Instance Property

executable

The file containing the executed process.

Declaration

es_file_t *executable;

See Also

Inspecting the Source Process

audit_token

A token for use with Basic Security Mode (BSM) auditing functions.

is_es_client

A Boolean value that indicates whether the process connects to the Endpoint Security subsystem.

is_platform_binary

A Boolean value that indicates whether the process is a platform binary.