Address gaps in Process Activity and Memory Activity wrt process injection. #1060
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…ction. Signed-off-by: Dave McCormack <[email protected]>
Signed-off-by: Dave McCormack <[email protected]>
|
This PR replaces #1042 which had targetted the now released 1.2.0 branch. Otherwise unchanged. |
|
@pagbabian-splunk - If you could re-approve this copy of the original PR I would appreciate it. I'd also appreciate your guidance on how best to engage other code owners. |
davemcatcisco
requested review from
floydtree,
pagbabian-splunk,
Aniak5,
mikeradka and
zschmerber
as code owners
floydtree
requested changes
Apr 23, 2024
Signed-off-by: Dave McCormack <[email protected]>
floydtree
approved these changes
Apr 23, 2024
zschmerber
approved these changes
Apr 24, 2024
|
Thanks, all. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Related Issue:
#1041: Process Activity and Memory Activity cannot adequately describe common injection-related behaviours
Description of changes:
injection_type_idenum in dictionary.json to cover queueing of an asynchronous procedure call (APC).activity_idenum in events/system/memory.json to cover mapping of shared memory object.