEventSeteuidT

type EsEventSetextattrT added in v0.18.0 

type EsEventSetextattrT = raw.EsEventSetextattrT

type EsEventSetflagsT added in v0.18.0 

type EsEventSetflagsT = raw.EsEventSetflagsT

type EsEventSetgidT added in v0.18.0 

type EsEventSetgidT = raw.EsEventSetgidT

type EsEventSetmodeT added in v0.18.0 

type EsEventSetmodeT = raw.EsEventSetmodeT

type EsEventSetownerT added in v0.18.0 

type EsEventSetownerT = raw.EsEventSetownerT

type EsEventSetregidT added in v0.18.0 

type EsEventSetregidT = raw.EsEventSetregidT

type EsEventSetreuidT added in v0.18.0 

type EsEventSetreuidT = raw.EsEventSetreuidT

type EsEventSettimeT added in v0.18.0 

type EsEventSettimeT = raw.EsEventSettimeT

type EsEventSetuidT added in v0.18.0 

type EsEventSetuidT = raw.EsEventSetuidT

type EsEventSignalT added in v0.18.0 

type EsEventSignalT = raw.EsEventSignalT

type EsEventStatT added in v0.18.0 

type EsEventStatT = raw.EsEventStatT

type EsEventSuT added in v0.18.0 

type EsEventSuT = raw.EsEventSuT

type EsEventSudoT added in v0.18.0 

type EsEventSudoT = raw.EsEventSudoT

type EsEventTccModifyT added in v0.18.0 

type EsEventTccModifyT = raw.EsEventTccModifyT

type EsEventTraceT added in v0.18.0 

type EsEventTraceT = raw.EsEventTraceT

type EsEventTruncateT added in v0.18.0 

type EsEventTruncateT = raw.EsEventTruncateT

type EsEventTypeT added in v0.18.0 

type EsEventTypeT = raw.EsEventTypeT

type EsEventUipcBindT added in v0.18.0 

type EsEventUipcBindT = raw.EsEventUipcBindT

type EsEventUipcConnectT added in v0.18.0 

type EsEventUipcConnectT = raw.EsEventUipcConnectT

type EsEventUnlinkT added in v0.18.0 

type EsEventUnlinkT = raw.EsEventUnlinkT

type EsEventUnmountT added in v0.18.0 

type EsEventUnmountT = raw.EsEventUnmountT

type EsEventUtimesT added in v0.18.0 

type EsEventUtimesT = raw.EsEventUtimesT

type EsEventWriteT added in v0.18.0 

type EsEventWriteT = raw.EsEventWriteT

type EsEventXpMalwareDetectedT added in v0.18.0 

type EsEventXpMalwareDetectedT = raw.EsEventXpMalwareDetectedT

type EsEventXpMalwareRemediatedT added in v0.18.0 

type EsEventXpMalwareRemediatedT = raw.EsEventXpMalwareRemediatedT

type EsEventXpcConnectT added in v0.18.0 

type EsEventXpcConnectT = raw.EsEventXpcConnectT

type EsFdT added in v0.18.0 

type EsFdT = raw.EsFdT

type EsFileT added in v0.18.0 

type EsFileT = raw.EsFileT

type EsGatekeeperUserOverrideFileTypeT added in v0.18.0 

type EsGatekeeperUserOverrideFileTypeT = raw.EsGatekeeperUserOverrideFileTypeT

type EsGetTaskTypeT added in v0.18.0 

type EsGetTaskTypeT = raw.EsGetTaskTypeT

type EsMessageT added in v0.18.0 

type EsMessageT = raw.EsMessageT

type EsMountDispositionT added in v0.18.0 

type EsMountDispositionT = raw.EsMountDispositionT

type EsMuteInversionTypeT added in v0.18.0 

type EsMuteInversionTypeT = raw.EsMuteInversionTypeT

type EsMuteInvertedReturnT added in v0.18.0 

type EsMuteInvertedReturnT = raw.EsMuteInvertedReturnT

type EsMutePathTypeT added in v0.18.0 

type EsMutePathTypeT = raw.EsMutePathTypeT

type EsMutedPathT added in v0.18.0 

