detect

package

Go to main page

Versions in this module

v1

v1.3.1

Sep 25, 2024

Changes in this version

type YaraFileScanOptions — darwin/amd64, linux/amd64, windows/amd64

+ func (scan *YaraFileScanOptions) LoadYaraRule(ruleFs fs.FS)

v1.3.0

Jul 9, 2024

Changes in this version

+ var FileErr error — darwin/amd64

+ var FileExcelErr error — darwin/amd64

+ type FileResult struct — darwin/amd64

+ Risk string

+ RiskPath string

+ type HostOptions struct — darwin/amd64

+ var HostOption *HostOptions

+ func NewDetectPluginHost() *HostOptions

+ func (hostOption *HostOptions) Action(c *cli.Context) error

+ func (hostOption *HostOptions) InitCommand() []*cli.Command

+ type Process struct — darwin/amd64

+ Process []*process.Process

+ type PsWithCpu struct — darwin/amd64, linux/amd64, windows/amd64

+ type TopOptions struct — darwin/amd64

+ var TopOption *TopOptions

+ func NewPluginWindowsTop() *TopOptions

+ func (top *TopOptions) Action(c *cli.Context) error

+ func (top *TopOptions) InitCommand() []*cli.Command

+ type YaraFileScanOptions struct — darwin/amd64

+ EnableExcel bool

+ ExcludeDir cli.StringSlice

+ Path string

+ RulePath string

+ Rules *yara.Rules

+ RulesErr error

+ Thread int

+ Timeout time.Duration

+ var YaraFileScanOption *YaraFileScanOptions

+ func NewDetectPluginYaraFileScan() *YaraFileScanOptions

+ func (scan *YaraFileScanOptions) Action(c *cli.Context) error

+ func (scan *YaraFileScanOptions) InitCommand() []*cli.Command

+ func (scan *YaraFileScanOptions) LoadBuiltRule()

+ func (scan *YaraFileScanOptions) LoadOneRule(rulePath string)

v1.2.0

Jun 27, 2024

Changes in this version

+ var Compiler *yara.Compiler — linux/amd64, windows/amd64

+ var Err error — linux/amd64, windows/amd64

+ var FileErr error — linux/amd64, windows/amd64

+ var FileExcelErr error — linux/amd64, windows/amd64

+ func GetBaseInfo() string — linux/amd64

+ func GetCronTab() (resultData []cronTab) — windows/amd64

+ func GetCronTab() []string — linux/amd64

+ func RemoveRepeatedElement(arr []string) (newArr []string) — linux/amd64, windows/amd64

+ func SaveSummaryBaseInfo() — linux/amd64, windows/amd64

+ type AutoRuns struct — linux/amd64, windows/amd64

+ AutoRuns []*autoruns.Autorun

+ func GetAutorun() *AutoRuns

+ type AutorunOptions struct — linux/amd64, windows/amd64

+ var AutorunOption *AutorunOptions

+ func NewDetectPluginAutorun() *AutorunOptions

+ func (autorun *AutorunOptions) Action(_ *cli.Context) error

+ func (autorun *AutorunOptions) InitCommand() []*cli.Command

+ type CheckOptions struct — linux/amd64

+ var CheckOption *CheckOptions

+ func NewDetectPluginCheck() *CheckOptions

+ func (check *CheckOptions) Action(c *cli.Context) error

+ func (check *CheckOptions) InitCommand() []*cli.Command

+ type FileResult struct — linux/amd64, windows/amd64

+ Risk string

+ RiskPath string

+ type HostOptions struct — linux/amd64, windows/amd64

+ var HostOption *HostOptions

+ func NewDetectPluginHost() *HostOptions

+ func (hostOption *HostOptions) Action(c *cli.Context) error

+ func (hostOption *HostOptions) InitCommand() []*cli.Command

+ type NetworkOptions struct — linux/amd64, windows/amd64

+ var NetworkOption *NetworkOptions

+ func NewDetectPluginNetwork() *NetworkOptions

+ func (network *NetworkOptions) Action(_ *cli.Context) error

+ func (network *NetworkOptions) InitCommand() []*cli.Command

+ type Process struct — linux/amd64, windows/amd64

+ Process []*process.Process

+ type Result struct — linux/amd64, windows/amd64

+ Risk string

+ RiskPath string

+ type SummaryOptions struct — linux/amd64, windows/amd64

+ var SummaryOption *SummaryOptions

+ func NewDetectPluginSummary() *SummaryOptions

+ func (summary *SummaryOptions) Action(c *cli.Context) error

+ func (summary *SummaryOptions) InitCommand() []*cli.Command

+ type TaskOptions struct — linux/amd64, windows/amd64

+ var TaskOption *TaskOptions

+ func NewDetectPluginTask() *TaskOptions

+ func (task *TaskOptions) Action(c *cli.Context) error

+ func (task *TaskOptions) InitCommand() []*cli.Command

+ type TopOptions struct — linux/amd64, windows/amd64

+ var TopOption *TopOptions

+ func NewPluginWindowsTop() *TopOptions

+ func (top *TopOptions) Action(c *cli.Context) error

+ func (top *TopOptions) InitCommand() []*cli.Command

+ type UserOptions struct — linux/amd64, windows/amd64

+ var UserOption *UserOptions

+ func NewDetectPluginUser() *UserOptions

+ func (userOption *UserOptions) Action(c *cli.Context) error

+ func (userOption *UserOptions) InitCommand() []*cli.Command

+ type VulOptions struct — windows/amd64

+ Vulnerability int

+ var VulOption *VulOptions

+ func NewDetectPluginVul() *VulOptions

+ func (autorun *VulOptions) Action(_ *cli.Context) error

+ func (autorun *VulOptions) InitCommand() []*cli.Command

+ type YaraFileScanOptions struct — linux/amd64, windows/amd64

+ Path string

+ PathList []string

+ RulePath string

+ Rules *yara.Rules

+ RulesErr error

+ Thread int

+ var YaraFileScanOption *YaraFileScanOptions

+ func NewDetectPluginYaraFileScan() *YaraFileScanOptions

+ func (scan *YaraFileScanOptions) Action(c *cli.Context) error

+ func (scan *YaraFileScanOptions) InitCommand() []*cli.Command

+ func (scan *YaraFileScanOptions) LoadBuiltRule()

+ func (scan *YaraFileScanOptions) LoadOneRule(rulePath string)

+ type YaraProcessScanOptions struct — linux/amd64, windows/amd64

+ Pid int

+ RulePath string

+ Rules *yara.Rules

+ RulesErr error

+ Thread int

+ var YaraProcessScanOption *YaraProcessScanOptions

+ func NewDetectPluginYaraScan() *YaraProcessScanOptions

+ func (scan *YaraProcessScanOptions) Action(c *cli.Context) error

+ func (scan *YaraProcessScanOptions) InitCommand() []*cli.Command

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL