Modifier

Partager via


SyscallContext Struct

Definition

Represents the context for a consumer that processes correlated system call data.

public struct SyscallContext
type SyscallContext = struct
Public Structure SyscallContext
Inheritance
SyscallContext

Constructors

SyscallContext(EventContextState, Syscall, ExceptionDispatchInfo)

Initializes a new instance of the SyscallContext structure.

Properties

Canceled

Gets a value indicating whether the consumer receiving this event context is cancelling delivery of future events.

Data

Gets the data that was parsed and correlated, if successful.

Exception

Gets the exception that occured attempting to parse an event or correlate data, if any.

Succeeded

Gets a value indicating whether the event was successfully parsed.

Methods

Cancel()

Cancels delivery of future data to the matching consumer.

Applies to