type EsMutedPathT = raw.EsMutedPathT

type EsMutedPathsT added in v0.18.0 

type EsMutedPathsT = raw.EsMutedPathsT

type EsMutedProcessT added in v0.18.0 

type EsMutedProcessT = raw.EsMutedProcessT

type EsMutedProcessesT added in v0.18.0 

type EsMutedProcessesT = raw.EsMutedProcessesT

type EsNewClientResultT added in v0.18.0 

type EsNewClientResultT = raw.EsNewClientResultT

type EsOdAccountTypeT added in v0.18.0 

type EsOdAccountTypeT = raw.EsOdAccountTypeT

type EsOdMemberIdArrayT added in v0.18.0 

type EsOdMemberIdArrayT = raw.EsOdMemberIdArrayT

type EsOdMemberIdT added in v0.18.0 

type EsOdMemberIdT = raw.EsOdMemberIdT

type EsOdMemberTypeT added in v0.18.0 

type EsOdMemberTypeT = raw.EsOdMemberTypeT

type EsOdRecordTypeT added in v0.18.0 

type EsOdRecordTypeT = raw.EsOdRecordTypeT

type EsOpensshLoginResultTypeT added in v0.18.0 

type EsOpensshLoginResultTypeT = raw.EsOpensshLoginResultTypeT

type EsProcCheckTypeT added in v0.18.0 

type EsProcCheckTypeT = raw.EsProcCheckTypeT

type EsProcSuspendResumeTypeT added in v0.18.0 

type EsProcSuspendResumeTypeT = raw.EsProcSuspendResumeTypeT

type EsProcessT added in v0.18.0 

type EsProcessT = raw.EsProcessT

type EsProfileSourceT added in v0.18.0 

type EsProfileSourceT = raw.EsProfileSourceT

type EsProfileT added in v0.18.0 

type EsProfileT = raw.EsProfileT

type EsRespondResultT added in v0.18.0 

type EsRespondResultT = raw.EsRespondResultT

type EsResultT added in v0.18.0 

type EsResultT = raw.EsResultT

type EsResultTypeT added in v0.18.0 

type EsResultTypeT = raw.EsResultTypeT

type EsReturnT added in v0.18.0 

type EsReturnT = raw.EsReturnT

type EsSetOrClearT added in v0.18.0 

type EsSetOrClearT = raw.EsSetOrClearT

type EsSignedFileInfoT added in v0.18.0 

type EsSignedFileInfoT = raw.EsSignedFileInfoT

type EsStringTokenT added in v0.18.0 

type EsStringTokenT = raw.EsStringTokenT

type EsSudoPluginTypeT added in v0.18.0 

type EsSudoPluginTypeT = raw.EsSudoPluginTypeT

type EsSudoRejectInfoT added in v0.18.0 

type EsSudoRejectInfoT = raw.EsSudoRejectInfoT

type EsTccAuthorizationReasonT added in v0.18.0 

type EsTccAuthorizationReasonT = raw.EsTccAuthorizationReasonT

type EsTccAuthorizationRightT added in v0.18.0 

type EsTccAuthorizationRightT = raw.EsTccAuthorizationRightT

type EsTccEventTypeT added in v0.18.0 

type EsTccEventTypeT = raw.EsTccEventTypeT

type EsTccIdentityTypeT added in v0.18.0 

type EsTccIdentityTypeT = raw.EsTccIdentityTypeT

type EsThreadStateT added in v0.18.0 

type EsThreadStateT = raw.EsThreadStateT

type EsThreadT added in v0.18.0 

type EsThreadT = raw.EsThreadT

type EsTokenT added in v0.18.0 

type EsTokenT = raw.EsTokenT

type EsTouchidModeT added in v0.18.0 

type EsTouchidModeT = raw.EsTouchidModeT

type EsXpcDomainTypeT added in v0.18.0 

type EsXpcDomainTypeT = raw.EsXpcDomainTypeT

type GraftdmgTypeT added in v0.18.0 

type GraftdmgTypeT = raw.GraftdmgTypeT

type MpoFlagsT added in v0.18.0 

type MpoFlagsT = raw.MpoFlagsT

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.