Method IsCreateDisposition

pkg/event/event_windows.go:247–249

IsCreateDisposition determines if the file disposition leads to creating a new file.

()

// IsCreateDisposition determines if the file disposition leads to creating a new file.
func (e *Event) IsCreateDisposition() bool {
	return e.IsCreateFile() && e.Params.MustGetUint32(params.FileOperation) == windows.FILE_CREATE
}

// IsOpenDisposition determines if the file disposition leads to opening a file object.
func (e *Event) IsOpenDisposition() bool {