PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
entropy.h File Reference
#include <cmath>
#include <map>

Go to the source code of this file.

Namespaces

namespace  pesieve
 
namespace  pesieve::stats
 

Functions

template<typename T >
size_t pesieve::stats::generateHistogram (IN T buffer[], IN size_t bufferSize, OUT std::map< T, size_t > &counts)
 
template<typename T >
double pesieve::stats::calcShannonEntropy (std::map< T, size_t > &histogram, size_t totalSize)