endpointsecurity

package

Go to main page

Versions in this module

v0

v0.5.2

Mar 31, 2026

v0.5.1

Mar 30, 2026

Changes in this version

+ type Es int32

+ const ES_CLEAR

+ const ES_SET

+ func (e Es) String() string

+ type EsActionType int32

+ const ES_ACTION_TYPE_AUTH

+ const ES_ACTION_TYPE_NOTIFY

+ func (e EsActionType) String() string

+ type EsAddressType int32

+ const ES_ADDRESS_TYPE_IPV4

+ const ES_ADDRESS_TYPE_IPV6

+ const ES_ADDRESS_TYPE_NAMED_SOCKET

+ const ES_ADDRESS_TYPE_NONE

+ func (e EsAddressType) String() string

+ type EsAuthResult int32

+ const ES_AUTH_RESULT_ALLOW

+ const ES_AUTH_RESULT_DENY

+ func (e EsAuthResult) String() string

+ type EsAuthenticationType int32

+ const ES_AUTHENTICATION_TYPE_AUTO_UNLOCK

+ const ES_AUTHENTICATION_TYPE_LAST

+ const ES_AUTHENTICATION_TYPE_OD

+ const ES_AUTHENTICATION_TYPE_TOKEN

+ const ES_AUTHENTICATION_TYPE_TOUCHID

+ func (e EsAuthenticationType) String() string

+ type EsAuthorizationRuleClass int32

+ const ES_AUTHORIZATION_RULE_CLASS_ALLOW

+ const ES_AUTHORIZATION_RULE_CLASS_DENY

+ const ES_AUTHORIZATION_RULE_CLASS_INVALID

+ const ES_AUTHORIZATION_RULE_CLASS_MECHANISM

+ const ES_AUTHORIZATION_RULE_CLASS_RULE

+ const ES_AUTHORIZATION_RULE_CLASS_UNKNOWN

+ const ES_AUTHORIZATION_RULE_CLASS_USER

+ func (e EsAuthorizationRuleClass) String() string

+ type EsAutoUnlock int32

+ const ES_AUTO_UNLOCK_AUTH_PROMPT

+ const ES_AUTO_UNLOCK_MACHINE_UNLOCK

+ func (e EsAutoUnlock) String() string

+ type EsBtmItemType int32

+ const ES_BTM_ITEM_TYPE_AGENT

+ const ES_BTM_ITEM_TYPE_APP

+ const ES_BTM_ITEM_TYPE_DAEMON

+ const ES_BTM_ITEM_TYPE_LOGIN_ITEM

+ const ES_BTM_ITEM_TYPE_USER_ITEM

+ func (e EsBtmItemType) String() string

+ type EsClearCacheResult int32

+ const ES_CLEAR_CACHE_RESULT_ERR_INTERNAL

+ const ES_CLEAR_CACHE_RESULT_ERR_THROTTLE

+ const ES_CLEAR_CACHE_RESULT_SUCCESS

+ func (e EsClearCacheResult) String() string

+ type EsCsValidationCategory int32

+ const ES_CS_VALIDATION_CATEGORY_APP_STORE

+ const ES_CS_VALIDATION_CATEGORY_DEVELOPER_ID

+ const ES_CS_VALIDATION_CATEGORY_DEVELOPMENT

+ const ES_CS_VALIDATION_CATEGORY_ENTERPRISE

+ const ES_CS_VALIDATION_CATEGORY_INVALID

+ const ES_CS_VALIDATION_CATEGORY_LOCAL_SIGNING

+ const ES_CS_VALIDATION_CATEGORY_NONE

+ const ES_CS_VALIDATION_CATEGORY_OOPJIT

+ const ES_CS_VALIDATION_CATEGORY_PLATFORM

+ const ES_CS_VALIDATION_CATEGORY_ROSETTA

+ const ES_CS_VALIDATION_CATEGORY_TESTFLIGHT

+ func (e EsCsValidationCategory) String() string

+ type EsDestinationType int32

+ const ES_DESTINATION_TYPE_EXISTING_FILE

+ const ES_DESTINATION_TYPE_NEW_PATH

+ func (e EsDestinationType) String() string

+ type EsEventType int32

+ const ES_EVENT_TYPE_AUTH_CHDIR

+ const ES_EVENT_TYPE_AUTH_CHROOT

+ const ES_EVENT_TYPE_AUTH_CLONE

+ const ES_EVENT_TYPE_AUTH_COPYFILE

+ const ES_EVENT_TYPE_AUTH_CREATE

+ const ES_EVENT_TYPE_AUTH_DELETEEXTATTR

+ const ES_EVENT_TYPE_AUTH_EXCHANGEDATA

+ const ES_EVENT_TYPE_AUTH_EXEC

+ const ES_EVENT_TYPE_AUTH_FCNTL

+ const ES_EVENT_TYPE_AUTH_FILE_PROVIDER_MATERIALIZE

+ const ES_EVENT_TYPE_AUTH_FILE_PROVIDER_UPDATE

+ const ES_EVENT_TYPE_AUTH_FSGETPATH

+ const ES_EVENT_TYPE_AUTH_GETATTRLIST

+ const ES_EVENT_TYPE_AUTH_GETEXTATTR

+ const ES_EVENT_TYPE_AUTH_GET_TASK

+ const ES_EVENT_TYPE_AUTH_GET_TASK_READ

+ const ES_EVENT_TYPE_AUTH_IOKIT_OPEN

+ const ES_EVENT_TYPE_AUTH_KEXTLOAD

+ const ES_EVENT_TYPE_AUTH_LINK

+ const ES_EVENT_TYPE_AUTH_LISTEXTATTR

+ const ES_EVENT_TYPE_AUTH_MMAP

+ const ES_EVENT_TYPE_AUTH_MOUNT

+ const ES_EVENT_TYPE_AUTH_MPROTECT

+ const ES_EVENT_TYPE_AUTH_OPEN

+ const ES_EVENT_TYPE_AUTH_PROC_CHECK

+ const ES_EVENT_TYPE_AUTH_PROC_SUSPEND_RESUME

+ const ES_EVENT_TYPE_AUTH_READDIR

+ const ES_EVENT_TYPE_AUTH_READLINK

+ const ES_EVENT_TYPE_AUTH_REMOUNT

+ const ES_EVENT_TYPE_AUTH_RENAME

+ const ES_EVENT_TYPE_AUTH_SEARCHFS

+ const ES_EVENT_TYPE_AUTH_SETACL

+ const ES_EVENT_TYPE_AUTH_SETATTRLIST

+ const ES_EVENT_TYPE_AUTH_SETEXTATTR

+ const ES_EVENT_TYPE_AUTH_SETFLAGS

+ const ES_EVENT_TYPE_AUTH_SETMODE

+ const ES_EVENT_TYPE_AUTH_SETOWNER

+ const ES_EVENT_TYPE_AUTH_SETTIME

+ const ES_EVENT_TYPE_AUTH_SIGNAL

+ const ES_EVENT_TYPE_AUTH_TRUNCATE

+ const ES_EVENT_TYPE_AUTH_UIPC_BIND

+ const ES_EVENT_TYPE_AUTH_UIPC_CONNECT

+ const ES_EVENT_TYPE_AUTH_UNLINK

+ const ES_EVENT_TYPE_AUTH_UTIMES

+ const ES_EVENT_TYPE_LAST

+ const ES_EVENT_TYPE_NOTIFY_ACCESS

+ const ES_EVENT_TYPE_NOTIFY_AUTHENTICATION

+ const ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT

+ const ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION

+ const ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD

+ const ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_CHDIR

+ const ES_EVENT_TYPE_NOTIFY_CHROOT

+ const ES_EVENT_TYPE_NOTIFY_CLONE

+ const ES_EVENT_TYPE_NOTIFY_CLOSE

+ const ES_EVENT_TYPE_NOTIFY_COPYFILE

+ const ES_EVENT_TYPE_NOTIFY_CREATE

+ const ES_EVENT_TYPE_NOTIFY_CS_INVALIDATED

+ const ES_EVENT_TYPE_NOTIFY_DELETEEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_DUP

