Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Entity id desc #1

Draft
wants to merge 3 commits into
base: main
Choose a base branch
from
Draft

Entity id desc #1

wants to merge 3 commits into from

Commits on Nov 29, 2023

  1. Update process.entity_id description with recommended generation methods

    Update the process.entity_id description with recommended generation methods.
    
    These methods will allow entity_id to be generated reproducibly, while being
    unique to a process.
    
    If different data source collectors use the recommeded generation method, and
    observe events from the same process, they will generate the same entity_id, and
    it will be possible to corralate the  events and identify them as belonging to the
    same process later.
    mjwolf committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    4c45348 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    4390c7b View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2023

  1. Re-order fields in entity_id definition

    Re-order the entity_id fields to have the PID, start time first. To
    improve human readability and scanning effeciency, the fields that
    change most often are first.
    
    Also redefined Windows entity_id to use existing Windows process fields
    that are more likely to be unique for the process.
    mjwolf committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    7053288 View commit details
    Browse the repository at this point in the history