PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
report_formatter.h
Go to the documentation of this file.
1#pragma once
2
3#include <windows.h>
4#include <iostream>
5
6#include "pe_sieve_types.h"
8
9namespace pesieve {
10
11 std::string scan_report_to_string(const ProcessScanReport &report);
12 std::string scan_report_to_json(const ProcessScanReport& process_report, ProcessScanReport::t_report_filter filter, const pesieve::t_json_level& jdetails, size_t start_level=0);
13 std::string dump_report_to_json(const ProcessDumpReport& process_report, const pesieve::t_json_level& jdetails, size_t start_level=0);
14
15 std::string report_to_json(const pesieve::ReportEx& report, const t_report_type rtype, ProcessScanReport::t_report_filter filter, const pesieve::t_json_level& jdetails, size_t start_level=0);
16
17}; // namespace pesieve
18
The final report about the actions performed on the process: scanning and dumping.
std::string scan_report_to_string(const ProcessScanReport &report)
std::string dump_report_to_json(const ProcessDumpReport &process_report, const pesieve::t_json_level &jdetails, size_t start_level=0)
std::string scan_report_to_json(const ProcessScanReport &process_report, ProcessScanReport::t_report_filter filter, const pesieve::t_json_level &jdetails, size_t start_level=0)
std::string report_to_json(const pesieve::ReportEx &report, const t_report_type rtype, ProcessScanReport::t_report_filter filter, const pesieve::t_json_level &jdetails, size_t start_level=0)
The final report produced by PE-sieve.
The types used by PE-sieve API.
t_report_type
Final summary about the scanned process.