Values.ProcessDetailsSourceInformation about the observed process.
type nonrec t = {name : String_.t option;The name of the process.
*)executablePath : String_.t option;The absolute path of the process executable file.
*)executableSha256 : String_.t option;The SHA256 hash of the process executable.
*)namespacePid : Integer.t option;The ID of the child process.
*)pwd : String_.t option;The present working directory of the process.
*)pid : Integer.t option;The ID of the process.
*)startTime : Timestamp.t option;The time when the process started. This is in UTC format.
*)uuid : String_.t option;The unique ID assigned to the process by GuardDuty.
*)parentUuid : String_.t option;The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.
*)user : String_.t option;The user that executed the process.
*)userId : Integer.t option;The unique ID of the user that executed the process.
*)euid : Integer.t option;The effective user ID of the user that executed the process.
*)lineage : Lineage.t option;Information about the process's lineage.
*)}val to_value :
t ->
[> `Structure of
(string
* [> `Integer of Integer.t
| `List of
[> `Structure of
(string
* [> `Integer of Integer.t
| `String of String_.t
| `Timestamp of Timestamp.t ])
list ]
list
| `String of String_.t
| `Timestamp of Timestamp.t ])
list ]