Panoptes 1.0.0
Endpoint Detection and Response
Loading...
Searching...
No Matches
Functions
AMSI Namespace Reference

Functions

 TEST (AMSIScan, ScanFileCopy)
 
 TEST (AMSIScan, ScanFileNoCopy)
 

Function Documentation

◆ TEST() [1/2]

AMSI::TEST ( AMSIScan  ,
ScanFileCopy   
)

Definition at line 5 of file Test_PanoptesAMSI.cpp.

5 {
6 int result = -1;
7 AmsiScanner::AmsiScanFile("C:\\Windows\\System32\\notepad.exe", "C:\\Windows\\Temp\\notepad2.exe", &result);
8 EXPECT_EQ(result, 1);
9 }
static HRESULT AmsiScanFile(std::string PathToFile, std::string CopyPath, int *AmsiResult)
Scan a file using Windows built in AMSI feature set.
Definition amsi-scan.cpp:10
ULONG result
Definition events.cpp:22

References AmsiScanner::AmsiScanFile(), and result.

◆ TEST() [2/2]

AMSI::TEST ( AMSIScan  ,
ScanFileNoCopy   
)

Definition at line 11 of file Test_PanoptesAMSI.cpp.

11 {
12 int result = -1;
13 AmsiScanner::AmsiScanFile("C:\\Windows\\System32\\notepad.exe", "", &result);
14 EXPECT_EQ(result, 1);
15 }

References AmsiScanner::AmsiScanFile(), and result.