endpointsecurity

package

Go to main page

Versions in this module

v0

v0.6.10

May 21, 2026

v0.6.9

May 19, 2026

v0.6.8

May 19, 2026

v0.6.7

May 18, 2026

v0.6.6

May 18, 2026

v0.6.5

May 18, 2026

v0.6.4

May 18, 2026

Changes in this version

+ type EsAutoUnlockType = Es_auto_unlock_type_t

+ type EsCdhash = Es_cdhash_t

+ type EsClient = Es_client_t

type EsEventType

+ const ES_EVENT_TYPE_RESERVED_7

+ const ES_EVENT_TYPE_RESERVED_8

+ type EsGraphicalSessionID = Es_graphical_session_id_t

+ type EsHandlerBlock = Es_handler_block_t

+ type EsMuteInvertedReturn = Es_mute_inverted_return_t

+ type EsOpensshLoginResultType = Es_openssh_login_result_type_t

+ type EsSetOrClear = Es_set_or_clear_t

+ type EsSha256 = Es_sha256_t

+ type EsStatfs = Es_statfs_t

v0.6.3

May 16, 2026

Changes in this version

+ type Es_action_type_t = EsActionType

+ type Es_address_type_t = EsAddressType

+ type Es_auth_result_t = EsAuthResult

+ type Es_authentication_type_t = EsAuthenticationType

+ type Es_authorization_rule_class_t = EsAuthorizationRuleClass

+ type Es_btm_item_type_t = EsBtmItemType

+ type Es_clear_cache_result_t = EsClearCacheResult

+ type Es_cs_validation_category_t = EsCsValidationCategory

+ type Es_destination_type_t = EsDestinationType

+ type Es_event_type_t = EsEventType

+ type Es_gatekeeper_user_override_file_type_t = EsGatekeeperUserOverrideFileType

