eventupload

type EventPayload struct {
	FileSHA  string          `json:"file_sha256"`
	UnixTime float64         `json:"execution_time"`
	Content  json.RawMessage `json:"-"`
}

type EventUploadEvent struct {
	ParentName                   string         `json:"parent_name"`
	FilePath                     string         `json:"file_path"`
	QuarantineTimestamp          int            `json:"quarantine_timestamp"`
	LoggedInUsers                []string       `json:"logged_in_users"`
	SigningChain                 []SigningEntry `json:"signing_chain"`
	SigningIDs                   string         `json:"signing_id"`
	TeamID                       string         `json:"team_id"`
	BundleID                     string         `json:"bundle_id"`
	CDHash                       string         `json:"cdhash"`
	ParentProcessID              int            `json:"ppid"`
	ExecutingUser                string         `json:"executing_user"`
	FileName                     string         `json:"file_name"`
	ExecutionTime                float64        `json:"execution_time"`
	FileSHA256                   string         `json:"file_sha256"`
	Decision                     string         `json:"decision"`
	ProcessID                    int            `json:"pid"`
	CurrentSessions              []string       `json:"current_sessions"`
	FileBundleID                 string         `json:"file_bundle_id,omitempty"`
	FileBundlePath               string         `json:"file_bundle_path,omitempty"`
	FileBundleExecutableRelPath  string         `json:"file_bundle_executable_rel_path,omitempty"`
	FileBundleName               string         `json:"file_bundle_name,omitempty"`
	FileBundleVersion            string         `json:"file_bundle_version,omitempty"`
	FileBundleShortVersionString string         `json:"file_bundle_version_string,omitempty"`
	FileBundleHash               string         `json:"file_bundle_hash,omitempty"`
	FileBundleHashMilliseconds   float64        `json:"file_bundle_hash_millis,omitempty"`
	FileBundleBinaryCount        int64          `json:"file_bundle_binary_count,omitempty"`
}

type EventUploadRequest struct {
	Events []EventUploadEvent `json:"events"`
}

type ForwardedEventUploadEvent struct {
	MachineID string `json:"machine_id"`
	EventUploadEvent
}

type PostEventuploadHandler struct {
	// contains filtered or unexported fields
}

type SigningEntry struct {
	CertificateName    string `json:"cn"`
	ValidUntil         int    `json:"valid_until"`
	Organization       string `json:"org"`
	ValidFrom          int    `json:"valid_from"`
	OrganizationalUnit string `json:"ou"`
	SHA256             string `json:"sha256"`
}