PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pe_sieve_report.h
Go to the documentation of this file.
1
6#pragma once
7
8#include <windows.h>
9#include <iostream>
10
13
14namespace pesieve {
15
17 {
18 public:
19 ErrorReport(DWORD _pid, const std::string &_message)
20 : pid(_pid), message(_message)
21 {
22 }
23
24 const DWORD pid;
25 const std::string message;
26 };
27
29 class ReportEx {
30 public:
32 scan_report(nullptr), dump_report(nullptr), error_report(nullptr)
33 {
34 }
35
37 {
38 delete scan_report;
39 delete dump_report;
40 delete error_report;
41 }
42
46 };
47
48};
ErrorReport(DWORD _pid, const std::string &_message)
const std::string message
The report aggregating the results of the performed dumps.
Definition dump_report.h:49
The report aggregating the results of the performed scan.
Definition scan_report.h:19
The final report about the actions performed on the process: scanning and dumping.
ProcessScanReport * scan_report
the report aggregating the results of the performed scans
ProcessDumpReport * dump_report
the report aggregating the results of the performed dumps
ErrorReport * error_report
the report detailing on possible errors that prevented the scan