module
Contents
module¶
Event fields used to define/normalize metadata about modules loaded into a process. A process module represents a .dll or .exe file that is loaded into a particular process.
Attributes¶
Name |
Type |
Description |
Sample Value |
|---|---|---|---|
module_is_signed |
boolean |
is the module loaded signed? |
|
module_name |
string |
name of the modules loaded into a process without the full path |
|
module_path |
string |
full path of a module loaded into a process |
|
module_signature |
string |
The signer |
|
module_signature_status |
string |
status of the signature |
|