execve

type DynLib struct {
	Proc     int32
	Fd       uint64
	Filepath string
}

type ExecEvent struct {
	Timestamp time.Time
	Pid       int32
	PPid      int32
	ExecID    string
	PExecID   string
	Cwd       string
	Comm      string
	Filename  string
	Args      string
	ArgsTrunc bool
}

type ProcExecProbe struct {
	ProcChan   chan int32
	ExecChan   chan *ExecEvent
	DynLibChan chan *DynLib
	// contains filtered or unexported fields
}