+ type Es_get_task_type_t = EsGetTaskType

+ type Es_mount_disposition_t = EsMountDisposition

+ type Es_mute_inversion_type_t = EsMuteInversionType

+ type Es_mute_path_type_t = EsMutePathType

+ type Es_new_client_result_t = EsNewClientResult

+ type Es_od_account_type_t = EsOdAccountType

+ type Es_od_member_type_t = EsOdMemberType

+ type Es_od_record_type_t = EsOdRecordType

+ type Es_proc_check_type_t = EsProcCheckType

+ type Es_proc_suspend_resume_type_t = EsProcSuspendResumeType

+ type Es_profile_source_t = EsProfileSource

+ type Es_respond_result_t = EsRespondResult

+ type Es_result_type_t = EsResultType

+ type Es_return_t = EsReturn

+ type Es_sudo_plugin_type_t = EsSudoPluginType

+ type Es_tcc_authorization_reason_t = EsTccAuthorizationReason

+ type Es_tcc_authorization_right_t = EsTccAuthorizationRight

+ type Es_tcc_event_type_t = EsTccEventType

+ type Es_tcc_identity_type_t = EsTccIdentityType

+ type Es_touchid_mode_t = EsTouchidMode

v0.6.2

May 16, 2026

v0.6.1

May 15, 2026

v0.6.0

May 13, 2026

v0.5.5

Apr 24, 2026

v0.5.4

Apr 14, 2026

v0.5.3

Apr 2, 2026

Changes in this version

+ type Es_auto_unlock_type_t = EsAutoUnlock

+ type Es_mute_inverted_return_t = EsMute

+ type Es_openssh_login_result_type_t = EsOpenssh

+ type Es_set_or_clear_t = Es

+ type Es_xpc_domain_type_t = EsXPCDomainType

v0.5.2

Mar 31, 2026

v0.5.1

Mar 30, 2026

Changes in this version

+ type Es int32

+ const ES_CLEAR

+ const ES_SET

+ func (e Es) String() string

+ type EsActionType int32

+ const ES_ACTION_TYPE_AUTH

+ const ES_ACTION_TYPE_NOTIFY

+ func (e EsActionType) String() string

+ type EsAddressType int32

+ const ES_ADDRESS_TYPE_IPV4

+ const ES_ADDRESS_TYPE_IPV6

+ const ES_ADDRESS_TYPE_NAMED_SOCKET

+ const ES_ADDRESS_TYPE_NONE

+ func (e EsAddressType) String() string

+ type EsAuthResult int32

+ const ES_AUTH_RESULT_ALLOW

+ const ES_AUTH_RESULT_DENY

+ func (e EsAuthResult) String() string

+ type EsAuthenticationType int32

+ const ES_AUTHENTICATION_TYPE_AUTO_UNLOCK

+ const ES_AUTHENTICATION_TYPE_LAST

+ const ES_AUTHENTICATION_TYPE_OD

+ const ES_AUTHENTICATION_TYPE_TOKEN

+ const ES_AUTHENTICATION_TYPE_TOUCHID

+ func (e EsAuthenticationType) String() string

+ type EsAuthorizationRuleClass int32

+ const ES_AUTHORIZATION_RULE_CLASS_ALLOW

+ const ES_AUTHORIZATION_RULE_CLASS_DENY

+ const ES_AUTHORIZATION_RULE_CLASS_INVALID

+ const ES_AUTHORIZATION_RULE_CLASS_MECHANISM

+ const ES_AUTHORIZATION_RULE_CLASS_RULE

+ const ES_AUTHORIZATION_RULE_CLASS_UNKNOWN

+ const ES_AUTHORIZATION_RULE_CLASS_USER

+ func (e EsAuthorizationRuleClass) String() string

+ type EsAutoUnlock int32

+ const ES_AUTO_UNLOCK_AUTH_PROMPT

+ const ES_AUTO_UNLOCK_MACHINE_UNLOCK

+ func (e EsAutoUnlock) String() string

+ type EsBtmItemType int32

+ const ES_BTM_ITEM_TYPE_AGENT

+ const ES_BTM_ITEM_TYPE_APP

+ const ES_BTM_ITEM_TYPE_DAEMON

+ const ES_BTM_ITEM_TYPE_LOGIN_ITEM

+ const ES_BTM_ITEM_TYPE_USER_ITEM

+ func (e EsBtmItemType) String() string

+ type EsClearCacheResult int32

+ const ES_CLEAR_CACHE_RESULT_ERR_INTERNAL

+ const ES_CLEAR_CACHE_RESULT_ERR_THROTTLE

+ const ES_CLEAR_CACHE_RESULT_SUCCESS

+ func (e EsClearCacheResult) String() string

+ type EsCsValidationCategory int32

+ const ES_CS_VALIDATION_CATEGORY_APP_STORE

+ const ES_CS_VALIDATION_CATEGORY_DEVELOPER_ID

+ const ES_CS_VALIDATION_CATEGORY_DEVELOPMENT

+ const ES_CS_VALIDATION_CATEGORY_ENTERPRISE

+ const ES_CS_VALIDATION_CATEGORY_INVALID

+ const ES_CS_VALIDATION_CATEGORY_LOCAL_SIGNING

+ const ES_CS_VALIDATION_CATEGORY_NONE

+ const ES_CS_VALIDATION_CATEGORY_OOPJIT

+ const ES_CS_VALIDATION_CATEGORY_PLATFORM

+ const ES_CS_VALIDATION_CATEGORY_ROSETTA

+ const ES_CS_VALIDATION_CATEGORY_TESTFLIGHT

+ func (e EsCsValidationCategory) String() string

+ type EsDestinationType int32

+ const ES_DESTINATION_TYPE_EXISTING_FILE

+ const ES_DESTINATION_TYPE_NEW_PATH

+ func (e EsDestinationType) String() string

+ type EsEventType int32

+ const ES_EVENT_TYPE_AUTH_CHDIR

+ const ES_EVENT_TYPE_AUTH_CHROOT

+ const ES_EVENT_TYPE_AUTH_CLONE

+ const ES_EVENT_TYPE_AUTH_COPYFILE

+ const ES_EVENT_TYPE_AUTH_CREATE

+ const ES_EVENT_TYPE_AUTH_DELETEEXTATTR

+ const ES_EVENT_TYPE_AUTH_EXCHANGEDATA

+ const ES_EVENT_TYPE_AUTH_EXEC

+ const ES_EVENT_TYPE_AUTH_FCNTL

+ const ES_EVENT_TYPE_AUTH_FILE_PROVIDER_MATERIALIZE

+ const ES_EVENT_TYPE_AUTH_FILE_PROVIDER_UPDATE

+ const ES_EVENT_TYPE_AUTH_FSGETPATH

+ const ES_EVENT_TYPE_AUTH_GETATTRLIST

+ const ES_EVENT_TYPE_AUTH_GETEXTATTR

+ const ES_EVENT_TYPE_AUTH_GET_TASK

+ const ES_EVENT_TYPE_AUTH_GET_TASK_READ

+ const ES_EVENT_TYPE_AUTH_IOKIT_OPEN

+ const ES_EVENT_TYPE_AUTH_KEXTLOAD

+ const ES_EVENT_TYPE_AUTH_LINK

+ const ES_EVENT_TYPE_AUTH_LISTEXTATTR

+ const ES_EVENT_TYPE_AUTH_MMAP

+ const ES_EVENT_TYPE_AUTH_MOUNT

+ const ES_EVENT_TYPE_AUTH_MPROTECT

+ const ES_EVENT_TYPE_AUTH_OPEN

+ const ES_EVENT_TYPE_AUTH_PROC_CHECK

+ const ES_EVENT_TYPE_AUTH_PROC_SUSPEND_RESUME

+ const ES_EVENT_TYPE_AUTH_READDIR

+ const ES_EVENT_TYPE_AUTH_READLINK

+ const ES_EVENT_TYPE_AUTH_REMOUNT

+ const ES_EVENT_TYPE_AUTH_RENAME

+ const ES_EVENT_TYPE_AUTH_SEARCHFS

+ const ES_EVENT_TYPE_AUTH_SETACL

+ const ES_EVENT_TYPE_AUTH_SETATTRLIST

+ const ES_EVENT_TYPE_AUTH_SETEXTATTR

+ const ES_EVENT_TYPE_AUTH_SETFLAGS

+ const ES_EVENT_TYPE_AUTH_SETMODE

+ const ES_EVENT_TYPE_AUTH_SETOWNER

+ const ES_EVENT_TYPE_AUTH_SETTIME

+ const ES_EVENT_TYPE_AUTH_SIGNAL

+ const ES_EVENT_TYPE_AUTH_TRUNCATE

+ const ES_EVENT_TYPE_AUTH_UIPC_BIND

+ const ES_EVENT_TYPE_AUTH_UIPC_CONNECT

+ const ES_EVENT_TYPE_AUTH_UNLINK

+ const ES_EVENT_TYPE_AUTH_UTIMES

+ const ES_EVENT_TYPE_LAST

+ const ES_EVENT_TYPE_NOTIFY_ACCESS

+ const ES_EVENT_TYPE_NOTIFY_AUTHENTICATION

+ const ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_JUDGEMENT

+ const ES_EVENT_TYPE_NOTIFY_AUTHORIZATION_PETITION

+ const ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_ADD

+ const ES_EVENT_TYPE_NOTIFY_BTM_LAUNCH_ITEM_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_CHDIR

+ const ES_EVENT_TYPE_NOTIFY_CHROOT

+ const ES_EVENT_TYPE_NOTIFY_CLONE

+ const ES_EVENT_TYPE_NOTIFY_CLOSE

+ const ES_EVENT_TYPE_NOTIFY_COPYFILE

+ const ES_EVENT_TYPE_NOTIFY_CREATE

+ const ES_EVENT_TYPE_NOTIFY_CS_INVALIDATED

+ const ES_EVENT_TYPE_NOTIFY_DELETEEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_DUP

+ const ES_EVENT_TYPE_NOTIFY_EXCHANGEDATA

+ const ES_EVENT_TYPE_NOTIFY_EXEC

+ const ES_EVENT_TYPE_NOTIFY_EXIT

+ const ES_EVENT_TYPE_NOTIFY_FCNTL

+ const ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_MATERIALIZE

+ const ES_EVENT_TYPE_NOTIFY_FILE_PROVIDER_UPDATE

+ const ES_EVENT_TYPE_NOTIFY_FORK

+ const ES_EVENT_TYPE_NOTIFY_FSGETPATH

+ const ES_EVENT_TYPE_NOTIFY_GATEKEEPER_USER_OVERRIDE

+ const ES_EVENT_TYPE_NOTIFY_GETATTRLIST

+ const ES_EVENT_TYPE_NOTIFY_GETEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK_INSPECT

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK_NAME

+ const ES_EVENT_TYPE_NOTIFY_GET_TASK_READ

+ const ES_EVENT_TYPE_NOTIFY_IOKIT_OPEN

+ const ES_EVENT_TYPE_NOTIFY_KEXTLOAD

+ const ES_EVENT_TYPE_NOTIFY_KEXTUNLOAD

+ const ES_EVENT_TYPE_NOTIFY_LINK

+ const ES_EVENT_TYPE_NOTIFY_LISTEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_LOGIN_LOGIN

+ const ES_EVENT_TYPE_NOTIFY_LOGIN_LOGOUT

+ const ES_EVENT_TYPE_NOTIFY_LOOKUP

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOCK

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGIN

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_LOGOUT

+ const ES_EVENT_TYPE_NOTIFY_LW_SESSION_UNLOCK

+ const ES_EVENT_TYPE_NOTIFY_MMAP

+ const ES_EVENT_TYPE_NOTIFY_MOUNT

+ const ES_EVENT_TYPE_NOTIFY_MPROTECT

+ const ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_SET

+ const ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_ADD

+ const ES_EVENT_TYPE_NOTIFY_OD_ATTRIBUTE_VALUE_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_OD_CREATE_GROUP

+ const ES_EVENT_TYPE_NOTIFY_OD_CREATE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_DELETE_GROUP

+ const ES_EVENT_TYPE_NOTIFY_OD_DELETE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_DISABLE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_ENABLE_USER

+ const ES_EVENT_TYPE_NOTIFY_OD_GROUP_ADD

+ const ES_EVENT_TYPE_NOTIFY_OD_GROUP_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_OD_GROUP_SET

+ const ES_EVENT_TYPE_NOTIFY_OD_MODIFY_PASSWORD

+ const ES_EVENT_TYPE_NOTIFY_OPEN

+ const ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGIN

+ const ES_EVENT_TYPE_NOTIFY_OPENSSH_LOGOUT

+ const ES_EVENT_TYPE_NOTIFY_PROC_CHECK

+ const ES_EVENT_TYPE_NOTIFY_PROC_SUSPEND_RESUME

+ const ES_EVENT_TYPE_NOTIFY_PROFILE_ADD

+ const ES_EVENT_TYPE_NOTIFY_PROFILE_REMOVE

+ const ES_EVENT_TYPE_NOTIFY_PTY_CLOSE

+ const ES_EVENT_TYPE_NOTIFY_PTY_GRANT

+ const ES_EVENT_TYPE_NOTIFY_READDIR

+ const ES_EVENT_TYPE_NOTIFY_READLINK

+ const ES_EVENT_TYPE_NOTIFY_REMOTE_THREAD_CREATE

+ const ES_EVENT_TYPE_NOTIFY_REMOUNT

+ const ES_EVENT_TYPE_NOTIFY_RENAME

+ const ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH

+ const ES_EVENT_TYPE_NOTIFY_SCREENSHARING_DETACH

+ const ES_EVENT_TYPE_NOTIFY_SEARCHFS

+ const ES_EVENT_TYPE_NOTIFY_SETACL

+ const ES_EVENT_TYPE_NOTIFY_SETATTRLIST

+ const ES_EVENT_TYPE_NOTIFY_SETEGID

+ const ES_EVENT_TYPE_NOTIFY_SETEUID

+ const ES_EVENT_TYPE_NOTIFY_SETEXTATTR

+ const ES_EVENT_TYPE_NOTIFY_SETFLAGS

+ const ES_EVENT_TYPE_NOTIFY_SETGID

+ const ES_EVENT_TYPE_NOTIFY_SETMODE

+ const ES_EVENT_TYPE_NOTIFY_SETOWNER

+ const ES_EVENT_TYPE_NOTIFY_SETREGID

+ const ES_EVENT_TYPE_NOTIFY_SETREUID

+ const ES_EVENT_TYPE_NOTIFY_SETTIME

+ const ES_EVENT_TYPE_NOTIFY_SETUID

+ const ES_EVENT_TYPE_NOTIFY_SIGNAL

+ const ES_EVENT_TYPE_NOTIFY_STAT

+ const ES_EVENT_TYPE_NOTIFY_SU

+ const ES_EVENT_TYPE_NOTIFY_SUDO

+ const ES_EVENT_TYPE_NOTIFY_TCC_MODIFY

+ const ES_EVENT_TYPE_NOTIFY_TRACE

+ const ES_EVENT_TYPE_NOTIFY_TRUNCATE

+ const ES_EVENT_TYPE_NOTIFY_UIPC_BIND

+ const ES_EVENT_TYPE_NOTIFY_UIPC_CONNECT

+ const ES_EVENT_TYPE_NOTIFY_UNLINK

+ const ES_EVENT_TYPE_NOTIFY_UNMOUNT

+ const ES_EVENT_TYPE_NOTIFY_UTIMES

+ const ES_EVENT_TYPE_NOTIFY_WRITE

+ const ES_EVENT_TYPE_NOTIFY_XPC_CONNECT

+ const ES_EVENT_TYPE_NOTIFY_XP_MALWARE_DETECTED

+ const ES_EVENT_TYPE_NOTIFY_XP_MALWARE_REMEDIATED

+ const ES_EVENT_TYPE_RESERVED_0

+ const ES_EVENT_TYPE_RESERVED_1

+ const ES_EVENT_TYPE_RESERVED_2

+ const ES_EVENT_TYPE_RESERVED_3

+ const ES_EVENT_TYPE_RESERVED_4

+ const ES_EVENT_TYPE_RESERVED_5

+ const ES_EVENT_TYPE_RESERVED_6

+ func (e EsEventType) String() string

+ type EsGatekeeperUserOverrideFileType int32

+ const ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_FILE

+ const ES_GATEKEEPER_USER_OVERRIDE_FILE_TYPE_PATH

+ func (e EsGatekeeperUserOverrideFileType) String() string

+ type EsGetTaskType int32

+ const ES_GET_TASK_TYPE_EXPOSE_TASK

+ const ES_GET_TASK_TYPE_IDENTITY_TOKEN

+ const ES_GET_TASK_TYPE_TASK_FOR_PID

+ func (e EsGetTaskType) String() string

+ type EsMountDisposition int32

+ const ES_MOUNT_DISPOSITION_EXTERNAL

+ const ES_MOUNT_DISPOSITION_INTERNAL

+ const ES_MOUNT_DISPOSITION_NETWORK

+ const ES_MOUNT_DISPOSITION_NULLFS

+ const ES_MOUNT_DISPOSITION_UNKNOWN

+ const ES_MOUNT_DISPOSITION_VIRTUAL

+ func (e EsMountDisposition) String() string

+ type EsMute int32

+ const ES_MUTE_INVERTED

+ const ES_MUTE_INVERTED_ERROR

+ const ES_MUTE_NOT_INVERTED

+ func (e EsMute) String() string

+ type EsMuteInversionType int32

+ const ES_MUTE_INVERSION_TYPE_LAST

+ const ES_MUTE_INVERSION_TYPE_PATH

+ const ES_MUTE_INVERSION_TYPE_PROCESS

+ const ES_MUTE_INVERSION_TYPE_TARGET_PATH

+ func (e EsMuteInversionType) String() string

+ type EsMutePathType int32

+ const ES_MUTE_PATH_TYPE_LITERAL

+ const ES_MUTE_PATH_TYPE_PREFIX

+ const ES_MUTE_PATH_TYPE_TARGET_LITERAL

+ const ES_MUTE_PATH_TYPE_TARGET_PREFIX

+ func (e EsMutePathType) String() string

+ type EsNewClientResult int32

+ const ES_NEW_CLIENT_RESULT_ERR_INTERNAL

+ const ES_NEW_CLIENT_RESULT_ERR_INVALID_ARGUMENT

+ const ES_NEW_CLIENT_RESULT_ERR_NOT_ENTITLED

+ const ES_NEW_CLIENT_RESULT_ERR_NOT_PERMITTED

+ const ES_NEW_CLIENT_RESULT_ERR_NOT_PRIVILEGED

+ const ES_NEW_CLIENT_RESULT_ERR_TOO_MANY_CLIENTS

+ const ES_NEW_CLIENT_RESULT_SUCCESS

+ func (e EsNewClientResult) String() string

+ type EsOdAccountType int32

+ const ES_OD_ACCOUNT_TYPE_COMPUTER

+ const ES_OD_ACCOUNT_TYPE_USER

+ func (e EsOdAccountType) String() string

+ type EsOdMemberType int32

+ const ES_OD_MEMBER_TYPE_GROUP_UUID

+ const ES_OD_MEMBER_TYPE_USER_NAME

+ const ES_OD_MEMBER_TYPE_USER_UUID

+ func (e EsOdMemberType) String() string

+ type EsOdRecordType int32

+ const ES_OD_RECORD_TYPE_GROUP

+ const ES_OD_RECORD_TYPE_USER

+ func (e EsOdRecordType) String() string

+ type EsOpenssh int32

+ const ES_OPENSSH_AUTH_FAIL_GSSAPI

+ const ES_OPENSSH_AUTH_FAIL_HOSTBASED

+ const ES_OPENSSH_AUTH_FAIL_KBDINT

+ const ES_OPENSSH_AUTH_FAIL_NONE

+ const ES_OPENSSH_AUTH_FAIL_PASSWD

+ const ES_OPENSSH_AUTH_FAIL_PUBKEY

+ const ES_OPENSSH_AUTH_SUCCESS

+ const ES_OPENSSH_INVALID_USER

+ const ES_OPENSSH_LOGIN_EXCEED_MAXTRIES

+ const ES_OPENSSH_LOGIN_ROOT_DENIED

+ func (e EsOpenssh) String() string

+ type EsProcCheckType int32

+ const ES_PROC_CHECK_TYPE_DIRTYCONTROL

+ const ES_PROC_CHECK_TYPE_KERNMSGBUF

+ const ES_PROC_CHECK_TYPE_LISTPIDS

+ const ES_PROC_CHECK_TYPE_PIDFDINFO

+ const ES_PROC_CHECK_TYPE_PIDFILEPORTINFO

+ const ES_PROC_CHECK_TYPE_PIDINFO

+ const ES_PROC_CHECK_TYPE_PIDRUSAGE

+ const ES_PROC_CHECK_TYPE_SETCONTROL

+ const ES_PROC_CHECK_TYPE_TERMINATE

+ const ES_PROC_CHECK_TYPE_UDATA_INFO

+ func (e EsProcCheckType) String() string

+ type EsProcSuspendResumeType int32

+ const ES_PROC_SUSPEND_RESUME_TYPE_RESUME

+ const ES_PROC_SUSPEND_RESUME_TYPE_SHUTDOWN_SOCKETS

+ const ES_PROC_SUSPEND_RESUME_TYPE_SUSPEND

+ func (e EsProcSuspendResumeType) String() string

+ type EsProfileSource int32

+ const ES_PROFILE_SOURCE_INSTALL

+ const ES_PROFILE_SOURCE_MANAGED

+ func (e EsProfileSource) String() string

+ type EsRespondResult int32

+ const ES_RESPOND_RESULT_ERR_DUPLICATE_RESPONSE

+ const ES_RESPOND_RESULT_ERR_EVENT_TYPE

+ const ES_RESPOND_RESULT_ERR_INTERNAL

+ const ES_RESPOND_RESULT_ERR_INVALID_ARGUMENT

+ const ES_RESPOND_RESULT_NOT_FOUND

+ const ES_RESPOND_RESULT_SUCCESS

+ func (e EsRespondResult) String() string

+ type EsResultType int32

+ const ES_RESULT_TYPE_AUTH

+ const ES_RESULT_TYPE_FLAGS

+ func (e EsResultType) String() string

+ type EsReturn int32

+ const ES_RETURN_ERROR

+ const ES_RETURN_SUCCESS

+ func (e EsReturn) String() string

+ type EsSudoPluginType int32

+ const ES_SUDO_PLUGIN_TYPE_APPROVAL

+ const ES_SUDO_PLUGIN_TYPE_AUDIT

+ const ES_SUDO_PLUGIN_TYPE_FRONT_END

+ const ES_SUDO_PLUGIN_TYPE_IO

+ const ES_SUDO_PLUGIN_TYPE_POLICY

+ const ES_SUDO_PLUGIN_TYPE_UNKNOWN

+ func (e EsSudoPluginType) String() string

+ type EsTccAuthorizationReason int32

+ const ES_TCC_AUTHORIZATION_REASON_APP_TYPE_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_ENTITLED

+ const ES_TCC_AUTHORIZATION_REASON_ERROR

+ const ES_TCC_AUTHORIZATION_REASON_MDM_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_MISSING_USAGE_STRING

+ const ES_TCC_AUTHORIZATION_REASON_NONE

+ const ES_TCC_AUTHORIZATION_REASON_PREFLIGHT_UNKNOWN

+ const ES_TCC_AUTHORIZATION_REASON_PROMPT_CANCEL

+ const ES_TCC_AUTHORIZATION_REASON_PROMPT_TIMEOUT

+ const ES_TCC_AUTHORIZATION_REASON_SERVICE_OVERRIDE_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_SERVICE_POLICY

+ const ES_TCC_AUTHORIZATION_REASON_SYSTEM_SET

+ const ES_TCC_AUTHORIZATION_REASON_USER_CONSENT

+ const ES_TCC_AUTHORIZATION_REASON_USER_SET

+ func (e EsTccAuthorizationReason) String() string

+ type EsTccAuthorizationRight int32

+ const ES_TCC_AUTHORIZATION_RIGHT_ADD_MODIFY_ADDED

+ const ES_TCC_AUTHORIZATION_RIGHT_ALLOWED

+ const ES_TCC_AUTHORIZATION_RIGHT_DENIED

+ const ES_TCC_AUTHORIZATION_RIGHT_LEARN_MORE

+ const ES_TCC_AUTHORIZATION_RIGHT_LIMITED

+ const ES_TCC_AUTHORIZATION_RIGHT_SESSION_PID

+ const ES_TCC_AUTHORIZATION_RIGHT_UNKNOWN

+ func (e EsTccAuthorizationRight) String() string

+ type EsTccEventType int32

+ const ES_TCC_EVENT_TYPE_CREATE

+ const ES_TCC_EVENT_TYPE_DELETE

+ const ES_TCC_EVENT_TYPE_MODIFY

+ const ES_TCC_EVENT_TYPE_UNKNOWN

+ func (e EsTccEventType) String() string

+ type EsTccIdentityType int32

+ const ES_TCC_IDENTITY_TYPE_BUNDLE_ID

+ const ES_TCC_IDENTITY_TYPE_EXECUTABLE_PATH

+ const ES_TCC_IDENTITY_TYPE_FILE_PROVIDER_DOMAIN_ID

+ const ES_TCC_IDENTITY_TYPE_POLICY_ID

+ func (e EsTccIdentityType) String() string

+ type EsTouchidMode int32

+ const ES_TOUCHID_MODE_IDENTIFICATION

+ const ES_TOUCHID_MODE_VERIFICATION

+ func (e EsTouchidMode) String() string

+ type EsXPCDomainType int32

+ const ES_XPC_DOMAIN_TYPE_GUI

+ const ES_XPC_DOMAIN_TYPE_MANAGER

+ const ES_XPC_DOMAIN_TYPE_PID

+ const ES_XPC_DOMAIN_TYPE_PORT

+ const ES_XPC_DOMAIN_TYPE_SESSION

+ const ES_XPC_DOMAIN_TYPE_SYSTEM

+ const ES_XPC_DOMAIN_TYPE_USER

+ const ES_XPC_DOMAIN_TYPE_USER_LOGIN

+ func (e EsXPCDomainType) String() string

type Es_authorization_result_t

+ Granted bool

+ Right_name Es_string_token_t

+ Rule_class unsafe.Pointer

type Es_btm_launch_item_t

+ App_url Es_string_token_t

+ Item_type unsafe.Pointer

+ Item_url Es_string_token_t

+ Legacy bool

+ Managed bool

+ Uid uint32

type Es_event_access_t

+ Mode int32

+ Reserved uint8

+ Target *Es_file_t

type Es_event_authentication_auto_unlock_t

+ Type unsafe.Pointer

+ Username Es_string_token_t

type Es_event_authentication_od_t

+ Db_path Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type Es_string_token_t

type Es_event_authentication_t

+ Auto_unlock *Es_event_authentication_auto_unlock_t

+ Data [8]byte

+ Od *Es_event_authentication_od_t

+ Success bool

+ Token *Es_event_authentication_token_t

+ Touchid *Es_event_authentication_touchid_t

+ Type unsafe.Pointer

type Es_event_authentication_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Kerberos_principal Es_string_token_t

+ Pubkey_hash Es_string_token_t

+ Token_id Es_string_token_t

type Es_event_authentication_touchid_t

+ Has_uid bool

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Touchid_mode unsafe.Pointer

+ Uid [4]byte

type Es_event_authorization_judgement_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Petitioner *Es_process_t

+ Petitioner_token [32]byte

+ Result_count uintptr

+ Results *Es_authorization_result_t

+ Return_code int

type Es_event_authorization_petition_t

+ Flags uint32

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Petitioner *Es_process_t

+ Petitioner_token [32]byte

+ Right_count uintptr

+ Rights *Es_string_token_t

type Es_event_btm_launch_item_add_t

+ App *Es_process_t

+ App_token *[32]byte

+ Executable_path Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token *[32]byte

+ Item *Es_btm_launch_item_t

type Es_event_btm_launch_item_remove_t

+ App *Es_process_t

+ App_token *[32]byte

+ Instigator *Es_process_t

+ Instigator_token *[32]byte

+ Item *Es_btm_launch_item_t

type Es_event_chdir_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_chroot_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_clone_t

+ Reserved uint8

+ Source *Es_file_t

+ Target_dir *Es_file_t

+ Target_name Es_string_token_t

type Es_event_close_t

+ Modified bool

+ Reserved uint8

+ Target *Es_file_t

+ Was_mapped_writable bool

type Es_event_copyfile_t

+ Flags int32

+ Mode uint16

+ Reserved uint8

+ Source *Es_file_t

+ Target_dir *Es_file_t

+ Target_file *Es_file_t

+ Target_name Es_string_token_t

type Es_event_create_t

+ Acl unsafe.Pointer

+ Destination [32]byte

+ Destination_type EsDestinationType

+ Dir *Es_file_t

+ Existing_file *Es_file_t

+ Filename Es_string_token_t

+ Mode uint16

+ New_path unsafe.Pointer

+ Reserved uint8

+ Reserved2 uint8

type Es_event_cs_invalidated_t

+ Reserved uint8

type Es_event_deleteextattr_t

+ Extattr Es_string_token_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_dup_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_exchangedata_t