+ const ES_EVENT_TYPE_NOTIFY_EXCHANGEDATA

+ const ES_EVENT_TYPE_NOTIFY_EXEC

+ const ES_EVENT_TYPE_NOTIFY_EXIT

+ const ES_EVENT_TYPE_NOTIFY_FCNTL

+ const ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_MATERIALIZE

+ const ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_UPDATE

+ const ES_EVENT_TYPE_NOTIFY_FORK

+ const ES_EVENT_TYPE_NOTIFY_FSGETPATH

+ const ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE

+ const ES_EVENT_TYPE_NOTIFY_GETATTRLIST

+ const ES_EVENT_TYPE_NOTIFY_GETEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK_INSPECT

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK_NAME

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK_READ

+ const ES_EVENT_TYPE_NOTIFY_IOKIT_OPEN

+ const ES_EVENT_TYPE_NOTIFY_KEXTLOAD

+ const ES_EVENT_TYPE_NOTIFY_KEXTUNLOAD

+ const ES_EVENT_TYPE_NOTIFY_LINK

+ const ES_EVENT_TYPE_NOTIFY_LISTEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN

+ const ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT

+ const ES_EVENT_TYPE_NOTIFY_LOOKUP

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK

+ const ES_EVENT_TYPE_NOTIFY_MMAP

+ const ES_EVENT_TYPE_NOTIFY_MOUNT

+ const ES_EVENT_TYPE_NOTIFY_MPROTECT

+ const ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET

+ const ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD

+ const ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP

+ const ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP

+ const ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD

+ const ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET

+ const ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD

+ const ES_EVENT_TYPE_NOTIFY_OPEN

+ const ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN

+ const ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT

+ const ES_EVENT_TYPE_NOTIFY_PROC_CHECK

+ const ES_EVENT_TYPE_NOTIFY_PROC_SUSPEND_RESUME

+ const ES_EVENT_TYPE_NOTIFY_PROFILE_ADD

+ const ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_PTY_CLOSE

+ const ES_EVENT_TYPE_NOTIFY_PTY_GRANT

+ const ES_EVENT_TYPE_NOTIFY_READDIR

+ const ES_EVENT_TYPE_NOTIFY_READLINK

+ const ES_EVENT_TYPE_NOTIFY_REMOTE_THREAD_CREATE

+ const ES_EVENT_TYPE_NOTIFY_REMOUNT

+ const ES_EVENT_TYPE_NOTIFY_RENAME

+ const ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH

+ const ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH

+ const ES_EVENT_TYPE_NOTIFY_SEARCHFS

+ const ES_EVENT_TYPE_NOTIFY_SETACL

+ const ES_EVENT_TYPE_NOTIFY_SETATTRLIST

+ const ES_EVENT_TYPE_NOTIFY_SETEGID

+ const ES_EVENT_TYPE_NOTIFY_SETEUID

+ const ES_EVENT_TYPE_NOTIFY_SETEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_SETFLAGS

