Post not yet marked as solved
Post marked as unsolved with 3 replies, 420 views
Right now I am going to build a service which using endpoint-security client api.
I see that I can get the the process id by pid_t pid = audit_token_to_pid(message->process->audit_token);. But I want to get the thread id of the process which try to access the file system. Is there any way I can get it?
Posted
by
blknit.
Last updated
blknit.
.