PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pesieve::HeadersScanReport Member List

This is the complete list of members for pesieve::HeadersScanReport, including all inherited members.

_toJSON(std::stringstream &outs, size_t level=JSON_LEVEL, const pesieve::t_json_level &jdetails=JSON_BASIC)pesieve::ModuleScanReportinlineprotectedvirtual
archMismatchpesieve::HeadersScanReport
dosHdrModifiedpesieve::HeadersScanReport
epModifiedpesieve::HeadersScanReport
fieldsToJSON(std::stringstream &outs, size_t level, const pesieve::t_json_level &jdetails)pesieve::HeadersScanReportinlinevirtual
fileHdrModifiedpesieve::HeadersScanReport
get_scan_status(const ModuleScanReport *report)pesieve::ModuleScanReportinlinestatic
getRelocBase()pesieve::ModuleScanReportinlinevirtual
HeadersScanReport(HMODULE _module, size_t _moduleSize)pesieve::HeadersScanReportinline
is64pesieve::HeadersScanReport
isDotNetModulepesieve::ModuleScanReport
isHdrReplaced()pesieve::HeadersScanReportinline
isInPEBpesieve::HeadersScanReport
JSON_LEVELpesieve::ModuleScanReportstatic
modulepesieve::ModuleScanReport
moduleFilepesieve::ModuleScanReport
ModuleScanReport(HMODULE _module, size_t _moduleSize, t_scan_status _status=SCAN_NOT_SUSPICIOUS)pesieve::ModuleScanReportinline
moduleSizepesieve::ModuleScanReport
ntHdrModifiedpesieve::HeadersScanReport
origBasepesieve::ModuleScanReport
relocBasepesieve::ModuleScanReport
secHdrModifiedpesieve::HeadersScanReport
statuspesieve::ModuleScanReport
toJSON(std::stringstream &outs, size_t level, const pesieve::t_json_level &jdetails)pesieve::HeadersScanReportinlinevirtual
~ModuleScanReport()pesieve::ModuleScanReportinlinevirtual