+ File1 *Es_file_t

+ File2 *Es_file_t

+ Reserved uint8

type Es_event_exec_t

+ Cwd *Es_file_t

+ Dyld_exec_path Es_string_token_t

+ Image_cpusubtype int32

+ Image_cputype int32

+ Last_fd int

+ Reserved uint8

+ Script *Es_file_t

+ Target *Es_process_t

type Es_event_exit_t

+ Reserved uint8

+ Stat int

type Es_event_fcntl_t

+ Cmd int32

+ Reserved uint8

+ Target *Es_file_t

type Es_event_file_provider_materialize_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Reserved uint8

+ Source *Es_file_t

+ Target *Es_file_t

type Es_event_file_provider_update_t

+ Reserved uint8

+ Source *Es_file_t

+ Target_path Es_string_token_t

type Es_event_fork_t

+ Child *Es_process_t

+ Reserved uint8

type Es_event_fsgetpath_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_gatekeeper_user_override_t

+ File [16]byte

+ File_path Es_string_token_t

+ File_type unsafe.Pointer

+ Sha256 *Es_sha256_t

+ Signing_info *Es_signed_file_info_t

type Es_event_get_task_inspect_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_get_task_name_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_get_task_read_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_get_task_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_getattrlist_t

+ Attrlist kernel.Attrlist

+ Reserved uint8

+ Target *Es_file_t

type Es_event_getextattr_t

+ Extattr Es_string_token_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_id_t

+ Reserved uint8

type Es_event_iokit_open_t

+ Parent_path Es_string_token_t

+ Parent_registry_id uint64

+ Reserved uint8

+ User_client_class Es_string_token_t

+ User_client_type uint32

type Es_event_kextload_t

+ Identifier Es_string_token_t

+ Reserved uint8

type Es_event_kextunload_t

+ Identifier Es_string_token_t

+ Reserved uint8

type Es_event_link_t

+ Reserved uint8

+ Source *Es_file_t

+ Target_dir *Es_file_t

+ Target_filename Es_string_token_t

type Es_event_listextattr_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_login_login_t

+ Failure_message Es_string_token_t

+ Has_uid bool

+ Success bool

+ Uid [4]byte

+ Username Es_string_token_t

type Es_event_login_logout_t

+ Uid uint32

+ Username Es_string_token_t

type Es_event_lookup_t

+ Relative_target Es_string_token_t

+ Reserved uint8

+ Source_dir *Es_file_t

type Es_event_lw_session_lock_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_lw_session_login_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_lw_session_logout_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_lw_session_unlock_t

+ Graphical_session_id Es_graphical_session_id_t

+ Username Es_string_token_t

type Es_event_mmap_t

+ File_pos uint64

+ Flags int32

+ Max_protection int32

+ Protection int32

+ Reserved uint8

+ Source *Es_file_t

type Es_event_mount_t

+ Disposition unsafe.Pointer

+ Reserved uint8

+ Statfs objectivec.IObject

type Es_event_mprotect_t

+ Address kernel.User_addr_t

+ Protection int32

+ Reserved uint8

+ Size kernel.User_size_t

type Es_event_od_attribute_set_t

+ Attribute_name Es_string_token_t

+ Attribute_value_count uintptr

+ Attribute_values *Es_string_token_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type unsafe.Pointer

type Es_event_od_attribute_value_add_t

+ Attribute_name Es_string_token_t

+ Attribute_value Es_string_token_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type unsafe.Pointer

type Es_event_od_attribute_value_remove_t

+ Attribute_name Es_string_token_t

+ Attribute_value Es_string_token_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ Record_name Es_string_token_t

+ Record_type unsafe.Pointer

type Es_event_od_create_group_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

type Es_event_od_create_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_delete_group_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

type Es_event_od_delete_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_disable_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_enable_user_t

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

+ User_name Es_string_token_t

type Es_event_od_group_add_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Member *Es_od_member_id_t

+ Node_name Es_string_token_t

type Es_event_od_group_remove_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Member *Es_od_member_id_t

+ Node_name Es_string_token_t

type Es_event_od_group_set_t

+ Db_path Es_string_token_t

+ Error_code int

+ Group_name Es_string_token_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Members *Es_od_member_id_array_t

+ Node_name Es_string_token_t

type Es_event_od_modify_password_t

+ Account_name Es_string_token_t

+ Account_type unsafe.Pointer

+ Db_path Es_string_token_t

+ Error_code int

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Node_name Es_string_token_t

type Es_event_open_t

+ Fflag int32

+ File *Es_file_t

+ Reserved uint8

type Es_event_openssh_login_t

+ Has_uid bool

+ Result_type unsafe.Pointer

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Success bool

+ Uid [4]byte

+ Username Es_string_token_t

type Es_event_openssh_logout_t

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Uid uint32

+ Username Es_string_token_t

type Es_event_proc_check_t

+ Flavor int

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_proc_suspend_resume_t

+ Reserved uint8

+ Target *Es_process_t

+ Type unsafe.Pointer

type Es_event_profile_add_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Is_update bool

+ Profile *Es_profile_t

type Es_event_profile_remove_t

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Profile *Es_profile_t

type Es_event_pty_close_t

+ Dev int32

+ Reserved uint8

type Es_event_pty_grant_t

+ Dev int32

+ Reserved uint8

type Es_event_readdir_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_readlink_t

+ Reserved uint8

+ Source *Es_file_t

type Es_event_remote_thread_create_t

+ Reserved uint8

+ Target *Es_process_t

+ Thread_state *Es_thread_state_t

type Es_event_remount_t

+ Disposition unsafe.Pointer

+ Remount_flags uint64

+ Reserved uint8

+ Statfs objectivec.IObject

type Es_event_rename_t

+ Destination [24]byte

+ Destination_type EsDestinationType

+ Dir *Es_file_t

+ Existing_file *Es_file_t

+ Filename Es_string_token_t

+ New_path unsafe.Pointer

+ Reserved uint8

+ Source *Es_file_t

type Es_event_screensharing_attach_t

+ Authentication_type Es_string_token_t

+ Authentication_username Es_string_token_t

+ Existing_session bool

+ Graphical_session_id Es_graphical_session_id_t

+ Session_username Es_string_token_t

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Success bool

+ Viewer_appleid Es_string_token_t

type Es_event_screensharing_detach_t

+ Graphical_session_id Es_graphical_session_id_t

+ Source_address Es_string_token_t

+ Source_address_type unsafe.Pointer

+ Viewer_appleid Es_string_token_t

type Es_event_searchfs_t

+ Attrlist kernel.Attrlist

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setacl_t

+ Acl [8]byte

+ Reserved uint8

+ Set unsafe.Pointer

+ Set_or_clear unsafe.Pointer

+ Target *Es_file_t

type Es_event_setattrlist_t

+ Attrlist kernel.Attrlist

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setegid_t

+ Egid uint32

+ Reserved uint8

type Es_event_seteuid_t

+ Euid uint32

+ Reserved uint8

type Es_event_setextattr_t

+ Extattr Es_string_token_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setflags_t

