Struct es_event_remote_thread_create_t

#[repr(C)]
pub struct es_event_remote_thread_create_t {
    pub target: ShouldNotBeNull<es_process_t>,
    pub thread_state: *mut es_thread_state_t,
    /* private fields */
}

Available on macOS and crate feature macos_11_0_0 only.

Notification that a process has attempted to create a thread in another process by calling one of the thread_create or thread_create_running MIG routines

This event type does not support caching (notify-only).

Fields

target: ShouldNotBeNull<es_process_t>

The process in which a new thread was created

thread_state: *mut es_thread_state_t

The new thread state in case of thread_create_running, NULL in case of thread_create

Implementations

impl es_event_remote_thread_create_t

Accessors for ShouldNotBeNull fields

pub unsafe fn target(&self) -> &es_process_t

Gives a references to the field while checking for null.

Safety

See ShouldNotBeNull safety requirements.

impl es_event_remote_thread_create_t

Accessors for *mut and *const fields

pub unsafe fn thread_state(&self) -> Option<&es_thread_state_t>

Helper to avoid the is_null() + deref every time.

Safety

The pointer must be valid (aligned & initialized) for a value of the expected type.