PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
report_formatter.h
Go to the documentation of this file.
1#pragma once
2
3#include <windows.h>
4#include <iostream>
5
6#include "pe_sieve_types.h"
8
9namespace pesieve {
10
11 std::string scan_report_to_string(const ProcessScanReport &report);
12 std::string scan_report_to_json(const ProcessScanReport& process_report,t_results_filter filter, const pesieve::t_json_level& jdetails, size_t start_level=0);
13 std::string dump_report_to_json(const ProcessDumpReport& process_report, const pesieve::t_json_level& jdetails, size_t start_level=0);
14
15 std::string err_report_to_json(const ErrorReport& err_report, t_results_filter filter, size_t start_level = 0);
16 std::string report_to_json(const ReportEx& report, const t_report_type rtype, t_results_filter filter, const pesieve::t_json_level& jdetails, size_t start_level=0);
17
18}; // namespace pesieve
19
std::string scan_report_to_string(const ProcessScanReport &report)
std::string dump_report_to_json(const ProcessDumpReport &process_report, const pesieve::t_json_level &jdetails, size_t start_level=0)
std::string err_report_to_json(const ErrorReport &err_report, t_results_filter filter, size_t start_level=0)
std::string report_to_json(const ReportEx &report, const t_report_type rtype, t_results_filter filter, const pesieve::t_json_level &jdetails, size_t start_level=0)
std::string scan_report_to_json(const ProcessScanReport &process_report, t_results_filter filter, const pesieve::t_json_level &jdetails, size_t start_level=0)
The final report produced by PE-sieve.
The types used by PE-sieve API.
t_results_filter
t_report_type
Final summary about the scanned process.