Functions — github.com/DFIR-ORC/dfir-orc

CodeHub MCPcopy Create free account

hub / github.com/DFIR-ORC/dfir-orc / functions

Functions5,324 in github.com/DFIR-ORC/dfir-orc

⨍ Functions 5,324◇ Types & classes 1,348

↓ 1 callersMethodDependsOnValueType

src/OrcLib/RegFind.h:156

↓ 1 callersMethodDestroyConfig

src/OrcLib/Configuration/ConfigFile.cpp:759

↓ 1 callersFunctionDictionarySizeForLevel

7-Zip 24.09 raised the default LZMA/LZMA2 dictionary sizes (64-bit: Normal 16->32 MiB, Maximum 32->128 MiB, Ultra 64->256 MiB). As the LZMA encoder ne

src/OrcLib/ZipCreate.cpp:51

↓ 1 callersMethodDisableBacktrace

src/OrcLib/Log/SpdlogLogger.cpp:52

↓ 1 callersMethodDisableRule

src/OrcLib/YaraScanner.cpp:377

↓ 1 callersMethodDisableTeeRedirection

src/OrcLib/Utils/StdStream/StandardOutput.cpp:98

↓ 1 callersMethodDiskFree

src/OrcLib/CommandNotification.h:166

↓ 1 callersMethodDiskFreeRequirement

src/OrcLib/CommandNotification.h:165

↓ 1 callersFunctionDump

src/OrcLib/Utils/Dump.h:20

↓ 1 callersFunctionDumpOutcome

src/OrcCommand/Command/WolfLauncher/WolfLauncher_Run.cpp:361

↓ 1 callersMethodDuplicate

src/OrcLib/MemoryStream.cpp:58

↓ 1 callersMethodEnableRule

src/OrcLib/YaraScanner.cpp:349

↓ 1 callersMethodEnableTeeRedirection

src/OrcLib/Utils/StdStream/StandardOutput.cpp:92

↓ 1 callersMethodEnqueueCommands

src/OrcCommand/Command/WolfLauncher/WolfExecution_Execute.cpp:748

↓ 1 callersMethodEnumCells

src/OrcLib/HeapStorage.h:82

↓ 1 callersMethodEnumMFTRecord

src/OrcLib/MFTOnline.cpp:321

↓ 1 callersMethodEnumProcessModules

src/OrcLib/PSAPIExtension.h:32

↓ 1 callersMethodEnumerateDisks

src/OrcLib/EnumDisk.cpp:287

↓ 1 callersFunctionEnumerateShadows

src/OrcLib/Location.cpp:280

↓ 1 callersMethodEnumerateShadows

src/OrcLib/VolumeShadowCopies.cpp:70

↓ 1 callersFunctionExactFlagToString

src/OrcLib/Flags.cpp:74

↓ 1 callersMethodExecutableSha1

src/OrcCommand/Command/WolfLauncher/WolfTask.h:72

↓ 1 callersMethodExecuteNextCommand

src/OrcLib/CommandAgent.cpp:813

↓ 1 callersMethodExitTime

src/OrcCommand/Command/WolfLauncher/WolfTask.h:64

↓ 1 callersFunctionExpandOrcStringsLocation

src/OrcLib/LocationSet.cpp:71

↓ 1 callersFunctionExtractArchive

tests/OrcLibTest/usn_journal_test.cpp:273

↓ 1 callersFunctionExtractArchive

tests/OrcLibTest/fat_walker_test.cpp:120

↓ 1 callersFunctionExtractArchive

tests/OrcLibTest/mft_walker_test.cpp:126

↓ 1 callersFunctionExtractBinaryValue

src/OrcLib/FileFormat/PeVersionInfo.cpp:158

↓ 1 callersFunctionExtractChildren

src/OrcLib/FileFormat/PeVersionInfo.cpp:208

↓ 1 callersFunctionExtractCompatibleRunner

src/OrcCapsule/Cmd/CmdMain/Runner.cpp:138

↓ 1 callersFunctionExtractDacl

src/OrcCapsule/Cmd/CmdMain/CmdRun.cpp:398

