Enum endpointsecurity_rs::EsEventType

source · 
#[repr(u32)]
pub enum EsEventType {

Show 125 variants    AuthExec,
    AuthOpen,
    AuthKExtLoad,
    AuthMMap,
    AuthMProtect,
    AuthMount,
    AuthRename,
    AuthSignal,
    AuthUnlink,
    NotifyExec,
    NotifyOpen,
    NotifyFork,
    NotifyClose,
    NotifyCreate,
    NotifyExchangeData,
    NotifyExit,
    NotifyGetTask,
    NotifyKExtLoad,
    NotifyKExtUnload,
    NotifyLink,
    NotifyMMap,
    NotifyMProtect,
    NotifyMount,
    NotifyUnmount,
    NotifyIOKitOpen,
    NotifyRename,
    NOtifySetAttrList,
    NotifySetExtAttr,
    NotifySetFlags,
    NotifySetMode,
    NotifySetOwner,
    NotifySignal,
    NotifyUnlink,
    NotifyWrite,
    AuthFileProviderMaterialize,
    NotifyFileProviderMaterialize,
    AuthFileProviderUpdate,
    NotifyFileProviderUpdate,
    AuthReadLink,
    NotifyReadLink,
    AuthTruncate,
    NotifyTruncate,
    AuthLink,
    NotifyLookup,
    AuthCreate,
    AuthSetAttrList,
    AuthSetExtAttr,
    AuthSetFlags,
    AuthSetMode,
    AuthSetOwner,
    AuthChdir,
    NotifyChdir,
    AuthGetAttrList,
    NotifyGetAttrList,
    NotifyStat,
    NotifyAccess,
    AuthChroot,
    NotifyChroot,
    AuthUtimes,
    NotifyUtimes,
    AuthClone,
    NotifyClone,
    NotifyFcntl,
    AuthGetExtAttr,
    NotifyGetExtAttr,
    AuthListenExtAttr,
    NotifyListenExtAttr,
    AuthReadDir,
    NotifyReadDir,
    AuthDeleteExtAttr,
    NotifyDeleteExtAttr,
    AuthFsGetPath,
    NotifyFsGetPath,
    NotifyDup,
    AuthSetTime,
    NotifySetTime,
    NotifyUIPCBind,
    AuthUIPCBind,
    NotifyUIPCConnect,
    AuthUIPCConnect,
    AuthExchangeData,
    AuthSetACL,
    NotifySetACL,
    NotifyPTYGrant,
    NotifyPTYClose,
    AuthProcCheck,
    NotifyProcCheck,
    AuthGetTask,
    AuthSearchFs,
    NotifySearchFs,
    AuthFcntl,
    AuthIOKitOpen,
    AuthProcSuspendResume,
    NotifyProcSuspendResume,
    NotifyCsInvalidDate,
    NotifyGetTaskName,
    NotfiyTrace,
    NotifyRemoteThreadCreate,
    AuthRemount,
    NotifyRemount,
    AuthGetTaskRead,
    NotifyGetTaskRead,
    NotifyGetTaskInspect,
    NotifySetUid,
    NotifySetGid,
    NotifySetEUid,
    NotifySetEGuid,
    NotifySetREUid,
    NotifySetREGuid,
    AuthCopyFile,
    NotifyCopyFile,
    NotifyAuthentication,
    NotifyXPMalwareDetected,
    NotifyXPMalwareRemediated,
    NotifyLWSessionLogin,
    NotifyLWSessionLogout,
    NotifyLWSessionLock,
    NotifyLWSessionUnlock,
    NotifyScreenSharingAttach,
    AuthScreenSharingAttach,
    NotifyOpenSSHLogin,
    NotifyOpenSSHLogout,
    NotifyBTMLaunchItemAdd,
    NotifyBTMLaunchItemRemove,
    Last,

}
Expand description

All the events supported by Endpoint Security, see more

README: While all events are supported by the crate, only few have EsEventData types. If one of the event your interested in is missing, please send us a PR or open an issue on github.

