ecs

Jun 14, 2024

Changes in this version

type Log

+ Url *Url

+ func MapHistory(fu *flog.Url, src string) (log *Log, err error)

+ type Url struct

+ Domain string

+ Fragment string

+ Full string

+ Original string

+ Password string

+ Path string

+ Port int64

+ Query string

+ Scheme string

+ Username string

Jun 13, 2024

Changes in this version

+ func Hash(s string) string

Jun 13, 2024

Changes in this version

type Log

+ Registry *Registry

+ func MapShellBag(s, src string) (log *Log, err error)

type Process

+ Thread *Thread

+ type Registry struct

+ Hive string

+ Key string

+ Path string

+ Value string

+ type Thread struct

+ ID int64

Jun 12, 2024

Changes in this version

+ func GetHash(s string) string

type Host

+ MAC string

+ type Log struct

+ Agent Agent

+ Base Base

+ Ecs Ecs

+ Event Evt

+ File File

+ Host Host

+ Process Process

+ User User

+ func MapJumpList(s, src string) (log *Log, err error)

+ func NewLog(src string, base Base, event Evt, host Host, user User, process Process) *Log

type Process

+ Args []string

+ ArgsCount int64

+ CommandLine string

+ EntityID string

+ Executable string

+ Name string

+ Start time.Time

+ Title string

+ WorkingDirectory string

May 28, 2024

Changes in this version

+ const Version

+ func Fingerprint(s string) string

+ type Agent struct

+ Type string

+ Version string

+ type Base struct

+ Labels map[string]interface{}

+ Message string

+ Tags string

+ Timestamp time.Time

+ type Ecs struct

+ Version string

+ type Event struct

+ Agent Agent

+ Base Base

+ Ecs Ecs

+ Event Evt

+ File File

+ Host Host

+ Process Process

+ User User

+ func MapEvent(log, src string) (e *Event, err error)

+ func (e *Event) Bytes() (b []byte, err error)

+ type Evt struct

+ Code string

+ Created time.Time

+ Dataset string

+ Hash string

+ ID string

+ Ingested time.Time

+ Kind string

+ Module string

+ Original string

+ Provider string

+ Severity int64

+ Timezone string

+ type File struct

+ Directory string

+ DriveLetter string

+ Extension string

+ Name string

+ Path string

+ Type string

+ type Host struct

+ Hostname string

+ Name string

+ type Process struct

+ PID int64

+ ThreadID int64

+ type User struct

+ ID string