PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pesieve::IATScanReport Member List

This is the complete list of members for pesieve::IATScanReport, including all inherited members.

_toJSON(std::stringstream &outs, size_t level=JSON_LEVEL, const pesieve::t_json_level &jdetails=JSON_BASIC)pesieve::ModuleScanReportinlineprotectedvirtual
countHooked()pesieve::IATScanReportinline
formatHookedFuncName(IN peconv::ImportsCollection *storedFunc, DWORD thunk_rva)pesieve::IATScanReportprotectedstatic
formatTargetName(IN const peconv::ExportsMapper *exportsMap, IN const ModulesInfo &modulesInfo, IN const ULONGLONG module_start, IN ULONGLONG addr)pesieve::IATScanReportprotectedstatic
generateList(IN const std::string &fileName, IN HANDLE hProcess, IN const ModulesInfo &modulesInfo, IN const peconv::ExportsMapper *exportsMap)pesieve::IATScanReport
get_scan_status(const ModuleScanReport *report)pesieve::ModuleScanReportinlinestatic
getRelocBase()pesieve::ModuleScanReportinlinevirtual
hooksToJSON(std::stringstream &outs, size_t level)pesieve::IATScanReport
IATScanReport(HMODULE _module, size_t _moduleSize, std::string _moduleFile)pesieve::IATScanReportinline
isDotNetModulepesieve::ModuleScanReport
JSON_LEVELpesieve::ModuleScanReportstatic
moduleFilepesieve::ModuleScanReport
ModuleScanReport(HMODULE _module, size_t _moduleSize, t_scan_status _status)pesieve::ModuleScanReportinline
ModuleScanReport(HMODULE _module, size_t _moduleSize)pesieve::ModuleScanReportinline
moduleSizepesieve::ModuleScanReport
notCoveredpesieve::IATScanReport
saveNotRecovered(IN std::string fileName, IN HANDLE hProcess, IN peconv::ImportsCollection *storedFunc, IN peconv::ImpsNotCovered &notCovered, IN const ModulesInfo &modulesInfo, IN const peconv::ExportsMapper *exportsMap)pesieve::IATScanReportstatic
statuspesieve::ModuleScanReport
storedFuncpesieve::IATScanReport
toJSON(std::stringstream &outs, size_t level, const pesieve::t_json_level &jdetails)pesieve::IATScanReportinlinevirtual
~ModuleScanReport()pesieve::ModuleScanReportinlinevirtual