process Token

The process token contains information describing a process. The fields are:

• A token ID

• The user audit ID

• The effective user ID

• The effective group ID

• The real user ID

• The real group ID

• The process ID

• The session ID

• A terminal ID made up of:

  • A device ID

  • A machine ID

A process token is displayed by praudit as follows:

process,root,root,wheel,root,wheel,0,0,0,0.0.0.0