8 OUT_PADDED(outs, level,
"\"modules_ignored\" : ");
16 OUT_PADDED(outs, level,
"\"dotnet_policy\" : ");
21 OUT_PADDED(outs, level,
"\"use_reflection\" : ");
56 OUT_PADDED(stream, level,
"\"pesieve_params\" : {\n");
void params_fields_to_JSON(pesieve::t_params ¶ms, std::stringstream &outs, size_t level)
void params_to_JSON(pesieve::t_params ¶ms, std::stringstream &stream, size_t start_level)
Input parameters for PE-sieve, defining the configuration.
bool make_reflection
operate on a process reflection rather than on the live process (this allows i.e. to force-read inacc...
t_shellc_mode shellcode
detect shellcode implants
t_dotnet_policy dotnet_policy
policy for scanning .NET modules
bool no_hooks
don't scan for hooks
bool use_cache
enable cache for the scanned modules
PARAM_STRING modules_ignored
a list of modules that will not be scanned, separated by PARAM_LIST_SEPARATOR
t_imprec_mode imprec_mode
import recovery mode
t_obfusc_mode obfuscated
detect encrypted or obfuscated content (possible encrypted shellcodes)
t_iat_scan_mode iat
detect IAT hooking
t_output_filter out_filter
level of details of the created output material
t_data_scan_mode data
should scan non-executable pages?