Functions — github.com/DFIR-ORC/dfir-orc

CodeHub MCPcopy Create free account

hub / github.com/DFIR-ORC/dfir-orc / functions

Functions5,324 in github.com/DFIR-ORC/dfir-orc

⨍ Functions 5,324◇ Types & classes 1,348

↓ 6 callersFunctionIsValidOffset

src/OrcLib/Utils/BufferView.h:43

↓ 6 callersFunctionJoin

src/OrcLib/Utils/String.h:21

↓ 6 callersMethodLowestVCN

src/OrcLib/AttributeList.h:89

↓ 6 callersFunctionPrint

src/OrcCapsule/Utilities/Log.h:39

↓ 6 callersFunctionPrintLocationParameters

src/OrcCommand/Usage.h:191

↓ 6 callersFunctionSumStreamsReadLength

src/OrcLib/FileFind.cpp:84

↓ 6 callersMethodToHex

src/OrcLib/BinaryBuffer.cpp:186

↓ 6 callersFunctionToStringView

src/OrcCapsule/Cmd/CmdResource.cpp:32

↓ 6 callersFunctionToUtf16

src/OrcLib/Text/Format.h:33

↓ 6 callersMethodVolumeSnapshotAttributes

src/OrcLib/Filesystem/Ntfs/ShadowCopy/ShadowCopyInformation.cpp:47

↓ 6 callersMethodWriteToFile

src/OrcLib/CsvFileWriter.cpp:254

↓ 6 callersMethodclose

src/OrcApacheOrcLib/ApacheOrcStream.cpp:43

↓ 6 callersMethodextractImmediate

return value is number of bytes processed

src/OrcLib/StringsStream.cpp:301

↓ 6 callersMethodyr_compiler_add_string

src/OrcLib/YaraStaticExtension.cpp:25

↓ 6 callersMethodyr_initialize

src/OrcLib/YaraStaticExtension.cpp:15

↓ 5 callersMethodAddChunk

src/OrcLib/FatTable.h:55

↓ 5 callersMethodAddColumn

src/OrcLib/CsvCruncher.cpp:290

↓ 5 callersMethodAddLocationsFromArgcArgv

src/OrcLib/LocationSet.cpp:1140

↓ 5 callersMethodAddValueNameMatch

src/OrcLib/RegFind.h:309

↓ 5 callersFunctionArchitectureCount

src/OrcCapsule/Cmd/Architecture.h:29

↓ 5 callersFunctionBOOST_SCOPE_EXIT

src/OrcCommand/Command/WolfLauncher/WolfLauncher_Run.cpp:1008

↓ 5 callersFunctionBitmapToChunks

src/OrcLib/Filesystem/Ntfs/ShadowCopy/ShadowCopy.cpp:136

↓ 5 callersMethodCheckConfig

src/OrcLib/Configuration/ConfigFile.cpp:324

↓ 5 callersFunctionCheckExpectedDiskExtent

tests/OrcLibTest/disk_extent_test.cpp:81

↓ 5 callersMethodCheckPEInformation

src/OrcLib/PEInfo.cpp:128

↓ 5 callersFunctionCompareTestResult

tests/OrcLibTest/structured_output_test.cpp:293

↓ 5 callersMethodComplete

src/OrcLib/ZipCreate.cpp:461

↓ 5 callersFunctionComputeSha256

src/OrcCapsule/Utilities/Crypto.cpp:150

↓ 5 callersMethodConnectToSCM

src/OrcLib/DriverMgmt.cpp:112

↓ 5 callersMethodDependsOnlyOnNameOrPath

src/OrcLib/FileFind.h:325

↓ 5 callersMethodDiskFreeSpaceRequirement

src/OrcLib/CommandMessage.h:205

↓ 5 callersMethodEndOfCursor

src/OrcLib/CircularStorage.h:239

↓ 5 callersMethodExtract

src/OrcLib/ZipExtract.cpp:44

↓ 5 callersFunctionFormatTo

src/OrcLib/Text/Format.h:189

↓ 5 callersMethodGetConstBuffer

src/OrcLib/MemoryStream.cpp:456

↓ 5 callersMethodGetDatas

src/OrcLib/RegistryWalker.cpp:68

↓ 5 callersMethodGetEvent

src/OrcLib/CommandNotification.h:174

↓ 5 callersMethodGetExitCode

src/OrcCommand/Command/WolfLauncher/Outcome.h:162

↓ 5 callersFunctionGetFileName

src/OrcLib/FileFind.cpp:48

↓ 5 callersFunctionGetJobName

src/OrcLib/CommandAgent.cpp:42

↓ 5 callersMethodGetLogicalSectorSize

src/OrcLib/DiskExtent.h:64

↓ 5 callersMethodGetNewCell

src/OrcLib/HeapStorage.h:55

↓ 5 callersMethodGetNonResidentInformation

src/OrcLib/MftRecordAttribute.cpp:238

↓ 5 callersMethodGetParsedLocations

src/OrcLib/LocationSet.cpp:2466

↓ 5 callersMethodGetProperty

src/OrcLib/WMIUtil.h:45

↓ 5 callersMethodGetRawStream

src/OrcLib/MftRecordAttribute.cpp:603

↓ 5 callersFunctionGetRunnerResourceName

src/OrcCapsule/Cmd/CmdMain/Runner.cpp:63

↓ 5 callersMethodGetUSNRoot

src/OrcLib/MFTOffline.cpp:241

↓ 5 callersFunctionHash

src/OrcLib/CryptoHashStream.cpp:37

↓ 5 callersMethodIsDeleted

