Module
module
The Module object describes the load attributes of a module.
Attributes
Caption | Name | Type | Description |
---|---|---|---|
Base Address | base_address | String | The memory address where the module was loaded. |
File | file | File[] | Entity: |
Function Name | function_name | String | The entry-point function of the module. The system calls the entry-point function whenever a process or thread loads or unloads the module. |
Load Type | load_type | String | The load type, normalized to the caption of the load_type_id value. In the case of 'Other', it is defined by the event source. |
Load Type ID | load_type_id | Integer | The normalized identifier for how the module was loaded in memory.
|
Raw Data | raw_data | JSON | Group: |
Record ID | record_id | String | Group: |
Start Address | start_address | String | The start address of the execution. |
Type | type | String | The module type. |
Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference Module in their attributes:
Outbound Relationships
Module references the following objects and events in its attributes:
This page describes ocsf-1.4.0
Updated 10 days ago