diff --git a/pkg/security/secl/compiler/generators/accessors/accessors.go b/pkg/security/secl/compiler/generators/accessors/accessors.go index 32595b8790657..6b333945acb3f 100644 --- a/pkg/security/secl/compiler/generators/accessors/accessors.go +++ b/pkg/security/secl/compiler/generators/accessors/accessors.go @@ -740,7 +740,7 @@ func newField(allFields map[string]*common.StructField, field *common.StructFiel return result } -func generatePrefixNilChecks(allFields map[string]*common.StructField, field *common.StructField) string { +func generatePrefixNilChecks(allFields map[string]*common.StructField, returnType string, field *common.StructField) string { var fieldPath, result string for _, node := range strings.Split(field.Name, ".") { if fieldPath != "" { @@ -751,7 +751,7 @@ func generatePrefixNilChecks(allFields map[string]*common.StructField, field *co if field, ok := allFields[fieldPath]; ok { if field.IsOrigTypePtr { - result += fmt.Sprintf("if ev.%s == nil { return zeroValue }\n", field.Name) + result += fmt.Sprintf("if ev.%s == nil { return %s }\n", field.Name, getDefaultValueOfType(returnType)) } } } diff --git a/pkg/security/secl/compiler/generators/accessors/field_accessors.tmpl b/pkg/security/secl/compiler/generators/accessors/field_accessors.tmpl index eade58343fb69..407a122f4aaa3 100644 --- a/pkg/security/secl/compiler/generators/accessors/field_accessors.tmpl +++ b/pkg/security/secl/compiler/generators/accessors/field_accessors.tmpl @@ -32,16 +32,13 @@ import ( // Get{{$pascalCaseName}} returns the value of the field, resolving if necessary func (ev *Event) Get{{$pascalCaseName}}() {{ $accessorReturnType }} { - {{ if and (ne $Field.Handler "ResolveAsync") (and (ne $Field.Handler "ResolveEventTimestamp") (ne $Field.Handler "ResolveEventTime")) }} - zeroValue := {{ GetDefaultValueOfType $accessorReturnType}} - {{ end }} {{if ne $Field.Event "*"}} if ev.GetEventType().String() != "{{$Field.Event}}" { - return zeroValue + return {{ GetDefaultValueOfType $accessorReturnType}} } {{end}} - {{$Field | GeneratePrefixNilChecks $.AllFields}} + {{$Field | GeneratePrefixNilChecks $.AllFields $accessorReturnType}} {{if $Field.Iterator}} var values {{ $accessorReturnType }} diff --git a/pkg/security/secl/model/field_accessors_unix.go b/pkg/security/secl/model/field_accessors_unix.go index d091b71b2bbb4..5597942d65c5c 100644 --- a/pkg/security/secl/model/field_accessors_unix.go +++ b/pkg/security/secl/model/field_accessors_unix.go @@ -17,657 +17,584 @@ import ( // GetBindAddrFamily returns the value of the field, resolving if necessary func (ev *Event) GetBindAddrFamily() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "bind" { - return zeroValue + return uint16(0) } return ev.Bind.AddrFamily } // GetBindAddrIp returns the value of the field, resolving if necessary func (ev *Event) GetBindAddrIp() net.IPNet { - zeroValue := net.IPNet{} if ev.GetEventType().String() != "bind" { - return zeroValue + return net.IPNet{} } return ev.Bind.Addr.IPNet } // GetBindAddrPort returns the value of the field, resolving if necessary func (ev *Event) GetBindAddrPort() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "bind" { - return zeroValue + return uint16(0) } return ev.Bind.Addr.Port } // GetBindRetval returns the value of the field, resolving if necessary func (ev *Event) GetBindRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "bind" { - return zeroValue + return int64(0) } return ev.Bind.SyscallEvent.Retval } // GetBpfCmd returns the value of the field, resolving if necessary func (ev *Event) GetBpfCmd() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "bpf" { - return zeroValue + return uint32(0) } return ev.BPF.Cmd } // GetBpfMapName returns the value of the field, resolving if necessary func (ev *Event) GetBpfMapName() string { - zeroValue := "" if ev.GetEventType().String() != "bpf" { - return zeroValue + return "" } return ev.BPF.Map.Name } // GetBpfMapType returns the value of the field, resolving if necessary func (ev *Event) GetBpfMapType() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "bpf" { - return zeroValue + return uint32(0) } return ev.BPF.Map.Type } // GetBpfProgAttachType returns the value of the field, resolving if necessary func (ev *Event) GetBpfProgAttachType() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "bpf" { - return zeroValue + return uint32(0) } return ev.BPF.Program.AttachType } // GetBpfProgHelpers returns the value of the field, resolving if necessary func (ev *Event) GetBpfProgHelpers() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "bpf" { - return zeroValue + return []uint32{} } return ev.BPF.Program.Helpers } // GetBpfProgName returns the value of the field, resolving if necessary func (ev *Event) GetBpfProgName() string { - zeroValue := "" if ev.GetEventType().String() != "bpf" { - return zeroValue + return "" } return ev.BPF.Program.Name } // GetBpfProgTag returns the value of the field, resolving if necessary func (ev *Event) GetBpfProgTag() string { - zeroValue := "" if ev.GetEventType().String() != "bpf" { - return zeroValue + return "" } return ev.BPF.Program.Tag } // GetBpfProgType returns the value of the field, resolving if necessary func (ev *Event) GetBpfProgType() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "bpf" { - return zeroValue + return uint32(0) } return ev.BPF.Program.Type } // GetBpfRetval returns the value of the field, resolving if necessary func (ev *Event) GetBpfRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "bpf" { - return zeroValue + return int64(0) } return ev.BPF.SyscallEvent.Retval } // GetCapsetCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetCapsetCapEffective() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "capset" { - return zeroValue + return uint64(0) } return ev.Capset.CapEffective } // GetCapsetCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetCapsetCapPermitted() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "capset" { - return zeroValue + return uint64(0) } return ev.Capset.CapPermitted } // GetChmodFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint64(0) } return ev.Chmod.File.FileFields.CTime } // GetChmodFileDestinationMode returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileDestinationMode() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint32(0) } return ev.Chmod.Mode } // GetChmodFileDestinationRights returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileDestinationRights() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint32(0) } return ev.Chmod.Mode } // GetChmodFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Chmod.File) } // GetChmodFileGid returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint32(0) } return ev.Chmod.File.FileFields.GID } // GetChmodFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Chmod.File.FileFields) } // GetChmodFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "chmod" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Chmod.File) } // GetChmodFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "chmod" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Chmod.File.FileFields) } // GetChmodFileInode returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint64(0) } return ev.Chmod.File.FileFields.PathKey.Inode } // GetChmodFileMode returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint16(0) } return ev.Chmod.File.FileFields.Mode } // GetChmodFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint64(0) } return ev.Chmod.File.FileFields.MTime } // GetChmodFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint32(0) } return ev.Chmod.File.FileFields.PathKey.MountID } // GetChmodFileName returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileName() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Chmod.File) } // GetChmodFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "chmod" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Chmod.File)) } // GetChmodFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetChmodFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Chmod.File) } // GetChmodFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetChmodFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Chmod.File) } // GetChmodFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetChmodFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Chmod.File) } // GetChmodFilePath returns the value of the field, resolving if necessary func (ev *Event) GetChmodFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Chmod.File) } // GetChmodFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetChmodFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "chmod" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Chmod.File)) } // GetChmodFileRights returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "chmod" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Chmod.File.FileFields) } // GetChmodFileUid returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return uint32(0) } return ev.Chmod.File.FileFields.UID } // GetChmodFileUser returns the value of the field, resolving if necessary func (ev *Event) GetChmodFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "chmod" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Chmod.File.FileFields) } // GetChmodRetval returns the value of the field, resolving if necessary func (ev *Event) GetChmodRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "chmod" { - return zeroValue + return int64(0) } return ev.Chmod.SyscallEvent.Retval } // GetChownFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetChownFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return uint64(0) } return ev.Chown.File.FileFields.CTime } // GetChownFileDestinationGid returns the value of the field, resolving if necessary func (ev *Event) GetChownFileDestinationGid() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return int64(0) } return ev.Chown.GID } // GetChownFileDestinationGroup returns the value of the field, resolving if necessary func (ev *Event) GetChownFileDestinationGroup() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveChownGID(ev, &ev.Chown) } // GetChownFileDestinationUid returns the value of the field, resolving if necessary func (ev *Event) GetChownFileDestinationUid() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return int64(0) } return ev.Chown.UID } // GetChownFileDestinationUser returns the value of the field, resolving if necessary func (ev *Event) GetChownFileDestinationUser() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveChownUID(ev, &ev.Chown) } // GetChownFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetChownFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Chown.File) } // GetChownFileGid returns the value of the field, resolving if necessary func (ev *Event) GetChownFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return uint32(0) } return ev.Chown.File.FileFields.GID } // GetChownFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetChownFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Chown.File.FileFields) } // GetChownFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetChownFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "chown" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Chown.File) } // GetChownFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetChownFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "chown" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Chown.File.FileFields) } // GetChownFileInode returns the value of the field, resolving if necessary func (ev *Event) GetChownFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return uint64(0) } return ev.Chown.File.FileFields.PathKey.Inode } // GetChownFileMode returns the value of the field, resolving if necessary func (ev *Event) GetChownFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return uint16(0) } return ev.Chown.File.FileFields.Mode } // GetChownFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetChownFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return uint64(0) } return ev.Chown.File.FileFields.MTime } // GetChownFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetChownFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return uint32(0) } return ev.Chown.File.FileFields.PathKey.MountID } // GetChownFileName returns the value of the field, resolving if necessary func (ev *Event) GetChownFileName() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Chown.File) } // GetChownFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetChownFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "chown" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Chown.File)) } // GetChownFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetChownFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Chown.File) } // GetChownFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetChownFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Chown.File) } // GetChownFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetChownFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Chown.File) } // GetChownFilePath returns the value of the field, resolving if necessary func (ev *Event) GetChownFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Chown.File) } // GetChownFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetChownFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "chown" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Chown.File)) } // GetChownFileRights returns the value of the field, resolving if necessary func (ev *Event) GetChownFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "chown" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Chown.File.FileFields) } // GetChownFileUid returns the value of the field, resolving if necessary func (ev *Event) GetChownFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return uint32(0) } return ev.Chown.File.FileFields.UID } // GetChownFileUser returns the value of the field, resolving if necessary func (ev *Event) GetChownFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "chown" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Chown.File.FileFields) } // GetChownRetval returns the value of the field, resolving if necessary func (ev *Event) GetChownRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "chown" { - return zeroValue + return int64(0) } return ev.Chown.SyscallEvent.Retval } // GetContainerCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetContainerCreatedAt() int { - zeroValue := 0 if ev.BaseEvent.ContainerContext == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveContainerCreatedAt(ev, ev.BaseEvent.ContainerContext) } // GetContainerId returns the value of the field, resolving if necessary func (ev *Event) GetContainerId() string { - zeroValue := "" if ev.BaseEvent.ContainerContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveContainerID(ev, ev.BaseEvent.ContainerContext) } // GetContainerTags returns the value of the field, resolving if necessary func (ev *Event) GetContainerTags() []string { - zeroValue := []string{} if ev.BaseEvent.ContainerContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveContainerTags(ev, ev.BaseEvent.ContainerContext) } // GetDnsId returns the value of the field, resolving if necessary func (ev *Event) GetDnsId() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.DNS.ID } // GetDnsQuestionClass returns the value of the field, resolving if necessary func (ev *Event) GetDnsQuestionClass() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.DNS.Class } // GetDnsQuestionCount returns the value of the field, resolving if necessary func (ev *Event) GetDnsQuestionCount() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.DNS.Count } // GetDnsQuestionLength returns the value of the field, resolving if necessary func (ev *Event) GetDnsQuestionLength() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.DNS.Size } // GetDnsQuestionName returns the value of the field, resolving if necessary func (ev *Event) GetDnsQuestionName() string { - zeroValue := "" if ev.GetEventType().String() != "dns" { - return zeroValue + return "" } return ev.DNS.Name } // GetDnsQuestionNameLength returns the value of the field, resolving if necessary func (ev *Event) GetDnsQuestionNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "dns" { - return zeroValue + return 0 } return len(ev.DNS.Name) } // GetDnsQuestionType returns the value of the field, resolving if necessary func (ev *Event) GetDnsQuestionType() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.DNS.Type } @@ -684,276 +611,253 @@ func (ev *Event) GetEventTimestamp() int { // GetExecArgs returns the value of the field, resolving if necessary func (ev *Event) GetExecArgs() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgs(ev, ev.Exec.Process) } // GetExecArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetExecArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsFlags(ev, ev.Exec.Process) } // GetExecArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetExecArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsOptions(ev, ev.Exec.Process) } // GetExecArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetExecArgsScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgsScrubbed(ev, ev.Exec.Process) } // GetExecArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetExecArgsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "exec" { - return zeroValue + return false } if ev.Exec.Process == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessArgsTruncated(ev, ev.Exec.Process) } // GetExecArgv returns the value of the field, resolving if necessary func (ev *Event) GetExecArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgv(ev, ev.Exec.Process) } // GetExecArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetExecArgv0() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgv0(ev, ev.Exec.Process) } // GetExecArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetExecArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgvScrubbed(ev, ev.Exec.Process) } // GetExecCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetExecCapEffective() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } return ev.Exec.Process.Credentials.CapEffective } // GetExecCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetExecCapPermitted() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } return ev.Exec.Process.Credentials.CapPermitted } // GetExecComm returns the value of the field, resolving if necessary func (ev *Event) GetExecComm() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.Comm } // GetExecContainerId returns the value of the field, resolving if necessary func (ev *Event) GetExecContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.ContainerID } // GetExecCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetExecCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, ev.Exec.Process) } // GetExecEgid returns the value of the field, resolving if necessary func (ev *Event) GetExecEgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.Credentials.EGID } // GetExecEgroup returns the value of the field, resolving if necessary func (ev *Event) GetExecEgroup() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.Credentials.EGroup } // GetExecEnvp returns the value of the field, resolving if necessary func (ev *Event) GetExecEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, ev.Exec.Process) } // GetExecEnvs returns the value of the field, resolving if necessary func (ev *Event) GetExecEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, ev.Exec.Process) } // GetExecEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetExecEnvsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "exec" { - return zeroValue + return false } if ev.Exec.Process == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessEnvsTruncated(ev, ev.Exec.Process) } // GetExecEuid returns the value of the field, resolving if necessary func (ev *Event) GetExecEuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.Credentials.EUID } // GetExecEuser returns the value of the field, resolving if necessary func (ev *Event) GetExecEuser() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.Credentials.EUser } // GetExecExecTime returns the value of the field, resolving if necessary func (ev *Event) GetExecExecTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exec" { - return zeroValue + return time.Time{} } if ev.Exec.Process == nil { - return zeroValue + return time.Time{} } return ev.Exec.Process.ExecTime } // GetExecExitTime returns the value of the field, resolving if necessary func (ev *Event) GetExecExitTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exec" { - return zeroValue + return time.Time{} } if ev.Exec.Process == nil { - return zeroValue + return time.Time{} } return ev.Exec.Process.ExitTime } // GetExecFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetExecFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exec.Process.IsNotKworker() { return uint64(0) @@ -963,12 +867,11 @@ func (ev *Event) GetExecFileChangeTime() uint64 { // GetExecFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetExecFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -978,12 +881,11 @@ func (ev *Event) GetExecFileFilesystem() string { // GetExecFileGid returns the value of the field, resolving if necessary func (ev *Event) GetExecFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exec.Process.IsNotKworker() { return uint32(0) @@ -993,12 +895,11 @@ func (ev *Event) GetExecFileGid() uint32 { // GetExecFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetExecFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -1008,12 +909,11 @@ func (ev *Event) GetExecFileGroup() string { // GetExecFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetExecFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } if !ev.Exec.Process.IsNotKworker() { return []string{} @@ -1023,12 +923,11 @@ func (ev *Event) GetExecFileHashes() []string { // GetExecFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetExecFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "exec" { - return zeroValue + return false } if ev.Exec.Process == nil { - return zeroValue + return false } if !ev.Exec.Process.IsNotKworker() { return false @@ -1038,12 +937,11 @@ func (ev *Event) GetExecFileInUpperLayer() bool { // GetExecFileInode returns the value of the field, resolving if necessary func (ev *Event) GetExecFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exec.Process.IsNotKworker() { return uint64(0) @@ -1053,12 +951,11 @@ func (ev *Event) GetExecFileInode() uint64 { // GetExecFileMode returns the value of the field, resolving if necessary func (ev *Event) GetExecFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint16(0) } if ev.Exec.Process == nil { - return zeroValue + return uint16(0) } if !ev.Exec.Process.IsNotKworker() { return uint16(0) @@ -1068,12 +965,11 @@ func (ev *Event) GetExecFileMode() uint16 { // GetExecFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetExecFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exec.Process.IsNotKworker() { return uint64(0) @@ -1083,12 +979,11 @@ func (ev *Event) GetExecFileModificationTime() uint64 { // GetExecFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetExecFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exec.Process.IsNotKworker() { return uint32(0) @@ -1098,12 +993,11 @@ func (ev *Event) GetExecFileMountId() uint32 { // GetExecFileName returns the value of the field, resolving if necessary func (ev *Event) GetExecFileName() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -1113,24 +1007,22 @@ func (ev *Event) GetExecFileName() string { // GetExecFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetExecFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exec.Process.FileEvent)) } // GetExecFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetExecFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -1140,12 +1032,11 @@ func (ev *Event) GetExecFilePackageName() string { // GetExecFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetExecFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -1155,12 +1046,11 @@ func (ev *Event) GetExecFilePackageSourceVersion() string { // GetExecFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetExecFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -1170,12 +1060,11 @@ func (ev *Event) GetExecFilePackageVersion() string { // GetExecFilePath returns the value of the field, resolving if necessary func (ev *Event) GetExecFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -1185,24 +1074,22 @@ func (ev *Event) GetExecFilePath() string { // GetExecFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetExecFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Exec.Process.FileEvent)) } // GetExecFileRights returns the value of the field, resolving if necessary func (ev *Event) GetExecFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } if !ev.Exec.Process.IsNotKworker() { return 0 @@ -1212,12 +1099,11 @@ func (ev *Event) GetExecFileRights() int { // GetExecFileUid returns the value of the field, resolving if necessary func (ev *Event) GetExecFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exec.Process.IsNotKworker() { return uint32(0) @@ -1227,12 +1113,11 @@ func (ev *Event) GetExecFileUid() uint32 { // GetExecFileUser returns the value of the field, resolving if necessary func (ev *Event) GetExecFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.IsNotKworker() { return "" @@ -1242,96 +1127,88 @@ func (ev *Event) GetExecFileUser() string { // GetExecForkTime returns the value of the field, resolving if necessary func (ev *Event) GetExecForkTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exec" { - return zeroValue + return time.Time{} } if ev.Exec.Process == nil { - return zeroValue + return time.Time{} } return ev.Exec.Process.ForkTime } // GetExecFsgid returns the value of the field, resolving if necessary func (ev *Event) GetExecFsgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.Credentials.FSGID } // GetExecFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetExecFsgroup() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.Credentials.FSGroup } // GetExecFsuid returns the value of the field, resolving if necessary func (ev *Event) GetExecFsuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.Credentials.FSUID } // GetExecFsuser returns the value of the field, resolving if necessary func (ev *Event) GetExecFsuser() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.Credentials.FSUser } // GetExecGid returns the value of the field, resolving if necessary func (ev *Event) GetExecGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.Credentials.GID } // GetExecGroup returns the value of the field, resolving if necessary func (ev *Event) GetExecGroup() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.Credentials.Group } // GetExecInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exec.Process.HasInterpreter() { return uint64(0) @@ -1341,12 +1218,11 @@ func (ev *Event) GetExecInterpreterFileChangeTime() uint64 { // GetExecInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1356,12 +1232,11 @@ func (ev *Event) GetExecInterpreterFileFilesystem() string { // GetExecInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exec.Process.HasInterpreter() { return uint32(0) @@ -1371,12 +1246,11 @@ func (ev *Event) GetExecInterpreterFileGid() uint32 { // GetExecInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1386,12 +1260,11 @@ func (ev *Event) GetExecInterpreterFileGroup() string { // GetExecInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } if !ev.Exec.Process.HasInterpreter() { return []string{} @@ -1401,12 +1274,11 @@ func (ev *Event) GetExecInterpreterFileHashes() []string { // GetExecInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "exec" { - return zeroValue + return false } if ev.Exec.Process == nil { - return zeroValue + return false } if !ev.Exec.Process.HasInterpreter() { return false @@ -1416,12 +1288,11 @@ func (ev *Event) GetExecInterpreterFileInUpperLayer() bool { // GetExecInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exec.Process.HasInterpreter() { return uint64(0) @@ -1431,12 +1302,11 @@ func (ev *Event) GetExecInterpreterFileInode() uint64 { // GetExecInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint16(0) } if ev.Exec.Process == nil { - return zeroValue + return uint16(0) } if !ev.Exec.Process.HasInterpreter() { return uint16(0) @@ -1446,12 +1316,11 @@ func (ev *Event) GetExecInterpreterFileMode() uint16 { // GetExecInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint64(0) } if ev.Exec.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exec.Process.HasInterpreter() { return uint64(0) @@ -1461,12 +1330,11 @@ func (ev *Event) GetExecInterpreterFileModificationTime() uint64 { // GetExecInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exec.Process.HasInterpreter() { return uint32(0) @@ -1476,12 +1344,11 @@ func (ev *Event) GetExecInterpreterFileMountId() uint32 { // GetExecInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileName() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1491,24 +1358,22 @@ func (ev *Event) GetExecInterpreterFileName() string { // GetExecInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exec.Process.LinuxBinprm.FileEvent)) } // GetExecInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1518,12 +1383,11 @@ func (ev *Event) GetExecInterpreterFilePackageName() string { // GetExecInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1533,12 +1397,11 @@ func (ev *Event) GetExecInterpreterFilePackageSourceVersion() string { // GetExecInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1548,12 +1411,11 @@ func (ev *Event) GetExecInterpreterFilePackageVersion() string { // GetExecInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1563,24 +1425,22 @@ func (ev *Event) GetExecInterpreterFilePath() string { // GetExecInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Exec.Process.LinuxBinprm.FileEvent)) } // GetExecInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } if !ev.Exec.Process.HasInterpreter() { return 0 @@ -1590,12 +1450,11 @@ func (ev *Event) GetExecInterpreterFileRights() int { // GetExecInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exec.Process.HasInterpreter() { return uint32(0) @@ -1605,12 +1464,11 @@ func (ev *Event) GetExecInterpreterFileUid() uint32 { // GetExecInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetExecInterpreterFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } if !ev.Exec.Process.HasInterpreter() { return "" @@ -1620,426 +1478,390 @@ func (ev *Event) GetExecInterpreterFileUser() string { // GetExecIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetExecIsKworker() bool { - zeroValue := false if ev.GetEventType().String() != "exec" { - return zeroValue + return false } if ev.Exec.Process == nil { - return zeroValue + return false } return ev.Exec.Process.PIDContext.IsKworker } // GetExecIsThread returns the value of the field, resolving if necessary func (ev *Event) GetExecIsThread() bool { - zeroValue := false if ev.GetEventType().String() != "exec" { - return zeroValue + return false } if ev.Exec.Process == nil { - return zeroValue + return false } return ev.Exec.Process.IsThread } // GetExecPid returns the value of the field, resolving if necessary func (ev *Event) GetExecPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.PIDContext.Pid } // GetExecPpid returns the value of the field, resolving if necessary func (ev *Event) GetExecPpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.PPid } // GetExecTid returns the value of the field, resolving if necessary func (ev *Event) GetExecTid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.PIDContext.Tid } // GetExecTtyName returns the value of the field, resolving if necessary func (ev *Event) GetExecTtyName() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.TTYName } // GetExecUid returns the value of the field, resolving if necessary func (ev *Event) GetExecUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.Credentials.UID } // GetExecUser returns the value of the field, resolving if necessary func (ev *Event) GetExecUser() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.Credentials.User } // GetExecUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetExecUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveK8SGroups(ev, &ev.Exec.Process.UserSession) } // GetExecUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetExecUserSessionK8sUid() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUID(ev, &ev.Exec.Process.UserSession) } // GetExecUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetExecUserSessionK8sUsername() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUsername(ev, &ev.Exec.Process.UserSession) } // GetExitArgs returns the value of the field, resolving if necessary func (ev *Event) GetExitArgs() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgs(ev, ev.Exit.Process) } // GetExitArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetExitArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsFlags(ev, ev.Exit.Process) } // GetExitArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetExitArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsOptions(ev, ev.Exit.Process) } // GetExitArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetExitArgsScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgsScrubbed(ev, ev.Exit.Process) } // GetExitArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetExitArgsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "exit" { - return zeroValue + return false } if ev.Exit.Process == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessArgsTruncated(ev, ev.Exit.Process) } // GetExitArgv returns the value of the field, resolving if necessary func (ev *Event) GetExitArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgv(ev, ev.Exit.Process) } // GetExitArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetExitArgv0() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgv0(ev, ev.Exit.Process) } // GetExitArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetExitArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgvScrubbed(ev, ev.Exit.Process) } // GetExitCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetExitCapEffective() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } return