Struct ProcessStartEvent 

pub struct ProcessStartEvent {
    pub process_id: ProcessId,
    pub parent_process_id: ProcessId,
    pub session_id: Option<u32>,
    pub exit_status: Option<u32>,
    pub unique_process_key: Option<u64>,
    pub directory_table_base: Option<u64>,
    pub image_file_name: String,
    pub command_line: Option<String>,
    pub user_sid: Option<String>,
    pub version: u8,
}

Typed representation of a decoded process start event.

Fields

process_id: ProcessId

parent_process_id: ProcessId

session_id: Option<u32>

exit_status: Option<u32>

unique_process_key: Option<u64>

directory_table_base: Option<u64>

image_file_name: String

command_line: Option<String>

user_sid: Option<String>

version: u8

Trait Implementations

impl Clone for ProcessStartEvent

fn clone(&self) -> ProcessStartEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessStartEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.