Variants§

§

AuthExec

§

AuthOpen

§

AuthKExtLoad

§

AuthMMap

§

AuthMProtect

§

AuthMount

§

AuthRename

§

AuthSignal

§

NotifyExec

§

NotifyOpen

§

NotifyFork

§

NotifyClose

§

NotifyCreate

§

NotifyExchangeData

§

NotifyExit

§

NotifyGetTask

§

NotifyKExtLoad

§

NotifyKExtUnload

§

NotifyMMap

§

NotifyMProtect

§

NotifyMount

§

NotifyUnmount

§

NotifyIOKitOpen

§

NotifyRename

§

NOtifySetAttrList

§

NotifySetExtAttr

§

NotifySetFlags

§

NotifySetMode

§

NotifySetOwner

§

NotifySignal

§

NotifyWrite

§

AuthFileProviderMaterialize

§

NotifyFileProviderMaterialize

§

AuthFileProviderUpdate

§

NotifyFileProviderUpdate

§

AuthTruncate

§

NotifyTruncate

§

NotifyLookup

§

AuthCreate

§

AuthSetAttrList

§

AuthSetExtAttr

§

AuthSetFlags

§

AuthSetMode

§

AuthSetOwner

§

AuthChdir

§

NotifyChdir

§

AuthGetAttrList

§

NotifyGetAttrList

§

NotifyStat

§

NotifyAccess

§

AuthChroot

§

NotifyChroot

§

AuthUtimes

§

NotifyUtimes

§

AuthClone

§

NotifyClone

§

NotifyFcntl

§

AuthGetExtAttr

§

NotifyGetExtAttr

§

AuthListenExtAttr

§

NotifyListenExtAttr

§

AuthReadDir

§

NotifyReadDir

§

AuthDeleteExtAttr

§

NotifyDeleteExtAttr

§

AuthFsGetPath

§

NotifyFsGetPath

§

NotifyDup

§

AuthSetTime

§

NotifySetTime

§

NotifyUIPCBind

§

AuthUIPCBind

§

NotifyUIPCConnect

§

AuthUIPCConnect

§

AuthExchangeData

§

AuthSetACL

§

NotifySetACL

§

NotifyPTYGrant

§

NotifyPTYClose

§

AuthProcCheck

§

NotifyProcCheck

§

AuthGetTask

§

AuthSearchFs

§

NotifySearchFs

§

AuthFcntl

§

AuthIOKitOpen

§

AuthProcSuspendResume

§

NotifyProcSuspendResume

§

NotifyCsInvalidDate

§

NotifyGetTaskName

§

NotfiyTrace

§

NotifyRemoteThreadCreate

§

AuthRemount

§

NotifyRemount

§

AuthGetTaskRead

§

NotifyGetTaskRead

§

NotifyGetTaskInspect

§

NotifySetUid

§

NotifySetGid

§

NotifySetEUid

§

NotifySetEGuid

§

NotifySetREUid

§

NotifySetREGuid

§

AuthCopyFile

§

NotifyCopyFile

§

NotifyAuthentication

§

NotifyXPMalwareDetected

§

NotifyXPMalwareRemediated

§

NotifyLWSessionLogin

§

NotifyLWSessionLogout

§

NotifyLWSessionLock

§

NotifyLWSessionUnlock

§

NotifyScreenSharingAttach

§

AuthScreenSharingAttach

§

NotifyOpenSSHLogin

§

NotifyOpenSSHLogout

§

NotifyBTMLaunchItemAdd

§

NotifyBTMLaunchItemRemove

§

Last

Trait Implementations§

source§

impl Clone for EsEventType

source§

fn clone(&self) -> EsEventType

Returns a copy of the value. Read more
1.0.0 · source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
source§

impl Debug for EsEventType

source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
source§

impl PartialEq<EsEventType> for EsEventType

source§

fn eq(&self, other: &EsEventType) -> bool

This method tests for self and other values to be equal, and is used by ==.
1.0.0 · source§

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
source§

impl Copy for EsEventType

source§

impl Eq for EsEventType

source§

impl StructuralEq for EsEventType

source§

impl StructuralPartialEq for EsEventType

Auto Trait Implementations§

Blanket Implementations§

source§

impl<T> Any for Twhere T: 'static + ?Sized,

source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
source§

impl<T> Borrow<T> for Twhere T: ?Sized,

const: unstable · source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
source§

impl<T> BorrowMut<T> for Twhere T: ?Sized,

const: unstable · source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
source§

impl<T> From<T> for T

const: unstable · source§

fn from(t: T) -> T

Returns the argument unchanged.

source§

impl<T, U> Into<U> for Twhere U: From<T>,

const: unstable · source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T> Pointable for T

§

const ALIGN: usize = mem::align_of::<T>()

The alignment of pointer.
§

type Init = T

The type for initializers.
§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
source§

impl<T> ToOwned for Twhere T: Clone,

§

type Owned = T

The resulting type after obtaining ownership.
source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
source§

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

§

type Error = Infallible

The type returned in the event of a conversion error.
const: unstable · source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
source§

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
const: unstable · source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.