ev.Exit.Process.Credentials.CapEffective } // GetExitCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetExitCapPermitted() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } return ev.Exit.Process.Credentials.CapPermitted } // GetExitCause returns the value of the field, resolving if necessary func (ev *Event) GetExitCause() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } return ev.Exit.Cause } // GetExitCode returns the value of the field, resolving if necessary func (ev *Event) GetExitCode() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } return ev.Exit.Code } // GetExitComm returns the value of the field, resolving if necessary func (ev *Event) GetExitComm() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.Comm } // GetExitContainerId returns the value of the field, resolving if necessary func (ev *Event) GetExitContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.ContainerID } // GetExitCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetExitCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, ev.Exit.Process) } // GetExitEgid returns the value of the field, resolving if necessary func (ev *Event) GetExitEgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.Credentials.EGID } // GetExitEgroup returns the value of the field, resolving if necessary func (ev *Event) GetExitEgroup() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.Credentials.EGroup } // GetExitEnvp returns the value of the field, resolving if necessary func (ev *Event) GetExitEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, ev.Exit.Process) } // GetExitEnvs returns the value of the field, resolving if necessary func (ev *Event) GetExitEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, ev.Exit.Process) } // GetExitEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetExitEnvsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "exit" { - return zeroValue + return false } if ev.Exit.Process == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessEnvsTruncated(ev, ev.Exit.Process) } // GetExitEuid returns the value of the field, resolving if necessary func (ev *Event) GetExitEuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.Credentials.EUID } // GetExitEuser returns the value of the field, resolving if necessary func (ev *Event) GetExitEuser() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.Credentials.EUser } // GetExitExecTime returns the value of the field, resolving if necessary func (ev *Event) GetExitExecTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exit" { - return zeroValue + return time.Time{} } if ev.Exit.Process == nil { - return zeroValue + return time.Time{} } return ev.Exit.Process.ExecTime } // GetExitExitTime returns the value of the field, resolving if necessary func (ev *Event) GetExitExitTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exit" { - return zeroValue + return time.Time{} } if ev.Exit.Process == nil { - return zeroValue + return time.Time{} } return ev.Exit.Process.ExitTime } // GetExitFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetExitFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exit.Process.IsNotKworker() { return uint64(0) @@ -2049,12 +1871,11 @@ func (ev *Event) GetExitFileChangeTime() uint64 { // GetExitFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetExitFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2064,12 +1885,11 @@ func (ev *Event) GetExitFileFilesystem() string { // GetExitFileGid returns the value of the field, resolving if necessary func (ev *Event) GetExitFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exit.Process.IsNotKworker() { return uint32(0) @@ -2079,12 +1899,11 @@ func (ev *Event) GetExitFileGid() uint32 { // GetExitFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetExitFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2094,12 +1913,11 @@ func (ev *Event) GetExitFileGroup() string { // GetExitFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetExitFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } if !ev.Exit.Process.IsNotKworker() { return []string{} @@ -2109,12 +1927,11 @@ func (ev *Event) GetExitFileHashes() []string { // GetExitFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetExitFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "exit" { - return zeroValue + return false } if ev.Exit.Process == nil { - return zeroValue + return false } if !ev.Exit.Process.IsNotKworker() { return false @@ -2124,12 +1941,11 @@ func (ev *Event) GetExitFileInUpperLayer() bool { // GetExitFileInode returns the value of the field, resolving if necessary func (ev *Event) GetExitFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exit.Process.IsNotKworker() { return uint64(0) @@ -2139,12 +1955,11 @@ func (ev *Event) GetExitFileInode() uint64 { // GetExitFileMode returns the value of the field, resolving if necessary func (ev *Event) GetExitFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint16(0) } if ev.Exit.Process == nil { - return zeroValue + return uint16(0) } if !ev.Exit.Process.IsNotKworker() { return uint16(0) @@ -2154,12 +1969,11 @@ func (ev *Event) GetExitFileMode() uint16 { // GetExitFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetExitFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exit.Process.IsNotKworker() { return uint64(0) @@ -2169,12 +1983,11 @@ func (ev *Event) GetExitFileModificationTime() uint64 { // GetExitFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetExitFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exit.Process.IsNotKworker() { return uint32(0) @@ -2184,12 +1997,11 @@ func (ev *Event) GetExitFileMountId() uint32 { // GetExitFileName returns the value of the field, resolving if necessary func (ev *Event) GetExitFileName() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2199,24 +2011,22 @@ func (ev *Event) GetExitFileName() string { // GetExitFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetExitFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exit.Process.FileEvent)) } // GetExitFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetExitFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2226,12 +2036,11 @@ func (ev *Event) GetExitFilePackageName() string { // GetExitFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetExitFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2241,12 +2050,11 @@ func (ev *Event) GetExitFilePackageSourceVersion() string { // GetExitFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetExitFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2256,12 +2064,11 @@ func (ev *Event) GetExitFilePackageVersion() string { // GetExitFilePath returns the value of the field, resolving if necessary func (ev *Event) GetExitFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2271,24 +2078,22 @@ func (ev *Event) GetExitFilePath() string { // GetExitFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetExitFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Exit.Process.FileEvent)) } // GetExitFileRights returns the value of the field, resolving if necessary func (ev *Event) GetExitFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } if !ev.Exit.Process.IsNotKworker() { return 0 @@ -2298,12 +2103,11 @@ func (ev *Event) GetExitFileRights() int { // GetExitFileUid returns the value of the field, resolving if necessary func (ev *Event) GetExitFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exit.Process.IsNotKworker() { return uint32(0) @@ -2313,12 +2117,11 @@ func (ev *Event) GetExitFileUid() uint32 { // GetExitFileUser returns the value of the field, resolving if necessary func (ev *Event) GetExitFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.IsNotKworker() { return "" @@ -2328,96 +2131,88 @@ func (ev *Event) GetExitFileUser() string { // GetExitForkTime returns the value of the field, resolving if necessary func (ev *Event) GetExitForkTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exit" { - return zeroValue + return time.Time{} } if ev.Exit.Process == nil { - return zeroValue + return time.Time{} } return ev.Exit.Process.ForkTime } // GetExitFsgid returns the value of the field, resolving if necessary func (ev *Event) GetExitFsgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.Credentials.FSGID } // GetExitFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetExitFsgroup() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.Credentials.FSGroup } // GetExitFsuid returns the value of the field, resolving if necessary func (ev *Event) GetExitFsuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.Credentials.FSUID } // GetExitFsuser returns the value of the field, resolving if necessary func (ev *Event) GetExitFsuser() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.Credentials.FSUser } // GetExitGid returns the value of the field, resolving if necessary func (ev *Event) GetExitGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.Credentials.GID } // GetExitGroup returns the value of the field, resolving if necessary func (ev *Event) GetExitGroup() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.Credentials.Group } // GetExitInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exit.Process.HasInterpreter() { return uint64(0) @@ -2427,12 +2222,11 @@ func (ev *Event) GetExitInterpreterFileChangeTime() uint64 { // GetExitInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2442,12 +2236,11 @@ func (ev *Event) GetExitInterpreterFileFilesystem() string { // GetExitInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exit.Process.HasInterpreter() { return uint32(0) @@ -2457,12 +2250,11 @@ func (ev *Event) GetExitInterpreterFileGid() uint32 { // GetExitInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2472,12 +2264,11 @@ func (ev *Event) GetExitInterpreterFileGroup() string { // GetExitInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } if !ev.Exit.Process.HasInterpreter() { return []string{} @@ -2487,12 +2278,11 @@ func (ev *Event) GetExitInterpreterFileHashes() []string { // GetExitInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "exit" { - return zeroValue + return false } if ev.Exit.Process == nil { - return zeroValue + return false } if !ev.Exit.Process.HasInterpreter() { return false @@ -2502,12 +2292,11 @@ func (ev *Event) GetExitInterpreterFileInUpperLayer() bool { // GetExitInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exit.Process.HasInterpreter() { return uint64(0) @@ -2517,12 +2306,11 @@ func (ev *Event) GetExitInterpreterFileInode() uint64 { // GetExitInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint16(0) } if ev.Exit.Process == nil { - return zeroValue + return uint16(0) } if !ev.Exit.Process.HasInterpreter() { return uint16(0) @@ -2532,12 +2320,11 @@ func (ev *Event) GetExitInterpreterFileMode() uint16 { // GetExitInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint64(0) } if ev.Exit.Process == nil { - return zeroValue + return uint64(0) } if !ev.Exit.Process.HasInterpreter() { return uint64(0) @@ -2547,12 +2334,11 @@ func (ev *Event) GetExitInterpreterFileModificationTime() uint64 { // GetExitInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exit.Process.HasInterpreter() { return uint32(0) @@ -2562,12 +2348,11 @@ func (ev *Event) GetExitInterpreterFileMountId() uint32 { // GetExitInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileName() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2577,24 +2362,22 @@ func (ev *Event) GetExitInterpreterFileName() string { // GetExitInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exit.Process.LinuxBinprm.FileEvent)) } // GetExitInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2604,12 +2387,11 @@ func (ev *Event) GetExitInterpreterFilePackageName() string { // GetExitInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2619,12 +2401,11 @@ func (ev *Event) GetExitInterpreterFilePackageSourceVersion() string { // GetExitInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2634,12 +2415,11 @@ func (ev *Event) GetExitInterpreterFilePackageVersion() string { // GetExitInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2649,24 +2429,22 @@ func (ev *Event) GetExitInterpreterFilePath() string { // GetExitInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Exit.Process.LinuxBinprm.FileEvent)) } // GetExitInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } if !ev.Exit.Process.HasInterpreter() { return 0 @@ -2676,12 +2454,11 @@ func (ev *Event) GetExitInterpreterFileRights() int { // GetExitInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } if !ev.Exit.Process.HasInterpreter() { return uint32(0) @@ -2691,12 +2468,11 @@ func (ev *Event) GetExitInterpreterFileUid() uint32 { // GetExitInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetExitInterpreterFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } if !ev.Exit.Process.HasInterpreter() { return "" @@ -2706,1521 +2482,1356 @@ func (ev *Event) GetExitInterpreterFileUser() string { // GetExitIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetExitIsKworker() bool { - zeroValue := false if ev.GetEventType().String() != "exit" { - return zeroValue + return false } if ev.Exit.Process == nil { - return zeroValue + return false } return ev.Exit.Process.PIDContext.IsKworker } // GetExitIsThread returns the value of the field, resolving if necessary func (ev *Event) GetExitIsThread() bool { - zeroValue := false if ev.GetEventType().String() != "exit" { - return zeroValue + return false } if ev.Exit.Process == nil { - return zeroValue + return false } return ev.Exit.Process.IsThread } // GetExitPid returns the value of the field, resolving if necessary func (ev *Event) GetExitPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.PIDContext.Pid } // GetExitPpid returns the value of the field, resolving if necessary func (ev *Event) GetExitPpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.PPid } // GetExitTid returns the value of the field, resolving if necessary func (ev *Event) GetExitTid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.PIDContext.Tid } // GetExitTtyName returns the value of the field, resolving if necessary func (ev *Event) GetExitTtyName() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.TTYName } // GetExitUid returns the value of the field, resolving if necessary func (ev *Event) GetExitUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.Credentials.UID } // GetExitUser returns the value of the field, resolving if necessary func (ev *Event) GetExitUser() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.Credentials.User } // GetExitUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetExitUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveK8SGroups(ev, &ev.Exit.Process.UserSession) } // GetExitUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetExitUserSessionK8sUid() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUID(ev, &ev.Exit.Process.UserSession) } // GetExitUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetExitUserSessionK8sUsername() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUsername(ev, &ev.Exit.Process.UserSession) } // GetLinkFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint64(0) } return ev.Link.Source.FileFields.CTime } // GetLinkFileDestinationChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint64(0) } return ev.Link.Target.FileFields.CTime } // GetLinkFileDestinationFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Link.Target) } // GetLinkFileDestinationGid returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint32(0) } return ev.Link.Target.FileFields.GID } // GetLinkFileDestinationGroup returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationGroup() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Link.Target.FileFields) } // GetLinkFileDestinationHashes returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "link" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Link.Target) } // GetLinkFileDestinationInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "link" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Link.Target.FileFields) } // GetLinkFileDestinationInode returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint64(0) } return ev.Link.Target.FileFields.PathKey.Inode } // GetLinkFileDestinationMode returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint16(0) } return ev.Link.Target.FileFields.Mode } // GetLinkFileDestinationModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint64(0) } return ev.Link.Target.FileFields.MTime } // GetLinkFileDestinationMountId returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint32(0) } return ev.Link.Target.FileFields.PathKey.MountID } // GetLinkFileDestinationName returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationName() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Link.Target) } // GetLinkFileDestinationNameLength returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "link" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Link.Target)) } // GetLinkFileDestinationPackageName returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationPackageName() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Link.Target) } // GetLinkFileDestinationPackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationPackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Link.Target) } // GetLinkFileDestinationPackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationPackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Link.Target) } // GetLinkFileDestinationPath returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationPath() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Link.Target) } // GetLinkFileDestinationPathLength returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationPathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "link" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Link.Target)) } // GetLinkFileDestinationRights returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationRights() int { - zeroValue := 0 if ev.GetEventType().String() != "link" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Link.Target.FileFields) } // GetLinkFileDestinationUid returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint32(0) } return ev.Link.Target.FileFields.UID } // GetLinkFileDestinationUser returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileDestinationUser() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Link.Target.FileFields) } // GetLinkFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Link.Source) } // GetLinkFileGid returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint32(0) } return ev.Link.Source.FileFields.GID } // GetLinkFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Link.Source.FileFields) } // GetLinkFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "link" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Link.Source) } // GetLinkFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "link" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Link.Source.FileFields) } // GetLinkFileInode returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint64(0) } return ev.Link.Source.FileFields.PathKey.Inode } // GetLinkFileMode returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint16(0) } return ev.Link.Source.FileFields.Mode } // GetLinkFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint64(0) } return ev.Link.Source.FileFields.MTime } // GetLinkFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint32(0) } return ev.Link.Source.FileFields.PathKey.MountID } // GetLinkFileName returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileName() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Link.Source) } // GetLinkFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "link" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Link.Source)) } // GetLinkFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetLinkFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Link.Source) } // GetLinkFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetLinkFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Link.Source) } // GetLinkFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetLinkFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Link.Source) } // GetLinkFilePath returns the value of the field, resolving if necessary func (ev *Event) GetLinkFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Link.Source) } // GetLinkFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetLinkFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "link" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Link.Source)) } // GetLinkFileRights returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "link" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Link.Source.FileFields) } // GetLinkFileUid returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "link" { - return zeroValue + return uint32(0) } return ev.Link.Source.FileFields.UID } // GetLinkFileUser returns the value of the field, resolving if necessary func (ev *Event) GetLinkFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "link" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Link.Source.FileFields) } // GetLinkRetval returns the value of the field, resolving if necessary func (ev *Event) GetLinkRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "link" { - return zeroValue + return int64(0) } return ev.Link.SyscallEvent.Retval } // GetLoadModuleArgs returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleArgs() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveModuleArgs(ev, &ev.LoadModule) } // GetLoadModuleArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleArgsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "load_module" { - return zeroValue + return false } return ev.LoadModule.ArgsTruncated } // GetLoadModuleArgv returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "load_module" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveModuleArgv(ev, &ev.LoadModule) } // GetLoadModuleFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return uint64(0) } return ev.LoadModule.File.FileFields.CTime } // GetLoadModuleFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.LoadModule.File) } // GetLoadModuleFileGid returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return uint32(0) } return ev.LoadModule.File.FileFields.GID } // GetLoadModuleFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.LoadModule.File.FileFields) } // GetLoadModuleFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "load_module" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.LoadModule.File) } // GetLoadModuleFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "load_module" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.LoadModule.File.FileFields) } // GetLoadModuleFileInode returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return uint64(0) } return ev.LoadModule.File.FileFields.PathKey.Inode } // GetLoadModuleFileMode returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return uint16(0) } return ev.LoadModule.File.FileFields.Mode } // GetLoadModuleFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return uint64(0) } return ev.LoadModule.File.FileFields.MTime } // GetLoadModuleFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return uint32(0) } return ev.LoadModule.File.FileFields.PathKey.MountID } // GetLoadModuleFileName returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileName() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.LoadModule.File) } // GetLoadModuleFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "load_module" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.LoadModule.File)) } // GetLoadModuleFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.LoadModule.File) } // GetLoadModuleFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.LoadModule.File) } // GetLoadModuleFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.LoadModule.File) } // GetLoadModuleFilePath returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.LoadModule.File) } // GetLoadModuleFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "load_module" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.LoadModule.File)) } // GetLoadModuleFileRights returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "load_module" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.LoadModule.File.FileFields) } // GetLoadModuleFileUid returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return uint32(0) } return ev.LoadModule.File.FileFields.UID } // GetLoadModuleFileUser returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.LoadModule.File.FileFields) } // GetLoadModuleLoadedFromMemory returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleLoadedFromMemory() bool { - zeroValue := false if ev.GetEventType().String() != "load_module" { - return zeroValue + return false } return ev.LoadModule.LoadedFromMemory } // GetLoadModuleName returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleName() string { - zeroValue := "" if ev.GetEventType().String() != "load_module" { - return zeroValue + return "" } return ev.LoadModule.Name } // GetLoadModuleRetval returns the value of the field, resolving if necessary func (ev *Event) GetLoadModuleRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "load_module" { - return zeroValue + return int64(0) } return ev.LoadModule.SyscallEvent.Retval } // GetMkdirFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint64(0) } return ev.Mkdir.File.FileFields.CTime } // GetMkdirFileDestinationMode returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileDestinationMode() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint32(0) } return ev.Mkdir.Mode } // GetMkdirFileDestinationRights returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileDestinationRights() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint32(0) } return ev.Mkdir.Mode } // GetMkdirFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Mkdir.File) } // GetMkdirFileGid returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint32(0) } return ev.Mkdir.File.FileFields.GID } // GetMkdirFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Mkdir.File.FileFields) } // GetMkdirFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "mkdir" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Mkdir.File) } // GetMkdirFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "mkdir" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Mkdir.File.FileFields) } // GetMkdirFileInode returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint64(0) } return ev.Mkdir.File.FileFields.PathKey.Inode } // GetMkdirFileMode returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint16(0) } return ev.Mkdir.File.FileFields.Mode } // GetMkdirFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint64(0) } return ev.Mkdir.File.FileFields.MTime } // GetMkdirFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint32(0) } return ev.Mkdir.File.FileFields.PathKey.MountID } // GetMkdirFileName returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileName() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Mkdir.File) } // GetMkdirFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "mkdir" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Mkdir.File)) } // GetMkdirFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Mkdir.File) } // GetMkdirFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Mkdir.File) } // GetMkdirFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Mkdir.File) } // GetMkdirFilePath returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Mkdir.File) } // GetMkdirFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "mkdir" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Mkdir.File)) } // GetMkdirFileRights returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "mkdir" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Mkdir.File.FileFields) } // GetMkdirFileUid returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return uint32(0) } return ev.Mkdir.File.FileFields.UID } // GetMkdirFileUser returns the value of the field, resolving if necessary func (ev *Event) GetMkdirFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "mkdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Mkdir.File.FileFields) } // GetMkdirRetval returns the value of the field, resolving if necessary func (ev *Event) GetMkdirRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "mkdir" { - return zeroValue + return int64(0) } return ev.Mkdir.SyscallEvent.Retval } // GetMmapFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return uint64(0) } return ev.MMap.File.FileFields.CTime } // GetMmapFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.MMap.File) } // GetMmapFileGid returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return uint32(0) } return ev.MMap.File.FileFields.GID } // GetMmapFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.MMap.File.FileFields) } // GetMmapFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "mmap" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.MMap.File) } // GetMmapFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "mmap" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.MMap.File.FileFields) } // GetMmapFileInode returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return uint64(0) } return ev.MMap.File.FileFields.PathKey.Inode } // GetMmapFileMode returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return uint16(0) } return ev.MMap.File.FileFields.Mode } // GetMmapFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return uint64(0) } return ev.MMap.File.FileFields.MTime } // GetMmapFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return uint32(0) } return ev.MMap.File.FileFields.PathKey.MountID } // GetMmapFileName returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileName() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.MMap.File) } // GetMmapFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "mmap" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.MMap.File)) } // GetMmapFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetMmapFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.MMap.File) } // GetMmapFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetMmapFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.MMap.File) } // GetMmapFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetMmapFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.MMap.File) } // GetMmapFilePath returns the value of the field, resolving if necessary func (ev *Event) GetMmapFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.MMap.File) } // GetMmapFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetMmapFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "mmap" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.MMap.File)) } // GetMmapFileRights returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "mmap" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.MMap.File.FileFields) } // GetMmapFileUid returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return uint32(0) } return ev.MMap.File.FileFields.UID } // GetMmapFileUser returns the value of the field, resolving if necessary func (ev *Event) GetMmapFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "mmap" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.MMap.File.FileFields) } // GetMmapFlags returns the value of the field, resolving if necessary func (ev *Event) GetMmapFlags() int { - zeroValue := 0 if ev.GetEventType().String() != "mmap" { - return zeroValue + return 0 } return ev.MMap.Flags } // GetMmapProtection returns the value of the field, resolving if necessary func (ev *Event) GetMmapProtection() int { - zeroValue := 0 if ev.GetEventType().String() != "mmap" { - return zeroValue + return 0 } return ev.MMap.Protection } // GetMmapRetval returns the value of the field, resolving if necessary func (ev *Event) GetMmapRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "mmap" { - return zeroValue + return int64(0) } return ev.MMap.SyscallEvent.Retval } // GetMountFsType returns the value of the field, resolving if necessary func (ev *Event) GetMountFsType() string { - zeroValue := "" if ev.GetEventType().String() != "mount" { - return zeroValue + return "" } return ev.Mount.Mount.FSType } // GetMountMountpointPath returns the value of the field, resolving if necessary func (ev *Event) GetMountMountpointPath() string { - zeroValue := "" if ev.GetEventType().String() != "mount" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveMountPointPath(ev, &ev.Mount) } // GetMountRetval returns the value of the field, resolving if necessary func (ev *Event) GetMountRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "mount" { - return zeroValue + return int64(0) } return ev.Mount.SyscallEvent.Retval } // GetMountRootPath returns the value of the field, resolving if necessary func (ev *Event) GetMountRootPath() string { - zeroValue := "" if ev.GetEventType().String() != "mount" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveMountRootPath(ev, &ev.Mount) } // GetMountSourcePath returns the value of the field, resolving if necessary func (ev *Event) GetMountSourcePath() string { - zeroValue := "" if ev.GetEventType().String() != "mount" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveMountSourcePath(ev, &ev.Mount) } // GetMprotectReqProtection returns the value of the field, resolving if necessary func (ev *Event) GetMprotectReqProtection() int { - zeroValue := 0 if ev.GetEventType().String() != "mprotect" { - return zeroValue + return 0 } return ev.MProtect.ReqProtection } // GetMprotectRetval returns the value of the field, resolving if necessary func (ev *Event) GetMprotectRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "mprotect" { - return zeroValue + return int64(0) } return ev.MProtect.SyscallEvent.Retval } // GetMprotectVmProtection returns the value of the field, resolving if necessary func (ev *Event) GetMprotectVmProtection() int { - zeroValue := 0 if ev.GetEventType().String() != "mprotect" { - return zeroValue + return 0 } return ev.MProtect.VMProtection } // GetNetworkDestinationIp returns the value of the field, resolving if necessary func (ev *Event) GetNetworkDestinationIp() net.IPNet { - zeroValue := net.IPNet{} if ev.GetEventType().String() != "dns" { - return zeroValue + return net.IPNet{} } return ev.NetworkContext.Destination.IPNet } // GetNetworkDestinationPort returns the value of the field, resolving if necessary func (ev *Event) GetNetworkDestinationPort() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.NetworkContext.Destination.Port } // GetNetworkDeviceIfindex returns the value of the field, resolving if necessary func (ev *Event) GetNetworkDeviceIfindex() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint32(0) } return ev.NetworkContext.Device.IfIndex } // GetNetworkDeviceIfname returns the value of the field, resolving if necessary func (ev *Event) GetNetworkDeviceIfname() string { - zeroValue := "" if ev.GetEventType().String() != "dns" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveNetworkDeviceIfName(ev, &ev.NetworkContext.Device) } // GetNetworkL3Protocol returns the value of the field, resolving if necessary func (ev *Event) GetNetworkL3Protocol() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.NetworkContext.L3Protocol } // GetNetworkL4Protocol returns the value of the field, resolving if necessary func (ev *Event) GetNetworkL4Protocol() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.NetworkContext.L4Protocol } // GetNetworkSize returns the value of the field, resolving if necessary func (ev *Event) GetNetworkSize() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint32(0) } return ev.NetworkContext.Size } // GetNetworkSourceIp returns the value of the field, resolving if necessary func (ev *Event) GetNetworkSourceIp() net.IPNet { - zeroValue := net.IPNet{} if ev.GetEventType().String() != "dns" { - return zeroValue + return net.IPNet{} } return ev.NetworkContext.Source.IPNet } // GetNetworkSourcePort returns the value of the field, resolving if necessary func (ev *Event) GetNetworkSourcePort() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "dns" { - return zeroValue + return uint16(0) } return ev.NetworkContext.Source.Port } // GetOpenFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint64(0) } return ev.Open.File.FileFields.CTime } // GetOpenFileDestinationMode returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileDestinationMode() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint32(0) } return ev.Open.Mode } // GetOpenFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Open.File) } // GetOpenFileGid returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint32(0) } return ev.Open.File.FileFields.GID } // GetOpenFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Open.File.FileFields) } // GetOpenFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "open" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Open.File) } // GetOpenFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "open" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Open.File.FileFields) } // GetOpenFileInode returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint64(0) } return ev.Open.File.FileFields.PathKey.Inode } // GetOpenFileMode returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint16(0) } return ev.Open.File.FileFields.Mode } // GetOpenFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint64(0) } return ev.Open.File.FileFields.MTime } // GetOpenFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint32(0) } return ev.Open.File.FileFields.PathKey.MountID } // GetOpenFileName returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileName() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Open.File) } // GetOpenFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "open" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Open.File)) } // GetOpenFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetOpenFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Open.File) } // GetOpenFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetOpenFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Open.File) } // GetOpenFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetOpenFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Open.File) } // GetOpenFilePath returns the value of the field, resolving if necessary func (ev *Event) GetOpenFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Open.File) } // GetOpenFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetOpenFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "open" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Open.File)) } // GetOpenFileRights returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "open" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Open.File.FileFields) } // GetOpenFileUid returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint32(0) } return ev.Open.File.FileFields.UID } // GetOpenFileUser returns the value of the field, resolving if necessary func (ev *Event) GetOpenFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "open" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Open.File.FileFields) } // GetOpenFlags returns the value of the field, resolving if necessary func (ev *Event) GetOpenFlags() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "open" { - return zeroValue + return uint32(0) } return ev.Open.Flags } // GetOpenRetval returns the value of the field, resolving if necessary func (ev *Event) GetOpenRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "open" { - return zeroValue + return int64(0) } return ev.Open.SyscallEvent.Retval } // GetProcessAncestorsArgs returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgs() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4237,12 +3848,11 @@ func (ev *Event) GetProcessAncestorsArgs() []string { // GetProcessAncestorsArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgsFlags() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4259,12 +3869,11 @@ func (ev *Event) GetProcessAncestorsArgsFlags() []string { // GetProcessAncestorsArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgsOptions() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4281,12 +3890,11 @@ func (ev *Event) GetProcessAncestorsArgsOptions() []string { // GetProcessAncestorsArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgsScrubbed() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4303,12 +3911,11 @@ func (ev *Event) GetProcessAncestorsArgsScrubbed() []string { // GetProcessAncestorsArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgsTruncated() []bool { - zeroValue := []bool{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []bool{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -4325,12 +3932,11 @@ func (ev *Event) GetProcessAncestorsArgsTruncated() []bool { // GetProcessAncestorsArgv returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgv() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4347,12 +3953,11 @@ func (ev *Event) GetProcessAncestorsArgv() []string { // GetProcessAncestorsArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgv0() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4369,12 +3974,11 @@ func (ev *Event) GetProcessAncestorsArgv0() []string { // GetProcessAncestorsArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsArgvScrubbed() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4391,12 +3995,11 @@ func (ev *Event) GetProcessAncestorsArgvScrubbed() []string { // GetProcessAncestorsCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsCapEffective() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -4413,12 +4016,11 @@ func (ev *Event) GetProcessAncestorsCapEffective() []uint64 { // GetProcessAncestorsCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsCapPermitted() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -4435,12 +4037,11 @@ func (ev *Event) GetProcessAncestorsCapPermitted() []uint64 { // GetProcessAncestorsComm returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsComm() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4457,12 +4058,11 @@ func (ev *Event) GetProcessAncestorsComm() []string { // GetProcessAncestorsContainerId returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsContainerId() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4479,12 +4079,11 @@ func (ev *Event) GetProcessAncestorsContainerId() []string { // GetProcessAncestorsCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsCreatedAt() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -4501,12 +4100,11 @@ func (ev *Event) GetProcessAncestorsCreatedAt() []int { // GetProcessAncestorsEgid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEgid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -4523,12 +4121,11 @@ func (ev *Event) GetProcessAncestorsEgid() []uint32 { // GetProcessAncestorsEgroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEgroup() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4545,12 +4142,11 @@ func (ev *Event) GetProcessAncestorsEgroup() []string { // GetProcessAncestorsEnvp returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEnvp() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4567,12 +4163,11 @@ func (ev *Event) GetProcessAncestorsEnvp() []string { // GetProcessAncestorsEnvs returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEnvs() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4589,12 +4184,11 @@ func (ev *Event) GetProcessAncestorsEnvs() []string { // GetProcessAncestorsEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEnvsTruncated() []bool { - zeroValue := []bool{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []bool{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -4611,12 +4205,11 @@ func (ev *Event) GetProcessAncestorsEnvsTruncated() []bool { // GetProcessAncestorsEuid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEuid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -4633,12 +4226,11 @@ func (ev *Event) GetProcessAncestorsEuid() []uint32 { // GetProcessAncestorsEuser returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEuser() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4655,12 +4247,11 @@ func (ev *Event) GetProcessAncestorsEuser() []string { // GetProcessAncestorsFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileChangeTime() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -4677,12 +4268,11 @@ func (ev *Event) GetProcessAncestorsFileChangeTime() []uint64 { // GetProcessAncestorsFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileFilesystem() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4699,12 +4289,11 @@ func (ev *Event) GetProcessAncestorsFileFilesystem() []string { // GetProcessAncestorsFileGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileGid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -4721,12 +4310,11 @@ func (ev *Event) GetProcessAncestorsFileGid() []uint32 { // GetProcessAncestorsFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileGroup() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4743,12 +4331,11 @@ func (ev *Event) GetProcessAncestorsFileGroup() []string { // GetProcessAncestorsFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileHashes() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4765,12 +4352,11 @@ func (ev *Event) GetProcessAncestorsFileHashes() []string { // GetProcessAncestorsFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileInUpperLayer() []bool { - zeroValue := []bool{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []bool{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -4787,12 +4373,11 @@ func (ev *Event) GetProcessAncestorsFileInUpperLayer() []bool { // GetProcessAncestorsFileInode returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileInode() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -4809,12 +4394,11 @@ func (ev *Event) GetProcessAncestorsFileInode() []uint64 { // GetProcessAncestorsFileMode returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileMode() []uint16 { - zeroValue := []uint16{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint16{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint16{} } var values []uint16 ctx := eval.NewContext(ev) @@ -4831,12 +4415,11 @@ func (ev *Event) GetProcessAncestorsFileMode() []uint16 { // GetProcessAncestorsFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileModificationTime() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -4853,12 +4436,11 @@ func (ev *Event) GetProcessAncestorsFileModificationTime() []uint64 { // GetProcessAncestorsFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileMountId() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -4875,12 +4457,11 @@ func (ev *Event) GetProcessAncestorsFileMountId() []uint32 { // GetProcessAncestorsFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileName() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4897,12 +4478,11 @@ func (ev *Event) GetProcessAncestorsFileName() []string { // GetProcessAncestorsFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileNameLength() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -4919,12 +4499,11 @@ func (ev *Event) GetProcessAncestorsFileNameLength() []int { // GetProcessAncestorsFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFilePackageName() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4941,12 +4520,11 @@ func (ev *Event) GetProcessAncestorsFilePackageName() []string { // GetProcessAncestorsFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFilePackageSourceVersion() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4963,12 +4541,11 @@ func (ev *Event) GetProcessAncestorsFilePackageSourceVersion() []string { // GetProcessAncestorsFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFilePackageVersion() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -4985,12 +4562,11 @@ func (ev *Event) GetProcessAncestorsFilePackageVersion() []string { // GetProcessAncestorsFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFilePath() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5007,12 +4583,11 @@ func (ev *Event) GetProcessAncestorsFilePath() []string { // GetProcessAncestorsFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFilePathLength() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -5029,12 +4604,11 @@ func (ev *Event) GetProcessAncestorsFilePathLength() []int { // GetProcessAncestorsFileRights returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileRights() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -5051,12 +4625,11 @@ func (ev *Event) GetProcessAncestorsFileRights() []int { // GetProcessAncestorsFileUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileUid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5073,12 +4646,11 @@ func (ev *Event) GetProcessAncestorsFileUid() []uint32 { // GetProcessAncestorsFileUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileUser() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5095,12 +4667,11 @@ func (ev *Event) GetProcessAncestorsFileUser() []string { // GetProcessAncestorsFsgid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFsgid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5117,12 +4688,11 @@ func (ev *Event) GetProcessAncestorsFsgid() []uint32 { // GetProcessAncestorsFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFsgroup() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5139,12 +4709,11 @@ func (ev *Event) GetProcessAncestorsFsgroup() []string { // GetProcessAncestorsFsuid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFsuid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5161,12 +4730,11 @@ func (ev *Event) GetProcessAncestorsFsuid() []uint32 { // GetProcessAncestorsFsuser returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFsuser() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5183,12 +4751,11 @@ func (ev *Event) GetProcessAncestorsFsuser() []string { // GetProcessAncestorsGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsGid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5205,12 +4772,11 @@ func (ev *Event) GetProcessAncestorsGid() []uint32 { // GetProcessAncestorsGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsGroup() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5227,12 +4793,11 @@ func (ev *Event) GetProcessAncestorsGroup() []string { // GetProcessAncestorsInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileChangeTime() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -5249,12 +4814,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileChangeTime() []uint64 { // GetProcessAncestorsInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileFilesystem() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5271,12 +4835,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileFilesystem() []string { // GetProcessAncestorsInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileGid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5293,12 +4856,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileGid() []uint32 { // GetProcessAncestorsInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileGroup() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5315,12 +4877,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileGroup() []string { // GetProcessAncestorsInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileHashes() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5337,12 +4898,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileHashes() []string { // GetProcessAncestorsInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileInUpperLayer() []bool { - zeroValue := []bool{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []bool{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -5359,12 +4919,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileInUpperLayer() []bool { // GetProcessAncestorsInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileInode() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -5381,12 +4940,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileInode() []uint64 { // GetProcessAncestorsInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileMode() []uint16 { - zeroValue := []uint16{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint16{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint16{} } var values []uint16 ctx := eval.NewContext(ev) @@ -5403,12 +4961,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileMode() []uint16 { // GetProcessAncestorsInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileModificationTime() []uint64 { - zeroValue := []uint64{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint64{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -5425,12 +4982,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileModificationTime() []uint64 { // GetProcessAncestorsInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileMountId() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5447,12 +5003,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileMountId() []uint32 { // GetProcessAncestorsInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileName() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5469,12 +5024,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileName() []string { // GetProcessAncestorsInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileNameLength() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -5491,12 +5045,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileNameLength() []int { // GetProcessAncestorsInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFilePackageName() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5513,12 +5066,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFilePackageName() []string { // GetProcessAncestorsInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFilePackageSourceVersion() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5535,12 +5087,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFilePackageSourceVersion() []stri // GetProcessAncestorsInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFilePackageVersion() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5557,12 +5108,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFilePackageVersion() []string { // GetProcessAncestorsInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFilePath() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5579,12 +5129,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFilePath() []string { // GetProcessAncestorsInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFilePathLength() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -5601,12 +5150,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFilePathLength() []int { // GetProcessAncestorsInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileRights() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -5623,12 +5171,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileRights() []int { // GetProcessAncestorsInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileUid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5645,12 +5192,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileUid() []uint32 { // GetProcessAncestorsInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsInterpreterFileUser() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5667,12 +5213,11 @@ func (ev *Event) GetProcessAncestorsInterpreterFileUser() []string { // GetProcessAncestorsIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsIsKworker() []bool { - zeroValue := []bool{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []bool{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -5689,12 +5234,11 @@ func (ev *Event) GetProcessAncestorsIsKworker() []bool { // GetProcessAncestorsIsThread returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsIsThread() []bool { - zeroValue := []bool{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []bool{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -5711,12 +5255,11 @@ func (ev *Event) GetProcessAncestorsIsThread() []bool { // GetProcessAncestorsPid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsPid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5733,12 +5276,11 @@ func (ev *Event) GetProcessAncestorsPid() []uint32 { // GetProcessAncestorsPpid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsPpid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5755,12 +5297,11 @@ func (ev *Event) GetProcessAncestorsPpid() []uint32 { // GetProcessAncestorsTid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsTid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5777,12 +5318,11 @@ func (ev *Event) GetProcessAncestorsTid() []uint32 { // GetProcessAncestorsTtyName returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsTtyName() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5799,12 +5339,11 @@ func (ev *Event) GetProcessAncestorsTtyName() []string { // GetProcessAncestorsUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsUid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -5821,12 +5360,11 @@ func (ev *Event) GetProcessAncestorsUid() []uint32 { // GetProcessAncestorsUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsUser() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5843,12 +5381,11 @@ func (ev *Event) GetProcessAncestorsUser() []string { // GetProcessAncestorsUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5865,12 +5402,11 @@ func (ev *Event) GetProcessAncestorsUserSessionK8sGroups() []string { // GetProcessAncestorsUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsUserSessionK8sUid() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5887,12 +5423,11 @@ func (ev *Event) GetProcessAncestorsUserSessionK8sUid() []string { // GetProcessAncestorsUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsUserSessionK8sUsername() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -5909,207 +5444,184 @@ func (ev *Event) GetProcessAncestorsUserSessionK8sUsername() []string { // GetProcessArgs returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgs() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgs(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgsFlags() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsFlags(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgsOptions() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsOptions(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgsScrubbed() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgsScrubbed(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgsTruncated() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessArgsTruncated(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessArgv returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgv() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgv(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgv0() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgv0(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessArgvScrubbed() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgvScrubbed(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetProcessCapEffective() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.CapEffective } // GetProcessCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetProcessCapPermitted() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.CapPermitted } // GetProcessComm returns the value of the field, resolving if necessary func (ev *Event) GetProcessComm() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.Comm } // GetProcessContainerId returns the value of the field, resolving if necessary func (ev *Event) GetProcessContainerId() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.ContainerID } // GetProcessCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetProcessCreatedAt() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessEgid returns the value of the field, resolving if necessary func (ev *Event) GetProcessEgid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.EGID } // GetProcessEgroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessEgroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.Credentials.EGroup } // GetProcessEnvp returns the value of the field, resolving if necessary func (ev *Event) GetProcessEnvp() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessEnvs returns the value of the field, resolving if necessary func (ev *Event) GetProcessEnvs() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetProcessEnvsTruncated() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessEnvsTruncated(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessEuid returns the value of the field, resolving if necessary func (ev *Event) GetProcessEuid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.EUID } // GetProcessEuser returns the value of the field, resolving if necessary func (ev *Event) GetProcessEuser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.Credentials.EUser } // GetProcessExecTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessExecTime() time.Time { - zeroValue := time.Time{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return time.Time{} } return ev.BaseEvent.ProcessContext.Process.ExecTime } // GetProcessExitTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessExitTime() time.Time { - zeroValue := time.Time{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return time.Time{} } return ev.BaseEvent.ProcessContext.Process.ExitTime } // GetProcessFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return uint64(0) @@ -6119,9 +5631,8 @@ func (ev *Event) GetProcessFileChangeTime() uint64 { // GetProcessFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileFilesystem() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6131,9 +5642,8 @@ func (ev *Event) GetProcessFileFilesystem() string { // GetProcessFileGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileGid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return uint32(0) @@ -6143,9 +5653,8 @@ func (ev *Event) GetProcessFileGid() uint32 { // GetProcessFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileGroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6155,9 +5664,8 @@ func (ev *Event) GetProcessFileGroup() string { // GetProcessFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileHashes() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return []string{} @@ -6167,9 +5675,8 @@ func (ev *Event) GetProcessFileHashes() []string { // GetProcessFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileInUpperLayer() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return false @@ -6179,9 +5686,8 @@ func (ev *Event) GetProcessFileInUpperLayer() bool { // GetProcessFileInode returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileInode() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return uint64(0) @@ -6191,9 +5697,8 @@ func (ev *Event) GetProcessFileInode() uint64 { // GetProcessFileMode returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileMode() uint16 { - zeroValue := uint16(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint16(0) } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return uint16(0) @@ -6203,9 +5708,8 @@ func (ev *Event) GetProcessFileMode() uint16 { // GetProcessFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return uint64(0) @@ -6215,9 +5719,8 @@ func (ev *Event) GetProcessFileModificationTime() uint64 { // GetProcessFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileMountId() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return uint32(0) @@ -6227,9 +5730,8 @@ func (ev *Event) GetProcessFileMountId() uint32 { // GetProcessFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6239,18 +5741,16 @@ func (ev *Event) GetProcessFileName() string { // GetProcessFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileNameLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.BaseEvent.ProcessContext.Process.FileEvent)) } // GetProcessFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetProcessFilePackageName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6260,9 +5760,8 @@ func (ev *Event) GetProcessFilePackageName() string { // GetProcessFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessFilePackageSourceVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6272,9 +5771,8 @@ func (ev *Event) GetProcessFilePackageSourceVersion() string { // GetProcessFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessFilePackageVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6284,9 +5782,8 @@ func (ev *Event) GetProcessFilePackageVersion() string { // GetProcessFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessFilePath() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6296,18 +5793,16 @@ func (ev *Event) GetProcessFilePath() string { // GetProcessFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessFilePathLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.BaseEvent.ProcessContext.Process.FileEvent)) } // GetProcessFileRights returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileRights() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return 0 @@ -6317,9 +5812,8 @@ func (ev *Event) GetProcessFileRights() int { // GetProcessFileUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileUid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return uint32(0) @@ -6329,9 +5823,8 @@ func (ev *Event) GetProcessFileUid() uint32 { // GetProcessFileUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileUser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.IsNotKworker() { return "" @@ -6341,72 +5834,64 @@ func (ev *Event) GetProcessFileUser() string { // GetProcessForkTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessForkTime() time.Time { - zeroValue := time.Time{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return time.Time{} } return ev.BaseEvent.ProcessContext.Process.ForkTime } // GetProcessFsgid returns the value of the field, resolving if necessary func (ev *Event) GetProcessFsgid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.FSGID } // GetProcessFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessFsgroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.Credentials.FSGroup } // GetProcessFsuid returns the value of the field, resolving if necessary func (ev *Event) GetProcessFsuid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.FSUID } // GetProcessFsuser returns the value of the field, resolving if necessary func (ev *Event) GetProcessFsuser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.Credentials.FSUser } // GetProcessGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessGid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.GID } // GetProcessGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessGroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.Credentials.Group } // GetProcessInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return uint64(0) @@ -6416,9 +5901,8 @@ func (ev *Event) GetProcessInterpreterFileChangeTime() uint64 { // GetProcessInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileFilesystem() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6428,9 +5912,8 @@ func (ev *Event) GetProcessInterpreterFileFilesystem() string { // GetProcessInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return uint32(0) @@ -6440,9 +5923,8 @@ func (ev *Event) GetProcessInterpreterFileGid() uint32 { // GetProcessInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileGroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6452,9 +5934,8 @@ func (ev *Event) GetProcessInterpreterFileGroup() string { // GetProcessInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileHashes() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return []string{} @@ -6464,9 +5945,8 @@ func (ev *Event) GetProcessInterpreterFileHashes() []string { // GetProcessInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return false @@ -6476,9 +5956,8 @@ func (ev *Event) GetProcessInterpreterFileInUpperLayer() bool { // GetProcessInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return uint64(0) @@ -6488,9 +5967,8 @@ func (ev *Event) GetProcessInterpreterFileInode() uint64 { // GetProcessInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint16(0) } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return uint16(0) @@ -6500,9 +5978,8 @@ func (ev *Event) GetProcessInterpreterFileMode() uint16 { // GetProcessInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return uint64(0) @@ -6512,9 +5989,8 @@ func (ev *Event) GetProcessInterpreterFileModificationTime() uint64 { // GetProcessInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return uint32(0) @@ -6524,9 +6000,8 @@ func (ev *Event) GetProcessInterpreterFileMountId() uint32 { // GetProcessInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6536,18 +6011,16 @@ func (ev *Event) GetProcessInterpreterFileName() string { // GetProcessInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileNameLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.BaseEvent.ProcessContext.Process.LinuxBinprm.FileEvent)) } // GetProcessInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFilePackageName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6557,9 +6030,8 @@ func (ev *Event) GetProcessInterpreterFilePackageName() string { // GetProcessInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6569,9 +6041,8 @@ func (ev *Event) GetProcessInterpreterFilePackageSourceVersion() string { // GetProcessInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFilePackageVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6581,9 +6052,8 @@ func (ev *Event) GetProcessInterpreterFilePackageVersion() string { // GetProcessInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFilePath() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6593,18 +6063,16 @@ func (ev *Event) GetProcessInterpreterFilePath() string { // GetProcessInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFilePathLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.BaseEvent.ProcessContext.Process.LinuxBinprm.FileEvent)) } // GetProcessInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileRights() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return 0 @@ -6614,9 +6082,8 @@ func (ev *Event) GetProcessInterpreterFileRights() int { // GetProcessInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return uint32(0) @@ -6626,9 +6093,8 @@ func (ev *Event) GetProcessInterpreterFileUid() uint32 { // GetProcessInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessInterpreterFileUser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.Process.HasInterpreter() { return "" @@ -6638,30 +6104,27 @@ func (ev *Event) GetProcessInterpreterFileUser() string { // GetProcessIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetProcessIsKworker() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } return ev.BaseEvent.ProcessContext.Process.PIDContext.IsKworker } // GetProcessIsThread returns the value of the field, resolving if necessary func (ev *Event) GetProcessIsThread() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } return ev.BaseEvent.ProcessContext.Process.IsThread } // GetProcessParentArgs returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgs() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6671,12 +6134,11 @@ func (ev *Event) GetProcessParentArgs() string { // GetProcessParentArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgsFlags() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -6686,12 +6148,11 @@ func (ev *Event) GetProcessParentArgsFlags() []string { // GetProcessParentArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgsOptions() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -6701,12 +6162,11 @@ func (ev *Event) GetProcessParentArgsOptions() []string { // GetProcessParentArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgsScrubbed() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6716,12 +6176,11 @@ func (ev *Event) GetProcessParentArgsScrubbed() string { // GetProcessParentArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgsTruncated() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.HasParent() { return false @@ -6731,12 +6190,11 @@ func (ev *Event) GetProcessParentArgsTruncated() bool { // GetProcessParentArgv returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgv() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -6746,12 +6204,11 @@ func (ev *Event) GetProcessParentArgv() []string { // GetProcessParentArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgv0() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6761,12 +6218,11 @@ func (ev *Event) GetProcessParentArgv0() string { // GetProcessParentArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentArgvScrubbed() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -6776,12 +6232,11 @@ func (ev *Event) GetProcessParentArgvScrubbed() []string { // GetProcessParentCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentCapEffective() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -6791,12 +6246,11 @@ func (ev *Event) GetProcessParentCapEffective() uint64 { // GetProcessParentCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentCapPermitted() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -6806,12 +6260,11 @@ func (ev *Event) GetProcessParentCapPermitted() uint64 { // GetProcessParentComm returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentComm() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6821,12 +6274,11 @@ func (ev *Event) GetProcessParentComm() string { // GetProcessParentContainerId returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentContainerId() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6836,12 +6288,11 @@ func (ev *Event) GetProcessParentContainerId() string { // GetProcessParentCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentCreatedAt() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } if !ev.BaseEvent.ProcessContext.HasParent() { return 0 @@ -6851,12 +6302,11 @@ func (ev *Event) GetProcessParentCreatedAt() int { // GetProcessParentEgid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEgid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -6866,12 +6316,11 @@ func (ev *Event) GetProcessParentEgid() uint32 { // GetProcessParentEgroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEgroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6881,12 +6330,11 @@ func (ev *Event) GetProcessParentEgroup() string { // GetProcessParentEnvp returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEnvp() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -6896,12 +6344,11 @@ func (ev *Event) GetProcessParentEnvp() []string { // GetProcessParentEnvs returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEnvs() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -6911,12 +6358,11 @@ func (ev *Event) GetProcessParentEnvs() []string { // GetProcessParentEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEnvsTruncated() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.HasParent() { return false @@ -6926,12 +6372,11 @@ func (ev *Event) GetProcessParentEnvsTruncated() bool { // GetProcessParentEuid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEuid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -6941,12 +6386,11 @@ func (ev *Event) GetProcessParentEuid() uint32 { // GetProcessParentEuser returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEuser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6956,12 +6400,11 @@ func (ev *Event) GetProcessParentEuser() string { // GetProcessParentFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -6974,12 +6417,11 @@ func (ev *Event) GetProcessParentFileChangeTime() uint64 { // GetProcessParentFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileFilesystem() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -6992,12 +6434,11 @@ func (ev *Event) GetProcessParentFileFilesystem() string { // GetProcessParentFileGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileGid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7010,12 +6451,11 @@ func (ev *Event) GetProcessParentFileGid() uint32 { // GetProcessParentFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileGroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7028,12 +6468,11 @@ func (ev *Event) GetProcessParentFileGroup() string { // GetProcessParentFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileHashes() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -7046,12 +6485,11 @@ func (ev *Event) GetProcessParentFileHashes() []string { // GetProcessParentFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileInUpperLayer() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.HasParent() { return false @@ -7064,12 +6502,11 @@ func (ev *Event) GetProcessParentFileInUpperLayer() bool { // GetProcessParentFileInode returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileInode() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -7082,12 +6519,11 @@ func (ev *Event) GetProcessParentFileInode() uint64 { // GetProcessParentFileMode returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileMode() uint16 { - zeroValue := uint16(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint16(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint16(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint16(0) @@ -7100,12 +6536,11 @@ func (ev *Event) GetProcessParentFileMode() uint16 { // GetProcessParentFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -7118,12 +6553,11 @@ func (ev *Event) GetProcessParentFileModificationTime() uint64 { // GetProcessParentFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileMountId() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7136,12 +6570,11 @@ func (ev *Event) GetProcessParentFileMountId() uint32 { // GetProcessParentFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7154,24 +6587,22 @@ func (ev *Event) GetProcessParentFileName() string { // GetProcessParentFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileNameLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.BaseEvent.ProcessContext.Parent.FileEvent)) } // GetProcessParentFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFilePackageName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7184,12 +6615,11 @@ func (ev *Event) GetProcessParentFilePackageName() string { // GetProcessParentFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFilePackageSourceVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7202,12 +6632,11 @@ func (ev *Event) GetProcessParentFilePackageSourceVersion() string { // GetProcessParentFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFilePackageVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7220,12 +6649,11 @@ func (ev *Event) GetProcessParentFilePackageVersion() string { // GetProcessParentFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFilePath() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7238,24 +6666,22 @@ func (ev *Event) GetProcessParentFilePath() string { // GetProcessParentFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFilePathLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.BaseEvent.ProcessContext.Parent.FileEvent)) } // GetProcessParentFileRights returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileRights() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } if !ev.BaseEvent.ProcessContext.HasParent() { return 0 @@ -7268,12 +6694,11 @@ func (ev *Event) GetProcessParentFileRights() int { // GetProcessParentFileUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileUid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7286,12 +6711,11 @@ func (ev *Event) GetProcessParentFileUid() uint32 { // GetProcessParentFileUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileUser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7304,12 +6728,11 @@ func (ev *Event) GetProcessParentFileUser() string { // GetProcessParentFsgid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFsgid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7319,12 +6742,11 @@ func (ev *Event) GetProcessParentFsgid() uint32 { // GetProcessParentFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFsgroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7334,12 +6756,11 @@ func (ev *Event) GetProcessParentFsgroup() string { // GetProcessParentFsuid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFsuid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7349,12 +6770,11 @@ func (ev *Event) GetProcessParentFsuid() uint32 { // GetProcessParentFsuser returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFsuser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7364,12 +6784,11 @@ func (ev *Event) GetProcessParentFsuser() string { // GetProcessParentGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentGid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7379,12 +6798,11 @@ func (ev *Event) GetProcessParentGid() uint32 { // GetProcessParentGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentGroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7394,12 +6812,11 @@ func (ev *Event) GetProcessParentGroup() string { // GetProcessParentInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -7412,12 +6829,11 @@ func (ev *Event) GetProcessParentInterpreterFileChangeTime() uint64 { // GetProcessParentInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileFilesystem() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7430,12 +6846,11 @@ func (ev *Event) GetProcessParentInterpreterFileFilesystem() string { // GetProcessParentInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7448,12 +6863,11 @@ func (ev *Event) GetProcessParentInterpreterFileGid() uint32 { // GetProcessParentInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileGroup() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7466,12 +6880,11 @@ func (ev *Event) GetProcessParentInterpreterFileGroup() string { // GetProcessParentInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileHashes() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -7484,12 +6897,11 @@ func (ev *Event) GetProcessParentInterpreterFileHashes() []string { // GetProcessParentInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.HasParent() { return false @@ -7502,12 +6914,11 @@ func (ev *Event) GetProcessParentInterpreterFileInUpperLayer() bool { // GetProcessParentInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -7520,12 +6931,11 @@ func (ev *Event) GetProcessParentInterpreterFileInode() uint64 { // GetProcessParentInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint16(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint16(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint16(0) @@ -7538,12 +6948,11 @@ func (ev *Event) GetProcessParentInterpreterFileMode() uint16 { // GetProcessParentInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint64(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint64(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint64(0) @@ -7556,12 +6965,11 @@ func (ev *Event) GetProcessParentInterpreterFileModificationTime() uint64 { // GetProcessParentInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7574,12 +6982,11 @@ func (ev *Event) GetProcessParentInterpreterFileMountId() uint32 { // GetProcessParentInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7592,24 +6999,22 @@ func (ev *Event) GetProcessParentInterpreterFileName() string { // GetProcessParentInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileNameLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.BaseEvent.ProcessContext.Parent.LinuxBinprm.FileEvent)) } // GetProcessParentInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFilePackageName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7622,12 +7027,11 @@ func (ev *Event) GetProcessParentInterpreterFilePackageName() string { // GetProcessParentInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7640,12 +7044,11 @@ func (ev *Event) GetProcessParentInterpreterFilePackageSourceVersion() string { // GetProcessParentInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFilePackageVersion() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7658,12 +7061,11 @@ func (ev *Event) GetProcessParentInterpreterFilePackageVersion() string { // GetProcessParentInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFilePath() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7676,24 +7078,22 @@ func (ev *Event) GetProcessParentInterpreterFilePath() string { // GetProcessParentInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFilePathLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.BaseEvent.ProcessContext.Parent.LinuxBinprm.FileEvent)) } // GetProcessParentInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileRights() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } if !ev.BaseEvent.ProcessContext.HasParent() { return 0 @@ -7706,12 +7106,11 @@ func (ev *Event) GetProcessParentInterpreterFileRights() int { // GetProcessParentInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7724,12 +7123,11 @@ func (ev *Event) GetProcessParentInterpreterFileUid() uint32 { // GetProcessParentInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentInterpreterFileUser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7742,12 +7140,11 @@ func (ev *Event) GetProcessParentInterpreterFileUser() string { // GetProcessParentIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentIsKworker() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.HasParent() { return false @@ -7757,12 +7154,11 @@ func (ev *Event) GetProcessParentIsKworker() bool { // GetProcessParentIsThread returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentIsThread() bool { - zeroValue := false if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return false } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return false } if !ev.BaseEvent.ProcessContext.HasParent() { return false @@ -7772,12 +7168,11 @@ func (ev *Event) GetProcessParentIsThread() bool { // GetProcessParentPid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentPid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7787,12 +7182,11 @@ func (ev *Event) GetProcessParentPid() uint32 { // GetProcessParentPpid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentPpid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7802,12 +7196,11 @@ func (ev *Event) GetProcessParentPpid() uint32 { // GetProcessParentTid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentTid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7817,12 +7210,11 @@ func (ev *Event) GetProcessParentTid() uint32 { // GetProcessParentTtyName returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentTtyName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7832,12 +7224,11 @@ func (ev *Event) GetProcessParentTtyName() string { // GetProcessParentUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentUid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -7847,12 +7238,11 @@ func (ev *Event) GetProcessParentUid() uint32 { // GetProcessParentUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentUser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7862,12 +7252,11 @@ func (ev *Event) GetProcessParentUser() string { // GetProcessParentUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -7877,12 +7266,11 @@ func (ev *Event) GetProcessParentUserSessionK8sGroups() []string { // GetProcessParentUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentUserSessionK8sUid() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7892,12 +7280,11 @@ func (ev *Event) GetProcessParentUserSessionK8sUid() string { // GetProcessParentUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentUserSessionK8sUsername() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -7907,114 +7294,102 @@ func (ev *Event) GetProcessParentUserSessionK8sUsername() string { // GetProcessPid returns the value of the field, resolving if necessary func (ev *Event) GetProcessPid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.PIDContext.Pid } // GetProcessPpid returns the value of the field, resolving if necessary func (ev *Event) GetProcessPpid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.PPid } // GetProcessTid returns the value of the field, resolving if necessary func (ev *Event) GetProcessTid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.PIDContext.Tid } // GetProcessTtyName returns the value of the field, resolving if necessary func (ev *Event) GetProcessTtyName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.TTYName } // GetProcessUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessUid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.Credentials.UID } // GetProcessUser returns the value of the field, resolving if necessary func (ev *Event) GetProcessUser() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.Credentials.User } // GetProcessUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetProcessUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveK8SGroups(ev, &ev.BaseEvent.ProcessContext.Process.UserSession) } // GetProcessUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetProcessUserSessionK8sUid() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUID(ev, &ev.BaseEvent.ProcessContext.Process.UserSession) } // GetProcessUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetProcessUserSessionK8sUsername() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUsername(ev, &ev.BaseEvent.ProcessContext.Process.UserSession) } // GetPtraceRequest returns the value of the field, resolving if necessary func (ev *Event) GetPtraceRequest() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } return ev.PTrace.Request } // GetPtraceRetval returns the value of the field, resolving if necessary func (ev *Event) GetPtraceRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return int64(0) } return ev.PTrace.SyscallEvent.Retval } // GetPtraceTraceeAncestorsArgs returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8031,15 +7406,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgs() []string { // GetPtraceTraceeAncestorsArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8056,15 +7430,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgsFlags() []string { // GetPtraceTraceeAncestorsArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8081,15 +7454,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgsOptions() []string { // GetPtraceTraceeAncestorsArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgsScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8106,15 +7478,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgsScrubbed() []string { // GetPtraceTraceeAncestorsArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgsTruncated() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []bool{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []bool{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -8131,15 +7502,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgsTruncated() []bool { // GetPtraceTraceeAncestorsArgv returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8156,15 +7526,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgv() []string { // GetPtraceTraceeAncestorsArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgv0() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8181,15 +7550,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgv0() []string { // GetPtraceTraceeAncestorsArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8206,15 +7574,14 @@ func (ev *Event) GetPtraceTraceeAncestorsArgvScrubbed() []string { // GetPtraceTraceeAncestorsCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsCapEffective() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -8231,15 +7598,14 @@ func (ev *Event) GetPtraceTraceeAncestorsCapEffective() []uint64 { // GetPtraceTraceeAncestorsCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsCapPermitted() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -8256,15 +7622,14 @@ func (ev *Event) GetPtraceTraceeAncestorsCapPermitted() []uint64 { // GetPtraceTraceeAncestorsComm returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsComm() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8281,15 +7646,14 @@ func (ev *Event) GetPtraceTraceeAncestorsComm() []string { // GetPtraceTraceeAncestorsContainerId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsContainerId() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8306,15 +7670,14 @@ func (ev *Event) GetPtraceTraceeAncestorsContainerId() []string { // GetPtraceTraceeAncestorsCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsCreatedAt() []int { - zeroValue := []int{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []int{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []int{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -8331,15 +7694,14 @@ func (ev *Event) GetPtraceTraceeAncestorsCreatedAt() []int { // GetPtraceTraceeAncestorsEgid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsEgid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -8356,15 +7718,14 @@ func (ev *Event) GetPtraceTraceeAncestorsEgid() []uint32 { // GetPtraceTraceeAncestorsEgroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsEgroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8381,15 +7742,14 @@ func (ev *Event) GetPtraceTraceeAncestorsEgroup() []string { // GetPtraceTraceeAncestorsEnvp returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8406,15 +7766,14 @@ func (ev *Event) GetPtraceTraceeAncestorsEnvp() []string { // GetPtraceTraceeAncestorsEnvs returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8431,15 +7790,14 @@ func (ev *Event) GetPtraceTraceeAncestorsEnvs() []string { // GetPtraceTraceeAncestorsEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsEnvsTruncated() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []bool{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []bool{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -8456,15 +7814,14 @@ func (ev *Event) GetPtraceTraceeAncestorsEnvsTruncated() []bool { // GetPtraceTraceeAncestorsEuid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsEuid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -8481,15 +7838,14 @@ func (ev *Event) GetPtraceTraceeAncestorsEuid() []uint32 { // GetPtraceTraceeAncestorsEuser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsEuser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8506,15 +7862,14 @@ func (ev *Event) GetPtraceTraceeAncestorsEuser() []string { // GetPtraceTraceeAncestorsFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileChangeTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -8531,15 +7886,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileChangeTime() []uint64 { // GetPtraceTraceeAncestorsFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileFilesystem() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8556,15 +7910,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileFilesystem() []string { // GetPtraceTraceeAncestorsFileGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileGid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -8581,15 +7934,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileGid() []uint32 { // GetPtraceTraceeAncestorsFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileGroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8606,15 +7958,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileGroup() []string { // GetPtraceTraceeAncestorsFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8631,15 +7982,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileHashes() []string { // GetPtraceTraceeAncestorsFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileInUpperLayer() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []bool{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []bool{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -8656,15 +8006,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileInUpperLayer() []bool { // GetPtraceTraceeAncestorsFileInode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileInode() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -8681,15 +8030,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileInode() []uint64 { // GetPtraceTraceeAncestorsFileMode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileMode() []uint16 { - zeroValue := []uint16{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint16{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint16{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint16{} } var values []uint16 ctx := eval.NewContext(ev) @@ -8706,15 +8054,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileMode() []uint16 { // GetPtraceTraceeAncestorsFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileModificationTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -8731,15 +8078,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileModificationTime() []uint64 { // GetPtraceTraceeAncestorsFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileMountId() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -8756,15 +8102,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileMountId() []uint32 { // GetPtraceTraceeAncestorsFileName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8781,15 +8126,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileName() []string { // GetPtraceTraceeAncestorsFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileNameLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []int{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []int{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -8806,15 +8150,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileNameLength() []int { // GetPtraceTraceeAncestorsFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFilePackageName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8831,15 +8174,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFilePackageName() []string { // GetPtraceTraceeAncestorsFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFilePackageSourceVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8856,15 +8198,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFilePackageSourceVersion() []string { // GetPtraceTraceeAncestorsFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFilePackageVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8881,15 +8222,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFilePackageVersion() []string { // GetPtraceTraceeAncestorsFilePath returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFilePath() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -8906,15 +8246,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFilePath() []string { // GetPtraceTraceeAncestorsFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFilePathLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []int{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []int{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -8931,15 +8270,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFilePathLength() []int { // GetPtraceTraceeAncestorsFileRights returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileRights() []int { - zeroValue := []int{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []int{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []int{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -8956,15 +8294,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileRights() []int { // GetPtraceTraceeAncestorsFileUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileUid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -8981,15 +8318,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileUid() []uint32 { // GetPtraceTraceeAncestorsFileUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFileUser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9006,15 +8342,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFileUser() []string { // GetPtraceTraceeAncestorsFsgid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFsgid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9031,15 +8366,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFsgid() []uint32 { // GetPtraceTraceeAncestorsFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFsgroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9056,15 +8390,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFsgroup() []string { // GetPtraceTraceeAncestorsFsuid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFsuid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9081,15 +8414,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFsuid() []uint32 { // GetPtraceTraceeAncestorsFsuser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsFsuser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9106,15 +8438,14 @@ func (ev *Event) GetPtraceTraceeAncestorsFsuser() []string { // GetPtraceTraceeAncestorsGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsGid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9131,15 +8462,14 @@ func (ev *Event) GetPtraceTraceeAncestorsGid() []uint32 { // GetPtraceTraceeAncestorsGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsGroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9156,15 +8486,14 @@ func (ev *Event) GetPtraceTraceeAncestorsGroup() []string { // GetPtraceTraceeAncestorsInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileChangeTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -9181,15 +8510,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileChangeTime() []uint64 { // GetPtraceTraceeAncestorsInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileFilesystem() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9206,15 +8534,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileFilesystem() []string { // GetPtraceTraceeAncestorsInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileGid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9231,15 +8558,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileGid() []uint32 { // GetPtraceTraceeAncestorsInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileGroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9256,15 +8582,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileGroup() []string { // GetPtraceTraceeAncestorsInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9281,15 +8606,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileHashes() []string { // GetPtraceTraceeAncestorsInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileInUpperLayer() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []bool{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []bool{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -9306,15 +8630,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileInUpperLayer() []bool { // GetPtraceTraceeAncestorsInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileInode() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -9331,15 +8654,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileInode() []uint64 { // GetPtraceTraceeAncestorsInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileMode() []uint16 { - zeroValue := []uint16{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint16{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint16{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint16{} } var values []uint16 ctx := eval.NewContext(ev) @@ -9356,15 +8678,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileMode() []uint16 { // GetPtraceTraceeAncestorsInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileModificationTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint64{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -9381,15 +8702,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileModificationTime() []uin // GetPtraceTraceeAncestorsInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileMountId() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9406,15 +8726,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileMountId() []uint32 { // GetPtraceTraceeAncestorsInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9431,15 +8750,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileName() []string { // GetPtraceTraceeAncestorsInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileNameLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []int{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []int{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -9456,15 +8774,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileNameLength() []int { // GetPtraceTraceeAncestorsInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePackageName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9481,15 +8798,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePackageName() []string { // GetPtraceTraceeAncestorsInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePackageSourceVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9506,15 +8822,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePackageSourceVersion() [ // GetPtraceTraceeAncestorsInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePackageVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9531,15 +8846,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePackageVersion() []strin // GetPtraceTraceeAncestorsInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePath() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9556,15 +8870,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePath() []string { // GetPtraceTraceeAncestorsInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePathLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []int{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []int{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -9581,15 +8894,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFilePathLength() []int { // GetPtraceTraceeAncestorsInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileRights() []int { - zeroValue := []int{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []int{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []int{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -9606,15 +8918,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileRights() []int { // GetPtraceTraceeAncestorsInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileUid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9631,15 +8942,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileUid() []uint32 { // GetPtraceTraceeAncestorsInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileUser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9656,15 +8966,14 @@ func (ev *Event) GetPtraceTraceeAncestorsInterpreterFileUser() []string { // GetPtraceTraceeAncestorsIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsIsKworker() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []bool{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []bool{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -9681,15 +8990,14 @@ func (ev *Event) GetPtraceTraceeAncestorsIsKworker() []bool { // GetPtraceTraceeAncestorsIsThread returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsIsThread() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []bool{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []bool{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -9706,15 +9014,14 @@ func (ev *Event) GetPtraceTraceeAncestorsIsThread() []bool { // GetPtraceTraceeAncestorsPid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsPid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9731,15 +9038,14 @@ func (ev *Event) GetPtraceTraceeAncestorsPid() []uint32 { // GetPtraceTraceeAncestorsPpid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsPpid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9756,15 +9062,14 @@ func (ev *Event) GetPtraceTraceeAncestorsPpid() []uint32 { // GetPtraceTraceeAncestorsTid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsTid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9781,15 +9086,14 @@ func (ev *Event) GetPtraceTraceeAncestorsTid() []uint32 { // GetPtraceTraceeAncestorsTtyName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsTtyName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9806,15 +9110,14 @@ func (ev *Event) GetPtraceTraceeAncestorsTtyName() []string { // GetPtraceTraceeAncestorsUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsUid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []uint32{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -9831,15 +9134,14 @@ func (ev *Event) GetPtraceTraceeAncestorsUid() []uint32 { // GetPtraceTraceeAncestorsUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsUser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9856,15 +9158,14 @@ func (ev *Event) GetPtraceTraceeAncestorsUser() []string { // GetPtraceTraceeAncestorsUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9881,15 +9182,14 @@ func (ev *Event) GetPtraceTraceeAncestorsUserSessionK8sGroups() []string { // GetPtraceTraceeAncestorsUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsUserSessionK8sUid() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9906,15 +9206,14 @@ func (ev *Event) GetPtraceTraceeAncestorsUserSessionK8sUid() []string { // GetPtraceTraceeAncestorsUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeAncestorsUserSessionK8sUsername() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -9931,276 +9230,253 @@ func (ev *Event) GetPtraceTraceeAncestorsUserSessionK8sUsername() []string { // GetPtraceTraceeArgs returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgs() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgs(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsFlags(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsOptions(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgsScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgsScrubbed(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessArgsTruncated(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeArgv returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgv(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgv0() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgv0(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgvScrubbed(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeCapEffective() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } return ev.PTrace.Tracee.Process.Credentials.CapEffective } // GetPtraceTraceeCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeCapPermitted() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } return ev.PTrace.Tracee.Process.Credentials.CapPermitted } // GetPtraceTraceeComm returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeComm() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.Comm } // GetPtraceTraceeContainerId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.ContainerID } // GetPtraceTraceeCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeEgid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeEgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.Credentials.EGID } // GetPtraceTraceeEgroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeEgroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.Credentials.EGroup } // GetPtraceTraceeEnvp returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeEnvs returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeEnvsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessEnvsTruncated(ev, &ev.PTrace.Tracee.Process) } // GetPtraceTraceeEuid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeEuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.Credentials.EUID } // GetPtraceTraceeEuser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeEuser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.Credentials.EUser } // GetPtraceTraceeExecTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeExecTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return time.Time{} } if ev.PTrace.Tracee == nil { - return zeroValue + return time.Time{} } return ev.PTrace.Tracee.Process.ExecTime } // GetPtraceTraceeExitTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeExitTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return time.Time{} } if ev.PTrace.Tracee == nil { - return zeroValue + return time.Time{} } return ev.PTrace.Tracee.Process.ExitTime } // GetPtraceTraceeFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.Process.IsNotKworker() { return uint64(0) @@ -10210,12 +9486,11 @@ func (ev *Event) GetPtraceTraceeFileChangeTime() uint64 { // GetPtraceTraceeFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10225,12 +9500,11 @@ func (ev *Event) GetPtraceTraceeFileFilesystem() string { // GetPtraceTraceeFileGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.Process.IsNotKworker() { return uint32(0) @@ -10240,12 +9514,11 @@ func (ev *Event) GetPtraceTraceeFileGid() uint32 { // GetPtraceTraceeFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10255,12 +9528,11 @@ func (ev *Event) GetPtraceTraceeFileGroup() string { // GetPtraceTraceeFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.Process.IsNotKworker() { return []string{} @@ -10270,12 +9542,11 @@ func (ev *Event) GetPtraceTraceeFileHashes() []string { // GetPtraceTraceeFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.Process.IsNotKworker() { return false @@ -10285,12 +9556,11 @@ func (ev *Event) GetPtraceTraceeFileInUpperLayer() bool { // GetPtraceTraceeFileInode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.Process.IsNotKworker() { return uint64(0) @@ -10300,12 +9570,11 @@ func (ev *Event) GetPtraceTraceeFileInode() uint64 { // GetPtraceTraceeFileMode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint16(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint16(0) } if !ev.PTrace.Tracee.Process.IsNotKworker() { return uint16(0) @@ -10315,12 +9584,11 @@ func (ev *Event) GetPtraceTraceeFileMode() uint16 { // GetPtraceTraceeFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.Process.IsNotKworker() { return uint64(0) @@ -10330,12 +9598,11 @@ func (ev *Event) GetPtraceTraceeFileModificationTime() uint64 { // GetPtraceTraceeFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.Process.IsNotKworker() { return uint32(0) @@ -10345,12 +9612,11 @@ func (ev *Event) GetPtraceTraceeFileMountId() uint32 { // GetPtraceTraceeFileName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10360,24 +9626,22 @@ func (ev *Event) GetPtraceTraceeFileName() string { // GetPtraceTraceeFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.PTrace.Tracee.Process.FileEvent)) } // GetPtraceTraceeFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10387,12 +9651,11 @@ func (ev *Event) GetPtraceTraceeFilePackageName() string { // GetPtraceTraceeFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10402,12 +9665,11 @@ func (ev *Event) GetPtraceTraceeFilePackageSourceVersion() string { // GetPtraceTraceeFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10417,12 +9679,11 @@ func (ev *Event) GetPtraceTraceeFilePackageVersion() string { // GetPtraceTraceeFilePath returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10432,24 +9693,22 @@ func (ev *Event) GetPtraceTraceeFilePath() string { // GetPtraceTraceeFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.PTrace.Tracee.Process.FileEvent)) } // GetPtraceTraceeFileRights returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if !ev.PTrace.Tracee.Process.IsNotKworker() { return 0 @@ -10459,12 +9718,11 @@ func (ev *Event) GetPtraceTraceeFileRights() int { // GetPtraceTraceeFileUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.Process.IsNotKworker() { return uint32(0) @@ -10474,12 +9732,11 @@ func (ev *Event) GetPtraceTraceeFileUid() uint32 { // GetPtraceTraceeFileUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.IsNotKworker() { return "" @@ -10489,96 +9746,88 @@ func (ev *Event) GetPtraceTraceeFileUser() string { // GetPtraceTraceeForkTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeForkTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return time.Time{} } if ev.PTrace.Tracee == nil { - return zeroValue + return time.Time{} } return ev.PTrace.Tracee.Process.ForkTime } // GetPtraceTraceeFsgid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFsgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.Credentials.FSGID } // GetPtraceTraceeFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFsgroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.Credentials.FSGroup } // GetPtraceTraceeFsuid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFsuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.Credentials.FSUID } // GetPtraceTraceeFsuser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeFsuser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.Credentials.FSUser } // GetPtraceTraceeGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.Credentials.GID } // GetPtraceTraceeGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeGroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.Credentials.Group } // GetPtraceTraceeInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.Process.HasInterpreter() { return uint64(0) @@ -10588,12 +9837,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileChangeTime() uint64 { // GetPtraceTraceeInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10603,12 +9851,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileFilesystem() string { // GetPtraceTraceeInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.Process.HasInterpreter() { return uint32(0) @@ -10618,12 +9865,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileGid() uint32 { // GetPtraceTraceeInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10633,12 +9879,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileGroup() string { // GetPtraceTraceeInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.Process.HasInterpreter() { return []string{} @@ -10648,12 +9893,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileHashes() []string { // GetPtraceTraceeInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.Process.HasInterpreter() { return false @@ -10663,12 +9907,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileInUpperLayer() bool { // GetPtraceTraceeInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.Process.HasInterpreter() { return uint64(0) @@ -10678,12 +9921,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileInode() uint64 { // GetPtraceTraceeInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint16(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint16(0) } if !ev.PTrace.Tracee.Process.HasInterpreter() { return uint16(0) @@ -10693,12 +9935,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileMode() uint16 { // GetPtraceTraceeInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.Process.HasInterpreter() { return uint64(0) @@ -10708,12 +9949,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileModificationTime() uint64 { // GetPtraceTraceeInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.Process.HasInterpreter() { return uint32(0) @@ -10723,12 +9963,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileMountId() uint32 { // GetPtraceTraceeInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10738,24 +9977,22 @@ func (ev *Event) GetPtraceTraceeInterpreterFileName() string { // GetPtraceTraceeInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.PTrace.Tracee.Process.LinuxBinprm.FileEvent)) } // GetPtraceTraceeInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10765,12 +10002,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFilePackageName() string { // GetPtraceTraceeInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10780,12 +10016,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFilePackageSourceVersion() string { // GetPtraceTraceeInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10795,12 +10030,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFilePackageVersion() string { // GetPtraceTraceeInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10810,24 +10044,22 @@ func (ev *Event) GetPtraceTraceeInterpreterFilePath() string { // GetPtraceTraceeInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.PTrace.Tracee.Process.LinuxBinprm.FileEvent)) } // GetPtraceTraceeInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if !ev.PTrace.Tracee.Process.HasInterpreter() { return 0 @@ -10837,12 +10069,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileRights() int { // GetPtraceTraceeInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.Process.HasInterpreter() { return uint32(0) @@ -10852,12 +10083,11 @@ func (ev *Event) GetPtraceTraceeInterpreterFileUid() uint32 { // GetPtraceTraceeInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeInterpreterFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.Process.HasInterpreter() { return "" @@ -10867,39 +10097,36 @@ func (ev *Event) GetPtraceTraceeInterpreterFileUser() string { // GetPtraceTraceeIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeIsKworker() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } return ev.PTrace.Tracee.Process.PIDContext.IsKworker } // GetPtraceTraceeIsThread returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeIsThread() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } return ev.PTrace.Tracee.Process.IsThread } // GetPtraceTraceeParentArgs returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgs() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -10909,15 +10136,14 @@ func (ev *Event) GetPtraceTraceeParentArgs() string { // GetPtraceTraceeParentArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -10927,15 +10153,14 @@ func (ev *Event) GetPtraceTraceeParentArgsFlags() []string { // GetPtraceTraceeParentArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -10945,15 +10170,14 @@ func (ev *Event) GetPtraceTraceeParentArgsOptions() []string { // GetPtraceTraceeParentArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgsScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -10963,15 +10187,14 @@ func (ev *Event) GetPtraceTraceeParentArgsScrubbed() string { // GetPtraceTraceeParentArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.HasParent() { return false @@ -10981,15 +10204,14 @@ func (ev *Event) GetPtraceTraceeParentArgsTruncated() bool { // GetPtraceTraceeParentArgv returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -10999,15 +10221,14 @@ func (ev *Event) GetPtraceTraceeParentArgv() []string { // GetPtraceTraceeParentArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgv0() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11017,15 +10238,14 @@ func (ev *Event) GetPtraceTraceeParentArgv0() string { // GetPtraceTraceeParentArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -11035,15 +10255,14 @@ func (ev *Event) GetPtraceTraceeParentArgvScrubbed() []string { // GetPtraceTraceeParentCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentCapEffective() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11053,15 +10272,14 @@ func (ev *Event) GetPtraceTraceeParentCapEffective() uint64 { // GetPtraceTraceeParentCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentCapPermitted() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11071,15 +10289,14 @@ func (ev *Event) GetPtraceTraceeParentCapPermitted() uint64 { // GetPtraceTraceeParentComm returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentComm() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11089,15 +10306,14 @@ func (ev *Event) GetPtraceTraceeParentComm() string { // GetPtraceTraceeParentContainerId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11107,15 +10323,14 @@ func (ev *Event) GetPtraceTraceeParentContainerId() string { // GetPtraceTraceeParentCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return 0 } if !ev.PTrace.Tracee.HasParent() { return 0 @@ -11125,15 +10340,14 @@ func (ev *Event) GetPtraceTraceeParentCreatedAt() int { // GetPtraceTraceeParentEgid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentEgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11143,15 +10357,14 @@ func (ev *Event) GetPtraceTraceeParentEgid() uint32 { // GetPtraceTraceeParentEgroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentEgroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11161,15 +10374,14 @@ func (ev *Event) GetPtraceTraceeParentEgroup() string { // GetPtraceTraceeParentEnvp returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -11179,15 +10391,14 @@ func (ev *Event) GetPtraceTraceeParentEnvp() []string { // GetPtraceTraceeParentEnvs returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -11197,15 +10408,14 @@ func (ev *Event) GetPtraceTraceeParentEnvs() []string { // GetPtraceTraceeParentEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentEnvsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.HasParent() { return false @@ -11215,15 +10425,14 @@ func (ev *Event) GetPtraceTraceeParentEnvsTruncated() bool { // GetPtraceTraceeParentEuid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentEuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11233,15 +10442,14 @@ func (ev *Event) GetPtraceTraceeParentEuid() uint32 { // GetPtraceTraceeParentEuser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentEuser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11251,15 +10459,14 @@ func (ev *Event) GetPtraceTraceeParentEuser() string { // GetPtraceTraceeParentFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11272,15 +10479,14 @@ func (ev *Event) GetPtraceTraceeParentFileChangeTime() uint64 { // GetPtraceTraceeParentFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11293,15 +10499,14 @@ func (ev *Event) GetPtraceTraceeParentFileFilesystem() string { // GetPtraceTraceeParentFileGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11314,15 +10519,14 @@ func (ev *Event) GetPtraceTraceeParentFileGid() uint32 { // GetPtraceTraceeParentFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11335,15 +10539,14 @@ func (ev *Event) GetPtraceTraceeParentFileGroup() string { // GetPtraceTraceeParentFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -11356,15 +10559,14 @@ func (ev *Event) GetPtraceTraceeParentFileHashes() []string { // GetPtraceTraceeParentFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.HasParent() { return false @@ -11377,15 +10579,14 @@ func (ev *Event) GetPtraceTraceeParentFileInUpperLayer() bool { // GetPtraceTraceeParentFileInode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11398,15 +10599,14 @@ func (ev *Event) GetPtraceTraceeParentFileInode() uint64 { // GetPtraceTraceeParentFileMode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint16(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint16(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint16(0) } if !ev.PTrace.Tracee.HasParent() { return uint16(0) @@ -11419,15 +10619,14 @@ func (ev *Event) GetPtraceTraceeParentFileMode() uint16 { // GetPtraceTraceeParentFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11440,15 +10639,14 @@ func (ev *Event) GetPtraceTraceeParentFileModificationTime() uint64 { // GetPtraceTraceeParentFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11461,15 +10659,14 @@ func (ev *Event) GetPtraceTraceeParentFileMountId() uint32 { // GetPtraceTraceeParentFileName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11482,30 +10679,28 @@ func (ev *Event) GetPtraceTraceeParentFileName() string { // GetPtraceTraceeParentFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.PTrace.Tracee.Parent.FileEvent)) } // GetPtraceTraceeParentFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11518,15 +10713,14 @@ func (ev *Event) GetPtraceTraceeParentFilePackageName() string { // GetPtraceTraceeParentFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11539,15 +10733,14 @@ func (ev *Event) GetPtraceTraceeParentFilePackageSourceVersion() string { // GetPtraceTraceeParentFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11560,15 +10753,14 @@ func (ev *Event) GetPtraceTraceeParentFilePackageVersion() string { // GetPtraceTraceeParentFilePath returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11581,30 +10773,28 @@ func (ev *Event) GetPtraceTraceeParentFilePath() string { // GetPtraceTraceeParentFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.PTrace.Tracee.Parent.FileEvent)) } // GetPtraceTraceeParentFileRights returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return 0 } if !ev.PTrace.Tracee.HasParent() { return 0 @@ -11617,15 +10807,14 @@ func (ev *Event) GetPtraceTraceeParentFileRights() int { // GetPtraceTraceeParentFileUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11638,15 +10827,14 @@ func (ev *Event) GetPtraceTraceeParentFileUid() uint32 { // GetPtraceTraceeParentFileUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11659,15 +10847,14 @@ func (ev *Event) GetPtraceTraceeParentFileUser() string { // GetPtraceTraceeParentFsgid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFsgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11677,15 +10864,14 @@ func (ev *Event) GetPtraceTraceeParentFsgid() uint32 { // GetPtraceTraceeParentFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFsgroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11695,15 +10881,14 @@ func (ev *Event) GetPtraceTraceeParentFsgroup() string { // GetPtraceTraceeParentFsuid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFsuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11713,15 +10898,14 @@ func (ev *Event) GetPtraceTraceeParentFsuid() uint32 { // GetPtraceTraceeParentFsuser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentFsuser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11731,15 +10915,14 @@ func (ev *Event) GetPtraceTraceeParentFsuser() string { // GetPtraceTraceeParentGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11749,15 +10932,14 @@ func (ev *Event) GetPtraceTraceeParentGid() uint32 { // GetPtraceTraceeParentGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentGroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11767,15 +10949,14 @@ func (ev *Event) GetPtraceTraceeParentGroup() string { // GetPtraceTraceeParentInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11788,15 +10969,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileChangeTime() uint64 { // GetPtraceTraceeParentInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11809,15 +10989,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileFilesystem() string { // GetPtraceTraceeParentInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11830,15 +11009,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileGid() uint32 { // GetPtraceTraceeParentInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11851,15 +11029,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileGroup() string { // GetPtraceTraceeParentInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -11872,15 +11049,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileHashes() []string { // GetPtraceTraceeParentInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.HasParent() { return false @@ -11893,15 +11069,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileInUpperLayer() bool { // GetPtraceTraceeParentInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11914,15 +11089,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileInode() uint64 { // GetPtraceTraceeParentInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint16(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint16(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint16(0) } if !ev.PTrace.Tracee.HasParent() { return uint16(0) @@ -11935,15 +11109,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileMode() uint16 { // GetPtraceTraceeParentInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint64(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint64(0) } if !ev.PTrace.Tracee.HasParent() { return uint64(0) @@ -11956,15 +11129,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileModificationTime() uint64 { // GetPtraceTraceeParentInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -11977,15 +11149,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileMountId() uint32 { // GetPtraceTraceeParentInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -11998,30 +11169,28 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileName() string { // GetPtraceTraceeParentInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.PTrace.Tracee.Parent.LinuxBinprm.FileEvent)) } // GetPtraceTraceeParentInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12034,15 +11203,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFilePackageName() string { // GetPtraceTraceeParentInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12055,15 +11223,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFilePackageSourceVersion() stri // GetPtraceTraceeParentInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12076,15 +11243,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFilePackageVersion() string { // GetPtraceTraceeParentInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12097,30 +11263,28 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFilePath() string { // GetPtraceTraceeParentInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.PTrace.Tracee.Parent.LinuxBinprm.FileEvent)) } // GetPtraceTraceeParentInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "ptrace" { - return zeroValue + return 0 } if ev.PTrace.Tracee == nil { - return zeroValue + return 0 } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return 0 } if !ev.PTrace.Tracee.HasParent() { return 0 @@ -12133,15 +11297,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileRights() int { // GetPtraceTraceeParentInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -12154,15 +11317,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileUid() uint32 { // GetPtraceTraceeParentInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentInterpreterFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12175,15 +11337,14 @@ func (ev *Event) GetPtraceTraceeParentInterpreterFileUser() string { // GetPtraceTraceeParentIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentIsKworker() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.HasParent() { return false @@ -12193,15 +11354,14 @@ func (ev *Event) GetPtraceTraceeParentIsKworker() bool { // GetPtraceTraceeParentIsThread returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentIsThread() bool { - zeroValue := false if ev.GetEventType().String() != "ptrace" { - return zeroValue + return false } if ev.PTrace.Tracee == nil { - return zeroValue + return false } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return false } if !ev.PTrace.Tracee.HasParent() { return false @@ -12211,15 +11371,14 @@ func (ev *Event) GetPtraceTraceeParentIsThread() bool { // GetPtraceTraceeParentPid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -12229,15 +11388,14 @@ func (ev *Event) GetPtraceTraceeParentPid() uint32 { // GetPtraceTraceeParentPpid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentPpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -12247,15 +11405,14 @@ func (ev *Event) GetPtraceTraceeParentPpid() uint32 { // GetPtraceTraceeParentTid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentTid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -12265,15 +11422,14 @@ func (ev *Event) GetPtraceTraceeParentTid() uint32 { // GetPtraceTraceeParentTtyName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentTtyName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12283,15 +11439,14 @@ func (ev *Event) GetPtraceTraceeParentTtyName() string { // GetPtraceTraceeParentUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return uint32(0) } if !ev.PTrace.Tracee.HasParent() { return uint32(0) @@ -12301,15 +11456,14 @@ func (ev *Event) GetPtraceTraceeParentUid() uint32 { // GetPtraceTraceeParentUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentUser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12319,15 +11473,14 @@ func (ev *Event) GetPtraceTraceeParentUser() string { // GetPtraceTraceeParentUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return []string{} } if !ev.PTrace.Tracee.HasParent() { return []string{} @@ -12337,15 +11490,14 @@ func (ev *Event) GetPtraceTraceeParentUserSessionK8sGroups() []string { // GetPtraceTraceeParentUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentUserSessionK8sUid() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12355,15 +11507,14 @@ func (ev *Event) GetPtraceTraceeParentUserSessionK8sUid() string { // GetPtraceTraceeParentUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeParentUserSessionK8sUsername() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } if ev.PTrace.Tracee.Parent == nil { - return zeroValue + return "" } if !ev.PTrace.Tracee.HasParent() { return "" @@ -12373,1257 +11524,1121 @@ func (ev *Event) GetPtraceTraceeParentUserSessionK8sUsername() string { // GetPtraceTraceePid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceePid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.PIDContext.Pid } // GetPtraceTraceePpid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceePpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.PPid } // GetPtraceTraceeTid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeTid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.PIDContext.Tid } // GetPtraceTraceeTtyName returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeTtyName() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.TTYName } // GetPtraceTraceeUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "ptrace" { - return zeroValue + return uint32(0) } if ev.PTrace.Tracee == nil { - return zeroValue + return uint32(0) } return ev.PTrace.Tracee.Process.Credentials.UID } // GetPtraceTraceeUser returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeUser() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.PTrace.Tracee.Process.Credentials.User } // GetPtraceTraceeUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "ptrace" { - return zeroValue + return []string{} } if ev.PTrace.Tracee == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveK8SGroups(ev, &ev.PTrace.Tracee.Process.UserSession) } // GetPtraceTraceeUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeUserSessionK8sUid() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUID(ev, &ev.PTrace.Tracee.Process.UserSession) } // GetPtraceTraceeUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetPtraceTraceeUserSessionK8sUsername() string { - zeroValue := "" if ev.GetEventType().String() != "ptrace" { - return zeroValue + return "" } if ev.PTrace.Tracee == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUsername(ev, &ev.PTrace.Tracee.Process.UserSession) } // GetRemovexattrFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return uint64(0) } return ev.RemoveXAttr.File.FileFields.CTime } // GetRemovexattrFileDestinationName returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileDestinationName() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveXAttrName(ev, &ev.RemoveXAttr) } // GetRemovexattrFileDestinationNamespace returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileDestinationNamespace() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveXAttrNamespace(ev, &ev.RemoveXAttr) } // GetRemovexattrFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.RemoveXAttr.File) } // GetRemovexattrFileGid returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return uint32(0) } return ev.RemoveXAttr.File.FileFields.GID } // GetRemovexattrFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.RemoveXAttr.File.FileFields) } // GetRemovexattrFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "removexattr" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.RemoveXAttr.File) } // GetRemovexattrFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "removexattr" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.RemoveXAttr.File.FileFields) } // GetRemovexattrFileInode returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return uint64(0) } return ev.RemoveXAttr.File.FileFields.PathKey.Inode } // GetRemovexattrFileMode returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return uint16(0) } return ev.RemoveXAttr.File.FileFields.Mode } // GetRemovexattrFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return uint64(0) } return ev.RemoveXAttr.File.FileFields.MTime } // GetRemovexattrFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return uint32(0) } return ev.RemoveXAttr.File.FileFields.PathKey.MountID } // GetRemovexattrFileName returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileName() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.RemoveXAttr.File) } // GetRemovexattrFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "removexattr" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.RemoveXAttr.File)) } // GetRemovexattrFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.RemoveXAttr.File) } // GetRemovexattrFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.RemoveXAttr.File) } // GetRemovexattrFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.RemoveXAttr.File) } // GetRemovexattrFilePath returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.RemoveXAttr.File) } // GetRemovexattrFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "removexattr" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.RemoveXAttr.File)) } // GetRemovexattrFileRights returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "removexattr" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.RemoveXAttr.File.FileFields) } // GetRemovexattrFileUid returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return uint32(0) } return ev.RemoveXAttr.File.FileFields.UID } // GetRemovexattrFileUser returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "removexattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.RemoveXAttr.File.FileFields) } // GetRemovexattrRetval returns the value of the field, resolving if necessary func (ev *Event) GetRemovexattrRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "removexattr" { - return zeroValue + return int64(0) } return ev.RemoveXAttr.SyscallEvent.Retval } // GetRenameFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint64(0) } return ev.Rename.Old.FileFields.CTime } // GetRenameFileDestinationChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint64(0) } return ev.Rename.New.FileFields.CTime } // GetRenameFileDestinationFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Rename.New) } // GetRenameFileDestinationGid returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint32(0) } return ev.Rename.New.FileFields.GID } // GetRenameFileDestinationGroup returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationGroup() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Rename.New.FileFields) } // GetRenameFileDestinationHashes returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "rename" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Rename.New) } // GetRenameFileDestinationInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "rename" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Rename.New.FileFields) } // GetRenameFileDestinationInode returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint64(0) } return ev.Rename.New.FileFields.PathKey.Inode } // GetRenameFileDestinationMode returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint16(0) } return ev.Rename.New.FileFields.Mode } // GetRenameFileDestinationModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint64(0) } return ev.Rename.New.FileFields.MTime } // GetRenameFileDestinationMountId returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint32(0) } return ev.Rename.New.FileFields.PathKey.MountID } // GetRenameFileDestinationName returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationName() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Rename.New) } // GetRenameFileDestinationNameLength returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "rename" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Rename.New)) } // GetRenameFileDestinationPackageName returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationPackageName() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Rename.New) } // GetRenameFileDestinationPackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationPackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Rename.New) } // GetRenameFileDestinationPackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationPackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Rename.New) } // GetRenameFileDestinationPath returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationPath() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Rename.New) } // GetRenameFileDestinationPathLength returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationPathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "rename" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Rename.New)) } // GetRenameFileDestinationRights returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationRights() int { - zeroValue := 0 if ev.GetEventType().String() != "rename" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Rename.New.FileFields) } // GetRenameFileDestinationUid returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint32(0) } return ev.Rename.New.FileFields.UID } // GetRenameFileDestinationUser returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileDestinationUser() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Rename.New.FileFields) } // GetRenameFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Rename.Old) } // GetRenameFileGid returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint32(0) } return ev.Rename.Old.FileFields.GID } // GetRenameFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Rename.Old.FileFields) } // GetRenameFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "rename" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Rename.Old) } // GetRenameFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "rename" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Rename.Old.FileFields) } // GetRenameFileInode returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint64(0) } return ev.Rename.Old.FileFields.PathKey.Inode } // GetRenameFileMode returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint16(0) } return ev.Rename.Old.FileFields.Mode } // GetRenameFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint64(0) } return ev.Rename.Old.FileFields.MTime } // GetRenameFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint32(0) } return ev.Rename.Old.FileFields.PathKey.MountID } // GetRenameFileName returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileName() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Rename.Old) } // GetRenameFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "rename" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Rename.Old)) } // GetRenameFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetRenameFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Rename.Old) } // GetRenameFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetRenameFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Rename.Old) } // GetRenameFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetRenameFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Rename.Old) } // GetRenameFilePath returns the value of the field, resolving if necessary func (ev *Event) GetRenameFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Rename.Old) } // GetRenameFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetRenameFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "rename" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Rename.Old)) } // GetRenameFileRights returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "rename" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Rename.Old.FileFields) } // GetRenameFileUid returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return uint32(0) } return ev.Rename.Old.FileFields.UID } // GetRenameFileUser returns the value of the field, resolving if necessary func (ev *Event) GetRenameFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "rename" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Rename.Old.FileFields) } // GetRenameRetval returns the value of the field, resolving if necessary func (ev *Event) GetRenameRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "rename" { - return zeroValue + return int64(0) } return ev.Rename.SyscallEvent.Retval } // GetRmdirFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return uint64(0) } return ev.Rmdir.File.FileFields.CTime } // GetRmdirFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Rmdir.File) } // GetRmdirFileGid returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return uint32(0) } return ev.Rmdir.File.FileFields.GID } // GetRmdirFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Rmdir.File.FileFields) } // GetRmdirFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "rmdir" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Rmdir.File) } // GetRmdirFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "rmdir" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Rmdir.File.FileFields) } // GetRmdirFileInode returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return uint64(0) } return ev.Rmdir.File.FileFields.PathKey.Inode } // GetRmdirFileMode returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return uint16(0) } return ev.Rmdir.File.FileFields.Mode } // GetRmdirFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return uint64(0) } return ev.Rmdir.File.FileFields.MTime } // GetRmdirFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return uint32(0) } return ev.Rmdir.File.FileFields.PathKey.MountID } // GetRmdirFileName returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileName() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Rmdir.File) } // GetRmdirFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "rmdir" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Rmdir.File)) } // GetRmdirFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Rmdir.File) } // GetRmdirFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Rmdir.File) } // GetRmdirFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Rmdir.File) } // GetRmdirFilePath returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Rmdir.File) } // GetRmdirFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "rmdir" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Rmdir.File)) } // GetRmdirFileRights returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "rmdir" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Rmdir.File.FileFields) } // GetRmdirFileUid returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return uint32(0) } return ev.Rmdir.File.FileFields.UID } // GetRmdirFileUser returns the value of the field, resolving if necessary func (ev *Event) GetRmdirFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "rmdir" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Rmdir.File.FileFields) } // GetRmdirRetval returns the value of the field, resolving if necessary func (ev *Event) GetRmdirRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "rmdir" { - return zeroValue + return int64(0) } return ev.Rmdir.SyscallEvent.Retval } // GetSelinuxBoolName returns the value of the field, resolving if necessary func (ev *Event) GetSelinuxBoolName() string { - zeroValue := "" if ev.GetEventType().String() != "selinux" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveSELinuxBoolName(ev, &ev.SELinux) } // GetSelinuxBoolState returns the value of the field, resolving if necessary func (ev *Event) GetSelinuxBoolState() string { - zeroValue := "" if ev.GetEventType().String() != "selinux" { - return zeroValue + return "" } return ev.SELinux.BoolChangeValue } // GetSelinuxBoolCommitState returns the value of the field, resolving if necessary func (ev *Event) GetSelinuxBoolCommitState() bool { - zeroValue := false if ev.GetEventType().String() != "selinux" { - return zeroValue + return false } return ev.SELinux.BoolCommitValue } // GetSelinuxEnforceStatus returns the value of the field, resolving if necessary func (ev *Event) GetSelinuxEnforceStatus() string { - zeroValue := "" if ev.GetEventType().String() != "selinux" { - return zeroValue + return "" } return ev.SELinux.EnforceStatus } // GetSetgidEgid returns the value of the field, resolving if necessary func (ev *Event) GetSetgidEgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setgid" { - return zeroValue + return uint32(0) } return ev.SetGID.EGID } // GetSetgidEgroup returns the value of the field, resolving if necessary func (ev *Event) GetSetgidEgroup() string { - zeroValue := "" if ev.GetEventType().String() != "setgid" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveSetgidEGroup(ev, &ev.SetGID) } // GetSetgidFsgid returns the value of the field, resolving if necessary func (ev *Event) GetSetgidFsgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setgid" { - return zeroValue + return uint32(0) } return ev.SetGID.FSGID } // GetSetgidFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetSetgidFsgroup() string { - zeroValue := "" if ev.GetEventType().String() != "setgid" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveSetgidFSGroup(ev, &ev.SetGID) } // GetSetgidGid returns the value of the field, resolving if necessary func (ev *Event) GetSetgidGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setgid" { - return zeroValue + return uint32(0) } return ev.SetGID.GID } // GetSetgidGroup returns the value of the field, resolving if necessary func (ev *Event) GetSetgidGroup() string { - zeroValue := "" if ev.GetEventType().String() != "setgid" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveSetgidGroup(ev, &ev.SetGID) } // GetSetuidEuid returns the value of the field, resolving if necessary func (ev *Event) GetSetuidEuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setuid" { - return zeroValue + return uint32(0) } return ev.SetUID.EUID } // GetSetuidEuser returns the value of the field, resolving if necessary func (ev *Event) GetSetuidEuser() string { - zeroValue := "" if ev.GetEventType().String() != "setuid" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveSetuidEUser(ev, &ev.SetUID) } // GetSetuidFsuid returns the value of the field, resolving if necessary func (ev *Event) GetSetuidFsuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setuid" { - return zeroValue + return uint32(0) } return ev.SetUID.FSUID } // GetSetuidFsuser returns the value of the field, resolving if necessary func (ev *Event) GetSetuidFsuser() string { - zeroValue := "" if ev.GetEventType().String() != "setuid" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveSetuidFSUser(ev, &ev.SetUID) } // GetSetuidUid returns the value of the field, resolving if necessary func (ev *Event) GetSetuidUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setuid" { - return zeroValue + return uint32(0) } return ev.SetUID.UID } // GetSetuidUser returns the value of the field, resolving if necessary func (ev *Event) GetSetuidUser() string { - zeroValue := "" if ev.GetEventType().String() != "setuid" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveSetuidUser(ev, &ev.SetUID) } // GetSetxattrFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return uint64(0) } return ev.SetXAttr.File.FileFields.CTime } // GetSetxattrFileDestinationName returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileDestinationName() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveXAttrName(ev, &ev.SetXAttr) } // GetSetxattrFileDestinationNamespace returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileDestinationNamespace() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveXAttrNamespace(ev, &ev.SetXAttr) } // GetSetxattrFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.SetXAttr.File) } // GetSetxattrFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return uint32(0) } return ev.SetXAttr.File.FileFields.GID } // GetSetxattrFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.SetXAttr.File.FileFields) } // GetSetxattrFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "setxattr" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.SetXAttr.File) } // GetSetxattrFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "setxattr" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.SetXAttr.File.FileFields) } // GetSetxattrFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return uint64(0) } return ev.SetXAttr.File.FileFields.PathKey.Inode } // GetSetxattrFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return uint16(0) } return ev.SetXAttr.File.FileFields.Mode } // GetSetxattrFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return uint64(0) } return ev.SetXAttr.File.FileFields.MTime } // GetSetxattrFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return uint32(0) } return ev.SetXAttr.File.FileFields.PathKey.MountID } // GetSetxattrFileName returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileName() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.SetXAttr.File) } // GetSetxattrFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "setxattr" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.SetXAttr.File)) } // GetSetxattrFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.SetXAttr.File) } // GetSetxattrFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.SetXAttr.File) } // GetSetxattrFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.SetXAttr.File) } // GetSetxattrFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.SetXAttr.File) } // GetSetxattrFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "setxattr" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.SetXAttr.File)) } // GetSetxattrFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "setxattr" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.SetXAttr.File.FileFields) } // GetSetxattrFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return uint32(0) } return ev.SetXAttr.File.FileFields.UID } // GetSetxattrFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "setxattr" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.SetXAttr.File.FileFields) } // GetSetxattrRetval returns the value of the field, resolving if necessary func (ev *Event) GetSetxattrRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "setxattr" { - return zeroValue + return int64(0) } return ev.SetXAttr.SyscallEvent.Retval } // GetSignalPid returns the value of the field, resolving if necessary func (ev *Event) GetSignalPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } return ev.Signal.PID } // GetSignalRetval returns the value of the field, resolving if necessary func (ev *Event) GetSignalRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return int64(0) } return ev.Signal.SyscallEvent.Retval } // GetSignalTargetAncestorsArgs returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13640,15 +12655,14 @@ func (ev *Event) GetSignalTargetAncestorsArgs() []string { // GetSignalTargetAncestorsArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13665,15 +12679,14 @@ func (ev *Event) GetSignalTargetAncestorsArgsFlags() []string { // GetSignalTargetAncestorsArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13690,15 +12703,14 @@ func (ev *Event) GetSignalTargetAncestorsArgsOptions() []string { // GetSignalTargetAncestorsArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgsScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13715,15 +12727,14 @@ func (ev *Event) GetSignalTargetAncestorsArgsScrubbed() []string { // GetSignalTargetAncestorsArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgsTruncated() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []bool{} } if ev.Signal.Target == nil { - return zeroValue + return []bool{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -13740,15 +12751,14 @@ func (ev *Event) GetSignalTargetAncestorsArgsTruncated() []bool { // GetSignalTargetAncestorsArgv returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13765,15 +12775,14 @@ func (ev *Event) GetSignalTargetAncestorsArgv() []string { // GetSignalTargetAncestorsArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgv0() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13790,15 +12799,14 @@ func (ev *Event) GetSignalTargetAncestorsArgv0() []string { // GetSignalTargetAncestorsArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13815,15 +12823,14 @@ func (ev *Event) GetSignalTargetAncestorsArgvScrubbed() []string { // GetSignalTargetAncestorsCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsCapEffective() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -13840,15 +12847,14 @@ func (ev *Event) GetSignalTargetAncestorsCapEffective() []uint64 { // GetSignalTargetAncestorsCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsCapPermitted() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -13865,15 +12871,14 @@ func (ev *Event) GetSignalTargetAncestorsCapPermitted() []uint64 { // GetSignalTargetAncestorsComm returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsComm() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13890,15 +12895,14 @@ func (ev *Event) GetSignalTargetAncestorsComm() []string { // GetSignalTargetAncestorsContainerId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsContainerId() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13915,15 +12919,14 @@ func (ev *Event) GetSignalTargetAncestorsContainerId() []string { // GetSignalTargetAncestorsCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsCreatedAt() []int { - zeroValue := []int{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []int{} } if ev.Signal.Target == nil { - return zeroValue + return []int{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -13940,15 +12943,14 @@ func (ev *Event) GetSignalTargetAncestorsCreatedAt() []int { // GetSignalTargetAncestorsEgid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsEgid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -13965,15 +12967,14 @@ func (ev *Event) GetSignalTargetAncestorsEgid() []uint32 { // GetSignalTargetAncestorsEgroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsEgroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -13990,15 +12991,14 @@ func (ev *Event) GetSignalTargetAncestorsEgroup() []string { // GetSignalTargetAncestorsEnvp returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14015,15 +13015,14 @@ func (ev *Event) GetSignalTargetAncestorsEnvp() []string { // GetSignalTargetAncestorsEnvs returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14040,15 +13039,14 @@ func (ev *Event) GetSignalTargetAncestorsEnvs() []string { // GetSignalTargetAncestorsEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsEnvsTruncated() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []bool{} } if ev.Signal.Target == nil { - return zeroValue + return []bool{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -14065,15 +13063,14 @@ func (ev *Event) GetSignalTargetAncestorsEnvsTruncated() []bool { // GetSignalTargetAncestorsEuid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsEuid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14090,15 +13087,14 @@ func (ev *Event) GetSignalTargetAncestorsEuid() []uint32 { // GetSignalTargetAncestorsEuser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsEuser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14115,15 +13111,14 @@ func (ev *Event) GetSignalTargetAncestorsEuser() []string { // GetSignalTargetAncestorsFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileChangeTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -14140,15 +13135,14 @@ func (ev *Event) GetSignalTargetAncestorsFileChangeTime() []uint64 { // GetSignalTargetAncestorsFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileFilesystem() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14165,15 +13159,14 @@ func (ev *Event) GetSignalTargetAncestorsFileFilesystem() []string { // GetSignalTargetAncestorsFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileGid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14190,15 +13183,14 @@ func (ev *Event) GetSignalTargetAncestorsFileGid() []uint32 { // GetSignalTargetAncestorsFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileGroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14215,15 +13207,14 @@ func (ev *Event) GetSignalTargetAncestorsFileGroup() []string { // GetSignalTargetAncestorsFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14240,15 +13231,14 @@ func (ev *Event) GetSignalTargetAncestorsFileHashes() []string { // GetSignalTargetAncestorsFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileInUpperLayer() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []bool{} } if ev.Signal.Target == nil { - return zeroValue + return []bool{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -14265,15 +13255,14 @@ func (ev *Event) GetSignalTargetAncestorsFileInUpperLayer() []bool { // GetSignalTargetAncestorsFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileInode() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -14290,15 +13279,14 @@ func (ev *Event) GetSignalTargetAncestorsFileInode() []uint64 { // GetSignalTargetAncestorsFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileMode() []uint16 { - zeroValue := []uint16{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint16{} } if ev.Signal.Target == nil { - return zeroValue + return []uint16{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint16{} } var values []uint16 ctx := eval.NewContext(ev) @@ -14315,15 +13303,14 @@ func (ev *Event) GetSignalTargetAncestorsFileMode() []uint16 { // GetSignalTargetAncestorsFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileModificationTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -14340,15 +13327,14 @@ func (ev *Event) GetSignalTargetAncestorsFileModificationTime() []uint64 { // GetSignalTargetAncestorsFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileMountId() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14365,15 +13351,14 @@ func (ev *Event) GetSignalTargetAncestorsFileMountId() []uint32 { // GetSignalTargetAncestorsFileName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14390,15 +13375,14 @@ func (ev *Event) GetSignalTargetAncestorsFileName() []string { // GetSignalTargetAncestorsFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileNameLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []int{} } if ev.Signal.Target == nil { - return zeroValue + return []int{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -14415,15 +13399,14 @@ func (ev *Event) GetSignalTargetAncestorsFileNameLength() []int { // GetSignalTargetAncestorsFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFilePackageName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14440,15 +13423,14 @@ func (ev *Event) GetSignalTargetAncestorsFilePackageName() []string { // GetSignalTargetAncestorsFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFilePackageSourceVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14465,15 +13447,14 @@ func (ev *Event) GetSignalTargetAncestorsFilePackageSourceVersion() []string { // GetSignalTargetAncestorsFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFilePackageVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14490,15 +13471,14 @@ func (ev *Event) GetSignalTargetAncestorsFilePackageVersion() []string { // GetSignalTargetAncestorsFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFilePath() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14515,15 +13495,14 @@ func (ev *Event) GetSignalTargetAncestorsFilePath() []string { // GetSignalTargetAncestorsFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFilePathLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []int{} } if ev.Signal.Target == nil { - return zeroValue + return []int{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -14540,15 +13519,14 @@ func (ev *Event) GetSignalTargetAncestorsFilePathLength() []int { // GetSignalTargetAncestorsFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileRights() []int { - zeroValue := []int{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []int{} } if ev.Signal.Target == nil { - return zeroValue + return []int{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -14565,15 +13543,14 @@ func (ev *Event) GetSignalTargetAncestorsFileRights() []int { // GetSignalTargetAncestorsFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileUid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14590,15 +13567,14 @@ func (ev *Event) GetSignalTargetAncestorsFileUid() []uint32 { // GetSignalTargetAncestorsFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFileUser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14615,15 +13591,14 @@ func (ev *Event) GetSignalTargetAncestorsFileUser() []string { // GetSignalTargetAncestorsFsgid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFsgid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14640,15 +13615,14 @@ func (ev *Event) GetSignalTargetAncestorsFsgid() []uint32 { // GetSignalTargetAncestorsFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFsgroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14665,15 +13639,14 @@ func (ev *Event) GetSignalTargetAncestorsFsgroup() []string { // GetSignalTargetAncestorsFsuid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFsuid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14690,15 +13663,14 @@ func (ev *Event) GetSignalTargetAncestorsFsuid() []uint32 { // GetSignalTargetAncestorsFsuser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsFsuser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14715,15 +13687,14 @@ func (ev *Event) GetSignalTargetAncestorsFsuser() []string { // GetSignalTargetAncestorsGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsGid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14740,15 +13711,14 @@ func (ev *Event) GetSignalTargetAncestorsGid() []uint32 { // GetSignalTargetAncestorsGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsGroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14765,15 +13735,14 @@ func (ev *Event) GetSignalTargetAncestorsGroup() []string { // GetSignalTargetAncestorsInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileChangeTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -14790,15 +13759,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileChangeTime() []uint64 { // GetSignalTargetAncestorsInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileFilesystem() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14815,15 +13783,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileFilesystem() []string { // GetSignalTargetAncestorsInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileGid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -14840,15 +13807,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileGid() []uint32 { // GetSignalTargetAncestorsInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileGroup() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14865,15 +13831,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileGroup() []string { // GetSignalTargetAncestorsInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -14890,15 +13855,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileHashes() []string { // GetSignalTargetAncestorsInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileInUpperLayer() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []bool{} } if ev.Signal.Target == nil { - return zeroValue + return []bool{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -14915,15 +13879,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileInUpperLayer() []bool { // GetSignalTargetAncestorsInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileInode() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -14940,15 +13903,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileInode() []uint64 { // GetSignalTargetAncestorsInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileMode() []uint16 { - zeroValue := []uint16{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint16{} } if ev.Signal.Target == nil { - return zeroValue + return []uint16{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint16{} } var values []uint16 ctx := eval.NewContext(ev) @@ -14965,15 +13927,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileMode() []uint16 { // GetSignalTargetAncestorsInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileModificationTime() []uint64 { - zeroValue := []uint64{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint64{} } if ev.Signal.Target == nil { - return zeroValue + return []uint64{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint64{} } var values []uint64 ctx := eval.NewContext(ev) @@ -14990,15 +13951,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileModificationTime() []uin // GetSignalTargetAncestorsInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileMountId() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -15015,15 +13975,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileMountId() []uint32 { // GetSignalTargetAncestorsInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15040,15 +13999,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileName() []string { // GetSignalTargetAncestorsInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileNameLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []int{} } if ev.Signal.Target == nil { - return zeroValue + return []int{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -15065,15 +14023,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileNameLength() []int { // GetSignalTargetAncestorsInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFilePackageName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15090,15 +14047,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFilePackageName() []string { // GetSignalTargetAncestorsInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFilePackageSourceVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15115,15 +14071,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFilePackageSourceVersion() [ // GetSignalTargetAncestorsInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFilePackageVersion() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15140,15 +14095,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFilePackageVersion() []strin // GetSignalTargetAncestorsInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFilePath() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15165,15 +14119,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFilePath() []string { // GetSignalTargetAncestorsInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFilePathLength() []int { - zeroValue := []int{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []int{} } if ev.Signal.Target == nil { - return zeroValue + return []int{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -15190,15 +14143,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFilePathLength() []int { // GetSignalTargetAncestorsInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileRights() []int { - zeroValue := []int{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []int{} } if ev.Signal.Target == nil { - return zeroValue + return []int{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -15215,15 +14167,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileRights() []int { // GetSignalTargetAncestorsInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileUid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -15240,15 +14191,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileUid() []uint32 { // GetSignalTargetAncestorsInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsInterpreterFileUser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15265,15 +14215,14 @@ func (ev *Event) GetSignalTargetAncestorsInterpreterFileUser() []string { // GetSignalTargetAncestorsIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsIsKworker() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []bool{} } if ev.Signal.Target == nil { - return zeroValue + return []bool{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -15290,15 +14239,14 @@ func (ev *Event) GetSignalTargetAncestorsIsKworker() []bool { // GetSignalTargetAncestorsIsThread returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsIsThread() []bool { - zeroValue := []bool{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []bool{} } if ev.Signal.Target == nil { - return zeroValue + return []bool{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []bool{} } var values []bool ctx := eval.NewContext(ev) @@ -15315,15 +14263,14 @@ func (ev *Event) GetSignalTargetAncestorsIsThread() []bool { // GetSignalTargetAncestorsPid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsPid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -15340,15 +14287,14 @@ func (ev *Event) GetSignalTargetAncestorsPid() []uint32 { // GetSignalTargetAncestorsPpid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsPpid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -15365,15 +14311,14 @@ func (ev *Event) GetSignalTargetAncestorsPpid() []uint32 { // GetSignalTargetAncestorsTid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsTid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -15390,15 +14335,14 @@ func (ev *Event) GetSignalTargetAncestorsTid() []uint32 { // GetSignalTargetAncestorsTtyName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsTtyName() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15415,15 +14359,14 @@ func (ev *Event) GetSignalTargetAncestorsTtyName() []string { // GetSignalTargetAncestorsUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsUid() []uint32 { - zeroValue := []uint32{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []uint32{} } if ev.Signal.Target == nil { - return zeroValue + return []uint32{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -15440,15 +14383,14 @@ func (ev *Event) GetSignalTargetAncestorsUid() []uint32 { // GetSignalTargetAncestorsUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsUser() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15465,15 +14407,14 @@ func (ev *Event) GetSignalTargetAncestorsUser() []string { // GetSignalTargetAncestorsUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15490,15 +14431,14 @@ func (ev *Event) GetSignalTargetAncestorsUserSessionK8sGroups() []string { // GetSignalTargetAncestorsUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsUserSessionK8sUid() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15515,15 +14455,14 @@ func (ev *Event) GetSignalTargetAncestorsUserSessionK8sUid() []string { // GetSignalTargetAncestorsUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetAncestorsUserSessionK8sUsername() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -15540,276 +14479,253 @@ func (ev *Event) GetSignalTargetAncestorsUserSessionK8sUsername() []string { // GetSignalTargetArgs returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgs() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgs(ev, &ev.Signal.Target.Process) } // GetSignalTargetArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsFlags(ev, &ev.Signal.Target.Process) } // GetSignalTargetArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgsOptions(ev, &ev.Signal.Target.Process) } // GetSignalTargetArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgsScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgsScrubbed(ev, &ev.Signal.Target.Process) } // GetSignalTargetArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessArgsTruncated(ev, &ev.Signal.Target.Process) } // GetSignalTargetArgv returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgv(ev, &ev.Signal.Target.Process) } // GetSignalTargetArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgv0() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessArgv0(ev, &ev.Signal.Target.Process) } // GetSignalTargetArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessArgvScrubbed(ev, &ev.Signal.Target.Process) } // GetSignalTargetCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetCapEffective() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } return ev.Signal.Target.Process.Credentials.CapEffective } // GetSignalTargetCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetCapPermitted() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } return ev.Signal.Target.Process.Credentials.CapPermitted } // GetSignalTargetComm returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetComm() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.Comm } // GetSignalTargetContainerId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.ContainerID } // GetSignalTargetCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, &ev.Signal.Target.Process) } // GetSignalTargetEgid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetEgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.Credentials.EGID } // GetSignalTargetEgroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetEgroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.Credentials.EGroup } // GetSignalTargetEnvp returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, &ev.Signal.Target.Process) } // GetSignalTargetEnvs returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, &ev.Signal.Target.Process) } // GetSignalTargetEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetEnvsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } return ev.FieldHandlers.ResolveProcessEnvsTruncated(ev, &ev.Signal.Target.Process) } // GetSignalTargetEuid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetEuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.Credentials.EUID } // GetSignalTargetEuser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetEuser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.Credentials.EUser } // GetSignalTargetExecTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetExecTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "signal" { - return zeroValue + return time.Time{} } if ev.Signal.Target == nil { - return zeroValue + return time.Time{} } return ev.Signal.Target.Process.ExecTime } // GetSignalTargetExitTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetExitTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "signal" { - return zeroValue + return time.Time{} } if ev.Signal.Target == nil { - return zeroValue + return time.Time{} } return ev.Signal.Target.Process.ExitTime } // GetSignalTargetFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.Process.IsNotKworker() { return uint64(0) @@ -15819,12 +14735,11 @@ func (ev *Event) GetSignalTargetFileChangeTime() uint64 { // GetSignalTargetFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -15834,12 +14749,11 @@ func (ev *Event) GetSignalTargetFileFilesystem() string { // GetSignalTargetFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.Process.IsNotKworker() { return uint32(0) @@ -15849,12 +14763,11 @@ func (ev *Event) GetSignalTargetFileGid() uint32 { // GetSignalTargetFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -15864,12 +14777,11 @@ func (ev *Event) GetSignalTargetFileGroup() string { // GetSignalTargetFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.Process.IsNotKworker() { return []string{} @@ -15879,12 +14791,11 @@ func (ev *Event) GetSignalTargetFileHashes() []string { // GetSignalTargetFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if !ev.Signal.Target.Process.IsNotKworker() { return false @@ -15894,12 +14805,11 @@ func (ev *Event) GetSignalTargetFileInUpperLayer() bool { // GetSignalTargetFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.Process.IsNotKworker() { return uint64(0) @@ -15909,12 +14819,11 @@ func (ev *Event) GetSignalTargetFileInode() uint64 { // GetSignalTargetFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint16(0) } if ev.Signal.Target == nil { - return zeroValue + return uint16(0) } if !ev.Signal.Target.Process.IsNotKworker() { return uint16(0) @@ -15924,12 +14833,11 @@ func (ev *Event) GetSignalTargetFileMode() uint16 { // GetSignalTargetFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.Process.IsNotKworker() { return uint64(0) @@ -15939,12 +14847,11 @@ func (ev *Event) GetSignalTargetFileModificationTime() uint64 { // GetSignalTargetFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.Process.IsNotKworker() { return uint32(0) @@ -15954,12 +14861,11 @@ func (ev *Event) GetSignalTargetFileMountId() uint32 { // GetSignalTargetFileName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -15969,24 +14875,22 @@ func (ev *Event) GetSignalTargetFileName() string { // GetSignalTargetFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Signal.Target.Process.FileEvent)) } // GetSignalTargetFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -15996,12 +14900,11 @@ func (ev *Event) GetSignalTargetFilePackageName() string { // GetSignalTargetFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -16011,12 +14914,11 @@ func (ev *Event) GetSignalTargetFilePackageSourceVersion() string { // GetSignalTargetFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -16026,12 +14928,11 @@ func (ev *Event) GetSignalTargetFilePackageVersion() string { // GetSignalTargetFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -16041,24 +14942,22 @@ func (ev *Event) GetSignalTargetFilePath() string { // GetSignalTargetFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Signal.Target.Process.FileEvent)) } // GetSignalTargetFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if !ev.Signal.Target.Process.IsNotKworker() { return 0 @@ -16068,12 +14967,11 @@ func (ev *Event) GetSignalTargetFileRights() int { // GetSignalTargetFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.Process.IsNotKworker() { return uint32(0) @@ -16083,12 +14981,11 @@ func (ev *Event) GetSignalTargetFileUid() uint32 { // GetSignalTargetFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.IsNotKworker() { return "" @@ -16098,96 +14995,88 @@ func (ev *Event) GetSignalTargetFileUser() string { // GetSignalTargetForkTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetForkTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "signal" { - return zeroValue + return time.Time{} } if ev.Signal.Target == nil { - return zeroValue + return time.Time{} } return ev.Signal.Target.Process.ForkTime } // GetSignalTargetFsgid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFsgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.Credentials.FSGID } // GetSignalTargetFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFsgroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.Credentials.FSGroup } // GetSignalTargetFsuid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFsuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.Credentials.FSUID } // GetSignalTargetFsuser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetFsuser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.Credentials.FSUser } // GetSignalTargetGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.Credentials.GID } // GetSignalTargetGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetGroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.Credentials.Group } // GetSignalTargetInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.Process.HasInterpreter() { return uint64(0) @@ -16197,12 +15086,11 @@ func (ev *Event) GetSignalTargetInterpreterFileChangeTime() uint64 { // GetSignalTargetInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16212,12 +15100,11 @@ func (ev *Event) GetSignalTargetInterpreterFileFilesystem() string { // GetSignalTargetInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.Process.HasInterpreter() { return uint32(0) @@ -16227,12 +15114,11 @@ func (ev *Event) GetSignalTargetInterpreterFileGid() uint32 { // GetSignalTargetInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16242,12 +15128,11 @@ func (ev *Event) GetSignalTargetInterpreterFileGroup() string { // GetSignalTargetInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.Process.HasInterpreter() { return []string{} @@ -16257,12 +15142,11 @@ func (ev *Event) GetSignalTargetInterpreterFileHashes() []string { // GetSignalTargetInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if !ev.Signal.Target.Process.HasInterpreter() { return false @@ -16272,12 +15156,11 @@ func (ev *Event) GetSignalTargetInterpreterFileInUpperLayer() bool { // GetSignalTargetInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.Process.HasInterpreter() { return uint64(0) @@ -16287,12 +15170,11 @@ func (ev *Event) GetSignalTargetInterpreterFileInode() uint64 { // GetSignalTargetInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint16(0) } if ev.Signal.Target == nil { - return zeroValue + return uint16(0) } if !ev.Signal.Target.Process.HasInterpreter() { return uint16(0) @@ -16302,12 +15184,11 @@ func (ev *Event) GetSignalTargetInterpreterFileMode() uint16 { // GetSignalTargetInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.Process.HasInterpreter() { return uint64(0) @@ -16317,12 +15198,11 @@ func (ev *Event) GetSignalTargetInterpreterFileModificationTime() uint64 { // GetSignalTargetInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.Process.HasInterpreter() { return uint32(0) @@ -16332,12 +15212,11 @@ func (ev *Event) GetSignalTargetInterpreterFileMountId() uint32 { // GetSignalTargetInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16347,24 +15226,22 @@ func (ev *Event) GetSignalTargetInterpreterFileName() string { // GetSignalTargetInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Signal.Target.Process.LinuxBinprm.FileEvent)) } // GetSignalTargetInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16374,12 +15251,11 @@ func (ev *Event) GetSignalTargetInterpreterFilePackageName() string { // GetSignalTargetInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16389,12 +15265,11 @@ func (ev *Event) GetSignalTargetInterpreterFilePackageSourceVersion() string { // GetSignalTargetInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16404,12 +15279,11 @@ func (ev *Event) GetSignalTargetInterpreterFilePackageVersion() string { // GetSignalTargetInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16419,24 +15293,22 @@ func (ev *Event) GetSignalTargetInterpreterFilePath() string { // GetSignalTargetInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Signal.Target.Process.LinuxBinprm.FileEvent)) } // GetSignalTargetInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if !ev.Signal.Target.Process.HasInterpreter() { return 0 @@ -16446,12 +15318,11 @@ func (ev *Event) GetSignalTargetInterpreterFileRights() int { // GetSignalTargetInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.Process.HasInterpreter() { return uint32(0) @@ -16461,12 +15332,11 @@ func (ev *Event) GetSignalTargetInterpreterFileUid() uint32 { // GetSignalTargetInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetInterpreterFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if !ev.Signal.Target.Process.HasInterpreter() { return "" @@ -16476,39 +15346,36 @@ func (ev *Event) GetSignalTargetInterpreterFileUser() string { // GetSignalTargetIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetIsKworker() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } return ev.Signal.Target.Process.PIDContext.IsKworker } // GetSignalTargetIsThread returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetIsThread() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } return ev.Signal.Target.Process.IsThread } // GetSignalTargetParentArgs returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgs() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16518,15 +15385,14 @@ func (ev *Event) GetSignalTargetParentArgs() string { // GetSignalTargetParentArgsFlags returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgsFlags() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -16536,15 +15402,14 @@ func (ev *Event) GetSignalTargetParentArgsFlags() []string { // GetSignalTargetParentArgsOptions returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgsOptions() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -16554,15 +15419,14 @@ func (ev *Event) GetSignalTargetParentArgsOptions() []string { // GetSignalTargetParentArgsScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgsScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16572,15 +15436,14 @@ func (ev *Event) GetSignalTargetParentArgsScrubbed() string { // GetSignalTargetParentArgsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if ev.Signal.Target.Parent == nil { - return zeroValue + return false } if !ev.Signal.Target.HasParent() { return false @@ -16590,15 +15453,14 @@ func (ev *Event) GetSignalTargetParentArgsTruncated() bool { // GetSignalTargetParentArgv returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgv() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -16608,15 +15470,14 @@ func (ev *Event) GetSignalTargetParentArgv() []string { // GetSignalTargetParentArgv0 returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgv0() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16626,15 +15487,14 @@ func (ev *Event) GetSignalTargetParentArgv0() string { // GetSignalTargetParentArgvScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentArgvScrubbed() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -16644,15 +15504,14 @@ func (ev *Event) GetSignalTargetParentArgvScrubbed() []string { // GetSignalTargetParentCapEffective returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentCapEffective() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -16662,15 +15521,14 @@ func (ev *Event) GetSignalTargetParentCapEffective() uint64 { // GetSignalTargetParentCapPermitted returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentCapPermitted() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -16680,15 +15538,14 @@ func (ev *Event) GetSignalTargetParentCapPermitted() uint64 { // GetSignalTargetParentComm returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentComm() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16698,15 +15555,14 @@ func (ev *Event) GetSignalTargetParentComm() string { // GetSignalTargetParentContainerId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16716,15 +15572,14 @@ func (ev *Event) GetSignalTargetParentContainerId() string { // GetSignalTargetParentCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if ev.Signal.Target.Parent == nil { - return zeroValue + return 0 } if !ev.Signal.Target.HasParent() { return 0 @@ -16734,15 +15589,14 @@ func (ev *Event) GetSignalTargetParentCreatedAt() int { // GetSignalTargetParentEgid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentEgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -16752,15 +15606,14 @@ func (ev *Event) GetSignalTargetParentEgid() uint32 { // GetSignalTargetParentEgroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentEgroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16770,15 +15623,14 @@ func (ev *Event) GetSignalTargetParentEgroup() string { // GetSignalTargetParentEnvp returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -16788,15 +15640,14 @@ func (ev *Event) GetSignalTargetParentEnvp() []string { // GetSignalTargetParentEnvs returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -16806,15 +15657,14 @@ func (ev *Event) GetSignalTargetParentEnvs() []string { // GetSignalTargetParentEnvsTruncated returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentEnvsTruncated() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if ev.Signal.Target.Parent == nil { - return zeroValue + return false } if !ev.Signal.Target.HasParent() { return false @@ -16824,15 +15674,14 @@ func (ev *Event) GetSignalTargetParentEnvsTruncated() bool { // GetSignalTargetParentEuid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentEuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -16842,15 +15691,14 @@ func (ev *Event) GetSignalTargetParentEuid() uint32 { // GetSignalTargetParentEuser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentEuser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16860,15 +15708,14 @@ func (ev *Event) GetSignalTargetParentEuser() string { // GetSignalTargetParentFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -16881,15 +15728,14 @@ func (ev *Event) GetSignalTargetParentFileChangeTime() uint64 { // GetSignalTargetParentFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16902,15 +15748,14 @@ func (ev *Event) GetSignalTargetParentFileFilesystem() string { // GetSignalTargetParentFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -16923,15 +15768,14 @@ func (ev *Event) GetSignalTargetParentFileGid() uint32 { // GetSignalTargetParentFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -16944,15 +15788,14 @@ func (ev *Event) GetSignalTargetParentFileGroup() string { // GetSignalTargetParentFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -16965,15 +15808,14 @@ func (ev *Event) GetSignalTargetParentFileHashes() []string { // GetSignalTargetParentFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if ev.Signal.Target.Parent == nil { - return zeroValue + return false } if !ev.Signal.Target.HasParent() { return false @@ -16986,15 +15828,14 @@ func (ev *Event) GetSignalTargetParentFileInUpperLayer() bool { // GetSignalTargetParentFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -17007,15 +15848,14 @@ func (ev *Event) GetSignalTargetParentFileInode() uint64 { // GetSignalTargetParentFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint16(0) } if ev.Signal.Target == nil { - return zeroValue + return uint16(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint16(0) } if !ev.Signal.Target.HasParent() { return uint16(0) @@ -17028,15 +15868,14 @@ func (ev *Event) GetSignalTargetParentFileMode() uint16 { // GetSignalTargetParentFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -17049,15 +15888,14 @@ func (ev *Event) GetSignalTargetParentFileModificationTime() uint64 { // GetSignalTargetParentFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17070,15 +15908,14 @@ func (ev *Event) GetSignalTargetParentFileMountId() uint32 { // GetSignalTargetParentFileName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17091,30 +15928,28 @@ func (ev *Event) GetSignalTargetParentFileName() string { // GetSignalTargetParentFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if ev.Signal.Target.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Signal.Target.Parent.FileEvent)) } // GetSignalTargetParentFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17127,15 +15962,14 @@ func (ev *Event) GetSignalTargetParentFilePackageName() string { // GetSignalTargetParentFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17148,15 +15982,14 @@ func (ev *Event) GetSignalTargetParentFilePackageSourceVersion() string { // GetSignalTargetParentFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17169,15 +16002,14 @@ func (ev *Event) GetSignalTargetParentFilePackageVersion() string { // GetSignalTargetParentFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17190,30 +16022,28 @@ func (ev *Event) GetSignalTargetParentFilePath() string { // GetSignalTargetParentFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if ev.Signal.Target.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Signal.Target.Parent.FileEvent)) } // GetSignalTargetParentFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if ev.Signal.Target.Parent == nil { - return zeroValue + return 0 } if !ev.Signal.Target.HasParent() { return 0 @@ -17226,15 +16056,14 @@ func (ev *Event) GetSignalTargetParentFileRights() int { // GetSignalTargetParentFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17247,15 +16076,14 @@ func (ev *Event) GetSignalTargetParentFileUid() uint32 { // GetSignalTargetParentFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17268,15 +16096,14 @@ func (ev *Event) GetSignalTargetParentFileUser() string { // GetSignalTargetParentFsgid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFsgid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17286,15 +16113,14 @@ func (ev *Event) GetSignalTargetParentFsgid() uint32 { // GetSignalTargetParentFsgroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFsgroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17304,15 +16130,14 @@ func (ev *Event) GetSignalTargetParentFsgroup() string { // GetSignalTargetParentFsuid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFsuid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17322,15 +16147,14 @@ func (ev *Event) GetSignalTargetParentFsuid() uint32 { // GetSignalTargetParentFsuser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentFsuser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17340,15 +16164,14 @@ func (ev *Event) GetSignalTargetParentFsuser() string { // GetSignalTargetParentGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17358,15 +16181,14 @@ func (ev *Event) GetSignalTargetParentGid() uint32 { // GetSignalTargetParentGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentGroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17376,15 +16198,14 @@ func (ev *Event) GetSignalTargetParentGroup() string { // GetSignalTargetParentInterpreterFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -17397,15 +16218,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileChangeTime() uint64 { // GetSignalTargetParentInterpreterFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17418,15 +16238,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileFilesystem() string { // GetSignalTargetParentInterpreterFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17439,15 +16258,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileGid() uint32 { // GetSignalTargetParentInterpreterFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17460,15 +16278,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileGroup() string { // GetSignalTargetParentInterpreterFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -17481,15 +16298,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileHashes() []string { // GetSignalTargetParentInterpreterFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if ev.Signal.Target.Parent == nil { - return zeroValue + return false } if !ev.Signal.Target.HasParent() { return false @@ -17502,15 +16318,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileInUpperLayer() bool { // GetSignalTargetParentInterpreterFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -17523,15 +16338,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileInode() uint64 { // GetSignalTargetParentInterpreterFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint16(0) } if ev.Signal.Target == nil { - return zeroValue + return uint16(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint16(0) } if !ev.Signal.Target.HasParent() { return uint16(0) @@ -17544,15 +16358,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileMode() uint16 { // GetSignalTargetParentInterpreterFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint64(0) } if ev.Signal.Target == nil { - return zeroValue + return uint64(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint64(0) } if !ev.Signal.Target.HasParent() { return uint64(0) @@ -17565,15 +16378,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileModificationTime() uint64 { // GetSignalTargetParentInterpreterFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17586,15 +16398,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileMountId() uint32 { // GetSignalTargetParentInterpreterFileName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17607,30 +16418,28 @@ func (ev *Event) GetSignalTargetParentInterpreterFileName() string { // GetSignalTargetParentInterpreterFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if ev.Signal.Target.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Signal.Target.Parent.LinuxBinprm.FileEvent)) } // GetSignalTargetParentInterpreterFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17643,15 +16452,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFilePackageName() string { // GetSignalTargetParentInterpreterFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17664,15 +16472,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFilePackageSourceVersion() stri // GetSignalTargetParentInterpreterFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17685,15 +16492,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFilePackageVersion() string { // GetSignalTargetParentInterpreterFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17706,30 +16512,28 @@ func (ev *Event) GetSignalTargetParentInterpreterFilePath() string { // GetSignalTargetParentInterpreterFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if ev.Signal.Target.