↓ 1 callersFunctionExtractDacl

src/OrcLib/Utils/WinApi.cpp:400

↓ 1 callersFunctionExtractKey

src/OrcLib/FileFormat/PeVersionInfo.cpp:108

↓ 1 callersFunctionExtractResource

tools/rcedit/src/cmd/extract/cmd_extract.cpp:48

↓ 1 callersFunctionExtractStringTable

src/OrcLib/FileFormat/PeVersionInfo.cpp:363

↓ 1 callersFunctionExtractTextValue

src/OrcLib/FileFormat/PeVersionInfo.cpp:141

↓ 1 callersMethodFetchMFTRecord

src/OrcLib/MFTOnline.cpp:422

↓ 1 callersFunctionFileConfigurationToArgument

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:694

↓ 1 callersFunctionFileConfigurationToOptions

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:674

↓ 1 callersMethodFileVersionAvailable

src/OrcLib/DataDetails.h:228

↓ 1 callersMethodFileVersionChecked

src/OrcLib/DataDetails.h:227

↓ 1 callersFunctionFilterLocations

src/OrcLib/LocationSet.cpp:171

↓ 1 callersMethodFindEntryToContinue

src/OrcLib/AttributeList.cpp:386

↓ 1 callersFunctionFindPeHash

src/OrcLib/Authenticode.cpp:207

↓ 1 callersFunctionFindPreferredStringTable

src/OrcLib/FileFormat/PeVersionInfo.cpp:342

↓ 1 callersFunctionFindYaraRules

src/OrcLib/EmbeddedResource_Embed.cpp:780

↓ 1 callersMethodFirstBytesAvailable

src/OrcLib/DataDetails.h:123

↓ 1 callersFunctionFlagsToString

src/OrcLib/Flags.cpp:20

↓ 1 callersMethodFlush

src/OrcParquetLib/ParquetWriter.cpp:430

↓ 1 callersFunctionFormatKey

src/OrcLib/Text/Print.h:36

↓ 1 callersFunctionFormatOffsetTo

src/OrcLib/Text/Fmt/Offset.h:14

↓ 1 callersFunctionFormatSystemTimeUtcA

src/OrcLib/Text/Fmt/TimeUtc.h:22

↓ 1 callersFunctionFormatSystemTimeUtcW

src/OrcLib/Text/Fmt/TimeUtc.h:35

↓ 1 callersFunctionFormatWithEncodingTo

src/OrcLib/Text/Format.h:97

↓ 1 callersMethodFullCallCallbackForRecord

src/OrcLib/MFTWalker.cpp:1091

↓ 1 callersFunctionGenericConfigurationToArguments

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:649

↓ 1 callersFunctionGenericConfigurationToOptions

src/OrcCommand/Log/UtilitiesLoggerConfiguration.cpp:626

↓ 1 callersMethodGet

src/OrcLib/Utils/Locker.h:18

↓ 1 callersMethodGetActiveProcessCount

src/OrcCommand/Command/WolfLauncher/Outcome.h:232

↓ 1 callersFunctionGetActiveProcessorCountApi

src/OrcLib/CpuInfo.cpp:159

↓ 1 callersFunctionGetAddCommandDescriptor

src/OrcCapsule/Cmd/CmdMain/CmdAdd.cpp:440

↓ 1 callersMethodGetAlterableParentKey

src/OrcLib/RegistryWalker.cpp:163

↓ 1 callersFunctionGetArchiveInputType

src/OrcCommand/Command/WolfLauncher/WolfExecution_Execute.cpp:107

↓ 1 callersMethodGetAttributeIndex

src/OrcLib/MFTRecord.cpp:733

↓ 1 callersFunctionGetAttributeRecordHeader

src/OrcLib/Text/Print/Ntfs/MFTRecord.cpp:51

↓ 1 callersMethodGetAutoRuns

src/OrcLib/AutoRuns.cpp:158

↓ 1 callersMethodGetBlockDescriptors

