util

Documentation

Index

• Constants
• func IsErrorThresholdReached(errorCount, allCount uint) bool
• func ParseYaraScanOutput(line string) (*common.DetectedMalware, error)
• type InvalidLineError
  • func (e *InvalidLineError) Error() string
• type ScanResultLine

Constants

const (
	// A yara detected malware line should be in the following format: <yara rule name> [<coma,separated,meta data>] <path>.
	ScanError          = "error scanning"
	SampleScanErrorNum = 10

	ErrThreshold = 0.8 // Error threshold
)

Functions

func IsErrorThresholdReached

func IsErrorThresholdReached(errorCount, allCount uint) bool

func ParseYaraScanOutput

func ParseYaraScanOutput(line string) (*common.DetectedMalware, error)

Types

type InvalidLineError

type InvalidLineError struct {
	Line string
}

func (*InvalidLineError) Error

func (e *InvalidLineError) Error() string

type ScanResultLine

type ScanResultLine struct {
	RuleName string
	Metadata map[string]string
	Path     string
}