+ Flags uint32

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setgid_t

+ Gid uint32

+ Reserved uint8

type Es_event_setmode_t

+ Mode uint16

+ Reserved uint8

+ Target *Es_file_t

type Es_event_setowner_t

+ Gid uint32

+ Reserved uint8

+ Target *Es_file_t

+ Uid uint32

type Es_event_setregid_t

+ Egid uint32

+ Reserved uint8

+ Rgid uint32

type Es_event_setreuid_t

+ Euid uint32

+ Reserved uint8

+ Ruid uint32

type Es_event_settime_t

+ Reserved uint8

type Es_event_setuid_t

+ Reserved uint8

+ Uid uint32

type Es_event_signal_t

+ Instigator *Es_process_t

+ Reserved uint8

+ Sig int

+ Target *Es_process_t

type Es_event_stat_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_su_t

+ Argc uintptr

+ Argv *Es_string_token_t

+ Env *Es_string_token_t

+ Env_count uintptr

+ Failure_message Es_string_token_t

+ From_uid uint32

+ From_username Es_string_token_t

+ Has_to_uid bool

+ Shell Es_string_token_t

+ Success bool

+ To_uid [4]byte

+ To_username Es_string_token_t

+ Uid uint32

type Es_event_sudo_t

+ Command Es_string_token_t

+ From_uid [4]byte

+ From_username Es_string_token_t

+ Has_from_uid bool

+ Has_to_uid bool

+ Reject_info *Es_sudo_reject_info_t

+ Success bool

+ To_uid [4]byte

+ To_username Es_string_token_t

+ Uid uint32

type Es_event_tcc_modify_t

+ Identity Es_string_token_t

+ Identity_type unsafe.Pointer

+ Instigator *Es_process_t

+ Instigator_token [32]byte

+ Reason unsafe.Pointer

+ Responsible *Es_process_t

+ Responsible_token *[32]byte

+ Right unsafe.Pointer

+ Service Es_string_token_t

+ Update_type unsafe.Pointer

type Es_event_trace_t

+ Reserved uint8

+ Target *Es_process_t

type Es_event_truncate_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_uipc_bind_t

+ Dir *Es_file_t

+ Filename Es_string_token_t

+ Mode uint16

+ Reserved uint8

type Es_event_uipc_connect_t

+ Domain int

+ File *Es_file_t

+ Protocol int

+ Reserved uint8

+ Type int

type Es_event_unlink_t

+ Parent_dir *Es_file_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_unmount_t

+ Reserved uint8

+ Statfs objectivec.IObject

type Es_event_utimes_t

+ Atime syscall.Timespec

+ Mtime syscall.Timespec

+ Reserved uint8

+ Target *Es_file_t

type Es_event_write_t

+ Reserved uint8

+ Target *Es_file_t

type Es_event_xp_malware_detected_t

+ Detected_executable Es_string_token_t

+ Detected_path Es_string_token_t

+ Incident_identifier Es_string_token_t

+ Malware_identifier Es_string_token_t

+ Signature_version Es_string_token_t

type Es_event_xp_malware_remediated_t

+ Action_type Es_string_token_t

+ Incident_identifier Es_string_token_t

+ Malware_identifier Es_string_token_t

+ Remediated_path Es_string_token_t

+ Remediated_process_audit_token *[32]byte

+ Result_description Es_string_token_t

+ Signature_version Es_string_token_t

+ Success bool

type Es_event_xpc_connect_t

+ Service_domain_type unsafe.Pointer

+ Service_name Es_string_token_t

+ type Es_events_t [104]byte

+ func (u *Es_events_t) Access() *Es_event_access_t

+ func (u *Es_events_t) Authentication() *Es_event_authentication_t

+ func (u *Es_events_t) Authorization_judgement() *Es_event_authorization_judgement_t

+ func (u *Es_events_t) Authorization_petition() *Es_event_authorization_petition_t

+ func (u *Es_events_t) Btm_launch_item_add() *Es_event_btm_launch_item_add_t

+ func (u *Es_events_t) Btm_launch_item_remove() *Es_event_btm_launch_item_remove_t

+ func (u *Es_events_t) Chdir() *Es_event_chdir_t

+ func (u *Es_events_t) Chroot() *Es_event_chroot_t

+ func (u *Es_events_t) Clone() *Es_event_clone_t

+ func (u *Es_events_t) Close() *Es_event_close_t

+ func (u *Es_events_t) Copyfile() *Es_event_copyfile_t

+ func (u *Es_events_t) Create() *Es_event_create_t

+ func (u *Es_events_t) Cs_invalidated() *Es_event_cs_invalidated_t

+ func (u *Es_events_t) Deleteextattr() *Es_event_deleteextattr_t

+ func (u *Es_events_t) Dup() *Es_event_dup_t

+ func (u *Es_events_t) Exchangedata() *Es_event_exchangedata_t

+ func (u *Es_events_t) Exec() *Es_event_exec_t

+ func (u *Es_events_t) Exit() *Es_event_exit_t

+ func (u *Es_events_t) Fcntl() *Es_event_fcntl_t

+ func (u *Es_events_t) File_provider_materialize() *Es_event_file_provider_materialize_t

+ func (u *Es_events_t) File_provider_update() *Es_event_file_provider_update_t

+ func (u *Es_events_t) Fork() *Es_event_fork_t

+ func (u *Es_events_t) Fsgetpath() *Es_event_fsgetpath_t

+ func (u *Es_events_t) Gatekeeper_user_override() *Es_event_gatekeeper_user_override_t

+ func (u *Es_events_t) Get_task() *Es_event_get_task_t

+ func (u *Es_events_t) Get_task_inspect() *Es_event_get_task_inspect_t

+ func (u *Es_events_t) Get_task_name() *Es_event_get_task_name_t

+ func (u *Es_events_t) Get_task_read() *Es_event_get_task_read_t

+ func (u *Es_events_t) Getattrlist() *Es_event_getattrlist_t

+ func (u *Es_events_t) Getextattr() *Es_event_getextattr_t

+ func (u *Es_events_t) Iokit_open() *Es_event_iokit_open_t

+ func (u *Es_events_t) Kextload() *Es_event_kextload_t

+ func (u *Es_events_t) Kextunload() *Es_event_kextunload_t

+ func (u *Es_events_t) Link() *Es_event_link_t

+ func (u *Es_events_t) Listextattr() *Es_event_listextattr_t

+ func (u *Es_events_t) Login_login() *Es_event_login_login_t

+ func (u *Es_events_t) Login_logout() *Es_event_login_logout_t

+ func (u *Es_events_t) Lookup() *Es_event_lookup_t

+ func (u *Es_events_t) Lw_session_lock() *Es_event_lw_session_lock_t

+ func (u *Es_events_t) Lw_session_login() *Es_event_lw_session_login_t

+ func (u *Es_events_t) Lw_session_logout() *Es_event_lw_session_logout_t

+ func (u *Es_events_t) Lw_session_unlock() *Es_event_lw_session_unlock_t

+ func (u *Es_events_t) Mmap() *Es_event_mmap_t

+ func (u *Es_events_t) Mount() *Es_event_mount_t

+ func (u *Es_events_t) Mprotect() *Es_event_mprotect_t

+ func (u *Es_events_t) Od_attribute_set() *Es_event_od_attribute_set_t

+ func (u *Es_events_t) Od_attribute_value_add() *Es_event_od_attribute_value_add_t

+ func (u *Es_events_t) Od_attribute_value_remove() *Es_event_od_attribute_value_remove_t

