![]() |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
Statistics from a block of data. More...
#include <multi_stats.h>
Public Member Functions | |
| ChunkStats () | |
| ChunkStats (size_t _offset, size_t _size) | |
| ChunkStats (const ChunkStats &p1) | |
| void | fillSettings (MultiStatsSettings *_settings) |
| void | appendVal (BYTE val) |
| void | finishLastStr (bool isClean) |
| virtual void | fieldsToJSON (std::stringstream &outs, size_t level) const |
| void | summarize () |
Public Attributes | |
| double | entropy |
| size_t | size |
| size_t | offset |
| BYTE | prevVal |
| size_t | longestStr |
| std::string | lastStr |
| size_t | stringsCount |
| size_t | cleanStringsCount |
| std::map< BYTE, size_t > | histogram |
| std::map< size_t, std::set< BYTE > > | frequencies |
| MultiStatsSettings * | settings |
| std::map< std::string, size_t > | foundStrings |
Statistics from a block of data.
Definition at line 54 of file multi_stats.h.
|
inline |
Definition at line 56 of file multi_stats.h.
|
inline |
Definition at line 62 of file multi_stats.h.
|
inline |
|
inline |
|
inlinevirtual |
|
inline |
Definition at line 84 of file multi_stats.h.
|
inline |
Definition at line 108 of file multi_stats.h.
|
inline |
| size_t pesieve::ChunkStats::cleanStringsCount |
Definition at line 178 of file multi_stats.h.
| double pesieve::ChunkStats::entropy |
Definition at line 169 of file multi_stats.h.
| std::map<std::string, size_t> pesieve::ChunkStats::foundStrings |
Definition at line 184 of file multi_stats.h.
| std::map<size_t, std::set<BYTE> > pesieve::ChunkStats::frequencies |
Definition at line 180 of file multi_stats.h.
| std::map<BYTE, size_t> pesieve::ChunkStats::histogram |
Definition at line 179 of file multi_stats.h.
| std::string pesieve::ChunkStats::lastStr |
Definition at line 176 of file multi_stats.h.
| size_t pesieve::ChunkStats::longestStr |
Definition at line 174 of file multi_stats.h.
| size_t pesieve::ChunkStats::offset |
Definition at line 171 of file multi_stats.h.
| BYTE pesieve::ChunkStats::prevVal |
Definition at line 173 of file multi_stats.h.
| MultiStatsSettings* pesieve::ChunkStats::settings |
Definition at line 182 of file multi_stats.h.
| size_t pesieve::ChunkStats::size |
Definition at line 170 of file multi_stats.h.
| size_t pesieve::ChunkStats::stringsCount |
Definition at line 177 of file multi_stats.h.