![]() |
PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
|
#include <stats_analyzer.h>
Public Member Functions | |
| RuleMatchersSet (DWORD ruleTypes) | |
| ~RuleMatchersSet () | |
| void | initRules (DWORD ruleTypes) |
| size_t | findMatches (IN const AreaMultiStats &stats, OUT AreaInfo &info) |
| void | deleteMatchers () |
Public Attributes | |
| std::vector< RuleMatcher * > | matchers |
Definition at line 124 of file stats_analyzer.h.
|
inline |
|
inline |
|
inline |
Definition at line 140 of file stats_analyzer.h.
| size_t pesieve::RuleMatchersSet::findMatches | ( | IN const AreaMultiStats & | stats, |
| OUT AreaInfo & | info ) |
| void pesieve::RuleMatchersSet::initRules | ( | DWORD | ruleTypes | ) |
Definition at line 321 of file stats_analyzer.cpp.
| std::vector< RuleMatcher* > pesieve::RuleMatchersSet::matchers |
Definition at line 150 of file stats_analyzer.h.