Struct Module 

#[non_exhaustive]
pub struct Module {
    pub base_address: Option<String>,
    pub file: Option<Box<File>>,
    pub function_invocation: Option<Box<FunctionInvocation>>,
    pub function_name: Option<String>,
    pub load_type: Option<String>,
    pub load_type_id: Option<i64>,
    pub start_address: Option<String>,
    pub type: Option<String>,
}

Module

The Module object describes the attributes of a module.

[] Category: | Name: module

Constraints:

• at_least_one: [load_type_id,function_name]

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

base_address: Option<String>

Base Address

The memory address where the module was loaded.

recommended

file: Option<Box<File>>

File

The module file object.

recommended

function_invocation: Option<Box<FunctionInvocation>>

Function Invocation

Details about the invocation of the function given in function_name.

optional

function_name: Option<String>

Function Name

The invoked function in the module. For load and unload events, this is the entry-point function of the module. The system calls the entry-point function whenever a process or thread loads or unloads the module.

recommended

load_type: Option<String>

Load Type

The load type, normalized to the caption of the load_type_id value. In the case of ‘Other’, it is defined by the event source.

optional

load_type_id: Option<i64>

Load Type ID

The normalized identifier for how the module was loaded in memory.

recommended

start_address: Option<String>

Start Address

The start address of the execution.

recommended

type: Option<String>

Type

The module type.

recommended

Trait Implementations

impl Clone for Module

fn clone(&self) -> Module

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Module

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Module

fn default() -> Module

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Module

where Module: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Module

fn eq(&self, other: &Module) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Module

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Module