+ func (u *Es_events_t) Od_create_group() *Es_event_od_create_group_t

+ func (u *Es_events_t) Od_create_user() *Es_event_od_create_user_t

+ func (u *Es_events_t) Od_delete_group() *Es_event_od_delete_group_t

+ func (u *Es_events_t) Od_delete_user() *Es_event_od_delete_user_t

+ func (u *Es_events_t) Od_disable_user() *Es_event_od_disable_user_t

+ func (u *Es_events_t) Od_enable_user() *Es_event_od_enable_user_t

+ func (u *Es_events_t) Od_group_add() *Es_event_od_group_add_t

+ func (u *Es_events_t) Od_group_remove() *Es_event_od_group_remove_t

+ func (u *Es_events_t) Od_group_set() *Es_event_od_group_set_t

+ func (u *Es_events_t) Od_modify_password() *Es_event_od_modify_password_t

+ func (u *Es_events_t) Open() *Es_event_open_t

+ func (u *Es_events_t) Openssh_login() *Es_event_openssh_login_t

+ func (u *Es_events_t) Openssh_logout() *Es_event_openssh_logout_t

+ func (u *Es_events_t) Proc_check() *Es_event_proc_check_t

+ func (u *Es_events_t) Proc_suspend_resume() *Es_event_proc_suspend_resume_t

+ func (u *Es_events_t) Profile_add() *Es_event_profile_add_t

+ func (u *Es_events_t) Profile_remove() *Es_event_profile_remove_t

+ func (u *Es_events_t) Pty_close() *Es_event_pty_close_t

+ func (u *Es_events_t) Pty_grant() *Es_event_pty_grant_t

+ func (u *Es_events_t) Readdir() *Es_event_readdir_t

+ func (u *Es_events_t) Readlink() *Es_event_readlink_t

+ func (u *Es_events_t) Remote_thread_create() *Es_event_remote_thread_create_t

+ func (u *Es_events_t) Remount() *Es_event_remount_t

+ func (u *Es_events_t) Rename() *Es_event_rename_t

+ func (u *Es_events_t) Screensharing_attach() *Es_event_screensharing_attach_t

+ func (u *Es_events_t) Screensharing_detach() *Es_event_screensharing_detach_t

+ func (u *Es_events_t) Searchfs() *Es_event_searchfs_t

+ func (u *Es_events_t) Setacl() *Es_event_setacl_t

+ func (u *Es_events_t) Setattrlist() *Es_event_setattrlist_t

+ func (u *Es_events_t) Setegid() *Es_event_setegid_t

+ func (u *Es_events_t) Seteuid() *Es_event_seteuid_t

+ func (u *Es_events_t) Setextattr() *Es_event_setextattr_t

+ func (u *Es_events_t) Setflags() *Es_event_setflags_t

+ func (u *Es_events_t) Setgid() *Es_event_setgid_t

+ func (u *Es_events_t) Setmode() *Es_event_setmode_t

+ func (u *Es_events_t) Setowner() *Es_event_setowner_t

+ func (u *Es_events_t) Setregid() *Es_event_setregid_t

+ func (u *Es_events_t) Setreuid() *Es_event_setreuid_t

+ func (u *Es_events_t) Settime() *Es_event_settime_t

+ func (u *Es_events_t) Setuid() *Es_event_setuid_t

+ func (u *Es_events_t) Signal() *Es_event_signal_t

+ func (u *Es_events_t) Stat() *Es_event_stat_t

+ func (u *Es_events_t) Su() *Es_event_su_t

+ func (u *Es_events_t) Sudo() *Es_event_sudo_t

+ func (u *Es_events_t) Tcc_modify() *Es_event_tcc_modify_t

+ func (u *Es_events_t) Trace() *Es_event_trace_t

+ func (u *Es_events_t) Truncate() *Es_event_truncate_t

+ func (u *Es_events_t) Uipc_bind() *Es_event_uipc_bind_t

+ func (u *Es_events_t) Uipc_connect() *Es_event_uipc_connect_t

+ func (u *Es_events_t) Unlink() *Es_event_unlink_t

+ func (u *Es_events_t) Unmount() *Es_event_unmount_t

+ func (u *Es_events_t) Utimes() *Es_event_utimes_t

+ func (u *Es_events_t) Write() *Es_event_write_t

+ func (u *Es_events_t) Xp_malware_detected() *Es_event_xp_malware_detected_t

+ func (u *Es_events_t) Xp_malware_remediated() *Es_event_xp_malware_remediated_t

+ func (u *Es_events_t) Xpc_connect() *Es_event_xpc_connect_t

type Es_fd_t

+ Fd int32

+ Fdtype uint32

+ Pipe unsafe.Pointer

+ Pipe_id uint64

type Es_file_t

+ Path Es_string_token_t

+ Path_truncated bool

+ Stat kernel.Stat

type Es_message_t

+ Action [36]byte

+ Action_type EsActionType

+ Auth Es_event_id_t

+ Deadline uint64

+ Event Es_events_t

+ Event_type EsEventType

+ Global_seq_num uint64

+ Mach_time uint64

+ Notify Es_result_t

+ Opaque uint64

+ Process *Es_process_t

+ Seq_num uint64

+ Thread *Es_thread_t

+ Time syscall.Timespec

+ Version uint32

type Es_muted_path_t

+ Event_count uintptr

+ Events *EsEventType

+ Path Es_string_token_t

+ Type EsMutePathType

type Es_muted_paths_t

+ Count uintptr

+ Paths *Es_muted_path_t

type Es_muted_process_t

+ Audit_token [32]byte

+ Event_count uintptr

+ Events *EsEventType

type Es_muted_processes_t

+ Count uintptr

+ Processes *Es_muted_process_t

type Es_od_member_id_array_t

+ Member_array [8]byte

+ Member_count uintptr

+ Member_type unsafe.Pointer

+ Names *Es_string_token_t

+ Uuids unsafe.Pointer

type Es_od_member_id_t

+ Member_type unsafe.Pointer

+ Member_value [16]byte

+ Name Es_string_token_t

+ Uuid [16]byte

type Es_process_t

+ Audit_token [32]byte

+ Cdhash Es_cdhash_t

+ Codesigning_flags uint32

+ Cs_validation_category unsafe.Pointer

+ Executable *Es_file_t

+ Group_id int32

+ Is_es_client bool

+ Is_platform_binary bool

+ Original_ppid int32

+ Parent_audit_token [32]byte

+ Ppid int32

+ Responsible_audit_token [32]byte

+ Session_id int32

+ Signing_id Es_string_token_t

+ Start_time kernel.Timeval

+ Team_id Es_string_token_t

+ Tty *Es_file_t

type Es_profile_t

+ Display_name Es_string_token_t

+ Identifier Es_string_token_t

+ Install_source unsafe.Pointer

+ Organization Es_string_token_t

+ Scope Es_string_token_t

+ Uuid Es_string_token_t

type Es_result_t

+ Auth unsafe.Pointer

+ Flags uint32

+ Reserved uint8

+ Result [32]byte

+ Result_type EsResultType

type Es_signed_file_info_t

+ Cdhash Es_cdhash_t

+ Signing_id Es_string_token_t

+ Team_id Es_string_token_t

type Es_string_token_t

+ Data *byte

+ Length uintptr

type Es_sudo_reject_info_t

+ Failure_message Es_string_token_t

+ Plugin_name Es_string_token_t

+ Plugin_type unsafe.Pointer

type Es_thread_state_t

+ Flavor int

+ State Es_token_t

type Es_thread_t

+ Thread_id uint64

type Es_token_t

+ Data *uint8

+ Size uintptr

v0.5.0

Mar 29, 2026

Changes in this version

+ func Es_clear_cache(client *Es_client_t) unsafe.Pointer

+ func Es_delete_client(client *Es_client_t) unsafe.Pointer

+ func Es_exec_arg_count(event *Es_event_exec_t) uint32

+ func Es_exec_env_count(event *Es_event_exec_t) uint32

+ func Es_exec_fd_count(event *Es_event_exec_t) uint32

+ func Es_invert_muting(client *Es_client_t, mute_type unsafe.Pointer) unsafe.Pointer

+ func Es_mute_path(client *Es_client_t, path string, type_ unsafe.Pointer) unsafe.Pointer

+ func Es_mute_path_events(client *Es_client_t, path string, type_ unsafe.Pointer, events uintptr, ...) unsafe.Pointer

+ func Es_mute_process(client *Es_client_t, audit_token uintptr) unsafe.Pointer

+ func Es_mute_process_events(client *Es_client_t, audit_token uintptr, events uintptr, event_count uintptr) unsafe.Pointer

+ func Es_muted_paths_events(client *Es_client_t, muted_paths *Es_muted_paths_t) unsafe.Pointer

+ func Es_muted_processes_events(client *Es_client_t, muted_processes *Es_muted_processes_t) unsafe.Pointer

+ func Es_muting_inverted(client *Es_client_t, mute_type unsafe.Pointer) unsafe.Pointer

+ func Es_new_client(client *Es_client_t, handler Es_handler_block_t) unsafe.Pointer

+ func Es_release_message(msg *Es_message_t)

+ func Es_release_muted_paths(muted_paths *Es_muted_paths_t)