+ const ES_EVENT_TYPE_NOTIFY_SETGID

+ const ES_EVENT_TYPE_NOTIFY_SETMODE

+ const ES_EVENT_TYPE_NOTIFY_SETOWNER

+ const ES_EVENT_TYPE_NOTIFY_SETREGID

+ const ES_EVENT_TYPE_NOTIFY_SETREUID

+ const ES_EVENT_TYPE_NOTIFY_SETTIME

+ const ES_EVENT_TYPE_NOTIFY_SETUID

+ const ES_EVENT_TYPE_NOTIFY_SIGNAL

+ const ES_EVENT_TYPE_NOTIFY_STAT

+ const ES_EVENT_TYPE_NOTIFY_SU

+ const ES_EVENT_TYPE_NOTIFY_SUDO

+ const ES_EVENT_TYPE_NOTIFY_TCC_MODIFY

+ const ES_EVENT_TYPE_NOTIFY_TRACE

+ const ES_EVENT_TYPE_NOTIFY_TRUNCATE

+ const ES_EVENT_TYPE_NOTIFY_UIPC_BIND

+ const ES_EVENT_TYPE_NOTIFY_UIPC_CONNECT

+ const ES_EVENT_TYPE_NOTIFY_UNLINK

+ const ES_EVENT_TYPE_NOTIFY_UNMOUNT

+ const ES_EVENT_TYPE_NOTIFY_UTIMES

+ const ES_EVENT_TYPE_NOTIFY_WRITE

+ const ES_EVENT_TYPE_NOTIFY_XPC_CONNECT

+ const ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED

+ const ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED

+ const ES_EVENT_TYPE_RESERVED_0

+ const ES_EVENT_TYPE_RESERVED_1

+ const ES_EVENT_TYPE_RESERVED_2

+ const ES_EVENT_TYPE_RESERVED_3

+ const ES_EVENT_TYPE_RESERVED_4

+ const ES_EVENT_TYPE_RESERVED_5

+ const ES_EVENT_TYPE_RESERVED_6

+ func (e EsEventType) String() string

+ type EsGatekeeperUserOverrideFileType int32

+ const ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE

+ const ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH

+ func (e EsGatekeeperUserOverrideFileType) String() string

+ type EsGetTaskType int32

+ const ES_GET_TASK_TYPE_EXPOSE_TASK

+ const ES_GET_TASK_TYPE_IDENTITY_TOKEN

+ const ES_GET_TASK_TYPE_TASK_FOR_PID

+ func (e EsGetTaskType) String() string

+ type EsMountDisposition int32

+ const ES_MOUNT_DISPOSITION_EXTERNAL

+ const ES_MOUNT_DISPOSITION_INTERNAL

+ const ES_MOUNT_DISPOSITION_NETWORK

+ const ES_MOUNT_DISPOSITION_NULLFS

+ const ES_MOUNT_DISPOSITION_UNKNOWN

+ const ES_MOUNT_DISPOSITION_VIRTUAL

+ func (e EsMountDisposition) String() string

+ type EsMute int32

+ const ES_MUTE_INVERTED

+ const ES_MUTE_INVERTED_ERROR

+ const ES_MUTE_NOT_INVERTED

+ func (e EsMute) String() string

+ type EsMuteInversionType int32

+ const ES_MUTE_INVERSION_TYPE_LAST

+ const ES_MUTE_INVERSION_TYPE_PATH

+ const ES_MUTE_INVERSION_TYPE_PROCESS

+ const ES_MUTE_INVERSION_TYPE_TARGET_PATH

+ func (e EsMuteInversionType) String() string

+ type EsMutePathType int32

+ const ES_MUTE_PATH_TYPE_LITERAL

+ const ES_MUTE_PATH_TYPE_PREFIX

+ const ES_MUTE_PATH_TYPE_TARGET_LITERAL

+ const ES_MUTE_PATH_TYPE_TARGET_PREFIX

+ func (e EsMutePathType) String() string

+ type EsNewClientResult int32

+ const ES_NEW_CLIENT_RESULT_ERR_INTERNAL

+ const ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT

+ const ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED

+ const ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED

+ const ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED

+ const ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS

+ const ES_NEW_CLIENT_RESULT_SUCCESS

+ func (e EsNewClientResult) String() string

+ type EsOdAccountType int32

+ const ES_OD_ACCOUNT_TYPE_COMPUTER

+ const ES_OD_ACCOUNT_TYPE_USER

+ func (e EsOdAccountType) String() string

+ type EsOdMemberType int32

+ const ES_OD_MEMBER_TYPE_GROUP_UUID

+ const ES_OD_MEMBER_TYPE_USER_NAME

+ const ES_OD_MEMBER_TYPE_USER_UUID

+ func (e EsOdMemberType) String() string

+ type EsOdRecordType int32

+ const ES_OD_RECORD_TYPE_GROUP

+ const ES_OD_RECORD_TYPE_USER

+ func (e EsOdRecordType) String() string

+ type EsOpenssh int32

+ const ES_OPENSSH_AUTH_FAIL_GSSAPI

+ const ES_OPENSSH_AUTH_FAIL_HOSTBASED

+ const ES_OPENSSH_AUTH_FAIL_KBDINT

+ const ES_OPENSSH_AUTH_FAIL_NONE

+ const ES_OPENSSH_AUTH_FAIL_PASSWD

+ const ES_OPENSSH_AUTH_FAIL_PUBKEY

+ const ES_OPENSSH_AUTH_SUCCESS

+ const ES_OPENSSH_INVALID_USER

+ const ES_OPENSSH_LOGIN_EXCEED_MAXTRIES

+ const ES_OPENSSH_LOGIN_ROOT_DENIED

+ func (e EsOpenssh) String() string

+ type EsProcCheckType int32

+ const ES_PROC_CHECK_TYPE_DIRTYCONTROL

+ const ES_PROC_CHECK_TYPE_KERNMSGBUF

+ const ES_PROC_CHECK_TYPE_LISTPIDS

+ const ES_PROC_CHECK_TYPE_PIDFDINFO

+ const ES_PROC_CHECK_TYPE_PIDFILEPORTINFO

+ const ES_PROC_CHECK_TYPE_PIDINFO

+ const ES_PROC_CHECK_TYPE_PIDRUSAGE

+ const ES_PROC_CHECK_TYPE_SETCONTROL

+ const ES_PROC_CHECK_TYPE_TERMINATE

+ const ES_PROC_CHECK_TYPE_UDATA_INFO

+ func (e EsProcCheckType) String() string

+ type EsProcSuspendResumeType int32

+ const ES_PROC_SUSPEND_RESUME_TYPE_RESUME

+ const ES_PROC_SUSPEND_RESUME_TYPE_SHUTDOWN_SOCKETS

+ const ES_PROC_SUSPEND_RESUME_TYPE_SUSPEND

+ func (e EsProcSuspendResumeType) String() string

+ type EsProfileSource int32

+ const ES_PROFILE_SOURCE_INSTALL

+ const ES_PROFILE_SOURCE_MANAGED

+ func (e EsProfileSource) String() string

+ type EsRespondResult int32

+ const ES_RESPOND_RESULT_ERR_DUPLICATE_RESPONSE

+ const ES_RESPOND_RESULT_ERR_EVENT_TYPE

+ const ES_RESPOND_RESULT_ERR_INTERNAL

+ const ES_RESPOND_RESULT_ERR_INVALID_ARGUMENT

+ const ES_RESPOND_RESULT_NOT_FOUND

+ const ES_RESPOND_RESULT_SUCCESS

+ func (e EsRespondResult) String() string

+ type EsResultType int32

+ const ES_RESULT_TYPE_AUTH

+ const ES_RESULT_TYPE_FLAGS

+ func (e EsResultType) String() string

+ type EsReturn int32

+ const ES_RETURN_ERROR

+ const ES_RETURN_SUCCESS

+ func (e EsReturn) String() string

+ type EsSudoPluginType int32

+ const ES_SUDO_PLUGIN_TYPE_APPROVAL

+ const ES_SUDO_PLUGIN_TYPE_AUDIT

+ const ES_SUDO_PLUGIN_TYPE_FRONT_END

+ const ES_SUDO_PLUGIN_TYPE_IO

+ const ES_SUDO_PLUGIN_TYPE_POLICY

+ const ES_SUDO_PLUGIN_TYPE_UNKNOWN

+ func (e EsSudoPluginType) String() string

+ type EsTccAuthorizationReason int32

+ const ES_TCC_AUTHORIZATION_REASON_APP_TYPE_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_ENTITLED

+ const ES_TCC_AUTHORIZATION_REASON_ERROR

+ const ES_TCC_AUTHORIZATION_REASON_MDM_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_MISSING_USAGE_STRING

+ const ES_TCC_AUTHORIZATION_REASON_NONE

+ const ES_TCC_AUTHORIZATION_REASON_PREFLIGHT_UNKNOWN

+ const ES_TCC_AUTHORIZATION_REASON_PROMPT_CANCEL

+ const ES_TCC_AUTHORIZATION_REASON_PROMPT_TIMEOUT

+ const ES_TCC_AUTHORIZATION_REASON_SERVICE_OVERRIDE_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_SERVICE_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_SYSTEM_SET

