HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
util Namespace Reference

Functions

void trim (std::string &s)
 
bool iequals (const std::string &a, const std::string &b)
 
size_t splitList (const std::string &sline, const char delimiter, std::vector< std::string > &args)
 
int loadInt (const std::string &str, bool as_hex=false)
 
bool loadBoolean (const std::string &str, bool defaultVal)
 
std::string booleanToStr (bool val)
 
bool is_searched_name (const WCHAR *processName, const std::set< std::wstring > &names_list)
 
bool is_searched_pid (long pid, const std::set< long > &pids_list)
 
template<typename TYPE_T >
std::string list_to_str (const std::set< TYPE_T > &list)
 
std::wstring strtime (const time_t t)
 
LONGLONG FileTime_to_POSIX (FILETIME ft)
 
LONGLONG process_start_time (DWORD processID)
 

Function Documentation

◆ booleanToStr()

std::string util::booleanToStr ( bool val)

Definition at line 82 of file etw_settings.cpp.

◆ FileTime_to_POSIX()

LONGLONG util::FileTime_to_POSIX ( FILETIME ft)

Definition at line 25 of file time_util.cpp.

◆ iequals()

bool util::iequals ( const std::string & a,
const std::string & b )

Definition at line 36 of file etw_settings.cpp.

◆ is_searched_name()

bool util::is_searched_name ( const WCHAR * processName,
const std::set< std::wstring > & names_list )

Definition at line 83 of file hh_scanner.cpp.

◆ is_searched_pid()

bool util::is_searched_pid ( long pid,
const std::set< long > & pids_list )

Definition at line 94 of file hh_scanner.cpp.

◆ list_to_str()

template<typename TYPE_T >
std::string util::list_to_str ( const std::set< TYPE_T > & list)

Definition at line 104 of file hh_scanner.cpp.

◆ loadBoolean()

bool util::loadBoolean ( const std::string & str,
bool defaultVal )

Definition at line 69 of file etw_settings.cpp.

Here is the call graph for this function:

◆ loadInt()

int util::loadInt ( const std::string & str,
bool as_hex = false )

Definition at line 58 of file etw_settings.cpp.

◆ process_start_time()

LONGLONG util::process_start_time ( DWORD processID)

Definition at line 42 of file time_util.cpp.

Here is the call graph for this function:

◆ splitList()

size_t util::splitList ( const std::string & sline,
const char delimiter,
std::vector< std::string > & args )

Definition at line 47 of file etw_settings.cpp.

◆ strtime()

std::wstring util::strtime ( const time_t t)

Definition at line 12 of file time_util.cpp.

◆ trim()

void util::trim ( std::string & s)

Definition at line 30 of file etw_settings.cpp.