# process_log
PROC_CREATE = "create"
MEM_ALLOC = "mem_alloc"
MEM_WRITE = "mem_write"
MEM_READ = "mem_read"
MEM_PROTECT = "mem_protect"
THREAD_INJECT = "thread_inject"
THREAD_CREATE = "thread_create"

# file_log
FILE_CREATE = "create"
FILE_WRITE = "write"
FILE_OPEN = "open"
FILE_READ = "read"

# reg_log
REG_OPEN = "open_key"
REG_READ = "read_value"
REG_LIST = "list_subkeys"
REG_CREATE = "create_key"