Module crowdstrike_cloudproto::services

source ·
Expand description

High-level socket/client support for the main CloudProto services

Modules

  • lfo
    High-level support for the LFO file server
  • ts
    High-level support for the TS event server

Enums

Constants

  • DEFAULT_AID_HEX
    The AID is a value assigned to clients by TS on connection. It is zero for new agents.
  • DEFAULT_BOOTID_HEX
    Arbitrary machine-specific value generated on an isolated VM (from /proc/sys/kernel/random/boot_id)
  • DEFAULT_CID_HEX
    This CID is NOT structurally valid, it would not be accepted by the sensor. It is also possible to use a structurally valid CID that belongs to no one, but all zeros are accepted by LFO.
  • DEFAULT_UNK0_HEX
    Arbitrary machine-specific value generated on an isolated VM