HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
HHScanReport Class Reference

#include <hh_report.h>

Public Member Functions

 HHScanReport (DWORD start_tick, time_t start_time)
 
bool setEndTick (DWORD end_tick, time_t end_time)
 
DWORD getScanTime () const
 
bool appendReport (pesieve::t_report &scan_report, const std::wstring &img_name)
 
size_t countReports (const pesieve::t_results_filter rfilter) const
 
size_t countTotal (bool successfulOnly=true) const
 
void toString (std::wstringstream &stream, const pesieve::t_results_filter rfilter)
 

Protected Member Functions

size_t reportsToString (std::wstringstream &stream, const pesieve::t_results_filter rfilter)
 
size_t toJSON (std::wstringstream &stream, const t_hh_params &params)
 
size_t reportsToJSON (std::wstringstream &stream, size_t level, const t_hh_params &params)
 

Protected Attributes

time_t startTime
 
time_t endTime
 
DWORD startTick
 
DWORD endTick
 
std::map< DWORD, pesieve::t_report > pidToReport
 
std::map< DWORD, std::wstring > pidToName
 
std::vector< DWORD > suspicious
 
std::vector< DWORD > failed
 

Friends

class HHScanner
 

Detailed Description

Definition at line 12 of file hh_report.h.

Constructor & Destructor Documentation

◆ HHScanReport()

HHScanReport::HHScanReport ( DWORD start_tick,
time_t start_time )
inline

Definition at line 15 of file hh_report.h.

Member Function Documentation

◆ appendReport()

bool HHScanReport::appendReport ( pesieve::t_report & scan_report,
const std::wstring & img_name )

Definition at line 19 of file hh_report.cpp.

◆ countReports()

size_t HHScanReport::countReports ( const pesieve::t_results_filter rfilter) const
inline

Definition at line 39 of file hh_report.h.

Here is the call graph for this function:

◆ countTotal()

size_t HHScanReport::countTotal ( bool successfulOnly = true) const
inline

Definition at line 60 of file hh_report.h.

◆ getScanTime()

DWORD HHScanReport::getScanTime ( ) const
inline

Definition at line 31 of file hh_report.h.

◆ reportsToJSON()

size_t HHScanReport::reportsToJSON ( std::wstringstream & stream,
size_t level,
const t_hh_params & params )
protected

Definition at line 74 of file hh_report.cpp.

◆ reportsToString()

size_t HHScanReport::reportsToString ( std::wstringstream & stream,
const pesieve::t_results_filter rfilter )
protected

Definition at line 32 of file hh_report.cpp.

Here is the call graph for this function:

◆ setEndTick()

bool HHScanReport::setEndTick ( DWORD end_tick,
time_t end_time )
inline

Definition at line 21 of file hh_report.h.

◆ toJSON()

size_t HHScanReport::toJSON ( std::wstringstream & stream,
const t_hh_params & params )
protected

Definition at line 124 of file hh_report.cpp.

Here is the call graph for this function:

◆ toString()

void HHScanReport::toString ( std::wstringstream & stream,
const pesieve::t_results_filter rfilter )

Definition at line 170 of file hh_report.cpp.

Here is the call graph for this function:

Friends And Related Symbol Documentation

◆ HHScanner

friend class HHScanner
friend

Definition at line 87 of file hh_report.h.

Member Data Documentation

◆ endTick

DWORD HHScanReport::endTick
protected

Definition at line 81 of file hh_report.h.

◆ endTime

time_t HHScanReport::endTime
protected

Definition at line 78 of file hh_report.h.

◆ failed

std::vector<DWORD> HHScanReport::failed
protected

Definition at line 86 of file hh_report.h.

◆ pidToName

std::map<DWORD, std::wstring> HHScanReport::pidToName
protected

Definition at line 84 of file hh_report.h.

◆ pidToReport

std::map<DWORD, pesieve::t_report> HHScanReport::pidToReport
protected

Definition at line 83 of file hh_report.h.

◆ startTick

DWORD HHScanReport::startTick
protected

Definition at line 80 of file hh_report.h.

◆ startTime

time_t HHScanReport::startTime
protected

Definition at line 77 of file hh_report.h.

◆ suspicious

std::vector<DWORD> HHScanReport::suspicious
protected

Definition at line 85 of file hh_report.h.


The documentation for this class was generated from the following files: