Module crowdstrike_cloudproto::services

source · [−]

Expand description

High-level socket/client support for the main CloudProto services

Modules

lfo

High-level support for the LFO file server

ts

High-level support for the TS event server

Enums

CloudProtoMagic

Constants

DEFAULT_AID_HEX

The AID is a value assigned to clients by TS on connection. It is zero for new agents.

DEFAULT_BOOTID_HEX

Arbitrary machine-specific value generated on an isolated VM (from /proc/sys/kernel/random/boot_id)

DEFAULT_CID_HEX

This CID is NOT structurally valid, it would not be accepted by the sensor. It is also possible to use a structurally valid CID that belongs to no one, but all zeros are accepted by LFO.

DEFAULT_UNK0_HEX

Arbitrary machine-specific value generated on an isolated VM