src/OrcLib/Filesystem/Ntfs/ShadowCopy/ShadowCopy.cpp:615

↓ 1 callersMethodGetBuffer

src/OrcLib/MemoryStream.cpp:446

↓ 1 callersMethodGetChunkTableSize

src/OrcLib/Filesystem/Ntfs/Compression/WofChunks.h:45

↓ 1 callersFunctionGetChunksToRead

src/OrcLib/Filesystem/Ntfs/ShadowCopy/ShadowCopy.cpp:180

↓ 1 callersMethodGetCollectionScopedProfiler

src/OrcLib/FileFind.h:143

↓ 1 callersMethodGetCommandByOutputFileName

src/OrcCommand/Command/WolfLauncher/Outcome.h:273

↓ 1 callersMethodGetCommandSets

src/OrcCommand/Command/WolfLauncher/Outcome.h:393

↓ 1 callersMethodGetConcurrency

src/OrcCommand/Command/WolfLauncher/WolfExecution.h:268

↓ 1 callersMethodGetConfigurationFromArgcArgv

src/OrcCommand/Command/DD/DD_Config.cpp:33

↓ 1 callersFunctionGetConfigurationFromConfig

src/OrcCommand/Command/DD/DD.h:88

↓ 1 callersMethodGetConfigurationFromConfig

src/OrcCommand/Command/USNInfo/USNInfo_Config.cpp:33

↓ 1 callersMethodGetCreationTime

src/OrcCommand/Command/WolfLauncher/Outcome.h:150

↓ 1 callersFunctionGetCurrentExecutableHash

src/OrcCommand/Command/WolfLauncher/WolfLauncher_Run.cpp:184

↓ 1 callersMethodGetDataIndex

src/OrcLib/MFTRecord.cpp:787

↓ 1 callersFunctionGetDataSize

src/OrcLib/Text/Print/Ntfs/MFTRecord.cpp:73

↓ 1 callersFunctionGetEffectiveGroupTokenInformation

src/OrcCapsule/Cmd/CmdMain/CmdRun.cpp:185

↓ 1 callersFunctionGetEffectiveGroupTokenInformation

src/OrcLib/Utils/WinApi.cpp:288

↓ 1 callersFunctionGetEffectiveUserSidString

src/OrcCapsule/Cmd/CmdMain/CmdRun.cpp:215

↓ 1 callersMethodGetEnd

src/OrcCommand/Command/WolfLauncher/Outcome.h:315

↓ 1 callersMethodGetEndingTime

src/OrcCommand/Command/WolfLauncher/Outcome.h:423

↓ 1 callersMethodGetEntrySizeInBits

src/OrcLib/FatTable.h:45

↓ 1 callersFunctionGetExcludedVolumeLocations

src/OrcLib/LocationSet.cpp:222

↓ 1 callersFunctionGetExecutableTargetArchitecture

src/OrcCapsule/Cmd/CmdMain/CmdAdd.cpp:142

↓ 1 callersFunctionGetExecuteCommandDescriptor

src/OrcCapsule/Cmd/CmdMain/CmdRun.cpp:886

↓ 1 callersMethodGetExitTime

src/OrcCommand/Command/WolfLauncher/Outcome.h:153

↓ 1 callersMethodGetFileNameIndex

src/OrcLib/MFTRecord.cpp:763

↓ 1 callersFunctionGetFileSize

src/OrcCommand/Command/WolfLauncher/WolfLauncher_Run.cpp:348

↓ 1 callersFunctionGetFriendlyType

tools/rcedit/src/cmd/list/resources.cpp:117

↓ 1 callersFunctionGetFullPathNameApi

src/OrcLib/Utils/WinApi.cpp:532

↓ 1 callersFunctionGetGetCommandDescriptor

src/OrcCapsule/Cmd/CmdMain/CmdGet.cpp:111

↓ 1 callersMethodGetHash

src/OrcLib/CryptoHashStream.cpp:192

↓ 1 callersFunctionGetHostName

src/OrcLib/Log/Syslog/SyslogSink.cpp:18

↓ 1 callersMethodGetImageDosHeader

src/OrcLib/PEInfo.cpp:82

← previous next →1,001–1,100 of 5,324, ranked by callers