static

Documentation

Index

• func GetHighestSSDeepDistance(exe *analysis.Executable) (int, error)
• func IsHashKnownToBeMalicious(exe *analysis.Executable) (bool, error)
• func MaliciousDomainFound(exeContent []byte) (bool, error)
• func MaliciousIPFound(exeContent []byte) (bool, error)
• type YaraGrep
  • func NewYaraMatcher() (*YaraGrep, error)
  • func (yaraMatcher *YaraGrep) GetAllMatchingRules(exe *analysis.Executable) (yara.MatchRules, error)

Functions

func GetHighestSSDeepDistance

func GetHighestSSDeepDistance(exe *analysis.Executable) (int, error)

func IsHashKnownToBeMalicious

func IsHashKnownToBeMalicious(exe *analysis.Executable) (bool, error)

func MaliciousDomainFound

func MaliciousDomainFound(exeContent []byte) (bool, error)

func MaliciousIPFound

func MaliciousIPFound(exeContent []byte) (bool, error)

Types

type YaraGrep

type YaraGrep struct {
	*yara.Rules
}

func NewYaraMatcher

func NewYaraMatcher() (*YaraGrep, error)

func (*YaraGrep) GetAllMatchingRules

func (yaraMatcher *YaraGrep) GetAllMatchingRules(exe *analysis.Executable) (yara.MatchRules, error)