pesieve::ThreadScanReport Class Reference

A report from the thread scan, generated by ThreadScanner. More...

#include <thread_scanner.h>

Inheritance diagram for pesieve::ThreadScanReport:

Public Member Functions
	ThreadScanReport (DWORD _tid)
virtual const void	fieldsToJSON (std::stringstream &outs, size_t level, const pesieve::t_json_level &jdetails)
virtual const bool	toJSON (std::stringstream &outs, size_t level, const pesieve::t_json_level &jdetails)
Public Member Functions inherited from pesieve::ModuleScanReport
	ModuleScanReport (HMODULE _module, size_t _moduleSize, t_scan_status _status)
	ModuleScanReport (HMODULE _module, size_t _moduleSize)
virtual	~ModuleScanReport ()
virtual ULONGLONG	getRelocBase ()

Public Attributes
ULONGLONG	thread_ip
DWORD	tid
DWORD	protection
DWORD	thread_state
DWORD	thread_wait_reason
AreaEntropyStats	stats
Public Attributes inherited from pesieve::ModuleScanReport
HMODULE size_t	moduleSize
bool	isDotNetModule
std::string	moduleFile
t_scan_status	status

Static Public Attributes
static const DWORD	THREAD_STATE_UNKNOWN = (-1)
static const DWORD	THREAD_STATE_WAITING = 5
Static Public Attributes inherited from pesieve::ModuleScanReport
static const size_t	JSON_LEVEL = 1

Static Protected Member Functions
static std::string	translate_thread_state (DWORD thread_state)
static std::string	translate_wait_reason (DWORD thread_wait_reason)

Additional Inherited Members
Static Public Member Functions inherited from pesieve::ModuleScanReport
static t_scan_status	get_scan_status (const ModuleScanReport *report)
Protected Member Functions inherited from pesieve::ModuleScanReport
virtual const bool	_toJSON (std::stringstream &outs, size_t level=JSON_LEVEL, const pesieve::t_json_level &jdetails=JSON_BASIC)

Detailed Description

A report from the thread scan, generated by ThreadScanner.

Definition at line 13 of file thread_scanner.h.

Constructor & Destructor Documentation

ThreadScanReport()

pesieve::ThreadScanReport::ThreadScanReport ( DWORD _tid )

inline

Definition at line 19 of file thread_scanner.h.

Member Function Documentation

fieldsToJSON()

virtual const void pesieve::ThreadScanReport::fieldsToJSON ( std::stringstream & outs, size_t level, const pesieve::t_json_level & jdetails )

inlinevirtual

Definition at line 26 of file thread_scanner.h.

Here is the call graph for this function:

toJSON()

virtual const bool pesieve::ThreadScanReport::toJSON ( std::stringstream & outs, size_t level, const pesieve::t_json_level & jdetails )

inlinevirtual

Implements pesieve::ModuleScanReport.

Definition at line 56 of file thread_scanner.h.

Here is the call graph for this function:

translate_thread_state()

std::string ThreadScanReport::translate_thread_state ( DWORD thread_state )

staticprotected

Definition at line 106 of file thread_scanner.cpp.

Here is the call graph for this function:

translate_wait_reason()

std::string ThreadScanReport::translate_wait_reason ( DWORD thread_wait_reason )

staticprotected

Definition at line 92 of file thread_scanner.cpp.

Here is the call graph for this function:

Member Data Documentation

protection

DWORD pesieve::ThreadScanReport::protection

Definition at line 67 of file thread_scanner.h.

stats

AreaEntropyStats pesieve::ThreadScanReport::stats

Definition at line 70 of file thread_scanner.h.

thread_ip

ULONGLONG pesieve::ThreadScanReport::thread_ip

Definition at line 65 of file thread_scanner.h.

thread_state

DWORD pesieve::ThreadScanReport::thread_state

Definition at line 68 of file thread_scanner.h.

THREAD_STATE_UNKNOWN

const DWORD pesieve::ThreadScanReport::THREAD_STATE_UNKNOWN = (-1)

static

Definition at line 16 of file thread_scanner.h.

THREAD_STATE_WAITING

const DWORD pesieve::ThreadScanReport::THREAD_STATE_WAITING = 5

static

Definition at line 17 of file thread_scanner.h.

thread_wait_reason

DWORD pesieve::ThreadScanReport::thread_wait_reason

Definition at line 69 of file thread_scanner.h.

tid

DWORD pesieve::ThreadScanReport::tid

Definition at line 66 of file thread_scanner.h.

---

The documentation for this class was generated from the following files:

• scanners/thread_scanner.h
• scanners/thread_scanner.cpp