Struct DeletedExeInfo 

pub struct DeletedExeInfo {
    pub pid: u32,
    pub comm: String,
    pub exe_path: String,
    pub is_deleted: bool,
    pub is_suspicious: bool,
}

Information about a process whose executable may have been deleted.

Fields

pid: u32

Process ID.

comm: String

Process command name (task_struct.comm, max 16 chars).

exe_path: String

Executable path as read from memory (may include “(deleted)” suffix).

is_deleted: bool

Whether the executable path contains the “(deleted)” marker.

is_suspicious: bool

Whether this deleted executable is suspicious (not a known-benign case).

Trait Implementations

impl Clone for DeletedExeInfo

fn clone(&self) -> DeletedExeInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DeletedExeInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for DeletedExeInfo

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.