src/OrcLib/FatFileEntry.h:38

↓ 5 callersMethodIsOfflimits

src/OrcCommand/Command/GetThis/GetThis.h:228

↓ 5 callersMethodMatchReadLength

src/OrcLib/FileFind.h:152

↓ 5 callersMethodMatchTime

src/OrcLib/FileFind.h:151

↓ 5 callersMethodMiss

src/OrcLib/FileFind.h:150

↓ 5 callersFunctionNtfsFirstIndexEntry

src/OrcLib/NtfsDataStructures.h:409

↓ 5 callersMethodOpenHandle

src/OrcLib/FileStream.cpp:193

↓ 5 callersMethodParse

src/OrcLib/MftRecordAttribute.cpp:795

↓ 5 callersFunctionParseArchitecture

src/OrcCapsule/Cmd/Architecture.cpp:13

↓ 5 callersMethodParseRecord

src/OrcLib/MFTRecord.cpp:58

↓ 5 callersFunctionParseResourceDirectory

src/OrcLib/FileFormat/PeParser.cpp:252

↓ 5 callersFunctionParseResourceId

Parse user input resource type/name string to LPCWSTR for Windows API Handles: "RT_VERSION", "#16", "16", "MY_CUSTOM_TYPE"

src/OrcCapsule/Cmd/CmdResource.cpp:156

↓ 5 callersFunctionPrint

src/OrcLib/Text/Print/Ntfs/MFTRecord.cpp:201

↓ 5 callersMethodPrint

src/OrcCommand/Console.h:41

↓ 5 callersMethodQueryInterface

src/OrcLib/BITSAgent.cpp:804

↓ 5 callersFunctionReadChunk

src/OrcLib/Stream/StreamUtils.h:39

↓ 5 callersFunctionReadItemAt

src/OrcLib/Stream/StreamUtils.h:181

↓ 5 callersFunctionRemoveAll

src/OrcCapsule/Cmd/CmdMain/CmdRun.cpp:345

↓ 5 callersMethodScan

src/OrcLib/YaraScanner.cpp:449

↓ 5 callersMethodSetDiskFreeSpaceRequirement

src/OrcCommand/Command/WolfLauncher/WolfExecution.h:170

↓ 5 callersMethodSetFilePointer

src/OrcLib/JournalingStream.cpp:193

↓ 5 callersMethodSetFileSize

src/OrcLib/UploadNotification.cpp:49

↓ 5 callersMethodSetPopulateSystemObjects

src/OrcLib/LocationSet.h:160

↓ 5 callersMethodSetRawStream

src/OrcLib/DataDetails.h:65

↓ 5 callersMethodSetSha1

src/OrcCommand/Command/WolfLauncher/Outcome.h:64

↓ 5 callersMethodSetSize

src/OrcCommand/Command/WolfLauncher/Outcome.h:60

↓ 5 callersMethodSetSize

src/OrcLib/SubStream.cpp:161

↓ 5 callersMethodShortVolumeName

src/OrcLib/ImageReader.h:29

↓ 5 callersFunctionToEncoding

src/OrcLib/OutputSpec.cpp:689

↓ 5 callersFunctionToFileDisposition

src/OrcLib/OutputSpec.cpp:672

↓ 5 callersFunctionToString

src/OrcLib/Filesystem/Ntfs/ShadowCopy/NodeType.cpp:29

↓ 5 callersMethodUncompressedSize

src/OrcLib/Filesystem/Ntfs/Compression/WofStreamConcept.h:174

↓ 5 callersFunctionUniquePushBack

Use this function and a vector instead of std::set to keep original ordering

src/OrcLib/LocationSet.cpp:160

↓ 5 callersFunctionValueOr

src/OrcLib/Utils/Result.h:385

↓ 5 callersMethodWriteToStream

src/OrcLib/CsvFileWriter.cpp:281

↓ 5 callersMethodsize

src/OrcLib/TableOutput.h:244

↓ 5 callersMethodyr_compiler_create

src/OrcLib/YaraStaticExtension.cpp:20

↓ 5 callersMethodyr_compiler_destroy

src/OrcLib/YaraStaticExtension.cpp:52

↓ 4 callersMethodAddExecutableToRun

src/OrcLib/CommandExecute.cpp:210

↓ 4 callersMethodAddFileNameMatch

src/OrcLib/FileFind.h:423

↓ 4 callersMethodAddKeyNameMatch

src/OrcLib/RegFind.h:303

↓ 4 callersMethodAddTerm

src/OrcLib/FileFind.cpp:1706

↓ 4 callersMethodAllocatedCells

src/OrcLib/HeapStorage.h:53

↓ 4 callersFunctionByteQuantityFromString

src/OrcLib/Text/ByteQuantity.cpp:45

↓ 4 callersFunctionCheckExpectedPartition

tests/OrcLibTest/partition_test.cpp:71

↓ 4 callersMethodCheckSecurityDirectory

src/OrcLib/PEInfo.cpp:270

↓ 4 callersMethodCheckSpareRoomAndLock

src/OrcLib/CircularStorage.h:65

↓ 4 callersMethodCheckVersionInformation

src/OrcLib/PEInfo.cpp:223

↓ 4 callersMethodCleanCachedData

src/OrcLib/MFTRecord.cpp:973

↓ 4 callersMethodCompress

src/OrcLib/Archive/7z/Archive7z.cpp:240

↓ 4 callersMethodCreatePipe

src/OrcLib/PipeStream.cpp:13

← previous next →301–400 of 5,324, ranked by callers