PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
All Classes Namespaces Files Functions Variables Typedefs Enumerations Enumerator Friends Macros Pages
pesieve::ElementScanReport Class Reference

A base class of all the reports detailing on the output of the performed element scan. More...

#include <module_scan_report.h>

Inheritance diagram for pesieve::ElementScanReport:

Public Member Functions

 ElementScanReport (t_scan_status _status=SCAN_NOT_SUSPICIOUS)
 

Static Public Member Functions

static t_scan_status get_scan_status (const ElementScanReport *report)
 

Public Attributes

t_scan_status status
 

Static Public Attributes

static const size_t JSON_LEVEL = 1
 

Protected Member Functions

virtual const bool _toJSON (std::stringstream &outs, size_t level=JSON_LEVEL, const pesieve::t_json_level &jdetails=JSON_BASIC)
 

Detailed Description

A base class of all the reports detailing on the output of the performed element scan.

Definition at line 25 of file module_scan_report.h.

Constructor & Destructor Documentation

◆ ElementScanReport()

pesieve::ElementScanReport::ElementScanReport ( t_scan_status _status = SCAN_NOT_SUSPICIOUS)
inline

Definition at line 28 of file module_scan_report.h.

Member Function Documentation

◆ _toJSON()

virtual const bool pesieve::ElementScanReport::_toJSON ( std::stringstream & outs,
size_t level = JSON_LEVEL,
const pesieve::t_json_level & jdetails = JSON_BASIC )
inlineprotectedvirtual

Reimplemented in pesieve::ModuleScanReport.

Definition at line 46 of file module_scan_report.h.

◆ get_scan_status()

static t_scan_status pesieve::ElementScanReport::get_scan_status ( const ElementScanReport * report)
inlinestatic

Definition at line 35 of file module_scan_report.h.

Here is the call graph for this function:

Member Data Documentation

◆ JSON_LEVEL

const size_t pesieve::ElementScanReport::JSON_LEVEL = 1
static

Definition at line 33 of file module_scan_report.h.

◆ status

t_scan_status pesieve::ElementScanReport::status

Definition at line 43 of file module_scan_report.h.


The documentation for this class was generated from the following file: