PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
Statistics from a block of data. More...
#include <multi_stats.h>
Public Member Functions | |
ChunkStats () | |
ChunkStats (size_t _offset, size_t _size) | |
ChunkStats (const ChunkStats &p1) | |
void | fillSettings (MultiStatsSettings *_settings) |
void | appendVal (BYTE val) |
void | finishLastStr (bool isClean) |
virtual const void | fieldsToJSON (std::stringstream &outs, size_t level) |
void | summarize () |
Public Attributes | |
double | entropy |
size_t | size |
size_t | offset |
BYTE | prevVal |
size_t | longestStr |
std::string | lastStr |
size_t | stringsCount |
size_t | cleanStringsCount |
std::map< BYTE, size_t > | histogram |
std::map< size_t, std::set< BYTE > > | frequencies |
MultiStatsSettings * | settings |
std::map< std::string, size_t > | foundStrings |
Statistics from a block of data.
Definition at line 54 of file multi_stats.h.
|
inline |
Definition at line 56 of file multi_stats.h.
Definition at line 62 of file multi_stats.h.
|
inline |
|
inline |
|
inline |
size_t pesieve::ChunkStats::cleanStringsCount |
Definition at line 181 of file multi_stats.h.
double pesieve::ChunkStats::entropy |
Definition at line 172 of file multi_stats.h.
std::map<std::string, size_t> pesieve::ChunkStats::foundStrings |
Definition at line 187 of file multi_stats.h.
Definition at line 183 of file multi_stats.h.
Definition at line 182 of file multi_stats.h.
std::string pesieve::ChunkStats::lastStr |
Definition at line 179 of file multi_stats.h.
size_t pesieve::ChunkStats::longestStr |
Definition at line 177 of file multi_stats.h.
size_t pesieve::ChunkStats::offset |
Definition at line 174 of file multi_stats.h.
BYTE pesieve::ChunkStats::prevVal |
Definition at line 176 of file multi_stats.h.
MultiStatsSettings* pesieve::ChunkStats::settings |
Definition at line 185 of file multi_stats.h.
size_t pesieve::ChunkStats::size |
Definition at line 173 of file multi_stats.h.
size_t pesieve::ChunkStats::stringsCount |
Definition at line 180 of file multi_stats.h.