+ const ES_TCC_AUTHORIZATION_REASON_USER_CONSENT

+ const ES_TCC_AUTHORIZATION_REASON_USER_SET

+ func (e EsTccAuthorizationReason) String() string

+ type EsTccAuthorizationRight int32

+ const ES_TCC_AUTHORIZATION_RIGHT_ADD_MODIFY_ADDED

+ const ES_TCC_AUTHORIZATION_RIGHT_ALLOWED

+ const ES_TCC_AUTHORIZATION_RIGHT_DENIED

+ const ES_TCC_AUTHORIZATION_RIGHT_LEARN_MORE

+ const ES_TCC_AUTHORIZATION_RIGHT_LIMITED

+ const ES_TCC_AUTHORIZATION_RIGHT_SESSION_PID

+ const ES_TCC_AUTHORIZATION_RIGHT_UNKNOWN

+ func (e EsTccAuthorizationRight) String() string

+ type EsTccEventType int32

+ const ES_TCC_EVENT_TYPE_CREATE

+ const ES_TCC_EVENT_TYPE_DELETE

+ const ES_TCC_EVENT_TYPE_MODIFY

+ const ES_TCC_EVENT_TYPE_UNKNOWN

+ func (e EsTccEventType) String() string

+ type EsTccIdentityType int32

+ const ES_TCC_IDENTITY_TYPE_BUNDLE_ID

+ const ES_TCC_IDENTITY_TYPE_EXECUTABLE_PATH

+ const ES_TCC_IDENTITY_TYPE_FILE_PROVIDER_DOMAIN_ID

+ const ES_TCC_IDENTITY_TYPE_POLICY_ID

+ func (e EsTccIdentityType) String() string

+ type EsTouchidMode int32

+ const ES_TOUCHID_MODE_IDENTIFICATION

+ const ES_TOUCHID_MODE_VERIFICATION

+ func (e EsTouchidMode) String() string

+ type EsXPCDomainType int32

+ const ES_XPC_DOMAIN_TYPE_GUI

+ const ES_XPC_DOMAIN_TYPE_MANAGER

+ const ES_XPC_DOMAIN_TYPE_PID

+ const ES_XPC_DOMAIN_TYPE_PORT

+ const ES_XPC_DOMAIN_TYPE_SESSION

+ const ES_XPC_DOMAIN_TYPE_SYSTEM

+ const ES_XPC_DOMAIN_TYPE_USER

+ const ES_XPC_DOMAIN_TYPE_USER_LOGIN

+ func (e EsXPCDomainType) String() string

type Es_authorization_result_t

+ Granted bool

+ Right_name Es_string_token_t

+ Rule_class unsafe.Pointer

type Es_btm_launch_item_t

+ App_url Es_string_token_t

+ Item_type unsafe.Pointer

+ Item_url Es_string_token_t

+ Legacy bool

+ Managed bool

+ Uid uint32

type Es_event_access_t

+ Mode int32

+ Reserved uint8

+ Target *Es_file_t

type Es_event_authentication_auto_unlock_t

+ Type unsafe.Pointer

+ Username Es_string_token_t

type Es_event_authentication_od_t

+ Db_path Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type Es_string_token_t

type Es_event_authentication_t

+ Auto_unlock *Es_event_authentication_auto_unlock_t

+ Data [8]byte

+ Od *Es_event_authentication_od_t

+ Success bool

+ Token *Es_event_authentication_token_t

+ Touchid *Es_event_authentication_touchid_t

+ Type unsafe.Pointer

type Es_event_authentication_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Kerberos_principal Es_string_token_t

+ Pubkey_hash Es_string_token_t

+ Token_id Es_string_token_t

type Es_event_authentication_touchid_t

+ Has_uid bool

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Touchid_mode unsafe.Pointer

+ Uid [4]byte

type Es_event_authorization_judgement_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Petitioner *Es_process_t

+ Petitioner_token [32]byte

+ Result_count uintptr

+ Results *Es_authorization_result_t

+ Return_code int

type Es_event_authorization_petition_t

+ Flags uint32

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Petitioner *Es_process_t

+ Petitioner_token [32]byte

+ Right_count uintptr

+ Rights *Es_string_token_t

type Es_event_btm_launch_item_add_t

+ App *Es_process_t

+ App_token *[32]byte

+ Executable_path Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token *[32]byte

+ Item *Es_btm_launch_item_t

type Es_event_btm_launch_item_remove_t

+ App *Es_process_t

+ App_token *[32]byte

+ Instigator *Es_process_t

+ Instigator_token *[32]byte

+ Item *Es_btm_launch_item_t

type Es_event_chdir_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_chroot_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_clone_t

+ Reserved uint8

+ Source *Es_file_t

+ Target_dir *Es_file_t

+ Target_name Es_string_token_t

type Es_event_close_t

+ Modified bool

+ Reserved uint8

+ Target *Es_file_t

+ Was_mapped_writable bool

type Es_event_copyfile_t

+ Flags int32

+ Mode uint16

+ Reserved uint8

+ Source *Es_file_t

+ Target_dir *Es_file_t

+ Target_file *Es_file_t

+ Target_name Es_string_token_t

type Es_event_create_t

+ Acl unsafe.Pointer

+ Destination [32]byte

+ Destination_type EsDestinationType

+ Dir *Es_file_t

+ Existing_file *Es_file_t

+ Filename Es_string_token_t

+ Mode uint16

+ New_path unsafe.Pointer

+ Reserved uint8

+ Reserved2 uint8

type Es_event_cs_invalidated_t

+ Reserved uint8

type Es_event_deleteextattr_t

+ Extattr Es_string_token_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_dup_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_exchangedata_t

+ File1 *Es_file_t

+ File2 *Es_file_t

+ Reserved uint8

type Es_event_exec_t

+ Cwd *Es_file_t

+ Dyld_exec_path Es_string_token_t

+ Image_cpusubtype int32

+ Image_cputype int32

+ Last_fd int

+ Reserved uint8

+ Script *Es_file_t

+ Target *Es_process_t

type Es_event_exit_t

+ Reserved uint8

+ Stat int

type Es_event_fcntl_t

+ Cmd int32

+ Reserved uint8

+ Target *Es_file_t

type Es_event_file_provider_materialize_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Reserved uint8

+ Source *Es_file_t

+ Target *Es_file_t

type Es_event_file_provider_update_t

+ Reserved uint8

+ Source *Es_file_t

+ Target_path Es_string_token_t

type Es_event_fork_t

+ Child *Es_process_t

+ Reserved uint8

type Es_event_fsgetpath_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_gatekeeper_user_override_t

+ File [16]byte

+ File_path Es_string_token_t

+ File_type unsafe.Pointer

+ Sha256 *Es_sha256_t

+ Signing_info *Es_signed_file_info_t

type Es_event_get_task_inspect_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_get_task_name_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_get_task_read_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_get_task_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_getattrlist_t

+ Attrlist kernel.Attrlist

+ Reserved uint8

+ Target *Es_file_t

type Es_event_getextattr_t

+ Extattr Es_string_token_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_id_t

+ Reserved uint8

type Es_event_iokit_open_t

+ Parent_path Es_string_token_t

+ Parent_registry_id uint64

+ Reserved uint8

+ User_client_class Es_string_token_t

+ User_client_type uint32

type Es_event_kextload_t

+ Identifier Es_string_token_t

+ Reserved uint8

type Es_event_kextunload_t

+ Identifier Es_string_token_t

+ Reserved uint8

type Es_event_link_t

+ Reserved uint8

+ Source *Es_file_t

+ Target_dir *Es_file_t

+ Target_filename Es_string_token_t

type Es_event_listextattr_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_login_login_t

+ Failure_message Es_string_token_t

+ Has_uid bool

+ Success bool

+ Uid [4]byte

+ Username Es_string_token_t

type Es_event_login_logout_t

+ Uid uint32

+ Username Es_string_token_t

type Es_event_lookup_t

+ Relative_target Es_string_token_t

+ Reserved uint8

+ Source_dir *Es_file_t

type Es_event_lw_session_lock_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_lw_session_login_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_lw_session_logout_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_lw_session_unlock_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_mmap_t

+ File_pos uint64

+ Flags int32

+ Max_protection int32

+ Protection int32

+ Reserved uint8

+ Source *Es_file_t

type Es_event_mount_t

+ Disposition unsafe.Pointer

+ Reserved uint8

+ Statfs objectivec.IObject

type Es_event_mprotect_t

+ Address kernel.User_addr_t

+ Protection int32

+ Reserved uint8

+ Size kernel.User_size_t

type Es_event_od_attribute_set_t

+ Attribute_name Es_string_token_t

+ Attribute_value_count uintptr

+ Attribute_values *Es_string_token_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type unsafe.Pointer

type Es_event_od_attribute_value_add_t

+ Attribute_name Es_string_token_t

+ Attribute_value Es_string_token_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type unsafe.Pointer

type Es_event_od_attribute_value_remove_t

+ Attribute_name Es_string_token_t

+ Attribute_value Es_string_token_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type unsafe.Pointer

type Es_event_od_create_group_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

type Es_event_od_create_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_delete_group_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

type Es_event_od_delete_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_disable_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_enable_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_group_add_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Member *Es_od_member_id_t

+ Node_name Es_string_token_t

type Es_event_od_group_remove_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Member *Es_od_member_id_t

+ Node_name Es_string_token_t

type Es_event_od_group_set_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Members *Es_od_member_id_array_t

+ Node_name Es_string_token_t

type Es_event_od_modify_password_t

+ Account_name Es_string_token_t

+ Account_type unsafe.Pointer

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

type Es_event_open_t

+ Fflag int32

+ File *Es_file_t

+ Reserved uint8

type Es_event_openssh_login_t

+ Has_uid bool

+ Result_type unsafe.Pointer

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Success bool

+ Uid [4]byte

+ Username Es_string_token_t

type Es_event_openssh_logout_t

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Uid uint32

+ Username Es_string_token_t

type Es_event_proc_check_t

+ Flavor int

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_proc_suspend_resume_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_profile_add_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Is_update bool

+ Profile *Es_profile_t

type Es_event_profile_remove_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Profile *Es_profile_t

type Es_event_pty_close_t

+ Dev int32

+ Reserved uint8

type Es_event_pty_grant_t

+ Dev int32

+ Reserved uint8

type Es_event_readdir_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_readlink_t

+ Reserved uint8

+ Source *Es_file_t

type Es_event_remote_thread_create_t

+ Reserved uint8

+ Target *Es_process_t

+ Thread_state *Es_thread_state_t

type Es_event_remount_t

+ Disposition unsafe.Pointer

+ Remount_flags uint64

+ Reserved uint8

+ Statfs objectivec.IObject

type Es_event_rename_t

+ Destination [24]byte

+ Destination_type EsDestinationType

+ Dir *Es_file_t

+ Existing_file *Es_file_t

+ Filename Es_string_token_t

+ New_path unsafe.Pointer

+ Reserved uint8

+ Source *Es_file_t

type Es_event_screensharing_attach_t

+ Authentication_type Es_string_token_t

+ Authentication_username Es_string_token_t

+ Existing_session bool

+ Graphical_session_id Es_graphical_session_id_t

+ Session_username Es_string_token_t

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Success bool

+ Viewer_appleid Es_string_token_t

type Es_event_screensharing_detach_t

+ Graphical_session_id Es_graphical_session_id_t

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Viewer_appleid Es_string_token_t

type Es_event_searchfs_t

+ Attrlist kernel.Attrlist

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setacl_t

+ Acl [8]byte

+ Reserved uint8

+ Set unsafe.Pointer

+ Set_or_clear unsafe.Pointer

+ Target *Es_file_t

type Es_event_setattrlist_t

+ Attrlist kernel.Attrlist

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setegid_t

+ Egid uint32

+ Reserved uint8

type Es_event_seteuid_t

+ Euid uint32

+ Reserved uint8

type Es_event_setextattr_t

+ Extattr Es_string_token_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setflags_t

+ Flags uint32

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setgid_t

+ Gid uint32

+ Reserved uint8

type Es_event_setmode_t

+ Mode uint16

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setowner_t

+ Gid uint32

+ Reserved uint8

+ Target *Es_file_t

+ Uid uint32

type Es_event_setregid_t

+ Egid uint32

+ Reserved uint8

+ Rgid uint32

type Es_event_setreuid_t

+ Euid uint32

+ Reserved uint8

+ Ruid uint32

type Es_event_settime_t

+ Reserved uint8

type Es_event_setuid_t

+ Reserved uint8

+ Uid uint32

type Es_event_signal_t

+ Instigator *Es_process_t

+ Reserved uint8

+ Sig int

+ Target *Es_process_t

type Es_event_stat_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_su_t

+ Argc uintptr

+ Argv *Es_string_token_t

+ Env *Es_string_token_t

+ Env_count uintptr

+ Failure_message Es_string_token_t

+ From_uid uint32

+ From_username Es_string_token_t

+ Has_to_uid bool

+ Shell Es_string_token_t

+ Success bool

+ To_uid [4]byte

+ To_username Es_string_token_t

+ Uid uint32

type Es_event_sudo_t

+ Command Es_string_token_t

+ From_uid [4]byte

+ From_username Es_string_token_t

+ Has_from_uid bool

+ Has_to_uid bool

+ Reject_info *Es_sudo_reject_info_t

+ Success bool

+ To_uid [4]byte

+ To_username Es_string_token_t

+ Uid uint32

type Es_event_tcc_modify_t

+ Identity Es_string_token_t

+ Identity_type unsafe.Pointer

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Reason unsafe.Pointer

+ Responsible *Es_process_t

+ Responsible_token *[32]byte

+ Right unsafe.Pointer

+ Service Es_string_token_t

+ Update_type unsafe.Pointer

type Es_event_trace_t

+ Reserved uint8

+ Target *Es_process_t

type Es_event_truncate_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_uipc_bind_t

+ Dir *Es_file_t

+ Filename Es_string_token_t

+ Mode uint16

+ Reserved uint8

type Es_event_uipc_connect_t

+ Domain int

+ File *Es_file_t

+ Protocol int

+ Reserved uint8

+ Type int

type Es_event_unlink_t

+ Parent_dir *Es_file_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_unmount_t

+ Reserved uint8

+ Statfs objectivec.IObject

type Es_event_utimes_t

+ Atime syscall.Timespec

+ Mtime syscall.Timespec

+ Reserved uint8

+ Target *Es_file_t

type Es_event_write_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_xp_malware_detected_t

+ Detected_executable Es_string_token_t

+ Detected_path Es_string_token_t

+ Incident_identifier Es_string_token_t

+ Malware_identifier Es_string_token_t

+ Signature_version Es_string_token_t

type Es_event_xp_malware_remediated_t

+ Action_type Es_string_token_t

+ Incident_identifier Es_string_token_t

+ Malware_identifier Es_string_token_t

+ Remediated_path Es_string_token_t

+ Remediated_process_audit_token *[32]byte

+ Result_description Es_string_token_t

+ Signature_version Es_string_token_t

+ Success bool

type Es_event_xpc_connect_t

+ Service_domain_type unsafe.Pointer

+ Service_name Es_string_token_t

+ type Es_events_t [104]byte

+ func (u *Es_events_t) Access() *Es_event_access_t

+ func (u *Es_events_t) Authentication() *Es_event_authentication_t

+ func (u *Es_events_t) Authorization_judgement() *Es_event_authorization_judgement_t

