Skip to content

Create capture-process-snapshot.yml#833

Merged
mr-tz merged 2 commits intomasterfrom
mr-tz-patch-3
Oct 9, 2023
Merged

Create capture-process-snapshot.yml#833
mr-tz merged 2 commits intomasterfrom
mr-tz-patch-3

Conversation

@mr-tz
Copy link
Collaborator

@mr-tz mr-tz commented Oct 1, 2023

closes #527

@@ -0,0 +1,10 @@
rule:
meta:
name: capture process snapshot
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you think of any way to make this name a little more descriptive? like what kind of snapshot?

perhaps "capture process memory snapshot"?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

there's multiple information that can be queried, see https://learn.microsoft.com/en-us/windows/win32/api/processsnapshot/ne-processsnapshot-pss_capture_flags, so I suggest data?!

@mr-tz mr-tz merged commit 216b30a into master Oct 9, 2023
@mr-tz mr-tz deleted the mr-tz-patch-3 branch October 9, 2023 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

process snapshot

2 participants