Versions in this module Expand all Collapse all v0 v0.1.1 Jun 13, 2024 Changes in this version + func FormatContent(buf []byte) string + type EventEntry struct + Buffer []byte + Handle syscall.Handle + Name string v0.1.0 Jun 12, 2024 Changes in this version + const ERROR_HANDLE_EOF + const ERROR_INSUFFICIENT_BUFFER + const ERROR_NO_MORE_ITEMS + const EVENTLOG_AUDIT_FAILURE + const EVENTLOG_AUDIT_SUCCESS + const EVENTLOG_BACKWARDS_READ + const EVENTLOG_ERROR_TYPE + const EVENTLOG_FORWARDS_READ + const EVENTLOG_INFORMATION_TYPE + const EVENTLOG_SEEK_READ + const EVENTLOG_SEQUENTIAL_READ + const EVENTLOG_SUCCESS + const EVENTLOG_WARNING_TYPE + const InvalidHandle + const NO_ERROR + func CloseEventLog(handle syscall.Handle) error + func CloseHandle(handle syscall.Handle) error + func CreateEvent(eventAttributes *syscall.SecurityAttributes, manualReset, initialState uint32, ...) (syscall.Handle, error) + func DeregisterEventSource(log syscall.Handle) error + func EventLogRecordNumber(handle syscall.Handle) (uint32, error) + func EvtClose(handle syscall.Handle) error + func EvtNextChannelPath(handle syscall.Handle) ([]string, error) + func EvtOpenChannelEnum(session syscall.Handle) (syscall.Handle, error) + func FormatMessage(errorCode uint32) string + func LookupAccountSid(buf []byte, sidlen, sidoffset uint32) (string, string, error) + func NotifyChangeEventLog(handle, event syscall.Handle) error + func OpenEventLog(name string) (syscall.Handle, error) + func ReadEventLog(handle syscall.Handle, flags, offset uint32) ([]byte, error) + func RegisterEventSource(uncServerName, sourceName *uint16) (handle syscall.Handle, err error) + func ReportEvent(log syscall.Handle, etype uint16, category uint16, eventID uint32, ...) error + func ResetEvent(handle syscall.Handle) error + func SetEvent(handle syscall.Handle) error + func WaitForMultipleObjects(handles []syscall.Handle, waitAll bool, waitMilliseconds uint32) (event uint32, err error) + type EventLogRecord struct + ClosingRecordNumber uint32 + DataLength uint32 + DataOffset uint32 + EventCategory uint16 + EventID uint32 + EventType uint16 + Length uint32 + NumStrings uint16 + RecordNumber uint32 + Reserved uint32 + ReservedFlags uint16 + StringOffset uint32 + TimeGenerated uint32 + TimeWritten uint32 + UserSidLength uint32 + UserSidOffset uint32 + func ParseEventLogData(buf []byte) *EventLogRecord + func ParserEventLogData(buf []byte) (*EventLogRecord, error) + type EventNotifier struct + EventLogChannel chan []byte + func NewEventNotifier(ctx context.Context) *EventNotifier + func (en *EventNotifier) AddWatcher(name string) error + func (en *EventNotifier) Close() + func (en *EventNotifier) GetWatcher(name string) (*EventWatcher, error) + func (en *EventNotifier) RemoveWatcher(name string) error + type EventWatcher struct + Name string + func NewEventWatcher(ctx context.Context, name string, eventChan chan []byte) *EventWatcher + func (ew *EventWatcher) Close() + func (ew *EventWatcher) CloseHandles() error + func (ew *EventWatcher) Init() error + func (ew *EventWatcher) Listen() + type SID_NAME_USE uint32 + const SidTypeAlias + const SidTypeComputer + const SidTypeDeletedAccount + const SidTypeDomain + const SidTypeGroup + const SidTypeInvalid + const SidTypeLabel + const SidTypeLogonSession + const SidTypeUnknown + const SidTypeUser + const SidTypeWellKnownGroup