Contents

es_event_iokit_open_t

A type for an event that indicates the opening of an IOKit device.

Declaration

struct es_event_iokit_open_t

Overview

Endpoint Security generates this event when a process calls IOServiceOpen(_:_:_:_:) in order to open a communications channel with an IOKit driver. The event doesn’t correspond to driver/device communication and provides neither visibility nor access control into devices.

Topics

Inspecting Event Properties

Initializers

Instance Properties

See Also

Kernel Event Types