PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pesieve::AreaInfo Struct Reference

#include <stats_analyzer.h>

Public Member Functions

 AreaInfo ()
 
 AreaInfo (const AreaInfo &p1)
 
bool hasMatchAt (const std::string &ruleName)
 
bool hasAnyMatch ()
 
virtual const bool toJSON (std::stringstream &outs, size_t level)
 
virtual const void fieldsToJSON (std::stringstream &outs, size_t level)
 

Public Attributes

std::vector< std::string > matchedRules
 

Detailed Description

Definition at line 69 of file stats_analyzer.h.

Constructor & Destructor Documentation

◆ AreaInfo() [1/2]

pesieve::AreaInfo::AreaInfo ( )
inline

Definition at line 71 of file stats_analyzer.h.

◆ AreaInfo() [2/2]

pesieve::AreaInfo::AreaInfo ( const AreaInfo & p1)
inline

Definition at line 76 of file stats_analyzer.h.

Member Function Documentation

◆ fieldsToJSON()

virtual const void pesieve::AreaInfo::fieldsToJSON ( std::stringstream & outs,
size_t level )
inlinevirtual

Definition at line 106 of file stats_analyzer.h.

◆ hasAnyMatch()

bool pesieve::AreaInfo::hasAnyMatch ( )
inline

Definition at line 92 of file stats_analyzer.h.

◆ hasMatchAt()

bool pesieve::AreaInfo::hasMatchAt ( const std::string & ruleName)
inline

Definition at line 81 of file stats_analyzer.h.

◆ toJSON()

virtual const bool pesieve::AreaInfo::toJSON ( std::stringstream & outs,
size_t level )
inlinevirtual

Definition at line 97 of file stats_analyzer.h.

Here is the call graph for this function:

Member Data Documentation

◆ matchedRules

std::vector<std::string> pesieve::AreaInfo::matchedRules

Definition at line 120 of file stats_analyzer.h.


The documentation for this struct was generated from the following file: