HollowsHunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
util
strings_util.h
Go to the documentation of this file.
1
#pragma once
2
3
#include <string>
4
5
namespace
hhunter
{
6
7
namespace
util
{
8
9
enum
stringsim_type
{
10
SIM_NONE
= 0,
11
SIM_SUBSTR
= 1,
12
SIM_LAV_DIST
,
13
SIM_HIST
14
};
15
16
std::string
to_lowercase
(std::string);
17
18
// Compare cstrings (ignore case)
19
bool
is_cstr_equal
(
char
const
*a,
char
const
*b,
const
size_t
max_len);
20
21
// Calculate Levenshtein distance of two strings
22
size_t
levenshtein_distance
(
const
char
s1[],
const
char
s2[]);
23
24
// Calculate a diffrence in strings histograms
25
size_t
str_hist_diffrence
(
const
char
s1[],
const
char
s2[]);
26
27
stringsim_type
is_string_similar
(
const
std::string ¶m,
const
std::string &filter);
28
};
29
};
hhunter::util::str_hist_diffrence
size_t str_hist_diffrence(const char s1[], const char s2[])
Definition
strings_util.cpp:55
hhunter::util::levenshtein_distance
size_t levenshtein_distance(const char s1[], const char s2[])
Definition
strings_util.cpp:25
hhunter::util::is_cstr_equal
bool is_cstr_equal(char const *a, char const *b, const size_t max_len)
Definition
strings_util.cpp:12
hhunter::util::is_string_similar
stringsim_type is_string_similar(const std::string ¶m, const std::string &filter)
Definition
strings_util.cpp:82
hhunter::util::to_lowercase
std::string to_lowercase(std::string)
Definition
strings_util.cpp:6
hhunter::util::stringsim_type
stringsim_type
Definition
strings_util.h:9
hhunter::util::SIM_LAV_DIST
@ SIM_LAV_DIST
Definition
strings_util.h:12
hhunter::util::SIM_NONE
@ SIM_NONE
Definition
strings_util.h:10
hhunter::util::SIM_HIST
@ SIM_HIST
Definition
strings_util.h:13
hhunter::util::SIM_SUBSTR
@ SIM_SUBSTR
Definition
strings_util.h:11
hhunter
Definition
process_privilege.cpp:5
util
Definition
etw_settings.cpp:14
Generated by
1.12.0