<!--
{
  "availability" : [
    "macCatalyst: -",
    "macOS: -"
  ],
  "documentType" : "symbol",
  "framework" : "EndpointSecurity",
  "identifier" : "/documentation/EndpointSecurity/es_file_t",
  "metadataVersion" : "0.1.0",
  "role" : "Structure",
  "symbol" : {
    "kind" : "Structure",
    "modules" : [
      "Endpoint Security"
    ],
    "preciseIdentifier" : "c:@SA@es_file_t"
  },
  "title" : "es_file_t"
}
-->

# es_file_t

A type that represents a file related to an Endpoint Security event.

```
struct es_file_t
```

## Topics

### Inspecting File Properties

[`path`](/documentation/EndpointSecurity/es_file_t/path)

The file’s path.

[`path_truncated`](/documentation/EndpointSecurity/es_file_t/path_truncated)

A Boolean value that indicates whether Endpoint Security truncated the path string.

[`stat`](/documentation/EndpointSecurity/es_file_t/stat)

The file’s metadata, such as file size, user and group identifiers, and access and modification dates.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)