![]() |
HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <hh_report.h>
Public Member Functions | |
| HHScanReport (DWORD start_tick, time_t start_time) | |
| bool | setEndTick (DWORD end_tick, time_t end_time) |
| DWORD | getScanTime () const |
| bool | appendReport (pesieve::t_report &scan_report, const std::wstring &img_name) |
| size_t | countReports (const pesieve::t_results_filter rfilter) const |
| size_t | countTotal (bool successfulOnly=true) const |
| void | toString (std::wstringstream &stream, const pesieve::t_results_filter rfilter) |
Protected Member Functions | |
| size_t | reportsToString (std::wstringstream &stream, const pesieve::t_results_filter rfilter) |
| size_t | toJSON (std::wstringstream &stream, const t_hh_params ¶ms) |
| size_t | reportsToJSON (std::wstringstream &stream, size_t level, const t_hh_params ¶ms) |
Protected Attributes | |
| time_t | startTime |
| time_t | endTime |
| DWORD | startTick |
| DWORD | endTick |
| std::map< DWORD, pesieve::t_report > | pidToReport |
| std::map< DWORD, std::wstring > | pidToName |
| std::vector< DWORD > | suspicious |
| std::vector< DWORD > | failed |
Friends | |
| class | HHScanner |
Definition at line 12 of file hh_report.h.
|
inline |
Definition at line 15 of file hh_report.h.
| bool HHScanReport::appendReport | ( | pesieve::t_report & | scan_report, |
| const std::wstring & | img_name ) |
Definition at line 19 of file hh_report.cpp.
|
inline |
|
inline |
Definition at line 60 of file hh_report.h.
|
inline |
Definition at line 31 of file hh_report.h.
|
protected |
Definition at line 74 of file hh_report.cpp.
|
protected |
|
inline |
Definition at line 21 of file hh_report.h.
|
protected |
| void HHScanReport::toString | ( | std::wstringstream & | stream, |
| const pesieve::t_results_filter | rfilter ) |
|
friend |
Definition at line 87 of file hh_report.h.
|
protected |
Definition at line 81 of file hh_report.h.
|
protected |
Definition at line 78 of file hh_report.h.
|
protected |
Definition at line 86 of file hh_report.h.
|
protected |
Definition at line 84 of file hh_report.h.
|
protected |
Definition at line 83 of file hh_report.h.
|
protected |
Definition at line 80 of file hh_report.h.
|
protected |
Definition at line 77 of file hh_report.h.
|
protected |
Definition at line 85 of file hh_report.h.