PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
Public Member Functions | Public Attributes | List of all members
pesieve::MappingScanReport Class Reference

#include <mapping_scanner.h>

Inheritance diagram for pesieve::MappingScanReport:
Inheritance graph
[legend]

Public Member Functions

 MappingScanReport (HMODULE _module, size_t _moduleSize)
 
virtual const void fieldsToJSON (std::stringstream &outs, size_t level, const pesieve::t_json_level &jdetails)
 
virtual const bool toJSON (std::stringstream &outs, size_t level, const pesieve::t_json_level &jdetails)
 
- Public Member Functions inherited from pesieve::ModuleScanReport
 ModuleScanReport (HMODULE _module, size_t _moduleSize, t_scan_status _status)
 
 ModuleScanReport (HMODULE _module, size_t _moduleSize)
 
virtual ~ModuleScanReport ()
 
virtual ULONGLONG getRelocBase ()
 

Public Attributes

std::string mappedFile
 
- Public Attributes inherited from pesieve::ModuleScanReport
HMODULE size_t moduleSize
 
bool isDotNetModule
 
std::string moduleFile
 
t_scan_status status
 

Additional Inherited Members

- Static Public Member Functions inherited from pesieve::ModuleScanReport
static t_scan_status get_scan_status (const ModuleScanReport *report)
 
- Static Public Attributes inherited from pesieve::ModuleScanReport
static const size_t JSON_LEVEL = 1
 
- Protected Member Functions inherited from pesieve::ModuleScanReport
virtual const bool _toJSON (std::stringstream &outs, size_t level=JSON_LEVEL, const pesieve::t_json_level &jdetails=JSON_BASIC)
 

Detailed Description

Definition at line 12 of file mapping_scanner.h.

Constructor & Destructor Documentation

◆ MappingScanReport()

pesieve::MappingScanReport::MappingScanReport ( HMODULE _module,
size_t _moduleSize )
inline

Definition at line 15 of file mapping_scanner.h.

Member Function Documentation

◆ fieldsToJSON()

virtual const void pesieve::MappingScanReport::fieldsToJSON ( std::stringstream & outs,
size_t level,
const pesieve::t_json_level & jdetails )
inlinevirtual

Definition at line 20 of file mapping_scanner.h.

Here is the call graph for this function:

◆ toJSON()

virtual const bool pesieve::MappingScanReport::toJSON ( std::stringstream & outs,
size_t level,
const pesieve::t_json_level & jdetails )
inlinevirtual

Implements pesieve::ModuleScanReport.

Definition at line 34 of file mapping_scanner.h.

Here is the call graph for this function:

Member Data Documentation

◆ mappedFile

std::string pesieve::MappingScanReport::mappedFile

Definition at line 44 of file mapping_scanner.h.


The documentation for this class was generated from the following file: