watchcat

Documentation

Overview

Package watchcat contains the program logic for ransomware detection. This includes decoy file generation and the detection engine itself

Package watchcat contains the program logic for ransomware detection. This includes decoy file generation and the detection engine itself

Index

• func GenerateDecoyFile(config *configs.Config) error
• func Watch(config *configs.Config)
• type DecoyFile

Functions

func GenerateDecoyFile

func GenerateDecoyFile(config *configs.Config) error

GenerateDecoyFile generates a decoy file with parameters from the config

func Watch

func Watch(config *configs.Config)

Watch starts the watching of the decoy file directory

Types

type DecoyFile

type DecoyFile struct {
	File        *os.File
	FilePath    string
	Entropy     float64
	Data        *decoy.DataOriginal
	SizeKB      float64
	CreatedTime time.Time
}

DecoyFile struct holds metadata and a handle to the actual file

var (
	DecoyFileHandle *DecoyFile
)

DecoyFileHandle is an exported pointer to the decoy file