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Signal.Target.Parent.LinuxBinprm.FileEvent)) } // GetSignalTargetParentInterpreterFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "signal" { - return zeroValue + return 0 } if ev.Signal.Target == nil { - return zeroValue + return 0 } if ev.Signal.Target.Parent == nil { - return zeroValue + return 0 } if !ev.Signal.Target.HasParent() { return 0 @@ -17742,15 +16546,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileRights() int { // GetSignalTargetParentInterpreterFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17763,15 +16566,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileUid() uint32 { // GetSignalTargetParentInterpreterFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentInterpreterFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17784,15 +16586,14 @@ func (ev *Event) GetSignalTargetParentInterpreterFileUser() string { // GetSignalTargetParentIsKworker returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentIsKworker() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if ev.Signal.Target.Parent == nil { - return zeroValue + return false } if !ev.Signal.Target.HasParent() { return false @@ -17802,15 +16603,14 @@ func (ev *Event) GetSignalTargetParentIsKworker() bool { // GetSignalTargetParentIsThread returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentIsThread() bool { - zeroValue := false if ev.GetEventType().String() != "signal" { - return zeroValue + return false } if ev.Signal.Target == nil { - return zeroValue + return false } if ev.Signal.Target.Parent == nil { - return zeroValue + return false } if !ev.Signal.Target.HasParent() { return false @@ -17820,15 +16620,14 @@ func (ev *Event) GetSignalTargetParentIsThread() bool { // GetSignalTargetParentPid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17838,15 +16637,14 @@ func (ev *Event) GetSignalTargetParentPid() uint32 { // GetSignalTargetParentPpid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentPpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17856,15 +16654,14 @@ func (ev *Event) GetSignalTargetParentPpid() uint32 { // GetSignalTargetParentTid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentTid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17874,15 +16671,14 @@ func (ev *Event) GetSignalTargetParentTid() uint32 { // GetSignalTargetParentTtyName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentTtyName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17892,15 +16688,14 @@ func (ev *Event) GetSignalTargetParentTtyName() string { // GetSignalTargetParentUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } if ev.Signal.Target.Parent == nil { - return zeroValue + return uint32(0) } if !ev.Signal.Target.HasParent() { return uint32(0) @@ -17910,15 +16705,14 @@ func (ev *Event) GetSignalTargetParentUid() uint32 { // GetSignalTargetParentUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentUser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17928,15 +16722,14 @@ func (ev *Event) GetSignalTargetParentUser() string { // GetSignalTargetParentUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } if ev.Signal.Target.Parent == nil { - return zeroValue + return []string{} } if !ev.Signal.Target.HasParent() { return []string{} @@ -17946,15 +16739,14 @@ func (ev *Event) GetSignalTargetParentUserSessionK8sGroups() []string { // GetSignalTargetParentUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentUserSessionK8sUid() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17964,15 +16756,14 @@ func (ev *Event) GetSignalTargetParentUserSessionK8sUid() string { // GetSignalTargetParentUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetParentUserSessionK8sUsername() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } if ev.Signal.Target.Parent == nil { - return zeroValue + return "" } if !ev.Signal.Target.HasParent() { return "" @@ -17982,324 +16773,291 @@ func (ev *Event) GetSignalTargetParentUserSessionK8sUsername() string { // GetSignalTargetPid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.PIDContext.Pid } // GetSignalTargetPpid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetPpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.PPid } // GetSignalTargetTid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetTid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.PIDContext.Tid } // GetSignalTargetTtyName returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetTtyName() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.TTYName } // GetSignalTargetUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } if ev.Signal.Target == nil { - return zeroValue + return uint32(0) } return ev.Signal.Target.Process.Credentials.UID } // GetSignalTargetUser returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetUser() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.Signal.Target.Process.Credentials.User } // GetSignalTargetUserSessionK8sGroups returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetUserSessionK8sGroups() []string { - zeroValue := []string{} if ev.GetEventType().String() != "signal" { - return zeroValue + return []string{} } if ev.Signal.Target == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveK8SGroups(ev, &ev.Signal.Target.Process.UserSession) } // GetSignalTargetUserSessionK8sUid returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetUserSessionK8sUid() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUID(ev, &ev.Signal.Target.Process.UserSession) } // GetSignalTargetUserSessionK8sUsername returns the value of the field, resolving if necessary func (ev *Event) GetSignalTargetUserSessionK8sUsername() string { - zeroValue := "" if ev.GetEventType().String() != "signal" { - return zeroValue + return "" } if ev.Signal.Target == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveK8SUsername(ev, &ev.Signal.Target.Process.UserSession) } // GetSignalType returns the value of the field, resolving if necessary func (ev *Event) GetSignalType() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "signal" { - return zeroValue + return uint32(0) } return ev.Signal.Type } // GetSpliceFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint64(0) } return ev.Splice.File.FileFields.CTime } // GetSpliceFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Splice.File) } // GetSpliceFileGid returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint32(0) } return ev.Splice.File.FileFields.GID } // GetSpliceFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Splice.File.FileFields) } // GetSpliceFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "splice" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Splice.File) } // GetSpliceFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "splice" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Splice.File.FileFields) } // GetSpliceFileInode returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint64(0) } return ev.Splice.File.FileFields.PathKey.Inode } // GetSpliceFileMode returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint16(0) } return ev.Splice.File.FileFields.Mode } // GetSpliceFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint64(0) } return ev.Splice.File.FileFields.MTime } // GetSpliceFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint32(0) } return ev.Splice.File.FileFields.PathKey.MountID } // GetSpliceFileName returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileName() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Splice.File) } // GetSpliceFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "splice" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Splice.File)) } // GetSpliceFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Splice.File) } // GetSpliceFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Splice.File) } // GetSpliceFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Splice.File) } // GetSpliceFilePath returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Splice.File) } // GetSpliceFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "splice" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Splice.File)) } // GetSpliceFileRights returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "splice" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Splice.File.FileFields) } // GetSpliceFileUid returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint32(0) } return ev.Splice.File.FileFields.UID } // GetSpliceFileUser returns the value of the field, resolving if necessary func (ev *Event) GetSpliceFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "splice" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Splice.File.FileFields) } // GetSplicePipeEntryFlag returns the value of the field, resolving if necessary func (ev *Event) GetSplicePipeEntryFlag() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint32(0) } return ev.Splice.PipeEntryFlag } // GetSplicePipeExitFlag returns the value of the field, resolving if necessary func (ev *Event) GetSplicePipeExitFlag() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return uint32(0) } return ev.Splice.PipeExitFlag } // GetSpliceRetval returns the value of the field, resolving if necessary func (ev *Event) GetSpliceRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "splice" { - return zeroValue + return int64(0) } return ev.Splice.SyscallEvent.Retval } @@ -18311,405 +17069,360 @@ func (ev *Event) GetTimestamp() time.Time { // GetUnlinkFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint64(0) } return ev.Unlink.File.FileFields.CTime } // GetUnlinkFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Unlink.File) } // GetUnlinkFileGid returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint32(0) } return ev.Unlink.File.FileFields.GID } // GetUnlinkFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Unlink.File.FileFields) } // GetUnlinkFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "unlink" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Unlink.File) } // GetUnlinkFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "unlink" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Unlink.File.FileFields) } // GetUnlinkFileInode returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint64(0) } return ev.Unlink.File.FileFields.PathKey.Inode } // GetUnlinkFileMode returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint16(0) } return ev.Unlink.File.FileFields.Mode } // GetUnlinkFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint64(0) } return ev.Unlink.File.FileFields.MTime } // GetUnlinkFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint32(0) } return ev.Unlink.File.FileFields.PathKey.MountID } // GetUnlinkFileName returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileName() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Unlink.File) } // GetUnlinkFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "unlink" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Unlink.File)) } // GetUnlinkFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Unlink.File) } // GetUnlinkFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Unlink.File) } // GetUnlinkFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Unlink.File) } // GetUnlinkFilePath returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Unlink.File) } // GetUnlinkFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "unlink" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Unlink.File)) } // GetUnlinkFileRights returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "unlink" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Unlink.File.FileFields) } // GetUnlinkFileUid returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint32(0) } return ev.Unlink.File.FileFields.UID } // GetUnlinkFileUser returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "unlink" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Unlink.File.FileFields) } // GetUnlinkFlags returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkFlags() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return uint32(0) } return ev.Unlink.Flags } // GetUnlinkRetval returns the value of the field, resolving if necessary func (ev *Event) GetUnlinkRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "unlink" { - return zeroValue + return int64(0) } return ev.Unlink.SyscallEvent.Retval } // GetUnloadModuleName returns the value of the field, resolving if necessary func (ev *Event) GetUnloadModuleName() string { - zeroValue := "" if ev.GetEventType().String() != "unload_module" { - return zeroValue + return "" } return ev.UnloadModule.Name } // GetUnloadModuleRetval returns the value of the field, resolving if necessary func (ev *Event) GetUnloadModuleRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "unload_module" { - return zeroValue + return int64(0) } return ev.UnloadModule.SyscallEvent.Retval } // GetUtimesFileChangeTime returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileChangeTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return uint64(0) } return ev.Utimes.File.FileFields.CTime } // GetUtimesFileFilesystem returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileFilesystem() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFilesystem(ev, &ev.Utimes.File) } // GetUtimesFileGid returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileGid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return uint32(0) } return ev.Utimes.File.FileFields.GID } // GetUtimesFileGroup returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileGroup() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsGroup(ev, &ev.Utimes.File.FileFields) } // GetUtimesFileHashes returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileHashes() []string { - zeroValue := []string{} if ev.GetEventType().String() != "utimes" { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveHashesFromEvent(ev, &ev.Utimes.File) } // GetUtimesFileInUpperLayer returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileInUpperLayer() bool { - zeroValue := false if ev.GetEventType().String() != "utimes" { - return zeroValue + return false } return ev.FieldHandlers.ResolveFileFieldsInUpperLayer(ev, &ev.Utimes.File.FileFields) } // GetUtimesFileInode returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileInode() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return uint64(0) } return ev.Utimes.File.FileFields.PathKey.Inode } // GetUtimesFileMode returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileMode() uint16 { - zeroValue := uint16(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return uint16(0) } return ev.Utimes.File.FileFields.Mode } // GetUtimesFileModificationTime returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileModificationTime() uint64 { - zeroValue := uint64(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return uint64(0) } return ev.Utimes.File.FileFields.MTime } // GetUtimesFileMountId returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileMountId() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return uint32(0) } return ev.Utimes.File.FileFields.PathKey.MountID } // GetUtimesFileName returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileName() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Utimes.File) } // GetUtimesFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "utimes" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Utimes.File)) } // GetUtimesFilePackageName returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFilePackageName() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageName(ev, &ev.Utimes.File) } // GetUtimesFilePackageSourceVersion returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFilePackageSourceVersion() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageSourceVersion(ev, &ev.Utimes.File) } // GetUtimesFilePackageVersion returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFilePackageVersion() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolvePackageVersion(ev, &ev.Utimes.File) } // GetUtimesFilePath returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Utimes.File) } // GetUtimesFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "utimes" { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Utimes.File)) } // GetUtimesFileRights returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileRights() int { - zeroValue := 0 if ev.GetEventType().String() != "utimes" { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveRights(ev, &ev.Utimes.File.FileFields) } // GetUtimesFileUid returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileUid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return uint32(0) } return ev.Utimes.File.FileFields.UID } // GetUtimesFileUser returns the value of the field, resolving if necessary func (ev *Event) GetUtimesFileUser() string { - zeroValue := "" if ev.GetEventType().String() != "utimes" { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileFieldsUser(ev, &ev.Utimes.File.FileFields) } // GetUtimesRetval returns the value of the field, resolving if necessary func (ev *Event) GetUtimesRetval() int64 { - zeroValue := int64(0) if ev.GetEventType().String() != "utimes" { - return zeroValue + return int64(0) } return ev.Utimes.SyscallEvent.Retval } diff --git a/pkg/security/secl/model/field_accessors_windows.go b/pkg/security/secl/model/field_accessors_windows.go index ec41b62a4ad1e..81b18240742d2 100644 --- a/pkg/security/secl/model/field_accessors_windows.go +++ b/pkg/security/secl/model/field_accessors_windows.go @@ -16,27 +16,24 @@ import ( // GetContainerCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetContainerCreatedAt() int { - zeroValue := 0 if ev.BaseEvent.ContainerContext == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveContainerCreatedAt(ev, ev.BaseEvent.ContainerContext) } // GetContainerId returns the value of the field, resolving if necessary func (ev *Event) GetContainerId() string { - zeroValue := "" if ev.BaseEvent.ContainerContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveContainerID(ev, ev.BaseEvent.ContainerContext) } // GetContainerTags returns the value of the field, resolving if necessary func (ev *Event) GetContainerTags() []string { - zeroValue := []string{} if ev.BaseEvent.ContainerContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveContainerTags(ev, ev.BaseEvent.ContainerContext) } @@ -48,366 +45,335 @@ func (ev *Event) GetEventTimestamp() int { // GetExecCmdline returns the value of the field, resolving if necessary func (ev *Event) GetExecCmdline() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessCmdLine(ev, ev.Exec.Process) } // GetExecCmdlineScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetExecCmdlineScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessCmdLineScrubbed(ev, ev.Exec.Process) } // GetExecContainerId returns the value of the field, resolving if necessary func (ev *Event) GetExecContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.Exec.Process.ContainerID } // GetExecCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetExecCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, ev.Exec.Process) } // GetExecEnvp returns the value of the field, resolving if necessary func (ev *Event) GetExecEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, ev.Exec.Process) } // GetExecEnvs returns the value of the field, resolving if necessary func (ev *Event) GetExecEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exec" { - return zeroValue + return []string{} } if ev.Exec.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, ev.Exec.Process) } // GetExecExecTime returns the value of the field, resolving if necessary func (ev *Event) GetExecExecTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exec" { - return zeroValue + return time.Time{} } if ev.Exec.Process == nil { - return zeroValue + return time.Time{} } return ev.Exec.Process.ExecTime } // GetExecExitTime returns the value of the field, resolving if necessary func (ev *Event) GetExecExitTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exec" { - return zeroValue + return time.Time{} } if ev.Exec.Process == nil { - return zeroValue + return time.Time{} } return ev.Exec.Process.ExitTime } // GetExecFileName returns the value of the field, resolving if necessary func (ev *Event) GetExecFileName() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exec.Process.FileEvent) } // GetExecFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetExecFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exec.Process.FileEvent)) } // GetExecFilePath returns the value of the field, resolving if necessary func (ev *Event) GetExecFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "exec" { - return zeroValue + return "" } if ev.Exec.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Exec.Process.FileEvent) } // GetExecFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetExecFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exec" { - return zeroValue + return 0 } if ev.Exec.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Exec.Process.FileEvent)) } // GetExecPid returns the value of the field, resolving if necessary func (ev *Event) GetExecPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.PIDContext.Pid } // GetExecPpid returns the value of the field, resolving if necessary func (ev *Event) GetExecPpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exec" { - return zeroValue + return uint32(0) } if ev.Exec.Process == nil { - return zeroValue + return uint32(0) } return ev.Exec.Process.PPid } // GetExitCause returns the value of the field, resolving if necessary func (ev *Event) GetExitCause() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } return ev.Exit.Cause } // GetExitCmdline returns the value of the field, resolving if necessary func (ev *Event) GetExitCmdline() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessCmdLine(ev, ev.Exit.Process) } // GetExitCmdlineScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetExitCmdlineScrubbed() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessCmdLineScrubbed(ev, ev.Exit.Process) } // GetExitCode returns the value of the field, resolving if necessary func (ev *Event) GetExitCode() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } return ev.Exit.Code } // GetExitContainerId returns the value of the field, resolving if necessary func (ev *Event) GetExitContainerId() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.Exit.Process.ContainerID } // GetExitCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetExitCreatedAt() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, ev.Exit.Process) } // GetExitEnvp returns the value of the field, resolving if necessary func (ev *Event) GetExitEnvp() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, ev.Exit.Process) } // GetExitEnvs returns the value of the field, resolving if necessary func (ev *Event) GetExitEnvs() []string { - zeroValue := []string{} if ev.GetEventType().String() != "exit" { - return zeroValue + return []string{} } if ev.Exit.Process == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, ev.Exit.Process) } // GetExitExecTime returns the value of the field, resolving if necessary func (ev *Event) GetExitExecTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exit" { - return zeroValue + return time.Time{} } if ev.Exit.Process == nil { - return zeroValue + return time.Time{} } return ev.Exit.Process.ExecTime } // GetExitExitTime returns the value of the field, resolving if necessary func (ev *Event) GetExitExitTime() time.Time { - zeroValue := time.Time{} if ev.GetEventType().String() != "exit" { - return zeroValue + return time.Time{} } if ev.Exit.Process == nil { - return zeroValue + return time.Time{} } return ev.Exit.Process.ExitTime } // GetExitFileName returns the value of the field, resolving if necessary func (ev *Event) GetExitFileName() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exit.Process.FileEvent) } // GetExitFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetExitFileNameLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.Exit.Process.FileEvent)) } // GetExitFilePath returns the value of the field, resolving if necessary func (ev *Event) GetExitFilePath() string { - zeroValue := "" if ev.GetEventType().String() != "exit" { - return zeroValue + return "" } if ev.Exit.Process == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.Exit.Process.FileEvent) } // GetExitFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetExitFilePathLength() int { - zeroValue := 0 if ev.GetEventType().String() != "exit" { - return zeroValue + return 0 } if ev.Exit.Process == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.Exit.Process.FileEvent)) } // GetExitPid returns the value of the field, resolving if necessary func (ev *Event) GetExitPid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.PIDContext.Pid } // GetExitPpid returns the value of the field, resolving if necessary func (ev *Event) GetExitPpid() uint32 { - zeroValue := uint32(0) if ev.GetEventType().String() != "exit" { - return zeroValue + return uint32(0) } if ev.Exit.Process == nil { - return zeroValue + return uint32(0) } return ev.Exit.Process.PPid } // GetProcessAncestorsCmdline returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsCmdline() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -424,12 +390,11 @@ func (ev *Event) GetProcessAncestorsCmdline() []string { // GetProcessAncestorsCmdlineScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsCmdlineScrubbed() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -446,12 +411,11 @@ func (ev *Event) GetProcessAncestorsCmdlineScrubbed() []string { // GetProcessAncestorsContainerId returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsContainerId() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -468,12 +432,11 @@ func (ev *Event) GetProcessAncestorsContainerId() []string { // GetProcessAncestorsCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsCreatedAt() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -490,12 +453,11 @@ func (ev *Event) GetProcessAncestorsCreatedAt() []int { // GetProcessAncestorsEnvp returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEnvp() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -512,12 +474,11 @@ func (ev *Event) GetProcessAncestorsEnvp() []string { // GetProcessAncestorsEnvs returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsEnvs() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -534,12 +495,11 @@ func (ev *Event) GetProcessAncestorsEnvs() []string { // GetProcessAncestorsFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileName() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -556,12 +516,11 @@ func (ev *Event) GetProcessAncestorsFileName() []string { // GetProcessAncestorsFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFileNameLength() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -578,12 +537,11 @@ func (ev *Event) GetProcessAncestorsFileNameLength() []int { // GetProcessAncestorsFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFilePath() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []string{} } var values []string ctx := eval.NewContext(ev) @@ -600,12 +558,11 @@ func (ev *Event) GetProcessAncestorsFilePath() []string { // GetProcessAncestorsFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsFilePathLength() []int { - zeroValue := []int{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []int{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []int{} } var values []int ctx := eval.NewContext(ev) @@ -622,12 +579,11 @@ func (ev *Event) GetProcessAncestorsFilePathLength() []int { // GetProcessAncestorsPid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsPid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -644,12 +600,11 @@ func (ev *Event) GetProcessAncestorsPid() []uint32 { // GetProcessAncestorsPpid returns the value of the field, resolving if necessary func (ev *Event) GetProcessAncestorsPpid() []uint32 { - zeroValue := []uint32{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []uint32{} } if ev.BaseEvent.ProcessContext.Ancestor == nil { - return zeroValue + return []uint32{} } var values []uint32 ctx := eval.NewContext(ev) @@ -666,120 +621,107 @@ func (ev *Event) GetProcessAncestorsPpid() []uint32 { // GetProcessCmdline returns the value of the field, resolving if necessary func (ev *Event) GetProcessCmdline() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessCmdLine(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessCmdlineScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessCmdlineScrubbed() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveProcessCmdLineScrubbed(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessContainerId returns the value of the field, resolving if necessary func (ev *Event) GetProcessContainerId() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.BaseEvent.ProcessContext.Process.ContainerID } // GetProcessCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetProcessCreatedAt() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return ev.FieldHandlers.ResolveProcessCreatedAt(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessEnvp returns the value of the field, resolving if necessary func (ev *Event) GetProcessEnvp() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvp(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessEnvs returns the value of the field, resolving if necessary func (ev *Event) GetProcessEnvs() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } return ev.FieldHandlers.ResolveProcessEnvs(ev, &ev.BaseEvent.ProcessContext.Process) } // GetProcessExecTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessExecTime() time.Time { - zeroValue := time.Time{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return time.Time{} } return ev.BaseEvent.ProcessContext.Process.ExecTime } // GetProcessExitTime returns the value of the field, resolving if necessary func (ev *Event) GetProcessExitTime() time.Time { - zeroValue := time.Time{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return time.Time{} } return ev.BaseEvent.ProcessContext.Process.ExitTime } // GetProcessFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFileBasename(ev, &ev.BaseEvent.ProcessContext.Process.FileEvent) } // GetProcessFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessFileNameLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.BaseEvent.ProcessContext.Process.FileEvent)) } // GetProcessFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessFilePath() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } return ev.FieldHandlers.ResolveFilePath(ev, &ev.BaseEvent.ProcessContext.Process.FileEvent) } // GetProcessFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessFilePathLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.BaseEvent.ProcessContext.Process.FileEvent)) } // GetProcessParentCmdline returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentCmdline() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -789,12 +731,11 @@ func (ev *Event) GetProcessParentCmdline() string { // GetProcessParentCmdlineScrubbed returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentCmdlineScrubbed() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -804,12 +745,11 @@ func (ev *Event) GetProcessParentCmdlineScrubbed() string { // GetProcessParentContainerId returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentContainerId() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -819,12 +759,11 @@ func (ev *Event) GetProcessParentContainerId() string { // GetProcessParentCreatedAt returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentCreatedAt() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } if !ev.BaseEvent.ProcessContext.HasParent() { return 0 @@ -834,12 +773,11 @@ func (ev *Event) GetProcessParentCreatedAt() int { // GetProcessParentEnvp returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEnvp() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -849,12 +787,11 @@ func (ev *Event) GetProcessParentEnvp() []string { // GetProcessParentEnvs returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentEnvs() []string { - zeroValue := []string{} if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return []string{} } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return []string{} } if !ev.BaseEvent.ProcessContext.HasParent() { return []string{} @@ -864,12 +801,11 @@ func (ev *Event) GetProcessParentEnvs() []string { // GetProcessParentFileName returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileName() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -879,24 +815,22 @@ func (ev *Event) GetProcessParentFileName() string { // GetProcessParentFileNameLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFileNameLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFileBasename(ev, &ev.BaseEvent.ProcessContext.Parent.FileEvent)) } // GetProcessParentFilePath returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFilePath() string { - zeroValue := "" if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return "" } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return "" } if !ev.BaseEvent.ProcessContext.HasParent() { return "" @@ -906,24 +840,22 @@ func (ev *Event) GetProcessParentFilePath() string { // GetProcessParentFilePathLength returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentFilePathLength() int { - zeroValue := 0 if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return 0 } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return 0 } return len(ev.FieldHandlers.ResolveFilePath(ev, &ev.BaseEvent.ProcessContext.Parent.FileEvent)) } // GetProcessParentPid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentPid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -933,12 +865,11 @@ func (ev *Event) GetProcessParentPid() uint32 { // GetProcessParentPpid returns the value of the field, resolving if necessary func (ev *Event) GetProcessParentPpid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } if ev.BaseEvent.ProcessContext.Parent == nil { - return zeroValue + return uint32(0) } if !ev.BaseEvent.ProcessContext.HasParent() { return uint32(0) @@ -948,18 +879,16 @@ func (ev *Event) GetProcessParentPpid() uint32 { // GetProcessPid returns the value of the field, resolving if necessary func (ev *Event) GetProcessPid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.PIDContext.Pid } // GetProcessPpid returns the value of the field, resolving if necessary func (ev *Event) GetProcessPpid() uint32 { - zeroValue := uint32(0) if ev.BaseEvent.ProcessContext == nil { - return zeroValue + return uint32(0) } return ev.BaseEvent.ProcessContext.Process.PPid }