Panoptes 1.0.0
Endpoint Detection and Response
Loading...
Searching...
No Matches
PanoptesPE.h
Go to the documentation of this file.
1#pragma once
2#include "ExtensibilityCore.h"
3#include <vector>
4
5#define VERSION "1.0.0"
6using namespace std;
7
9public:
11 struct PEScanData {
12 std::vector<std::string> imports;
13 std::vector <std::string> sections;
14 std::vector<double> section_entropy;
16 };
17
18 PortableExecutable(std::string PortableExecutablePath);
19 std::vector<std::string> GetImports();
20 std::vector<std::pair<std::string, double>> GetSections();
21 bool CheckIfSigned();
22};
23
25public:
27 bool Hello(ExtensibilityType extensibilityType, int ContainerPort);
28 bool SendResults_PE(std::string PePath, PortableExecutable::PEScanData data);
29};
ExtensibilityType
The type of extensibility.
Panoptes Service Client that is used to communicate with the Panoptes Service via.
bool Hello(ExtensibilityType extensibilityType, int ContainerPort)
bool SendResults_PE(std::string PePath, bool IsPeSigned, std::string PeSignerSubject, std::vector< std::string > PeImports)
bool CheckIfSigned()
Check if the portable executable is signed.
Definition pe-scan.cpp:65
std::vector< std::pair< std::string, double > > GetSections()
Get the sections from the portable executable.
Definition pe-scan.cpp:45
std::vector< std::string > GetImports()
Get the imports from the portable executable.
Definition pe-scan.cpp:20
The data that is sent to the Panoptes Service.
Definition PanoptesPE.h:11
std::vector< std::string > imports
Definition PanoptesPE.h:12
std::vector< double > section_entropy
Definition PanoptesPE.h:14
std::vector< std::string > sections
Definition PanoptesPE.h:13