+ func (u *Es_events_t) Authorization_petition() *Es_event_authorization_petition_t

+ func (u *Es_events_t) Btm_launch_item_add() *Es_event_btm_launch_item_add_t

+ func (u *Es_events_t) Btm_launch_item_remove() *Es_event_btm_launch_item_remove_t

+ func (u *Es_events_t) Chdir() *Es_event_chdir_t

+ func (u *Es_events_t) Chroot() *Es_event_chroot_t

+ func (u *Es_events_t) Clone() *Es_event_clone_t

+ func (u *Es_events_t) Close() *Es_event_close_t

+ func (u *Es_events_t) Copyfile() *Es_event_copyfile_t

+ func (u *Es_events_t) Create() *Es_event_create_t

+ func (u *Es_events_t) Cs_invalidated() *Es_event_cs_invalidated_t

+ func (u *Es_events_t) Deleteextattr() *Es_event_deleteextattr_t

+ func (u *Es_events_t) Dup() *Es_event_dup_t

+ func (u *Es_events_t) Exchangedata() *Es_event_exchangedata_t

+ func (u *Es_events_t) Exec() *Es_event_exec_t

+ func (u *Es_events_t) Exit() *Es_event_exit_t

+ func (u *Es_events_t) Fcntl() *Es_event_fcntl_t

+ func (u *Es_events_t) File_provider_materialize() *Es_event_file_provider_materialize_t

+ func (u *Es_events_t) File_provider_update() *Es_event_file_provider_update_t

+ func (u *Es_events_t) Fork() *Es_event_fork_t

+ func (u *Es_events_t) Fsgetpath() *Es_event_fsgetpath_t

+ func (u *Es_events_t) Gatekeeper_user_override() *Es_event_gatekeeper_user_override_t

+ func (u *Es_events_t) Get_task() *Es_event_get_task_t

+ func (u *Es_events_t) Get_task_inspect() *Es_event_get_task_inspect_t

+ func (u *Es_events_t) Get_task_name() *Es_event_get_task_name_t

+ func (u *Es_events_t) Get_task_read() *Es_event_get_task_read_t

+ func (u *Es_events_t) Getattrlist() *Es_event_getattrlist_t

+ func (u *Es_events_t) Getextattr() *Es_event_getextattr_t

+ func (u *Es_events_t) Iokit_open() *Es_event_iokit_open_t

+ func (u *Es_events_t) Kextload() *Es_event_kextload_t

+ func (u *Es_events_t) Kextunload() *Es_event_kextunload_t

+ func (u *Es_events_t) Link() *Es_event_link_t

+ func (u *Es_events_t) Listextattr() *Es_event_listextattr_t

+ func (u *Es_events_t) Login_login() *Es_event_login_login_t

+ func (u *Es_events_t) Login_logout() *Es_event_login_logout_t

+ func (u *Es_events_t) Lookup() *Es_event_lookup_t

+ func (u *Es_events_t) Lw_session_lock() *Es_event_lw_session_lock_t

+ func (u *Es_events_t) Lw_session_login() *Es_event_lw_session_login_t

+ func (u *Es_events_t) Lw_session_logout() *Es_event_lw_session_logout_t

+ func (u *Es_events_t) Lw_session_unlock() *Es_event_lw_session_unlock_t

+ func (u *Es_events_t) Mmap() *Es_event_mmap_t

+ func (u *Es_events_t) Mount() *Es_event_mount_t

+ func (u *Es_events_t) Mprotect() *Es_event_mprotect_t

+ func (u *Es_events_t) Od_attribute_set() *Es_event_od_attribute_set_t

+ func (u *Es_events_t) Od_attribute_value_add() *Es_event_od_attribute_value_add_t

+ func (u *Es_events_t) Od_attribute_value_remove() *Es_event_od_attribute_value_remove_t

