PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <multi_stats.h>
Public Member Functions | |
AreaMultiStats () | |
AreaMultiStats (const AreaMultiStats &p1) | |
bool | fillSettings (StatsSettings *settings) |
virtual const void | fieldsToJSON (std::stringstream &outs, size_t level) |
bool | isFilled () const |
void | summarize () |
Public Member Functions inherited from pesieve::AreaStats | |
AreaStats () | |
void | setStartOffset (size_t _area_start) |
void | appendVal (BYTE val) |
bool | isFilled () const |
virtual const bool | toJSON (std::stringstream &outs, size_t level) |
Public Attributes | |
ChunkStats | currArea |
Protected Member Functions | |
void | _appendVal (BYTE val) |
Protected Member Functions inherited from pesieve::AreaStats |
Additional Inherited Members | |
Protected Attributes inherited from pesieve::AreaStats | |
size_t | area_size |
size_t | area_start |
Definition at line 190 of file multi_stats.h.
|
inline |
Definition at line 192 of file multi_stats.h.
|
inline |
Definition at line 197 of file multi_stats.h.
|
inlineprotectedvirtual |
Implements pesieve::AreaStats.
Definition at line 232 of file multi_stats.h.
|
inlinevirtual |
Implements pesieve::AreaStats.
Definition at line 211 of file multi_stats.h.
|
inlinevirtual |
Reimplemented from pesieve::AreaStats.
Definition at line 202 of file multi_stats.h.
|
inline |
Definition at line 219 of file multi_stats.h.
|
inlinevirtual |
Implements pesieve::AreaStats.
Definition at line 224 of file multi_stats.h.
ChunkStats pesieve::AreaMultiStats::currArea |
Definition at line 229 of file multi_stats.h.