EnableProcessCallstack populates the stack identifiers with event types eligible for emitting stack walk events related to process telemetry, such as creating a process, creating/terminating a thread or module loading into process address space.
()
| 63 | // creating/terminating a thread or module loading into |
| 64 | // process address space. |
| 65 | func (s *StackExtensions) EnableProcessCallstack() { |
| 66 | s.AddStackTracing(event.CreateProcess) |
| 67 | if s.config.EnableThreadEvents { |
| 68 | s.AddStackTracing(event.CreateThread) |
| 69 | s.AddStackTracing(event.TerminateThread) |
| 70 | } |
| 71 | if s.config.EnableModuleEvents { |
| 72 | s.AddStackTracingWith(event.ProcessEventGUID, event.LoadModule.HookID()) |
| 73 | } |
| 74 | } |
| 75 | |
| 76 | // EnableFileCallstack populates the stack identifiers |
| 77 | // with event types eligible for publishing call stack |