+ func (u *Es_events_t) Od_create_group() *Es_event_od_create_group_t

+ func (u *Es_events_t) Od_create_user() *Es_event_od_create_user_t

+ func (u *Es_events_t) Od_delete_group() *Es_event_od_delete_group_t

+ func (u *Es_events_t) Od_delete_user() *Es_event_od_delete_user_t

+ func (u *Es_events_t) Od_disable_user() *Es_event_od_disable_user_t

+ func (u *Es_events_t) Od_enable_user() *Es_event_od_enable_user_t

+ func (u *Es_events_t) Od_group_add() *Es_event_od_group_add_t

+ func (u *Es_events_t) Od_group_remove() *Es_event_od_group_remove_t

+ func (u *Es_events_t) Od_group_set() *Es_event_od_group_set_t

+ func (u *Es_events_t) Od_modify_password() *Es_event_od_modify_password_t

+ func (u *Es_events_t) Open() *Es_event_open_t

+ func (u *Es_events_t) Openssh_login() *Es_event_openssh_login_t

+ func (u *Es_events_t) Openssh_logout() *Es_event_openssh_logout_t

+ func (u *Es_events_t) Proc_check() *Es_event_proc_check_t

+ func (u *Es_events_t) Proc_suspend_resume() *Es_event_proc_suspend_resume_t

+ func (u *Es_events_t) Profile_add() *Es_event_profile_add_t

+ func (u *Es_events_t) Profile_remove() *Es_event_profile_remove_t

+ func (u *Es_events_t) Pty_close() *Es_event_pty_close_t

+ func (u *Es_events_t) Pty_grant() *Es_event_pty_grant_t

+ func (u *Es_events_t) Readdir() *Es_event_readdir_t

+ func (u *Es_events_t) Readlink() *Es_event_readlink_t

+ func (u *Es_events_t) Remote_thread_create() *Es_event_remote_thread_create_t

+ func (u *Es_events_t) Remount() *Es_event_remount_t

+ func (u *Es_events_t) Rename() *Es_event_rename_t

+ func (u *Es_events_t) Screensharing_attach() *Es_event_screensharing_attach_t

+ func (u *Es_events_t) Screensharing_detach() *Es_event_screensharing_detach_t

+ func (u *Es_events_t) Searchfs() *Es_event_searchfs_t

+ func (u *Es_events_t) Setacl() *Es_event_setacl_t

+ func (u *Es_events_t) Setattrlist() *Es_event_setattrlist_t

+ func (u *Es_events_t) Setegid() *Es_event_setegid_t

+ func (u *Es_events_t) Seteuid() *Es_event_seteuid_t

+ func (u *Es_events_t) Setextattr() *Es_event_setextattr_t

+ func (u *Es_events_t) Setflags() *Es_event_setflags_t

+ func (u *Es_events_t) Setgid() *Es_event_setgid_t

+ func (u *Es_events_t) Setmode() *Es_event_setmode_t

+ func (u *Es_events_t) Setowner() *Es_event_setowner_t

+ func (u *Es_events_t) Setregid() *Es_event_setregid_t

+ func (u *Es_events_t) Setreuid() *Es_event_setreuid_t

+ func (u *Es_events_t) Settime() *Es_event_settime_t

+ func (u *Es_events_t) Setuid() *Es_event_setuid_t

+ func (u *Es_events_t) Signal() *Es_event_signal_t

+ func (u *Es_events_t) Stat() *Es_event_stat_t

+ func (u *Es_events_t) Su() *Es_event_su_t

+ func (u *Es_events_t) Sudo() *Es_event_sudo_t

+ func (u *Es_events_t) Tcc_modify() *Es_event_tcc_modify_t

+ func (u *Es_events_t) Trace() *Es_event_trace_t

+ func (u *Es_events_t) Truncate() *Es_event_truncate_t

+ func (u *Es_events_t) Uipc_bind() *Es_event_uipc_bind_t

+ func (u *Es_events_t) Uipc_connect() *Es_event_uipc_connect_t

+ func (u *Es_events_t) Unlink() *Es_event_unlink_t

+ func (u *Es_events_t) Unmount() *Es_event_unmount_t

+ func (u *Es_events_t) Utimes() *Es_event_utimes_t

+ func (u *Es_events_t) Write() *Es_event_write_t

+ func (u *Es_events_t) Xp_malware_detected() *Es_event_xp_malware_detected_t

+ func (u *Es_events_t) Xp_malware_remediated() *Es_event_xp_malware_remediated_t

+ func (u *Es_events_t) Xpc_connect() *Es_event_xpc_connect_t

type Es_fd_t

+ Fd int32

+ Fdtype uint32

+ Pipe unsafe.Pointer

+ Pipe_id uint64

type Es_file_t

+ Path Es_string_token_t

+ Path_truncated bool

+ Stat kernel.Stat

type Es_message_t

+ Action [36]byte

+ Action_type EsActionType

+ Auth Es_event_id_t

+ Deadline uint64

+ Event Es_events_t

+ Event_type EsEventType

+ Global_seq_num uint64

+ Mach_time uint64

+ Notify Es_result_t

+ Opaque uint64

+ Process *Es_process_t

+ Seq_num uint64

+ Thread *Es_thread_t

+ Time syscall.Timespec

+ Version uint32

type Es_muted_path_t

+ Event_count uintptr

+ Events *EsEventType

+ Path Es_string_token_t

+ Type EsMutePathType

type Es_muted_paths_t

+ Count uintptr

+ Paths *Es_muted_path_t

type Es_muted_process_t

+ Audit_token [32]byte

+ Event_count uintptr

+ Events *EsEventType

type Es_muted_processes_t

+ Count uintptr

+ Processes *Es_muted_process_t

type Es_od_member_id_array_t

+ Member_array [8]byte

+ Member_count uintptr

+ Member_type unsafe.Pointer

+ Names *Es_string_token_t

+ Uuids unsafe.Pointer

type Es_od_member_id_t

+ Member_type unsafe.Pointer

+ Member_value [16]byte

+ Name Es_string_token_t

+ Uuid [16]byte

type Es_process_t

+ Audit_token [32]byte

+ Cdhash Es_cdhash_t

+ Codesigning_flags uint32

+ Cs_validation_category unsafe.Pointer

+ Executable *Es_file_t

+ Group_id int32

+ Is_es_client bool

+ Is_platform_binary bool

+ Original_ppid int32

+ Parent_audit_token [32]byte

+ Ppid int32

+ Responsible_audit_token [32]byte

+ Session_id int32

+ Signing_id Es_string_token_t

+ Start_time kernel.Timeval

+ Team_id Es_string_token_t

+ Tty *Es_file_t

type Es_profile_t

+ Display_name Es_string_token_t

+ Identifier Es_string_token_t

+ Install_source unsafe.Pointer

+ Organization Es_string_token_t

+ Scope Es_string_token_t

+ Uuid Es_string_token_t

type Es_result_t

+ Auth unsafe.Pointer

+ Flags uint32

+ Reserved uint8

+ Result [32]byte

+ Result_type EsResultType

type Es_signed_file_info_t

+ Cdhash Es_cdhash_t

+ Signing_id Es_string_token_t

+ Team_id Es_string_token_t

type Es_string_token_t

+ Data *byte

+ Length uintptr

type Es_sudo_reject_info_t

+ Failure_message Es_string_token_t

+ Plugin_name Es_string_token_t

+ Plugin_type unsafe.Pointer

type Es_thread_state_t

+ Flavor int

+ State Es_token_t

type Es_thread_t

+ Thread_id uint64

type Es_token_t

+ Data *uint8

+ Size uintptr

v0.5.0

Mar 29, 2026

Changes in this version

+ func Es_clear_cache(client *Es_client_t) unsafe.Pointer

+ func Es_delete_client(client *Es_client_t) unsafe.Pointer

+ func Es_exec_arg_count(event *Es_event_exec_t) uint32

+ func Es_exec_env_count(event *Es_event_exec_t) uint32

+ func Es_exec_fd_count(event *Es_event_exec_t) uint32

+ func Es_invert_muting(client *Es_client_t, mute_type unsafe.Pointer) unsafe.Pointer

+ func Es_mute_path(client *Es_client_t, path string, type_ unsafe.Pointer) unsafe.Pointer

+ func Es_mute_path_events(client *Es_client_t, path string, type_ unsafe.Pointer, events uintptr, ...) unsafe.Pointer

+ func Es_mute_process(client *Es_client_t, audit_token uintptr) unsafe.Pointer

+ func Es_mute_process_events(client *Es_client_t, audit_token uintptr, events uintptr, event_count uintptr) unsafe.Pointer

+ func Es_muted_paths_events(client *Es_client_t, muted_paths *Es_muted_paths_t) unsafe.Pointer

+ func Es_muted_processes_events(client *Es_client_t, muted_processes *Es_muted_processes_t) unsafe.Pointer

+ func Es_muting_inverted(client *Es_client_t, mute_type unsafe.Pointer) unsafe.Pointer

+ func Es_new_client(client *Es_client_t, handler Es_handler_block_t) unsafe.Pointer

+ func Es_release_message(msg *Es_message_t)

+ func Es_release_muted_paths(muted_paths *Es_muted_paths_t)

+ func Es_release_muted_processes(muted_processes *Es_muted_processes_t)

+ func Es_respond_auth_result(client *Es_client_t, message *Es_message_t, result unsafe.Pointer, cache bool) unsafe.Pointer

+ func Es_respond_flags_result(client *Es_client_t, message *Es_message_t, authorized_flags uint32, ...) unsafe.Pointer

+ func Es_retain_message(msg *Es_message_t)

+ func Es_subscribe(client *Es_client_t, events uintptr, event_count uint32) unsafe.Pointer

+ func Es_subscriptions(client *Es_client_t, count *uintptr, subscriptions uintptr) unsafe.Pointer

