Method Get

pkg/filter/accessor.go:43–43 · view source on GitHub ↗

Get fetches the parameter value for the specified filter field.

(f Field, evt *event.Event)

Source from the content-addressed store, hash-verified

41	type Accessor interface {
42	// Get fetches the parameter value for the specified filter field.
43	Get(f Field, evt *event.Event) (params.Value, error)
44	// SetFields sets all fields declared in the expression.
45	SetFields(fields []Field)
46	// SetSegments sets all segments utilized in the function predicate expression.

ConnectMethod · 0.65

FindHandlesMethod · 0.65

FindByObjectMethod · 0.65

GetSnapshotMethod · 0.65

TestLookupAddrTickerExpirationFunction · 0.65

FindMethod · 0.65

FindModuleMethod · 0.65

FindAllModulesMethod · 0.65

FindAndPutMethod · 0.65

GetSnapshotMethod · 0.65

evalBoundSequenceMethod · 0.65

InterpolateFieldsFunction · 0.65

evtAccessorpkg/filter/accessor.go

psAccessorpkg/filter/accessor_windows.go

threadAccessorpkg/filter/accessor_windows.go

fileAccessorpkg/filter/accessor_windows.go

moduleAccessorpkg/filter/accessor_windows.go

registryAccessorpkg/filter/accessor_windows.go

networkAccessorpkg/filter/accessor_windows.go

handleAccessorpkg/filter/accessor_windows.go

peAccessorpkg/filter/accessor_windows.go

memAccessorpkg/filter/accessor_windows.go

dnsAccessorpkg/filter/accessor_windows.go

threadpoolAccessorpkg/filter/accessor_windows.go

no outgoing calls

ConnectMethod · 0.52

TestLookupAddrTickerExpirationFunction · 0.52

TestProduceEventDictFunction · 0.52

TestProduceEventDictWithIPAddressesFunction · 0.52

TestEventSourceAllEventsFunction · 0.52