PanoptesYara.h

Go to the documentation of this file.

#pragma once
#include "ExtensibilityCore.h"
#include <vector>
extern "C" {
#include "yara_x.h"
}
 
#define VERSION "1.0.0"
using namespace std;
 
class PanoptesServiceClient {
public:
    PanoptesServiceClient();
    bool Hello(ExtensibilityType extensibilityType, int ContainerPort);
    bool SendResults_Yara(std::string PePath, std::string FileHash, std::vector<std::string> DetectedRules);
};
 
class YaraScanner {
private:
    YRX_RULES* g_yaraRules = nullptr;
public:
    struct ScanData
    {
        int detections;
        std::vector<std::string> detectedRules;
    };
 
    YaraScanner(const char* Rules);
    ~YaraScanner();
    std::vector<std::string> YaraScanFile(std::string PathToFile);
};