+ func Es_unmute_all_paths(client *Es_client_t) unsafe.Pointer

+ func Es_unmute_all_target_paths(client *Es_client_t) unsafe.Pointer

+ func Es_unmute_path(client *Es_client_t, path string, type_ unsafe.Pointer) unsafe.Pointer

+ func Es_unmute_path_events(client *Es_client_t, path string, type_ unsafe.Pointer, events uintptr, ...) unsafe.Pointer

+ func Es_unmute_process(client *Es_client_t, audit_token uintptr) unsafe.Pointer

+ func Es_unmute_process_events(client *Es_client_t, audit_token uintptr, events uintptr, event_count uintptr) unsafe.Pointer

+ func Es_unsubscribe(client *Es_client_t, events uintptr, event_count uint32) unsafe.Pointer

+ func Es_unsubscribe_all(client *Es_client_t) unsafe.Pointer

+ type Acl struct

+ type Cwd struct

+ type Es_authorization_result_t struct

+ type Es_btm_launch_item_t struct

+ type Es_cdhash_t = unsafe.Pointer

+ type Es_client_t = unsafe.Pointer

+ type Es_event_access_t struct

+ type Es_event_authentication_auto_unlock_t struct

+ type Es_event_authentication_od_t struct

+ type Es_event_authentication_t struct

+ type Es_event_authentication_token_t struct

+ type Es_event_authentication_touchid_t struct

+ type Es_event_authorization_judgement_t struct

+ type Es_event_authorization_petition_t struct

+ type Es_event_btm_launch_item_add_t struct

+ type Es_event_btm_launch_item_remove_t struct

+ type Es_event_chdir_t struct

+ type Es_event_chroot_t struct

+ type Es_event_clone_t struct

+ type Es_event_close_t struct

+ type Es_event_copyfile_t struct

+ type Es_event_create_t struct

+ type Es_event_cs_invalidated_t struct

+ type Es_event_deleteextattr_t struct

+ type Es_event_dup_t struct

+ type Es_event_exchangedata_t struct

+ type Es_event_exec_t struct

+ type Es_event_exit_t struct

+ type Es_event_fcntl_t struct

+ type Es_event_file_provider_materialize_t struct

+ type Es_event_file_provider_update_t struct

+ type Es_event_fork_t struct

+ type Es_event_fsgetpath_t struct

+ type Es_event_gatekeeper_user_override_t struct

+ type Es_event_get_task_inspect_t struct

+ type Es_event_get_task_name_t struct

+ type Es_event_get_task_read_t struct

+ type Es_event_get_task_t struct

+ type Es_event_getattrlist_t struct

+ type Es_event_getextattr_t struct

+ type Es_event_id_t struct

+ type Es_event_iokit_open_t struct

+ type Es_event_kextload_t struct

+ type Es_event_kextunload_t struct

+ type Es_event_link_t struct

+ type Es_event_listextattr_t struct

+ type Es_event_login_login_t struct

+ type Es_event_login_logout_t struct

+ type Es_event_lookup_t struct

+ type Es_event_lw_session_lock_t struct

+ type Es_event_lw_session_login_t struct

+ type Es_event_lw_session_logout_t struct

+ type Es_event_lw_session_unlock_t struct

+ type Es_event_mmap_t struct

+ type Es_event_mount_t struct

+ type Es_event_mprotect_t struct

+ type Es_event_od_attribute_set_t struct

+ type Es_event_od_attribute_value_add_t struct

+ type Es_event_od_attribute_value_remove_t struct

+ type Es_event_od_create_group_t struct

+ type Es_event_od_create_user_t struct

+ type Es_event_od_delete_group_t struct

+ type Es_event_od_delete_user_t struct

+ type Es_event_od_disable_user_t struct

+ type Es_event_od_enable_user_t struct

+ type Es_event_od_group_add_t struct

+ type Es_event_od_group_remove_t struct

+ type Es_event_od_group_set_t struct

+ type Es_event_od_modify_password_t struct

+ type Es_event_open_t struct

+ type Es_event_openssh_login_t struct

+ type Es_event_openssh_logout_t struct

+ type Es_event_proc_check_t struct

+ type Es_event_proc_suspend_resume_t struct

+ type Es_event_profile_add_t struct

+ type Es_event_profile_remove_t struct

+ type Es_event_pty_close_t struct

+ type Es_event_pty_grant_t struct

+ type Es_event_readdir_t struct

+ type Es_event_readlink_t struct

+ type Es_event_remote_thread_create_t struct

+ type Es_event_remount_t struct

+ type Es_event_rename_t struct

+ type Es_event_screensharing_attach_t struct

+ type Es_event_screensharing_detach_t struct

+ type Es_event_searchfs_t struct

+ type Es_event_setacl_t struct

+ type Es_event_setattrlist_t struct

+ type Es_event_setegid_t struct

+ type Es_event_seteuid_t struct

+ type Es_event_setextattr_t struct

+ type Es_event_setflags_t struct

+ type Es_event_setgid_t struct

+ type Es_event_setmode_t struct

+ type Es_event_setowner_t struct

+ type Es_event_setregid_t struct

+ type Es_event_setreuid_t struct

+ type Es_event_settime_t struct

+ type Es_event_setuid_t struct

+ type Es_event_signal_t struct

+ type Es_event_stat_t struct

+ type Es_event_su_t struct

+ type Es_event_sudo_t struct

+ type Es_event_tcc_modify_t struct

+ type Es_event_trace_t struct

+ type Es_event_truncate_t struct

+ type Es_event_uipc_bind_t struct

+ type Es_event_uipc_connect_t struct

+ type Es_event_unlink_t struct

+ type Es_event_unmount_t struct

+ type Es_event_utimes_t struct

+ type Es_event_write_t struct

+ type Es_event_xp_malware_detected_t struct

+ type Es_event_xp_malware_remediated_t struct

+ type Es_event_xpc_connect_t struct

+ type Es_fd_t struct

+ func Es_exec_fd(event *Es_event_exec_t, index uint32) *Es_fd_t

+ type Es_file_t struct

+ type Es_graphical_session_id_t = uint32

+ type Es_handler_block_t = func(objectivec.IObject, *Es_message_t)

+ type Es_message_t struct

+ type Es_muted_path_t struct

+ type Es_muted_paths_t struct

+ type Es_muted_process_t struct

+ type Es_muted_processes_t struct

+ type Es_od_member_id_array_t struct

+ type Es_od_member_id_t struct

+ type Es_process_t struct

+ type Es_profile_t struct

+ type Es_result_t struct

+ type Es_sha256_t = unsafe.Pointer

+ type Es_signed_file_info_t struct

+ type Es_statfs_t = unsafe.Pointer

+ type Es_string_token_t struct

+ func Es_exec_arg(event *Es_event_exec_t, index uint32) Es_string_token_t

+ func Es_exec_env(event *Es_event_exec_t, index uint32) Es_string_token_t

+ type Es_sudo_reject_info_t struct

+ type Es_thread_state_t struct

+ type Es_thread_t struct

+ type Es_token_t struct

+ type Image_cpusubtype struct

+ type Image_cputype struct

+ type Last_fd struct

+ type Pipe struct

+ type Reserved struct

+ type Script struct

+ type Was_mapped_writable struct

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL