Module Values.ActorProcessSource

Contains information about a process involved in a GuardDuty finding, including process identification, execution details, and file information.

Sourcetype nonrec t = {
  1. name : ProcessName.t option;
    (*

    The name of the process as it appears in the system.

    *)
  2. path : ProcessPath.t option;
    (*

    The full file path to the process executable on the system.

    *)
  3. sha256 : ProcessSha256.t option;
    (*

    The SHA256 hash of the process executable file, which can be used for identification and verification purposes.

    *)
}
Sourceval make : ?name:??? -> ?path:??? -> ?sha256:??? -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `String of ProcessName.t ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t