+ func Es_release_muted_processes(muted_processes *Es_muted_processes_t)

+ func Es_respond_auth_result(client *Es_client_t, message *Es_message_t, result unsafe.Pointer, cache bool) unsafe.Pointer

+ func Es_respond_flags_result(client *Es_client_t, message *Es_message_t, authorized_flags uint32, ...) unsafe.Pointer

+ func Es_retain_message(msg *Es_message_t)

+ func Es_subscribe(client *Es_client_t, events uintptr, event_count uint32) unsafe.Pointer

+ func Es_subscriptions(client *Es_client_t, count *uintptr, subscriptions uintptr) unsafe.Pointer

+ func Es_unmute_all_paths(client *Es_client_t) unsafe.Pointer

+ func Es_unmute_all_target_paths(client *Es_client_t) unsafe.Pointer

+ func Es_unmute_path(client *Es_client_t, path string, type_ unsafe.Pointer) unsafe.Pointer

+ func Es_unmute_path_events(client *Es_client_t, path string, type_ unsafe.Pointer, events uintptr, ...) unsafe.Pointer

+ func Es_unmute_process(client *Es_client_t, audit_token uintptr) unsafe.Pointer

+ func Es_unmute_process_events(client *Es_client_t, audit_token uintptr, events uintptr, event_count uintptr) unsafe.Pointer

+ func Es_unsubscribe(client *Es_client_t, events uintptr, event_count uint32) unsafe.Pointer

+ func Es_unsubscribe_all(client *Es_client_t) unsafe.Pointer

+ type Acl struct

+ type Cwd struct

+ type Es_authorization_result_t struct

+ type Es_btm_launch_item_t struct

+ type Es_cdhash_t = unsafe.Pointer

+ type Es_client_t = unsafe.Pointer

+ type Es_event_access_t struct

+ type Es_event_authentication_auto_unlock_t struct

+ type Es_event_authentication_od_t struct

+ type Es_event_authentication_t struct

+ type Es_event_authentication_token_t struct

+ type Es_event_authentication_touchid_t struct

+ type Es_event_authorization_judgement_t struct

+ type Es_event_authorization_petition_t struct

+ type Es_event_btm_launch_item_add_t struct

+ type Es_event_btm_launch_item_remove_t struct

+ type Es_event_chdir_t struct

+ type Es_event_chroot_t struct

+ type Es_event_clone_t struct

+ type Es_event_close_t struct

+ type Es_event_copyfile_t struct

+ type Es_event_create_t struct

+ type Es_event_cs_invalidated_t struct

+ type Es_event_deleteextattr_t struct

+ type Es_event_dup_t struct

+ type Es_event_exchangedata_t struct

+ type Es_event_exec_t struct

+ type Es_event_exit_t struct

+ type Es_event_fcntl_t struct

+ type Es_event_file_provider_materialize_t struct

+ type Es_event_file_provider_update_t struct

+ type Es_event_fork_t struct

+ type Es_event_fsgetpath_t struct

+ type Es_event_gatekeeper_user_override_t struct

+ type Es_event_get_task_inspect_t struct

+ type Es_event_get_task_name_t struct

+ type Es_event_get_task_read_t struct

+ type Es_event_get_task_t struct

+ type Es_event_getattrlist_t struct

+ type Es_event_getextattr_t struct

+ type Es_event_id_t struct

+ type Es_event_iokit_open_t struct

+ type Es_event_kextload_t struct

+ type Es_event_kextunload_t struct

+ type Es_event_link_t struct

+ type Es_event_listextattr_t struct

+ type Es_event_login_login_t struct

+ type Es_event_login_logout_t struct

+ type Es_event_lookup_t struct

+ type Es_event_lw_session_lock_t struct

+ type Es_event_lw_session_login_t struct

+ type Es_event_lw_session_logout_t struct

+ type Es_event_lw_session_unlock_t struct

+ type Es_event_mmap_t struct

+ type Es_event_mount_t struct

+ type Es_event_mprotect_t struct

+ type Es_event_od_attribute_set_t struct

+ type Es_event_od_attribute_value_add_t struct

+ type Es_event_od_attribute_value_remove_t struct

+ type Es_event_od_create_group_t struct

+ type Es_event_od_create_user_t struct

+ type Es_event_od_delete_group_t struct

+ type Es_event_od_delete_user_t struct

+ type Es_event_od_disable_user_t struct

+ type Es_event_od_enable_user_t struct

+ type Es_event_od_group_add_t struct

+ type Es_event_od_group_remove_t struct

+ type Es_event_od_group_set_t struct

+ type Es_event_od_modify_password_t struct

+ type Es_event_open_t struct

+ type Es_event_openssh_login_t struct

+ type Es_event_openssh_logout_t struct

+ type Es_event_proc_check_t struct

+ type Es_event_proc_suspend_resume_t struct

+ type Es_event_profile_add_t struct

+ type Es_event_profile_remove_t struct

+ type Es_event_pty_close_t struct

+ type Es_event_pty_grant_t struct

+ type Es_event_readdir_t struct

+ type Es_event_readlink_t struct

+ type Es_event_remote_thread_create_t struct

+ type Es_event_remount_t struct

+ type Es_event_rename_t struct

+ type Es_event_screensharing_attach_t struct

+ type Es_event_screensharing_detach_t struct

+ type Es_event_searchfs_t struct

+ type Es_event_setacl_t struct

+ type Es_event_setattrlist_t struct

+ type Es_event_setegid_t struct

+ type Es_event_seteuid_t struct

+ type Es_event_setextattr_t struct

+ type Es_event_setflags_t struct

+ type Es_event_setgid_t struct

+ type Es_event_setmode_t struct

+ type Es_event_setowner_t struct

+ type Es_event_setregid_t struct

+ type Es_event_setreuid_t struct

+ type Es_event_settime_t struct

+ type Es_event_setuid_t struct

+ type Es_event_signal_t struct

+ type Es_event_stat_t struct

+ type Es_event_su_t struct

+ type Es_event_sudo_t struct

+ type Es_event_tcc_modify_t struct

+ type Es_event_trace_t struct

+ type Es_event_truncate_t struct

+ type Es_event_uipc_bind_t struct

+ type Es_event_uipc_connect_t struct

+ type Es_event_unlink_t struct

+ type Es_event_unmount_t struct

+ type Es_event_utimes_t struct

+ type Es_event_write_t struct

+ type Es_event_xp_malware_detected_t struct

+ type Es_event_xp_malware_remediated_t struct

+ type Es_event_xpc_connect_t struct

+ type Es_fd_t struct

+ func Es_exec_fd(event *Es_event_exec_t, index uint32) *Es_fd_t

+ type Es_file_t struct

+ type Es_graphical_session_id_t = uint32

+ type Es_handler_block_t = func(objectivec.IObject, *Es_message_t)

+ type Es_message_t struct

+ type Es_muted_path_t struct

+ type Es_muted_paths_t struct

+ type Es_muted_process_t struct

+ type Es_muted_processes_t struct

+ type Es_od_member_id_array_t struct

+ type Es_od_member_id_t struct

+ type Es_process_t struct

+ type Es_profile_t struct

+ type Es_result_t struct

+ type Es_sha256_t = unsafe.Pointer

+ type Es_signed_file_info_t struct

+ type Es_statfs_t = unsafe.Pointer

+ type Es_string_token_t struct

+ func Es_exec_arg(event *Es_event_exec_t, index uint32) Es_string_token_t

+ func Es_exec_env(event *Es_event_exec_t, index uint32) Es_string_token_t

+ type Es_sudo_reject_info_t struct

+ type Es_thread_state_t struct

+ type Es_thread_t struct

+ type Es_token_t struct

+ type Image_cpusubtype struct

+ type Image_cputype struct

+ type Last_fd struct

+ type Pipe struct

+ type Reserved struct

+ type Script struct

+ type Was_mapped_writable struct

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL