PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
pesieve::RuleMatchersSet Struct Reference

#include <stats_analyzer.h>

Public Member Functions

 RuleMatchersSet (DWORD ruleTypes)
 
 ~RuleMatchersSet ()
 
void initRules (DWORD ruleTypes)
 
size_t findMatches (IN const AreaMultiStats &stats, OUT AreaInfo &info)
 
void deleteMatchers ()
 

Public Attributes

std::vector< RuleMatcher * > matchers
 

Detailed Description

Definition at line 124 of file stats_analyzer.h.

Constructor & Destructor Documentation

◆ RuleMatchersSet()

pesieve::RuleMatchersSet::RuleMatchersSet ( DWORD ruleTypes)
inline

Definition at line 126 of file stats_analyzer.h.

Here is the call graph for this function:

◆ ~RuleMatchersSet()

pesieve::RuleMatchersSet::~RuleMatchersSet ( )
inline

Definition at line 131 of file stats_analyzer.h.

Here is the call graph for this function:

Member Function Documentation

◆ deleteMatchers()

void pesieve::RuleMatchersSet::deleteMatchers ( )
inline

Definition at line 140 of file stats_analyzer.h.

◆ findMatches()

size_t pesieve::RuleMatchersSet::findMatches ( IN const AreaMultiStats & stats,
OUT AreaInfo & info )

Definition at line 337 of file stats_analyzer.cpp.

Here is the call graph for this function:

◆ initRules()

void pesieve::RuleMatchersSet::initRules ( DWORD ruleTypes)

Definition at line 321 of file stats_analyzer.cpp.

Member Data Documentation

◆ matchers

std::vector< RuleMatcher* > pesieve::RuleMatchersSet::matchers

Definition at line 150 of file stats_analyzer.h.


The documentation for this struct was generated from the following files: